######################################################## #[+] Exploit Title: PRIVATE CSR # [+] Date: 7/10/2015 # [+] Google Dork : inurl:/"config/config.izo" # [+] Exploit Author: Ashiyane Digital Security Team # [+] Discovered By: Syborg # [+] Security Risk: High # [+] Tested on: Windows 8.1/Google Chrome ######################################################## # # [+] VULNERABILITY: # Priv8 SCR Editors # ####################################################### # Use Editors To Edit Config Files And Deafce The Site Via CSR Editors. ####################################################### # # [+] Example: #http://lom-radioX.com/config/config.izo #http://kesbangpolbuXlukumba.info/config/config.izo #http://www.mirgosXtinits.ru/config/config.izo #http://sacredodysXsey.com/config/config.izo #http://www.biohXgienica.com/config/config.izo ####################################################### # [+] Deface Page: www.site.com/config/tar.tmp ####################################################### # # [+] Discovered By : Syborg # [+] We Are : Behrooz_Ice,C4T,eb051,CRISIS,Synorg And All Member Ashiyane Digital Security Team # [+] SpTnx : Behrooz_Ice,C4T,eb051,CRISIS And All Member Ashiyane Digital Security Team # [+] Home : http://ashiyane.org/forums/index.php #