SecNotes

@DataPush3r said:

@ashishjv1 said:

@ashishjv1 said:

@Seepckoa said:

@mxchai said:
Would be nice if someone could PM me about the initial foothold. I have no idea what to do except testing the web app, of which I found only XSS.

Thanks!

You need to do a little enumeration at the login level, we could inject what in a login page ?

i pretty much get what i need to do but the usernames taken * all of it *

Need to wait for my turn i guess ! :anguished:

Took me 2 days just to find xxxx.exe . Did someone mess up with the file or was it intentionally kept there ?

Rooted !

You didn’t even need to find “IT”, you could of accessed it from anywhere. :wink:

Is there a way to access it from anywhere ? If Yes, Could you PM Me ?