ss_blog_claim=fae120e5c1d5998d026dfd45fe319473 Hack to Learn

Tuesday, April 22, 2008

Bypass proxy at Your Company

Step 1: If Bess used to filter URL at comp or school, visit https://vtunnel.com/
Use v-tunnel, you'll be able to surf anyplace you like.

Step 2: Just enter the website address you want and click "submit" button, you can find lots of working web-based proxies at http://www.aplusproxy.com/webproxy.php.

step3.Download free proxy software like Freenet, JAP, and Tor then can automatic search the proxies from the Internet and configure the browser setting for you. For more info, please go to http://www.aplusproxy.com/torpark.php.

Thursday, April 17, 2008

Simple hacking pc password



This is simple way how to hack pc password. But this is for education purposed only.
Please responsible to use it.

Wednesday, April 16, 2008

2nd Method to Lock Our Folder Wihout Any U2sing Software



This is another method shown how to lock our folder. Seem likes this method not use a software too.
Enjoy!




Yesterday somebody ask me how to lock folder, but i just newbies in hacking activity. Finally, i found i video from Metacafe shown how to lock folder without using software. Just create a file need to write a code.

Tuesday, April 15, 2008

Backdoor Injection- Modules, Forums, Search etc.


Hacking web forms is by no means limited exclusively to login screens. A humble search form, for instance, is necessarily tied to a database, and can potentially be used to amend database details. Using SQL commands in search forms can potentially do some extremely powerful things, like calling up usernames and passwords, searching the database field set and field names, and amending same. Do people really get hacked through their search forms? You better believe it. And through forums, and anywhere else a user can input text into a field which interacts with the database. If security is low enough, the hacker can probe the database to get names of fields, then use commands like INSERT INTO, UNION, and so forth to get user information, change product prices, change account settings/balances, and just about anything else… depending on the security measures in place, database architecture and so on.

So you can have security locked down at the login, but poor security on other forms can still be exploited. Unfortunately this is a real worry regarding 3rd party modules for Web CMS???? products which incorporate forms, and for CMS products these 3rd party modules are often the weakest links which allows hackers access to your database.

source:http://www.cmswire.com/cms/web-cms/how-they-hack-your
-website-overview-of-common-techniques-002339.php

What is SQL Injection all about?

SQL Injection

SQL Injection involves entering SQL code into web forms, eg. login fields, or into the browser address field, to access and manipulate the database behind the site, system or application.

When you enter text in the Username and Password fields of a login screen, the data you input is typically inserted into an SQL command. This command checks the data you’ve entered against the relevant table in the database. If your input matches table/row data, you’re granted access (in the case of a login screen). If not, you’re knocked back out.

source:http://www.cmswire.com/cms/web-cms/how-they-hack-your-website-overview-of-
common-techniques-002339.php

The Simple SQL Injection Hack

In its simplest form, this is how the SQL Injection works. It’s impossible to explain this without reverting to code for just a moment. Don’t worry, it will all be over soon.

Suppose we enter the following string in a Username field:

’ OR 1=1 double-dash-txt.png

The authorization SQL query that is run by the server, the command which must be satisfied to allow access, will be something along the lines of:

SELECT * FROM users WHERE username = ‘USRTEXT
AND password = ‘PASSTEXT

…where USRTEXT and PASSTEXT are what the user enters in the login fields of the web form.

So entering `OR 1=1 — as your username, could result in the following actually being run:

SELECT * FROM users WHERE username = ‘’ OR 1=1 — ‘AND password = ‘’

Two things you need to know about this:
[‘] closes the [username] text field.

double-dash-txt.png’ is the SQL convention for Commenting code, and everything after Comment is ignored. So the actual routine now becomes:

SELECT * FROM users WHERE username = ” OR 1=1

1 is always equal to 1, last time I checked. So the authorization routine is now validated, and we are ushered in the front door to wreck havoc.

Let’s hope you got the gist of that, and move briskly on.

SQL injection

Most common injection : ' OR ''='

source:http://rahulhackingarticles.wetpaint.com