List of google dorks for SQL injection

List of google dorks for SQL injection :--

inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurllay_old.php?id=
inurl:declaration_more.php?decl_id=
inurlageid=
inurl:games.php?id=
inurlage.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=d=
inurl:event.php?id=
inurlroduct-item.php?id=
inurl:sql.php?id=

Read More

Bypass File Hosting Site Waiting Time!

Skipscreen is an extension to browser to by pass waiting time on download. Unfortunately it can only be used with Firefox browsers to avoid waiting time while downloading files from some popular File hosting services like:

Read More

Hack the Administrator Password in Windows

In this post I will tell you guyz how to reset Windows administrator password (for Win 2000, XP, Vista and Win 7) at times when you forget it or when you want to gain access to a computer for which you do not know the password.

All of us have experienced a situation where in we need to gain access to a computer which is password protected or at times we may forget the administrator password without which it becomes impossible to login to the computer. So here is an excellent hack using which you can reset the password or make the password empty (remove the password) so that you can gain administrator access to the computer. You can do this with a small tool called  Offline NT Password & Registry Editor. This utility works offline, that means you need to shut down your computer and boot off your using a floppy disk, CD or USB device (such as pen drive). The tool has the following features.

Read More

What is IIS Exploit

This tutorial is about website hacking that are working on older versions of IIS server. We will be discussing about what is a IIS server and how hackers can upload deface pages on it.

Note:- This tutorial is for information purpose only. Hacking tips won’t be responsible for any harm caused due to the information. We aim to create awareness so that you can protect yourself from getting hacked.

Q) What is an IIS Server ?

A) IIS [Internet Information Service] is a web server developed by Microsoft to use with Mircosoft Operating systems.

Read More

What is Steganography?

What is Steganography?

Before coming to the point let me tell you its history.
You might have seen in old chinese movies that the monks used to safeguard secrets by hiding those secrets on their body parts so that no one else can see them but them.

This concept was developed further and it was implemented in computers as well.

This is called Steganography.

Now coming to its implementation in Computers.

By the use of Steganography you can Hide one type of file behind other keeping the format of file same.
I personally find it very useful because it helps me hide my important information easily.

So do you want to try Steganography on your machine ?

Lets get started.

NOTE:- The files and folder names I am going to use are just for reference. You may use different if you want to. But for beginning I would suggest to follow along. Later on you can try it with different file names.

Setup:-

1) Create a new folder named test in any drive (say C: Drive)

2) In  the test folderCreate a text file in it named – hi.txt

3) Copy any default windows picture from my pictures say – desert.jpg in the test folder

Now the game begins.

Type anything you want to in the  Text file and make its font big so that its easily readable

1) Open command prompt

2) Open the test folder.
      You may use the following commands to do that

    2.1)   C:
    2.2)   cd test

3) Now use the following command

      COPY /B desert.jpg+hi.txt new.jpg
       ie… the syntax is
      Copy /B name of file in which you want to embedded the content+ name of file which you want to embedded name of new file

And that’s it. You are done.

Open the test folder and you will see a new image named new.jpg.

When you preview it you will see the normal image but now right click it and open the image with notepad. At the end of the file you can see the text that you wrote in the document.

Well this was just the beginning.

Now the more interesting use of it.

If you want to bind rar files to images. You can do that as well.
(You may put anything you want in the rar file)..

I am sure this was something new for most of you out here..;-)

Or you may also follow our Facebook Fanpage by click over here

Read More

Domain Hijacking

Domain hijacking is a process by which Internet Domain Names are stolen from it’s legitimate owners. Domain hijacking is also known as domain theft. Before we can proceed to know how to hijack domain names, it is necessary to understand how the domain names operate and how they get associated with a particular web server (website).

The operation of domain name is as follows :

Read More

Real Hide IP v4.1.1.2 + crack

Real Hide IP is a privacy software which allows you to conceal your IP address, choose IP country and surf anonymously. It can protect your privacy, prevent identity theft, and guard against hacker intrusions, all with the click of a button. Using it, you can conceal your identity online by showing these websites a fake IP which you can choose from different countries in Choose IP Country window, blocking hackers and prying eyes from knowing your true location or identity. You can easily change between fake IP and real IP. When you stop running Real Hide IP, your web browser settings will revert back to normal (without the fake IP). Real hide IP automatically configures your web browser to use our proxy server. You can automatically change your IP address every few minutes or hide your IP address when you start your computer. Real Hide IP works with Internet Explorer, Firefox, Opera, Maxthon, MyIE and is compatible with all types of routers, firewalls, home networks, wireless networks, and any other kind of Internet connection.

