Free share all

san · 31 Dec 2014

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJm_Q4PSgWyzmtze-skh62Kr3mzXA8jpXUkqatZXrIYDobKFZVVyQrL8v7WGxepIZ4zrVk3zJYZ59ps2y9w0kpONWZmELwhmRxM6__tteGgk24ulTLz7zs8nxGFCZD8X8G_k5KfTGobtQk/s1600/perl.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJm_Q4PSgWyzmtze-skh62Kr3mzXA8jpXUkqatZXrIYDobKFZVVyQrL8v7WGxepIZ4zrVk3zJYZ59ps2y9w0kpONWZmELwhmRxM6__tteGgk24ulTLz7zs8nxGFCZD8X8G_k5KfTGobtQk/s1600/perl.jpg" /></a></div>
<b><br /></b>
<b>1. Cài đặt perl</b><br />
<br />
<blockquote class="tr_bq">
yum -y install perl perl-CGI</blockquote>
<br />
<b>2. Cài đặt ruby</b><br />
<br />
<blockquote class="tr_bq">
yum -y install ruby</blockquote>
<br />
<b>3. Cấu hình</b><br />
<br />
- Tìm<br />
<blockquote class="tr_bq">
Options Indexes FollowSymLinks</blockquote>
Sửa thành<br />
<blockquote class="tr_bq">
Options FollowSymLinks ExecCGI</blockquote>
- Tìm<br />
<blockquote class="tr_bq">
#AddHandler cgi-script .cgi</blockquote>
Sửa thành<br />
<blockquote class="tr_bq">
AddHandler cgi-script .cgi .pl .rp</blockquote>
- Tìm<br />
<blockquote class="tr_bq">
 <Directory /home/*/public_html><br />
AllowOverride FileInfo AuthConfig Limit Indexes<br />
options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec</blockquote>
Sửa thành<br />
<blockquote class="tr_bq">
<Directory /home/*/public_html><br />
    AllowOverride FileInfo AuthConfig Limit<br />
    Options ExecCGI Includes MultiViews Indexes SymLinksIfOwnerMatch<br />
    AddHandler cgi-script .cgi .pl .rb</blockquote>
<br />
- Khởi động lại apache<br />
<br />
<blockquote class="tr_bq">
service httpd restart</blockquote>
<br />
<div style="text-align: center;">
VIDEO</div>
<div style="text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/-nW6dzccsMc?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
<br /></div>

Cài đặt perl, ruby

1. Cài đặt perl yum -y install perl perl-CGI 2. Cài đặt ruby yum -y install ruby 3. Cấu hình - Tìm Options Indexes FollowSymLinks Sửa thành Options FollowSymLinks ExecCGI - Tìm #AddHandler cgi-script…

Đọc thêm »

