Home » deface » hacking » Deface Dengan Teknik Bypass Admin Login Dengan SQL Inject

Deface Dengan Teknik Bypass Admin Login Dengan SQL Inject

Kunang Jumat, 05 Agustus 2016 deface, hacking Edit

Kali ini saya akan membagikan sedikit teknik deface Bypass Admin Login dengan SQL inject teknik ini kami dapetkan dari semua blog garuda securit hacker.karena menurut saya teknik ini bagus maka saya juga menshare langsung aja ke TKP.

Bahan Bahan
1. kopi
2. makan

3. Koneksi Internet

4. Script Deface

5. Dork : inurl:/?mnux=login

"Powered by Sisfo Kampus"

Dork bisa kembangkan sendiri.

Tutorial :

1. Dorking dulu di google dengan dork di atas

2. Setelah muncul web hasil dorking pilih yang menurut kamu (vuln)

4. Setelah membuka webnya kalian akan di antarkan ke tempat login

5. Jika tidak langsung berada di tempat login kalian tinggal tambahkan /?mnux=login di belakang url

web nya. Contoh www.sitetarget.com/?mnux=login

6. Begini tampilan tempat login nya

garuda security hacker

7. Pilih login dengan "Superuser"

8. Setelah di menu login "Superuser" kalian masukan inject '=''or' di username dan password. Lihat gambar lalu klik login

garuda security hacker

9. Setelah berhasil masuk dengan inject, kalian pilih menu Master di tabel atas (lihat tanda merah) lalu pilih menu Mahasiswa

garuda security hacker

10. Setelah pilih, kalian edit profile mahasiswa nya (lihat gambar)

garuda security hacker

11. Lalu klik edit foto (lihat gambar)

garuda security hacker

12. Lalu upload script deface kalian yg berekstensi .html

garuda security hacker

13. Setelah selesai upload, untuk lihat hasil defacean nya, kalian bisa klik kanan pada gambar yg hancur, lalu klik view image (lihat gambar)

garuda security hacker

Ini hasil defacean saya

garuda security hacker

JANGAN LUPA SHARE AND KOMEN

0 Response to "Deface Dengan Teknik Bypass Admin Login Dengan SQL Inject"

Posting Komentar

Langganan: Posting Komentar (Atom)

