Popular Post

Posted by : Sevul Bloglist Monday, 16 September 2013

Kali ini saya akan share exploit yang mungkin berguna untuk para newbie seperti saya. Ya, Exploit FileChucker File Upload Vulnerability .
Oke, langsung saja ya. :)
Bahan :
Dork :
inurl:/cgi-bin/filechucker.cgi
intext:Toptown File Upload
inurl:/cgi-bin/filechucker.pl
intext:File Upload by Encodable


File deface berformat txt, html. Tidak bisa php !
Mulai berselancar di google dan mencari target yang vuln.
Kali ini saya pilih
http://toptown.co.uk/cgi-bin/filechucker.cgi
Isi form dan mulai upload file. Lihat SS :


Jika sudah, tinggal lihat hasil nya di [localhost]/upload/files/[namafile]
Ex :
http://toptown.co.uk/upload/files/el.html
Done

Leave a Reply

Subscribe to Posts | Subscribe to Comments

- Copyright © 2013 Sevul BlogList - Date A Live - Powered by Blogger - Designed by Johanes Djogan -