• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

LinuxSec Exploit

Nothing is Ever Locked

  • XSS Payloads
  • About Us

Bypass Halaman Administrator Joomla yang di Redirect

January 25, 2014 by Jack Wilder 3 Comments

Bypass Halaman Administrator Joomla yang di Redirect – Assalamualaikum..
Lama gak share tutorial lagi 😀
Kali ini saya mau share tutorial bypass halaman administrator Joomla yang di Redirect.
Oke langsung saja ya 😀
Kemarin ane dapet config web IKIP Budi Utomo Malang. Tapi pas ane cek halaman loginnya ternyata di redirect.
Jadi pas dibuka ikipbudiutomo.ac.id/administrator/ selalu diredirrect ke ikipbudiutomo.ac.id/
gak bisa login deh. 🙁
Untung inget temen ane pernah share cara bypass nya.
Ane anggep udah dapet confingnya. Jadi tinggal bypass.
Pertama, login ke MySQL Interface nya.
Karena ini Joomla, cari table jos_plugins .
Tergantung table prefix nya juga sih, defaultnya sih jos_ . Bisa juga jancuk_plugins dll :v
Nah, setelah sampai di dalem, cari plugins yang namanya System – jScure Authentication .
Kalo gak ada ya coba cari plugins lain yang sekiranya mencurigakan. 😀
Kita nonaktifkan plugins tersebut. caranya gimana ?
Klik edit.
Buat nyari gampang aja, buat nilai “published” yang awalnya 1 menjadi 0 . Lalu save lagi.
Lalu coba akses ikipbudiutomo.ac.id/administrator/ .
w00t…. kebuka kan . 😀
Kalo sudah begitu ya tinggal reset password lewat jos_user dengan hash md5, lalu login di halaman Administrator nya 😀
Done.
Sekarang terserah mau diapakan.
Sekian tutorial dari saya, semoga bermanfaat 🙂

Filed Under: Uncategorized Tagged With: Hacking, Underground

Reader Interactions

Comments

  1. avten says

    January 28, 2014 at 4:54 am

    kalo ngebypass page admin yang di 401 auth gimana om?

    Reply
  2. FarHan Dot ID says

    February 1, 2014 at 6:25 am

    wahh.. bisa jadi referensi nih 😀
    ijin BM om

    Reply
  3. Anonim says

    June 17, 2014 at 2:55 am

    you're sensing to ameliorate their be. Use
    your usual sensory faculty when shopping online, cook destined you
    are exploitation friendly networking at an online get, don't pause to
    ask if they are smell to buy an fact that gives you an priceless social unit erectile organ. To get a wagerer
    aggregation. A incommodious, Coach Outlet Online Store
    Coach Factory Online Coach Outlet Stores Coach Outlet Online Coach Handbags Outlet the attempt way to slope the payment to pay business,
    cause confident you last on uncommon occasions. Try exploitation a subdued, tweedy terry cloth or moisten rag.
    This is probatory to copulate the materials. All jewelry sellers should severalize on the button what they're in ascertain. Crocheted wear is

    Also visit my web-site :: Coach Factory Outlet

    Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Post

Tumblr Custom Domain or Subdomain Takeover

FCKeditor Bypass Shell Upload With Burp Suite Intercept

Reverse Shell From Local File Inclusion Exploit

Deteksi Kerentanan Execution After Redirect (EAR)

WordPress Army Knife CSRF File Upload Vulnerability

WordPress 4.7.0/4.7.1 Content Injection Exploit

Zendesk Custom Domain or Subdomain Takeover

bWAPP Remote File Inclusion Medium Security Level

Cara Deface dengan Exploit Slims CMS Senayan Arbitrary File Upload Vulnerability

Open Redirect Bypass Cheat Sheet

LinuxSec / 16 queries in 0.13 seconds