Sabtu, 31 Januari 2015

Tutorial Lengkap Carding Dengan Havij

 

Haloo. sobat.. kali ini saya akan share tutorial carding dengan havij.. Pertama yang harus anda lakukan tentunya harus punya havij, jika belum punya DOWNLOAD

Cari duly dork, karena kita akan menggunakan teknik SQL Injection Vulnerability.
Dork :
nurl:".php?cat="+intext:"Paypal"+site:UK
inurl:".php?cat="+intext:"/Buy Now/"+site:.net
inurl:".php?cid="+intext:"online+betting"


inurl:".php?id=" intext:"View cart"
inurl:".php?id=" intext:"Buy Now"
inurl:".php?id=" intext:"add to cart"
inurl:".php?id=" intext:"shopping"
inurl:".php?id=" intext:"boutique"
inurl:".php?id=" intext:"/store/"
inurl:".php?id=" intext:"/shop/"
inurl:".php?id=" intext:"toys"

inurl:".php?cid="
inurl:".php?cid=" intext:"shopping"
inurl:".php?cid=" intext:"add to cart"
inurl:".php?cid=" intext:"Buy Now"
inurl:".php?cid=" intext:"View cart"
inurl:".php?cid=" intext:"boutique"
inurl:".php?cid=" intext:"/store/"
inurl:".php?cid=" intext:"/shop/"
inurl:".php?cid=" intext:"Toys"

inurl:".php?cat="
inurl:".php?cat=" intext:"shopping"
inurl:".php?cat=" intext:"add to cart"
inurl:".php?cat=" intext:"Buy Now"
inurl:".php?cat=" intext:"View cart"
inurl:".php?cat=" intext:"boutique"
inurl:".php?cat=" intext:"/store/"
inurl:".php?cat=" intext:"/shop/"
inurl:".php?cat=" intext:"Toys"

inurl:".php?catid="
inurl:".php?catid=" intext:"View cart"
inurl:".php?catid=" intext:"Buy Now"
inurl:".php?catid=" intext:"add to cart"
inurl:".php?catid=" intext:"shopping"
inurl:".php?catid=" intext:"boutique"
inurl:".php?catid=" intext:"/store/"
inurl:".php?catid=" intext:"/shop/"
inurl:".php?catid=" intext:"Toys"

inurl:".php?categoryid="
inurl:".php?categoryid=" intext:"View cart"
inurl:".php?categoryid=" intext:"Buy Now"
inurl:".php?categoryid=" intext:"add to cart"
inurl:".php?categoryid=" intext:"shopping"
inurl:".php?categoryid=" intext:"boutique"
inurl:".php?categoryid=" intext:"/store/"
inurl:".php?categoryid=" intext:"/shop/"
inurl:".php?categoryid=" intext:"Toys"

inurl:".php?pid="
inurl:".php?pid=" intext:"shopping"
inurl:".php?pid=" intext:"add to cart"
inurl:".php?pid=" intext:"Buy Now"
inurl:".php?pid=" intext:"View cart"
inurl:".php?pid=" intext:"boutique"
inurl:".php?pid=" intext:"/store/"
inurl:".php?pid=" intext:"/shop/"
inurl:".php?pid=" intext:"toys"

inurl:".php?prodid=
inurl:".php?prodid=" intext:"shopping"
inurl:".php?prodid=" intext:"add to cart"
inurl:".php?prodid=" intext:"Buy Now"
inurl:".php?prodid=" intext:"View cart"
inurl:".php?prodid=" intext:"boutique"
inurl:".php?prodid=" intext:"/store/"
inurl:".php?prodid=" intext:"/shop/"
inurl:".php?prodid=" intext:"toys"

inurl:".php?productid='
inurl:".php?productid=" intext:"shopping"
inurl:".php?productid=" intext:"add to cart"
inurl:".php?productid=" intext:"Buy Now"
inurl:".php?productid=" intext:"View cart"
inurl:".php?productid=" intext:"boutique"
inurl:".php?productid=" intext:"/store/"
inurl:".php?productid=" intext:"/shop/"
inurl:".php?productid=" intext:"Toys"

inurl:".php?product="
inurl:".php?product=" intext:"shopping"
inurl:".php?product=" intext:"add to cart"
inurl:".php?product=" intext:"Buy Now"
inurl:".php?product=" intext:"View cart"
inurl:".php?product=" intext:"boutique"
inurl:".php?product=" intext:"/store/"
inurl:".php?product=" intext:"/shop/"
inurl:".php?product=" intext:"toys"
inurl:".php?product=" intext:"DVD"

