Easiest Example Of SQL Injection : Just For Beginners

As i worked a lot on SQL  Injection , n concluded that it is a vast technique or methodology or watever..Giving Rise to bore or hacticness....Thats y i m goin here to give a simple n breif overview of how to Intrude a Website With SQL INJECTION Attack.

Here is a sample basic HTML form with two inputs, login and password.

 

The easiest way for the login.asp to work is by building a database query that looks like this:


SELECT id
FROM login
WHERE username = '$username'
AND password = '$password’

If the variables $username and $password are requested directly from the user's input, this can easily be compromised. Suppose that we gave "Joe" as a username and that the following string was provided as a password: anything' OR 'x'='x


SELECT id
FROM login
WHERE username = 'Joe'
AND password = 'anything' OR 'x'='x'


As the inputs of the web application are not properly sanitised, the use of the single quotes has turned the WHERE SQL command into a two-component clause.

The 'x'='x' part guarantees to be true regardless of what the first part contains.

This will allow the attacker to bypass the login form without actually knowing a valid username / password combination!

Now this ws how to Make a simple web attack with sql injection....Bt for security Professionals.>> How To Protect it.

So here we go for that as well..




How To prevent SQL Injection attacks?
Firewalls and similar intrusion detection mechanisms provide little defense against full-scale web attacks. Since your website needs to be public, security mechanisms will allow public web traffic to communicate with your databases servers through web applications. Isn’t this what they have been designed to do?

Patching your servers, databases, programming languages and operating systems is critical but will in no way the best way to prevent SQL Injection Attacks.

[Read More...]

Learn Hacking Step by Step - Understanding The Dangers Your Systems Face

 

It’s one thing to know that your systems generally are under fire from hackers around the world. It’s another to understand specific attacks against your systems that are possible.

Many information-security vulnerabilities aren’t critical by themselves.

However, exploiting several vulnerabilities at the same time can take its toll.

  

For example, a default Windows OS configuration, a weak SQL Server administrator password, and a server hosted on a wireless network may not be major security concerns separately. But exploiting all three of these vulnerabilities at the same time can be a serious issue.

Nontechnical attacks:-

1. Exploits that involve manipulating people — end users and even yourself —are the greatest vulnerability within any computer or network infrastructure.
2. Humans are trusting by nature, which can lead to social-engineering exploits.
3. Social engineering is defined as the exploitation of the trusting nature of human beings to gain information for malicious purposes.

 Network-infrastructure attacks:-

Hacker attacks against network infrastructures can be easy, because many networks can be reached from anywhere in the world via the Internet. Here are some examples of network-infrastructure attacks.

1. Connecting into a network through a rogue modem attached to a computer behind a firewall
2. Exploiting weaknesses in network transport mechanisms, such as TCP/IP and NetBIOS
3. Flooding a network with too many requests, creating a denial of service (DoS) for legitimate requests
4. Installing a network analyzer on a network and capturing every packet that travels across it, revealing confidential information in clear text configuration.
5. Piggybacking onto a network through an insecure 802.11b wireless.

Operating-system attacks:-

 

Hacking operating systems (OSs) is a preferred method of the bad guys. OSs comprise a large portion of hacker attacks simply because every computer has one and so many well-known exploits can be used against them.

 

Occasionally, some operating systems that are more secure out of the box — such as flavours of BSD UNIX but hackers prefer attacking operating systems like Windows because they are widely used and better known for theirvulnerabilities.

1. Exploiting specific protocol implementation
2. Attacking built-in authentication systems
3. Breaking file-system security
4. Cracking passwords and encryption mechanisms.

