Thursday 15 May 2014

Html editor File Upload vulnerability

Posted by Sahil Posted on 09:32 5 comments

             Adding Deface Page or Images in Low Security Websites




  How To search for these Low security Sites that are vulnerable to uploading files .
1. Go to Google search .
2. Search for following words . 
  •          cms/HTMLEditor/editor/filemanager/connectors/test.html 
  •          inurl:/HTMLEditor/editor/ 
  •          inurl:/HTMLEditor/editor//filemanager/"
  •          inurl:/HTMLEditor/editor//filemanager//connectors/"

     How Will the Result's URL look like ?
  •  http://website/HTMLEditor/editor/filemanager/connectors/uploadtest.html
  •  http://website/path/HTMLEditor/editor/filemanager/connectors/uploadtest.html
  • http://www.website.com/cms/HTMLEditor/editor/filemanager/connectors/test.html
                         Now What ?






1. From the results , choose one which looks like the above link .
2.  Then choose the link named uploadtest.htm .
3. Once you open the uploadtest.htm , You can change connector to PHP        and upload files like .jpg , .png etc
4. Some sites even let you upload html or php . 

If You can't upload Html , I suggest you to upload image file which looks like your deface page .. ;)





Adding Webpage / Background music in Facebook Page tab . . . Click Here
Categories:

5 comments:

  1. Unknown29 December 2015 at 22:11

    glad to read this, great works..!!
    PC Softwares Free Download | windows 10 serial key

    ReplyDelete
  2. arif11 December 2019 at 05:16

    For many people this is important, so check out my profile: buy real instagram followers from usa

    ReplyDelete
  3. felisha green4 August 2020 at 09:17


    Hello everyone, i would like to share my experience with you all, I lost over 100 thousand dollars to all these fake so called BO merchants , after several attempts in trying to recover my money all efforts failed, i was looking through the page of the internet then i saw cybergoldenhacker they were recommended as a good and reputable company so i reach out to them, to my surprise i was able to to recover all my funds
    contact: cybergoldenhacker at gmail dot com

    ReplyDelete
  4. felisha green3 November 2020 at 17:06

    Do you need to increase your credit score?
    Do you intend to upgrade your school grade?
    Do you want to hack your cheating spouse Email, whatsapp, Facebook, instagram or any social network?
    Do you need any information concerning any database.
    Do you need to retrieve deleted files?
    Do you need to clear your criminal records or DMV?
    Do you want to remove any site or link from any blog?
    you should contact this hacker, he is reliable and good at the hack jobs..
    contact : cybergoldenhacker at gmail dot com


    ReplyDelete

Subscribe to: Post Comments (Atom)