Rafli Hax0r

Friday, November 23, 2018

bugs tips

Password Information Disclosure Vulnerability on Scribd.com

Rafli Pasya 9:52 PM

How i Found Information Disclosure on Scribd.com

hi, this is my first write up on medium.com.

11 days ago i found a vulnerability on scribd.com when i finding an answer of my homework ( I was lazy at that time).

then I made a document and made the document private

In my heart I thought that the download button made me curious, so I decided to intercept before pressing the download button. and I found a Request with the POST method in the url: https://www.scribd.com/document_downloads/request_document_for_download

Then I will make a document and give a password (make private) the document and try to get access from another account. After that I created a new account and made a CSRF whose contents were more or less like this:

<html> <title> Scribd VUlnerability </ title> <body> <form action = “https://www.scribd.com/document_downloads/request_document_for_download" method = “POST”>
<input type = “hidden” name = “id” value = “(ID FILE)” />
<input type = “submit” value = “Submit request” />
</ form>
</ body>
</ html>.

and try to do pentesting.

Bingo! after that I managed to get the password to see the private document. After that I asked whether there was a bug bounty program or not to the IT security scribd. after 11 days (When I wrote this) I immediately reported this bug to the Scribd team so that it could be fixed.

Full Video PoC on my Blog :
https://raflipasya19.blogspot.co.id
My Youtube Channel :
T-GOX Channel

Status:

19 November 2018 16:59 PM = Reported To Scribd Security Team
20 November 2018 01:58 AM = Their team Triage my report
23 November 2018 09:50 PM = No Respon, I disclose this report xD

Sunday, September 16, 2018

Script Checker Tokopedia Account by Az4t.ID Terbaru 2018 - 2019

Rafli Pasya 9:09 PM

Script Tokopedia Account Checker

Halo Sobat Rafli Pasya 19, Berjumpa lagi dengan saya zerb0a a.k.a Rafli Pasya. Sesuai Judulnya "Script Tokopedia Account Checker" saya mau berbagi script yang saya minta ke az4t.ID :""V. Fyi Dia udh izinin gw untuk ngeshare source codenya ya njing ke klean semua jadi jangan di jual belikan ppq.

Screenshot :

Fitur :

Cek Account Valid Atau Tidak
Bisa Digunakan di Localhost ea gans
No Logger ( Baik Gw gan No Logger Logger Club )
Lo bilang Log ? pala lo gw lempar log jinx

Link Download :

Download1 - Download2 - Download3

Keyword :

checker cc,checker plagiarism,checker proxy,checker plate,checker board,checker adalah,checker acc,checker amazon gratis,checker apa,checker akun amazon 2018,checker artinya apa,checker akun amazon,checker tokopedia,tokopedia checker,tokopedia account checker

Wednesday, August 29, 2018

game&aplikasi tips

Cara Menyembunyikan File/Folder Agar tidak Bisa dilihat orang ( 1ntr0ver7 Tool )

Rafli Pasya 9:47 PM

File/Folder Hider By zerboa - Yooo was ap gaes balik lagi sama gw . Pada artikel ini saya mau membagikan artikel yang very very penting bagi kalian kalian penyimpan video bokep atau hentai :""V. Ya tentu saja Folder Hider by ./z3rb0a, Hanya dengan 1 kali download dan 1 kali klik bisa digunakan untuk kesejahteraan bersama. tunggu apa lagi ?? Gass kan lah download pak.

Ini Single File Executable (.exe), yang pasti no firus or logger or RAT ea, w buat dengan tujuan baik tanpa pencitraan sedikitpun.

Screenshot Penampakan :

Link Download :

| MIRRORCREATOR| > | CLICKME|

Note : Kalo Lo Merasa curiga sama apa yang gw share, gk ush didownload dari pada lo pada koar koar gk jelas :)

Thx yang udah berkunjung, jangan lupa di cl1ck Ikl4nnya ea :""v. Dan Stay Tune aja di Page introvert kalo ada update pasti w share ea, Sh000tzzzzz

Saturday, August 11, 2018

bugs

Reflected XSS on elevenia.co.id

Rafli Pasya 11:51 PM

Reflected XSS on elevenia.co.id - Halo Guys, Balik lagi bersama saya :D. Pada artikel kali ini saya cuma mau share aja bahwa saya nemu xss di elevenia.co.id , yakni situs jual beli online di indonesia yang cukup banyak diketahui orang orang.

Jadi ceritanya w abis nonton film back to the future, nah terus ada iklan elevenia tuh. Karena w penasaran akhirnya w telusuri telusuri, dan nemu deh :''"V.

