KindEdior Remote File Upload exploit deface site easlily

KindEdior Remote File Upload exploit deface site easily

Here is one of the easy way to deface website this is also one of the Remote file Upload exploits for easy website hacking purpose...
these days many websites are vulnerable to Remote file upload Vulnerabilities

Google Dork :

intitle:index of? inurl:kindeditor

inurl:examples/uploadbutton.html


exploit:http://www.vulnrabewebsite.com/path/kindeditor/examples/uploadbutton.html

Choose any website from google search results and goto vulnrabel url like shown below

http://www.vulnrabewebsite.com/kindeditor/examples/uploadbutton.html

now click on upload n select your file, it will be automaticly uploaded,

and you'll got your uploaded file Link/URL there, and if you can't get your uploaded file link then goto

http:// www.vulnrabewebsite.com/path/kindeditor/attached/file/

and you'll se lot of folders here, click on last folder and in the folder click on last file, its your uploaded file ..Enjoy & Must leave a Comment if you want more exploit like that, because
new article's posting depends on old article's popularity....

And stay connected with darksite for more exploits..

DEMO:
http://www.arimlab.com/themes/default/js/kindeditor/examples/uploadbutton.html
(upload here)

http://www.arimlab.com/themes/default/js/kindeditor/attached/file/20120402/20120402060514_37951.htm
see the result ( For Educational Purpose )