[Bookmark]Compilation! ALL WEB HACKING TUTS [MEGATHREAD][Update:14/9/12][HOT]

Notice: Please messageme if you have a tutorial to Submit or it isn't on the list, I'll be updating this again

• --[MegaProjectSQLi]#Chapter1: Knowing How to Use/Create Dorks# [ZeroFreakTuts/Vids]--
  
• --[MegaProjectSQLi]#Chapter2: Basic SQL injection with Login Queries# [Zer0 Tuts/Vid]--
  
• --[MegaProjectSQLi]#Chapter3:Super Detailed SQL injection TUTORIAL#[Vid/Pics/Text]--
  
• --[MegaProjectSQLi]#Ch-4:Error Based/Double Query SQL injection detailed!#[Vid/Pics]--
  
• --[ZeroFreak] Frequently Asked Questions About Web Hacking [You may NEED it][FAQ Part1]--
  
• --[MegaProjectSQLi]#Ch-5:String Based Injection (Solve your common "order by" issues)#--
  
• --Joomla Shell upload [2 Methods]--

• Tools
  
• [RELEASE] ##Hash Identifier## Don't know the type of hash? COME HERE![Zer0]

---

• --Staying Anonymous-- by Ƭє¢ɦɨɇ
  
• --██[HOT] READ THIS BEFORE YOU START HACKING WEBSITES FOR NOOBS AND PROS [HOT]██-- by Dream Illusion
  
• --How to stay anonymous when browsing online and get update proxy with picture-- by ame_g
  
• --[Tutorial] Become anonymous, hide IP, encrypt&hide HDD, hide identity ****-- by WhiteFlame

---

SQL Injection Tutorials--
--A treatise on SQLi-- Judge Dredd

• >>Normal/UNION Based SQL Injection<<
  • --[TUT] SQL Injection(Pics) [Highly Detailed]-- by DownFall
    
  • --[TUT] Introduction to Burp Suite [TUT]-- by Hooded Robin
    
  • --V1P3R'z Complete SQL Injection Tutorial:)-- by V1P3R
    
  • --TUTORIAL - Basic MySQL injection [UPDATED with BLIND SQLi]-- by Dan
    
  • --[TUT] - Full Detailed Basic SQL Injection [/#!UPDATED!#/]- [TUT]-- by //#- Zer0Pwn -#//
    
  • --Beginner SQL Injection Tutorial-- by F4T4L 3RR0R
    
  • --[TUT] basic sqli, string injection and waf bypassing..[/TUT]-- by Real Steel
    
  • --| ULTIMATE SQL injection Tutorial, Very Detailed + Pics |-- by Ruyuk
    
  • --Detailed Basic and Full SQL Injection Tutorial-- By Nerv
    
  • --[TUTORIAL] cookie sql injection,injecting via cookie [session based] -- by benzi
    
  • --[TUT] SQL Injection Tutorial for Beginners-- By Kr4z1
    
  • --< Ultimate SQL Injection Tutorial For Beginners >-- by #Blackhat
  
  >>Blind SQL injection Tutorials<<
  • --[tut]Basic blind Sql Injection using (TIME DELAY) .asp-- by Real Steel
    
  • --[tut]Basic blind Sql Injection using (ascii char)-- by Real Steel
    
  • --[Detailed] Boolean Based Blind Injection [Tutorial]-- by DownFall
    
  • --TUTORIAL - Blind SQL Injection-- by ???Dan
  
  >>XPath Injection<<
  • --[ExtractValue/UpdateXML] XPath Injection Tutorial [Pics/Detailed] -- by -Downfall
    
  • --TUTORIAL : xPath Injection-- by Dan
  
  >>Error Based SQL Injection/Double Query<<
  • --[TUT]Double query(error based blind sQl Injection).-- by Real Steel
    
  • --[TUT][nood friendly][PIC]ERROR BASED INJECTION(DOUBLE QUERY)[TUT]-- by webb
    
  • --[Error Based ] [MySQL<5] Tutorial [Pics/Detailed]-- by -Downfall
    
  • --Full "Error Based" SQL injection tutorial...-- by th3madhatt3r
    
  • --[TuT] Postgre Errorbased sqli [TuT]-- by Xpired™
    
  • --[tut]Basic error based sql injection (and sequel error based injection)-- by Real Steel
    
  • --[X-Mas Special][Tutorial]Error Based Injection [Pics/Detailed][Bonus!] -- by -Downfall
  
