Maaf, situs ini tidak berfungsi dengan baik tanpa JavaScript.

PHP File Manager Vulnerability

Oleh chmood

September 01, 2015

Assalamualaikum Sahabat T.I Sniper

Bertemu saya lagi Fikri a.k.a BadBoy hehe.

Saya tidak pernah bosan untuk memberikan materi terhadap kalian.

Apa lagi seputar deface

Okay langsung saja tanpa membuang waktu.

Dork: intitle:File Manager inurl:”fm.php”

*Gunain dork yg lain utk mndaptkan bnyk target.

Exploit:

– http://[localhost]/Patch/fm.php

Video:

– Download Video Deface

*video itu saya upload dr hasil deface saya, jadi cepet di download ya.

Live Target:

– http://www.ipstudy.com/campus/co_img/fm.php

– http://support.millum.no/fm.php

– soundwave2006.bplaced.net/altes/filemanager.php

– www.baechu.org/coun/upload/custom/fm.html

Preview:

– Klik view aja, nanti terbuka window baru.

Wah, kayaknya cukup sampe segitu dulu ya.

Saya harap bisa di terima dengan baik tulisan tangan saya.
Thanks to: Palembang Hacker Link | Binus Hacker | Sharp Hacker | Turkish Cyber | All

Indonesia Forum Hackers | All Muslim Hackers | All my Friends in Palembang |
Greetz to my love: Tria Wulandari :*

Referensi:

