Pages

Showing posts with label tutorial. Show all posts
Showing posts with label tutorial. Show all posts

Wednesday, May 6, 2015

SQL Injection Bypassing handbook


Content writers :-

Chapter I:::


  • SQL Injection: What is it?
  • SQL Injection: An In-depth Explanation
  • Why is it possible to pass SQL queries directly to a database that is hidden behind a firewall and any other security mechanism?
  • Is my database at risk to SQL Injection?
  • What is the impact of SQL Injection?
  • Example of a SQLInjection Attack

WebApplication Firewalls::


  • Detecting A WAF
  • Prompt Message
  • Dotdefender
  • Observing HTTP Response

Chapter II

Advanced evasion techniques for defeating SQL injection Input validation mechanisms
Web applications are becoming more and more technically complex. Web applications, their

  • Whitespace
  • Null Bytes
  • SQL Comments
  • URL Encoding
  • Changing Cases
  • Encode to Hex Forbidden
  • Replacing keywords technique
  • WAF Bypassing – using characters
  • HTTP Parameter Pollution (HPP)
  • CRLF WAF Bypass technique
  • Buffer Overflow bypassing
Chapter III

Let's see the matter in an orderly fashion from the beginning
  • See If Site vulnerability Or Not
  • Get Column Number
  • Bypassing union select
  • Get Version
  • Group & Concat
  • Bypass with Information_schema.tables
  • Requested Baypassing
Chapter IV

Other issues related to the subject
  • Null Parameter
  • FIND VULNERABLE COLUMNS
  • Count(*)
  • unhex()
  • Get database
Download : MediaFire

source: HF

Sunday, March 16, 2014

ISR STEALER Tutorial

ISR STEALER - STEAL PASSWORDS BY JUST SITTING AT HOME


HACK BROWSER SAVED PASSWORDS ----------







Guys This is a very Interesting tutorial on HOW TO HACK THE BROWSER SAVED PASSWORDS, Actually this tutorial is mostly for GIRLS who save their passwords in browser huhhh GIRLS r just GIRLS LOLZ..... So, not to waste the time let's begin with our tutorial:
 
Download the Requirements 
 ISR stealer 0.4.1

note : This is stealer , so just need to turn off antivirus . Use at your own risk !
 

Step 1. Login account on 000webhost.com and go to Cpanel






Step 2. Go to MySQl database


Step 3. Create database


Step 4. Fill the database info. in config.php file




Step 5. set username and password for shell account... Step 6. create the .zip file of all the php files...




Step 7. upload the php.zip in 000webhost...

















Step 8. then click the url of the 000 and /install.php


Step 9. click on install icon... Step 10. After successfully installing the files delete the install.php from
    public_html...


Step 11. Copy the url link and go to ISR folder.


Step 12. click on ISR and paste the url of 000/index.php





Step 13. click on test php....it shows Done, check ur logs..


Step 14. now build server.. it will create the server.....


Step 15 Bind the server with any of the file and send it to the victim.....  

Now to check the logs just login into your account and PROOF MY PROGRESS




ACTUALLY THERE ARE NO PASSWORDS IN MY BROWSER SO I AM SAVED BUT I ''ll PROMISE YOU GUYS THAT IF YOU STORE PASSWORDS IN YOUR BROWSERS YO CAN BE HACKED IN A MINUTES.......

THANX FOR FOR YOUR SUPPORT GUYS