inurl:".php?products="
inurl:".php?products=" intext:"shopping"
inurl:".php?products=" intext:"add to cart"
inurl:".php?products=" intext:"Buy Now"
inurl:".php?products=" intext:"View cart"
inurl:".php?products=" intext:"boutique"
inurl:".php?products=" intext:"/store/"
inurl:".php?products=" intext:"/shop/"
inurl:".php?products=" intext:"toys"
inurl:".php?products=" intext:"DVD"

inurl:".php?proid="
inurl:".php?proid=" intext:"shopping"
inurl:".php?proid=" intext:"add to cart"
inurl:".php?proid=" intext:"Buy Now"
inurl:".php?proid=" intext:"View cart"
inurl:".php?proid=" intext:"boutique"
inurl:".php?proid=" intext:"/store/"
inurl:".php?proid=" intext:"/shop/"
inurl:".php?proid=" intext:"toys"

inurl:".php?shopid="
inurl:".php?shopid=" intext:"shopping"
inurl:".php?shopid=" intext:"add to cart"
inurl:".php?shopid=" intext:"Buy Now"
inurl:".php?shopid=" intext:"View cart"
inurl:".php?shopid=" intext:"boutique"
inurl:".php?shopid=" intext:"/store/"
inurl:".php?shopid=" intext:"/shop/"
inurl:".php?shopid=" intext:"Toys"

inurl:".php?itemid="
inurl:".php?itemid=" intext:"shopping"
inurl:".php?itemid=" intext:"add to cart"
inurl:".php?itemid=" intext:"Buy Now"
inurl:".php?itemid=" intext:"View cart"
inurl:".php?itemid=" intext:"boutique"
inurl:".php?itemid=" intext:"/shop/"
inurl:".php?itemid=" intext:"/store/"
inurl:".php?itemid=" intext:"Toys"

inurl:".php?orderid="
inurl:".php?orderid=" intext:"shopping"
inurl:".php?orderid=" intext:"add to cart"
inurl:".php?orderid=" intext:"Buy Now"
inurl:".php?orderid=" intext:"View cart"
inurl:".php?orderid=" intext:"boutique"
inurl:".php?orderid=" intext:"/shop/"
inurl:".php?orderid=" intext:"/store/"
inurl:".php?orderid=" intext:"Toys"


inurl:".php?catalogId="
inurl:".php?catalogId=" intext:"shopping"
inurl:".php?catalogId=" intext:"add to cart"
inurl:".php?catalogId=" intext:"Buy Now"
inurl:".php?catalogId=" intext:"View cart"
inurl:".php?catalogId=" intext:"boutique"
inurl:".php?catalogId=" intext:"/shop/"
inurl:".php?catalogId=" intext:"/store/"
inurl:".php?catalogId=" intext:"Toys"

inurl:".php?aid="
inurl:".php?aid=" intext:"shopping"
inurl:".php?aid=" intext:"add to cart"
inurl:".php?aid=" intext:"Buy Now"
inurl:".php?aid=" intext:"View cart"
inurl:".php?aid=" intext:"boutique"
inurl:".php?aid=" intext:"/shop/"
inurl:".php?aid=" intext:"/store/"
inurl:".php?aid=" intext:"toys"

inurl:".php?artid="
inurl:".php?artid=" intext:"shopping"
inurl:".php?artid=" intext:"add to cart"
inurl:".php?artid=" intext:"Buy Now"
inurl:".php?artid=" intext:"View cart"
inurl:".php?artid=" intext:"boutique"
inurl:".php?artid=" intext:"/shop/"
inurl:".php?artid=" intext:"/store/"
inurl:".php?artid=" intext:"toys"


inurl:".php?articleid="
inurl:".php?articleid=" intext:"shopping"
inurl:".php?articleid=" intext:"add to cart"
inurl:".php?articleid=" intext:"Buy Now"
inurl:".php?articleid=" intext:"View cart"
inurl:".php?articleid=" intext:"boutique"
inurl:".php?articleid=" intext:"/shop/"
inurl:".php?articleid=" intext:"/store/"
inurl:".php?articleid=" intext:"toys"

Pilih salah satu dork diatas, kemudian copy dan paste'kan ke kolom google lalu search.. lalu akan muncul banyak site injectnya 


Lalu buka satu persatu dan sisipkan tanda ' di akhir URL sampai menemukan syntax eror




Setelah mendapatkan site yang akan menjadi target langsung hajar saja menggunakan havij,Paste url site tersebut ke kolom target di HAVIJ dan tekan Analyze





setelah dapat klik get table dan setelah itu get columns and then get data finish, anda telah berhasil mendapatkan database website tersebut seperti email dan password member bahkan admin dari website tersebut etelah itu lihat data found fassword =505be7e39328a96ocfe6 bla..bla..bla.itu merupakan hash md5 yang belum di crack,untuk menjadi sebuah fassword anda terlebih dahulu mengcrak fpassowrd di web yang berada dikotak hitam ini.

Load disqus comments

0 komentar