Deface CSRF Modules Homepagebanners - Arbitrary File Upload

deface modules homepagebanners modules/homepagebanners uploadimage.php uploader deface terbaru 2019 news deface news tutorial trolling system troll your system trolling-system.blogspot.com deface terbaru cara deface terbaru 2019 upload shell
0 min read
Hallo everyone :D
Kembali lagi bersama gue ,admin blog Trolling System :D

Kali ini gue ingin share tutorial Deface CSRF Modules Homapagebanners
Langsung aja ya gan :D

DORK: inurl: modules/homepagebanners/
             intitle: index of inurl: modules/homepagebanners/

Exploit: uploadimage.php


Ciri ciri vulnerability



Input param name file nya: userfile
CSRF: http://trolling-system.ooo/csrf.php

Kalau berhasil di upload seperti ini


Untuk mengakses shell / file yang di upload ada di directory
site.com/modules/homepagebanners/slides/file.php

Sekian.
Terima kasih sudah berkunjung, Jangan lupa like dan share fanpage facebook Trolling System
1000 Like ,akan ada Giveaway dari gue :D
ordinary people

You may like these posts

Post a Comment