Practice Hacking With Damn Vulnerable Web App

Recently we posted a series of  Tutorials on Sql Injection, Many our blog readers were asking various questions regarding it, But one question which we repeatedly got was, How do i practice SQL injection or any other web hacking techniques in a legal way ?, So we decided to write an article to let you Know about Damn Vulnerable Web App 

Read More... 2 Comments

SQL Injection Part 5 – Bypassing WAF

In my previous posts, i have explained about different types of SQL injections. Some times, when we try to retrieve data from SQLi vulnerable websites, we end up with forbidden error. Today i will explain why you get such errors and  how you can  bypass such errors and perform successful attacks on websites. If you have not read my previous posts and if you are new to SQLi, I would suggest you to read them before proceeding.

Read More... 11 Comments

SQL Injection part 4 -Hack websites using sqlmap

In my previous articles, i have shown you how we can hack websites using Simple SQL injection and Query based basic SQL injection and blind SQL injections. Today i am going to show you how we can hack websites using SQLmap. When manual methods donot let me hack the websites,then Sqlmap is my favourite tool. So before proceeding into this article i would like to suggest you to read my previous articles on SQLinjections, if you have missed them.

Read More... 4 Comments

SQL Injection Part 3 - Blind Sql Injection

In my previous articles, i have shown you how we can hack websites using simple SQL injection and Query based basic SQL injection. Today i am going to show you the detailed concept of Blind SQL injection.When the website is vulnerable to sql injection but not showing any data on it's pages we go for blind SQL injection. Blind injection is a little more complicated/time consuming. So before going into Blind sql injection, you must have the knowledge of basic SQL injections. So it is strongly recommended you to read my previous articles before proceeding.

Read More... 4 Comments

SQL Injection Part 2 -Explained With An Example

In my previous article SQL injection Part 1. I explained how we can hack websites using simple SQL injections. Today i will explain how we can hack websites using advanced SQL injections. Today there are number of articles on different blogs about SQL injections. So i thought of writing this article using an example so it gives you better understanding.

Read More... 6 Comments

SQL Injection Tutorial -Part1

According to OWASP SQL Injection is the most common technique used by hackers to Deface a website. SQL Injection is a technique in which the hacker inserts SQL codes into a web Form to get Sensitive information like (User Name , Passwords) In following Series Mr srinvas will explain the Various types of SQL Injections

Read More... 6 Comments

Phishing The Smart Way Using XSS Vulnerabilities

In this article Mr srinivas will show us how we can carry out Phishing attacks in a smart and effective way by using XSS  vulnerabilities .This Phishing attack is a bit advanced and if your a newbie i would recommend you to read the following articles first

Read More... 5 Comments

Tabnabbing - A New Type of Phishing Attack

So far in this blog i have explained about Phishing attacks in detail , I have written articles on How you can hack Face book , GMail or any other email account by using a Phisher (fake page ) , If your new to the concept of Phishing i would recommend you to read the following articles before reading this one

• What is Phishing ? Know The Basics
• How to Hack Any Email Account

In this article i'll explain a new phishing technique called as "Tabnabbing" Which is getting very popular now a days

Read More... 7 Comments

View Blocked Websites By SSH Tunneling

I have already  written many articles on How to view Blocked websites in schools and collages by Using Proxies , TOR , URL Filtering ..etc .In this tutorial i will explain an another way "SSH Tunneling" By which  you can view blocked websites .

What is SSH tunneling?
SSH  tunnel is an encrypted tunnel created through an SSH protocol connection. SSH tunnels may be used to tunnel unencrypted traffic over a network through an encrypted channel.In easy language,you can surf net without being monitored and even surf blocked sites too .If you are to curious to know more about SSH and SSH tunneling  .please have look at my guest post on SSH  from Here  

Read More... 20 Comments

Havij - Automated SQL Injection Tool

In my previous posts I Explained how you can do a manual SQL Injection to extract rows and columns containing passwords and other use full data .If you were confused or find it difficult you can use Havij - Automated SQL Injection Tool

What is Havij ?

 Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software user can perform back-end database fingerprint, retrieve DBMS users and  password hashes, dump tables and columns, fetching data from the database, running SQL  statements and even accessing the underlying file system and executing commands on the  operating system. The power of Havij that makes it different from similar tools is its injection methods. The success rate is more than 95% at injection  vulnerable targets using Havij. The user friendly GUI (Graphical User Interface) of Havij and automated settings and detections makes it easy to use for everyone even amateur users.

Read More... 5 Comments

SQL Injection Tutorial

There are many types  of  sql injection  but in this tutorial I will  explain how you can extract  columns  ,tables containing useful data such as passwords ,user id , emails , admin pass and id ..  etc

How To Find Vulnerable  Site ?

There are many was to find vulnerable web sites finding vulnerabilities manually or using a web scanners For more you can refer  my post on  How to Find Vulnerable sites

Read More... 1 Comment

How to hack a website using Cross site scripting (XSS)

What is  Cross site scripting :-

As quoted in wiky
"Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications that enables malicious attackers to inject client-side script into web pages viewed by other users. An exploited cross-site scripting vulnerability can be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites were roughly 80% of all security vulnerabilities documented by Symantec as of 2007. Their impact may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site, and the nature of any security mitigations implemented by the site's owner."

There is no single, standardized classification of cross-site scripting flaws. but most 
experts distinguish between at least two primary flavors of XSS non-persistent
and persistent to know whats persistent and non persistent click here

Read More... 7 Comments

How To Find Vulnarable Websites ?

In my previous post i explained some common techniques used for hacking a website.In this post i will be explaining some common techniques used by hackers to find vulnerable websites

How To Find Vulnerable Websites ?

•  Google Hacking
•  Using  web vulnerability scanners

Read More... 1 Comment

Common methods Used for Hacking a WebSite ?

Common methods Used for Hacking a WebSite ?

1. Remote File Inclusion or RFI

2. SQL injection

3. Cross site scripting or XXS

4. Local file inclusion or LFI

5. Directory Traversal attack

Read More... 0 Comments