san · 31 Dec 2014

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlFCC1IWSLV7M2XzeNZqCj1KPMjUMcOSWvd6CHN5YxBLN-l-fZmyvyV0n5YW1GRMsAPU4hHeTryQJajn_eJsqOUQiqrc_ExDUHY-Eaj5y6M1Pijcb88GCgTYhfMtlrql-c9JxxVsAYDrQL/s1600/vsftpd.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="162" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhlFCC1IWSLV7M2XzeNZqCj1KPMjUMcOSWvd6CHN5YxBLN-l-fZmyvyV0n5YW1GRMsAPU4hHeTryQJajn_eJsqOUQiqrc_ExDUHY-Eaj5y6M1Pijcb88GCgTYhfMtlrql-c9JxxVsAYDrQL/s1600/vsftpd.jpg" width="320" /></a></div>
<b><span style="color: red;"><br /></span></b>
<b><span style="color: red;">1. Cài đặt vsftpd</span></b><br />
<br />
<blockquote class="tr_bq">
yum -y install vsftpd</blockquote>
<br />
<b><span style="color: red;">2. Cấu hình</span></b><br />
Mở file <b>/etc/vsftpd/vsftpd.conf</b><br />
<br />
- Tìm<br />
<blockquote class="tr_bq">
anonymous_enable=YES</blockquote>
<br />
sửa thành<br />
<blockquote class="tr_bq">
anonymous_enable=NO</blockquote>
<br />
- Tìm<br />
<blockquote class="tr_bq">
#ascii_upload_enable=YES<br />
#ascii_download_enable=YES</blockquote>
sửa thành<br />
<blockquote class="tr_bq">
ascii_upload_enable=YES<br />
ascii_download_enable=YES</blockquote>
<br />
- Tìm<br />
<blockquote class="tr_bq">
#ls_recurse_enable=YES</blockquote>
sửa thành<br />
<blockquote class="tr_bq">
ls_recurse_enable=YES</blockquote>
<br />
- Tìm<br />
<blockquote class="tr_bq">
#chroot_local_user=YES<br />
#chroot_list_enable=YES<br />
#chroot_list_file=/etc/vsftpd/chroot_list</blockquote>
sửa thành<br />
<blockquote class="tr_bq">
chroot_local_user=YES<br />
chroot_list_enable=YES<br />
chroot_list_file=/etc/vsftpd/chroot_list</blockquote>
<br />
- Thêm 2 dòng sau xuống cuối cùng<br />
<blockquote class="tr_bq">
local_root=public_html<br />
use_localtime=YES</blockquote>
- Tạo file <b>chroot_list</b> trong thư mục <b>/etc/vsftpd</b><br />
<br />
- Thêm port 21 vào iptables<br />
<br />
Mở file:/etc/sysconfig/iptables thêm vào<br />
<br />
-A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT<br />
<br />
Khởi động lại iptables<br />
<br />
service iptables restart<br />
<br />
- Khởi động vsftpd<br />
<blockquote class="tr_bq">
service vsfptd start</blockquote>
<br />
- Cấu hình vsftpd tự khởi động<br />
<blockquote class="tr_bq">
chkconfig vsftpd on</blockquote>
<br />
<br />
Done<br />
<br />
<div style="text-align: center;">
<b>VIDEO </b></div>
<div style="text-align: center;">
<b><br /></b></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/MOb6ab5anp8?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
<b><br /></b></div>

Cài đặt và cấu hình vsftpd trên centos 6.5

1. Cài đặt vsftpd yum -y install vsftpd 2. Cấu hình Mở file /etc/vsftpd/vsftpd.conf - Tìm anonymous_enable=YES sửa thành anonymous_enable=NO - Tìm #ascii_upload_enable=YES #ascii_download_enable=YES …

Đọc thêm »