Read More

What is a Hardware Keylogger and how Hardware Keylogger works.

Hey Hackers! in this post of Learn Hacking, we are going to tell you about Hardware Keylogger. You all might already know about what is a keylogger.

If you are new to the term keylogger, you may read more about What is a Keylogger and How keylogger Works Here.

Now we are going to tell you What is a Hardware Keylogger and How a Hardware keylogger works.

Here is what a Hardware Keylogger Looks like.

A Hardware Keylogger is nothing but a programmed chip (Mostly in assembly Language), so as to capture all the keystrokes and save them in its internal memory. The keylogger can then be taken out and all the stored information can easily be assessed by the hacker. Hardware Keylogger are most commonly used in cyber cafe’s and other public places where a lot of people come and access the internet. Beware of such places.

Read More

Use any Sim in any Modem without unlocking it

We all know that, we cannot use any sim in any modem without unlocking the modem. But its now possible by using Nokia PC suite.

Follow the Steps :

1) Insert the sim inside the modem and connect it to the PC.
2) It will display the message as invalid sim, ignore that message and Open the Nokia PC suite.
3) Click on Connect to Internet option in PC suite. 
4) Goto Configure. Select your data card modem,and make all operator apn setting as like when we use nokia mobile connection. 

5) Finish the set up and connect to internet through PC suite.

6) Now your net is connected without any unlocking.

Read More

Hack a website using remote file inclusion

Remote file inclusion is basically a one of the most common vulnerability found in web application. This type of vulnerability allows the Hacker or attacker to add a remote file on the web server. If the attacker gets successful in performing the attack he/she will gain access to the web server and hence can execute any command on it.

Searching the Vulnerability

Remote File inclusion vulnerability is usually occured in those sites which have a navigation similar to the below one

www.Targetsite.com/index.php?page=Anything

To find the vulnerability the hacker will most commonly  use the following Google Dork

“inurl:index.php?page=”

Read More

Input Validation attacks

Input Validation Attacks are where an attacker intentionally sends unusual input in the hopes of confusing the application.
The most common input validation attacks are as follows-

1) Buffer Overflow :- Buffer overflow attacks are enabled due to sloppy programming or mismanagement of memory by the application developers. Buffer overflow may be classified into stack overflows, format string overflows, heap overflows and integer overflows. It may possible that an overflow may exist in language’s (php, java, etc.) built-in functions.
To execute a buffer overflow attack, you merely dump as much data as possible into an input field. The attack is said to be successful when it returns an application error. Perl is well suited for conducting this type of attack.
Here’s the buffer test, calling on Perl from the command line:
$ echo –e “GET /login.php?user=\
> `perl –e ‘print “a” x 500’`\nHTTP/1.0\n\n” | \
nc –vv website 80
This sends a string of 500 “a” characters for the user value to the login.php file.
Buffer overflow can be tested by sending repeated requests to the application and recording the server’s response.

Read More

What is DOXING and its Uses...

First, let me explain what Doxing is ? Doxing is the process of gaining information about someone or something by using sources on the Internet and using basic deduction skills. Its name is derived from “Documents” and in short it is the retrieval of “Documents” on a person or company.


You’re probably thinking, “Okay, so basically it’s getting information from searching someone’s email on Google right?” in a sense yes, but there are actually easier ways to get someone’s information online. The most popular and most common method is to use a website called Pipl (http://www.pipl.com/). Pipl allows you to search for full names, emails, usernames, and even phone numbers, thus making it a very useful tool for hackers. Another source hackers can use is Facebook (http://www.facebook.com). Sure, Facebook allows full name searches, but most hackers aren’t using it for its name search; they’re using it for its email search.

Read More

Delete administrator Password without any software?

Want to know How to "Delete administrator Password" without any software?


Here's how..

Boot up with DOS and delete the sam.exe and sam.log files from 


Windows\system32\config in your hard drive. Now when you boot up 


in NT the password on your built-in administrator account which 


will be blank (i.e No password). This solution works only if your 


hard drive is FAT kind.

Read More

Break Windows XP Administrator Password

Have you forgotten Windows xp Administrator login password or do 


you want to hack or change the Administrator password of the 


windows system at your School, College or office, then this Trick 


is just for you.

Follow the steps below :

1. Restart your computer


2. Press F8 key continuously until you get a black screen where


you have many options to start you operating system.


3. From the options “Select the Safe mode with Command


Prompt”


4. When your computer starts in DOS mode, type the following


commands


net user


This command displays the list of users on this OS in ROWS

5. Now type the following commands to reset the windows

Administrator password.

net user username password

Note: Enter your username above and space then password.

