Home

About

Milis

Blog Roll

Group Facebook

XCode Magazine

1,2,3,4,5,6,7,8,9,10,11,12,13,14,15

Selamat Datang Di Komunitas Yogyafree

Selamat datang di komunitas XCode - Yogyafree - Yogya Family Code. Disini kita saling berbagi ilmu komputer, baik hacking, security, programming, software engineering dan lain sebagainya. Klik disini untuk register

Panel
Welcome! Anonymous

plnaceh.co.id - hacked by ang3lite

[ Facebook comments]

Forum untuk membahas semua tentang web hacking mulai dari footprint, scanning, gain access, escalate previlege, exploit,cover track, backdoors sampai mengamankan web

Moderators: Paman, Xshadow, indounderground, NeOS-01

Forum rules
Membahas bugs,penetrasi, eksploitasi dan teknik mengamankan website - websrver. Sertakan POC disini agar member dapat mempelajarinya

Re: binun mo ngapaen???

Postby poni » Sat May 08, 2010 10:18 pm

He3. Ada titipan pesan buat ang3lite di plnaceh.co.id
.::...Cr3ditz......::....
join us : www.xcode.or.id - 001101
"@ b3tt3r d1g1t4l w0rlD" -- 010110000110001001
User avatar
poni
 
Posts: 1666
Joined: Mon Dec 05, 2005 10:44 am
Location: Indonesia

Re: plnaceh.co.id - hacked by ang3lite

Postby poni » Sun May 09, 2010 12:15 am

screenshot:
Image
admin module

Image
Edit berita

Image
congrat : ang3lite

Image
forum admin panel. sayang mereka pake versi 2.0.7. belum ada fitur upload file.

hehehe tanpa di audit udah dapat kelemahannya oleh ang3lite
.::...Cr3ditz......::....
join us : www.xcode.or.id - 001101
"@ b3tt3r d1g1t4l w0rlD" -- 010110000110001001
User avatar
poni
 
Posts: 1666
Joined: Mon Dec 05, 2005 10:44 am
Location: Indonesia

Re: plnaceh.co.id - hacked by ang3lite

Postby m4rtincornelis » Sun May 09, 2010 9:13 am

ngasih tau admin nya, malah jadi boomerang..

kan udah ada undang²nya.. :circle:
Image Image
"Therefore do not fear them, for there is nothing covered that not be revealed,
and nothing hidden which shall not be known." (Matthew 10:26)
User avatar
m4rtincornelis
 
Posts: 40
Joined: Fri Jul 13, 2007 12:29 am
Location: ..galilea

Re: plnaceh.co.id - hacked by ang3lite

Postby poni » Sun May 09, 2010 10:40 am

Wew diskon 80% khusus NAD
.::...Cr3ditz......::....
join us : www.xcode.or.id - 001101
"@ b3tt3r d1g1t4l w0rlD" -- 010110000110001001
User avatar
poni
 
Posts: 1666
Joined: Mon Dec 05, 2005 10:44 am
Location: Indonesia

Re: Kelanjutan dari plnaceh.co.id

Postby 3xtr3m3b0y » Sun May 09, 2010 1:28 pm

Coba2 kumpulkan informasi tambahan :

Diambil dari salah satu halaman pada web PLN ACEH yg berisi pengumuman hasil tes.
Code: Select all
http://222.124.186.60/files/HASIL_TESPSIKOLOGI.htm

Mundur 2 langkah grakkk, hadap kanan jungkir balik jalannn...!!!
Code: Select all
http://222.124.186.60/

Hmm, Web PLN ACEH yg lain, tp lokasi server berada di kantor PLN ACEH dech...
Baik mari kita lanjutkan pencarian, selanjutnya cek jenis OS yg digunakan, buka dir yg gak ada biar error, biasanya di bagian footer, ada tercantum jenis OSx.
Code: Select all
http://222.124.186.60/test

