vBulletin 4.x.x and 5.x.x Upgrade 0day Exploit

Selamat malam sobat SMGBH , kayaknya dunia underground saat ini baru rame-ramenya Exploit vBulletin yaaa, ya udah dah ikut-ikutan ngesahre nih :P

[+] Dork [+]

Inurl://install/upgrade.php
intext:vBulletin 4.2.1 Upgrade System
intext:vbulletin-style.xml

[+] Langkah - Langkah [+]

1. Masukan expoit :/install/upgrade.php
#localhost/path//install/upgrade.php


Tampilan akan seperti ini


https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4Gq3UVA58PDTHs2jOtPNzrSV6tRNHZxAQ5w2fVGltE9mSGW2UUvL8BSaXXw99z2yfrw3fWvG8J7RAFfZaQ2o0KTn-4osx6Dvu5hyGZV2rWEXrgzfqZW-pc0ANjs_iTVXyWU8a89xzhuCf/s320/Screenshot-1.png
2. Kemudian tekan CTRL + U dan cari Customer ID nya :)

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgL7S-r3DRXAvnbHa_5wlc_2cttrlAWNTlcgCeNrTk1c-fPD01Nh_j_V2sYhs747PCa8g2WxgiSFL54O3K7zZ-JusGxnQYN3Xgf__AuODtdPg8UjP-vCdMlLvC89KpnYB0F133TUz9s7GF0/s320/Screenshot-2.png

3. Setelah itu, buka vBullein 0day disini, lalu masukan Costumer ID dan data lainnya :)
website diisi, contoh : http://bimo-cyber.org/install/upgrade.php

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQW5ixBoDUmoWqSFn5Tmm9wuj5IQXoDPubL9CZussjPLPEsBew5m9G01McO_6tCZQyFmgtyJk4F-WqSeAa0NLgiYG3H72w2JFn7n5Fz8ETjW8E81ezZ_hFs-Roy1C8Knng1h1o1x0egN9t/s320/Screenshot-3.png

4. Setelah itu klik Inject Admin, maka tampilan akan seperti berikut 

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjg_ANHmQpJ8WtIp7Z1crXa3Uli0l3Fo2MXHqMJyXJrD4JhECl2kYVkJ9aR5HlxzBs8W4nmaRIQ42EhckjStlxsQ2kAExEmHVVyvRUdLHXjyazV19_vILaQFIQ_lVHbkIY4Ti076N_eZGKQ/s320/Screenshot-4.png

5. Nah sekarang tinggal login aja deh, login admin vBulletin adalah : /admincp/
#contoh : http://bimo-cyber.org/admincp/

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6QNKYRBDqNXL4iPxqRSvZYnfyFY0fIoEHZh824cRYrgKylLCPGkmScqfFux1yQp3N-SZbD6j4z-B3YYloK7C48q8sr16ar4e_8MBp64icrxwl169xe3IzsykOZy-ChXkvJN2oEGaQJAB9/s320/Screenshot.png


Anda baru saja membaca artikel yang berkategori Defacing dengan judul vBulletin 4.x.x and 5.x.x Upgrade 0day Exploit. Anda bisa bookmark halaman ini dengan URL http://smg-blackhat.blogspot.com/2013/10/vbulletin-4xx-and-5xx-upgrade-0day.html. Terima kasih!
Ditulis oleh: Cybertrone - Sunday 13 October 2013

Belum ada komentar untuk "vBulletin 4.x.x and 5.x.x Upgrade 0day Exploit"

Post a Comment