› › › › ›

File Attachment Upload Repository | Remote Path File

October 06, 2019 46 Comments



Halo temen-temen, kali ini gua cuman mau share sedikit pengalaman, sebenernya metode ini udah ada lama banget, kemarin gw baca-baca di blog exploitkita.org ada trick baru biar file nya ke upload di root directory.



DORK:  
intext:"This Software is Released Under GNU GPL License Version 3"

EXPLOIT:  
/admin/modules/bibliography/pop_attach.php




Kali ini gua bikin tutorial nya menggunakan hp, cara ini berlaku juga bagi user pc menggunakan burp suite.


Oke pertama-tama download SandroProxy dan Lightning di Google Play Store



Jika sudah terdownload keduanya buka SandroProxy aktifkan Developer mode, capture data seperti gambar di bawah




Klik done jika sudah, dan buka Lightning yang sudah di download tadi, pergi ke Settings > General Settings ubah HTTP proxy jadi manual isi host nya menjadi localhost dan port nya 8008.



Kunjungi target nya menggunakan aplikasi Lightning kebetulan gua udah punya target http://perpustakaan.pta-semarang.go.id/admin/modules/bibliography/pop_attach.php isi judul nya apa saja, upload file kalian dengan format .txt jika sudah klik Unggah Sekarang.



Nah kalau sudah buka SandroProxy, cari tulisan POST, jika sudah ketemu klik text nya tahan sampai muncul menu baru. Sudah muncul ? klik Manual Request.



Scroll ke bawah sampai ketemu tulisan "fileDir", isi di bawah nya menjadi ../../ jika semua sudah di lakukan klik send



Tinggal buka deh web tadi
http://perpustakaan.pta-semarang.go.id/admin/modules/bibliography/pop_attach.php menjadi

http://pta-semarang.go.id/namafile.txt



Mudah kan ? haha, mungkin segini doang yang bisa gua sampaikan, jangan lupa share ke temen-temen kalian yang belum tau. See you

46 Responses to "File Attachment Upload Repository | Remote Path File"

  1. adminOctober 6, 2019 at 6:01 AM

    mantap slor

    ReplyDelete
  2. InXedOctober 6, 2019 at 7:58 AM

    Mntp lur lengkap

    ReplyDelete
  3. viandOctober 11, 2019 at 10:43 PM

    Jjk

    ReplyDelete
  4. Luthfi AlfaridzOctober 16, 2019 at 9:49 AM

    minn. kok not found ya? url g ditemukan.. itu gimana solusinya min kira kira ?

    ReplyDelete
  5. Dr.lostpackerDecember 10, 2019 at 8:25 AM

    Admin yang baik hati dan tidak sombong.. terima kasih...sy berhasil menghek satelit dengan kalkulator😂😂

    It s joke min..
    Btw blog nya keren dan sangat membantu

    ReplyDelete
  6. awaisApril 3, 2020 at 4:19 AM

    This is really a nice and informative, containing all information and also has a great impact on the new technology. Thanks for sharing it, binate solutions

    ReplyDelete
  7. M. TahaMay 22, 2020 at 5:43 AM

    I was surfing the Internet for information and came across your blog. I am impressed by the information you have on this blog. It shows how well you understand this subject. https://meerasimulation.com/

    ReplyDelete
  8. Hero backlinksAugust 20, 2020 at 10:33 PM

    Leader in developing embedded system projects, providing Engineering and SCADA solutions using Raspberry pi, Arduino and more.... operating system kernel
    Leader in developing embedded system projects, providing Engineering and SCADA solutions using Raspberry pi, Arduino and more.... cloud

    ReplyDelete
  9. alisabirSeptember 18, 2020 at 11:26 AM

    You there, this is really good post here. Thanks for taking the time to post such valuable information. Quality content is what always gets the visitors coming. backlinks

    ReplyDelete
  10. nadiaOctober 6, 2020 at 1:00 AM

    https://automatonlinecom.blogspot.com/2020/10/dr-beauty-cosmet.html

    ReplyDelete
  11. jamesOctober 28, 2020 at 1:11 PM

    This is such a great resource that you are providing and you give it away for free. I love seeing blog that understand the value of providing a quality resource for free. pre roll packaging
    C