PoC

Buka :

https://www.elevenia.co.id/login.do?isSSL=Y&returnURL=javascript:prompt(%27XSS BY ./z3rb0a%27);

Kalau Belom Login Ya Login dulu Baru buka web itu.
Bingo, alertnya muncul deh :D

Oke sekian Untuk Kali ini, Jangan lupa untuk di share keteman teman, dan jangan lupa juga Cl1ck 1kl4nnya ea :''V

Wednesday, August 8, 2018

bugs

[ brainly.co.id / all brainly domain ] Open Redirect and XSS(Reflected)

Rafli Pasya 8:16 PM

Bug Report - Halo Sobat sekalian, sebelumnya saya sangat berterimakasih ya bangsat, sama lo semua yang udah ngunjungi blog saya. jangan lupa CL1CK 1KL4N nya ea kampang biar w bisa makan + bayar wifi.

Jadi pada artikel kali ini saya akan berbagi pengalaman saya setelah menemukan Open Redirect to XSS di website Brainly.co.id.

Brainly Merupakan Startup pendidikan yang bisa digunakan masyarakat indonesia sebagai forum tanya jawab soal dari sekolah.

Berkat brainly juga PR w jadi lebih mudah dan cepat dikerjakan xD

Proof Of Concept :

1. Kunjungi : Brainly.co.id
2. Lalu Klik Login

3. Maka akan dapat link seperti ini :

https://brainly.co.id/login?entry=2&return=%2F

4. nah di parameter return itu bisa di ganti dengan payload xss atau website lain gans.

Payload xss saya

javascript:prompt(document.domain);

5. Nah kalo saya tambahkan ke url itu maka akan seperti ini

https://brainly.co.id/login?entry=2&return=javascript:prompt(document.domain);

6. Nah Lalu buka dah url itu

7. Setelah login kalian akan mendapatkan hal magic gan xD

Oke Gan itu aja yang bisa saya ceritakan, pokoknya setelah login ada xss nya dah.... unch dah pokoke.

Oke Gans Makasih Buat yang udah berkunjung, dot porget tu lek end sabscreb ea :""v

Note : Ini Bug udah gw Report 9 Agustus 2018 jam 2 siang, Gak dibales apa apa gan. Komenan gw di Feenpeg cuma di like doank, email pun gk dibales bhhhh.

Sunday, April 29, 2018

phising

Script Phising Point Blank True Login 2018 Guardian Of Moonstone

Rafli Pasya 8:48 AM

Script Phising Point Blank True Login 2018 Guardian Of Moonstone

Halo sobat, balik lagi bersama saya.

Pada artikel kali ini saya akan bagikan scriptnya Phising Point Blank True Login 2018 Guardian Of Moonstone. Yang tentunya dibuat oleh RafliPedia. Penasaran kan ? Oke simak screenshot :

Bagaimana mantap bukan ? Oleh karena itu silahkan download :

Download sekarang

Sekian artikel tentang script Phising Point Blank kali ini. See you next time :)

Credits : RafliPedia

Tags :

script phising point blank

script phising point blank strike

script phising point blank 2018

script phising point blank true login

script phising point blank terbaru

script phising point blank garena 2016

script phising point blank 2016

script phising point blank garena terbaru

download script phising point blank

download script phising point blank garena 2016

script phising point blank garena

download script phising point blank garena

script phising pb

script phising pb garena

script phising pb true login 2018

script phising pb garena send email

script phising pb terbaru

script phising pb garena event

script phising pb garena send email 2017

script phising pb garena senjata

script phising pb true login terbaru

script phising pb roda cinta

script phising pb garena senjata gratis 2018

script phising pb true login

script phising pb baretta

cara buat script phising pb

script phising pb redeem code

script phising pb garena redeem code

download script phising pb garena

download script phising pb garena terbaru 2016

download script phising pb garena 2015

download script phising pb terbaru

download script phising pb garena redeem

download script phising pb garena redeem code

script phising pb garena send email 2016

script phising pb garena 2018

script phising pb garena true login

script phising pb garena true login 2018

script phising pb gg

script phising pb hot deals

script phising pb garena nb hacker

script phising pb garena indonesia

script phising pb garena keren

script phising pb garena tukar kode

kumpulan script phising pb garena

kumpulan script phising pb

cara membuat script phising pb garena

script phising pb qc

script phising pb redeem

script phising redeem pb garena

script phising pb strike

script phising pb send email

script phising pb tampilan viral

script phising pb true login 2017

script phising point blank terbaru

script phising pb garena terbaru 2016

script phising pb viral

script web phising pb garena

script phising pb 2018

script phising pb 2016

script phising point blank 2016

script phising pb garena 2016

script phising pb garena 2015

sc phising pb

sc phising pb terbaru

sc phising pb garena

sc phising pb viral

sc phising pb 2018

sc phising pb garena 2018

sc phising pb true login

sc phising pb true login 2018

Saturday, March 10, 2018

game&aplikasi

Last Day On Earth: Survival Mod Apk v1.7.9 (Unlimited Money & Free Shopping) New version 2018

