Chiangraientersoft HTML Injection
Hello guys :D Today i'm going to share to you about html injection. This method works on Thailand websites mostly. Let's get it started. :)
Finding Vulnerable Target
Dork :
inurl:Qread.php?id_ques=
inurl:webboard/Qread.php?id_ques=
Vulnerable at 'Qform.php' at Field Subject/Title
Exploit:
/webboard/Qform.php
/board/Qform.php
1- Firstly, choose any dork and paste in Google.
2- As usual, pick any site. DUH! :P
Exploiting Target
1- Paste the exploit at the end of the url
Example:
http://www.nungphaman.com/webboard/Qform.php
And you will get something like this
2- Fill up the form, you can choose any file as the attachment. i'm so lazy so i just upload a .jpeg file :P
After your file is successfully uploaded, it would be listed at www.site.com/board/ or www.site.com/webboard/
Click on your post and you will see it :P
Live Demo:
http://www.nungphaman.com/board/Qread.php?id_ques=104
That's all tutorial from me, :)
Black Eagle
~
samedi 4 janvier 2014
0
commentaires
Articles
