• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

LinuxSec Exploit

Nothing is Ever Locked

  • XSS Payloads
  • About Us

Cara Deface Dengan Encodable Upload Vulnerability | Tutorial for Newbie

February 22, 2013 by Jack Wilder 26 Comments

Kali ini saya akan share tutorial deface dengan teknik upload. Teknik ini tergolong mudah dan masih banyak target yang vuln dengan cara ini sehingga kita bisa memilih target sepuasnya.
Oke, langsung saja kita mulai tutorialnya.
Google Dork : “intext:File Upload by Encodable”

Maka kita akan menemukan banyak target. Kita pilih salah satu. Sebagai contoh saya pilih http://www.hillconstruction.us/cgi-bin/filechucker.cgi .
Lalu kita upload file deface kita. Filenya berformat txt.

Klik tombol pilih berkas. Cari file txt nya [sebagai contoh saya namai filenya dengan nama x.txt . Lalu klik begin upload . Tunggu sampai proses upload selesai.
Sekarang coba buka link berikut http://www.hillconstruction.us/files/uploaded/x.txt
Selesai !

NB :

  • Beberapa web memerlukan data seperti e-mail sebelum meng-upload . Isi saja data-data tersebut namun jangan diisi dengan e-mail asli.
  • Tempat hasil deface sobat tidak selalu berada di direktori files/uploaded . Bisa saja di /upload/files/ atau /upload/userfiles/ . Tergantung dimana sobat menyimpannya.

Filed Under: Uncategorized Tagged With: Hacking

Reader Interactions

Comments

  1. BlogS of Hariyanto says

    February 22, 2013 at 10:34 pm

    lagi-lagi saya hanya bisa duduk mmanis, mencoba menyimak dan memahami arti sebenarnya dari deface yang tertulis dalam artikel ini 🙂

    Reply
    • chiaki says

      February 23, 2013 at 1:09 am

      Cari di google. :v

      Reply
  2. Brebes VS Lamongan says

    February 23, 2013 at 1:23 am

    selamt pgi sobat. di tempat ane lgi musim dingin jadi kami sengaja kesini mau nganterin kopi biar semangat beraktifita. trmksih,ni info dan postingannya mas

    Reply
    • chiaki says

      February 23, 2013 at 3:30 am

      Oke

      Reply
  3. putra says

    February 23, 2013 at 2:08 am

    hohoho ,,,, alat lagi .. saya koleksi lah ….

    Reply
    • chiaki says

      February 23, 2013 at 3:31 am

      Oke kawan. . .

      Reply
  4. budi os 19 says

    February 23, 2013 at 3:06 am

    ta kira siapa sob…foto profilnya ganti lagi…hehe
    ta…baca2 lagi tulisannya lagi..sob biar mudeng hehe 🙂
    lanjut 🙂

    Reply
    • chiaki says

      February 23, 2013 at 4:31 am

      Oke sobat. Hehehe

      Reply
  5. Rozi says

    February 23, 2013 at 4:34 am

    Wah, madura ya? Saya juga Madura, tapi tak paham soal deface. 😀

    Reply
  6. Djangkaru Bumi says

    February 23, 2013 at 5:57 am

    saya jadi serem nih, bayanginnya. ternyata tidak mudah ya. saya hanya bisa memberi suport aja deh.

    Reply
    • chiaki says

      February 24, 2013 at 2:24 am

      Ya kawan. . .

      Reply
  7. Muro'i El-Barezy says

    February 23, 2013 at 6:17 am

    walau buat newbie, saya masih keriting nih dahinya hehe..makasih sobat Hattori Kun (sudah bikin nasi kuning belum hehe..)

    Reply
    • chiaki says

      February 23, 2013 at 5:53 pm

      Sebenarnya ini akun yg kedua. Hehehe

      Reply
  8. Penghuni 60 says

    February 23, 2013 at 8:09 am

    waduh, aku kok gak ngerti ya apa yg km bahas sob?

    Reply
  9. Wahyu Dwi says

    February 23, 2013 at 10:05 am

    wah mantep mas tutor nya mudah untuk di pahami 🙂

    Reply
    • chiaki says

      February 23, 2013 at 11:51 pm

      Thanks sob. . . . .

      Reply
  10. Imtikhan.Com says

    February 23, 2013 at 10:15 am

    postingan yg bermanfaat sob
    jadi tambah tau…
    terima kasih ya

    Reply
    • chiaki says

      February 24, 2013 at 2:23 am

      Sama2

      Reply
  11. Brebes VS Lamongan says

    February 23, 2013 at 11:23 am

    muter2 ko nyampek kesini lgi'y hehehe

    Reply
    • chiaki says

      February 23, 2013 at 5:53 pm

      Thanks kawan. . .

      Reply
  12. Alt Amiend says

    February 23, 2013 at 3:01 pm

    belajar kesini malam hari gan!

    Reply
  13. Bung Penho says

    February 23, 2013 at 6:45 pm

    simple juga ya tekniknya!

    Reply
  14. Habib Ihza Alamsyah says

    February 24, 2013 at 1:50 pm

    mas, cara deface web di homenya gimana ya?

    Reply
  15. Anonim says

    February 24, 2013 at 6:08 pm

    extensi pa ja ne yang bs sob???

    Reply
  16. Anonim says

    April 4, 2013 at 5:33 am

    CARA DEFACE WEBSITE YG LANGSUNG INDEX NYA GMN BOSSSS
    ?????

    Reply
    • chiaki says

      April 14, 2013 at 11:43 pm

      Lu gk baca artikel lain ya ?

      Reply

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Post

Laravel PHPUnit Remote Code Execution

CVE-2019-13360 – CentOS Control Web Panel Authentication Bypass

WordPress 4.7.0/4.7.1 Content Injection Exploit

Deface dengan Metode Timthumb Remote Code Execution

DNS Hijacking through Social Engineering

FastMail Custom Domain or Subdomain Takeover

Mass Deface setelah Rooting Server

Reverse Shell From Local File Inclusion Exploit

Cracking FTP Password using Hydra on BackBox Linux

Uptimerobot.com Custom Domain or Subdomain Takeover

LinuxSec / 18 queries in 2.38 seconds