Parameter manipulation

* Arbitary File Deletion

* Code Execution

* Cookie Manipulation ( meta http-equiv & crlf injection )

* CRLF Injection ( HTTP response splitting )

* Cross Frame Scripting ( XFS )

* Cross-Site Scripting ( XSS )

* Directory traversal

* Email Injection

* File inclusion

* Full path disclosure

* LDAP Injection

* PHP code injection

* PHP curl_exec() url is controlled by user

* PHP invalid data type error message

* PHP preg_replace used on user input

* PHP unserialize() used on user input

* Remote XSL inclusion

* Script source code disclosure

* Server-Side Includes (SSI) Injection

* SQL injection

* URL redirection

* XPath Injection vulnerability

* EXIF

*Buffer Overflows

Buffer Overflows and IDS Basic Review - Keeper

*Clickjacking

*Dangling Pointers

*Format String Attack

*FTP Bounce Attack

*Symlinking

This list below fits in category MultiRequest parameter manipulation

* Blind SQL injection (timing)

* Blind SQL/XPath injection (many types)

Blind based SQL Injection with SQL map - insecure5082

This list below fits in category File checks

* 8.3 DOS filename source code disclosure

* Search for Backup files

* Cross Site Scripting in URI

* PHP super-globals-overwrite

* Script errors ( such as the Microsoft IIS Cookie Variable Information Disclosure )

This list below fits in category Directory checks

* Cross Site Scripting in path

* Cross Site Scripting in Referer

* Directory permissions ( mostly for IIS )

* HTTP Verb Tampering ( HTTP Verb POST & HTTP Verb WVS )

* Possible sensitive files

* Possible sensitive files

* Session fixation ( jsessionid & PHPSESSID session fixation )

* Vulnerabilities ( e.g. Apache Tomcat Directory Traversal, ASP.NET error message etc )

* WebDAV ( very vulnerable component of IIS servers )

* DNN (Dot Net Nuke)

[*]Complete DNN (Dot Net Nuke) - numan_malik999

This list below fits in category Text Search Disclosure

* Application error message

* Check for common files

* Directory Listing

* Email address found

* Local path disclosure

* Possible sensitive files

* Microsoft Office possible sensitive information

* Possible internal IP address disclosure

* Possible server path disclosure ( Unix and Windows )

* Possible username or password disclosure

* Sensitive data not encrypted

* Source code disclosure

* Trojan shell ( r57,c99,crystal shell etc )

* ( IF ANY )Wordpress database credentials disclosure

This list below fits in category File Uploads

* Unrestricted File Upload

This list below fits in category Authentication

* Microsoft IIS WebDAV Authentication Bypass

* SQL injection in the authentication header

* Weak Password

* GHDB - Google hacking database ( using dorks to find what google crawlers have found like passwords etc )

This list below fits in category Web Services - Parameter manipulation & with multirequest

* Application Error Message ( testing with empty, NULL, negative, big hex etc )

* Code Execution

* SQL Injection

* XPath Injection

* Blind SQL/XPath injection ( test for numeric,string,number inputs etc )

* Stored Cross-Site Scripting ( XSS )

* Cross-Site Request Forgery ( CSRF )

From hackcommunity.cpm

Here is an adfly bot!

Features:

• Multi-threading support.
• Multiple Proxy list support in the format of IP:PORT
• Custom wait time.
• Visit Preview.
• Optional Loop.
• Clean Error logs.
• Drag & Drop support.

Get paid to share your links! If you do not have an account press the banner to 1make one!

! VIRUS SCAN !
https://www.virustotal.com/en/file/9837bf883064ae3b253b55585688953b19ce0a90bee388147297a767a3f9ea36/analysis/

IF YOU LIKE THE PROGRAM LEAVE A ! COMMENT !

Download the program by pressing the !picture!

Tutorial:

Download the bot from HERE

Download Simple DDos 0.2 Botnet from HERE

Things needed:

-WebHosting account (free or paid)
-Domain with MySql
-Simle DDos 0.2 files
-Brain to spread it!


In this tutorial i'm using http://000webhost.com/
Create an free account here if interested.

Note: My personal info like domain name and hosting id are covered with black color!

STEPS

-Open your Cpanel and press 'MySql'.



-In 'MySql' under 'Create new database and user' fill in fields and press 'Create database'.



-After pressed 'Create database' this will appear



Leave that window opened and take next step.

-Now open your folder with Simple DDos files,press right click on folder 'Admin' and choose 'Add to archive...'.In new window check 'ZIP' and click 'OK'.



-In your Cpanel press 'File Manager' and in new window type your password to login.



-When logged in 'File Manager' open 'Public_html' folder and press 'Upload' button.

Image has been scaled down 2% (870x373). Click this bar to view original image (884x379). Click image to open in new window.

-After pressed 'upload' this window will appear.

Image has been scaled down 2% (870x499). Click this bar to view original image (886x508). Click image to open in new window.

In that window press the button on right side,choose your admin.zip file from computer,and press 'V' button to upload it.

-When upload finished,new folder 'admin' will be created in 'Public_html',open that folder,check 404.php file and press 'Rename' button.
Rename it to anything you want (example. 4044.php) and press 'V' button to submit.

Image has been scaled down 3% (870x872). Click this bar to view original image (888x890). Click image to open in new window.

-Now go back to 'admin' folder and press 'Edit' button in front of the 'config.php' file.

Image has been scaled down 2% (870x935). Click this bar to view original image (887x953). Click image to open in new window.

-When file opened and ready to edit,fill in the 'MySql' info and press save button.
See details on picture down.

Image has been scaled down 15% (870x961). Click this bar to view original image (1019x1125). Click image to open in new window.

-When saved 'config.php' file,go back to 'admin' folder and press 'Open' button in front of the 'admin.php' file.
New window will appear,fill 'Login:' and 'Password:' TextBoxes with your 'config.php' info (example: 'Login:user' 'Password:test') and press 'Login' button
When pressed 'Login' button and logged in Simple DDos,press 'Install database...' button.

Image has been scaled down 2% (870x902). Click this bar to view original image (886x918). Click image to open in new window.

-When did it new window will appear,you need to configure your Simple DDos settings now.

Image has been scaled down 9% (870x1009). Click this bar to view original image (954x1106). Click image to open in new window.

'URLs' = Website address or IP you are attacking (you can put multiple colones).

'Stream' = '200'

'Interval' = '120'

-Now Building the bot.
Open your Simple DDos folder,then open 'BUILDER' folder and run 'build.exe'.
In 'URL' textbox put your Simple DDos folder url (example. http://yoursite.domain/admin/)
Then click 'Build' button,and after that 'OK' button.
File 'bot.exe.exe' will be created,rename it to 'something.exe'.

Tutorial from http://hacking-share.blogspot.com/2012/10/simple-ddos-02-setup-detailed.html