Privilege Escalation And Misconfigurations Part2

Privilege Escalation And Misconfigurations

Links to javascript files in the HTML <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-init.js "></SCRIPT> <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-writevb.js "></SCRIPT> <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-main.js "></SCRIPT> <SCRIPT LANGUAGE="JavaScript" type="text/javascript" src=" includes/scripts/fpi-swap.js "></SCRIPT>

Grab the source of the javascript files

Analyze the source for anything interesting

Paste this into the browser and click send ,[object Object]

A 302 to an inside page ,[object Object],[object Object],[object Object],[object Object]

A 302 back to the login ,[object Object],[object Object],[object Object],[object Object]

Let’s see if our login exists

Let’s try accessing the admin functions ,[object Object]

Use an integer instead of a string ,[object Object]

Welcome Admin ,[object Object]

Ability to view all users ,[object Object]

I feel like being an administrator today ,[object Object]

Start Guessing ,[object Object],[object Object],[object Object],[object Object]

The existing admin links ,[object Object],[object Object],[object Object],[object Object]

Privilege Escalation And Misconfigurations Part2

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a Privilege Escalation And Misconfigurations Part2

Semelhante a Privilege Escalation And Misconfigurations Part2 (20)

Mais de Caleb Sima

Mais de Caleb Sima (9)

Último

Último (20)

Privilege Escalation And Misconfigurations Part2