Tutor Deface Dengan User Default Balitbang

[+] Post Title :

Tutor Deface Dengan User Default Balitbang

[+] Date : Sabtu, 19 April 2014
[+] Author : SixZero
[+] Link : http://b-h-t.blogspot.com/2014/04/tutor-deface-dengan-user-default.html
[+] Type : Tutorial

Dork :
1. inurl:"/html/index.php" intext:"Tim Balitbang"
2. inurl:"/html/index.php" intitle:"Selamat Datang"
3. inurl:"/member/" intext:"Tim Balitbang"

Dork In Bing..

1. IP:[target-IP] /html/
2. IP:[target-IP] sch.id
3. IP:[target-IP] ac.id
4. IP:[target-IP] blablablaa… hahaha!

Default Member :
------------------------------------------------------------------
Username     |   Password   |    Details  |  Shell Upload  |
------------------------------------------------------------------
alan                  123456            guru          available
tomi                  123456           guru          available
kickdody          123456            guru          available
siswanto           123456            guru          available
taufik                123456            guru          available
wardjana           123456            guru          available
choirulyogya     123456            guru          available
alumni               123455           siswa          not available
070810120        123456           siswa          not available
-------------------------------------------------------------------

Setelah kita ketahui data - data default login member CMS Balitbang diatas, langkah selanjutnya adalah.

Sign in member form,,,
http://localhost/member/

Selanjutnya

Login and upload shell, lewat SIM -> Data Laporan, kemudian tambahkan laporan, nah dari sini kita upload shell kita, otomatis shell yg terupload akan berada pada path http://localhost/laporan/