24-06-26, 06:13 PM
File upload vulnerability on .gov.cy site belonging to the government
What it does:
I can upload any file type I want, for example:
test.exe, test.apk, test.pdf, test.xml, test.png, test.doc, test.txt, test.xls ..
-
anything you can think of. I can arrange them and set them as links. So, when the target person clicks on the link, they download the target file immediately.
-
Advantages and why you should buy:
First of all, it's a government domain everyone trusts it. You can try to send a trojan to the target person, or send fake documents, notifications, invoices, redirect them to fake sites, or steal their credit card information. It's entirely up to your imagination.
-
Additionally, along with this, 40k names, surnames, and emails belonging to that country will be provided.
-
Serious buyers only. Don't waste my time.
-
session: 052786581a54f247e376697da91f276efb8cf634eed9c6f214fd8c72a9ee839564
qTox: DEB550A5A873CD716F02BC9F09410AC8CD113CA721E9B76A921051AF008D261D838EE3BED92C
-KYS-

![[Image: image.png]](https://external-content.duckduckgo.com/iu/?u=https%3A%2F%2Fi.ibb.co%2FC5rbQ4Wh%2Fimage.png)