Yg muncul kemudian:
Apache/2.2.9 (Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/4.4.9

Hmm, pke Win***s ternyata, nyoba2 nambahin dir xampp, sapatau webservernya pke xampp
Code: Select all
http://222.124.186.60/xampp
http://222.124.186.60/xampp/phpinfo.php

Benerkan...??? Selanjutnya, sy coba scan mesinya pke nmap.
Code: Select all
$ nmap -A 222.124.186.60

Starting Nmap 4.53 ( http://insecure.org ) at 2010-05-09 12:50 CIT
Stats: 0:00:00 elapsed; 0 hosts completed (0 up), 0 undergoing Ping Scan
Ping Scan Timing: About 100.00% done; ETC: 12:50 (0:00:00 remaining)
SCRIPT ENGINE: rpcinfo.nse is not a file.
SCRIPT ENGINE: Aborting script scan.
Interesting ports on 222.124.186.60:
Not shown: 1541 closed ports, 163 filtered ports
PORT     STATE SERVICE       VERSION
25/tcp   open  smtp          Microsoft ESMTP 6.0.3790.1830
80/tcp   open  http          Apache httpd 2.2.9 ((Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/4.4.9)
443/tcp  open  ssl/http      Apache httpd 2.2.9 ((Win32) DAV/2 mod_ssl/2.2.9 OpenSSL/0.9.8i mod_autoindex_color PHP/4.4.9)
563/tcp  open  snews?
800/tcp  open  http          Microsoft IIS webserver 6.0
1040/tcp open  msrpc         Microsoft Windows RPC
2030/tcp open  oracle-mts    Oracle MTS Recovery Service
2301/tcp open  http          HP Proliant System Management 2.1.14.204 (CompaqHTTPServer 9.9)
3389/tcp open  microsoft-rdp Microsoft Terminal Service
5560/tcp open  http          Oracle Application Server httpd 9.0.4.0.0
Device type: general purpose
Running (JUST GUESSING) : Microsoft Windows XP|2003 (92%)
Aggressive OS guesses: Microsoft Windows XP SP2 (92%), Microsoft Windows XP SP2 (firewall disabled) (87%), Microsoft Windows XP Home SP2 (87%), Microsoft Windows Server 2003 SP1 or SP2 (85%), Microsoft Windows Server 2003 SP2 (85%), Microsoft Windows XP Professional SP2 (firewall enabled) (85%)
No exact OS matches for host (test conditions non-ideal).
Service Info: Host: webplnaceh.nad.corp.pln.co.id; OS: Windows

Semua port yg terbuka sangat menarik, misalnya port 3389 yg merupakan port Remote Desktop pada Win***s.

Ok, demikian info tambahan yg bisa sy berikan, info di atas hanyalah informasi awal dan tentunya perlu dilakukan explore lebih jauh...

NB: Sy menampilkan informasi tsb di atas utk bahan pelajaran baik bagi teman2 X-Coder dan pengelola. Sama sekali tdk ada unsur utk melakukan pengrusakan pada fasilitas publik. Saya jg tdk bertanggung jahat atas penyalah gunaan informasi di atas.
...n0 l1m17...
User avatar
3xtr3m3b0y
 
Posts: 317
Joined: Wed Apr 22, 2009 5:11 pm
Location: ~[Hacked Machine]~

Re: plnaceh.co.id - hacked by ang3lite

Postby poni » Sun May 09, 2010 6:55 pm

Uda yg banyak nyusup kekna.
.::...Cr3ditz......::....
join us : www.xcode.or.id - 001101
"@ b3tt3r d1g1t4l w0rlD" -- 010110000110001001
User avatar
poni
 
