Block Your Website From Being Scanned

Block Your Website From Being Scanned

Hackers uses the scanners to scan the website and to find the security vulnerability so today I am going to share one trick to block all the scanners to scan your website. Here I am sharing one script, just add that script in to the .htaccess of your website and it will block all the security scanners like Acunetix, nessus, Openvas etc. from scanning your website;

Click here for code

Add me for the Pass 

Just add the above given code in to the .htaccess of your website and all the security scanners will get blocked.

Note: Do Not Use Any Tutorial Of This Blog To Harm Anyone. This Is Only For Educational Purpose. I Will Not Be Responsible For Anything Done By You.

Bypassing Login Panel with SQL Queries

In This Tutorial you Will  Learn How to Bypass Login Panel with SQL Injection Queries.
So Actually we give our SQL evil Queries in Admin Panel And Then The Server Filter Our Command  and give us Access To the Admin Panel without using any username or Password.

Before start Injecting in Admin Panel we need Hackbar or Live HTTP Headers Addon installed in Browser.
We will Give our SQL Queries to the Server with POST Method so we need these Addons for Execution our POST Parameters Injection.
i've put a Site for our This tutorial.
Here is the Target site

http://trentglobal.com/admin

We can use Live HTTP Headers or Hackbar for Post Parameters Injection so i will Use Hackbar For this Process.
Now Lets Insert Some Text in username and password boxes.After Inserting Text Click on LOGIN Button.Then Enable Post Data in Hackbar for the Execution of Our Post Parameters.

Now Click on LOAD URL Button in Hackbar to get POST Parameters in POST DATA box in Hackbar Addon.There we will give our SQL injection Queries.

It gives us Invalid Username and Password but you can See the Post Data in Hackbar Addon.
Here is Our Post Parameter uname=raijee&pwd=123456&log_submit=Login
let's Add Single Quote after uname=raijee' to check The SQLi vulnerability.And Then Execute the Query.

It is Vulnerable to SQL Injection.Next we will execute STRING Based SQL Query for Further Injecting.

Now Let's Count how Many Columns are there.
So We will Give our Command For counting Columns in Post Parameters with Hackbar.
uname=raijee' order by 2%23
No Error !!

uname=raijee' order by 3%23
No Error !!

uname=raijee' order by 4%23
No Error !!

uname=raijee' order by 5%23

We Got Error !!  Unknown column '5' in 'order clause'
it Means There are 4 Total number of Columns.
Hmmm Now Let's Execute our UNION SELECT command with 4 number of Columns.

BinGOOOO!! Admin Panel Bypassed .we have got Access to the Admin Panel Without using Username or Password of the Admin user.

~Xrystyg Keinourq

Create Socks Proxy Through SSH Tunnel in Kali Linux

Log in to using the following command ssh

Code: [Select]

ssh -D 8099 root@192.168.1.56
Setup ProxyChains configuration

Code: [Select]

nano /etc/proxychains.conf
Add the following line
socks4 127.0.0.1 8099

Now you can use proxychains. Examples:

Code: [Select]

proxychains rdesktop 192.168.56.5

Code: [Select]

proxychains msfconsole

~Phr3ak

SQL Injection Bypassing handbook

Content writers :-

Chapter I::: 

• SQL Injection: What is it?
• SQL Injection: An In-depth Explanation
• Why is it possible to pass SQL queries directly to a database that is hidden behind a firewall and any other security mechanism?
• Is my database at risk to SQL Injection?
• What is the impact of SQL Injection?
• Example of a SQLInjection Attack

WebApplication Firewalls::

• Detecting A WAF
• Prompt Message
• Dotdefender
• Observing HTTP Response

Chapter II

Advanced evasion techniques for defeating SQL injection Input validation mechanisms
Web applications are becoming more and more technically complex. Web applications, their

• Whitespace
• Null Bytes
• SQL Comments
• URL Encoding
• Changing Cases
• Encode to Hex Forbidden
• Replacing keywords technique
• WAF Bypassing – using characters
• HTTP Parameter Pollution (HPP)
• CRLF WAF Bypass technique
• Buffer Overflow bypassing

Chapter III

Let's see the matter in an orderly fashion from the beginning

• See If Site vulnerability Or Not
• Get Column Number
• Bypassing union select
• Get Version
• Group & Concat
• Bypass with Information_schema.tables
• Requested Baypassing

Chapter IV

Other issues related to the subject

• Null Parameter
• FIND VULNERABLE COLUMNS
• Count(*)
• unhex()
• Get database

Download : MediaFire

PHP Security Training Video

Topics Of the Course !!!

what is the threat ? 

• How can you Analyze the threat ?

• what Types of threats Are out there?

• How bad is it ?

• what Threats Are Specific to PHP?

• what are some resources to find out more ??

what are the Consequences when a website is not protected Against Attack?

• Financial loss
• Loss of Service
• identity Theft
• website infection

what are most common forms of aTTack?

• Cross site Scripting(xss)

• Remote Code injection 

• session hijacking, fixaion, and request forgery Sql injection

what Are the  Most  Common  Vulnerabilities aTTackers can Exploit?

• unplanned information disclosure

• predictable resource location

• insufficient authorization

• improper accesss controls

• PHP misconfiguration

• Mishandling file uploads

Download: Medaiafire

[KALI LINUX] How to add new exploit to Metasploits

How to add new exploit to Metasploits
First of all, to find the new exploits for your metasploit, you can find it at Exploit-DB or 1337day and download the exploit. It might be in .rb (ruby) or either .py (python).

1- Once you have downloaded the exploit(s), put it on /root folder.

2- Open up terminal and type
root@kali:~#cd .msf4
This will change your current directory into the hidden Metasploit directory.

3- If you ls , you can see all the files and folders in the directory.

4- Now we are going to create a new folder for all new exploits. Type in
root@kali:~#mkdir exploits

5- cd into exploits folder
root@kali:~#cd exploits

6- As there is nothing in the directory, we going to create a folder for the new exploits. For example, the exploit that i've downloaded is an remote exploit. So i created a remote folder.
root@kali:~#mkdir remote

7- cd into remote folder
root@kali:~#cd remote

8- Copy and paste downloaded exploit from /root directory into the folder
root@kali:~#cp exploit.rb newname.rb

9- Now, to load the exploit module, open up your Metasploit Console by typing this command in the terminal
root@kali:~#msfconsole

10- Search for the exploit
msf>search exploitname

11- Load the exploit module
msf> use /exploit/remote/exploitname

That's it! Now you're ready to go! 

10 PRACTICAL SECURITY TIPS FOR DEVOPS

ISSUE 46 (July 2015) DOWNLOAD ISSUE 46 HERE The covered topics are: The Art of War applied to web application security Signature antivirus' dirty little secret Review: Tresorit for Business Making IoT security a reality Report: Hack In The Box Avoiding an IT disaster: Smart security for smart meters The standardization of tokenization and moving beyond PCI 10 practical security tips for DevOps Identifying the insider threat EMVÕs impact on increasing card-not-present fraud: Now what? Identity crisis? Honoring the IAM legacy while taking action and embracing the future Report: Infosecurity Europe 2015 IoT, interoperability, and identity