mass exploitation on edu site
- Thread starter fizakhan1
- Start date
alternatesword
Elite Member
- Aug 25, 2012
- 4,926
- 1,085
I seen that, I think they used to find the vulnerable sites which mistakenly provide folder permission for public access. Those are not recommended way and look total spam as they upload their html file in Edu websites which iframe their sites.
fizakhan1
Supreme Member
- Apr 10, 2018
- 1,297
- 822
exactly. but why can't we find the way? how they found?
- Sep 10, 2010
- 11,834
- 26,686
Google dork mostly.
e.g.
Code:
intitle:Index.Of inurl:pdfThe one above will only give you the publicly available folders though. I am not gonna expand on how to actually upload, because that would be considered hacking, and I don't want to get an infraction.
fizakhan1
Supreme Member
- Apr 10, 2018
- 1,297
- 822
not pdf have a look at this http://tffc.usc.edu/judi-bola-resmi/
- Sep 10, 2010
- 11,834
- 26,686
Yeah so (s)he uploaded a html file instead of pdf. Nothing revolutionary. If you want to learn more, google "RFI attack". We can't discuss such stuffs here.
fizakhan1
Supreme Member
- Apr 10, 2018
- 1,297
- 822
ohh sure.
LegendAndroidX
Power Member
- Nov 1, 2017
- 699
- 612
Congratulation you just exposed their method they're using to sell Seo gigs on fiverr lol.
fizakhan1
Supreme Member
- Apr 10, 2018
- 1,297
- 822
there is nothing hidden on BHW but masterminds don't reveal the secrets.
- Sep 10, 2010
- 11,834
- 26,686
Honestly, I don't feel bad exposing these "scammers". This is not the real way, specially if someone is selling these links. All you are doing is hurting another web master. This is not fair...
Tongbestungsar
Newbie
- Jun 26, 2022
- 45
- 17
yeah, i also wonder how they done it, try to imagine searching web 1 by 1 just to see any opening.
fizakhan1
Supreme Member
- Apr 10, 2018
- 1,297
- 822
Tongbestungsar
Newbie
- Jun 26, 2022
- 45
- 17
oh if you dont mind sir, may i ask for contact or is there any way to have conversation? there is something i would like to discusssurprise....