Posts

Showing posts with the label WEBSITE HACKING

Learn How to Hack Website using SQL Injection

Learn How To Hack Websites With Different Techniques..  (EDUCATIONAL PURPOSE ONLY) SQL Injection in MySQL Databases:-                 SQL Injection attacks are code injections that exploit the database layer of the application.This is most commonly the MySQL database, but there are techniques to carry out this attack in other databases such as Oracle. In this tutorial i will be showing you the steps to carry out the attack on a MySQL Database. Step 1: When testing a website for SQL Injection vulnerabilities, you needto find a page that looks like this: www.site.com/page=1orwww.site.com/id=5Basically the site needs to have an = then a number or a string, but most commonly a number. Once you have found a page like this, we test for vulnerability by simply entering a ‘ after the number in the url. For example: www.site.com/page=1 ′If the database is vulnerable, the page will spit out a MyS...

Hacking Website using METASPLOIT

How to hack website using metasploit? METASPLOIT ANTI FORENSICS:Metasploit has a great collection of tools for anti forensics, making the forensic analysis of the compromised computer little difficult. They are released as a part ofMAFIA(Metasploit Anti Forensic Investigation Arsenal). Some of the tools included are Timestomp, Slacker, Sam Juicer, Transmogrify.Metasploit comes in the followingversions: 1. CLI (Command Line Interface) 2. Web Interface 3. MSF Console 4. MSFwx 5. MSFAPII would recommend using the MSF Console because of its effectiveness & powerful from a pentester’s P0V. Another advantage of this mode is, several sessions of msfconsole could be run simultaneously.I would recommend you doing the following things in Metasploit, on a Backtrack(system or image), avoiding the windows version of the tool.For those of all who don't know, Backtrackis a linux distro especially for security personals, including all the tools required by a pentes...

Hacking Website by HTML Coding

How to Hack a Website with Basic HTML Coding If you have basicHTMLand JavaScript knowledge, you may be able to access password protected websites. This article will give you an easy method to hack simple, less-secured websites of your choice simply through HTML. Use it responsibly. Note: This basic method works only for websites with extremelylow security barriers. Websites with robust security details will not be susceptible to this kind of simple attack. Steps: 1Open the site y ou want to hack.Provide wrong username and wrong password combination in its log in form. (e.g. : Username : me and Password: ' or 1=1 --) An error will occur saying wrong username and wrong password. Now be prepared because your experiment starts from here. 2Right click anywhere on that error page =>> go to view source. 3View the source code.There you can see the HTML coding with JavaScript.*.There you find something like this....<_form action="...Login...."...

Hacking Website in Linux

Hacking website in linux. Step 1: Fire Up Kali Linux I guess you know how to do this step:D Step 2: Start a New TerminalStart by opening a new terminal. We'll use this terminal later. Step 3: Find a Vulnerable WebsiteGo to Google and search for: php?id=1. If you found a site that got that in their link put an ' after the 1. If it says that there's a problem with the sql syntax then the site is vulnerable. Step 4: Using Sqlmap to Hack ItIn your terminal type:sqlmap -uhttp://www.angelvestgroup.com/info.php?id=1--dbs( http://www.angelvestgroup.com/info.php?id=1 is my vulnerable url)Now it's going to load the databases...If that's done you'll need to select a database by typing:sqlmap -uhttp://www.angelvestgroup.com/info.php?id=1-D angelvest_china --tables(angelvest_china is the database I found)Now it's going to load all the information that's in the database you've selected.Now you'll need to select a table by typing:sqlmap -uh...

HACKING ASP / ASPX SITES (MANUALLY)

HACKING ASP / ASPX SITES -- (MANUALLY) -- Cyber Security Expert & Penetration Tester chetansoni@live.comASPX Injection is also similar to PHP based SQL Injection. But here, we don’t use queries that contain order by, union select etc. Instead, we will cheat the server to respond with the information we needed. It is an error based injection technique. We will get the information in the form of errors.Find Out A Vulnerable Link First, we need find out a vulnerable asp/aspx link which looks like http://www.vulnerablesite.com/index.aspx?id=10CHECKING FOR VULNERABILITY As in the PHP based injection, we will test for the vulnerability by adding a single quote at the end of the URL. http://www.vulnerablesite.com/gallery.aspx?id=10′ If it gives an error similar to the following, then our site is vulnerable to sql injection.To check the error just type apostrophe at the end of the vulnerable URL http://website.org/search.aspx?txt=EDIT’To check that whether the s...