21 lines
No EOL
1.2 KiB
Text
21 lines
No EOL
1.2 KiB
Text
=========================================================================================================
|
|
[#] Type : Joomla Component com_jfuploader < 2.12 Remote File Upload
|
|
[#] Author : Setr0nix
|
|
[#] Home : www.Setr0nix.com
|
|
[#] Contact : Admin@Setr0nix.com
|
|
=========================================================================================================
|
|
|
|
[#] Exploit :
|
|
1. Register
|
|
2. http://127.0.0.1/index.php?option=com_jfuploader&Itemid=[Itemid]
|
|
3. Download One gif Image ( Example : http://www.google.com/images/logo.gif )
|
|
4. Open logo.gif In Notepad++ And Got to Last Line
|
|
5. Copy And Past You PHP Code After The Last Line ( Don't Delete Any Thing Of Image Code )
|
|
6. Save It , Ctrl + S
|
|
7. Rename logo.gif To logo.php.gif And Upload It From com_jfuploader
|
|
8. To Run Your Uploaded File Go To This Link : http://127.0.0.1/files/YourUsername/logo.php.gif
|
|
|
|
=========================================================================================================
|
|
[#] S T T :
|
|
All Iranian Hackers , Offensive Security , Inj3ct0r , SecurityReason
|
|
========================================================================================================= |