59 lines
No EOL
1.7 KiB
Text
59 lines
No EOL
1.7 KiB
Text
=====================================================================
|
|
|
|
=========
|
|
_ _ _ _ _ _
|
|
/ \ | | | | / \ | | | |
|
|
/ _ \ | | | | / _ \ | |_| |
|
|
/ ___ \ | |___ | |___ / ___ \ | _ |
|
|
IN THE NAME OF /_/ \_\ |_____| |_____| /_/ \_\ |_| |_|
|
|
|
|
|
|
=====================================================================
|
|
|
|
=========
|
|
[»] ~ Note : This vulnerability allows you to upload if the "storage" file isn't protected with a htaccess file or
|
|
|
|
anything else
|
|
=====================================================================
|
|
|
|
=========
|
|
[»] Mini File Host v1.5 Remote File Upload Vulnerability
|
|
=====================================================================
|
|
|
|
=========
|
|
|
|
[»] Script: [ Mini File Host ]
|
|
[»] Language: [ PHP ]
|
|
[»] Site page: [ Mini File Host v1.5 ]
|
|
[»] Download: [ http://www.hotscripts.com/listing/mini-file-host/ ]
|
|
[»] Founder: [ Mr.Z <tzar.evil@yahoo.com> ]
|
|
[»] Greetz to: [ all muslims , ViRuSMaN ]
|
|
|
|
###########################################################################
|
|
|
|
===[ Exploit ]===
|
|
|
|
Click on "Browse" and select your php shell
|
|
Click Upload
|
|
After it finishs , you will see this meassage (
|
|
|
|
Your file was uploaded!
|
|
|
|
Your download link
|
|
|
|
http://server/script/download.php?file=328shell.php
|
|
|
|
)
|
|
|
|
Copy the new Name of the shell "328shell.php"
|
|
|
|
Now Go to this Url
|
|
|
|
http://server/script/storage/328shell.php
|
|
|
|
if "Storage" wasn't protected your shell will open
|
|
|
|
|
|
Author: Mr.Z <-
|
|
|
|
########################################################################### |