Then it asks the new password without the last password.


Now type your new password ******


Again retype your new password********

Note: When you type the password, it will not be displayed

Read More

hack website by SQL Injection

Hacking website using SQL Injection -step by step guide

Before we see what  SQL Injection is. We should know what SQL and Database are.

Database:
Database is collection of data. In website point of view, database is used for storing user ids,passwords,web page details and more. 



Some List of Database are:

* DB servers,
* MySQL(Open source), 
* MSSQL, 
* MS-ACCESS, 
* Oracle, 
* Postgre SQL(open source), 
* SQLite,



SQL:
Structured Query Language is Known as SQL. In order to communicate with the Database ,we are using SQL query. We are querying the database so it is called as Query language.

Definition from Complete reference:

SQL is a tool for organizing, managing, and retrieving data stored by a computer
database. The name "SQL" is an abbreviation for Structured Query Language. For
historical reasons, SQL is usually pronounced "sequel," but the alternate pronunciation
"S.Q.L." is also used. As the name implies, SQL is a computer language that you use to
interact with a database. In fact, SQL works with one specific type of database, called a
relational database.

Simple Basic Queries for SQL:
Select * from table_name :
this statement is used for showing the content of tables including column name.
For eg:
select * from users;

Insert into table_name(column_names,...) values(corresponding values for columns):
For inserting data to table.
For eg:
insert into users(username,userid) values("BreakTheSec","break");

I will give more detail and query in my next thread about the SQL QUERY.

What is SQL Injection?

Read More

Utilize Google search engine

Google Tips & Tricks, (utilizing search engine)

So much information is on the web, its mind boggling. Thankfully we have search
engines to sift through them and catagorize them for us. Unfortunatly, there is still so
much info that even with these search engines, its often a painstakingly slow process
(something comparable to death for a hacker) to find exactly what you're looking for.

Lets get right into it.

I use google.com as my primary search engine because it presently tops the charts as far as
the sites that it indexes which means more pertinent info per search.

1. Page translation.
Just because someone speaks another language doesn't mean they dont have anything useful to say. I use translation tools like the ones found at

http://babelfish.altavista.com
and

http://world.altavista.com
to translate a few key words I am searching for. Be specific and creative because these tools arent the most accurate things on the planet.

Read More

Google Crack Search

Google Crack Search

just type crack: app name

example: crack: flashget 1.6a

http://www.google.com/search?hl=en&lr=&ie=UTF-8&q=crack%3A+flashget+1.6a

Read More

Bypaas Share cash

Bypassing Sharecash

There's a way to bypass Sharecash and start downloading without doing the surveys.

Step 1: Get on "Firefox". Download it if you don't have it.

Step 2: Install "Greasemonkey" add-on for Firefox.

Step 3: Restart Firefox.

Step 3: Install "Sharecash autodownload" script for Greasemonkey.

Step 4: Try and download a Sharecash file, you should be able to download it unless the offer is not available in your country. This method is for Canada, U.K & U.S.A.

If you're not from Canada, U.K or U.S.A then, I'd suggest you find a proxy for one of those country and try downloading it from there. Don't forget to add the proxy-link to the "Sharecash autodownload" script.

Tools>>Greasemonkey>>Sharecash autodownload>>Add

Hope this helped!!!

Read More

Find Shells on Google

Finding shells on google :




inurl:c99.php
allinurl: c99.php
allinurl: “c99.php”
inurl:c99.php
inurl:”c99.php”
inurl:”c99.php”
inurl:c99.php
inurl:c99.php
inurl:c99.php
inurl:c99.php
inurl:”c99.php” c99shell
inurl:c99.php
inurl:”c99.php”
allinurl:c99.php
inurl:”/c99.php
inurl:c99.php?

Read More

Google Dorks for Hack

Useful Google dorks for hacking

Hack into google hotmail accounts dorks :

Code:
ext:sql intext:@hotmail.com intext:e10adc3949ba59abbe56e057f20f883e
Code:
ext:sql intext:”INSERT INTO” intext:@hotmail.com intext:password
Code:
ext:sql intext:@hotmail.com intext:password

SQL injection dorks :

index.php?id=
trainers.php?id=
buy.php?category=
article.php?ID=
play_old.php?id=
declaration_more.php?decl_id=
pageid=
games.php?id=
page.php?file=
newsDetail.php?id=
gallery.php?id=
article.php?id=
show.php?id=
staff_id=
newsitem.php?num=
readnews.php?id=
top10.php?cat=
historialeer.php?num=

Read More