Deface Web Dengan FCK Editor (Newbie Only)

Kali ini saya akan sharing deface web dengan FCK Editor. FCK Editor adalah sebuah tampilan website untuk mengupload sebuah file ke dalam sebuah web site atau server.

Ini adalah sebuah tampilan FCK Editor :

Langsung saja kita menuju tutorial, yaitu :

Dork : "inurl:admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html"
atau
"inurl=Powered by Opencart".
(tanpa tanda kutip)

Jika sudah ketemu websitenya, contoh:
www.target.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html.
Ganti connector menjadi "PHP"

Setelah itu upload file HTML anda.

Contoh hasil:
www.superbikecarbonparts.com//Mr-Noname.html

Dan ini adalah daftar website yang vulnerable :

1. http://www.xuhongmrw.com/theanimeshop/ad.../test.html
2. http://www.ugsdeportes.com.ar//admin/vie.../test.html
3. http://vinosysaboresdelsol.com.ar/catalo.../test.html
4. http://www.dacdisenios.com.ar/tienda//ad.../test.html
5. http://www.lubetlenceria.com/ventas/admi.../test.html
6. http://www.ugsdeportes.com.ar/admin/view.../test.html
7. http://www.dacdisenios.com.ar/tienda/adm.../test.html
8. http://www.store-fourseasons.com/opencar.../test.html
9. http://www.ottimotohk.com/admin/view/jav.../test.html
10. http://www.store-fourseasons.com/opencar.../test.html
11. http://www.brooktroutstore.com.hk/admin/.../test.html
12. http://www.karens-shop.com/admin/view/ja.../test.html
13. http://hana-yi.com/admin/view/javascript.../test.html
14. http://www.xpalpower.com.tw/opencart//ad.../test.html
15. http://www.thespaberry.com/store//admin/.../test.html
16. http://www.fresh89.com/swag/admin/view/j.../test.html
17. http://www.connectix.ca/admin/view/javas.../test.html
18. http://baliclothingexporter.com/store/ad.../test.html
19. http://www.binksyandbobo.com/shop//admin.../test.html
20. http://thebestnetbook.net/shop//admin/vi.../test.html
21. http://livingpraise.org/OpenCart/admin/v.../test.html
22. http://www.123alternatives.net/opcart//a.../test.html
23. http://leszak.net/opcart//admin/view/jav.../test.html
24. http://babytaif.com/admin/view/javascrip.../test.html
25. http://ciaoservices.com/store/admin/view.../test.html
26. http://77.93.249.148/upload//admin/view/.../test.html
27. http://www.mornord.altervista.org/php5//.../test.html
28. http://www.medinatsrl.com/shop//admin/vi.../test.html
29. http://www.eolowindsurf.com/eolotheshop/.../test.html
30. http://www.medinatsrl.com/shop/admin/vie.../test.html
31. http://www.pestoportofino.com/admin/view.../test.html
32. http://www.friulianproducts.com/Store3//.../test.html
33. http://www.planespares.com/admin/view/ja.../test.html
34. http://www.electronicaymas.com/admin/vie.../test.html
35. http://www.ufficio2000.biz/shop/admin/vi.../test.html
36. http://www.computer-planet.it//admin/vie.../test.html
37. http://www.prodottimolisani.it/admin/vie.../test.html
38. http://www.pccommerce.it/shop//admin/vie.../test.html
39. http://www.electronicaymas.com/admin/vie.../test.html
40. http://www.mornord.altervista.org/php5/a.../test.html
41. http://www.iostampo.eu/shop/admin/view/j.../test.html
42. http://www.disulmona.com/store/admin/vie.../test.html
43. http://www.nwtech.it/digitime/admin/view.../test.html
44. http://www.piscine-atlantis.com/store/ad.../test.html
45. http://www.secret0.com/admin/view/javasc.../test.html
46. http://wolfi.it/wolfi/admin/view/javascr.../test.html
47. http://www.disulmona.com/store/admin/vie.../test.html
48. http://www.superbikecarbonparts.com//adm.../test.html
49. http://www.nwtech.it/digitime//admin/vie.../test.html
50. http://www.assistenzameccanica.it/admin/.../test.html
51. http://www.vendografica.biz/admin/view/j.../test.html
52. http://www.iostampo.eu/shop/admin/view/j.../test.html
53. http://www.oriensanimali.com/public/ec/a.../test.html
54. http://vshop.vitagelworld.com/admin/view.../test.html
55. http://plusweb.bedestencarsi.com/opencar.../test.html
56. http://shop.faye-ligui.com/admin/view/ja.../test.html
57. http://www.biowoman-us.com/admin/view/ja.../test.html
58. http://myselfforward.com/admin/view/java.../test.html
59. http://citynkr.net/admin/view/javascript.../test.html
60. http://www.library-mobile.com/admin/view.../test.html
61. http://thailandcarving.com/admin/view/ja.../test.html
62. http://harddisktohome.in.th/admin/view/j.../test.html
63. http://www.pattayaasset.com/admin/view/j.../test.html
64. http://myselfforward.com//admin/view/jav.../test.html
65. http://harddisktohome.in.th/admin/view/j.../test.html
66. http://www.alwasat4pc.com/shop/admin/vie.../test.html
67. http://www.e-cigareta.ch/admin/view/java.../test.html
68. http://ecommerce.ticinodesign.ch/admin/v.../test.html
69. http://www.chesspoint.ch/admin/view/java.../test.html
70. http://www.windelbaby.ch/admin/view/java.../test.html
71. http://www.e-cigareta.ch//admin/view/jav.../test.html
72. http://www.mammarosa.com.ec/mmr/admin/vi.../test.html
73. http://prodrivershop.com/admin/view/java.../test.html
74. http://www.asripahshop.com/v2//admin/vie.../test.html
75. http://112.137.163.164/xkl//admin/view/j.../test.html
76. http://morethanwords.my/
77. http://www.spacetytanium.net/admin/view/.../test.html
78. http://www.avocadogenie.com/admin/view/j.../test.html
79. http://www.bestonlinediscounts.net/admin.../test.html
80. http://eesnet.org/admin/view/javascript/.../test.html
81. http://hobby-fillately.com/admin/view/ja.../test.html
82. http://www.granmasantiques.com/admin/vie.../test.html
83. http://zhongvua.com/admin/view/javascrip.../test.html
84. http://mcgearusa.com/admin/view/javascri.../test.html
85. http://utahflowers.net/admin/view/javasc.../test.html
86. http://amourcristallis.com/admin/view/ja.../test.html
87. http://wiretek.net/admin/view/javascript.../test.html
88. http://www.shotgunstock.net/admin/view/j.../test.html
89. http://www.justhouda.com/oc/admin/view/j.../test.html
90. http://virtualgeorge.info/132test/admin/.../test.html

Sekian dari saya terima kasih ^_^

Share this

Author : Unknown

Related Posts