Showing posts with label Dorks. Show all posts
Showing posts with label Dorks. Show all posts

Thursday, 16 February 2012

SimogeoFilemanager Upload File Vulnerability ...( Upload Your Shell )



Hey frenzz,
Today i ws lookin 4 a new vulnerablility n find out this vulnerability. original advisory for this post is 1337day.
Auther of this Exploit  is RoxSecurityTeam.

  




I brought this post for EDUCATIONAL purpose not for misuse or illegal ways of Hacking...


WARNING: I am not reponsible of any harm with this methods. ....Do it at your own risk.



Google Dorks: 


inurl:/filemanager/userfiles/ 
filetype:pdf 
inurl:/filemanager/index.html


Steps:


1.Search site that contains the vulnnerable file /filemanager/index.html
2.Upload Backdoor Shell.php
3.Move to the folder where files are stored /UserFiles/ Exemple: http://site.com/filemanager/UserFiles/Shell.php
4.you can have full access to your shell


Demonstration :
http://www.comune.gattinara.vc.it/newSys/ckeditor/filemanager/index.html
ftp://193.9.21.135/riba.si/wwwroot/cms/controls/ckeditor/filemanager/index.html


njoy ;)


Thanks To Techno Paradise


Keywords: learn to hack, facebook hacking software download, gmail hacking, twitter hacking , cmd hacks, tips and Securities, youtube downloader, download youtube download,angry birds free download,how to remove this copy windows not genuine, AHSEC previous year question paper for hs 2nd year, AHSEC 2012 question papers for hs 2nd year and final year, Windows Softwares free download AHSEC sample papers for hs final year, free download youtube downloader, youtube downloader free download, learn free hacking, learn hacking free, customize windows, customize windows 7, customize win 7, free hacking softwares, free hacking softwares download, hacking software free download how to hack, learn hacking, learn how to hack, hacking tips, english songs free download, free english songs download, hollywood songs download, become a hacker,Anti Hacking , Hacking , Learn Hacking , Learn Protection from Hackers, warez , Http Proxy , L1/L2/L3 HTTP Proxies , Fresh HTTP High Anonymous / Anonymous / Transparent Proxies ,4/5 socks proxies , keygens , cracks , cracked softwares , cracked programs , keyloggers , bots , RAT , rootkits , shell scripts , free premium accounts , yahoo boters , yahoo programs , yahoo tutorials , yahoo id maker , yahoo room tools , nimbuzz hacking , flooders , programming , pc protection tutorials , security alets , security tutorials , Exploits , Exploit , hacking,hackware,hackers,hack,cracker,crack,patch,serial,software,forum,vulnerability,application,lounge,white hat,graphics,programming,computer,protection,security,alerts,Networking,server,exploits,myspace,warez,downloads,keygen,keylogger,coding,facebook,orkut,flooders elite team,botnets,exploits, reviews, malicious,reverse engineering, analysis, DDOS, Shell, Protect, taskhost, CMD, Net, Bytes, Kilobytes, Megabytes, Gigabytes, Terrabytes, free support, United Kingdom, United States, Alexa, Google, Yahoo, Baidu, Competition, Tabbed head in MYBB,Tab Head plugin, SEO,cpanel, control panel, Proxy, VPN, Webhosting, Webmaster download free hacking tools, free hacking program, hacking software, largest underground hacker convention, hacking security conference, hacking forum, pen-testing, penetration testing, hacker gathering,skywalk3r, lockpicking, hacker community, goons, computer exploits, zero day vulnerabilities, 0day, robotics, hacker attack, defend against hackers hacking, icq, cryptography, hotmail, trojans, cracks, bo2k,aol, firewall, warez, proxy, trojan, subseven, linux, back orifice, serials, flooding, web board, appz, yahoo, passwords, nuke, credit card, irc, netsphere, wingate, gsm,proxies, password, telnet, exploits, bomber, phreaking, spoof,nuker, crack, nukes, serial, virii, cracking, unscambler,jammer, adult check, crackers, crackz, hack, ip, sniffing, wingates, surf,exploit, nukers, anonymous, hackz, antivirus, net bus, satan,smurf attacks, teardrop, security, keyloggers, port scanner,warfare, spoofers, internet, anonymity, cryptology, pgp, mark zuckerburg, Facebook, facebook hack, facebook hacking software, facebook hacking techniques, website hacking, hack website, website hacking software, website deafcing, web deface, web defacing, email hacking, hack email id, hack email, hack ones email, email hacking software, email bomber, hacking, hackingsart, virus!!
Read More

Monday, 13 February 2012

Write vulnerablity On China Government websites

I Got a new Write vulnerablity On China Government websites, This vulnerablity allow to hackers for writing in Files remotly.


