Upload Webshell from Uploadify Plugin

by kod0kk - 10-13-2016 at 07:44 AM
Junior Member
Posts:
4
Joined:
Apr 2016
Likes:
0
Reputation:
0
2 Year Of Service
#1
OP
Posted: 10-13-2016, 07:44 AM
Hallo member disini sekalian, first thread disini nih :)  jadi kalo ada salah kata atau apapun mohon koreksinya ya para suhu disini ..

Oke kali ini gw bakalan bahas gimana cara kita upload backdoor lewat plugin yang namanya uploadify, caranya simple sih. Cuman modal buat form lalu arahin actionnya ke file uploadify.php. Sorry untuk dork nya gw gak tau  :( soalnya ini gw scan web di tempat kerja gw, terus nemu folder uploadify, mungkin para suhu bisa nambahin gimana cari target uploadify berdasarkan dork nya

Step :
[spoiler]
1. Cari directory uploadify di web server

[Image: thumbnail?e=2rXIGtH7OYZDh359JhujWK_-uleG...hMigLNqlHw]


2. Buat form, arahkan actionnya ke file uploadify.php pada webserver target, isi value dari folder sesuai dengan kemana backdoor akan kita upload, disini gw pilih di folder /js

[Image: thumbnail?e=NcphF4Xq3eN8GxmWnLOigxNbsMtu...KWHxe25R1g]


3. Backdoor berhasil diupload, cek ke folder /js, disana ada file aa.php backdoor yang tadi saya upload :)

[Image: thumbnail?e=3fkE_9x04PQu3ML0NoAiWTnm7z5k...1992am3AWY]


[/spoiler]

Sekian tutor sederhana dari gw ini, mohon kalo ada salah kata atau apapun deh gw minta koreksi dari para suhu disini sekalian, thanks before :D


kod0kk
Reply
Find Posts
Junior Member
Posts:
1
Joined:
Oct 2016
Likes:
0
Reputation:
0
1 Year of Service
#2
Posted: 10-13-2016, 12:41 PM
wahh nice post gan
Reply
Find Posts
Junior Member
Posts:
2
Joined:
Oct 2016
Likes:
0
Reputation:
0
1 Year of Service
#3
Posted: 10-16-2016, 12:00 AM
uploadify itu kalo gak salah, jQuery plugin file uploader. jadi dork untuk pencarian situs-situs "target" pasti tidak bisa sembarangan, dikarenakan telah difilter oleh para mesin pencarian. CMIIW


Code:
$(function() {
    $("#file_upload_1").uploadify({
        height        : 30,
        swf           : '/uploadify/uploadify.swf',
        uploader      : '/uploadify/uploadify.php',
        width         : 120
    });
});
Reply
Find Posts
Junior Member
Posts:
4
Joined:
Apr 2016
Likes:
0
Reputation:
0
2 Year Of Service
#4
OP
Posted: 10-18-2016, 01:52 AM
(10-16-2016, 12:00 AM)ystrd Wrote: uploadify itu kalo gak salah, jQuery plugin file uploader. jadi dork untuk pencarian situs-situs "target" pasti tidak bisa sembarangan, dikarenakan telah difilter oleh para mesin pencarian. CMIIW


Code:
$(function() {
    $("#file_upload_1").uploadify({
        height        : 30,
        swf           : '/uploadify/uploadify.swf',
        uploader      : '/uploadify/uploadify.php',
        width         : 120
    });
});

wah jadi kalo mau dorking uploadify pasti susah banget ya gan ? dan kemungkinan malah gak bisa ? oke oke thanks pencerahannya suhu :) :)
Reply
Find Posts
Junior Member
Posts:
2
Joined:
Aug 2017
Likes:
0
Reputation:
0
#5
Posted: 08-19-2017, 06:35 AM
ane blom paham mas ,, bisa di jelaskan lbih anu lagi ?
Reply
Find Posts
Register an account or login to reply
Create an account
Create a free account today and start posting right away. It only takes a few seconds.
Login
Log into an existing account.
1 Guest(s)