Application and other specialized attacks:-

Applications take a lot of hits by hackers. Programs such as e-mail server
software and Web applications often are beaten down:-

• Hypertext Transfer Protocol (HTTP) and Simple Mail Transfer Protocol (SMTP) applications are frequently attacked because most firewalls and other security mechanisms are configured to allow full access to these programs from the Internet.
• Malicious software (malware) includes viruses, worms, Trojan horses, and spyware. Malware clogs networks and takes down systems.
• Spam (junk e-mail) is wreaking havoc on system availability and storagespace. And it can carry malware.
• Ethical hacking helps reveal such attacks against your computer systems..

 

[Read More...]

INFORMATION ON HACKING

"Hacking" is the word that shakes everyone whenever it is said or heard by someone. Everyone born in this world with attitude wants to be a Hacker. But it is not a job of a new born baby or an old grown lady. A Hacker needs a brilliant mind to hack anything. His skills should be so powerful that no other hacker can hack him. A Hacker doesn't need a software to hack. There are many rules that he should learn to become an Ethical Hacker. These rules include knowledge of HTML, JavaScripts, Computer Tricks, Cracking & Breaking etc.etc. So, don't fool around anyone saying that "I am a Hacker!".


And Remember ---> Hacking Is Not A Crime!





HISTORY OF HACKERS-
Kevin Mitnick, often incorrectly called by many God of hackers, broke into the computer systems of the World's top technology and telecommunications companies Nokia, Fujitsu, Motorola, and Sun Micro systems. He was arrested by the FBI in 1995, but later released on parole in 2000. He never termed his activity hacking, instead he called it social engineering.
November 2002

Englishman Gary McKinnon was arrested in November 2002 following an accusation that he hacked into more than 90 US military computer systems in the UK. He is currently undergoing trial in a British court for a fast-track extradition to the US where he is a Wanted man. The next hearing in the case is slated for today.

Types of Hackers!

White Hat Hacker- Also referred as Ethical Hacker or sometimes called as Sneakers. A White Hat Hacker mainly focuses on securing corporate Network from outsider threat. They are with good intention who fight against Black Hat.

Grey Hat Hacker- They are Skilled Hacker who sometimes act legally and sometime not. In simple word you may call a Grey Hat hacker as Hybrid between White Hat and Black Hat hacker
Black Hat Hacker- Also referred as Cracker. A Black Hat Hacker's intention is to break into others Network, and wish to secure his own machine. They often uses different techniques for breaking into systems which can involve advanced programming skills and social engineering.

 

WORD HACKING-

[Read More...]

STEP 1 - INTRODUCTION TO HACKING AND HACKERS

What Is Hacking??


Everyone Here thinks that hacking is just stealing of data and information illegally but this perception is absolutely wrong. 
The below is definition from Wikipedia.... Itz clearly showing hacking as a negative thing...


"Hacking is unauthorized use of computer and network resources. (The term "hacker" originally meant a very gifted programmer. In recent years though, with easier access to multiple systems, it now has negative implications.)"


Hacking is not always unauthorized... Hacking also include Exploring the Things that are being Hidden from the general usage... So exploring things i.e being Hidden from general User is also hacking...


Hacking Definition by Me...
" Hacking is art of exploring the hidden things that are being hidden from general usage and finding loop holes in the security and use them to benefit the others"




WHO ARE HACKERS ??


Everybody here thinks thats hackers are criminals of the virtual world (i.e digital World ). But this thought is also wrong. Hackers are not always criminals.. It doesn't have any doubt that Hackers are extremely genious peoples in the field of Computers...


I want to Categorize hackers in three Categories:
1. Crackers or Black Hat hackers or cheaters or simply criminals : They are called criminals because they are having the mindset of causing harm to security and they steals very useful data and use it in wrong ways. Phishers also some in this category who steals account info and steal your credit card nos. and money over the Net.


2. Ethical hackers : Ethical Hacking Means you think like Hackers. i.e First you Hack the Systems and find out the loop holes and then try to correct those Loop Holes..These type of hackers protect the cyberworld from every possible threat and fixes the future coming security loop holes. These peoples are also called as "GURU's" of Computer Security.


