Deface Metode com_djclassifieds File Upload

Hallo lur
Kali ini saya akan share tutorial deface metode com_djclassifieds File Upload with CSRF

Oke langsung saja..

Bahan - Bahan
- Dork : inurl:/com_djclassifieds
             inurl:/components/com_djclassifieds
- Exploit : /index.php?option=com_djclassifieds&task=upload&tmpl=component
- CSRF : https://pastebin.com/raw/EUnh5RB0 save dengan ext .html
- Live Target : https://www.paradisola.it/  (btw web ini ngga bisa upload shell)

Pertama tama kalian dorking terlebih dahulu menggunakan dork diatas atau kalian bisa gunakan live target nya, jika sudah menemukan sitenya kita tambahkan exploit nya di belakang url
Jika vuln maka akan muncul seperti ini.
  
Selanjutnya masukan site nya ke CSRF, ubah script CSRF nya di bagian  value="mini.phtml" menjadi nama shell atau script deface kalian, contoh disini saya mengubah nya menjadi o.html.

Buka CSRF nya di browser, selanjutnya kalian upload shell atau script deface kalian masing masing.
Jika muncul seperti ini lagi itu tandanya sukses ter upload.

Selanjutnya kalian tinggal mengakses shell atau script deface yang sudah di upload tadi di /tmp/djupload/namadivalueCSRF 
Contoh : https://www.paradisola.it/tmp/djupload/o.html

Jika masih belum ngerti  kalian bisa  menonton vidio ini.

Oke mungkin cukup sekian tutorial kali ini
Byeee

2 Responses to "Deface Metode com_djclassifieds File Upload"

  1. Where can i buy marijuana online from a trusted and legit source? Here, you go wondering how you will get that safe and secure without leaving your home. Here, comes the the answer to your doubts, where you order from home with just few clicks on your computer. All products are well safe and we take charge of any damage along transportation period. We have made buying real weed online a breeze with so many methods of payment: bitcoin, paypal, zelle, Western Union, MoneyGram, and other discreet methods of payment. Top selling 100%. Authentic at the best wholesale cost. Fast worldwide shipping & secure online shopping. We are a Trusted and Reliable Supplier of marijuana services online in the USA, Canada, Europe, Australia, and globally. Weed store dispensary Online Shop is proud to be a trusted supplier of 100% authentic, fully sealed, high-quality marijuana products that come with customer satisfaction at their doorstep.
    CONTACT US:

    Website: https://weedstoredispensary.com
    Phone:+1 7024472387

    ReplyDelete
  2. Welome to millinium online pharmacy Purchase Dexedrine Online Without Prescription Legit in a Legal Way.
    Dexedrine is a drug used to treat Attention Deficit Hyper-innovativeness Disorder (ADHD). It changes the measure of certain common substances in the cerebrum. Dextroamphetamine likewise has a place with a class of medications known as energizers. it encourages increment your capacity to remain concentrated on a movement, focus improves ones listening aptitudes. More to that this medicine is likewise used to treat some dozing issue (narcolepsy) which encourages you remain conscious during the day. anyway it ought to be utilized to hold off rest or to treat tiredness in those that don’t have a rest issue. Purchase Dexedrine Online Here Without Prescription.

    Best Place to Buy Dexedrine Online Without Prescription–Dexedrine available to be purchased Here Safely and Legit Buy ADHD Medication Online
    Here, you can securely and safely purchase Dexedrine online without remedy. Our Products are of the best quality from FDA Approved offices. Bundling is sheltered and sending is 100% attentive and conveyance is quick. We transport with different expedited delivery conveyance administrations like DHL, FedEx, EMS…
    www.milliniumpharmacy.com

    ReplyDelete

Iklan Atas Artikel

Iklan Tengah Artikel 1

Iklan Tengah Artikel 2

Iklan Bawah Artikel