    ReplyDelete
  12. Jeff L. VenturaDecember 16, 2020 at 3:11 AM

    I read your blog frequently and I just thought I’d say keep up the amazing work! SEO Backlinks on Fiverr

    ReplyDelete
  13. Jin KerryDecember 30, 2020 at 12:20 PM

    check custom packaging boxes

    ReplyDelete
  14. thomasjackJanuary 14, 2021 at 2:28 PM

    It is a very informative post thanks for sharing the information.
    Book boxes Arizona
    Business Card packaging Delaware

    ReplyDelete
  15. thomasjackJanuary 14, 2021 at 2:29 PM

    I appreciate your post thanks for sharing the information.
    Cake boxes California
    Candle boxes Arizona

    ReplyDelete
  16. Serina johsonMarch 9, 2021 at 10:12 AM

    It is really nice post; I like it very much.
    white Hair Extension Boxes with lids
    custom made Handover Boxes near me

    ReplyDelete
  17. Howard HarrisonMarch 10, 2021 at 10:53 PM

    This comment has been removed by the author.

    ReplyDelete
  18. Leo PatrickMarch 14, 2021 at 10:08 PM

    Awesome! I really love it. Thanks for sharing with us. I am going ton try this right now. if you need Software Boxes you can contact us

    ReplyDelete
  19. Custom Packaging SolutionMarch 18, 2021 at 9:07 AM

    This comment has been removed by the author.

    ReplyDelete
  20. BoxesMeMarch 22, 2021 at 2:45 PM

    Our service has been very supportive to our customers and especially in solving their problems and providing them with best boxes which are fully credible and worthy of their trust.
    Pre Roll Packaging
    French fries boxes
    Custom Eyelash Boxes

    ReplyDelete
  21. Chris MichaelMarch 24, 2021 at 11:58 PM

    This comment has been removed by the author.

    ReplyDelete
  22. lorenburtonApril 1, 2021 at 3:46 AM

    Looking for custom packaging solutions to add value for your product or brand we care for eco-friendly packaging like kraft boxes and corrugated mailer boxes to attract consumer in different layouts and designs.

    ReplyDelete
  23. Half Price PackagingApril 1, 2021 at 6:29 AM

    Nowadays, every brand is looking for the best packaging solution in order to attract the sight of maximum customers. With the help of personalized pillow boxes, you will be able to accomplish your goals in less time.

    ReplyDelete
  24. Custom Packaging BoxesApril 13, 2021 at 1:28 PM

    This comment has been removed by the author.

    ReplyDelete
  25. Custom Packaging SolutionApril 14, 2021 at 4:29 AM

    This comment has been removed by the author.

    ReplyDelete
  26. Viktoriya April 17, 2021 at 1:45 PM

    Offer them profitable commissions for every sale they make. Ensure, your site is cool and your product is impressive. The best affiliate marketers have a reputation to protect and would not promote a dodgy site or crappy product. check my blog

    ReplyDelete
  27. JACKApril 27, 2021 at 10:23 PM

    This comment has been removed by the author.

    ReplyDelete
  28. Guider ManMay 1, 2021 at 11:28 AM

    In these covid-19 days every one is looking for Face Mask Boxes and Medicine Boxes. So you need to choose best and elegant styles boxes and company material. Thanks

    ReplyDelete
  29. Guider ManMay 7, 2021 at 11:01 AM

    These days every brand and companies are moving towards custom boxes for products safe packaging. These boxes have customization options and long lasting durability which are best for customers satistying.

    ReplyDelete
  30. Custom Packaging SolutionJune 1, 2021 at 2:32 AM

    This comment has been removed by the author.

    ReplyDelete
  31. shezankhatriJune 15, 2021 at 2:13 AM

    I don t have the time at the moment to fully read your site but I have bookmarked it and also add your RSS feeds. I will be back in a day or two. thanks for a great site. 約會

    ReplyDelete
  32. 5GBPS USB 3.0 Extender For PC / LaptopJune 24, 2021 at 7:16 AM

    Great article but please inform abou can we use USB Female to Female Connector
     in PC

    ReplyDelete
  33. Abogados tarjetas revolving ValenciaJuly 16, 2021 at 4:24 PM

    Las Abogados tarjetas revolving Valencia suponen una modalidad distinta a las tarjetas de crédito de toda la vida. Estas, además de por otros aspectos, se distinguen por el método de pago, que se realiza mediante un sistema aplazado en el que se ha de liquidar, como mínimo, del 3 % al 5 % de la deuda o una cuota fija mensual.

