HMWD Updated

  _  _    ____        _    _             _   _    _             _
  _| || |_ / __ \      | |  | |           | | | |  | |           | |
 |_  __  _| |  | |_ __ | |__| |_   _ _ __ | |_| |__| |_   _ _ __ | |_ ___ _ __
  _| || |_| |  | | '_ \|  __  | | | | '_ \| __|  __  | | | | '_ \| __/ _ \ '__|
 |_  __  _| |__| | |_) | |  | | |_| | | | | |_| |  | | |_| | | | | ||  __/ |
   |_||_|  \____/| .__/|_|  |_|\__,_|_| |_|\__|_|  |_|\__,_|_| |_|\__\___|_|
                 | |
                 |_|

    _  _    ____                      _   _ ____        _ _
  _| || |_ / __ \         /\         | | (_)  _ \      | | |
 |_  __  _| |  | |_ __   /  \   _ __ | |_ _| |_) |_   _| | |_   _
  _| || |_| |  | | '_ \ / /\ \ | '_ \| __| |  _ <| | | | | | | | |
 |_  __  _| |__| | |_) / ____ \| | | | |_| | |_) | |_| | | | |_| |
   |_||_|  \____/| .__/_/    \_\_| |_|\__|_|____/ \__,_|_|_|\__, |
                 | |                                         __/ |
                 |_|                                        |___/


Hunter Moore's Website Vulnerabilities/Unreleased content!!




http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/comments.php
http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/disqus.php (XSS)
http://www.huntermoore.tv/wp-content/plugins/google-analytics-for-wordpress/

[+] We found 2 plugins:

Name: disqus-comment-system
Location: http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/
Directory listing enabled? Yes.

Name: disqus-comment-system
Location: http://www.huntermoore.tv/wp-content/plugins/disqus-comment-system/
Directory listing enabled? Yes.

[+] There were 1 vulnerabilities identified from the plugin names:

[!] WordPress Plugin Disqus Comment System <= 2.68 Reflected Cross-Site Scripting (XSS)
* Reference: http://www.ethicalhack3r.co.uk/security/wordpress-plugin-disqus-comment-system-xss/


Admin Panel

http://www.huntermoore.tv/wp-login.php (Username: serverguy)

(UNRELEASED CONTENT, WARNING! nude images)

http://www.huntermoore.tv/wp-content/uploads/2012/
http://www.huntermoore.tv/2012/08/
http://www.huntermoore.tv/2012/07/

Find more in the /uploads/2012/ area



More information coming soon, please do not give this link away yet as more information is being gathered and we want to keep this private.


We are anonymous, we are legion, we do not forgive, we do not forget, Hunter moore, EXPECT US!