"Custom Upload" Sql injection remote php shell upload vulnreblity

Google Dork : inurl:customupload.html

Poc : fileupload.html

Author : NoEntryPhc

SQL injection vulnreblity : 
Goto Google.com and Type this dork  : inurl:customupload.html now see results 

you'll get something like this http://www.site.com/customupload.html?category=5

now simple put ' sign to check SQL injection vulnreblity

if any error like Warning: Mysql then its vulnreable to Sql injection, now get admin password with Manuall sql injection or use any tool like Havij, SQLMap

Remote Shell Upload vulnreblity

Goto Google.com and Type dork inurl:customupload.html and check Search results 

Goto site, n fill details like first name last name email ( dont't fill real info here)

now in attachment upload your php shell 

To view your uploaded files Goto /fileuploads/ directory and check your file there

Live Demo :

http://www.choiceprintings.com/fileupload.html

http://www.copyplusus.com/fileupload.html

Result :
http://www.choiceprintings.com/fileuploads/hahashellphp%5e131.php

===============================================
Google Dork: inurl: costumupload.html
Poc: fileupload.html
Penulis: NoEntryPhc

SQL injection vulnreblity:
Pergi ke Google.com dan Ketik dork: inurl: customupload.html sekarang melihat hasil
Anda akan mendapatkan sesuatu seperti ini http://www.site.com/customupload.html?category=5
put sekarang sederhana 'tanda untuk memeriksa vulnreblity injeksi SQL
jika ada kesalahan seperti Peringatan: Mysql kemudian yang vulnreable untuk injeksi Sql, sekarang mendapatkan password admin dengan injeksi sql manuall atau menggunakan alat seperti Havij, SqlMap

Remote Shell Upload vulnreblity
Pergi ke Google.com dan Jenis inurl dork: customupload.html dan memeriksa hasil Pencarian
Pergi ke situs, n mengisi rincian seperti nama depan nama belakang email (tidak mengisi informasi nyata di sini)
sekarang dalam lampiran meng-upload Anda php shell
Untuk melihat file upload Ke / fileuploads / direktori dan memeriksa file Anda di sana
Live Demo:
http://www.choiceprintings.com/fileupload.html
http://www.copyplusus.com/fileupload.html
hasil:
http://www.choiceprintings.com/fileuploads/hahashellphp% 5e131.php

Learn How to Hack Facebook Accounts via ARP Poisoning

Hello, friends !  
Compromising Facebook Account Via ARP Poisoning is e-Book written By Deep, 
this book will explain “ARP Poisoning Attack” or “Man in the Middle Attack”… 
In this book we use a packet sniffer called “Wireshark” to capture the packets ie coockie. 
Here we will see how Wireshark sniffs the packets and finally captured facebook’s authentication coockie and replaced the victims authentication coockie with our own authentication coockie allow us to compromise a facebook account easily. 
In this book/white paper we will see how we can hack a facebook account over a LAN with ARP Poisoning or MitMA

Free Download Hack Facbook Accounts Via ARP Poisoning