san · 31 Dec 2014

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEqPP0JwABO-gR6_PpDpF5wBbaYJpH024I3PVlUFTw9HS5oeoMibiVcAip3k5K1GZnzk3XTvwodH6Q4fWkkXvlWG5al_juVFUKB7th7ZOUM4KsjhC1JdtsW7eIwvipEx058KYFYtJFT49X/s1600/phpmyadmin.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEqPP0JwABO-gR6_PpDpF5wBbaYJpH024I3PVlUFTw9HS5oeoMibiVcAip3k5K1GZnzk3XTvwodH6Q4fWkkXvlWG5al_juVFUKB7th7ZOUM4KsjhC1JdtsW7eIwvipEx058KYFYtJFT49X/s1600/phpmyadmin.jpg" /></a></div>
<b><span style="color: red;"><br /></span></b>
<b><span style="color: red;">1. Cài đặt Mysql server</span></b><br />
<br />
<blockquote class="tr_bq">
yum -y install mysql-server</blockquote>
<br />
<b>- Khởi động mysql server</b><br />
<br />
<blockquote class="tr_bq">
service mysqld start</blockquote>
<br />
<b>- Cấu hình mysql server tự động khởi động</b><br />
<br />
<blockquote class="tr_bq">
chkconfig mysqld on</blockquote>
<br />
<b>- Đặt mật khẩu cho mysql</b><br />
<br />
<blockquote class="tr_bq">
mysql_secure_installation</blockquote>
<br />
<br />
<blockquote class="tr_bq">
Enter current password for root (enter for none): (Mật khẩu hiện tại do chưa có nên gõ Enter luôn)<br />
<br />
Remove anonymous users? [Y/n]  Y<br />
Disallow root login remotely? [Y/n] Y<br />
Remove test database and access to it? [Y/n] Y<br />
Reload privilege tables now? [Y/n] Y</blockquote>
<div>
<br /></div>
<div>
<br /></div>
<div>
<b><span style="color: red;">2. Cài đặt php</span></b></div>
<div>
<br /></div>
<blockquote class="tr_bq">
yum -y install php php-mysql</blockquote>
<div>
<br /></div>
<div>
<b>- Mở file <span style="color: blue;">etc/php.ini</span> tìm</b></div>
<div>
<br /></div>
<blockquote class="tr_bq">
;date.timezone = </blockquote>
<div>
<br /></div>
<div>
Sửa thành</div>
<div>
<br /></div>
<blockquote class="tr_bq">
date.timezone = "Asia/Saigon"</blockquote>
<div>
<br /></div>
<div>
<b>- Khởi động lại apache</b></div>
<div>
<br /></div>
<blockquote class="tr_bq">
service httpd restart</blockquote>
<div>
<br /></div>
<div>
<b><span style="color: red;">3. Cài đặt phpmyadmin</span></b></div>
<div>
<br /></div>
<div>
<b>- Thêm repo</b></div>
<div>
<br /></div>
<div>
<blockquote class="tr_bq">
wget http://download.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm</blockquote>
<div>
<br /></div>
<blockquote class="tr_bq">
rpm -ivh epel-release*</blockquote>
<div>
<br /></div>
<blockquote class="tr_bq">
rm epel-release*</blockquote>
</div>
<div>
<br /></div>
<div>
<b>- Cài phpmyadmin</b></div>
<div>
<br /></div>
<blockquote class="tr_bq">
yum -y install phpmyadmin</blockquote>
<div>
<br /></div>
<div>
- <b>Mở file <span style="color: blue;">/etc/httpd/conf.d/phpMyAdmin.conf</span> sửa</b></div>
<div>
<br /></div>
<div>
<blockquote class="tr_bq">
<Directory /usr/share/phpMyAdmin/><br />
   AddDefaultCharset UTF-8<br />
   <IfModule mod_authz_core.c><br />
     # Apache 2.4<br />
     <RequireAny><br />
       Require ip 127.0.0.1<br />
       Require ip ::1<br />
     </RequireAny><br />
   </IfModule><br />
   <IfModule !mod_authz_core.c><br />
     # Apache 2.2<br />
     Order Deny,Allow<br />
     Deny from All<br />
     Allow from 127.0.0.1<br />
     Allow from ::1<br />
   </IfModule><br />
</Directory></blockquote>
</div>
<div>
<br /></div>
<div>
Thành</div>
<div>
<br /></div>
<div>
<blockquote class="tr_bq">
<Directory /usr/share/phpMyAdmin/><br />
   AddDefaultCharset UTF-8<br />
   <IfModule mod_authz_core.c><br />
     # Apache 2.4<br />
     <RequireAny><br />
       Require ip All<br />
       Require ip ::1<br />
     </RequireAny><br />
   </IfModule><br />
   <IfModule !mod_authz_core.c><br />
     # Apache 2.2<br />
     Order Deny,Allow<br />
     Deny from All<br />
     Allow from All<br />
     Allow from ::1<br />
   </IfModule><br />
</Directory></blockquote>
</div>
<div>
<br />
- Mở file /etc/phpMyAdmin/config.inc.php<br />
<br />
Tìm:   $cfg['blowfish_secret'] = '685562101352827009';<br />
<br />
Thay dãy số 685562101352827009 bằng một dãy số tùy ý<br />
<div>
<br /></div>
<br />
<br /></div>
<div style="text-align: center;">
<b>VIDEO</b></div>
<div style="text-align: center;">
<b><br /></b></div>
<div class="separator" style="clear: both; text-align: center;">
<iframe allowfullscreen="allowfullscreen" frameborder="0" height="266" mozallowfullscreen="mozallowfullscreen" src="https://www.youtube.com/embed/Iha5zJWsYbE?feature=player_embedded" webkitallowfullscreen="webkitallowfullscreen" width="320"></iframe></div>
<div style="text-align: center;">
<b><br /></b></div>
<div>
<br /></div>

