Home Posts filed under script
Showing posts with label script. Show all posts
Showing posts with label script. Show all posts

Friday, November 13, 2020

Script Phising Free Fire 2020 Shopping Spree

 Script Phising Free Fire 2020 Shopping Spree



Halo sobat, karena banyak sekali yang minta saya untuk share script phising free fire maka sekarang saya akan share nih, sorry ya lama ga upload karena saya bingung mau upload apaan hadeh.

Jadi script phising Script Phising Free Fire 2020 Shopping Spree ini punya fitur :
  • Tanpa Email ( Jadi bisa dijalankan dimana aja )
  • Tidak mudah dibanned pihak hosting karena tidak menggunakan emai
  • Pre-True login ( Hanya email yang valid yang bisa ngisi )
  • Dilengkapi Result Dashboard

Jadi Script phising ini tidak menggunakan email untuk mengirim result, melainkan melihat langsung dari dashboard cara nya dengan membuka http://websitephisingmu.com/result.php > masukkan password yang telah di set di password.php > Berhasil, semua result akan ditampilkan...

Link Download : 
Disini

Script phising free fire, script phising 2020, script phising gratis, script phising gratis 2020

Read more

Saturday, January 25, 2020

By.U SOP Bypass | Cors Misconfiguration

Hasil gambar untuk by.u

Halo guys Rafli disini. Saya lagi semangat update nih hehehe. Kali ini saya mau sharing penemuan lagi nih dimana saya nemu CORS Misconfiguration di BY.U . Bagi yang belom tau By.u adalah provider kartu SIM yang tergolong baru dan milenial banget. byu ini anakan dari telkomsel guys silahkan kalo minat beli aja.

Ok Pertama tama kenapa saya langsung tulis write up ? karena cors misc ini adanya di API aplikasi android by.u maka dari itu kita tidak bisa melakukan real-world execution... karena cookie / barear headernya ada di aplikasi byu bukan di browser...

Jadi di api byu terdapat header :

Cache-Control: no-cache, private
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: authorization,Authorization,Content-Type,order_id,msisdn,Request-Origin

 Kita bisa lihat mereka menambahkan header Allow-Origin: * yang artinya semua web bisa melakukan request ke api byu.. tapi gaes untuk melakukan csrf attack via cors misconfiguration ini dibutuhkan header Allow-Credentials: true. di byu ini gak ada headernya .. jadi kalo kita lakukan request menggunakan ajax xhr akan mendapatkan respon :
Access to XMLHttpRequest at 'http://api.byu.id/api/profile/1' from origin 'null' has been blocked by CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested resource.

 xhr/ajax tidak bisa mengirim request ke by.u karena hal tersebut. tapi taukah kalian ada cara lain nya loh. Kita bisa membypass SOP ini dengan Browser Cache. Hal ini pernah di coba oleh Hacker yang mengirim laporan ke hackerone :
SOP Bypass using Browser Cache

Nah sudah pada baca kan  ? Nah di byu ini kita bisa dapetin email dan nama serta gambar akun tersebut, caranya kita tinggal buat javascript yang melakukan request menggunakan fetch() ke api byu. server akan meloloskan request tersebut karena kita bisa pake credentials dari web tersebut menggunakan cache.

Code :

<html>
<script>
fetch('https://api.byu.id/api/profile/1')
  .then(response => response.json())
  .then(commits => alert("Email mu adalah : " + commits.data.email + "\r\nNama : " + commits.data.name));
</script>
</html>

Jika kalian mau test kalian buka by.u lalu ambil header authorization milik kalian ( sniff request nya ) lalu copy dan paste di modify header. Setelah itu kalian bisa buka html yang berisikan code tersebut dan jeng jeng Kalian bisa dapat deh...

Oke sekian itu aja dari saya untuk kali ini semoga kalian suka. dan untuk CS byu soory ya gaes udh adu argumen ketikan. thx yu.
Read more

Thursday, January 10, 2019

Fix / Patch Bug SQL injection [ Protect Website From Hacker ]

Fix / Patch Bug SQL injection [ Protect Website From Hacker ]



 Halo sobat rafli haxor, pada kesempataan kali ini saya mau share cara fix Bug SQL Injection di Website mu. Tips and trick ini sudah 100% teruji oleh saya dan saya jamin tahan sql injection. tapi sebelum itu kalian harus tahu dulu apa itu sql injection.

 SQL Injection

 A SQL injection attack consists of insertion or "injection" of a SQL query via the input data from the client to the application. A successful SQL injection exploit can read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on the database (such as shutdown the DBMS), recover the content of a given file present on the DBMS file system and in some cases issue commands to the operating system. SQL injection attacks are a type of injection attack, in which SQL commands are injected into data-plane input in order to effect the execution of predefined SQL commands.

