Bypass ADMIN PANEL

HOW TO BYPASS Admin Panel using only NoRedirect in Mozilla Firefox?

First, you need to download an older version of Mozilla Firefox, like Mozilla Firefox 56.0.2 Why? Because the NoRedirect we will use are not compatible in the Mozilla Firefox Quantum.


INSTALLING FIREFOX:

Note: In installing your Mozilla Firefox 56.0.2, be sure that the maintenance service will not be installed to prevent the older version to update, so I recommend to use Custom ("For Advanced or Experienced Users").

ADDING NoRedirect-addons FOR FIREFOX:

Step 1: Go to the about:addons in Firefox and Search for NoRedirect and click +Add to Firefox button.

Now we'll test it and use the NoRedirect to an admin panel.

FINDING A VULNERABLE ADMIN PANEL:

Step 1: Go to Google and search "admin login.php", in this example I will use 'crcsrilanka.org/admin/login.php'.
Step 2: Change the 'login.php' into 'index.php', if this one redirects you to crcsrilanka.org/admin/login.php' then it is vulnerable and we can bypass it.

USING NoRedirect IN BYPASSING THE ADMIN PANEL:

Step 1: Right click on the header of the Firefox and check Menu Bar so that you can see the Tools at the top.

Step 2: Go to the 'crcsrilanka.org/admin/login)php' and copy 'crcsrilanka.com/admin'.

Step 3: Click the Tools at the top of Mozilla Firefox.

Step 4: Choose NoRedirect or press 'R' button and a pop-up box will appear.

Step 5: Click 'Add'.

Step 6: Paste the copied URL Link at the Blank Space.

Step 7: Click 'Add' again and click 'OK'.

Step 8: Change the 'login.php' again and change it with 'index.php'.

And Tada!!!!!! You've bypassed the Admin Panel now and you can do whatever you want, like changing the pictures in albums, posting events, or defacing the site by uploading shells.