You can Write your message in fileds Like " Hacked by XYZ"


 so Lets Start Goto A search portal (Google.cn or Yahoo and Baidu )and type this dorks one by one : 
"inurl:admin/gg1/list.asp"
"inurl:admin/gg1/"
after opening website from serch result go to : website.com/admin/gg1/list.asp 
and Transte page using Google Translator and Find edit option and edit that Page 
Then Paste your message there 

now click on save button and check website.com/admin/gg1/list.asp  again 
now you'll got your message here =) You sluold Make a Miror after editing because someone elase can cange your message [Best Mirror Provider Websites]
Live demo :
http://fpb.zhuxi.gov.cn/admin/gg1/list.asp  
http://www.tianzhushan.gov.cn/admin/gg1/list.asp  
http://www.jtzl.gov.cn/admin/gg1/list.asp  
http://www.dbs110.gov.cn/admin/gg1/list.asp  
http://www.rzrsld.gov.cn/admin/gg1/list.asp  
http://www.xiejia.gov.cn/admin/gg1/list.asp  
http://www.qjrenda.gov.cn/admin/gg1/list.asp  
http://www.investna.gov.cn/admin/gg1/list.asp  
http://www.bzhbj.gov.cn/admin/gg1/list.asp  
http://www.kfxrmzf.gov.cn/admin/gg1/list.asp  
http://www.westkj.gov.cn/admin/gg1/list.asp  
http://www.ytjtw.gov.cn/admin/gg1/list.asp  
http://www.jjmaqiao.gov.cn/admin/gg1/list.asp  
http://xnmw.xining.gov.cn/admin/gg1/list.asp  
http://www.dantulss.gov.cn/admin/gg1/list.asp  
http://www.bazhouhb.gov.cn/admin/gg1/list.asp

Enjoy Hacking & Stay Tuned More Tutorials To Come ;)


Read More

Wednesday, 8 February 2012

Sites that crack md5 hashes




* www.tmto.org
* md5.noisette.ch
* md5decryption.com
* www.c0llision.net
* www.netmd5crack.com
* www.md5decrypter.com
* md5hashcracker.appspot.com
* www.hashhack.com
* isc.sans.edu
* www.md5crack.com
* passcracking.com
* authsecu.com
* md5.rednoize.com
* md5.web-max.ca
* www.cmd5.com
* md5.thekaine.de
* www.shell-storm.org
* www.md5this.com
* www.hashchecker.com
* hashcrack.com
* md5pass.com
* md5pass.info 
* cmd5.org
Read More

"Encodable" ~ another Deface and shell upload Vulnerablity

Title : "Encodable" ~ another File Upload Vulnerablity
safe_image.php (90×90)Google Dork : "intext:File Upload by Encodable"

Lets Start .. xd
open google.com and enter this dork :  "intext:File Upload by Encodable"
result comes with 166,000 results but some results are fake ... its may be malwaers 
so pick real things only , "Upload a file"  You will this title in search results here :)
click the sites sites only which comes with upload a file title 
after click the link  you'll got a upload form 
you'll saw some options in this form like name Description email etc ...
 type anything in these boxes but add a email in email box, dont use your own 
put this one billy@microsoft.com , admin@nasa.gov etc :P

now choose you file and upload it :) 

after clicking on upload button a pop-up will be open ... dont close it, it will automatilcly closed 
after uploading file 

in some sites you'll got you uploaded  file link after uploading on website  
and if you did not file it then try these url
/upload/files/
or /upload/userfiles/

Live Demo : http://150.101.230.65:8008/cgi-bin/filechucker.plx
Uploaded page : http://150.101.230.65:8008/upload/files/xd.html

Must Leave a Cooment because new article's Posting depends on old article's Populartiy 

"Winners Don't Do Diffrent Things, 
                            They Do things Diffrently "

Thanks To HackingArts.in

Read More