  >>String Based SQL Injection<<
  • --'ORDER BY' Doesn't work? Look here [String Based Tutorial]-- by Join7
    
  • --String based SQL Injection tutorial Version 2.0-- by Join7
    
  • --[TUT] basic sqli, string injection and waf bypassing..[/TUT]-- by Real Steel
  
  >>WAF(Windows Application Firewall) Bypassing<<
  • --[TUT] SQL Injection; Basic WAF bypass [/TUT] -- by Join7
    
  • --[EASY]Basic WAF Bypassing within SQLi[TUT] -- by Intercept
    
  • --{*TuT*} WAF Bypassing {*TuT*} sharing-- by Cyber_Space_Warrior
    
  • --[TUT]basic WAF bypassing and intrusion detection (explained.)-- by Real Steel
    
  • --?{DETAILED}SQL Injection + WAF Bypassing TUT For BEGINNERS**{DETAILED} -- by damienomen
    
  • --[TUT]SQL Injection Filter Evasion[TUT]-- by JBAgrajag
    
  • --[TUT] BURP SUITE - PART II: SQL Authentication Bypass [TUT]-- by Hooded Robin
  
  >> MsSQL or Sybase Injection<<
  • --MSSQL [asp] Sql injection-- by PAKbugs™
    
  • --Sybase Injection Tutorial-- by RIPPER
    
    
  • --3 Methods MsSQL Injection-- by Crysan <3
    
  • --MsSQL injection Tutorial v.2-- by gatopardos
    
  • --[TUT]basic MsSQl Injection tutorial.-- by Real Steel

---

--XSS Cross Site Scripting--

>>Cross Site Scripting Tutorial<<

• • --<paper>XSS Behind the mask</ by MaXoNe>-- by MaXone (Recommend to read first)
    
  • --|TUT| Complete XSS Tutorial |TUT|-- by [email protected]
    
  • --[tut]Basic Xss (and cookie stealing explenation).-- by Real Steel
    
  • -- ~[XSS Tutorial]~ Xss tutorial for beginners ~[Scripts | Step by Step | Pictures]~ -- by ~[DogiD]~
    
  • --XSS Tutorial by VipVince-- by VipVince
    
  • --HR's Guide to XSS Shell & XSS Tunnel-- by Hooded Robin
    
  • --[TuT] XSS - Cross Site Scripting.-- by Phizo
    
  • --[TuT]#- Full Ultimate XSS Tutorial -#[TuT]-- by //#- Zer0Pwn -#//
    
  • --XSS Tutorial By Toxic Worm-- by Toxic Worm
    
  • --[Tut]Ignotus guide to ultimate cross site scripting!-- by InQontroll
    
  • --[TUT] Non-Persistent XSS via SQLi [EASY]-- by Intercept
    
  • --[TuT]XSS - Quote Filter[TuT]-- by TheUzuki.'
    
  • --[TUT] XSS to FULL OS Comprimise using XSSF+Metasploit [TUT] -- by Hooded Robin
    
  • --[TuT] - File Upload to Persistent XSS - [TuT]-- by Zer0Pwn
    
  • --[TUT] Basic Cookie Logger + Setting It Up! -- by kobez
    

    ---

--Local File Inclusion Tutorials--

• • >>LFI<<
    
  • --[Team INTRA] [Noob friendly] LFI to shell [Tutorial] [Pictures]-- by Haxor
    
  • --[LFI method] php://input - Noob friendly with pictures-- by Haxor
    
  • --[LFI method] php://filter - Noob friendly with pictures-- by Haxo
    
    
  • --[TUT] LFI (Uploading Shell) [Pics/Video]-- by DownFall
    
  • --[TUT] AUTOMATED LFI/RFI SCANNING & EXPLOITING WITH FIMAP [TUT] -- by Hooded Robin
    
  • --[TuT] LFI Exploitation via /proc/self/environ [TuT]-- by Hooded Robin
    
  • --[TuT] Shell via LFI through proc/self/environ method [TuT]-- by Raykoid666
    
  • --[TuT] Exploiting LFI with PHP://INPUT filter [TuT] -- by Hooded Robin
    
  • --[TuT] LFI TIP: HOW TO READ SOURCE CODE USING PHP://FILTER [TuT]-- by Hooded Robin
    
  • --[TUT] How to hack and shell a website using LFI proc/self/environ [TUT]-- by SoTF BluntMan

--Remote File Inclusion Tutorials--

• • >>RFI<<
    
  • --[TeamDemiZe][TUT]How to load your Shell useing RFI vulnerability[/TUT][Pics]-- by BeggFoMercy
    
