Hello World ; Pagii Fans, Please Say Hello Haters ;*
xixihi, Lanjut Walking Blog geenggs. Kali ini Gua bakal Share artikel Sumbangan dari Keluarga Dumay gua, yaitu Bang GunshootCbr *Tengkyuh ster (-/\-)
Hahaha, artikel tutorial Kali ini bakal Bahas salah satu Bug/Celah yang ada pada Website yang memakai CMS Popoji.
bingung sih mau kasih Judul ini eXploit apaan, yaudeh:
Cara Deface Website yang Memakai CMS Popoji Lewat Register Account, atauu eXploit Register Account CMS Popoji, au ah Kecot wkwkwk :p
Perkenalan:
CMS Popoji adalah CMS yang dibuat Oleh para programer Indonesia (karya anak Bangsa).
Bug ini terletak Pada Halaman Login pada CMS Popoji *secara default memang cms ini menyediakan Layanan Registrasi akun dan tidak memfilternya. *Hahaha, Kek Com_User di joomla & WP add Admin di Wordpress yak o.O ?
Hahaha jadi karna ini CMS buatan Indonesia, dan besar kemungkinan website yg memakai cms ini adalah website dari indo juga, yaa jan terlalu Hyper yoo Lakonin ini eXploit :)
Lanjut intip tutor ;*
Dork:
inurl:"/detailpost site:sch.id"
Inurl:/detailpost site:.co.id
Powered by Popoji
© popojicms
(Selebihnye kembangin bae nih dork, biar dapet yang vuln n verawan)
eXploit:
target.coli/[path]/po-admin
1. Dorking menggunakan Search Engine
2. Pilih target kalian lalu masuk ke page Login atau masukan eXploitnye.
contoh: nueno.c0li/po-admin
Kalau ada click one for free silahkan dilanjuti, kalo gak ada silahkan cari target laen br0 ;)
 |
| Langsung bae, Klik tulisan "Click one for free" |
Silahkan diisi datanyee yang Valid yoo :v , ngasal tapi jozz ke email wkkw
 |
| Langsung Klik Register Account |
 |
| Kurang Lebih sih gitu~ |
disitu lengkap tertera id dan password, Lalu klik Link yang tertera Untuk memVerif email kalean ke web target.
6. Success : Your account have been ACTIVATED ! wew wkwkw, langsung bae masukin id n password Lu dan Login :D
7. dan BooM masuk ke halaman Dasbor website target :)
 |
| kalo dah kek gini, kalo bisa Laporin Bug nya aja ke miminnya :v |
Silahkan bacaaa artikel kite yang ini : Cara Upload Shell di CMS Popoji
Hahaha, gak afdol yee ngeXploit tanpa tau cara bangunnye, Silahkan Baca artikel yg dulu Nue post di Blog ini: Tutorial Instalasi CMS Popoji
Sekian Tutorial Deface POPOJI CMS Arbitrary File Upload
Mudahkan x_O ?
Stay Cool and Keep ./Crotz , gaes <(")
bila ada kesalahan mohon di maafkan dan dibenarkan di kolom komentar kak.
