Sunday, 1 December 2013

Remote Password Change


Hello everybody. Today I'm going to show you how to reset aministrator's password for certain websites. Not all site are vulnerable for this attack. This method is very suitable for Newbies :)


Dorks:
inurl:/index_ebay.php
"Powered by: Resell Rights Fortune"
"Generating Traffic to Your Site with Keyword Based Articles"
Powered By: Free Monthly Websites 2.0

Exploiter : Download Here


1- Copy any of the dorks and paste it on GOOGLE.

2-Choose any site as your target.

3- Open RTE.html (exploiter) with notepad

4- Change  www.site.co to your target site.

Example

http://www.site.com/admin/file_io.php

to

http://www.berfl.com/admin/file_io.php


5- Save and open it with your browser. You will get something like this.


6- Enter New Username and Password with your username and password. 

7- Click save. Then you automatically will be redirected to the admin login page.


8- Login with your username and password. You will get something like this.


9- That's all my tutorial for today, you can do what you want. I will tell you how to upload shell on this site in my next post :P


Live Demo : http://berfl.com