File Attachment Upload Repository | Remote Path File




Halo temen-temen, kali ini gua cuman mau share sedikit pengalaman, sebenernya metode ini udah ada lama banget, kemarin gw baca-baca di blog exploitkita.org ada trick baru biar file nya ke upload di root directory.



DORK:  
intext:"This Software is Released Under GNU GPL License Version 3"

EXPLOIT:  
/admin/modules/bibliography/pop_attach.php




Kali ini gua bikin tutorial nya menggunakan hp, cara ini berlaku juga bagi user pc menggunakan burp suite.


Oke pertama-tama download SandroProxy dan Lightning di Google Play Store



Jika sudah terdownload keduanya buka SandroProxy aktifkan Developer mode, capture data seperti gambar di bawah




Klik done jika sudah, dan buka Lightning yang sudah di download tadi, pergi ke Settings > General Settings ubah HTTP proxy jadi manual isi host nya menjadi localhost dan port nya 8008.



Kunjungi target nya menggunakan aplikasi Lightning kebetulan gua udah punya target http://perpustakaan.pta-semarang.go.id/admin/modules/bibliography/pop_attach.php isi judul nya apa saja, upload file kalian dengan format .txt jika sudah klik Unggah Sekarang.



Nah kalau sudah buka SandroProxy, cari tulisan POST, jika sudah ketemu klik text nya tahan sampai muncul menu baru. Sudah muncul ? klik Manual Request.



Scroll ke bawah sampai ketemu tulisan "fileDir", isi di bawah nya menjadi ../../ jika semua sudah di lakukan klik send



Tinggal buka deh web tadi
http://perpustakaan.pta-semarang.go.id/admin/modules/bibliography/pop_attach.php menjadi

http://pta-semarang.go.id/namafile.txt



Mudah kan ? haha, mungkin segini doang yang bisa gua sampaikan, jangan lupa share ke temen-temen kalian yang belum tau. See you

29 Responses to "File Attachment Upload Repository | Remote Path File"

  1. minn. kok not found ya? url g ditemukan.. itu gimana solusinya min kira kira ?

    ReplyDelete
  2. Admin yang baik hati dan tidak sombong.. terima kasih...sy berhasil menghek satelit dengan kalkulator­čśé­čśé

    It s joke min..
    Btw blog nya keren dan sangat membantu

    ReplyDelete
  3. This is really a nice and informative, containing all information and also has a great impact on the new technology. Thanks for sharing it, binate solutions

    ReplyDelete
  4. I was surfing the Internet for information and came across your blog. I am impressed by the information you have on this blog. It shows how well you understand this subject. https://meerasimulation.com/

    ReplyDelete
  5. Leader in developing embedded system projects, providing Engineering and SCADA solutions using Raspberry pi, Arduino and more.... operating system kernel
    Leader in developing embedded system projects, providing Engineering and SCADA solutions using Raspberry pi, Arduino and more.... cloud

    ReplyDelete
  6. You there, this is really good post here. Thanks for taking the time to post such valuable information. Quality content is what always gets the visitors coming. backlinks

    ReplyDelete
  7. Really appreciate this wonderful post that you have provided for us.Great site and a great topic as well i really get amazed to read this. Its really good. Techesign.com

    ReplyDelete
  8. This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value of providing a quality resource for free. pre roll packaging
    C

    ReplyDelete
  9. I read your blog frequently and I just thought I’d say keep up the amazing work! SEO Backlinks on Fiverr

    ReplyDelete
  10. If we print hologram stickers and keep doing trade in the similar technique and make no alteration then sooner or later, we will be abandoned by our clients. Holograms assist your customers to know your products authenticity and reality. It is extremely vital and significant to select the correct hologram sticker printing

    ReplyDelete
  11. Awesome! I really love it. Thanks for sharing with us. I am going ton try this right now. if you need Software Boxes you can contact us

    ReplyDelete
  12. If you are in the Pre roll business and you are facing tough competition, you would know the importance of good pre rolled joint packaging pre roll packaging. Packaging is something that most of your customers will recognize and remember you buy. Customers, these days, look for boxes that are sustainable, reliable, and allow for attractive presentation of the pre roll joint boxes inside.

    ReplyDelete
  13. Our service has been very supportive to our customers and especially in solving their problems and providing them with best boxes which are fully credible and worthy of their trust.
    Pre Roll Packaging
    French fries boxes
    Custom Eyelash Boxes

    ReplyDelete
  14. Blank cigarette boxes provide you the best Blank cigarette boxes, which will protect your customer as well as give it a perfect look.

    ReplyDelete
  15. Looking for custom packaging solutions to add value for your product or brand we care for eco-friendly packaging like kraft boxes and corrugated mailer boxes to attract consumer in different layouts and designs.

    ReplyDelete
  16. Nowadays, every brand is looking for the best packaging solution in order to attract the sight of maximum customers. With the help of personalized pillow boxes, you will be able to accomplish your goals in less time.

    ReplyDelete
  17. Cigarette boxes provide you the best cardboard cigarette box, which will protect your customer as well as give it a perfect look.
    pre roll packaging

    ReplyDelete
  18. Offer them profitable commissions for every sale they make. Ensure, your site is cool and your product is impressive. The best affiliate marketers have a reputation to protect and would not promote a dodgy site or crappy product. check my blog

    ReplyDelete

Iklan Atas Artikel

Iklan Tengah Artikel 1

Iklan Tengah Artikel 2

Iklan Bawah Artikel