Tutorial Deface Ajax File Manager | File Upload Vulnerabilit

Credits to haurgeulis

This time I will share how to deface the exploits
Ajax File Manager | File Upload Vulnerability .
Exploitnya very easy to put into practice.
Suitable for newbie just learning to deface, rich mine :).
Okay, we just started. Hehehe.

Example:http://dulichhoangnguyen.com/plugins/tinymce/plugins/ajaxfilemanager/ajaxfilemanager.php?page=51

Dork:
inurl: "ajaxfilemanager.php? page =" intitle: "ajax file manager" (developed its own)
. Files ending in .txt Steps: 1. Start search in google with dork targets above. :)



Then upload files pal. File h aru s extension .txt. Sebaagi example, I menguplaod filedengan name Haurgeulis .txt
If so, click the file that was uploaded pal.


 Will open a link where the file is located pal. :)
http://dulichhoangnguyen.com/data/upload/haurgeulis.txt



Here are some site hacked by him :)

http://www.cansigliocard.it/uploads/haurgeulis.txt
http://www.bajkolandiasalazabaw.pl/content/images/haurgeulis.txt
http://www.academconsult.ru/uploaded/haurgeulis.txt
http://dulichhoangnguyen.com/data/upload/haurgeulis.txt