We Are DevilzCrew
 
IndeksPendaftaranLogin

Share | 
 

 Gunadarma Vuln

Topik sebelumnya Topik selanjutnya Go down 
PengirimMessage
kiddies
Asisten LAB
Asisten LAB
avatar

Jumlah posting : 135
Join date : 05.05.09

PostSubyek: Gunadarma Vuln   Wed May 20, 2009 9:26 pm

nih ge isenk jah dari nikto w scanningnya......

kalo ada yang ngerti cara pakenya...silahkan diposting disini yah....

Code:

- Nikto v2.03/2.04
---------------------------------------------------------------------------
+ Target IP:          202.155.61.82
+ Target Hostname:    www.gunadarma.ac.id
+ Target Port:        80
+ Start Time:        2009-05-22 9:44:09
---------------------------------------------------------------------------
+ Server: Apache 2 - GUNADARMA
+ All CGI directories 'found', use '-C none' to test none
- Allowed HTTP Methods: GET, HEAD, OPTIONS, TRACE
+ OSVDB-877: HTTP method ('Allow' Header): 'TRACE' is typically only used for debugging and should be disabled. This message does not mean it is vulnerable to XST.
+ OSVDB-0: Retrieved X-Powered-By header: PHP/5.2.6
+ OSVDB-5737: WebLogic may reveal its internal IP or hostname in the Location header. The value is "http://www.gunadarma.ac.id/".
+ OSVDB-0: Non-standard header x-pad returned by server, with contents: avoid browser bug
+ OSVDB-637: GET /~root - Enumeration of users is possible by requesting ~username (responds with 'Forbidden' for users, 'not found' for non-existent users).
+ OSVDB-0: GET /cgi-sys/guestbook.cgi : May allow attackers to execute commands as the web daemon.
+ OSVDB-0: GET /cgi-sys/Count.cgi : This may allow attackers to execute arbitrary commands on the server
+ OSVDB-3233: GET /mailman/listinfo : Mailman was found on the server.
+ OSVDB-3092: GET /sitemap.xml : This gives a nice listing of the site content.
+ OSVDB-877: TRACE / : TRACE option appears to allow XSS or credential theft. See http://www.cgisecurity.com/whitehat-mirror/WhitePaper_screen.pdf for details
+ OSVDB-12184: GET /index.php?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000 : PHP reveals potentially sensitive information via certain HTTP requests which contain specific QUERY strings.
+ OSVDB-3092: GET /cgi-sys/entropysearch.cgi : Default CGI, often with a hosting manager of some sort. No known problems, but host managers allow sys admin via web
+ OSVDB-3092: GET /cgi-sys/FormMail-clone.cgi : Default CGI, often with a hosting manager of some sort. No known problems, but host managers allow sys admin via web
+ OSVDB-3092: GET /cgi-sys/mchat.cgi : Default CGI, often with a hosting manager of some sort. No known problems, but host managers allow sys admin via web
+ OSVDB-3092: GET /cgi-sys/scgiwrap : Default CGI, often with a hosting manager of some sort. No known problems, but host managers allow sys admin via web
+ OSVDB-3092: GET /img/ : This may be interesting...
+ OSVDB-3092: GET /lib/ : This might be interesting...

gunakan dengan sebaik-baiknya..... Very Happy Very Happy Very Happy Very Happy
Kembali Ke Atas Go down
gunslinger_
Asisten LAB
Asisten LAB


Jumlah posting : 184
Join date : 15.05.09
Age : 24
Lokasi : mars

PostSubyek: Re: Gunadarma Vuln   Sun May 31, 2009 8:34 am

ampun dah om kiddies... lol! lol! lol! lol!
Kembali Ke Atas Go down
flyff666
Admin
Admin
avatar

Jumlah posting : 44
Join date : 29.04.09

PostSubyek: Re: Gunadarma Vuln   Sun May 31, 2009 9:50 am

ampon juga om kiddies, ^Smile^
Kembali Ke Atas Go down
http://devilzc0de.forumotion.com
7460
Pengunjung
Pengunjung


Jumlah posting : 19
Join date : 29.05.09

PostSubyek: Re: Gunadarma Vuln   Thu Jun 04, 2009 5:25 am

om kiddies,, minta aplikasi nya..
Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy Very Happy
Kembali Ke Atas Go down
N4ck0
Pengunjung
Pengunjung
avatar

Jumlah posting : 59
Join date : 21.06.09

PostSubyek: Re: Gunadarma Vuln   Fri Jun 26, 2009 10:22 pm

wahh keren
pke nikto yah om
share dong..!!
Kembali Ke Atas Go down
kiddies
Asisten LAB
Asisten LAB
avatar

Jumlah posting : 135
Join date : 05.05.09

PostSubyek: Re: Gunadarma Vuln   Sun Jun 28, 2009 11:55 pm

itu pada tahu semuanya w pk nikto search jah kali di google....

w mau belajar pk nmap ni...lum ada yang ngerti perintahnya.....kalo ada yang ngerti ajarin yah....
Kembali Ke Atas Go down
g4pt3k
Pengunjung
Pengunjung


Jumlah posting : 38
Join date : 28.06.09

PostSubyek: Re: Gunadarma Vuln   Mon Jun 29, 2009 12:04 am

kiddies wrote:
itu pada tahu semuanya w pk nikto search jah kali di google....

w mau belajar pk nmap ni...lum ada yang ngerti perintahnya.....kalo ada yang ngerti ajarin yah....

sekalian aq tolong ajarin pake nikto ama nmap..
Kembali Ke Atas Go down
kiddies
Asisten LAB
Asisten LAB
avatar

Jumlah posting : 135
Join date : 05.05.09

PostSubyek: Re: Gunadarma Vuln   Mon Jun 29, 2009 12:09 am

walah si om..kalo kombinasi lum tahu om.....aku biasa belajar 1 1 dulu om.....
Kembali Ke Atas Go down
g4pt3k
Pengunjung
Pengunjung


Jumlah posting : 38
Join date : 28.06.09

PostSubyek: Re: Gunadarma Vuln   Mon Jun 29, 2009 12:31 am

ya udah ajarin 1 1..
Kembali Ke Atas Go down
zha_hack
Pengunjung
Pengunjung


Jumlah posting : 11
Join date : 07.07.09
Age : 24
Lokasi : Tasikmalaya

PostSubyek: hajar boleh   Wed Aug 05, 2009 1:15 pm

ampun kaka!!!!!!!!!!!!!!,. hehehehe
eh bozZ,./ para master,. kesel ga ma malaysia???????????????
Kembali Ke Atas Go down
Sponsored content




PostSubyek: Re: Gunadarma Vuln   

Kembali Ke Atas Go down
 
Gunadarma Vuln
Topik sebelumnya Topik selanjutnya Kembali Ke Atas 
Halaman 1 dari 1

Permissions in this forum:Anda tidak dapat menjawab topik
Devilzc0de TeaM :: Computer :: Attacking-Web-
Navigasi: