Author Topic: [PHP] d4rkcat's super secure-webapp  (Read 1301 times)

0 Members and 1 Guest are viewing this topic.

Offline d4rkcat

  • Knight
  • **
  • Posts: 287
  • Cookies: 115
  • He who controls the past controls the future. He who controls the present controls the past.
    • View Profile
    • Scripts
[PHP] d4rkcat's super secure-webapp
« on: April 17, 2014, 06:46:28 am »
Just a quick website I made up to demonstrate 4 common vulnerabilities found in websites today.
There are at least 2 different techniques you can use to get a shell.

The hacks are very basic but will give you a solid introduction to each of the 4 vulnerabilities present.
I won't give you any clues apart from it is not SQLi, also

if you read the source before doing it then that is cheating!



To install the script:
Code: [Select]
git clone https://github.com/d4rkcat/SSWA
rm -rf /var/www/*
cp SSWA/index.php /var/www
service apache2 start

You should be able to get at it by visiting
Code: [Select]
localhost
In your browser! And everything is hackable from there, no tools at all other than a browser needed!

Happy Hacking!
« Last Edit: April 18, 2014, 05:14:35 pm by d4rkcat »
Jabber (OTR required): thed4rkcat@einfachjabber.de    Email (PGP required): thed4rkcat@yandex.com    PGP Key: here and here     Blog

<sofldan> not asking for anyone to hold my hand uber space shuttle door gunner guy.


Offline proxx

  • Avatarception
  • Global Moderator
  • Titan
  • *
  • Posts: 2803
  • Cookies: 256
  • ФФФ
    • View Profile
Re: [PHP] d4rkcat's super secure-webapp
« Reply #1 on: April 17, 2014, 07:36:23 am »
Nice :)
Will try this tonight, thanks for sharing.
+cookah
« Last Edit: April 17, 2014, 07:36:35 am by proxx »
Wtf where you thinking with that signature? - Phage.
This was another little experiment *evillaughter - Proxx.
Evilception... - Phage

Offline Stackprotector

  • Administrator
  • Titan
  • *
  • Posts: 2515
  • Cookies: 205
    • View Profile
Re: [PHP] d4rkcat's super secure-webapp
« Reply #2 on: April 17, 2014, 01:05:14 pm »
Maybe don't put the source on here? I can spot most vulns when scrolling over it.
~Factionwars

Offline DeXtreme

  • Peasant
  • *
  • Posts: 95
  • Cookies: 8
  • I was there and you never knew.
    • View Profile
    • My Designs
Re: [PHP] d4rkcat's super secure-webapp
« Reply #3 on: April 17, 2014, 07:36:58 pm »
Awesome..Gonna try this asap ;) +1