Tutorial Exploit Kcfinder Upload Shell | csrf file upload

⚠Warning ! Everything in the channel is for Educational Purposes only I am Not Responsible for Any Damage Caused. ✅
==========DON'T STOP LEARNING==========
“Hackers are breaking the systems for profit. Before, it was about intellectual curiosity and pursuit of knowledge and thrill, and now hacking is big business. ”​ Kevin Mitnick
Link Donasi Bagi Yang Mau berbagi saweria.co/zho... |
MyBLog : www.cyberlone....
#sqlinjection #livetarget #PoC #anonymous #defacer
#cybersecurity #osint #vulnerability #informationsecurity #tools #bughunter #ethicalhacking #pentester #kalilinux #set #hacker #ngrok #programming #vulnerability #hackerindonesia #setoolkit #Revershell #Windows #Bypass #webhacking #hackthebox #pentester

[@cyberloneindonesia]

Bypass file extensions checks
If they apply, the check the previous extensions. Also test them using some uppercase letters: pHp, .pHP5, .PhAr
PHP: .php, .php2, .php3, .php4, .php5, .php6, .php7, .phps, .phps, .pht, .phtm, .phtml, .pgif, .shtml, .htaccess, .phar, .inc, .hphp, .ctp, .module
Working in PHPv8: .php, .php4, .php5, .phtml, .module, .inc, .hphp, .ctp
ASP: .asp, .aspx, .config, .ashx, .asmx, .aspq, .axd, .cshtm, .cshtml, .rem, .soap, .vbhtm, .vbhtml, .asa, .cer, .shtml
Jsp: .jsp, .jspx, .jsw, .jsv, .jspf, .wss, .do, .action
Coldfusion: .cfm, .cfml, .cfc, .dbm
Flash: .swf
Perl: .pl, .cgi

[@SenaDelana-uc5ru]

bg minta mini shellnya klo boleh

[@irfanfirmansyah1981]

Bro gw udh coba pake cara ini, setiap file wso nya bisa masuk pas di panggil yang keluar script html bukan Shell kaya di video lu bro, itu kenapa ya ?

[@TremorCyberTeam]

GG geming

[@cyberloneindonesia]

Nyoba doang sih bang disini mah ikut ikutan aja 😂

[@irfanfirmansyah1981]

gan bantu sebutkan nama file yang harus di coba untuk tembusin nya contoh php , php7, php5 dan apa lagi ya ? thanks

[@ArifSurya-n3w]

setelah upload . trs sya assets/kcfinder/upload/files/mini.php5/ malah download file bng???

[@fadialfikri7623]

Next tutorial dump lock country bang plis🙏

[@cyberloneindonesia]

Sql Injection ??

[@RyuuZenkan]

Kok gua coba akses shell nya malah auto download ya bang?

[@Violeta.304]

Ezzzz

[@IlmuGuru]

wso shell nya password nya apa bang aku pernh doxing nemu itu shell gatau pass ny

[@cyberloneindonesia]

Crack aja passwordnya md5 hash ada di source codenya, kalo gk salah defaultnya ghost722

[@Variable--X]

It only downloads the php file for me :(...
Could you help me?

[@CukuRukuk-t6e]

jual websheel ga bro ? kalo jual kirim kontak

[@shellguo3463]

bro do you have telegeam?

[@InacioSilvajmd]

Bang buat tutor wcf7 file upload🙏

[@Ethernity-l5u]

shellmini php nya download di mana yah ?

[@fathurtok4421]

Kok gw ke download yaa buka ke liat

[@alvahizamul3745]

bang macam" ext apa aja yaa, saya coba kok masih indexnya eror gitu

[@cyberloneindonesia]

php3
php4
php5
php7
pht
phtm
phtml
phar
phps

[@nero666i]

tutor symlink bypass Not Found + Forbidden bg😅

[@cyberloneindonesia]

Oke siap bang tunggu aja hehe

[@morenoromero999]

Bang kalo shell white dir bisa di akalin gak supaya jadi green??

[@cyberloneindonesia]

Bisa bang, methode backconnect/ root server hapus disable functionya nanti dah dibuatin videonya kalo ada target yang pas saya demoin

[@morenoromero999]

@@cyberloneindonesia oke, di tunggu bang videonya

[@imnumexbro]

@@cyberloneindonesia oke bang makasih banyak uhff dapat suhu sperti emang rejeki banget hehehe thanks

[@zakiseller]

Bagi shell nya bro

[@loginbaru-ul7hm]

Cara update friefox gimana

[@13summer13]

Bang bobol akun Instagram bisa ngga

[@cyberloneindonesia]

Tembusin email akses dulu baru loncat akun instagram

[@superman1337H]

Pakek html bang , auto hack NASA 😂

[@sanhaxor]

itu make shell apa mas?

[@cyberloneindonesia]

WSO mass

[@doumamoon8234]

Bang Wp-Login Pake Symlink

[@cyberloneindonesia]

Oke bang nanti yahh shellnya ditikung semua soalnya kowkw