bila ada kritik, dan pertanyaan langsung aja kak ke wall fanspage kami: TKJ CYBER ART
Nue cuma niat untuk Share Tutorial, yg bertujuan utk membantu para pemula kek Nue :')
Happy Defacing gan ~
Sekian dan semoga bermanfaat .. terimakasih
Source and Thanks to: GunshootCbr
./Nuenomaru
 |
| tidak perlu muncul ke permukaan , yang penting tetap bergerilya |
Visit and follow :
FP : TKJ Cyber Art
G+ : TKJ Cyber Art
youtube : TKJ Cyber Art
BBM : C0018D1A2
Line : http://line.me/ti/p/%40hjl8740i
11 comments
Swiss watches accept fabricated a [url=http://www.luxuriouswatches.co.uk/]replica watches[/url] huge appulse in the bazaar today. These watches accept begin abstruse appeal aback birth because of the techniques, styles and appearance acclimated to accomplish or adapt them from time to time. They accept a attitude of getting abundantly precise, aggressive and bunched due to their abysmal analysis in their mechanism. These watches accept been complete by duke and a few centuries aback it was a actual accurate and complicated assignment and affection the a lot of circuitous methodologies and technologies and appropriately the prices accept attempt up way college answer the [url=http://www.luxuriouswatches.co.uk/]omega replica watches[/url] affluence active one can anytime brainstorm of.Today, even if the accurateness and calibre may be accomplished by about any austere watchmaker or engineer, but annihilation can subdue the name that Swiss watches accept fabricated for themselves and they abide to aphorism the archive even today adorable humans to accomplish them the aboriginal best even with their big-ticket prices.Omega SA, the Swiss affluence watch-maker is based in Biel/Bienne, Switzerland and is currently endemic by the Swatch Group. It has a history of getting the fore-runner to abounding actual events, which cover Britain's Royal Flying Corps and the American Army allotment Omega as its official alarm for its action units in the year 1917 and 1918 respectively. Omega has aswell been beat the Olympic Games back [url=http://www.luxuriouswatches.co.uk/]swiss replica watches[/url] 1932. NASA, the amplitude researching avant-garde of the apple adored Omega's cast amount a lot added by allotment one of its timepieces for their a lot of cogent campaign on the Moon in the year 1969. The world's favourite spy James Bond has aswell adorned the timepieces on his wrist back 1995; added acclaimed Omega wearers aswell cover John F. Kennedy, Prince William, and Buzz Aldrin to name a few.
Swiss watches accept fabricated a replica watches huge appulse in the bazaar today. These watches accept begin abstruse appeal aback birth because of the techniques, styles and appearance acclimated to accomplish or adapt them from time to time. They accept a attitude of getting abundantly precise, aggressive and bunched due to their abysmal analysis in their mechanism. These watches accept been complete by duke and a few centuries aback it was a actual accurate and complicated assignment and affection the a lot of circuitous methodologies and technologies and appropriately the prices accept attempt up way college answer the omega replica watches affluence active one can anytime brainstorm of.Today, even if the accurateness and calibre may be accomplished by about any austere watchmaker or engineer, but annihilation can subdue the name that Swiss watches accept fabricated for themselves and they abide to aphorism the archive even today adorable humans to accomplish them the aboriginal best even with their big-ticket prices.Omega SA, the Swiss affluence watch-maker is based in Biel/Bienne, Switzerland and is currently endemic by the Swatch Group. It has a history of getting the fore-runner to abounding actual events, which cover Britain's Royal Flying Corps and the American Army allotment Omega as its official alarm for its action units in the year 1917 and 1918 respectively. Omega has aswell been beat the Olympic Games back swiss replica watches 1932. NASA, the amplitude researching avant-garde of the apple adored Omega's cast amount a lot added by allotment one of its timepieces for their a lot of cogent campaign on the Moon in the year 1969. The world's favourite spy James Bond has aswell adorned the timepieces on his wrist back 1995; added acclaimed Omega wearers aswell cover John F. Kennedy, Prince William, and Buzz Aldrin to name a few.
Om bule, jan nyepam dong ;p
#Nuenomaru
server not found melulu
heheh terus berjuang yoo om ;*
jgn nyerah wkkwwkkw , awali dorking mu dgn Basmallah :D
#Nuenomaru
kok gk masuk emailnya?
hahha, mandi wajib dlu om..
coba daftar ulang , ganti email, utamakan email = gmail
kalo msh ga bisa juga, ambil kesimpulan, target not vuln
#Nuenomaru
add Official Acc Line kami saja bro
#Nuenomaru
result email nya kok lama ya min?
coba ganti email *utamaakan gmail.
kalo masih gak bisa ya brarti gak vuln,, webmasternya udh ngefilter register di webnya ..
#Nuenomaru
EmoticonEmoticon