How to find this type of upload form?
- Thread starter AzizPro
- Start date
- Jan 17, 2015
- 5,263
- 4,955
Fk I've been Rickrolled, nice move.
AzizPro
Regular Member
- Mar 28, 2021
- 281
- 164
My little brain didn't understood what you mean.
- Jan 17, 2015
- 5,263
- 4,955
Ok, it's not technically a Rickroll, but an OppenheimerrollMy little brain didn't understood what you mean.
IchimaruGiN
Banned - Multiple Rules Violations
- Aug 27, 2023
- 88
- 50
That is not an upload form , is just html
AzizPro
Regular Member
- Mar 28, 2021
- 281
- 164
Yes it's html but uploaded via form.
IchimaruGiN
Banned - Multiple Rules Violations
- Aug 27, 2023
- 88
- 50
What you're saying is, that that html is uploaded to that server, through a form?
AzizPro
Regular Member
- Mar 28, 2021
- 281
- 164
Yes. Not just html format pdf also.
Code:
https://www.cookiedelivery.com/CookieDelivery/media/Careers-Images/watch-equalizer-3-full-available-at-home-2023-p1th.pdf
- Aug 9, 2017
- 5,611
- 6,910
Judging from the url structures, specifically the 'Careers-Images' directory, I'd take a look at any job vacancy sections of the site and see if they have any sort of apply, sign up or post job forms, and check whether they have upload options available on those forms.
Yet another .aspx website allowing arbitrary uploads... there's a definite exploit going on.
Yet another .aspx website allowing arbitrary uploads... there's a definite exploit going on.
AllOutAnime
Power Member
- Oct 15, 2007
- 589
- 501
Code:
https://www.cookiedelivery.com/company/careers/open-positions.aspxAzizPro
Regular Member
- Mar 28, 2021
- 281
- 164
I appreciate you're trying to help but sadly this isn't the correct one. But thanks.
deniswinter
Newbie
- Jul 7, 2019
- 14
- 1
I don't think so, they have acces to directory structure via a plugin... all the parasites like this have the same structure /media/..../file.ext or /getmedia/.../file.ext....They exploiting I guess an 0day exploit of a plugin...