 Source : OWASP

 Nah sekarang kalian sudah tahukan apa itu sql injection, sudah pasti ini sangat berbahaya karena masuk top 10 Vulnerability di OAWSP hingga sekarang.

 How To Patch

 Kalian pasti ingin memperbaikinya kan ? ya pasti lah makanya kalian berkunjung ke blog ini kan ? wkawak.

 1. Buka File yang melakukan Get / Post terhadap database,,, misal.
$id = $_GET['id'];
kalo url bakal seperti ini : .php?id=[id]
2. Kita Lakukan Filter di kode tersebut dengan menggunakan fungsi str_replace seperti ini.
$iso = $_GET['id'];$filter = array('concat', 'make_set', 'export_set', '!', 'null', 'and', 'false', 'true', 'sleep', 'or', 'select', 'extractvalue', 'from', 'dual', '-', '+'. '', '%23', '%27', 'by', 'select', 'union', 'order', '(', ')');$replace = "";$id = str_replace($filter, $replace, $iso);
*Jika Terdapat error pada $replace anda bisa menggunakan array seperti ini :$replace = array('', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '', '');
3. Save Filenya
4. Test di server anda seharusnya sudah terprotect dari sql injection (blind, extrackvalue, union based, error based)

 Terimakasih telah berkunjung kewebsite saya, saya harap kalian senang dan jangan sungkan sungkan untuk berkunjung kewebsite saya lagi.
BTW : Maafkan bila 1klan nya numpuk ea.

 Tags : Perbaiki sql injection, fix sql injection, bypass sql injection, sql injection, cara fix sql injection, fix bug sql injection, patch sql injection, patching sql injection
Read more

Friday, December 21, 2018

Download Script Email Filter Terbaru 2018-2019 [ PHP CLI ]

Download Script Email Filter Terbaru 2018-2019



Halo Sobat Setia Rafli Hax0r apa kabar nih ? semoga aja baik yah.. Tanpa basa basi saya mau share Email Filter [ PHP CLI ] secara gratis dan bisa kalian recode. Script ini cocok banget buat kalian yang mau Kirim email secara Otomatis bersamaan untuk kebutuhan Promosi Hosting ( Misalnya ), C4rd1ng, Sp4ming, dan banyak hala. maka dari itu saya buat dan saya share disini..

Fitur :
Untuk Fitur saya baru sempat membuat 5 jenis email dikarenakan saya tidak tau email apa saja yang di butuhkan untuk filtering, yakni sebagai berikut :
  • Google.com
  • Aol.com
  • yahoo.com
  • orange.fr
  • hotmail.com
Jika email yg ingin anda filter tidak ada di list kalian bisa edit Scriptnya dan ganti dengan emal yang kalian mau. sekali lagi saya mohon maaf bila script ini sangat simple dan masih kurang worth it. jika suka silahkan dowbnload jika tidak ya... download aja siapa tau berubah pikiran :D

Link Download :

Oke Sekian dari saya Rafli pasya jika kalian ingin request script silahkan hubungi saya, selagi saya bisa buat + bermanfaat akan saya buatkan. Wabilahitaufik Walhidayah wassalamualaikum warahmatullahi wabarakahtu