  • --[TUT] Exploiting a Remote File Inclusion Vulnerability (Filter Evasion) [Pics!]-- by -Downfall
    
  • --[TuT] RFI - Remote File Inclusion.-- by Phizo
    
  • --[tut]RFI-Remote File Inclusion. (Easy and short)-- by Real Steel
    
  • --[TUT] Simple RFI Tutorial [/tut] -- by MajorDeath
    
  • --[TUT] RFI [Remote File Inclusion]-- by ZaLs

---

[Admin Page Finders

• >>[Tutorial] How to find admin pages<< by Haxor
  
  
• Napsterakos Admin Page Finder (Credits to Napsterakos and thanks to C0d3X for the share)
  https://hackforums.net/showthread.php?ti...age+finder
  
  
• HaviJ Injector/Cracker and Admin page finder
  https://hackforums.net/showthread.php?ti...ight=HaviJ

---

---

--Rooting Tutorials & SymLinking Tutorials--
>>Rooting<<

• --RooTinG Tutorial [Backdoor included]-- by TheTechMale
  
• --Rooting Tutorial and Adding New Root User [NOOB FRIENDLY] [PICTURES]-- by Haxor
  
• --[TuT] INTRODUCTION TO SYMBOLIC LINKS OR SYMLINKING [TuT]-- by Hooded Robin

---

--Defacing and Shelling Tutorials--
>>Hacking and Defacing Tutorials<<

• How To Deface Websites
  
• --[TuT] - How to Deface Website Detailed + Pics [TuT]-- by Dimitrije
  
• --[Ultimate guide] How to hack a website [Ultimate guide]-- by c0c4c0l4
  
• --[TUT] How to Deface a Website!!-- by Ambitious

• How To make deface pages
  
• --[TUT] How To Make A Deface Page[TUT]-- by Juicey
  
• --[TUT] Making your own Deface Page [PICS] -- by kobez
  
• --[TUT] How to make simple deface page [TUT]-- by ReV0luTionH4cKerZ

>>Shelling Websites and Using Shells(Backdoors/etc)<<

• --[TUTORIAL] Shell uploading and finding [TUTORIAL]-- by Haxor
  
• --[TUT] HOW TO UPLOAD SHELL [TUT]-- by Hooded Robin
  
• --[Tutorial] Exploiting an Arbitrary File Upload Vulnerability [Pics/Video]-- by -Downfall
  
• --[TuT] NETCAT 101: BIND & BACK CONNECT SHELLS [TuT] -- by Hooded Robin
  
• --[Tut] Shelling vBulletin Forums [Pics!]-- by -Downfall
  
• --[Tutorial] Shelling phpBB ----> 2.x.x Remote Code Execution [Pics!]-- by -Downfall
  
• --[Tutorial] Shelling a 3.x.x PHPBB Forum [Pics/Detailed] -- by -Downfall
  
• --[Tutorial] Upload a shell via SQL injection [Pictures] -- by Haxor
  
• --[TUTORIAL] Shell uploading and finding [TUTORIAL] -- by Haxor
  
• --[HOW TO]Upload your Shell,and Deface[TUTORIAL]-- by skim
  
• --[TuT] HOW TO use the Web Backdoor Cookie script-kit a.k.a. WeBaCoo [TuT] -- by Hooded Robin

---

--Hash Cracking websites and Hash Cracking Tutorials--

>>Hash Crack Websites<<

• http://www.md5decrypter.co.uk
  
• http://www.md5crack.com
  
• http://www.hashchecker.de
  
• http://www.hash-cracker.com/

>>Hash Cracking Tutorials<<

• --[TUT] HashcatGUI Tutorial [Part 1: CPU Dictionary/Wordlist]-- by Volume84
  
• Crack any hash-- by JoinSeventh
  
• --[TUT] HashcatGUI Tutorial [Part 2: CPU Bruteforce]-- by Volume84
  
• --[TUT] HashcatGUI Tutorial [Part 3: GPU Dictionary/Wordlist Md5 Hash Cracking]-- by Volume84
  