– http://www.fikrifakhrezy.com/2011/10/php-file-manager-shell-upload-vuln.html

Okay, semoga harimu menyenangkan

Wass

Category

Postingan Lebih Baru Postingan Lama


<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/562952797-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY6nieGr7l0WWYQBYaDeBHRTcCjd6A:1695919777659';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d6591049221521879804','//www.75n1.net/2015/09/php-file-manager-vulnerability.html','6591049221521879804');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '6591049221521879804', 'title': 'T.I Sniper', 'url': 'https://www.75n1.net/2015/09/php-file-manager-vulnerability.html', 'canonicalUrl': 'https://www.75n1.net/2015/09/php-file-manager-vulnerability.html', 'homepageUrl': 'https://www.75n1.net/', 'searchUrl': 'https://www.75n1.net/search', 'canonicalHomepageUrl': 'https://www.75n1.net/', 'blogspotFaviconUrl': 'https://www.75n1.net/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': true, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'G-5BKSEB8T0Z', 'analytics4': true, 'encoding': 'UTF-8', 'locale': 'id', 'localeUnderscoreDelimited': 'id', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22T.I Sniper - Atom\x22 href\x3d\x22https://www.75n1.net/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22T.I Sniper - RSS\x22 href\x3d\x22https://www.75n1.net/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22T.I Sniper - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/6591049221521879804/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22T.I Sniper - Atom\x22 href\x3d\x22https://www.75n1.net/feeds/5277923962248278465/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-6383524082178772', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/9137600d2115a005', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Dapatkan link', 'key': 'link', 'shareMessage': 'Dapatkan link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Bagikan ke Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Bagikan ke Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Bagikan ke Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27id\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': true, 'jumpLinkMessage': 'Lihat Selengkapnya', 'pageType': 'item', 'postId': '5277923962248278465', 'postImageUrl': 'http://s.w.org/images/core/emoji/72x72/1f600.png', 'pageName': 'PHP File Manager Vulnerability', 'pageTitle': 'T.I Sniper: PHP File Manager Vulnerability', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Tautan disalin ke papan klip!', 'ok': 'Oke', 'postLink': 'Tautan Pos'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Khusus', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'PHP File Manager Vulnerability', 'description': 'T.I Sniper\n#apps #motivasi #sukses #bisnis #bisnisonline #pengusaha #profit #technology #free dollar business every day #digitalexchangeid', 'featuredImage': 'https://lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vQoE46H6ol-qnbU5yaZVpUQ4frQNAJYiP5OYgdGiPPTVKlv4U7M2cfw6gJD8yS-8Hu7F_aiZYRfRqnqDRdLphIvBwFLHinlPO32uGJjdvlAbfiIA', 'url': 'https://www.75n1.net/2015/09/php-file-manager-vulnerability.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 5277923962248278465}}, {'name': 'widgets', 'data': [{'title': 'JavaScript Variables', 'type': 'LinkList', 'sectionId': 'elcreative_panel_top', 'id': 'LinkList995'}, {'title': 'CSS Options', 'type': 'LinkList', 'sectionId': 'elcreative_panel_top', 'id': 'LinkList996'}, {'title': 'Custom SVG Icons', 'type': 'LinkList', 'sectionId': 'elcreative_panel_top', 'id': 'LinkList998'}, {'title': 'Custom SVG Pack (SVG Sprites)', 'type': 'HTML', 'sectionId': 'elcreative_panel_top', 'id': 'HTML994'}, {'title': 'T.I Sniper (Header)', 'type': 'Header', 'sectionId': 'section_app_bar', 'id': 'Header1'}, {'title': 'Tabbed Menu', 'type': 'PageList', 'sectionId': 'section_tabbed_menu', 'id': 'PageList998'}, {'title': 'Navigation Drawer Menu', 'type': 'LinkList', 'sectionId': 'section_navigation', 'id': 'LinkList999'}, {'title': 'More Menu', 'type': 'PageList', 'sectionId': 'section_navigation', 'id': 'PageList999'}, {'title': 'elcreativeTicker', 'type': 'LinkList', 'sectionId': 'section_main_top_widget', 'id': 'LinkList8'}, {'title': 'elcreativeCarousel', 'type': 'LinkList', 'sectionId': 'section_main_top_widget', 'id': 'LinkList2'}, {'title': 'elcreativeGrid', 'type': 'LinkList', 'sectionId': 'section_main_top_widget', 'id': 'LinkList3'}, {'title': '', 'type': 'HTML', 'sectionId': 'section_main_top_widget', 'id': 'HTML2'}, {'title': 'Post Ad Slot (Top)', 'type': 'HTML', 'sectionId': 'section_main_widget', 'id': 'HTML996'}, {'title': 'Postingan Blog', 'type': 'Blog', 'sectionId': 'section_main_widget', 'id': 'Blog1', 'posts': [{'id': '5277923962248278465', 'title': 'PHP File Manager Vulnerability', 'featuredImage': 'https://lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vQoE46H6ol-qnbU5yaZVpUQ4frQNAJYiP5OYgdGiPPTVKlv4U7M2cfw6gJD8yS-8Hu7F_aiZYRfRqnqDRdLphIvBwFLHinlPO32uGJjdvlAbfiIA', 'showInlineAds': false}], 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'author', 'label': 'Oleh'}, {'name': 'timestamp', 'label': ''}, {'name': 'comments', 'label': 'Komentar'}, {'name': 'icons', 'label': ''}, {'name': 'share', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': 'Category'}]}], 'allBylineItems': [{'name': 'author', 'label': 'Oleh'}, {'name': 'timestamp', 'label': ''}, {'name': 'comments', 'label': 'Komentar'}, {'name': 'icons', 'label': ''}, {'name': 'share', 'label': ''}, {'name': 'labels', 'label': 'Category'}]}, {'title': 'Between Post Ad Slot', 'type': 'HTML', 'sectionId': 'section_main_widget', 'id': 'HTML995'}, {'title': 'Post Ad Slot (Bottom)', 'type': 'HTML', 'sectionId': 'section_main_widget', 'id': 'HTML997'}, {'title': 'elcreativeBlockHero', 'type': 'LinkList', 'sectionId': 'section_main_bottom_widget', 'id': 'LinkList5'}, {'title': 'elcreativeBlockFooter', 'type': 'LinkList', 'sectionId': 'section_main_bottom_widget', 'id': 'LinkList7'}, {'title': '', 'type': 'HTML', 'sectionId': 'section_main_bottom_widget', 'id': 'HTML1'}, {'title': 'elcreativeSocial', 'type': 'LinkList', 'sectionId': 'section_aside_widget', 'id': 'LinkList1'}, {'title': 'elcreativeComment', 'type': 'LinkList', 'sectionId': 'section_aside_widget', 'id': 'LinkList4'}, {'title': 'Translate', 'type': 'Translate', 'sectionId': 'section_aside_widget', 'id': 'Translate1'}, {'title': 'Terpopuler', 'type': 