 email filter priv8 email filter online email filter script email filter checker email filter domain email filter php email filter carding email filtering email filter tools email filter anonym0us email filter android email filter address email filter app email filter aol email filter appliance review email filter application email filter apple mail email filter appliance open source an email filter is email with filters create an email filter in outlook what is a email filtering create a filter email gmail web and email filtering sieve an email filtering language email filter by date email filter bayesian email filter by email filter byu email filter bigpond email filter bayes email filter bulk email filter by size email filter backup email filtering based on supervised learning and mutual information feature selection email filter cli email filter comcast email filter check email filter cloud email filter c# email filter client email filter cloveretl email filter definition email filter discard message email filter date range email filter disabled filter email di gmail filter email di outlook email domain filter online filter email disabled in outlook 2010 email filter extractor email filter en fortigate email filter exchange filter email excel outlook email filter enable filter email addresses excel efa email filter evolution email filter email filter for gmail email filter for iphone email filter from text email filter for outlook email filter free email filter for spam email filter for yahoo email filter for office 365 email filter for android f-secure email filtering email filter gmx email filter gartner email filter gateway email filtering gmail filter email greyed out filter email greyed out outlook 2010 filter email greyed out outlook 2013 forwarding email filter gmail set email filter gmail gmail filter gmail filter date gmail filters gmail filter or gmail filter unread gmail filter unread emails gmail filter from more than one address gmail filter by year gmail filter or condition email filter hotmail email filter header email filter help cpanel email filter in header email filtering hardware filter email help email heuristic filtering junk email filter hotmail email spam filter hardware gmail email filter has the words email filter iphone email filter in gmail email filter in outlook email filter in php email filter in cpanel email filter in javascript email filter in fortigate email filter in outlook 2013 email filter in office 365 email filter in outlook 2010 email filter javascript email filter jquery email filter js email filter jira email filter justhost email junk filter email junk filter outlook email junk filter iphone filter email javamail email filter kpn email spam filter kaspersky kaspersky email filter outlook junk email filter keywords k9 mail filter e mail spamfilter kpn kpn e mail filter werkt niet kindle email filter email filter lotus notes email filter linux email filter live mail email filtering log filter email list online filter email lotus laravel email filter email filter mac mail email filter mac email filter meaning email filter match case email filter mailing list email filter messages by sender cpanel email filter matches regex email filter yahoo mail m-filter email m-filter email auditor email filter not working email filter not working in outlook email filter not email filter new folder cpanel email filter not working yahoo email filter not working filter email not working in outlook 2016 email notification filter email filter office 365 email filter on iphone email filter outlook 2016 email filter outlook 2013 email filter outlook 2010 email filter on android email filter outlook 2007 email filter on thunderbird types of email filtering benefits of email filtering examples of email filters importance of email filtering definition of email filtering email filter python email filter program email filter pro email filter plugin servicenow email filter plugin email filter palo alto email filter project email filter quickbooks email filter regex email filter rules outlook email filter rules email filter reviews email filter roadrunner email filter results jira email_filter rabbitmq email filter remove fortigate email filter regular expression email filter spam email filter server email filter software free email filter software email filter service email filter servicenow email filter system email filter thunderbird email filter to spam email filter test email filter to cut out spam email filter tips email filter t-online email filtering tools filter email to folder gmail t-online email filter at&t email filters t-online email spam filter t-online email spam filter einstellen att email spam filter t-online email center filter email filter uipath email filter unread email filtering ubuntu email spam filtering using supervised machine learning techniques filter unread email in gmail filter unwanted email gmail filter unread email in outlook 2010 email url filtering ipad email filter unread iphone email filter unread filter_var email email filter validate email filter virtual appliance filter_validate_email not working filter_validate_email regex filter_validate_email php version filter_validate_email php 7 filter_validate_email doesn't work filter_validate_email in codeigniter email filter wireshark email filter wildcard email filter webmail email filter web.de email filter whitelist email filter windows live email filter website email filter works email filter xfinity email x-filter-id xeam email filter iphone x email spam filter email filter yahoo email spam filter yahoo cara filter email yahoo filter email by year filter email by year outlook yahoo email filter forward junk email filter yahoo yahoo email filter multiple senders email filter zimbra cara filter email zimbra zoho email filter zoneminder email filter zendesk email filter zammad email filter zimbra email filter not working zix email filter instellen email filter ziggo email filter fortigate 100d email spam filter 123 reg 1und1 email filter 1and1 email filter email spam filter windows 10 email spam filter ios 11 1&1 email filter 1&1 email spam filter outlook junk email filter 2010 filter email outlook 2010 disabled filter email di outlook 2010 ipad 2 email spam filter email spam filter office 365 email filtering office 365 junk email filter office 365 barracuda email filter office 365 365 email filter junk email filter outlook 365 create email filter outlook 365 sophos email filter office 365 3 junk email filter lists ispconfig 3 email content filter how email filter fortigate 5.4 fortigate email filter 5.2 iphone 5 email spam filter iphone 5 junk email filter note 5 email spam filter email filter iphone 6 email filter for iphone 6s iphone 6 email filters iphone 6 email spam filter iphone 6 email junk filter iphone 7 email filter iphone 7 email spam filter iphone 8 email filter ios 8 email spam filter ibm notes 9 email filter lotus notes 9 filter email sophos utm 9 email filtering
Read more

Tuesday, December 4, 2018

Burp Suite Pro Full Version 1.7.34 Free Download 2018

Burp Suite Pro Full Version 1.7.34 Free Download 2018
Hasil gambar untuk Burp Suite

Hello visitors, come back with me on this website. in this post I will update the latest Burp Suite tool to you. For those of you who don't know what the burp suite is, you can read the explanation below. What Is Burp Suite?
Burp or Burp Suite is a graphical tool for testing Web application security. The tool is written in Java and developed by PortSwigger Web Security.
The tool has three editions. A Community Edition that can be downloaded free of charge, a Professional Edition and an Enterprise edition that can be purchased after a trial period. The Community edition has significantly reduced functionality. It was developed to provide a comprehensive solution for web application security checks. In addition to basic functionality, such as proxy server, scanner and intruder, the tool also contains more advanced options such as a spider, a repeater, a decoder, a comparer, an extender and a sequencer.

In the tool there are many features as follows.

