Yesterday i found a new CMS hole (
SphpBlog) n already releases some
advisories n made some
sphpbl0g.pl script that can be use to get password and config file. The problem is , u have to crack the password that using PHP's crypt() function but the good thing , u can make your own script with wordlist to crack it.
No comments:
Post a Comment