    ReplyDelete
  34. Marketing ExpertJuly 28, 2021 at 4:52 AM

    The marvellous thing our team is doing is utilizing the cardboard, corrugated sheets and kraft paper in a best possible way to present you a vape accessories shipping boxes which gives confidence to the customer to deliver these products anywhere in the world without getting spoiled. The four flaps on the top or the bottom sealed with adhesive tape or glue gives more shelter to your Custom Rigid Cigarette Boxes . Whtaever the size is required, make our saleman note down, we creat the boxes with exact measures which has been given by the customers.

    ReplyDelete
  35. gastric sleeve turkeyJuly 29, 2021 at 7:47 AM

    obesity surgery turkey
    Gastric sleeve surgery is a safe and effective surgical weight loss method that allows people with obesity problems to lose weight which is done under general anesthesia. Laparoscopic surgery is the most commonly used surgery today and is performed through a laparoscope, which means that the surgery will be performed on a small incision in the upper abdomen. The procedure involves removing about 80 percent of the stomach so that the rest remains in the form of a tube, no changes are made to the intestines..

    ReplyDelete
  36. Jawad AhmedAugust 21, 2021 at 12:31 AM

    If your looking for Online Illinois license plate sticker renewals then you have need to come to the right place.We offer the fastest Illinois license plate sticker renewals in the state. https://onohosting.com/

    ReplyDelete
  37. SEO ExpertNovember 1, 2021 at 11:23 AM

    I’m going to read this. I’ll be sure to come back. thanks for sharing. and also This article gives the light in which we can observe the reality. this is very nice one and gives indepth information. thanks for this nice article... Seo Expert

    ReplyDelete
  38. jemmeyNovember 27, 2021 at 4:15 AM

    Nice post. I was checking constantly this blog and I’m impressed! Extremely useful info specially the last part I care for such information a lot. I was seeking this certain info for a long time. Thank you and good luck. blog

    ReplyDelete
  39. AmeliaDecember 20, 2021 at 5:12 AM

    Nice BLog! there are more ADUs in Vancouver than California

    ReplyDelete
  40. Jack LeoDecember 20, 2021 at 12:30 PM

    The feature of best custom cardboard cigarette boxes made by boxesxperthub.us can keep you away from this uncertain condition and make your impression best on the customers. So your artwork, shapes, sizes, color scheming, quality, and turnaround time everything matters to us.

    ReplyDelete
  41. Best Custom BoxesDecember 20, 2021 at 1:15 PM

    The fashion for cigarette packaging has changed dramatically and it's not just the brands, but their cigarette consumers also require unique and exciting cigarette packaging and are on the searching for companies that offer the same. Therefore, Our cigarette packaging proves that your business is adaptable and flexible when it comes to applying technologies to satisfy the needs of their clients.

    ReplyDelete
  42. packhitpackagingDecember 27, 2021 at 9:42 AM


    Such a nice post thanks for sharing with us keep up the good work.
    CBD Boxes USA

    ReplyDelete
  43. IDAblogFebruary 27, 2022 at 12:09 AM

    wow, great, I was wondering how to cure acne naturally. and found your site by google, learned a lot, now i’m a bit clear. I’ve bookmark your site and also add rss. keep us updated. Slot Gacor

    ReplyDelete
  44. AryarowanApril 13, 2022 at 3:03 AM

    Thank you for your fantastic, one-of-a-kind, and original article. I've tried numerous times to find clear information on this subject. You've contributed to making this both fascinating and understandable. Read more:Packaging boxes

    ReplyDelete
  45. mukkarramsoomroApril 25, 2022 at 2:01 AM

    Welcome to the party of my life here you will learn everything about me. SEO Company Toronto

    ReplyDelete

Subscribe to: Post Comments (Atom)

Iklan Atas Artikel

Iklan Tengah Artikel 1

Iklan Tengah Artikel 2

Iklan Bawah Artikel