
Neither worked, but there was something odd in the POST request. It doesn’t let me change the username, but I did make a couple guesses at a password like ‘admin’ and ‘arctic’. CFIDE/administratorĪfter spending some time opening tabs and waiting for pages to load, the most interesting thing was /CFIDE/administrator, which presented a login page for ColdFusion version 8: Given the extremely slow server, and the fact the directories seem to be listing, I’m going to hold off on brute forcing for now. I’ll open both in new tabs, and start opening more things in new tabs, thiough opening too many at once would cause them all to send back empty responses. The web root gives a directory listing:ĬFIDE and cfdocs both fit the ColdFusion hypothesis. Just like in nc, every request to this server takes about 30 seconds to resolve, which is painful. Was it informative and useful? If yes, please share it with your friends who might also find it useful.Index of / Index of /CFIDE/ dir 03/22/17 08:52 μμ

Here is the timestamp for each of the software:
