+- Sinisterly (https://sinister.li)
+-- Forum: Hacking (https://sinister.li/Forum-Hacking)
+--- Forum: Tutorials (https://sinister.li/Forum-Tutorials)
+--- Thread: Havij _ Full tutorial (/Thread-Havij-Full-tutorial)
Pages:
1
2
Havij _ Full tutorial - yn4dzzZ - 03-13-2013
Havij Tutorial
-On this tutorial I will be teaching you, how to simply use Havij
-Remember this is for education porpuse only
-No images were used on this TuT
-So let's start by opening Havij.
-Once you open it, it should have a place to add your "Target: ________________" and a "Analyze" Button.
-Now its time to search for a target, for that use your "bestfriend"....GOOGLE (google dorks)
Here's a example:
-
Code:
inurl:index.php?id:-Copy it, and search it on GOOGLE
-Imagine that your target looks like this: www.*snip*.com/index.php?id=341
-To check if it is vulnerable to SQL injection just add a quote on the end of the url, like this:www.*snip*.com/index.php?id=341'
-If it is, you probably are going to see a SQL error message or something on the website will dissapear.
-OK, now its time to go back to Havij.
-On Havij just place your target without the quote, TARGET: www.*snip*.com/index.php?id=341 , and Press ANALYZE
-If it works properly, on the lower part of the software you will get Columns, then Click to get Tables and for there on...
-Once thats done, search for the Users/Admins and Passwords.
-If you find it, its time to get the "admin login PAGE"
-For that just click on "Find Admin" and paste the website without the index,etc, like this: www.*snip*.com
-Let's imagine that mine is: www.*snip*.com/Admin_Login.php
-Just Login with the Admin username and Password that you get from the data.
-And now you'r in!
-Get as much data as you can.
But Remember this is for education porpuse only.
If you have any question, feel free to ask it on the comments.
Don't forget to rate and i would appreciate some feedback, THX
_--- Our friend "partian" gave us a list of dorks on pastebin, he takes no credits for it, me eather. : http://pastebin.com/Tdvi8vgK ---_
RE: Havij _ Full tutorial - ReTi0n - 03-13-2013
Very good tutorial man, especially for very begginers
RE: Havij _ Full tutorial - par†ian - 03-13-2013
Really nice tutorial,
maybe use some images - just a suggestion, so people know what they are looking at.
Also, link to the forum thread where they can get Havij,
Here's a list of Google Dorks to add to your thread, so it's a simple
bookmark to add for novices.
(I take NO credit for the list)
7k Google dorks in Pastebin: http://pastebin.com/Tdvi8vgK
(Take no credit for these)
Spelling correction:
Quote:-Remember this is for education porpuse only'educational purposes'
But, I do like the tutorial, noob friendly indeed
RE: Havij _ Full tutorial - yn4dzzZ - 03-13-2013
(03-13-2013, 05:42 PM)ReTi0n Wrote: Very good tutorial man, especially for very begginers
Thx
(03-13-2013, 06:26 PM)partian Wrote: Really nice tutorial,
maybe use some images - just a suggestion, so people know what they are looking at.
Also, link to the forum thread where they can get Havij,
Here's a list of Google Dorks to add to your thread, so it's a simple
bookmark to add for novices.
(I take NO credit for the list)
7k Google dorks in Pastebin: http://pastebin.com/Tdvi8vgK
(Take no credit for these)
Spelling correction:
Quote:-Remember this is for education porpuse only'educational purposes'
But, I do like the tutorial, noob friendly indeed
Thx for the feedback, i will probably later make a "update" of this tut and add more dorks, and Images .
Thx for the 'educational' correction
RE: Havij _ Full tutorial - HrDe - 03-13-2013
If u used to some pics then it will be easy for everyone, see my old Havij tutorial/
RE: Havij _ Full tutorial - yn4dzzZ - 03-13-2013
(03-13-2013, 08:35 PM)HrDe Wrote: If u used to some pics then it will be easy for everyone, see my old Havij tutorial/
Like i said above, im going to make a "update" of this thread and add images,etc
RE: Havij _ Full tutorial - Linuxephus™ - 03-13-2013
These don't exactly appear to be targets of any high acquisition status (infer the Pastebin link), are they?
Realistically, no.
On the other hand though, that's more good news than it is bad news.
Nice tutorial by the way.
The rest I believe, you already are aware of.
RE: Havij _ Full tutorial - yn4dzzZ - 03-14-2013
(03-13-2013, 10:32 PM)Linuxephus Wrote: These don't exactly appear to be targets of any high acquisition status (infer the Pastebin link), are they?
Realistically, no.
On the other hand though, that's more good news than it is bad news.
Nice tutorial by the way.
The rest I believe, you already are aware of.
yeah....Thx by the way
RE: Havij _ Full tutorial - lambertjack - 10-25-2013
Woow !!!
Thank you my friend
RE: Havij _ Full tutorial - lambertjack - 10-25-2013
Woow !!!
Thank you my friend