======================================= # Exploit Title : Web File Manager - Arbitrary File Upload # Date : 06/11/017 # Exploit Author: Misterklio # Tested on : Windows 7 # Contact : www.fb.com/izzadiine ======================================= ////////////////////// Dorks ////////////////////// 1) Search target with Google Dorking # intext:"Web File Manager" site:co.il ////////////////////// Admin Panel ////////////////////// 2) Poc : target.com:8000/Login ////////////////////// File To Upload ////////////////////// 3) Test : http://dyes.co.il:8000/Login ////////////////////// Default pw and user ////////////////////// User : web Password : 1 =======================================