Hacking a website using SQL injection:Full method with Pics

Today i am gonna show you how to hack a website using sql injection.To find SQL vulnerable sites refer to this post.

Now Lets start---->

Things you will need -->

1. Havij SQL injection Tool, download it from here(Run as Administrator)

2. A sql vunerable site, I am taking this site http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2 as an example.

3. A very important thing i.e mind.

Checking for sql vulnerability --->

Here i am taking http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2 as an example. 

Now to check is this site vulnerable to sql, I will simply add ' after the site url

like this http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2'

and i get this error on the site

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1

It means that site is vulnerable to sql injection.

Exploiting the vulnerable site ---> 

1. Open Havij and paste site url in target field and hit enter

.

2. Now wait for Havij to get all the databases of the website.

3. Now click on available databse of site and click on Get Tables like i am gonna select 535480_toyonorte of my site like in image.

4. By clicking Get Tables Havij will look after the tables available in the database.

5. Now after the scanning Havij will get all tables, now the main work start , you have to check it there table available named as admin, users and something similar to these words like i get usuario in my website and select it and click on Get Columns. Like in pic given below.

6. Now after clicking Get Columns havij will get all the columns available in users table.

7. In my case i found diffrent columns like id, login, pass an many more.

8. Now select the columns and click on Get Data like in pic given below.

9. Now havij will look after the data available in columns login and password i.e admin username and passowrd like i get 

username --> adminpassword--> 21232f297a57a5a743894a0e4a801fc3 (in encrypted form)

Like in image below

10. Now after i get username and password there is a problem that passowrd i s encrypted in mdm language , so we have to crack it .

11. To crack encrypted password just copy password click on MD5 tab in havij and paste the encrypted password in MD5 hash field and hit start.Now havij will try to crack the password. Like i cracked in image given below.

12. Now i get Password cracked as admin.

13. Now we will check for admin panel where we gonna login with username and passoword.

14. To find admin panel click Find Admin tab in Havij and click start. Now havij  will check the admin panel of website.

In my case i found http://toyonorte.com.co/admin/ as admin panel, now open it in a web browser and login with username and password and now you are in admin panel.

Notes--->

1. Website hacking is illegal

2. Use proxy, tor, vpn for your security.

3. This is for only educational purpose.

Whats next-->

In next post i am gonna show you how to upload shell through admin panel in a website.

So keep updated and visit site daily and also refer your friend...

Gmail Hacking.

How to Hack Gmail Account Password using Gmail Hacker Software

This is the Simplest way of hacking gmail password, However this may not work for some people because most Antivirus software's easily recognizes this 'Gmail Hacker software'. This trick involves creating a special .exe file and sending it to the Victim. and when he or she runs this 'Gmail hacker software' you will get the Username and Password to your "Gmail Inbox". This Trick requires you to have "Microsoft's .net Framework", if you dont have please download and install it.
Hacking Gmail Account Password using 'Gmail Hacker' Software
Follow the Step by Step Tutorials below to hack Gmail Account Password
Step 1: Download "Gmail hacker" Software (extract the file to desktop). If your Antivirus deletes the file, then please turnoff your Antivirus or uninstall it and try downloading again.
Step 2: Run 'Gmail hacker Bulder.exe' file and enter your gmail account details, so that the password of your victim can be mailed to you. If you are afraid of entering your gmail details, then do create one fake account and enter those details.
Step 3: After you enter your 'Gmail account' details Click on 'Build'. Now the Gmail Hacker will Clone itself, ie it will create another file called 'Gmail Hacker.exe' and will save it in the same folder.
Step 4: Now Send the 'Gmail Hacker.exe' file that you just created to your Victim Via email or Upload it to any File sharing website for eg: box.net, Rapidshare, etc and send the link via chat or email. Ask the Victim to try that software to hack others email and some how convince him to run that software and enter all information (which includes his Gmail id and password plus Gmail ID of the victim he want to hack). When he enters the required information and hits the 'hack them' Button, he will receive an error message as shown below and The Username and Password will be mailed to your Gmail Id (that you Specified in Step 2)


Note:you Should Provide a valid USERNAME and PASSWORD, in order to receive the hacked details.

