Shelling Joomla sites using 2 methods

For this week's tutorial, we're gonna use two method of shelling Joomla sites in case one method doesn't work. So let's get started. First Method: Shelling Joomla sites using Templates. Step1: Login into the Joomla administrator's admin panel. Alright, once we're logged in, navigate to "Extensions" and click "Template manager" Once...

READMORE

[TUTORIAL]Union-Error Based SQLi a.k.a Error Based type 2 [Pics/Details/Video]

Hey guys, It's Zer0 and I'll be explaining another type of Error Based SQL injection. It's definitely another type but in this case, I call it Union-Error based, since it involves Union Select in the queries we're about to use. So let's get started In this example we're gonna be using this site (which was asked by a member in -Downfall's...

READMORE

Frequently Asked Questions About Web Hacking

Introductions -Hello guys, I'm ZeroFreak and today I'll be posting a couple of questions related to web hacking. -In the past few days, I've seen a lot of people having troubles and get stuck at a certain point while they hack. -Well, most of these "questions" will be answered and hopefully you'll find this thread useful I'll be grouping the types of questions to make it easier for you guys to understand...

READMORE

LFI exploitation via php://input [Shelling Sites]

Hey guys, Today I'll be explaining how to shell a website using "php://input" method via LFI. So let's get started. Now let's have our target shall we. As an example, your target URL should look like this: Code: http://www.site.com/index.php?page= You can have...

READMORE

60 XSS on High profile websites by Zer0Freak [Softpedia]

Operation: Op#Zer0XSS From member -Zerofreak-, Team Intra Reason: Educational purposes and malicious activity training Duration: Less than 30 min Vulnerabilities: Non-Persistent XSS http://news.softpedia.com/news/Mancheste...5348.shtml http://www.ehackingnews.com/2012/02/60-h...o-xss.html List of Disclosure with screenshots: http://pastebin.com/Np3LGY6Z Alright guys, go scroll up my list and see...

READMORE

String Based SQL injection

Tutorial by Zer0Freak Difficulty: Easy Requirements: 10 minutes of reading time, patience and intuition Previous Chapters: Chapter1: http://www.hackforums.net/showthread.php?tid=2059771 Chapter2: http://www.hackforums.net/showthread.php?tid=2060211 Chapter3: http://www.hackforums.net/showthread.php?tid=2061628 Chapter4: http://www.hackforums.net/showthread.php?tid=2085773 Alright, since my previous...

READMORE

Error Based/Double Query SQL injection

Tutorial by Zer0Freak Zer0Freak SQLi Tutorials Difficulty: Intermediate Level 2 and Advanced Requirements: Patience,intuition and understanding Estimated time to read the chapter: 10-20 min (reading thoroughly will help you understand better) Previous Chapters: Chapter1: How to use/create dorks Chapter2:Basic SQL injection using login...

READMORE