SHOW:
|
|
- or go back to the newest paste.
| 1 | _ _ ____ _ _ _ _ _ _ | |
| 2 | _| || |_ / __ \ | | | | | | | | | | | | | |
| 3 | |_ __ _| | | |_ __ | |__| |_ _ _ __ | |_| |__| |_ _ _ __ | |_ ___ _ __ | |
| 4 | _| || |_| | | | '_ \| __ | | | | '_ \| __| __ | | | | '_ \| __/ _ \ '__| | |
| 5 | |_ __ _| |__| | |_) | | | | |_| | | | | |_| | | | |_| | | | | || __/ | | |
| 6 | |_||_| \____/| .__/|_| |_|\__,_|_| |_|\__|_| |_|\__,_|_| |_|\__\___|_| | |
| 7 | | | | |
| 8 | |_| | |
| 9 | ||
| 10 | _ _ ____ _ _ ____ _ _ | |
| 11 | _| || |_ / __ \ /\ | | (_) _ \ | | | | |
| 12 | |_ __ _| | | |_ __ / \ _ __ | |_ _| |_) |_ _| | |_ _ | |
| 13 | _| || |_| | | | '_ \ / /\ \ | '_ \| __| | _ <| | | | | | | | | | |
| 14 | |_ __ _| |__| | |_) / ____ \| | | | |_| | |_) | |_| | | | |_| | | |
| 15 | |_||_| \____/| .__/_/ \_\_| |_|\__|_|____/ \__,_|_|_|\__, | | |
| 16 | | | __/ | | |
| 17 | |_| |___/ | |
| 18 | ||
| 19 | ||
| 20 | Hunter Moore's Website Vulnerabilities/Unreleased content!! | |
| 21 | ||
| 22 | ||
| 23 | ||
| 24 | ||
| 25 | http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/comments.php | |
| 26 | http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/disqus.php (XSS) | |
| 27 | http://www.huntermoore.tv/wp-content/plugins/google-analytics-for-wordpress/ | |
| 28 | ||
| 29 | [+] We found 2 plugins: | |
| 30 | - | (Backtrack 5 View Only) |
| 30 | + | |
| 31 | Name: disqus-comment-system | |
| 32 | - | http://www.ethicalhack3r.co.uk/security/wordpress-plugin-disqus-comment-system-xss/ |
| 32 | + | Location: http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/ |
| 33 | Directory listing enabled? Yes. | |
| 34 | ||
| 35 | Name: disqus-comment-system | |
| 36 | Location: http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/ | |
| 37 | Directory listing enabled? Yes. | |
| 38 | ||
| 39 | [+] There were 1 vulnerabilities identified from the plugin names: | |
| 40 | ||
| 41 | [!] WordPress Plugin Disqus Comment System <= 2.68 Reflected Cross-Site Scripting (XSS) | |
| 42 | * Reference: http://www.ethicalhack3r.co.uk/security/wordpress-plugin-disqus-comment-system-xss/ | |
| 43 | ||
| 44 | ||
| 45 | Admin Panel | |
| 46 | ||
| 47 | http://www.huntermoore.tv/wp-login.php (Username: serverguy) | |
| 48 | ||
| 49 | (UNRELEASED CONTENT, WARNING! nude images) | |
| 50 | ||
| 51 | http://www.huntermoore.tv/wp-content/uploads/2012/ | |
| 52 | http://www.huntermoore.tv/2012/08/ | |
| 53 | http://www.huntermoore.tv/2012/07/ | |
| 54 | ||
| 55 | Find more in the /uploads/2012/ area | |
| 56 | ||
| 57 | ||
| 58 | ||
| 59 | More information coming soon, please do not give this link away yet as more information is being gathered and we want to keep this private. | |
| 60 | ||
| 61 | ||
| 62 | We are anonymous, we are legion, we do not forgive, we do not forget, Hunter moore, EXPECT US! |
