Deface Metode com_djclassifieds File Upload
Hallo lur
Kali ini saya akan share tutorial deface metode com_djclassifieds File Upload with CSRF
Oke langsung saja..
Bahan - Bahan
- Dork : inurl:/com_djclassifieds
inurl:/components/com_djclassifieds
- Exploit : /index.php?option=com_djclassifieds&task=upload&tmpl=component
- CSRF : https://pastebin.com/raw/EUnh5RB0 save dengan ext .html
- Live Target : https://www.paradisola.it/ (btw web ini ngga bisa upload shell)
- Live Target : https://www.paradisola.it/ (btw web ini ngga bisa upload shell)
Pertama tama kalian dorking terlebih dahulu menggunakan dork diatas atau kalian bisa gunakan live target nya, jika sudah menemukan sitenya kita tambahkan exploit nya di belakang url
Jika vuln maka akan muncul seperti ini.
Selanjutnya masukan site nya ke CSRF, ubah script CSRF nya di bagian value="mini.phtml" menjadi nama shell atau script deface kalian, contoh disini saya mengubah nya menjadi o.html.
Buka CSRF nya di browser, selanjutnya kalian upload shell atau script deface kalian masing masing.
Jika muncul seperti ini lagi itu tandanya sukses ter upload.
Selanjutnya kalian tinggal mengakses shell atau script deface yang sudah di upload tadi di /tmp/djupload/namadivalueCSRF
Contoh : https://www.paradisola.it/tmp/djupload/o.html
Jika masih belum ngerti kalian bisa menonton vidio ini.
Oke mungkin cukup sekian tutorial kali ini
Byeee
Welome to millinium online pharmacy Purchase Dexedrine Online Without Prescription Legit in a Legal Way.
ReplyDeleteDexedrine is a drug used to treat Attention Deficit Hyper-innovativeness Disorder (ADHD). It changes the measure of certain common substances in the cerebrum. Dextroamphetamine likewise has a place with a class of medications known as energizers. it encourages increment your capacity to remain concentrated on a movement, focus improves ones listening aptitudes. More to that this medicine is likewise used to treat some dozing issue (narcolepsy) which encourages you remain conscious during the day. anyway it ought to be utilized to hold off rest or to treat tiredness in those that don’t have a rest issue. Purchase Dexedrine Online Here Without Prescription.
Best Place to Buy Dexedrine Online Without Prescription–Dexedrine available to be purchased Here Safely and Legit Buy ADHD Medication Online
Here, you can securely and safely purchase Dexedrine online without remedy. Our Products are of the best quality from FDA Approved offices. Bundling is sheltered and sending is 100% attentive and conveyance is quick. We transport with different expedited delivery conveyance administrations like DHL, FedEx, EMS…
www.milliniumpharmacy.com