FrontPage Extension

Discussion in 'Песочница' started by ++Norton++, 2 Feb 2007.

  1. ++Norton++

    ++Norton++ Elder - Старейшина

    Joined:
    20 Nov 2006
    Messages:
    168
    Likes Received:
    39
    Reputations:
    0
    На сайте доступен сервис FrontPage Extension. Известны логин и пароль к нему, лежащие в файле /_vti_pvt/service.pwd.
    Подскажите, шифруется ли пароль в service.pwd? Если да, то чем можно расшифровать, и где его можно применить. Я слышал что с помощью FrontPage Extension возможно удаленное изменение контента сайта. Это так?
     
  2. ettee

    ettee Administrator
    Staff Member

    Joined:
    12 Oct 2006
    Messages:
    466
    Likes Received:
    1,036
    Reputations:
    1,065
    Любой брутфорс понимающий DES алгоритм.
    Джоник(John the Ripper)+Словари и с песней.
    http://www.openwall.com/john/e/john171w.zip

    процитирую теорию:
    Code:
    dork: filetype:pwd (service | authors | administrators | users)
    данный дорк самый функциональный, прошу другие не выкладывать.
    Code:
    http://www.machinima.com/tritin-films/_vti_pvt/service.pwd
    http://www.colquittassociates.com/_vti_pvt/service.pwd
    http://www-test.suihoek.nl/_vti_pvt/service.pwd
    http://www.uo.edu.cu/fac/fcsh/web_psico/Content/_vti_pvt/service.pwd
    http://webhome.idirect.com/~zinine/_vti_pvt/service.pwd
    http://www.squarefood.com/board/yabb/Sources/_vti_pvt/service.pwd
    http://www.ipserve.net/_vti_pvt/service.pwd
    http://membres.lycos.fr/frenchlingerie/_vti_pvt/service.pwd
    http://www.suihoek.nl/_vti_pvt/service.pwd
    http://my.erinet.com/7B/33/vanhookrk/_vti_pvt/service.pwd
    http://florida-fishing-charters.com/_vti_pvt/service.pwd
    http://trade.hamk.fi/wwwkurssi/_vti_pvt/users.pwd
    http://www.gemanurani-bks.sch.id/_vti_pvt/service.pwd
    http://www.quintacolumna.org/public_html/_vti_pvt/service.pwd
    http://thecomedyworks.net/_vti_pvt/service.pwd
    http://locksmithexpress.net/_vti_pvt/service.pwd
    http://www.valmaq.com.br/_vti_pvt/service.pwd
    http://www.flashflashrevolution.com/_vti_pvt/service.pwd
    http://www.stsnet.at/hs-stgeorgen/hs-stgeorgen-archiv/_vti_pvt/service.pwd
    http://orte.main-kinzig.de/_vti_pvt/service.pwd
    http://ernaehrungskreis.kh-st-poelten.at/Ernaehrungskreis/_vti_pvt/service.pwd
    http://www.scweb4free.com/_vti_pvt/service.pwd
    http://www.cti.gr/documents/odhgos_diadikasiwn/manage/_vti_pvt/service.pwd
    http://users.servicios.retecal.es/faevsba/service.pwd
    http://bogdan-adrian.com/_vti_pvt/service.pwd
    http://www.bengames.org/bencon/z_crap/_vti_pvt/service.pwd
    http://bilboque.com.br/_vti_pvt/service.pwd
    http://www.weisd.com/_vti_pvt/service.pwd
    http://www.sandksteel.com/_vti_pvt/service.pwd
    http://mipagina.cantv.net/jmvven/_vti_pvt/service.pwd
    http://virtual.vidnet.net/_vti_pvt/service.pwd
    http://www.facs.org.ni/_vti_pvt/service.pwd
    http://www.rectus.dk/_vti_pvt/service.grp
    http://www.imotionmc.com/_vti_pvt/service.pwd