'PopularPosts', 'sectionId': 'section_aside_widget', 'id': 'PopularPosts1', 'posts': [{'title': 'Cara Dapat Backlink dengan Google Dork', 'id': 4618471647357931247}, {'title': 'Backlink dengan Google Dork Seo', 'id': 1029614712689143656}, {'title': 'Lowongan Pekerjaan PT HM Sampoerna Tbk, Hari Ini Agustus 2023', 'id': 9016015704194938524}, {'title': 'Cara Mentera Ulang Truk Tangki BBM', 'id': 5124167344293466576}, {'title': 'DOWNLOAD APP SCRAPEBOX PREMIUM FREE SEO', 'id': 601204630157704678}, {'title': 'Cara Dapat Backlink Edu Gratis', 'id': 1790459385425367288}, {'title': 'Hacking Jcow Social Networking Webserver', 'id': 6827929768928876843}, {'title': 'SEC ADMIN LOGIN DORK SQL LOGIN', 'id': 1070671081507204118}, {'title': 'App Baca Buku Pdf, Epub, Word, Mobi, Kindle, Android Tampa Iklan ReadEra', 'id': 4748466111220910011}, {'title': 'Tata-Tata Cara Mendapatkan Penghasilan dari Blog Hingga Ratusan Juta Bahkan Milyaran per Bulan', 'id': 5224251092851979559}]}, {'title': 'Custom Vanilla JavaScript', 'type': 'HTML', 'sectionId': 'elcreative_panel_bottom', 'id': 'HTML998'}, {'title': 'Custom jQuery Script', 'type': 'HTML', 'sectionId': 'elcreative_panel_bottom', 'id': 'HTML999'}, {'title': 'Formulir Kontak', 'type': 'ContactForm', 'sectionId': 'hidden', 'id': 'ContactForm1'}]}]);
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList995', 'elcreative_panel_top', document.getElementById('LinkList995'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList996', 'elcreative_panel_top', document.getElementById('LinkList996'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList998', 'elcreative_panel_top', document.getElementById('LinkList998'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML994', 'elcreative_panel_top', document.getElementById('HTML994'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'section_app_bar', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList998', 'section_tabbed_menu', document.getElementById('PageList998'), {'title': 'Tabbed Menu', 'links': [{'isCurrentPage': false, 'href': 'http://www.75n1.net/', 'title': 'Exit \ud83c\udfc3\u200d\u2642\ufe0f'}, {'isCurrentPage': false, 'href': 'https://www.75n1.net/p/contact-support.html', 'id': '528839158299513358', 'title': 'Any Questions \ud83d\udce7'}, {'isCurrentPage': false, 'href': 'https://www.75n1.net/2021/12/CARA-MEMBUAT-TULISAN-TERBALIK.html', 'title': 'inverted text \ud83d\udcd1'}], 'mobile': false, 'showPlaceholder': false, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList999', 'section_navigation', document.getElementById('LinkList999'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList999', 'section_navigation', document.getElementById('PageList999'), {'title': 'More Menu', 'links': [{'isCurrentPage': false, 'href': 'http://www.75n1.net/', 'title': 'Beranda'}, {'isCurrentPage': false, 'href': 'https://www.75n1.net/p/dashboard.html', 'id': '6480565890879288711', 'title': 'Dashboard Login'}, {'isCurrentPage': false, 'href': 'https://www.75n1.net/2016/01/niat-hati.html', 'title': 'Kode Etik'}, {'isCurrentPage': false, 'href': 'https://www.75n1.net/2021/12/CARA-MEMBUAT-TULISAN-TERBALIK.html', 'title': 'inverted text'}, {'isCurrentPage': false, 'href': 'https://www.75n1.net/p/contact-support.html', 'id': '528839158299513358', 'title': 'Contact Support'}], 'mobile': false, 'showPlaceholder': false, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList8', 'section_main_top_widget', document.getElementById('LinkList8'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList2', 'section_main_top_widget', document.getElementById('LinkList2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList3', 'section_main_top_widget', document.getElementById('LinkList3'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML2', 'section_main_top_widget', document.getElementById('HTML2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML996', 'section_main_widget', document.getElementById('HTML996'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'section_main_widget', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/3769133935-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/3268905543-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML995', 'section_main_widget', document.getElementById('HTML995'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML997', 'section_main_widget', document.getElementById('HTML997'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList5', 'section_main_bottom_widget', document.getElementById('LinkList5'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList7', 'section_main_bottom_widget', document.getElementById('LinkList7'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML1', 'section_main_bottom_widget', document.getElementById('HTML1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList1', 'section_aside_widget', document.getElementById('LinkList1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList4', 'section_aside_widget', document.getElementById('LinkList4'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_TranslateView', new _WidgetInfo('Translate1', 'section_aside_widget', document.getElementById('Translate1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'section_aside_widget', document.getElementById('PopularPosts1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML998', 'elcreative_panel_bottom', document.getElementById('HTML998'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML999', 'elcreative_panel_bottom', document.getElementById('HTML999'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'hidden', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'Mengirim...', 'contactFormMessageSentMsg': 'Pesan sudah dikirim.', 'contactFormMessageNotSentMsg': 'Pesan tidak dapat dikirim. Coba lagi nanti.', 'contactFormInvalidEmailMsg': 'Alamat email harus valid.', 'contactFormEmptyMessageMsg': 'Bidang pesan harus diisi.', 'title': 'Formulir Kontak', 'blogId': '6591049221521879804', 'contactFormNameMsg': 'Nama', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Pesan', 'contactFormSendMsg': 'Kirim', 'contactFormToken': 'AOuZoY7Zxnj6P-j4KPsUlFUUmznbj2V5cA:1695919777660', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull'));
</script>
</body>
  <!-- Google Tag Manager (noscript) -->
<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-WF7BMJJ"
height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
<!-- End Google Tag Manager (noscript) -->