<!--
<script type="text/javascript" src="https://www.blogger.com/static/v1/widgets/1704033933-widgets.js"></script>
<script type='text/javascript'>
window['__wavt'] = 'AOuZoY7nE6UG4lmImm2i9y8EAonwZA1Fow:1740281247447';_WidgetManager._Init('//www.blogger.com/rearrange?blogID\x3d263768467202772768','//gnb09r.blogspot.com/2016/08/deface-dengan-teknik-bypass-admin-login.html','263768467202772768');
_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '263768467202772768', 'title': 'GNB09 REBORN', 'url': 'https://gnb09r.blogspot.com/2016/08/deface-dengan-teknik-bypass-admin-login.html', 'canonicalUrl': 'https://gnb09r.blogspot.com/2016/08/deface-dengan-teknik-bypass-admin-login.html', 'homepageUrl': 'https://gnb09r.blogspot.com/', 'searchUrl': 'https://gnb09r.blogspot.com/search', 'canonicalHomepageUrl': 'https://gnb09r.blogspot.com/', 'blogspotFaviconUrl': 'https://gnb09r.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'id', 'localeUnderscoreDelimited': 'id', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22GNB09 REBORN - Atom\x22 href\x3d\x22https://gnb09r.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22GNB09 REBORN - RSS\x22 href\x3d\x22https://gnb09r.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22GNB09 REBORN - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/263768467202772768/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22GNB09 REBORN - Atom\x22 href\x3d\x22https://gnb09r.blogspot.com/feeds/2910567287926437933/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'adsenseAutoAds': false, 'boqCommentIframeForm': true, 'loginRedirectParam': '', 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/c320e3f9c6626331', 'plusOneApiSrc': 'https://apis.google.com/js/platform.js', 'disableGComments': true, 'interstitialAccepted': false, 'sharing': {'platforms': [{'name': 'Dapatkan link', 'key': 'link', 'shareMessage': 'Dapatkan link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Bagikan ke Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'X', 'key': 'twitter', 'shareMessage': 'Bagikan ke X', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Bagikan ke Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 0, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27id\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Baca selengkapnya', 'pageType': 'item', 'postId': '2910567287926437933', 'postImageThumbnailUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiML7ZJx75Nbqdtbfs8pCyrZtWuXxpFOktryew1vCsAqfwY15n-8b2COX2wfHPxEH_aWmkT5SlpiRP7WPPIbiJJcSZQAKQFhxC96NDNcz7eEK_NiO-c5-1_w6YchNGDTrg7JgzEqPf4S-D-/s72-c/Screenshot+%252887%2529.png', 'postImageUrl': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiML7ZJx75Nbqdtbfs8pCyrZtWuXxpFOktryew1vCsAqfwY15n-8b2COX2wfHPxEH_aWmkT5SlpiRP7WPPIbiJJcSZQAKQFhxC96NDNcz7eEK_NiO-c5-1_w6YchNGDTrg7JgzEqPf4S-D-/s400/Screenshot+%252887%2529.png', 'pageName': 'Deface Dengan Teknik Bypass Admin Login Dengan SQL Inject', 'pageTitle': 'GNB09 REBORN: Deface Dengan Teknik Bypass Admin Login Dengan SQL Inject', 'metaDescription': ''}}, {'name': 'features', 'data': {}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Tautan disalin ke papan klip!', 'ok': 'Oke', 'postLink': 'Tautan Pos'}}, {'name': 'template', 'data': {'name': 'custom', 'localizedName': 'Khusus', 'isResponsive': false, 'isAlternateRendering': false, 'isCustom': true}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'Deface Dengan Teknik Bypass Admin Login Dengan SQL Inject', 'description': 'Kumpulan Informasi, Tutorial, Script dan lain lain', 'featuredImage': 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiML7ZJx75Nbqdtbfs8pCyrZtWuXxpFOktryew1vCsAqfwY15n-8b2COX2wfHPxEH_aWmkT5SlpiRP7WPPIbiJJcSZQAKQFhxC96NDNcz7eEK_NiO-c5-1_w6YchNGDTrg7JgzEqPf4S-D-/s400/Screenshot+%252887%2529.png', 'url': 'https://gnb09r.blogspot.com/2016/08/deface-dengan-teknik-bypass-admin-login.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 2910567287926437933}}]);
_WidgetManager._RegisterWidget('_NavbarView', new _WidgetInfo('Navbar1', 'navbar', document.getElementById('Navbar1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HeaderView', new _WidgetInfo('Header1', 'header', document.getElementById('Header1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogView', new _WidgetInfo('Blog1', 'main', document.getElementById('Blog1'), {'cmtInteractionsEnabled': false, 'lightboxEnabled': true, 'lightboxModuleUrl': 'https://www.blogger.com/static/v1/jsbin/2332438401-lbx.js', 'lightboxCssUrl': 'https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML80', 'recent-post-one-thumb-1', document.getElementById('HTML80'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogSearchView', new _WidgetInfo('BlogSearch1', 'recent-post-one-thumb-1', document.getElementById('BlogSearch1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_AttributionView', new _WidgetInfo('Attribution1', 'recent-post-one-thumb-1', document.getElementById('Attribution1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ReportAbuseView', new _WidgetInfo('ReportAbuse1', 'recent-post-one-thumb-1', document.getElementById('ReportAbuse1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PageListView', new _WidgetInfo('PageList1', 'recent-post-one-thumb-1', document.getElementById('PageList1'), {'title': '', 'links': [{'isCurrentPage': false, 'href': 'https://gnb09r.blogspot.com/', 'title': 'Beranda'}], 'mobile': false, 'showPlaceholder': true, 'hasCurrentPage': false}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ProfileView', new _WidgetInfo('Profile1', 'recent-post-one-thumb-1', document.getElementById('Profile1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_FeaturedPostView', new _WidgetInfo('FeaturedPost1', 'recent-post-one-thumb-1', document.getElementById('FeaturedPost1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML81', 'recent-post-one-thumb-2', document.getElementById('HTML81'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_PopularPostsView', new _WidgetInfo('PopularPosts1', 'panel-1', document.getElementById('PopularPosts1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_LabelView', new _WidgetInfo('Label1', 'panel-2', document.getElementById('Label1'), {}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_BlogArchiveView', new _WidgetInfo('BlogArchive1', 'panel-3', document.getElementById('BlogArchive1'), {'languageDirection': 'ltr', 'loadingMessage': 'Memuat\x26hellip;'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_ContactFormView', new _WidgetInfo('ContactForm1', 'left', document.getElementById('ContactForm1'), {'contactFormMessageSendingMsg': 'Mengirim...', 'contactFormMessageSentMsg': 'Pesan sudah dikirim.', 'contactFormMessageNotSentMsg': 'Pesan tidak dapat dikirim. Coba lagi nanti.', 'contactFormInvalidEmailMsg': 'Alamat email harus valid.', 'contactFormEmptyMessageMsg': 'Bidang pesan harus diisi.', 'title': 'Formulir Kontak', 'blogId': '263768467202772768', 'contactFormNameMsg': 'Nama', 'contactFormEmailMsg': 'Email', 'contactFormMessageMsg': 'Pesan', 'contactFormSendMsg': 'Kirim', 'contactFormToken': 'AOuZoY6ux19GwKzZmFHu9sc2zEcsWODloQ:1740281247448', 'submitUrl': 'https://www.blogger.com/contact-form.do'}, 'displayModeFull'));
_WidgetManager._RegisterWidget('_HTMLView', new _WidgetInfo('HTML1', 'center', document.getElementById('HTML1'), {}, 'displayModeFull'));
</script>
</body>-->