  • HTTP Proxy - It operates as a web proxy server, and sits as a man-in-the-middle between the browser and destination web servers. This allows the interception, inspection and modification of the raw traffic passing in both directions.
  • Scanner - A web application security scanner, used for performing automated vulnerability scans of web applications.
  • Intruder - This tool can perform automated attacks on web applications. The tool offers a configurable algorithm that can generate malicious HTTP requests. The intruder tool can test and detect SQL Injections, Cross Site Scripting, parameter manipulation and vulnerabilities susceptible to brute-force attacks.
  • Spider - A tool for automatically crawling web applications. It can be used in conjunction with manual mapping techniques to speed up the process of mapping an application's content and functionality.
  • Repeater - A simple tool that can be used to manually test an application. It can be used to modify requests to the server, resend them, and observe the results.
  • Decoder - A tool for transforming encoded data into its canonical form, or for transforming raw data into various encoded and hashed forms. It is capable of intelligently recognizing several encoding formats using heuristic techniques.
  • Comparer - A tool for performing a comparison (a visual "diff") between any two items of data.
  • Extender - Allows the security tester to load Burp extensions, to extend Burp's functionality using the security testers own or third-party code (BappStore).
  • Sequencer - A tool for analyzing the quality of randomness in a sample of data items. It can be used to test an application's session tokens or other important data items that are intended to be unpredictable, such as anti-CSRF tokens, password reset tokens, etc.

That's some information about Burp Suite, you can directly download the tool at the following link.






Here is a Burst Suite Full Version Free 2018 installation video tutorial.


Read more

Saturday, December 1, 2018

Download Shell IndoXploit v.3 terbaru 2018

Download Shell IndoXploit v.3 terbaru 2018

Halo Sobat, Kembali lagi di blog / website Rafli Hax0r walaupun saya bukan haaxor.. Pada Artikel kali ini saya akan share shell indoxploit terbaru 2018 dengan berbagai fitur menarik :) cekidot aja yuk kita liat screenshotnya

Apa itu Shell backdoor ?

A backdoor shell is a malicious piece of code (e.g. PHP, Python, Ruby) that can be uploaded to a site to gain access to files stored on that site. Once it is uploaded, the hacker can use it to edit, delete, or download any files on the site, or upload their own.

Screenshot :




Fiturnya Lengkap seperti :
Bagaimana ? Menarik bukan ? silahkan download di link dibawah ini :
[GOOGLE DRIVE]

Terimakasih Telah berkunjung ke website saya, i hope you like it and share this artikel to your hacker's friends. Jalan jalan Beli kerupuk, Akhir kata Assalamualaikum wr.wb

Read more

Friday, November 27, 2015

Script Phising Point Blank tampilan Transfer Account Terbaru 2018

Script Phising Point Blank tampilan Transfer Account 2018
     Halo sobat Rafli Hax0r Welcome to my blog. pada postingan kali ini saya bakalan share Script Phising Point Blank tampilan Transfer Account 2018. Script ini adalah script pertama yang saya buat saat ngeblog di web ini.. sebelumnya ya know lah w maling di web kembaran w. tampa basa basi, Jadi script ini baru aja selesai dihari saya nulis postingan ini, dan telah di uji di ITB dan IPB (doain w masuk ITB).

     Karena ini tanggal 2 Desember 2018 ( Reuni Akbar 212 ) saya mendapatkan info bahwa 1 Desember 2018 Point Blank sudah tidak di akusisi sama Garena alias putus kontrak. Point Blank Indonesia yang di kembangkan oleh Zepetto akhirnya memutuskan untuk mempublikasikan gamenya sendiri. Sama seperti 2015 silam saat Point Blank Gamescool pindah ke Point Blank Garena, Pihak Zepetto mengeluarkan pengumuman bahwa akan ada event Transfer Account ( Garena ke Zepetto ). nah sehubungan dari event / peristiwa diatas saya memutuskan untuk membuat Script Phisingnya sesegera mungkin supaya masih Fresh :'v . Oh iya, Soory ya script ini gak bisa True Login karena udh ada update di web garena jadinya gk bisa True Login lagi.

Fitur :
  • Tampilan 100% Responsive ( Tidak Ngaco )
  • Send Email
  • Result Anti Numpuk
  • 100% mirip seperti web aslinya
  • Yang Pasti Result Deras mhank
Mau Beli Domain murah .com co uk net org ? cocok buat nebar phising murah cuma 40 ribu pulsa !! Contact FB : Rafli Pasya
Screenshot :



Bagaimana ? Menarik kan ? benar benar mirip samaa link zepetto kan ? Cus ah didownload

Download :
[GOOGLE DRIVE]

Oke itu aja untuk postingan kali ini kalian bisa download aja langsung dan tebar ke facebook. Akhir kata semoga bermanfaat wabilahitaufik walhidayah wassalamualaikum warahmatullahi wabarokahtu.

Regards

z3rb0a
Read more
Subscribe to: Posts (Atom)