3. Simply Prankers : The hackers who just do hacking for fun...play pranks to their friends..


INTRODUCTION TO SIMPLE TERMS RELATED TO HACKING !



Threat –An action or event that might compromise security. A threat is a potential violation of
security.


Vulnerability –Existence of a weakness, design, or implementation error that can lead to an unexpected, undesirable event compromising the security of the system.


Exploit –A defined way to breach the security of an system through vulnerability. i.e Use the vulnerability to damage the database or system.


Attack –An assault on system security that derives from an intelligent threat. An attack is any action that violates security.


Target of Evaluation –An IT system, product, or component that is identified/subjected as requiring security evaluation.


Security – A state of well-being of information and infrastructures in which the possibility of successful yet undetected theft, tampering, and disruption of information and services is kept low or tolerable.


Security rests on confidentiality, authenticity, integrity, and availability.

•Confidentiality –The concealment of information or resources.
•Authenticity –The identification and assurance of the origin of information.
•Integrity –The trustworthiness of data or resources in terms of preventing improper and     unauthorized changes.
•Availability –The ability to use the information or resource desired.


INTRODUCTION TO TOPICS THAT WE COVER IN THESE CLASSES !








I think You all would have like this and want to see more.. I will regularly post material.
I think this deserves Comments.......

This is the Very First Tutorial Of Hacking . In this tutorial we will discuss what is hacking.. ethical hacking security...who are hackers...why we do hacking...and Introduction to some basic terms...
First of all I will try Explain what the Hacking really is....

• Introduction to Ethical hacking
• Footprinting
• Scanning
• Hacking Systems and OS
• Trojans and backdoors
• Sniffers and DDOS(Denial of Service)
• Social Enginnering
• Hacking Websites
• Hacking Web applcations and Softwares
• Password Hacking and Cracking
• Phising and fake pages
• SQL Injection
• Hacking Wireless (wifi's)
• virus and worms
• Creating Viruses and trojan and Making them undetectable
• Exploit Writing and virus source codes of very famous viruses
• Cryptography
• Hacking Webservers
• ...... And Much more... List is endless...

[Read More...]

STEP 2 - Footprinting & How It Can Be HelpFul To Hack Systems

Previously We have Introduces hacking and hackers. Now In this class we will see what hackers do in pre-phases of hacking .i.e Footprinting.

What Is FOOTPRINTING ??
Basically footprint is the blueprints of site/organisation/system that a hacker want to Hack i.e basic internal structure.Footprinting is the blueprint of the security profile of an organization, undertaken in a methodological
manner.


Footprinting is one of the three pre-attack phases. The others are scanning and enumeration.


Important Thing to be Noted : An attacker will spend 90% of the time in profiling an organization and another 10%  in launching the attack.


Now What is the result of Footprinting??? Can anyone guess It.... I explain it..




Footprinting results in a unique organization profile with respect to networks (Internet/intranet/extranet /wireless) and systems involved.Don't It look amazing...


The most interesting stage of a targeted attack is the reconnaissance, or footprint analysis. Here you use the web, search engines, whois.com, to discover as much about the target as possible. A whois.com can tell you email address formats for instance (first letter last name @ company.com).
A Google search could reveal submission to forums by security personnel that reveal brands of firewall or antivirus in use at the target. 
Sometimes network diagrams are even found that can guide an attack. The next stage, scanning, meant using special tools, ( I date myself by mentioning Cybercop and Internet Security Scanner, these were the days before the open source Nessus) to discover open ports, services, and machines on the target network. And then, finally, you could start attacking various vulnerabilities that you had discovered.




SITES THAT HELP IN FOOTPRINTING!

1.) www.whois.domaintools.com

2. Now you can use this information to search more about Person using Simply google as shown in next snapshot..

Now Its on you need How much info u want to explore about the person and website which u want to hack...


I think you all Will Like Thisss....

[Read More...]

