Saturday

Tutorial Deface Untuk Pemula

simple tutor/exploit deface CMS upload file dri ane.....


 __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __
| Application Info:
| Name: Tadbir CMS
| Autor:Surabayag3tar
|__ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __
| Vulnerability Info:
| Type: Remote Arbitrary File Upload
| Risk: High
| Dork:coba2 aj...
| inurl:/editor/editor/
filemanager/
|
editor/filemanager/upload/
test.html
|__ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __ __

dork diatas ^ isi kn d google, cri trget...klo dpt


inject kn exploit ny d atas....
jdinya.......
editor/editor/filemanager/
upload/test.html

pada [Select the "File Uploader" to use: ] <----- pilih PHP

trus upload html kmu.....
klik send it to server, kalo sukses or terapload maka pada kotak [Uploaded File URL:] akan memberikan patch dmn file kmu terupload

ex yg kluar pada kotak [Uploaded File URL:] : /UserFiles/html_kamu.html

maka hasil nya ada di http://target.com/UserFiles/
html_kamu.html
mudah kn....hehehehehe
  ex hasil ane : http://www.tysk.ee/failid/
Image/takbir.htm
  silahkan d coba n mdah2an bsa d mengerti...... :D:D

By : Andre Pangestu

Tutorial Deface Untuk Pemula Rating: 4.5 Diposkan Oleh: Anonymous

2 komentar:

  1. @Naufaldi : demi kelangsungan blog gan, mohon maaf kalau terganggu ya,

    ReplyDelete