EvilZone

Community => General discussion => Topic started by: parad0x on September 11, 2014, 05:21:02 PM

Title: Hackers can get your ass if you are using DVWA
Post by: parad0x on September 11, 2014, 05:21:02 PM

Two of my friends have found this, DVWA Exploit

Releasing The Unintended: #DVWA #Exploits.
DVWA was meant to be hacked, but no, not this way. this way, I am able to pwn your ass just because you have DVWA in your HDD.

Here is his article : http://paulosyibelo.blogspot.com/2014/09/dvwa-unintended-security-issues.html
 (http://paulosyibelo.blogspot.com/2014/09/dvwa-unintended-security-issues.html)
POC : http://pastebin.com/A7WV5MbK (http://pastebin.com/A7WV5MbK)

What do you say guys???

Title: Re: Hackers can get your ass if you are using DVWA
Post by: Z3R0 on September 11, 2014, 05:51:10 PM

Wow...I need to get on those guys' levels. Those guys ability to think outside the box is astounding. Don't get me wrong, there are alot of people on this forum that think I'm uber 1337 (mainly based off of my reputation as the diabolical doctor), but I will admit with the utmost humility...I  don't know everything. These guys really made me think twice about how I look for vulnerabilities. +1 parad0x, great share.

Everyone else, I recommend looking through the POC's these guys wrote and truly try to understand what they are doing. Their methods are not *that* particularly complex, but...it's just the manner of how they went about finding these vulnerabilities. I only wish I could emulate that level of intelligence.