Regmem + LaravelFilemanager

Regmem+LaravelFilemanager

Dork:
inurl:storage/files/shares

Exploit:
/laravel-filemanager or /filemanager

kalo vuln nanti redirect ke halaman login
site.com/login
sekarang ganti path /login jadi /register

habis tu login langsung ke exploit nya lg
site.com/filemanager or /laravel-manager

tinggal exe 
mau upload shell?tamper data pake burp suite

lagi males deface jadi simple aja gda contoh

Source: fb. Jay Maranatha Hutajulu

Youtube: https://youtu.be/k-ZWj2Lxv2c

-PhantomSec1337