• --[MegaProjectSQLi]#Chapter1: Knowing How to Use/Create Dorks# [ZeroFreakTuts/Vids]--
  
• --[MegaProjectSQLi]#Chapter2: Basic SQL injection with Login Queries# [Zer0 Tuts/Vid]--
  
• --[MegaProjectSQLi]#Chapter3:Super Detailed SQL injection TUTORIAL#[Vid/Pics/Text]--
  
• --[MegaProjectSQLi]#Ch-4:Error Based/Double Query SQL injection detailed!#[Vid/Pics]--
  
• --[ZeroFreak] Frequently Asked Questions About Web Hacking [You may NEED it][FAQ Part1]--
  
• --[MegaProjectSQLi]#Ch-5:String Based Injection (Solve your common "order by" issues)#--
  
• --Joomla Shell upload [2 Methods]--

• Tools
  
• [RELEASE] ##Hash Identifier## Don't know the type of hash? COME HERE![Zer0]

• --Staying Anonymous-- by Ƭє¢ɦɨɇ
  
• --██[HOT] READ THIS BEFORE YOU START HACKING WEBSITES FOR NOOBS AND PROS [HOT]██-- by Dream Illusion
  
• --How to stay anonymous when browsing online and get update proxy with picture-- by ame_g
  
• --[Tutorial] Become anonymous, hide IP, encrypt&hide HDD, hide identity ****-- by WhiteFlame

• >>Normal/UNION Based SQL Injection<<
  • --[TUT] SQL Injection(Pics) [Highly Detailed]-- by DownFall
    
  • --[TUT] Introduction to Burp Suite [TUT]-- by Hooded Robin
    
  • --V1P3R'z Complete SQL Injection Tutorial:)-- by V1P3R
    
  • --TUTORIAL - Basic MySQL injection [UPDATED with BLIND SQLi]-- by Dan
    
  • --[TUT] - Full Detailed Basic SQL Injection [/#!UPDATED!#/]- [TUT]-- by //#- Zer0Pwn -#//
    
  • --Beginner SQL Injection Tutorial-- by F4T4L 3RR0R
    
  • --[TUT] basic sqli, string injection and waf bypassing..[/TUT]-- by Real Steel
    
  • --| ULTIMATE SQL injection Tutorial, Very Detailed + Pics |-- by Ruyuk
    
  • --Detailed Basic and Full SQL Injection Tutorial-- By Nerv
    
  • --[TUTORIAL] cookie sql injection,injecting via cookie [session based] -- by benzi
    
  • --[TUT] SQL Injection Tutorial for Beginners-- By Kr4z1
    
  • --< Ultimate SQL Injection Tutorial For Beginners >-- by #Blackhat
  
  >>Blind SQL injection Tutorials<<
  • --[tut]Basic blind Sql Injection using (TIME DELAY) .asp-- by Real Steel
    
  • --[tut]Basic blind Sql Injection using (ascii char)-- by Real Steel
    
  • --[Detailed] Boolean Based Blind Injection [Tutorial]-- by DownFall
    
  • --TUTORIAL - Blind SQL Injection-- by ???Dan
  
  >>XPath Injection<<
  • --[ExtractValue/UpdateXML] XPath Injection Tutorial [Pics/Detailed] -- by -Downfall
    
  • --TUTORIAL : xPath Injection-- by Dan
  
  >>Error Based SQL Injection/Double Query<<
  • --[TUT]Double query(error based blind sQl Injection).-- by Real Steel
    
  • --[TUT][nood friendly][PIC]ERROR BASED INJECTION(DOUBLE QUERY)[TUT]-- by webb
    
  • --[Error Based ] [MySQL<5] Tutorial [Pics/Detailed]-- by -Downfall
    
  • --Full "Error Based" SQL injection tutorial...-- by th3madhatt3r
    
  • --[TuT] Postgre Errorbased sqli [TuT]-- by Xpired™
    
  • --[tut]Basic error based sql injection (and sequel error based injection)-- by Real Steel
    
  • --[X-Mas Special][Tutorial]Error Based Injection [Pics/Detailed][Bonus!] -- by -Downfall
  
  >>String Based SQL Injection<<
  • --'ORDER BY' Doesn't work? Look here [String Based Tutorial]-- by Join7
    
  • --String based SQL Injection tutorial Version 2.0-- by Join7
    
  • --[TUT] basic sqli, string injection and waf bypassing..[/TUT]-- by Real Steel
  
  >>WAF(Windows Application Firewall) Bypassing<<
  • --[TUT] SQL Injection; Basic WAF bypass [/TUT] -- by Join7
    
  • --[EASY]Basic WAF Bypassing within SQLi[TUT] -- by Intercept
    
  • --{*TuT*} WAF Bypassing {*TuT*} sharing-- by Cyber_Space_Warrior
    
  • --[TUT]basic WAF bypassing and intrusion detection (explained.)-- by Real Steel
    
