#########################################################
# Exploit Title: [ Faros CMS XSS Vulnerabilitie ]
########################################################
# Google Dork: [ intext:Copyright © 2011 - FarosWeb ]
# Date: [22/09/2015]
# Exploit Author: [Izza009 | Mujahidin Cyber Army]
# Vendor Homepage: [www.farosweb.com.br]
# Software Link: [-]
# Version: [app version] (REQUIRED)
# Tested on: [Win 8.1/Kali]
# CVE : [-]
########################################################
# Demo: http://delidoces.com.br/loja/admin/login/index.php?erro= Hacked%20by%20Mujahidin% 20Cyber%20Army%3Cbr%3EWe% 20Love%20Al%20Qaeda&url=
##########################################################
# Thanks to : Allah | Rosulullah | Tandhim Al-Qaeda | Thaliban | Jabhah Nushroh
# | United Islamic Cyber Force | Muslim Corporation Cyber | We Are Mujahidin Cyber Army
# Mujahidin Cyber Army : | Izza009 | xGame1945 | MrBz Elfatir | El-Muhajimi |[!] Jihad797 [!] | 1D10T
############################################################ ############################## ##############
Hello World ; Malam Fans, Please Say Hello Haters :* xixixhi, Nuenomaru disini, Sekarang Nue akan Share Tutorial Deface dengan eXploit WP Themes Brainstorm Arbitrary File Upload Vulnerability * ini exploit lama sih wkwkw exploit ini salah satu bug/celah yang ada pada theme di CMS WordPress. iseng2 aja share, Kali aja masih crotz wkwkw * yg master minggir dlu ;* Lanjut intip tutor ae gaes :* mau sampai kapan ?! Dork: inurl:/wp-content/themes/brainstorm (Selebihnya kebangin lg menggunakan imajinasi vokepers kalian, biar dpt yg vuln n verawan) 1. Dorking di search Engine 2. pilih salah satu web target yg pengen ente tusb0l pak wkwk, lalu masukan exploitnya. exploit: /[path]/ /wp-content/themes/brainstorm/functions/jwpanel/scripts/uploadify/uploadify.php 3. Vulnerability ~ Blank Kurang lebih sih gituh awkkaw~ 4. Buat File Baru Berekstensi .php Contoh brain.php Dan Simpan Script Berikut Di Directory C:/XAMPP/php Masukan Script Berikut Edit-Edit Dikit dan taruh juga shell sobat di dire
Comments
Post a Comment