<style>/*<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4645632544988684701&zx=389dad53-ad45-47a7-9acd-963a6bf69f6e' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4645632544988684701&zx=389dad53-ad45-47a7-9acd-963a6bf69f6e' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3823271028074031&host=ca-host-pub-1556223355139109" crossorigin="anonymous"></script>

<!-- data-ad-client=ca-pub-3823271028074031 -->

</head><body>*/</style>

Tutorial Deface KCFINDER dan upload Shell 2021

apiip

27 Dec, 2021

mazapip.blogspot.com - Halo Gaes Balik Lagi Sama gwa Maz Apip ,Dan disini Ada Maz Fadli

di blog kali ini Gwa mau ngasih Tutorial Deface KCFINDER dan upload Shell 2021

oke langsung saja

bahan bahan nya adalah :

1.shell

2.niat

3.akal sehat

4. ke hokian

5.dork

oke kalo udh dpt bahan bahan nya, langsung saja ke tutorialnya

disini kalian dorking dulu yang pasti

buat yang belum tau cara dorking,bsa lihat pict dibawah

disini gwa pake dork inurl:/kcfinder(cari yg title nya KCFinder: /files)

nah disini gwa udh ada live target yaitu

http://www.kensetusokuho.jp/kcfinder/browse.php

oke langsung saja kita eksekusi

disini gwa pake cylul007 Webshell V 2.0 Shell yang banyak manfaat nya dan baik untuk tubuh

cara upload nya gimana?

nah kalian pencet upload,pilih Shell kalian yg berekstensi .php .php56 .php7 .php5 .shtml .phtml .pht .PhP terserah kalian

disini gwa upload .php(udh gwa fix biar kalian belajar bypass ext)

oke seperti anda liat dibawah,itu Shell nya sudah terupload,bagaimana cara akses nya?

/upload/files/shell.php

disini karena nama Shell saya zxc.php

maka saya mengakses nya seperti ini

/upload/files/zxc.php

Shell :http://www.kensetusokuho.jp/kcfinder/upload/files/zxc.php

Oke Cuy Itu aja yang bsa gwa kasih,kalian bsa upload SC deface kalian,dan ini hasil setelah gwa upload SC nya

