Privilege Escalation And Misconfigurations Part2

Privilege Escalation And Misconfigurations

Links to javascript files in the HTML <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-init.js "></SCRIPT> <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-writevb.js "></SCRIPT> <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-main.js "></SCRIPT> <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-swap.js "></SCRIPT>

Grab the source of the javascript files

Analyze the source for anything interesting

Paste this into the browser and click send ,[object Object]

A 302 to an inside page ,[object Object],[object Object],[object Object],[object Object]

A 302 back to the login ,[object Object],[object Object],[object Object],[object Object]

Let’s see if our login exists

Let’s try accessing the admin functions ,[object Object]

Use an integer instead of a string ,[object Object]

Welcome Admin ,[object Object]

Ability to view all users ,[object Object]

I feel like being an administrator today ,[object Object]

Start Guessing ,[object Object],[object Object],[object Object],[object Object]

The existing admin links ,[object Object],[object Object],[object Object],[object Object]

Privilege Escalation And Misconfigurations Part2

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à Privilege Escalation And Misconfigurations Part2

Similaire à Privilege Escalation And Misconfigurations Part2 (20)

Plus de Caleb Sima

Plus de Caleb Sima (9)

Dernier

Dernier (20)

Privilege Escalation And Misconfigurations Part2