Rafli Pasya 12:22 PM

Last Day On Earth: Survival Mod Apk v1.7.9

(Unlimited Money & Free Shopping)

New version 2018

Hasil gambar untuk last day on earth mod

Last Day On Earth: Survival Mod Apk v1.7.9
Last Day On Earth is a Zombie Attack Survival, And the Player has only one goal: survive as long as he can. no time left for friendship, family, love. when the last day on earth, you can only survive to guard yourself with the help of your weapon.

Instructions for survivors:
ZOMBIES AND ENEMIES EVERYWHERE!
You are alone against other survivors and army of walking dead zombies and other unkilled in this free zombie shooter survival and strategy game. Shoot and gunship zombies and other unkilled to survive in this post apocalypse game or they will kill you.

JOIN A CLAN AND GUNSHIP ZOMBIES WITH FRIENDS!
Shoot unkilled walking dead zombies with other game survivors - it’s an effective war strategy for this free zombie shooter rpg strategy game. It is easier to survive in this post apocalypse game and shoot the walking dead together with other survivors. So join clans and gunship zombies as much as you can!

KEEP CALM AND CRAFT! SURVIVALCRAFT IS VITAL!
Improve your game strategy and survivalcraft skills and create more deadly weapons against the unkilled walking dead zombies and enemies. Choose a target wisely and shoot zombies or pull a dead trigger in wildfowl to get some food.

EXPLORE NEW TERRITORIES AND SHOOT ZOMBIES!
Search abandoned military bases and survivor’s camps in order to find and take the most valuable resources and deadly weapons. Keep away from the zombie frontier and gunship zombies to obtain resources.

COMMUNICATE WITH OTHER PLAYERS!
Use the chat. Information is the second most important resource after life in this post-apocalyptic zombie shooter rpg game. Join clans and gunship zombies or go to raid, clear new territories from the unkilled walking dead and move the zombie frontier.

IMPROVE YOUR SURVIVALCRAFT AND STRATEGY SKILLS!
Plague infection, wild animals, hunger, thirst and cold can kill you faster than a walking dead army. The world has turned into a residence of evil, where the plague infection rages. In this free post apocalypse mmorpg zombie survival game your own target is to craft more deadly weapons, shoot zombies and try to survive. Survivalcraft is vital for your strategy to survive in this post apocalypse game infected with plague virus and unkilled walking dead zombies.

In 2027 an outbreak of an unknown plague virus infection wiped out most of the world’s population. The raging virus was named deadly plague infection. Meanwhile the pandemic of a new kind of plague virus carried away 80% of the population. Plague virus pandemic was turning them into hordes of the unkilled walking dead zombies.

But the army of walking dead zombies is not your main problem. Many of those who were unkilled by the deadly plague virus will pull a dead trigger in your back. Stay alone or join clans to gunship zombies together. You’re the one to choose your path and raid the zombie frontier in this free post apocalypse zombie shooter survival game. Use any ways you can in order to shoot zombies and survive in the dead zone in this free zombie shooter.

And remember! Unkilled walking dead zombies are everywhere! Kill zombies, shoot zombies, gun zombies, fire zombies, plug zombies, smash zombies, slash zombies and gunship zombies to survive. In this free zombie shooter mmorpg game your every decision matters.
Welcome to the real post apocalypse zombie shooter game and enjoy this free zombie shooter with mmorpg and strategy elements!

Screenshot :

You like this game ? wanna download the game ? go to link below

===========================================
Last Day On Earth: Survival v1.7.9 ( Original Version ) :
- Playstore -
===========================================

============================================
Last Day On Earth: Survival v1.7.9 ( Mod Version ) :
-ZippyShare-
============================================

Thanks For Visiting My Website :) Enjoy your Game and Have Fun !!!

Tags :
last day on earth mod apk, ldoe mod apk, last day on earth free shopping, last day on earth unlimited money, last day on earth mod no root, last day on earth mod apk free download no root, last day on earth mod free download, last day on earth mod apk data,