• --[TuT] - How to crack any Hash [TuT]-- by Dimitrije
  
• --[TUT] Hash Decryption [/TUT]beginner friendly-- by h-boy
  
• --[TUT] HOW TO CRACK HASHED PASSWORDS WITH CPU & GPU-- by Hooded Robin

>>Identifying Hashes/ Hash rules and uses<<

• --[Bookmark] Hash Types [You will need it]-- by Haxor
  
• --[REFERENCE] HASH TYPE REFERENCE GUIDE [REF]-- by Hooded Robin
  
• ----[REF] Explanation of Hashcat Rules [REF]-- by Hooded Robin
  
• --Wordlists & Password Profiling with CRUNCH, WyD, & CUPP on Backtrack 5 -- by Hooded Robin
  
• --PACK - Password Analysis and Cracking Kit on Backtrack 5-- by Hooded Robin

---

Other Web Hacking Tutorials (Recommended)
Full Path Disclosure Tutorial (+Noob Friendly) by Th3PonyWizard
[Htaccess] How to bypass it - Noob Friendly [Basic Method] by OriginalsGeeks
[TuT] How vuln works and how to secure them [TuT] by Zixem
[Quick Guide] C-Style comments(WAF Bypassing queries explenation) by Zixem
[Tutorial] ► Server Side Include Injection(SSI Injection) by Zixem
[TuT] CSRF - an enemy you must know (+Noob friendly) by Zixem
[TuT] Web Application Hacking - Behind The Scenes by Phizo
[*] ~ [TUT] Sql Injection to shell [TUT] ~ [*] by ๖ۣۜFrailty

---

--Videos!--

• --[TUT] HOW TO CRACK HASHED PASSWORDS WITH CPU & GPU-- by Hooded Robin
  
• --vBulletin upload a shell pretty unkown way.-- by Mx.
  
• --Mysql injection shell upload without admin panel-- by Mx.
  
• --Uploading a php-shell like a image but as .php-- by Mx.
  
• --[[TuT] Burp Suite - Part III: LFI exploitation via /proc/self/environ [TuT]-- by Hooded Robin
  
• --[Tut] Basic Shell Uploading [Video]-- by DownFall
  
• --[Tutorial] Exploiting an Arbitrary File Upload Vulnerability [Pics/Video]-- by -Downfall
  
• --[TuT] Burp Suite VII - Exploiting LFI via /proc/self/fd [Video TuT]-- by Hooded Robin
  
• --[TUT] LFI (Uploading Shell) [Pics/Video]-- by DownFall

---

--Services--
--[Team INTRA] Shell uploading service [FREE]-- by Haxor
--[Free] SQLi Help [service] OPEN-- by zer0cool

Great Lol that will help gathering all infoz about basic hacking..

Yup. Well not only the basics, everything is pretty much covered right here for everyone to know about web hacking

(Dec 17, 2011 01:08 PM)Zhen. Wrote:  Yup. Well not only the basics, everything is pretty much covered right here for everyone to know about web hacking

Not everything. HTMLi, Bruteforcing, Headers, Sniffing etc. There's quite a few you missed out.

(Dec 17, 2011 01:15 PM)rubydacherry Wrote:  Not everything. HTMLi, Bruteforcing, Headers, Sniffing etc. There's quite a few you missed out.

I'll be making a second version for those, right now, this will help people with the basics and common web hacking methods.

Excellent Post.

Great Job on this.

Finally Something good to bookmark :)

Thanks for the great feedback Unusual.
I really appreciate it and yea this will hopefully help people for easier use and search :)

Should post my tutorials on php shell uploading and the mysql one ;-). its video tutorial tough,.

(Dec 17, 2011 01:17 PM)Zhen. Wrote:  I'll be making a second version for those, right now, this will help people with the basics and common web hacking methods.

Ok, its still a nice pointer for beginners. Nice post bro, keep it up.

(Dec 17, 2011 01:19 PM)Mx. Wrote:  Should post my tutorials on php shell uploading and the mysql one ;-). its video tutorial tough,.

Done. Added some of your videos and tutorials.
Thanks for notifying me :)

---

(Dec 17, 2011 01:20 PM)rubydacherry Wrote:  Ok, its still a nice pointer for beginners. Nice post bro, keep it up.

Thanks for the great feedback mate.
I really appreciate it

Awesome post ,Good jop
Bookmarked =)

(Dec 17, 2011 01:37 PM)M0dy Wrote:  Awesome post ,Good jop
Bookmarked =)

Thanks a lot for the great feedback mate.
I really appreciate it 🙂

This is a great thread, appreciate you taking the time to put this together! This covers all the basics for anyone wanting to get started. I sent you PM with a few more you can consider adding, and hopefully you can keep this updated as time goes...

Nice tut, you should add my shelling video on the section on uploading shells <3