    http://www.thearma.org/_vti_pvt/service.pwd
    http://suske.its.unimelb.edu.au/208743/pub/_vti_pvt/service.pwd
    http://www.rt65.com/_vti_pvt/service.pwd
    http://pallas.cc.uregina.ca:8080/_vti_pvt/service.pwd
    http://www.jamescoxgallery.com/_vti_pvt/service.pwd
    http://www.mckendreecbe.org/_vti_pvt/service.pwd
    http://www.donsmachine.com/_vti_pvt/service.pwd
    http://spiritec.dsvr.co.uk/_vti_pvt/service.pwd
    http://www.mindconsulting.it/_vti_pvt/service.pwd
    http://www.ocda.demon.co.uk/_vti_pvt/service.pwd
    http://www.malanga.net/_vti_pvt/service.pwd
    http://heberdomaine.com/_vti_pvt/service.pwd
    http://www.rosenthaler.de/_vti_pvt/service.pwd
    http://www.mipagina.cantv.net/maxtorcomputer/_vti_pvt/service.pwd
    http://www.btinternet.com/~pksilver/_vti_pvt/service.pwd
    http://www.broadfamilyoffice.com/FP-service.pwd.old
    http://schlagel.org/old_vti_pvt/administrators.pwd
    http://www.mpisorder.com/_vti_pvt/service.pwd
    http://members.lycos.nl/willowy/_vti_pvt/service.pwd
    http://remax-cen-cov-ri.com/_vti_pvt/service.pwd
    http://www.rohitab.com/discuss/oldfiles/post-10-34160-administrators.pwd
    http://server5.web-mania.com/users/uniquede/_vti_pvt/service.pwd
    http://web.quick.cz/vlastimil.picha/_vti_pvt/service.pwd
    http://www.cti.gr/RD3/DKE/panda/tasks/_vti_pvt/service.pwd
    http://www.multiline.com.au/~ronb/chiefton/_vti_pvt/service.pwd
    http://www2.asn-graz.ac.at/hs-stgeorgen-archiv/_vti_pvt/service.pwd
    http://www.ccyprolaw.com/_vti_pvt/service.pwd
    http://www.wu-wien.ac.at/usr/h92/h9250717/_vti_pvt/service.pwd
    http://motyl.webd.pl/_vti_pvt/service.pwd
    http://hot-hunks.com/_vti_pvt/service.pwd
    http://www.verschijning.nl/_vti_pvt/service.pwd
    http://trade.hamk.fi/wwwkurssi/_vti_pvt/authors.pwd
    http://webuser.unicas.it/misure/_vti_pvt/service.pwd
    http://members.lycos.nl/Veef/_vti_pvt/service.pwd
    http://www.loscastros.com/jorge_files/west_coast_med_supply/_vti_pvt/service.pwd
    http://skt.com.tw/_vti_pvt/service.pwd
    http://home.tiscali.nl/henloe/_vti_pvt/service.pwd
    http://www.llesd.k12.ca.us/kshefren/_vti_pvt/service.pwd
    http://homepage.ntlworld.com/toby.richards1/_vti_pvt/service.pwd
    http://www.americafundingcorp.com/_vti_pvt/service.pwd
    http://cash-advance-now.us/_vti_pvt/service.pwd
    http://www.bamboemeubel.com/_vti_pvt/service.pwd
    http://www.users.qwest.net/~cwalocal7101/_vti_pvt/service.pwd
    http://www.llesd.k12.ca.us/lelibrary/_vti_pvt/service.pwd
    http://www.otavanoppimateriaalit.net/linkit/_vti_pvt/service.pwd
    http://membres.lycos.fr/djbabar/_vti_pvt/service.pwd
    http://www.pharmacy.ubc.ca/pharmdprogram/_vti_pvt/service.pwd
    http://www.adhd-relief.com/0%20%20_vti_pvt/service.pwd
    http://stephanie.pommier.free.fr/_vti_pvt/service.pwd
    http://bbeletronica.cpac.embrapa.br/Content/_vti_pvt/service.pwd
    http://www.users.qwest.net/~booboo7/_vti_pvt/service.pwd
    http://ham2.cc.fer.hr/9a1cdh/_vti_pvt/service.pwd
