Google Search: inurl:updown.php | intext:”Powered by PHP Uploader Downloader”
rgod rates this entry 10 out of 10.
Submitted: 2006-02-28 00:00:00
Added by: rgod
this (evil ) script lets you to upload a php shell on target server, in most cases not password protected dork: inurl:updown.php | intext:”Powered by PHP Uploader Downloader” a note: sometimes you don’t see a link to a list of uploaded files… just switch to http://[target]/[path]/updown.php?action=download