tety

[Prolog]
i wrote this article just for ‘hesti’

[describe]
Terkadang tidak memerlukan tools apa2 untuk mendeface sebuah web.Cukup dengan sedikit trial en error.Duarrr!!! …you enter to the admin folder

[proof of concept]
ada beberapa webmaster yang menggunakan kombinasi password yg sederhana untuk memudahkan update situs mereka.kombinasi default yang biasa mereka pakai adalah sebagai berikut:
-username:root password:root
-username:admin password:admin
-username:admin password:password
-username:admin password:[nama domain/subdomain]
-username:[nama domain/subdomain] password:admin
-username:[nama domain/subdomain] password:[nama domain/subdomain]
-username:’or”=’ password:’or”=’ [i.e. some sql injection]

[exploit]
go to google type a keyword:
“allinurl:admin”
“allinurl:admin.php”
“allinurl:Admin”
“allinurl:webmin”
“allinurl:admin.asp”
“allinurl:login.asp”

[solutions]
change the password to be a uniq password that anyone can not imagin it

[greetz]
thx to ‘hesty’ the one who push me to write this

This entry was posted on Monday, October 17th, 2005 at 1:47 pm and is filed under Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.