In this tutorial we are talking about Testing Image Shell and Deface Upload Vulnerability. So lets start..
Follow the Instructions:
Dorks:
inurl:"modules/filemanagermodule/actions/?picker.php??id=0"
intitle:"Testing Image Collections"
2). Use both Google and Bing to search the above dork to find more vulnerable websites.
3). Select any Website from the search result.Find the upload option. in the bottom left corner..
4). Now, Select your deface or Shell and Upload it.
To view your Uploaded shell or deface visit:
http://website.com/files/yourfilehere
http://websites.com/path/yourfilehere
Happy Hacking!! Only for Educational purposes..!!
0 komentar