[HrDe]

Read about CSRF by Shining White http://www.hackcommunity.com/Thread-Guid...F-Tutorial

Hello Friends , HrDe again come with new tutorial which makes you sharp against the Cyber Crime world of Internet. Today thread helpful for that person who works as a Website Developer and works on Joomla website Development technology. This thread also helpful for that person who's that want safe his Joomla Website.

This thread help you find Vulnerability or loop hole or Weakness on your website by help of JoomScan tool of Backtrack 5 R1 & R2. This tool detect XSS , CSRF and SQL Injection like Vulnerability on your website.

IF YOU HAVE ANY PROBLEM IN SEE PIC THEN OPEN PIC IN NEW TAB OF BROWSER.

Step 1: First open the Joomscan on Backtrack , So follow path :

BackTrack >> Vulnerability Ass >> Web Ass >> CMS Vulnerability Iden >> joomscan

See below pic....

Spoiler:

Step 2: When you done step 1 then a terminal window open like below pic, and say you "Press ENTER KEY to Continue" follow and click ENTER Key.

Spoiler:

Step 3: When you press the ENTER Key then Terminal start for works, see below pic...

Spoiler:

Step 4: For start Scan on Joomla Website run command according to below write structure :

Code:

./ joomscan.pl -u <Target website Name>

For example i have write...

Code:

./ joomscan.pl -u www.gsas.harvard.edu

where "-u" use for URL.Now after write command press ENTER Key for start scan.

See below pic...

Spoiler:

Step 5: After done Step 4 when you see terminal then a line come...

Fingerprinting in Progress...

Which means Scan on Target Website have start.

But When you see below line...

Fingerprinting done.

That means Scan complete and after that Discovered Vulnerability start show on the terminal screen , see below pic...

Spoiler:

Scanning Time of Website by JoomScan Take time according to Website Size, so wait for some minute when Fingerprinting start.

Step 6 : Now see your Website Vulnerability on JoomScan Terminal and Remove it if Vulnerability show. See below pic...

Spoiler:

If Vulnerability present then it's show you "Yes" or not then "NO" , watch below pic...

Spoiler:

I have used www.gsas.harvard.edu website for example because it's totally vulnerable free website.

So Guys Enjoy this thread and make your website safe and secure by Hacker attacks!!!!!!!!


http://www.hackarde.com/2012/05/find-vul...te-by.html

[bluedog.tar.gz]

Glad to see you back but.. didn't you leave?

[HrDe]

Glad to see you back but.. didn't you leave?

Thanks for reply....... Shining White Sir understand problem and given suggestion after that he said about my importance here. So i come back thanks for take back ur line. But never take my work against HC , i wanna made a legion of Hacker against HC enemy, so now work on this and search person (like blackhat) who's that come here and join HC and work with me against HC enemy.:yes:

[mothered]

Nice tutorial mate.

Very well documented and Illustrated.
Good work.

[Shining White]

You know what , wTF you late to post that , else i don't have to learn to do error Based SQLi , manually <
i was doing kinda bad with something , pretty sure now this will be work with it ,

and i really really happy that you back with HC , a out persons can't break the HC way , We Fight , We Enjoying , its HC way i suggest

Note PS :- I was too missed BT tuts

and PPS :- :/ XSS isn't a XSRF/CSRF - http://www.hackcommunity.com/Thread-Guid...F-Tutorial

[HrDe]

You know what , wTF you late to post that , else i don't have to learn to do error Based SQLi , manually <
i was doing kinda bad with something , pretty sure now this will be work with it ,

and i really really happy that you back with HC , a out persons can't break the HC way , We Fight , We Enjoying , its HC way i suggest

Note PS :- I was too missed BT tuts

and PPS :- :/ XSS isn't a XSRF/CSRF - http://www.hackcommunity.com/Thread-Guid...F-Tutorial

Oh sorry Sir for mistake , now edit, also add your CSRF thread on top of my Thread

[Shining White]

Wooh , Saying Thank you is not much i know , But Really Thank you

[HrDe]

Wooh , Saying Thank you is not much i know , But Really Thank you

Never say me thanks because u r my bro:yes: !