HACKTIVIS NKRI
Cara Deface Website CMS Balitbang Kemendiknas | Cirebon-Cyber4rt - Malem sob, jumpa lagi dengan saya admin ganteng KW 1 wwkwkw =D pada hari ini saya akan menulis sebuah tutorial deface pada web berbasis CMS Balitbang.
CMS Balitbang Kemendiknas 3.42
Sedikit membahas tentang CMS Balitbang, CMS Balitbang adalah salah satu CMS ( Content Management System ) yang sudah siap pakai dan biasanya dipergunakan untuk web sekolah. CMS ini dikembangkan oleh Balitbang Kemendiknas Indonesia.
Namun CMS buatan Indonesia ini masih mempunyai kelemahan/bug. Nah, dalam hal ini saya akan memberi tahu cara menemukan bug itu yang saya kutip dari Inj3ct0r .Mari kita simak secara seksama. Cekibroott !
CMS Balitbang Kemendiknas 3.42
Dork :
inurl:"/html/siswa.php?"
inurl:"/html/alumni.php?"
inurl:"/html/guru.php?"
Exploit :
http://public_html/dir/editor/filemanager/connectors/test.html
1). Masukan salah satu dork diatas untuk mencari bug pada CMS Balitbang
2). Kemudian pilih salah satu website dari hasil pencarian menggunakandork tersebut
5). Maka nanti tampilannya akan seperti ini :
6). Ubah menu ASP menjadi PHP dan selanjutnya kita pilih file yang akan kita sisipkan kedalam web target.
Catatan :
File yang bisa disisipkan hanya file yang berekstensi .txt
7). Jika file sukses terupload, maka akan tampil seperti dibawah ini.
8). Setelah itu tinggal kita cari file yang disisipkan ke dalam web tersebut dan taraaa...
Catatan :
File akan berada disini, Contoh : http://target.com/userfiles/file/Nama_File.txt
Gimana, mudahkan caranya? Sekian dulu tutorial dari saya kali ini, kalau ada yang bisa edit supaya bisa upload shell.php kasih tau ane yak wkwk :p
Dan saya minta maaf kalau kebanyakan web yang dijadikan target adalah website Indonesia, karena umumnya website-website sekolah di Indonesia menggunakan CMS Balitbang ini :'(
Satu lagi, saya mohon maaf kalo hanya bisa deface tapi tidak bisa patching, soalnya ngga ada yang ngajarin bijimane cara protectnya :'(
Wassalam.
14 komentar:
gak bisa bro udah ane coba
hacker indonesia = hacker bayi yg bisanya hanya hack situs2 lemah....
hacker TOLOL yang bisanya hanya hack situs local indonesia aja
KONTOL BAPAK LOE
K.O.N.T.O.L
HACKER PALSU LOE
bego.. anonymouse sejati gak akan senarsis loe... "jangan lupa follow gue"
ID dan ID... Anonymouse itu siapa saja bisa.. dan berhentilah memasang widget Blogger Indonesia kalo bisanya cuma hack situs sendiri...
dari dulu ituuuuuu aja yang ditulis hacker2 kacangan..
bisanya maen dikandang
Hello there, I found your website via Google even as looking for a comparable matter, your web site came up, it appears to be like great.
I have bookmarked it in my google bookmarks.
Hi there, simply was alert to your blog via Google, and
found that it is really informative. I'm going to watch out for brussels.
I will appreciate in case you proceed this in future.
A lot of other folks will be benefited out of your writing.
Cheers!
Also visit my website ... cheap plus size wedding dresses under 100
A fish-oil supplement: Reduces inflammation which aids in muscle recovery.
ufc 174 online Simply put,
all the heroes you hear about in the news doing the right thing, at the right time,
with the right amount of force, have practiced over, and
over, and over again. If he gets past his first test against Forrest Griffin I expect
that he will be offered a title shot against the winner of Quinton Jackson and Dan Henderson, on September 8th,
or at least a shot at one of the UFC's top three light heavyweight contenders.
Thanks very interesting blog!
My web blog: House Removals Business In Ipswich Suffolk
There is no point in spending much time on online businesses
that are too cumbersome to manage when there are quick, easy ways to make money today.
re willing to lend you, and what your interest rate will be.
Don't forget that the car that you will select must be a top quality alternative to your individual car.
Feel free to visit my blog ... mortgage first time home buyer
Likewise, the clock has started clicking toward the need to implement such a plan. This free app is optimized for i - Phone 5 and is compatible with i - Phone, i
- Pad and i - Pod Touch. Africa is always a lot of time - you have everything slowly,
or you just miss the magic.
my web site: free clash of clans gems ()
Thank you for tɦe gooԀ writeup. Ӏt in fact was a amusement account іt.
Look advanced to farr adced agreeable fгom yօu! Bƴ the wаy, hօw can we communicate?
Feell free to surf to my website; trainerslisting.Com
With this feature, you can get hold of the recent updates and follow all of Startronics' major activities and events.
You can also start your own Groups, gathering like-minded
individuals from your industry or your company.
So what makes Gather my choice of relating to everyone else.
Also visit my web site: pirater un compte facebook
Posting Komentar