Apache Server 2 Bible HUNGRY MINDS

Apache_Server_2_Bible_-_HUNGRY_MINDS.pdf
File size: 3.44 MB

Read more »

Bluetooth Application Developers Guide

Bluetooth_Application_Developers_Guide.pdf
File size: 4.82 MB

Read more »

SQL Injection Tutorial With Havij

According to a survey the most common technique of hacking a website is SQL Injection. SQL Injection is a technique in which hacker insert SQL codes into web Forum to get Sensitive information like (User Name , Passwords) to access the site and Deface it. The traditional SQL injection method is quite difficult, but now a days there are many tools available online through which any script kiddie can use SQL Injection to deface a webite, because of these tools websites have became more vulnerable to these types of attacks.

One of the popular tools is Havij, Havij is an advanced SQL injection tool which makes SQL Injection very easy for you, Along with SQL injection it has a built in admin page finder which makes it very effective.

Supported Databases With Havij

• MsSQL 2000/2005 with error.

• MsSQL 2000/2005 no error union based

• MySQL union based

• MySQL Blind

• MySQL error based

• MySQL time based

• Oracle union based

• MsAccess union based

• Sybase (ASE)

Demonstration

Now i will Show you step by step the process of SQL injection.

Step1: Find SQL injection Vulnerability in tour site and insert the string (like http://www.target.com/index.asp?id=123) of it in Havij as show below.

Step3: Now click on the Analyze button as shown below.

Now if the your Server is Vulnerable the information about the target will appear and the columns will appear like shown in picture below:

Step4: Now click on the Tables button and then click Get Tables button from below column as shown below:

Step5: Now select the Tables with sensitive information and click Get Columns button.After that select the Username and Password Column to get the Username and Password and click on the Get Table button.

Countermeasures: 

Here are some of the countermeasures you can take to reduce the risk of SQL Injection

1.Renaming the admin page will make it difficult for a hacker to locate it

3.Use a Intrusion detection system and compose the signatures for popular SQL injection strings

4. One of the best method to protect your website against SQL Injection attacks is to disallow special characters in the admin form, though this will make your passwords more vulnerable to bruteforce attacks but you can implement a capcha to prevent these types of attack.

Read more »

Do you want the old facebook chat back?

most of us do not enjoy this newly introduced facebook chat as its long with unnecessary stuff, like people offline. if you are a fun of facebook old chat, you can always get it back..

With the use of facebook chat disabler extension, you can switch back permanently from the newly introduced facebook chat to the old one.  

choose the browers you want to install the extension to and follow the link...

• Chrome
• Firefox
• Opera

thnk you!!!

Read more »

HACK IN TO YOUR FRIEND'S COMPUTER IN LESS THAN 10 MINUTES WITH METASPLOIT

The MSF is an open-source tool, which provides a framework for security researchers to develop exploits, payloads, payload encoders, and tools for reconnaissance and other security testing purposes. Metasploit is a hacker's best friend, mainly cause it makes the job of exploitation and post-exploitation a lot easier compared to other traditional methods of hacking

 The video shows you how to use metasploit

For more information on using the metasploit, you download and read the book which explains in detailed on using the metasploit.

DOWNLOAD

MSF_final.pdf

Read more »

A Japanese Locked Up For Storing Virus

A Gifu Yard inspector has recently fingered the collar of some Japanese man for a weird crime of having a virus on his PC without a good reason.

Although the vast majority is believed to think there is no good reason to have a virus on their personal computers, the things don’t work this way in Japan anymore. It appeared in that country you can be sentenced to up to 2 years jail time for doing so.

A few days ago, Yasuhiro Kawaguchi, 38, residing in Ogaki, Gifu Prefecture, Japan, found himself arrested at his own home. The reason for the arrest was that the coppers found the virus on his personal computer.

Japanese newspapers explained that the country had recently revised its Penal Code. The introduction of some new provisions was accepted, and now it is against the law to store a computer virus intended for infecting other computers. Yasuhiro Kawaguchi turned out to be the first individual to be charged under the revised legislation.

The virus that the police found on his computer worked by copying graphics elements and files on a PC, which caused it to freeze over two thousand users of the file-sharing networks, whose computer were infected with this virus. The man gave the virus such name that it seemed to be children pornography video and then uploaded it through the file-sharing client named Share. Other Internet users who downloaded the file in question and later opened it on their PCs, or activated a DVD onto which the “video” was saved, were disappointed to see no video but find their PCs infected instead.

The new Japan legislation was designed in such a way that it granted the police the right to charge virus distributors with something even provided that the distributors of malware couldn’t provide any evidence of damage on someone else's personal computer.

Yasuhiro Kawaguchi claimed that he created the virus and was distributed it in such form with the only purpose to punish people using file-sharing software. The man also told coppers that he had actually been writing viruses for the last four years, but they never targeted him before. Gifu Yard explained that it was only due to the fact that under the old legislation the police couldn’t prove Kawaguchi’s guilt.

Read more »

How to modify *.exe files

learn how to change *.exe files, in 5 easy steps:

1) Don't try to modify a prog by editing his source in a dissasembler.Why?
Cause that's for programmers and assembly experts only.

try to view it in hex you'll only get tons of crap you don't understand.
First off, you need Resource Hacker(last version). It's a resource editor-
very easy to use, You can download it at.  ResHack.zip
2) Unzip the archive, and run ResHacker.exe. You can check out the help file too


3) You will see that the interface is simple and clean. Go to the menu FileOpen or press Ctrl+O to open a file. Browse your way to the file you would like to edit. You can edit *.exe, *.dll, *.ocx, *.scr and *.cpl files, but this tutorial is to teach you how to edit *.exe files, so open one.

4) In the left side of the screen a list of sections will appear.
The most common sections are
-String table;
-RCData;
-Dialog;
-Cursor group;
-Bitmap;
-WAV.
*Icon: You can wiew and change the icon(s) of the program by double-clicking the icon section,chossing the icon, right-clicking on it an pressing "replace resource". After that you can choose the icon you want to replace the original with.
*String table: a bunch of crap, useful sometimes, basic programming knowladge needed.
*RCData: Here the real hacking begins. Modify window titles, buttons, text, and lots more!
*Dialog:Here you can modify the messages or dialogs that appear in a program. Don't forget to press "Compile" when you're done!
*Cursor group: Change the mouse cursors used in the program just like you would change the icon.
*Bitmap: View or change images in the programs easy!
*WAV:Change the sounds in the prog. with your own.


5) In the RCData,Dialog,Menu and String table sections you can do a lot of changes. You can modify or translate the text change links, change buttons, etc.


TIP: To change a window title, search for something like: CAPTION "edit this".
TIP: After all operations press the "Compile Script" button, and when you're done editing save, your work @ FileSave(Save as).
TIP: When you save a file,the original file will be backed up by default and renamed to Name_original and the saved file will have the normal name of the changed prog.
TIP: Sometimes you may get a message like: "This program has a non-standard resource layout... it has probably been compressed with an .EXE compressor." That means that Resource Hacker can't modify it because of it's structure.

Read more »