Deface Poc Elfinder

Hallo Lort comeback sama mimin Saddam21

Kali ini gw mo kasih tutor lagi nih yaitu tutor Deface Poc Elfinder

Bahan:

-Hp/Pc

-Internet

-Chrome/Browser

-Dork

-Exploit

-Sc Deface

Dork:

inurl: “elfinder / elfinder.html”

inurl:/elfinder/elfinder.php.html

inurl:/elfinder/files/

inurl:/_file-manager/php/connector.php

Kembangin lagi make otak heker kalian

Exploit:

http://site.com/%5Bpath%5D/elfinder/elfinder.html

http://site.com/%5Bpath%5D/elfinder/elfinder.php.html

Karna gua udah ada live target jadi ga usah ngedork lagi

Target

http://euromed.com.eg/sites/all/libraries/elfinder/elfinder.php.html

Pertama kalian dorking dulu. (Karna mimin ada live target jadi mimin pakai live target)

Jika tampilan seperti di atas maka vuln...

Bang gimana cara upload sc kita? Shell kita? Kalian klik yang ada gambar panah lalu di upload

Mimin bakal upload html saja

Jika sudah klik oke.

Jika sudah terupload maka ada nama file kita di web.

Cara akses?

http://target.com.eg/sites/all/libraries/elfinder/files/scluh.html

Contoh:

http://euromed.com.eg/sites/all/libraries/elfinder/files/read.html

Jangan lupa subscribe channel team kami.