SlideShare ist ein Scribd-Unternehmen logo
1 von 5
Cara Mudah Deface Website Dengan Exploit Joomla JCE Extension | Remote
File Upload Vulnerability
Assalamualaikum...
Salam sejahtera buat kita semua :)
Oke sobat, sebenarnya udah lama sih mau share teknik ini, cuma saya males aja mau nyari
targetnya,, wkwkwk soalnya saya jarang nemu target yg Vuln, jadi males dah,, tapi berkat
bantuan dari temen saya yaitu om Agam yang dengan sukarela memberikan live target yang bisa
sobat gunakan :D jadi mempermudah saya untuk berbagi teknik ini buat sobat2 semua :) Thanks
to Om Agam dan perlu sobat ketahui bahwa pada CMS joomla itu yang paling banyak
ditemukan bugsnya itu di component atau Extensinya, rata2 pasti begitu :)
Udah ah ngomel2nya, langsung saja kita praktekkan :)
Bahan-Bahan :
JCE Exploiter | Download
JCE Exploiter PHP | Download
Dork :
inurl:index.php?option=com_jce site:.br
Live Target :
http://www.spiderdevelopments.com.au/
http://www.libira.co.il/
Udah disiapin kan bahan2nya? lanjut yuk masak2nya? Hajiahh :3
Pertama so pasti sobat harus mencari targetnya dulu di Google dengan menggunakan dork diatas
:) kalo saya udah nemu tuh :D
Lalu Extrack dulu file JCE Exploiternya :)
Buka deh JCE Exploiternya :) dan Selanjutnya masukan Targetnya, lalu klik Start
Nah tuh, udah berhasil :)
Setelah berhasil exploitasinya lalu eksekusi link tersebut :)
Nah, upload aja shell sobat :)
Catatan: "kalo ga bisa upload file .php coba aja upload file .html / .txt :)
Kalo upload shellnya berhasil, tinggal eksekusi shell, trus Tebas dah :D
Cara Kedua
Upload dulu JCE Exploit PHP di Hostingan atau apapun dah :) kalo ga mau repot, sobat bisa
make punya saya aja Disini
Lalu masukkan targetnya :
Hostname : Web Target [tanpa http:// dan / ]
Path : / atau /path/
Please Specify a file to upload : Shell sobat :)
Yang lain, kosongin aja :) lalu klik Start
Nah tuh udah keliatan hasilnya :)
Langsung dah, eksekusi shellnya dan upload file depesan sobat :)
Sekian Tutorialnya, mudah2an bermanfaat buat pembelajaran :)
Kalo ada pertanyaan silahkan tinggalkan komentar atau langsung tanya di grup aja :)
Terimakasih :)

Weitere ähnliche Inhalte

Empfohlen

How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
ThinkNow
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
Kurio // The Social Media Age(ncy)
 

Empfohlen (20)

2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot2024 State of Marketing Report – by Hubspot
2024 State of Marketing Report – by Hubspot
 
Everything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPTEverything You Need To Know About ChatGPT
Everything You Need To Know About ChatGPT
 
Product Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage EngineeringsProduct Design Trends in 2024 | Teenage Engineerings
Product Design Trends in 2024 | Teenage Engineerings
 
How Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental HealthHow Race, Age and Gender Shape Attitudes Towards Mental Health
How Race, Age and Gender Shape Attitudes Towards Mental Health
 
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdfAI Trends in Creative Operations 2024 by Artwork Flow.pdf
AI Trends in Creative Operations 2024 by Artwork Flow.pdf
 
Skeleton Culture Code
Skeleton Culture CodeSkeleton Culture Code
Skeleton Culture Code
 
PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024PEPSICO Presentation to CAGNY Conference Feb 2024
PEPSICO Presentation to CAGNY Conference Feb 2024
 
Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)Content Methodology: A Best Practices Report (Webinar)
Content Methodology: A Best Practices Report (Webinar)
 
How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024How to Prepare For a Successful Job Search for 2024
How to Prepare For a Successful Job Search for 2024
 
