Posts

Showing posts with the label website hack

Pokemon Go Cheat/Hack for Android – How to Play Game without Leaving House! [Works on v0.33.0][UPDATE]

Image
When Pokemon Go app was launched, I was really excited to play the game until I found out I can’t get any new Pokemons due to the fact that the game’s support in Thailand is nearly non-existent.  I am staying here in rural part of Chiang Mai, Thailand and found zero Pokemons over the course of few days.  Also I traveled to Bangkok for 10 days and found zero.  This is a really frustrating game for those of you who live outside Pokemon’s release countries such as South Korea where the game only works in rural city near Japan called Sokcho. While this game may be wildly popular among youngsters, it’s also a very dangerous game as it makes the user stop in locations to actually get more Pokemons.  An 18-year old recently was killed playing the game, a guy stopped in the middle of the highway causing accidents, and there’s an endless list of Pokemon Go mishaps. Well, I was finally able to enjoy the game here in Thailand and also make it safer for my 8-y...

How to Find a Vulnerable website

Image
Website security is a major problem today and should be a priority in any organization or a webmaster, Now a days Hackers are concentrating alot of their efforts to find holes in a web application, If you are a website owner and having a High Page rank and High Traffic then there is a chance that you might be a victim of these Hackers. Few years back their existed no proper tools search for vulnerability, but now a days there are tons of tools available through which even a newbie can find a vulnerable site and start Hacking Common Methods used for Website Hacking There are lots of methods that can be used to hack a website but most common ones are as follows: 1.SQL Injection 2.XSS(Cross Site Scripting) 3.Remote File Inclusion(RFI)  4.Directory Traversal attack  5.Local File inclusion(LFI) 6.DDOS attack Tools commonly used to find a vulnerable website Acunetix Acunetix is one of my favorite tool to find a venerability in any web application It automatically c...

Common Methods to hack a website

 Gone are the days when website hacking was a sophisticated art. Today any body can access through the Internet and start hacking your website. All that is needed is doing a search on google with keywords like “how to hack website”, “hack into a website”, “Hacking a website” etc. The following article is not an effort to teach you website hacking, but it has more to do with raising awareness on some common website hacking methods. SQL Injection involves entering SQL code into web forms, eg. login fields, or into the browser address field, to access and manipulate the database behind the site, system or application. When you enter text in the Username and Password fields of a login screen, the data you input is typically inserted into an SQL command. This command checks the data you’ve entered against the relevant table in the database. If your input matches table/row data, you’re granted access (in the case of a login screen). If not, you’re knocked back out. In its simplest form, ...

How to Hack Normal HTML Coded Pages

1. Open the site you want to hack. Provide wrong username/password combination in its log in form. (e.g. : Username : me and Password: ' or 1=1 --)An error will occur saying wrong username-password. Now be prepared your experiment starts from here. 2. Right click anywhere on that error page =>> go to view source. 3. There you can see the HTML coding with Ja vaScript. • There you find somewhat like this....<_form action="...Login...."> • Before this login information copy the URL of the site in which you are. (e.g. :"< _form..........action= http://www.targetwebsite.com/ login .......>") 4. Then delete the JavaScript from the above that validates your information in the server.(Do this very carefully, your success to hack the site depends upon this i.e. how efficiently you delete the java scripts that validate your account information) 5. Then take a close look for "<_input name="password" type="password"...

How to exploit CSRF vulnerability(CSRF tutorial)?

Image
Today, I'm going to explain you about WEB vulnerability that not everyone knows...but it very popular. This vulnerability is very dangerous and effective.Usually, the vulnerability exploiting never leave evidences.This vulnerability called: Cross Site Request Forgery(CSRF). CSRF and the way to exploit it is extremely easy; Much easier then all the complicated injections. How does it works? It works by forcing the slave's browser to run HTTP requests in order to implement a range of actions, for example : Permission faking\stealing. Transfer of funds from the Bank Disruption of the normal sequence of the site And much more. Requirements to exploiting  CSRF. Make sure that the slave have SESSION \ COOKIE on the target site. slave must be identified by the network protocol verification (HTTP Authentication)                                           ...