  • --?{DETAILED}SQL Injection + WAF Bypassing TUT For BEGINNERS**{DETAILED} -- by damienomen
    
  • --[TUT]SQL Injection Filter Evasion[TUT]-- by JBAgrajag
    
  • --[TUT] BURP SUITE - PART II: SQL Authentication Bypass [TUT]-- by Hooded Robin
  
  >> MsSQL or Sybase Injection<<
  • --MSSQL [asp] Sql injection-- by PAKbugs™
    
  • --Sybase Injection Tutorial-- by RIPPER
    
    
  • --3 Methods MsSQL Injection-- by Crysan <3
    
  • --MsSQL injection Tutorial v.2-- by gatopardos
    
  • --[TUT]basic MsSQl Injection tutorial.-- by Real Steel

• • --<paper>XSS Behind the mask</ by MaXoNe>-- by MaXone (Recommend to read first)
    
  • --|TUT| Complete XSS Tutorial |TUT|-- by [email protected]
    
  • --[tut]Basic Xss (and cookie stealing explenation).-- by Real Steel
    
  • -- ~[XSS Tutorial]~ Xss tutorial for beginners ~[Scripts | Step by Step | Pictures]~ -- by ~[DogiD]~
    
  • --XSS Tutorial by VipVince-- by VipVince
    
  • --HR's Guide to XSS Shell & XSS Tunnel-- by Hooded Robin
    
  • --[TuT] XSS - Cross Site Scripting.-- by Phizo
    
  • --[TuT]#- Full Ultimate XSS Tutorial -#[TuT]-- by //#- Zer0Pwn -#//
    
  • --XSS Tutorial By Toxic Worm-- by Toxic Worm
    
  • --[Tut]Ignotus guide to ultimate cross site scripting!-- by InQontroll
    
  • --[TUT] Non-Persistent XSS via SQLi [EASY]-- by Intercept
    
  • --[TuT]XSS - Quote Filter[TuT]-- by TheUzuki.'
    
  • --[TUT] XSS to FULL OS Comprimise using XSSF+Metasploit [TUT] -- by Hooded Robin
    
  • --[TuT] - File Upload to Persistent XSS - [TuT]-- by Zer0Pwn
    
  • --[TUT] Basic Cookie Logger + Setting It Up! -- by kobez
    

    ---

• • >>LFI<<
    
  • --[Team INTRA] [Noob friendly] LFI to shell [Tutorial] [Pictures]-- by Haxor
    
  • --[LFI method] php://input - Noob friendly with pictures-- by Haxor
    
  • --[LFI method] php://filter - Noob friendly with pictures-- by Haxo
    
    
  • --[TUT] LFI (Uploading Shell) [Pics/Video]-- by DownFall
    
  • --[TUT] AUTOMATED LFI/RFI SCANNING & EXPLOITING WITH FIMAP [TUT] -- by Hooded Robin
    
  • --[TuT] LFI Exploitation via /proc/self/environ [TuT]-- by Hooded Robin
    
  • --[TuT] Shell via LFI through proc/self/environ method [TuT]-- by Raykoid666
    
  • --[TuT] Exploiting LFI with PHP://INPUT filter [TuT] -- by Hooded Robin
    
  • --[TuT] LFI TIP: HOW TO READ SOURCE CODE USING PHP://FILTER [TuT]-- by Hooded Robin
    
  • --[TUT] How to hack and shell a website using LFI proc/self/environ [TUT]-- by SoTF BluntMan

• • >>RFI<<
    
  • --[TeamDemiZe][TUT]How to load your Shell useing RFI vulnerability[/TUT][Pics]-- by BeggFoMercy
    
  • --[TUT] Exploiting a Remote File Inclusion Vulnerability (Filter Evasion) [Pics!]-- by -Downfall
    
  • --[TuT] RFI - Remote File Inclusion.-- by Phizo
    
  • --[tut]RFI-Remote File Inclusion. (Easy and short)-- by Real Steel
    
  • --[TUT] Simple RFI Tutorial [/tut] -- by MajorDeath
    
  • --[TUT] RFI [Remote File Inclusion]-- by ZaLs

• >>[Tutorial] How to find admin pages<< by Haxor
  
  
• Napsterakos Admin Page Finder (Credits to Napsterakos and thanks to C0d3X for the share)
  https://hackforums.net/showthread.php?tid=1422394&highlight=Admin+page+finder
  
  
• HaviJ Injector/Cracker and Admin page finder
  https://hackforums.net/showthread.php?tid=1560714&highlight=HaviJ

• --RooTinG Tutorial [Backdoor included]-- by TheTechMale
  
• --Rooting Tutorial and Adding New Root User [NOOB FRIENDLY] [PICTURES]-- by Haxor
  