Social Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie InsightsSocial Media Marketing Trends 2024 // The Global Indie Insights
Social Media Marketing Trends 2024 // The Global Indie Insights
 
Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024Trends In Paid Search: Navigating The Digital Landscape In 2024
Trends In Paid Search: Navigating The Digital Landscape In 2024
 
5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary5 Public speaking tips from TED - Visualized summary
5 Public speaking tips from TED - Visualized summary
 
ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd ChatGPT and the Future of Work - Clark Boyd
ChatGPT and the Future of Work - Clark Boyd
 
Getting into the tech field. what next
Getting into the tech field. what next Getting into the tech field. what next
Getting into the tech field. what next
 
Google's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search IntentGoogle's Just Not That Into You: Understanding Core Updates & Search Intent
Google's Just Not That Into You: Understanding Core Updates & Search Intent
 
How to have difficult conversations
How to have difficult conversations How to have difficult conversations
How to have difficult conversations
 
Introduction to Data Science
Introduction to Data ScienceIntroduction to Data Science
Introduction to Data Science
 
Time Management & Productivity - Best Practices
Time Management & Productivity -  Best PracticesTime Management & Productivity -  Best Practices
Time Management & Productivity - Best Practices
 
The six step guide to practical project management
The six step guide to practical project managementThe six step guide to practical project management
The six step guide to practical project management
 
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
Beginners Guide to TikTok for Search - Rachel Pearson - We are Tilt __ Bright...
 

Cara mudah deface website dengan exploit joomla jce extension

  • 1. Cara Mudah Deface Website Dengan Exploit Joomla JCE Extension | Remote File Upload Vulnerability Assalamualaikum... Salam sejahtera buat kita semua :) Oke sobat, sebenarnya udah lama sih mau share teknik ini, cuma saya males aja mau nyari targetnya,, wkwkwk soalnya saya jarang nemu target yg Vuln, jadi males dah,, tapi berkat bantuan dari temen saya yaitu om Agam yang dengan sukarela memberikan live target yang bisa sobat gunakan :D jadi mempermudah saya untuk berbagi teknik ini buat sobat2 semua :) Thanks to Om Agam dan perlu sobat ketahui bahwa pada CMS joomla itu yang paling banyak ditemukan bugsnya itu di component atau Extensinya, rata2 pasti begitu :) Udah ah ngomel2nya, langsung saja kita praktekkan :) Bahan-Bahan : JCE Exploiter | Download JCE Exploiter PHP | Download Dork : inurl:index.php?option=com_jce site:.br Live Target : http://www.spiderdevelopments.com.au/ http://www.libira.co.il/ Udah disiapin kan bahan2nya? lanjut yuk masak2nya? Hajiahh :3 Pertama so pasti sobat harus mencari targetnya dulu di Google dengan menggunakan dork diatas :) kalo saya udah nemu tuh :D
  • 2. Lalu Extrack dulu file JCE Exploiternya :) Buka deh JCE Exploiternya :) dan Selanjutnya masukan Targetnya, lalu klik Start Nah tuh, udah berhasil :) Setelah berhasil exploitasinya lalu eksekusi link tersebut :)
  • 3. Nah, upload aja shell sobat :) Catatan: "kalo ga bisa upload file .php coba aja upload file .html / .txt :) Kalo upload shellnya berhasil, tinggal eksekusi shell, trus Tebas dah :D Cara Kedua Upload dulu JCE Exploit PHP di Hostingan atau apapun dah :) kalo ga mau repot, sobat bisa make punya saya aja Disini
  • 4. Lalu masukkan targetnya : Hostname : Web Target [tanpa http:// dan / ] Path : / atau /path/ Please Specify a file to upload : Shell sobat :) Yang lain, kosongin aja :) lalu klik Start Nah tuh udah keliatan hasilnya :) Langsung dah, eksekusi shellnya dan upload file depesan sobat :)
  • 5. Sekian Tutorialnya, mudah2an bermanfaat buat pembelajaran :) Kalo ada pertanyaan silahkan tinggalkan komentar atau langsung tanya di grup aja :) Terimakasih :)