Skip PayPal Payments! [works only on some websites]

Here is an easy way to skip those annoying PayPal payments before getting premium content.

Note: This tutorial shows how to skip paypal payments on some websites. It works only on downloadable content [e-boooks, softwares etc] blocked by Paypal payment and not on shippable products [DVDs etc.].

Note: Use only Google Chrome for this.It doesn't work on Firefox.

How-to:

• Go to any website which has some premium content blocked by paypal payment. We'll go with http://www.snouthouse.com in this tutorial. [It has some kind of kit for training pet dogs which can be bought through paypal for $ 20].
• Click on order now.
• Now comes the annoying pay pal page.
• Here's the trick:
• Enter this code in the address bar : javascript:top.location=document.getElementsByName('return')[0].value; javascript:void(0);
• And alas! 

Download TORRENTs without a client.[BitTorrent,UTorrent etc.]

This tutorial is to teach you how to convert torrent download to direct http download. Its so simple. Just follow the steps carefully.
Steps:

• Find a torrent file from any torrent files website.[eg. The Piratebay]
• Download the .torrent file or just copy the magnet link souce.
• Visit http://www.zbigz.com/.
• Upload your downloaded .torrent file or paste the copied magnet link in zbigz.com
• Hit enter or press Go.
• Select/click Free.
• Wait for some time, a message will appear "caching completed" and download button will be visible.
• Click on Download. Select/click free again.
• Now, download your file. If your file is compressed (zip, rar, etc), then you will get download immediately. But if not, then zbigz will first compress it and then it will give you download.

NOTE: Downloading torrent this way will give you slow download speed and you may not able to resume your downloads. Its better to use a free torrent client for downloading a torrent. 

  - Jay Parekh

Facebook Phishing [Hacking]

This tutorial is for educational purpose only.
If you like this then please

• Share this with your friends, family and known persons.

Facebook hacking i.e. Hack a facebook account is illegal, I am teaching you this to prevent you from these scams. You will be responsible if you hack any account. If your account has been hacked, then please follow this link, http://www.facebook.com/hacked, answer a few simple question and get your account back.

Hacking Facebook.

There are several ways of hacking facebook. Some are phishing, remote keylogger, keylogger, cookie stealing, click hijacking, etc. 

Phishing.

Warning & Disclaimer:

Making a phishing page is not illegal, but using a phishing page is illegal. This tutorial is just to show you, "How to create phishing page?". If you use this to hack anyone account, then I will not bw responsible for it. Do anything on your own risk.

What is phishing page?

A phishing page of a site is just a ditto copy of a site. No one can easily detect a difference. In this, we just clone a site login or any other important page.

 1) REQUIREMENTS: 

     1) A website:

• You can create you own free website at any of the following:
  •  000webhost
  • 1freehosting
  • 110mb.
  • 5gbfree.

     2) Phishing files:

• Download the files (.rar file) required for phishing from HERE. 

2) How to HACK : 

First of all you need a website.

Register on one of the above given links to get a free website and hosting.

Once you get your free website, follow the steps given below:

• Download the .rar file and extract it anywhere.
• You shall find 3 files [index.htm , login.php , passes.txt].
• Upload these 3 files to your website through the filemanager in the Cpanel.



File manager in the Cpanel

• If you open your website now, you will find the facebook login page.[It is not the original page.Its a ditto copy of it.] .
•  You are done now.
• Give your website URL [eg. www.yourname.site11.com] to the person whose account you want to hack.
• If he/she enters their email id and password on your site, it will be written in the file 'passes.txt'.
• Download the file 'passes.txt' from the file manager and open it.
• You will find the victims email id and password with which he/she log-in to his/her account.

