How to hack moodle

Posted by Dh Sync at 4:13 AM Read our previous post

How to hack moodle? This is the way when I try to attack moodle. Previous, do you know moodle? Moodle is a Course Management System (CMS), also known as a Learning Management System (LMS) or a Virtual Learning Environment (VLE). It is a Free web application that educators can use to create effective online learning sites. (Source).

Ok , in this way we must registered into the system using moodle.

1. We use file upload facility in the system.



2. You can upload backdoor. For example I upload file infophp.php



3. Access yuor backdoor. We can see the location of uploaded files by look link location the file earlier. For example link location infophp.php : http://192.168.1.1/moodle/file.php/4/moddata/assignment/12/69/infophp.php

So you must change address to :http://192.168.1.1/moodle/moodledata/4/moddata/assignment/12/69/infophp.php

Location for access file  : http://192.168.1.1/moodle/moodledata/4/moddata/assignment/12/69/infophp.php

You can access on the browser, for example I access file infophp.php



conclusion: can upload a php file and accessible.