Asset Manager :Shell and Files upload Vulnerability

Asset Manager :Shell and Files upload Vulnerability


Google Dork : "inurl:Editor/assetmanager/assetmanager.asp"Open Google.com/ncr and enetr this dork 

"inurl:Editor/assetmanager/assetmanager.asp"


Now Open any site from search results 


Now You will Got a Page Like That 


          New Folder  Del Folder

Upload File:  

and site url will be like site.com/Editor/assetmanager/assetmanager.asp

Change The Flash into all Files and Now choose Your File and Upload

and acess Your file here site.com/Editor/assets/yourfilehere


Special : How To upload a cool deface ;)
Go; to http://www.flashvortex.com/ and choose a cool design .. Now put your text and download it .. 
rename the file After Downloading and upload it :)


Demo - http://www.1bakersfield.com//Editor/assets/devilscafe.swf
http://www.1bakersfield.com/Editor/assets/devilscafe2.swf

Komentar

Posting Komentar

Postingan populer dari blog ini

JomSocial ~ Joomla Shell Upload Vulnerability

Gambar
Stuff you need: Firefox A Shell Tamper Data Vulnerable Site & a Brain :) Preparation : 1. Get a shell here. (recommend: c99.php) 2. Download Tamper Data 3. Find a vuln site. *refer to Dorking* Dorks: inurl:/com_community/ inurl:/images/originalvideos/ inurl:/index.php?option=com_community&view=videos Preparing your Shell: 1. Download a shell. 2. Put it in a folder (ex. "myshell") 3. Copy the shell to the same folder and rename it to "yourshell.php.flv" 4. Now in your folder you have 2 files, "myshell.php" & "myshell.php.flv". Getting Access to site: 1. Register a fake account. 2. Active your fake account. 3. Go to your profile page. 4. Click on Add Video. 5. Choose upload video from computer. Uploading your Shell: Upload a video from your computer, please note that if you only see Add video from URL that means the site is not vuln. The reason for having created a file called "myshell.php....
Baca selengkapnya

TuTorial Carding VP-ASP Shopping Cart Versi: 5.00

et's get started: Type: VP-ASP Shopping Cart Version: 5.00 How to find a VP-ASP 5.00 site? VP-ASP 5.00 Finding a site is very simple? A. Go to google.com and type in: VP-ASP Shopping Cart 5.00 2. You will find many sites with VP-ASP cart software installed 5.00 Now let's go to exploit .. Page will be like this: **** :/ / ***. victim.com / shop / shopdisplaycategories.asp Utilize are: diag_dbtest.asp Now you need to do this: **** :/ / ***. victim.com / shop / diag_dbtest.asp A page will appear with the people: xdatabase shopping140 xDblocation resx xdatabasetypexEmailxEmail NamexEmailSubjectxEmailSy stemxEmailTypexOrdernumber Example: The most important thing here is xdatabase xdatabase: shopping140 Ok, now the URL will be like this: **** :/ / ***. victim.com/shop/shopping140.mdb ? If you do not download t Database, try this while there dblocation: xDblocation resx url will be: **** :/ / ***. victim.com/shop/resx/shopping140.mdb If u see an error message that you should try ...
Baca selengkapnya

Tutor Hack Whmcs

Gambar
Fromm All Member .. Oke Kita Skarang Blajar Hack Whmcs ..Udahh Siap Semuaa .. Tapi Bentar Dullu  Dah Pada Tau Belomm WHMCS Itu App ..Oke Yang BElum Tau Merapat :DNieh Tak Jelasin WHMCS Itu Appa ._ WHMCS adalah suatu script yang sekarang paling dipakai oleh banyak kalangan webhoster karena dengan memanage yang mudah. WHMCS juga adalah sebuah billing yang berfungsi untuk pembuatan account hosting,reseller,vps maupun dedicated. WHMCS bisa dikatakan billing paling bagus untuk saat ini dan bisa dikatakan billing nomor 1, WHMCS melebihi billing2 yang lain seperti ModernBill,AcountLab ++ dan lainnya. fitur WHMCS juga boleh dikatakan hampir komplit untuk urusan memanaged hosting, anda akan di manjakan dengan BILLING WHMCS ini .. Oke Kita Mulai Siapin Bahan Bahan nya :  Kopi biar ga ngantuk Cemilan .. dan lain lain .. :D Hack Whmcs Itu Ada 2 Cara 1 . Dengan Metode Submitticet .2 . Dengan Metode Exploit .. Dork :1. inurl:whmcs/cart.php?a= 2. inurl:billing/...
Baca selengkapnya