                                                                                                                  - Jay Parekh

[TUT]Finding SQLi Vulnerable Websites: A guide for beginners

As we all know Sql injection is that vulnerability which is mostly can be found in any server. Weather high profile sites or low profile sites all are found to br vulnerable to SQL injection.
But the problem comes when we unable to find vulnerable sites. So today i am gonna show you how to find these sites vulnerable to SQL injection.

So let get started--->

Method 1(finding sql vulnerable sites on a server)

As we all know on a server huge amount of sites are hosted. So using server for finding vulnerable sites is a good option..

Now lets try our first method......

1. First select any random site like is selected www.artcarworld.org

2. Now you to do a process called Reverse IP Lookup to this site so as to find site hosted on server where our selected site is hosted. To do Reverae IP Lookup you have to go to this site http://www.yougetsignal.com/tools/web-sites-on-web-server/  and the selected site in the Remote address field and click on Check like in image given below.

 Now in image you can see the about 581 sites are hosted on same server where our selected site is hosted.

4. Now in image ip address of the server is given in top right corner, so copy.

5. Now open www.bing.com

6. In Search box type ip:98.129.229.170 php?id= and click on search icon.

Must replace 98.129.229.170 with your selected server ip.

7. After that bing will search the sites which have extension php?id= like this www.site.com/index.php?id= and it will give u a list of sites which ends with this extension php?id= like in image given below.

8. Now select any of one site and add ' after the url to check wheather site is vulnerable to SQL injection or not. If site is vunerable then its good if not then check other site from search result.

9. If found any site vulnerable to sql then Hack it using SQL Exploiter tools.

Method Second will be explained in next post.

Just comment if any problem and share my post.

UPDATE STATUS IN BLUE COLOUR AND REDIRECT THE POST TO YOUR FACEBOOK PAGE OR PROFILE WHEN SOMEONE CLICK IT.

HELLO GUYZ DAVIDREX IS BACK. IT HAS BEEN A LONG TIME SINCE I UPDATE THE BLOG.. ITS OK LETS START THE TUTORIAL....
THIS TRICK IS QUIT FUNNY ...
IT WILL REDIRECT YOU WHEN

STEP 1:

FIRST OF ALL GO TO ANY FACEBOOK PROFILE OR FACEBOOK PAGE AND GET THE ID OF THAT PROFILE OR PAGE.

IF YOU WANT TO REDIRECT YOUR FRIENDS ON ANY USER'S PROFILE THEN COPY ID FROM THEIR PROFILE.

EXAMPLE: http://www.facebook.com/profile.php?id=1234567890 OR WHAT EVER ID IS.

OR IF YOU WANT TO REDIRECT ON PAGE THEN GO TO YOUR PAGE THEN CLICK ON EDIT AND YOU WILL GET IN URL LIKE THIS :

 https://www.facebook.com/pages/edit/?id=123456789&sk=basic

SIMPLY COPY ALL THE NUMBERS AFTER ID=.

HERE I AM USING OUR PAGE ETHICAL HACKERS IN EXAMPLE.

STEP 2:

NOW PASTE BELOW CODE INTO YOUR FACEBOOK STATUS UPDATE BOX:

@@[0:[(YOUR ID HERE):0: (WRITE ANYTHING HERE) ]]

NOW YOU NEED TO REPLACE (YOUR ID HERE) WITH YOUR PROFILE ID OR PAGE ID.AND REPLACE (WRITE ANYTHING HERE) WITH YOUR STATUS OR WHAT EVER YOU WANT JUST WRITE THERE WHICH YOU WANT TO WRITE IN BLUE COLOR. REMOVE BOTH BRACKETS ( ) .

EXAMPLE: @@[0:[318905544801782:0: VISIT MY BLOG http://rexcybertrix.blogspot.com/ . ]]

STEP 3:

PRESS POST.

NOW ITS DONE 

DONT UNDERSTAND COMMENT BELOW :D