Cara Deface Web Sekolah

Dangerous Default Member Password – CMS Balitbang Bug’sTrack

./start

    dork in google..
    1. inurl:"/html/index.php" intext:"Tim Balitbang"
    2. inurl:"/html/index.php" intitle:"Selamat Datang"
    3. inurl:"/member/" intext:"Tim Balitbang"

    dork in bing..
    1. IP:[target-IP] /html/
    2. IP:[target-IP] sch.id
    3. IP:[target-IP] ac.id
    4. IP:[target-IP] blablablaa… having fun! :D

./issue

    login member using default user and password
    USERNAME     PASSWORD     DETAILS     SHELL UPLOAD
    alan                   123456                   guru                aviable
    kickdody           123456                   guru                aviable
    070810120       123456                   siswa               not aviable
    siswanto            123456                   guru                 aviable
    alumni               123456                    guru                 not aviable
    tomi                  123456                    guru                 aviable

./ending

    sign in member form,,,

    http://localhost/member/

Lebih jelas lihat video di bawah :

Written by: Afiq Kurniawan

Catatan Si Ndeso Updated at: Minggu, Mei 19, 2013 Description: Cara Deface Web Sekolah Rating: 4.5 Reviewer: Unknown - ItemReviewed: Cara Deface Web Sekolah