Cài đặt mysql server - PHP - PhpMyadmin

1. Cài đặt Mysql server yum -y install mysql-server - Khởi động mysql server service mysqld start - Cấu hình mysql server tự động khởi động chkconfig mysqld on - Đặt mật khẩu cho mysql mysql_secure_i…

Đọc thêm »

san · 29 Dec 2014

<span style="background-color: white;"><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">In this Tutorial we will discuss some basics of SQL queries and concentrate on queries and basics which will help us while different Phases of Injection. This will be like a crash course of SQL as per the requirements of SQL Injection. </span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;" /><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><span style="border: 0px; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 700; line-height: 24.6133346557617px; margin: 0px; padding: 0px; text-align: justify; vertical-align: baseline;"><u style="border: 0px; box-sizing: border-box; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; padding: 0px; vertical-align: baseline;">The Hierarchy</u></span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">First of all there are users which can have access to multiple databases, then a database can have multiple tables then a table can have multiple Columns and columns have data in each row. </span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;" /><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;" /><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">This is an example database. </span></span><br />
<span style="background-color: white;"><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;"><br /></span></span>
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMbom2MrQk4kY-vYKaJas71BILOK3iMqI4QFneGqX-YjR2pKrYc-FOKwvm5sICy97818-Kpnbu4lMC0rKQN12OYhZuxptbWNiEG5HzckCuTGmcpoLcYjJ9DwPw4noQmtaHhYMDwwWyRhZN/s1600/database_tables.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiMbom2MrQk4kY-vYKaJas71BILOK3iMqI4QFneGqX-YjR2pKrYc-FOKwvm5sICy97818-Kpnbu4lMC0rKQN12OYhZuxptbWNiEG5HzckCuTGmcpoLcYjJ9DwPw4noQmtaHhYMDwwWyRhZN/s1600/database_tables.png" width="360" /></a></div>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">Here is an example of the most basic type of Select query.</span><br />
<pre style="background: rgb(13, 62, 85); border-radius: 5px; border: 1px solid rgb(181, 181, 181); box-sizing: border-box; color: white; font-family: inherit; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin-bottom: 15px; margin-top: 15px; max-height: 400px; overflow: auto; padding: 10px; text-align: justify; vertical-align: baseline; width: 706.5625px;">select * from table1</pre>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">Output will be:</span><br />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<img src="http://securityidiots.com/post_images/basic_sql_p1_1.png" style="background-color: #c9c9c2; border: 0px; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin: 0px; max-width: 100%; padding: 0px; text-align: justify; vertical-align: baseline;" /><br />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white;"><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">Where * stands for all the columns and "table1" is the table name.</span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">so for example we do not want all the columns but only some selected colulms in output then the query will be.</span></span><br />
<br />
<pre style="background: rgb(13, 62, 85); border-radius: 5px; border: 1px solid rgb(181, 181, 181); box-sizing: border-box; color: white; font-family: inherit; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin-bottom: 15px; margin-top: 15px; max-height: 400px; overflow: auto; padding: 10px; text-align: justify; vertical-align: baseline; width: 706.5625px;">select column1,column2 from table1</pre>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">Output will be:</span><br />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<img src="http://securityidiots.com/post_images/basic_sql_p1_2.png" style="background-color: #c9c9c2; border: 0px; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin: 0px; max-width: 100%; padding: 0px; text-align: justify; vertical-align: baseline;" /><br />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">so let us try some basic conditions now to limit the output.</span><br />
<br />
<pre style="background: rgb(13, 62, 85); border-radius: 5px; border: 1px solid rgb(181, 181, 181); box-sizing: border-box; color: white; font-family: inherit; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin-bottom: 15px; margin-top: 15px; max-height: 400px; overflow: auto; padding: 10px; text-align: justify; vertical-align: baseline; width: 706.5625px;">Select * from students where id=1</pre>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">Output will be:</span><br />
