Hello,
Today an tutorial for you what covers most problems while doing SQL injection and solutions to them. Probably every person who has looked at tutorials to hack a website have noticed that there are too much SQL tutorials. Almost every forum has 10 tutorials and blogs 5 tutorials about SQL injection, but actually those tutorials are stolen from somewhere else and the author doesn't probably even know why does SQL injection work. All of those tutorials are like textbooks with their ABC's and the result is just a mess. Everyone are writing tutorials about SQL, but nobody covers the problems what will come with that attack.
What is the cause of most problems related to SQL injection?
Webdevelopers aren't always really dumb and they have also heard of hackers and have implemented some security measures like WAF or manual protetion. WAF is an Web application firewall and will block all malicous requests, but WAF's are quite easy to bypass. Nobody would like to have their site hacked and they are also implementing some security, but ofcourse it would be false to say that if we fail then it's the servers fault. There's also a huge possibility that we're injecting otherwise than we should.
Showing posts with label HOWTO. Show all posts
Showing posts with label HOWTO. Show all posts
The Crittergram Capture Cam combines several common components and software libraries to assemble a basic motion-sensing camera that takes photos whenever something interrupts the field of a Passive InfraRed (PIR) sensor.
Ever wonder who is forking your code? [Jack] did, so he built a real time GitHub activity display for his company’s repositories. The display is based a Wyolum The Intelligent Matrix (TiM) board.
on Wednesday, 17 July 2013
WPScan is a black box WordPress vulnerability scanner.
Step 1 :
To install wpscan and her related packages.
Step 1 :
To install wpscan and her related packages.
sudo apt-get install git libcurl4-gnutls-dev libruby libxml2 libxml2-dev libxslt1-dev ruby1.9.1-dev
sudo -sH
cd /opt
git clone https://github.com/wpscanteam/wpscan.git
Wireshark is the world's foremost network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network. It is the de facto (and often de jure) standard across many industries and educational institutions.
Step 1 :
Answer "
Step 1 :
sudo apt-get update
sudo apt-get install wireshark
sudo dpkg-reconfigure wireshark-commonAnswer "
Yes" to the pop-up which allow non-root users to capture the packets. You can consider to enable it but it is danger.
W3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to help you secure your web applications by finding and exploiting all web application vulnerabilities.
Step 1 :
Make sure you follow the steps below one by one.
Step 1 :
Make sure you follow the steps below one by one.
sudo -sH
cd /opt
apt-get update
apt-get install git build-essential
The objective of theharvester is to gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database.
This tool is intended to help Penetration testers in the early stages of the penetration test in order to understand the customer footprint on the Internet. It is also useful for anyone that wants to know what an attacker can see about their organization.
This tool is intended to help Penetration testers in the early stages of the penetration test in order to understand the customer footprint on the Internet. It is also useful for anyone that wants to know what an attacker can see about their organization.
Sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.
Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB database management systems.
Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB database management systems.
SlowHTTPTest is a highly configurable tool that simulates some Application Layer Denial of Service attacks. It works on majority of Linux platforms, OSX and Cygwin - a Unix-like environment and command-line interface for Microsoft Windows.
It implements most common low-bandwidth Application Layer DoS attacks, such as slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit) by draining concurrent connections pool, as well as Apache Range Header attack by causing very significant memory and CPU usage on the server.
It implements most common low-bandwidth Application Layer DoS attacks, such as slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit) by draining concurrent connections pool, as well as Apache Range Header attack by causing very significant memory and CPU usage on the server.
The Social-Engineer Toolkit (SET) was created and written by the founder of TrustedSec. It is an open-source Python-driven tool aimed at penetration testing around Social-Engineering.
Step 1 :
Step 1 :
sudo apt-get install git
Reaver implements a brute force attack against Wifi Protected Setup (WPS) registrar PINs in order to recover WPA/WPA2 passphrases.
Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations.
On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.
Reaver has been designed to be a robust and practical attack against WPS, and has been tested against a wide variety of access points and WPS implementations.
On average Reaver will recover the target AP's plain text WPA/WPA2 passphrase in 4-10 hours, depending on the AP. In practice, it will generally take half this time to guess the correct WPS pin and recover the passphrase.
The Zed Attack Proxy (ZAP) is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.
It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.
ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
It is designed to be used by people with a wide range of security experience and as such is ideal for developers and functional testers who are new to penetration testing.
ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually.
OpenVAS is a framework of several services and tools offering a comprehensive and powerful vulnerability scanning and vulnerability management solution.
Step 1 :
At the time of this writing, the "
Step 1 :
At the time of this writing, the "
stable" is version 5 while the "nightly builds" is version 6.sudo add-apt-repository ppa:openvas/stable
Nmap ("Network Mapper") is a free and open source utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime.
Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts.
Nmap runs on all major computer operating systems, and official binary packages are available for Linux, Windows, and Mac OS X. In addition to the classic command-line Nmap executable, the Nmap suite includes an advanced GUI and results viewer (Zenmap), a flexible data transfer, redirection, and debugging tool (Ncat), a utility for comparing scan results (Ndiff), and a packet generation and response analysis tool (Nping).
Step 1 :
Step 2 :
To run it. You can run it at any directory.
or
Graphical interface -
Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts.
Nmap runs on all major computer operating systems, and official binary packages are available for Linux, Windows, and Mac OS X. In addition to the classic command-line Nmap executable, the Nmap suite includes an advanced GUI and results viewer (Zenmap), a flexible data transfer, redirection, and debugging tool (Ncat), a utility for comparing scan results (Ndiff), and a packet generation and response analysis tool (Nping).