Posts: 1666
Joined: Mon Dec 05, 2005 10:44 am
Location: Indonesia

Re: plnaceh.co.id - hacked by ang3lite

Postby Ang3lite » Mon May 10, 2010 2:16 pm

WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA!!!!!!!!!!!!!!!!!!!! :omg:
kk Judulnya koq digenti??? mana serem amat judulnya,,,???
klo admin PLN tau truz baca tret ni? (Uber2 mode On)

kk2 admin n member sori kalo aq blak2an memposting, ni post pertama aq, kliatan kyak nyari sensasi kayak nyah??? (ahaha PASS na pke di CENSORE), aq kira setiap informasi di dunia maya itu free??(Kata2 paan ya tu) \m/

kk 3xtr3m3b0y (aq ho'oh ajj,, ndak ngerti yg di jelasin paan???) klo bs pass na di genti ja, jd ga enak aq, klo diisengin org laen,,, apalgi ampe di hancurkan (tambah beban dosa aq), dah 5 harian dari awal aq msk ntu site ga da perubahan?? ga terurus kayak nyah,,,????

wkakak,,,, kk Poni ntu site ga da fasilitas upload na ya??? pantes aq dah ngubek2 kmana2 ga nemu ( jd malu,kliatan oon na :malumalu: ),,, pdahal mo masukin ni=
Image
wkakakakakakakakakakkkk,,,


:maaf: :maaf: :maaf:
skali lg bwt admin PLN atw staff2 na (yg baca n nemuin tret ni) sori beribu sori, aq cma ngerusak content vote ma misi n visi PLN (ntu pun dah qu delete)weheheheh,,,jd klo da yg selebih na, ntu bkan saia??? site plnaceh.co.id bagus koq,,, cma kuncinya digantung di pintu, tamu kyak aq ja tau pa lg rampok??? (sama ja kayaknyah :ngakak: )

PISS ah smua, kk admin x code n member, n Hacker Aceh jg (sepi diforum ma seminar ni, wkakakak),
"aq lg belajar bkan nyari sensasi",,,,,,,,,,,,,,,,,,,,,,
jd takut ni aq, heheheheheh
(gempa 7,2 maksud na) wkwkwkwwkwkwkw...
for my sins
User avatar
Ang3lite
 
Posts: 13
Joined: Sat Mar 13, 2010 12:38 pm

Re: plnaceh.co.id - hacked by ang3lite

Postby poni » Mon May 10, 2010 4:49 pm

Ang3lite : santai aja.hue3.mungkin adminnya pun blm dibayar gajinya.jd malas urus web.
.::...Cr3ditz......::....
join us : www.xcode.or.id - 001101
"@ b3tt3r d1g1t4l w0rlD" -- 010110000110001001
User avatar
poni
 
Posts: 1666
Joined: Mon Dec 05, 2005 10:44 am
Location: Indonesia

Re: plnaceh.co.id - hacked by ang3lite

Postby demonbrando » Mon May 10, 2010 10:33 pm

Image

Saya juga ikut satu om poni,hehehe.... :devil :devil
jalani hidup ini dengan santai tapi jangan lupa ibadah..
User avatar
demonbrando
 
Posts: 342
Joined: Thu Oct 15, 2009 12:49 am

Re: plnaceh.co.id - hacked by ang3lite

Postby Ang3lite » Tue May 11, 2010 5:51 pm

poni wrote:Ang3lite : santai aja.hue3.mungkin adminnya pun blm dibayar gajinya.jd malas urus web.



Ahahah,,, Kk Poni ja yg jd admin na gmana ??? kan kk sukarelawan yg tidak sombong :malumalu: :malumalu: :malumalu:



Yo kk demonbrando,,,, KPK didada mu,,,,,,,,,,,,,,,,,,,,
for my sins
User avatar
Ang3lite
 
Posts: 13
Joined: Sat Mar 13, 2010 12:38 pm

leave a comment

PreviousNext

Return to Web Hacking

Who is online

Users browsing this forum: No registered users and 12 guests

Web Counter Start : December 14th 2009
Hit Counters

http://www.xcode.or.id