• --[TuT] INTRODUCTION TO SYMBOLIC LINKS OR SYMLINKING [TuT]-- by Hooded Robin

• How To Deface Websites
  
• --[TuT] - How to Deface Website Detailed + Pics [TuT]-- by Dimitrije
  
• --[Ultimate guide] How to hack a website [Ultimate guide]-- by c0c4c0l4
  
• --[TUT] How to Deface a Website!!-- by Ambitious

• How To make deface pages
  
• --[TUT] How To Make A Deface Page[TUT]-- by Juicey
  
• --[TUT] Making your own Deface Page [PICS] -- by kobez
  
• --[TUT] How to make simple deface page [TUT]-- by ReV0luTionH4cKerZ

• --[TUTORIAL] Shell uploading and finding [TUTORIAL]-- by Haxor
  
• --[TUT] HOW TO UPLOAD SHELL [TUT]-- by Hooded Robin
  
• --[Tutorial] Exploiting an Arbitrary File Upload Vulnerability [Pics/Video]-- by -Downfall
  
• --[TuT] NETCAT 101: BIND & BACK CONNECT SHELLS [TuT] -- by Hooded Robin
  
• --[Tut] Shelling vBulletin Forums [Pics!]-- by -Downfall
  
• --[Tutorial] Shelling phpBB ----> 2.x.x Remote Code Execution [Pics!]-- by -Downfall
  
• --[Tutorial] Shelling a 3.x.x PHPBB Forum [Pics/Detailed] -- by -Downfall
  
• --[Tutorial] Upload a shell via SQL injection [Pictures] -- by Haxor
  
• --[TUTORIAL] Shell uploading and finding [TUTORIAL] -- by Haxor
  
• --[HOW TO]Upload your Shell,and Deface[TUTORIAL]-- by skim
  
• --[TuT] HOW TO use the Web Backdoor Cookie script-kit a.k.a. WeBaCoo [TuT] -- by Hooded Robin

• http://www.md5decrypter.co.uk
  
• http://www.md5crack.com
  
• http://www.hashchecker.de
  
• http://www.hash-cracker.com/

• --[TUT] HashcatGUI Tutorial [Part 1: CPU Dictionary/Wordlist]-- by Volume84
  
• Crack any hash-- by JoinSeventh
  
• --[TUT] HashcatGUI Tutorial [Part 2: CPU Bruteforce]-- by Volume84
  
• --[TUT] HashcatGUI Tutorial [Part 3: GPU Dictionary/Wordlist Md5 Hash Cracking]-- by Volume84
  
• --[TuT] - How to crack any Hash [TuT]-- by Dimitrije
  
• --[TUT] Hash Decryption [/TUT]beginner friendly-- by h-boy
  
• --[TUT] HOW TO CRACK HASHED PASSWORDS WITH CPU & GPU-- by Hooded Robin

• --[Bookmark] Hash Types [You will need it]-- by Haxor
  
• --[REFERENCE] HASH TYPE REFERENCE GUIDE [REF]-- by Hooded Robin
  
• ----[REF] Explanation of Hashcat Rules [REF]-- by Hooded Robin
  
• --Wordlists & Password Profiling with CRUNCH, WyD, & CUPP on Backtrack 5 -- by Hooded Robin
  
• --PACK - Password Analysis and Cracking Kit on Backtrack 5-- by Hooded Robin

• --[TUT] HOW TO CRACK HASHED PASSWORDS WITH CPU & GPU-- by Hooded Robin
  
• --vBulletin upload a shell pretty unkown way.-- by Mx.
  
• --Mysql injection shell upload without admin panel-- by Mx.
  
• --Uploading a php-shell like a image but as .php-- by Mx.
  
• --[[TuT] Burp Suite - Part III: LFI exploitation via /proc/self/environ [TuT]-- by Hooded Robin
  
• --[Tut] Basic Shell Uploading [Video]-- by DownFall
  
• --[Tutorial] Exploiting an Arbitrary File Upload Vulnerability [Pics/Video]-- by -Downfall
  
• --[TuT] Burp Suite VII - Exploiting LFI via /proc/self/fd [Video TuT]-- by Hooded Robin
  
• --[TUT] LFI (Uploading Shell) [Pics/Video]-- by DownFall

(Dec 17, 2011 01:08 PM)zerofreak Wrote:  Yup. Well not only the basics, everything is pretty much covered right here for everyone to know about web hacking

(Dec 17, 2011 01:15 PM)Pivotal Wrote:  Not everything. HTMLi, Bruteforcing, Headers, Sniffing etc. There's quite a few you missed out.

(Dec 17, 2011 01:17 PM)zerofreak Wrote:  I'll be making a second version for those, right now, this will help people with the basics and common web hacking methods.

(Dec 17, 2011 01:19 PM)Mx. Wrote:  Should post my tutorials on php shell uploading and the mysql one ;-). its video tutorial tough,.

(Dec 17, 2011 01:20 PM)Pivotal Wrote:  Ok, its still a nice pointer for beginners. Nice post bro, keep it up.

(Dec 17, 2011 01:37 PM)M0dy Wrote:  Awesome post ,Good jop
Bookmarked =)