Sexy Contact Form Cross Site Request Forgery (CSRF) H rwxr-xr-x 0 19.47

Filename	Sexy Contact Form Cross Site Request Forgery (CSRF)
Permission	rw-r--r--
Author	H
Date and Time	19.47
Label
Action

Assalamuallaikum ^_^
kali ini saya mau share tutorial exploit com_sexy :v
itu loh exploit yang lagi HOT ^_^
Oke , gak usah banyak basa basi, ntar keburu basi :v

• Sebelumnya Terima Kasih Kepada Tim :haurgeulis-security

Bahan :
Script CSRF : DOWNLOAD simpan extentensi HTML   
Shell : Bisa Download DISINI

Dork : inurl:/com_sexycontactform/ (use your brain) :p
Exploit : components/com_sexycontactform/fileupload/index.php


Vuln 

Edit Site di script CSRF 

Buka Script CSRF , lalu upload shell 

kalau berhasil muncul nama shell kalian ^_^

lalu buka deh shell nya ^_^

Shell Access :
http://www.targetcom/components/com_sexycontactform/fileupload/files/shell.php

Done ;) 
Seterah mau diapain ^_^

Thanks To: Syahrul Ramadhan
-Mr.HaurgeulisX196-

Keyword :
Tutorial deface com_sexy 
Exploit com_sexycontactform Shell Vuln Upload 
Sexy Contact Form Cross Site Request Forgery (CSRF)