    http://freespace.virgin.net/vivienne.lowndes_smith3/members/_vti_pvt/service.pwd
    http://hem.fyristorg.com/poleposition/Content/_vti_pvt/service.pwd
    http://www.hint.org.tw/family/_vti_pvt/service.pwd
    http://www.unshadowed.com/ministore/_vti_pvt/service.pwd
    http://karl-may-festspiele.at/2002/_vti_pvt/service.pwd
    http://eclipse.cps.k12.va.us/Schools/BRP/_vti_pvt/service.pwd
    http://www.pelikan-apotheke-bremerhaven.de/_vti_pvt/service.pwd
    http://frontpage.dallas.net/~lonlusk/_vti_pvt/administrators.pwd
    http://www.btinternet.com/~mel/_vti_pvt/service.pwd
    http://www.decompression.org/maiken/_vti_pvt/administrators.pwd
    http://www.teiath.gr/verwalt/technical/_vti_pvt/administrators.pwd
    http://www.tex.izs.it/_vti_pvt/service.pwd
    http://www.bd.net.cn/zgbdxxk/dzzz/_vti_pvt/service.pwd
    http://www.henac.be/projets/leonardo/forumetudiants/_vti_pvt/administrators.pwd
    http://www1.minn.net/~psollie/_vti_pvt/service.pwd
    http://server5.web-mania.com/users/pafanFri/_vti_pvt/service.pwd
    http://www.users.qwest.net/~wwahec/_vti_pvt/service.pwd
    http://trade.hamk.fi/wwwkurssi/_vti_pvt/administrators.pwd
    http://www.dobermanns.at/_vti_pvt/service.pwd
    http://www.collageproject.net/_vti_pvt/service.pwd
    http://club.sdabocconi.it/mba_mcclub_private/_vti_pvt/service.pwd
    http://www.heyerlist.org/garderobe/_vti_pvt/service.pwd
    http://www.fdn.uq.edu.au/students/2001%20February/fuad/_vti_pvt/service.pwd
    http://www.pond.com/home/_vti_pvt/service.pwd
    http://www.cps.k12.va.us/Schools/GBP/_vti_pvt/service.pwd
    http://www.medicmedia.ch/_vti_pvt/service.pwd
    http://dersonnenhof.de/_vti_pvt/service.pwd
    http://schlagel.org/old_vti_pvt/users.pwd
    http://www.lasikmemorial.com/_vti_pvt/service.pwd
    http://www.christiecottage.ca/_vti_pvt/service.pwd
    http://www.osea.org/pages/Chapter_Websites/152/_vti_pvt/service.pwd
    http://www.computershop.twpo.com.au/_vti_pvt/service.pwd
    http://www.whitebear.k12.mn.us/oles/_vti_pvt/service.pwd
    http://aimcorp.aimcorporation.com/_vti_pvt/service.pwd
    http://www.decompression.org/maiken/_vti_pvt/users.pwd
    http://www.henac.be/projets/leonardo/forumetudiants/_vti_pvt/users.pwd
    http://conca.users.netlink.co.uk/_vti_pvt/service.pwd
    http://humanesocietyny.org/_vti_pvt/service.pwd
    
    Code:
    http://websql1.acs.ncsu.edu/PurchaseCard/_vti_pvt/users.pwd
    http://www.uprh.edu/~jm/_vti_pvt/users.pwd
    http://www.bucks.edu/~fishg/_vti_pvt/administrators.pwd
    http://daniel.eastern.edu/reports/_vti_pvt/administrators.pwd
    http://eeasterling.cox.smu.edu/_vti_pvt/service.pwd
    http://goldey2.gbc.edu/~kneavela/_vti_pvt/service.pwd
    http://nkeon.cox.smu.edu/_vti_pvt/service.pwd
    http://cecelia.physics.indiana.edu/kids/_vti_pvt/service.pwd
    http://www.slis.ua.edu/sac/_vti_pvt/service.pwd
    http://jnoel.cox.smu.edu/_vti_pvt/service.pwd
    http://www.ltsp.edu/news_events/_vti_pvt/service.pwd
    
     
    _________________________
    #2 ettee, 2 Feb 2007
    Last edited: 20 Aug 2007