STEP 3 - FOOTPRINTING CONTINUES

I have explained You all that How to collect information about the Websites and organisations....

Today i will continue With Footprinting and take you to some more deep level... And then tell you how to make Blueprints from them.. So read on....



UNEARTHING BASIC INFORMATION

First of all We will focus on Unearthing the Basic Information about the site... i.e the IP and server informations..
I will Show you with the help on snapshots :
First go to START --> RUN --->type cmd--->then type tracert  www.websitename.com
Here we will use two basic commands in command Prompt(cmd): tracert  www.webistetobeanlysed.com

and ping www.websitename.com

It will look something like this:

Here I explain what it shows...

We trace routed www.amulive.com
1. Shows Our Gateway of connectivity.
2. Shows our Outgoing Footprint Ip(i.e the our IP that is being analyzed by website)
3. Shows Connectivity passes through which service Provider. I uses BSNL but its showing airtel because I prefer DNS of Airtel for surfing Quick).
Next steps showing the Ip's of Webservers through which amulive is being maintained.

After This We will came to now the IP of the Website and Ip of itz web servers which are being used further.
website Ip can be used to gather more information about the website..

How to Find The Personal Information About the Individual Over Net ??

Its one of the Most important task. Its also helpful in finding the fake profiles... But unfortuantely this is limited But we can use it to the Most... There are two website which will help us...
1.  http://people.yahoo.com/ ( best Site To trace People for their Personal Information and also reverse Phone or mobile number Look up)

2.  http://www.intellius.com/  ( But this site is limited to US only)

                                              

Sample Report from Intellius :

                                                      

Satellite Picture of Joe's House from Intellius:

                                       

Now Using these Sites you will be able to collect the personal information of the individuals and also being able to identify the fake profiles..


TOOLS NEEDED FOR FOOTPRINTING :

You can avoid above hectic work by using this tool : SpiderFoot
Download link: http://www.binarypool.com/spiderfoot/

Information about SpiderFoot:

SpiderFoot is a free, open-source, domain footprinting tool. Given one or multiple domain names (and when I say domains, I'm referring to the DNS kind, not Windows domains), it will scrape the websites on that domain, as well as search Google, Netcraft, Whois and DNS to build up information like:

• Subdomains
• Affiliates
• Web server versions
• Users (i.e. /~user)
• Similar domains
• Email addresses
• Netblocks

ADDITIONAL FOOTPRINTING TOOLS :

Note all these tools are freewares .. U can easily google then and download these..


~ Whois
~ Nslookup
~ ARIN
~ Neo Trace
~ VisualRoute Trace
~ SmartWhois
~ eMailTrackerPro
~ Website watcher
~ Google Earth
~ GEO Spider
~ HTTrack Web Copier
~ E-mail Spider


This is all about Footprinting .  Now Use the Gathered information to make basic Detailed Information about the Website/person..

[Read More...]

STEP 4 - SCANNING & ATTACKING OPEN PORTS

In my Previous step I have explained about footprinting i.e getting the IP of the Person/website/organisation whom you want to attack and extracting the personal Information.. You all were thinking that what was the use of that .. In this class you will came to know why we have undergo footprinting and analysis part...

In Scanning Part We Will Cover the Following Topics in details :

~ Definition of scanning
~ Types and objectives of Scanning
~ Understanding Scanning methodology
~ Checking live systems and open ports
~ Understanding scanning techniques
~ Different tools present to perform Scanning
~ Understanding banner grabbing and OS fingerprinting
~ Drawing network diagrams of vulnerable hosts
~ Preparing proxies
~ Understanding anonymizers
~ Scanning countermeasures

What Is Scanning ?? And Why We Focus On that ?

 Scanning as from the name means that we will scan something to find some details etc etc... Scanning basically refers to the gathering of following four informations...

We Scan systems for four basic purposes :-

• To find specific IP address
• Operating system
• System Architecture
• Services Running on system

The various types of scanning are as follows:
~Port Scanning
~Network Scanning
~Vulnerability Scanning

I want to Define These Terms here Only as they are of great use in further tutorial...

