Thursday, February 2, 2012

KindEdior Remote File Upload exploit



Google Dork :  intitle:index of? inurl:kindeditor (or) inurl:examples/uploadbutton.html

 exploit:http://www.vulnrabewebsite.com/path/kindeditor/examples/uploadbutton.html

ကြ်န္ေတာ္တုိ ့ ေတြ links ေပါင္းမ်ားစြာကိုေတြ ့ရမွာျဖစ္ပါတယ္.. မိမိၾကိုက္ႏွစ္သက္ရာ လင့္တစ္ခုကိုေရႊးလုိက္ပါ...
links တစ္ခုကိုနုိပ္ျပီးတာနဲ ့ ကြ်န္ေတာ္တို ့ေတြ သူတုိ ့ဆုိဒ္ ရဲ  ့အခ်က္အလက္ေတြကို ေတြ ့ျမင္ရမွာျဖစ္ပါတယ္..
တစ္ခ်ုဳိ ့ကေတာ့ သူတုိ ့လုိခ်င္တဲ့ ဖုိင္ေတြကို ခုိးကူးယူသြားၾကတာပါ... ဒါကလည္း မိမိ ၇ွာရင္ ရွာနုိင္သလို ရပါတယ္..
ကြ်န္ေတာ္ကေတာ့ ဖုိင္ေတြကို upload တင္ျပီး attack လုပ္နုိင္တဲ့နည္းကိုဘဲ ဦးတည္ျပီး ေျပာျပသြားမွာျဖစ္ပါတယ္..
အရင္ဆုံးကြ်န္ေတာ္တုိ ့ ေတြ 
kindeditor/examples/uploadbutton.html
အပုိင္းကိုအရင္ေတြ ့ေအာင္ရွာပါ..
မရွာတတ္ရင္လင့္ေနာက္မွာ အဲ့အပုိင္းေလးကို ထည့္လုိက္ပါ...
http://www.someone.com/kindeditor/examples/uploadbutton.html
ျပီးရင္ကြ်န္ေတာ္တုိ ့ upload box ေလးကိုေတြ ့ရမွာျဖစ္ပါတယ.္... မိိမိ တင္ခ်င္တဲ့ ဖုိင္ကို တင္လုိက္ပါ..
automaticly uploaded တင္ေပးမွာျဖစ္ပါတယ္.. တင္ျပီးတာနဲ ့ ေဘာက္ေလးတည္းမွာ လင့္က်လာမွာျဖစ္ပါတယ္..

themes/default/js/kindeditor/attached/file/20120202/20120202081459_55164.htm
လုိမ်ဳိးေတြက်လာပါလိမ့္မယ္..
ဒါဆုိရင္ အရင္ လင့္ကိုထည့္ပါ..
www.someone.com/themes/default/js/kindeditor/attached/file/20120202/20120202081459_55164.htm
 လုိမ်ဳိးေပ့ါ..
ေအာက္ကလင့္ကို သြားၾကည့္လုိက္ပါ..

http://www.arimlab.com/themes/default/js/kindeditor/attached/file/20120202/20120202081459_55164.htm

လင့္ေတြကတစ္ေယာက္နဲ ့တစ္ေယာက္တူခ်င္မွတူမွာျဖစ္ပါတယ္...


source by mmcracker.multiply.com

ROCK FOREVER (MUSIC)

Pageviewers

CBOX

Manutd-Results

Label

Android (3) autorun (3) Backtrack (8) batch file (19) blogger (10) Botnet (2) browser (5) Brute Force (6) cafezee (2) cmd (5) Cookies (2) crack (12) Cracking (2) crypter (7) DDos (20) deepfreeze (4) defacing (1) defence (16) domain (4) Dos (9) downloader (4) ebomb (2) ebook (48) Exploit (26) firewall (3) game (2) gmail (11) google hack (16) Hacking Show (3) Hash (4) hosting (1) icon changer (1) ip adress (6) Keygen (1) keylogger (8) knowledge (67) locker (1) maintainence (8) network (17) news (31) other (35) passwoard viewer (7) password (12) Philosophy (6) Phishing (8) premium account (2) proxy (7) RAT (10) run commands (4) script (27) Shell code (10) shortcut Key (2) SMTP ports (1) social engineering (7) spammer (1) SQL Injection (30) Stealer.crack (5) tools (125) Tools Pack (4) tutorial (107) USB (3) virus (32) website (84) WiFi (4) word list (2)

Blogger templates

picoodle.com

Blogger news

Print Friendly and PDF

HOW IS MY SITE?

Powered by Blogger.

Blog Archive

Followers

About Me

My Photo
Hacking= intelligent+techonology+psychology