Step 1 :
sudo apt-get install nmap zenmapStep 2 :
To run it. You can run it at any directory.
sudo -sH
nmap -sC -PN -T4 samiux.comor
Graphical interface -
zenmap
Netcat is a featured networking utility which reads and writes data across network connections, using the TCP/IP protocol.
It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.
Step 1 :
Step 2 :
To run it.
Remarks :
Please do not delete the built-in netcat-openbsd as it will also delete the ubuntu-mininal package at the same time. Your compiled netcat is different to the built-in one.
It is designed to be a reliable "back-end" tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.
Step 1 :
sudo -sH
cd /opt
wget http://garr.dl.sourceforge.net/sourceforge/netcat/netcat-0.7.1.tar.gz
tar -xvzf netcat-0.7.1.tar.gz
rm netcat-0.7.1.tar.gz
cd /opt/netcat-0.7.1
./configure
make
cd /opt
mkdir /opt/netcat
cp /opt/netcat-0.7.1/src/netcat /opt/netcat/
rm -R netcat-0.7.1/Step 2 :
To run it.
sudo -sH
cd /opt/netcat
./netcat -hRemarks :
Please do not delete the built-in netcat-openbsd as it will also delete the ubuntu-mininal package at the same time. Your compiled netcat is different to the built-in one.
Step 1 :
Go to the following link to download you copy of Nessus.
For 32-bit :
For 64-bit :
Step 2 :
or
Go to the following link to register your Nessus Plugin feed :
Point your Firefox to :
Follow the instructions on the browser.
Activate your Nessus plugin feed via the received email.
After that, you should disable the nessusd from being loaded automatically when bootup.
Step 3 :
To run it.
Point your Browser to :
Go to the following link to download you copy of Nessus.
http://www.tenable.com/products/nessus/select-your-operating-systemFor 32-bit :
wget "http://downloads.nessus.org/nessus3dl.php?file=Nessus-5.2.1-ubuntu1110_i386.deb&licence_accept=yes&t=8bd3179e2669137382555cb07611a795&__utma=96148739.876193166.1369081770.1369081770.1369084100.2&__utmb=96148739.3.10.1369084100&__utmc=96148739&__utmx=-&__utmz=96148739.1369084100.2.2.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)&__utmv=-&__utmk=236900745" -O Nessus-5.2.1-ubuntu1110_i386.debFor 64-bit :
wget "http://downloads.nessus.org/nessus3dl.php?file=Nessus-5.2.1-ubuntu1110_amd64.deb&licence_accept=yes&t=8bd3179e2669137382555cb07611a795&__utma=96148739.876193166.1369081770.1369081770.1369084100.2&__utmb=96148739.3.10.1369084100&__utmc=96148739&__utmx=-&__utmz=96148739.1369084100.2.2.utmcsr=google|utmccn=(organic)|utmcmd=organic|utmctr=(not%20provided)&__utmv=-&__utmk=236900745" -O Nessus-5.2.1-ubuntu1110_amd64.debStep 2 :
sudo dpkg -i Nessus-5.2.1-ubuntu1110_i386.debor
sudo dpkg -i Nessus-5.2.1-ubuntu1110_adm64.debGo to the following link to register your Nessus Plugin feed :
http://www.tenable.com/products/nessus/nessus-homefeedsudo /etc/init.d/nessusd startPoint your Firefox to :
https://localhost:8834/Follow the instructions on the browser.
Activate your Nessus plugin feed via the received email.
After that, you should disable the nessusd from being loaded automatically when bootup.
sudo update-rc.d nessusd disableStep 3 :
To run it.
sudo /etc/init.d/nessusd startPoint your Browser to :
https://localhost:8834/
make-pdf tools consists of make-pdf-javascript.py and make-pdf-embedded.py which allows penetration testers to embed file or javascript to a pdf file.
make-pdf-javascript.py allows one to create a simple PDF document with embedded JavaScript that will execute upon opening of the PDF document. It’s essentially glue-code for the mPDF.py module which contains a class with methods to create headers, indirect objects, stream objects, trailers and XREFs.
make-pdf-embedded.py creates a PDF file with an embedded file.
Step 1 :
Step 2 :
To run them.
make-pdf-javascript.py allows one to create a simple PDF document with embedded JavaScript that will execute upon opening of the PDF document. It’s essentially glue-code for the mPDF.py module which contains a class with methods to create headers, indirect objects, stream objects, trailers and XREFs.
make-pdf-embedded.py creates a PDF file with an embedded file.
Step 1 :
sudo -sH
mkdir /opt/make-pdf
cd /opt/make-pdf
wget http://didierstevens.com/files/software/make-pdf_V0_1_4.zip
unzip make-pdf_V0_1_4.zip
rm make-pdf_V0_1_4.zipStep 2 :
To run them.
sudo -sH
cd /opt/make-pdf
python make-pdf-embedded.py
python make-pdf-javascript.py
Mac Changer is a GNU/Linux utility for viewing/manipulating the MAC address of network interfaces.
Step 1 :
Step 2 :
To run it. You can run it at any directory.
or
Graphical interface -
Step 1 :
sudo apt-get install macchanger macchanger-gtkStep 2 :
To run it. You can run it at any directory.
macchanger eth0or
Graphical interface -
macchanger-gtk
Subscribe to:
Posts (Atom)