http://www.kensetusokuho.jp/kcfinder/upload/index.php[+]Penutup

oke Cuy itu aja,makasih

Tetap Ngehek Sampek Tuek

Peace~

https://mazapip.blogspot.com

<style>/*
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/1807328581-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY6E-SLKEiyg3bJ2PX22FPPU4z-2GQ:1714174260680';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d4645632544988684701','//mazapip.blogspot.com/2021/12/tutorial-deface-kcfinder-dan-upload.html','4645632544988684701');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '4645632544988684701', 'title': 'membahas hal-hal yang menarik dan hanya sekedar info. ', 'url': 'https://mazapip.blogspot.com/2021/12/tutorial-deface-kcfinder-dan-upload.html', 'canonicalUrl': 'https://mazapip.blogspot.com/2021/12/tutorial-deface-kcfinder-dan-upload.html', 'homepageUrl': 'https://mazapip.blogspot.com/', 'searchUrl': 'https://mazapip.blogspot.com/search', 'canonicalHomepageUrl': 'https://mazapip.blogspot.com/', 'blogspotFaviconUrl': 'https://mazapip.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'UA-216045933-1', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - Atom\x22 href\x3d\x22https://mazapip.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - RSS\x22 href\x3d\x22https://mazapip.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/4645632544988684701/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - Atom\x22 href\x3d\x22https://mazapip.blogspot.com/feeds/4545872795156167302/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-3823271028074031', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': true, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/16e657cb9c57b8a2', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'item', 'postId': '4545872795156167302', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEjzkzJ77ETt1rR4-oPGkgMM9xj0chJpyHxMNt0EsbigShtwBAJ9KDR7wWqhSmtWH6QG8srowaF8RBfmrR8O0ZswJ3beyJu9m_81d7r0fqsfOWQmrNbONtMER4_gD3J-k9OfWoYye9wSvaVQ2Fu2Zw88SiwWPkPQf--3O02z3KhBvpgf5Yb61MWQq5bkBQ\x3ds72-w220-c-h320', 'postImageUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEjzkzJ77ETt1rR4-oPGkgMM9xj0chJpyHxMNt0EsbigShtwBAJ9KDR7wWqhSmtWH6QG8srowaF8RBfmrR8O0ZswJ3beyJu9m_81d7r0fqsfOWQmrNbONtMER4_gD3J-k9OfWoYye9wSvaVQ2Fu2Zw88SiwWPkPQf--3O02z3KhBvpgf5Yb61MWQq5bkBQ\x3dw220-h320', 'pageName': 'Tutorial Deface KCFINDER dan upload Shell 2021', 'pageTitle': 'membahas hal-hal yang menarik dan hanya sekedar info. : Tutorial Deface KCFINDER dan upload Shell 2021', 'metaDescription': 'Tutorial Deface KCFINDER dan upload Shell 2021'}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Tutorial Deface KCFINDER dan upload Shell 2021', 'description': 'Tutorial Deface KCFINDER dan upload Shell 2021', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEjzkzJ77ETt1rR4-oPGkgMM9xj0chJpyHxMNt0EsbigShtwBAJ9KDR7wWqhSmtWH6QG8srowaF8RBfmrR8O0ZswJ3beyJu9m_81d7r0fqsfOWQmrNbONtMER4_gD3J-k9OfWoYye9wSvaVQ2Fu2Zw88SiwWPkPQf--3O02z3KhBvpgf5Yb61MWQq5bkBQ\x3dw220-h320', 'url': 'https://mazapip.blogspot.com/2021/12/tutorial-deface-kcfinder-dan-upload.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 4545872795156167302}}, {'name': 'widgets', 'data': [{'title': 'Menu', 'type': 'LinkList', 'sectionId': 'upload-image', 'id': 'LinkList155'}, {'title': 'membahas hal-hal yang menarik dan hanya sekedar info.  (Header)', 'type': 'Header', 'sectionId': 'upload-image', 'id': 'Header1'}, {'title': 'Main Tags', 'type': 'Label', 'sectionId': 'upload-image', 'id': 'Label2'}, {'title': '', 'type': 'LinkList', 'sectionId': 'upload-image', 'id': 'LinkList152'}, {'title': 'Link List', 'type': 'LinkList', 'sectionId': 'upload-image', 'id': 'LinkList153'}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'upload-image', 'id': 'PopularPosts1', 'posts': [{'title': 'cara deface poc ojs', 'id': 6149305758175368731}, {'title': 'cara deface poc Alfa perl rce', 'id': 665367589033489567}, {'title': 'Cara Deface WordPress Default', 'id': 5412312465927835321}]}, {'title': 'Contact Form', 'type': 'ContactForm', 'sectionId': 'upload-image', 'id': 'ContactForm1'}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'before-blog', 'id': 'HTML11'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'blog-post', 'id': 'Blog1', 'posts': [{'id': '4545872795156167302', 'title': 'Tutorial Deface KCFINDER dan upload Shell 2021', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEjzkzJ77ETt1rR4-oPGkgMM9xj0chJpyHxMNt0EsbigShtwBAJ9KDR7wWqhSmtWH6QG8srowaF8RBfmrR8O0ZswJ3beyJu9m_81d7r0fqsfOWQmrNbONtMER4_gD3J-k9OfWoYye9wSvaVQ2Fu2Zw88SiwWPkPQf--3O02z3KhBvpgf5Yb61MWQq5bkBQ\x3dw220-h320', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}]}, 'footerBylines': [{'regionName': 'footer2', 'items': [{'name': 'labels', 'label': ''}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}, {'name': 'labels', 'label': ''}]}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML13'}, {'title': '#You may also like', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML15'}, {'title': 'SVG Icons', 'type': 'HTML', 'sectionId': 'Blogspot-options', 'id': 'HTML24'}]}]);
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList155', 'upload-image', document.getElementById('LinkList155'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'upload-image', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label2', 'upload-image', document.getElementById('Label2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList152', 'upload-image', document.getElementById('LinkList152'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList153', 'upload-image', document.getElementById('LinkList153'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'upload-image', document.getElementById('PopularPosts1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'upload-image', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'Sending...', 'contactFormMessageSentMsg': 'Your message has been sent.', 'contactFormMessageNotSentMsg': 'Message could not be sent. Please try again later.', 'contactFormInvalidEmailMsg': 'A valid email address is required.', 'contactFormEmptyMessageMsg': 'Message field cannot be empty.', 'title': 'Contact Form', 'blogId': '4645632544988684701', 'contactFormNameMsg': 'Name', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Message', 'contactFormSendMsg': 'Send', 'contactFormToken': 'AOuZoY4PKqN5AM5JzUhR4WNzMXI7BIZk9Q:1714174260681', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML11', 'before-blog', document.getElementById('HTML11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'blog-post', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/1666805145-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML13', 'ads-post', document.getElementById('HTML13'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML15', 'ads-post', document.getElementById('HTML15'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML24', 'Blogspot-options', document.getElementById('HTML24'), {}, 'displayModeFull'));
</script>
</body>*/</style>