PORT SCANNING : There are 64k ports in a computer out of which 1k are fixed for system or OS services. In Port scanning we scan for the open Ports which can be used to attack the victim computer.
In Port scanning a series of messages sent to break into a computer to learn about the computer’s network services. Through this we will know that which port we will use to attack the victim..

Network Scanning : Network scanning is basically a procedure of finding the active hosts on the Network.
i.e We tries to find that system is standalone or multiuser...

This is done either for the purpose of attacking them or for network security assessment i.e how secured the network Is ??

Vulnerability Scanning : As from the name , In this type of scanning We scan the systems for finding the vulnerability i.e the weakness in OS/database ... Once we find the vulnerability or loop hole we can utilize it to Best..and attack the victim through that ...

OBJECTIVES OF SCANNING 
These are Primary objectives of scanning i.e why do we do scanning :

~ To detect the live systems running on the network.
~ To discover which ports are active/running.
~ To discover the operating system running on the target system (fingerprinting).
~ To discover the services running on the target system.
~ To discover the IP address of the target system.


We will prefer TOOLS for this because they will reduce our Hectic Work... The first Tool that we Use is the

NMAP :
DOWNLOAD :http://nmap.org/dist/nmap-5.00-setup.exe

Features of NMAP :

~ Nmap is used to carry out port scanning, OS detection, version detection, ping sweep, and many other techniques.
~ It scans a large number of machines at one time.
~ It is supported by many operating systems.
~ It can carry out all types of port scanning techniques.

                                    

SECOND TOOL IS NET TOOLS 5.0.70 :

Itz is a collection of various Networking Tools ... must for beginners...
DOWNLOAD: http://www.softpedia.com/progDownload/Net-Tools-Download-22193.html


~ Net Tools Suite Pack is a collection of scanning tools.
~ This toolset contains tons of port scanners, flooders, web rippers, and mass e-mailers.
Note: Some of these tools may not Work but some are too good.

ENJOY AND HAVE FUN ! IF YOU HAVE ANY QUERIES ASK ME IN FORM OF COMMENTS !

[Read More...]

STEP 5 - Scanning & FingerPrinting Continues

In the Previous step I have discussed the very basic things about scanning and two most important scanning tools namely NMAP and Nettools. Now we continue our discussion on the Scanning ...
Now we Discuss some internal and advanced scanning Methods..




First of Which is OS Fingerprinting...


What is OS Fingerprinting ??


OS fingerprinting is the method to determine the operating system that is running on the target system.


The two different types of fingerprinting are:
• Active stack fingerprinting
• Passive fingerprinting



Active Stack FingerPrinting:


Based on the fact that OS vendors implement the TCP stack differently.Specially crafted packets are sent to remote OSs and response is noted. The responses are then compared with a database to determine the OS.


Passive FingerPrinting:


Passive banner grabbing refers to indirectly scanning a system to reveal its server’s operating system.
It is also based on the differential implantation of the stack and the various ways an OS responds to it.
It uses sniffing techniques instead of the scanning techniques. It is less accurate than active fingerprinting.


TOOL USED FOR OS FINGERPRINTING :p0f Os Fingerprinting Tool
DOWNLOAD:  CLICK HERE

P0f v2 is a versatile passive OS fingerprinting tool. P0f can identify the operating system on:

• machines that connect to your box (SYN mode),
• machines you connect to (SYN+ACK mode),
• machine you cannot connect to (RST+ mode),
• machines whose communications you can observe.

P0f can also do many other tricks, and can detect or measure the following:

• firewall presence, NAT use (useful for policy enforcement),
• existence of a load balancer setup,
• the distance to the remote system and its uptime,
• other guy’s network hookup (DSL, OC3, avian carriers) and his ISP.

wait for next step

[Read More...]