<img src="http://securityidiots.com/post_images/basic_sql_p1_3.png" style="background-color: #c9c9c2; border: 0px; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin: 0px; max-width: 100%; padding: 0px; text-align: justify; vertical-align: baseline;" /><br />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">lets try some other conditions with string type columns.</span><br />
<br />
<pre style="background: rgb(13, 62, 85); border-radius: 5px; border: 1px solid rgb(181, 181, 181); box-sizing: border-box; color: white; font-family: inherit; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin-bottom: 15px; margin-top: 15px; max-height: 400px; overflow: auto; padding: 10px; text-align: justify; vertical-align: baseline; width: 706.5625px;">Select * from students where f_name='camaline'</pre>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">Output will be:</span><br />
<img src="http://securityidiots.com/post_images/basic_sql_p1_4.png" style="background-color: #c9c9c2; border: 0px; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin: 0px; max-width: 100%; padding: 0px; text-align: justify; vertical-align: baseline;" /><br />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white;"><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">When ever we are facing a SQL injection. Something query this is running inside the application. So once we assume what the query is we can easily start injecting into it. Following are some common possiblities of queries you can face:</span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><span style="box-sizing: border-box; color: #10f742; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">[#] If Query is taking any numerical input</span></span><br />
<pre style="background: rgb(13, 62, 85); border-radius: 5px; border: 1px solid rgb(181, 181, 181); box-sizing: border-box; color: white; font-family: inherit; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin-bottom: 15px; margin-top: 15px; max-height: 400px; overflow: auto; padding: 10px; text-align: justify; vertical-align: baseline; width: 706.5625px;">select * from table_name where id=1
select * from table_name where id='1'
select * from table_name where id="1"
select * from table_name where id=(1)
select * from table_name where id=('1')
select * from table_name where id=("1")</pre>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white;"><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">All the above queries will give same output.</span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" /><span style="box-sizing: border-box; color: #10f742; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;">[#] If Query is taking any string input</span></span><br />
<br />
<pre style="background: rgb(13, 62, 85); border-radius: 5px; border: 1px solid rgb(181, 181, 181); box-sizing: border-box; color: white; font-family: inherit; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin-bottom: 15px; margin-top: 15px; max-height: 400px; overflow: auto; padding: 10px; text-align: justify; vertical-align: baseline; width: 706.5625px;">select * from table_name where id='1'
select * from table_name where id="1"
select * from table_name where id=('1')
select * from table_name where id=("1")</pre>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white;"><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">All the above queries will give same output.</span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;" /><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;" /><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">For Example when we see any url like "http://fakesite.com/report.php?id=23" we can easily assume what query may be working inside. And that is the first step of SQL injection.</span><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;" /><br style="box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;" /><span style="color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">So if we assume for the above url our Assumption Queries will be the following:</span></span><br />
<br />
<pre style="background: rgb(13, 62, 85); border-radius: 5px; border: 1px solid rgb(181, 181, 181); box-sizing: border-box; color: white; font-family: inherit; font-size: 17.7777786254883px; font-stretch: inherit; font-weight: 600; line-height: 24.6133346557617px; margin-bottom: 15px; margin-top: 15px; max-height: 400px; overflow: auto; padding: 10px; text-align: justify; vertical-align: baseline; width: 706.5625px;">select * from table_name where id=23
select * from table_name where id='23'
select * from table_name where id="23"
select * from table_name where id=(23)
select * from table_name where id=('23')
select * from table_name where id=("23")</pre>
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<br style="background-color: #c9c9c2; box-sizing: border-box; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; font-weight: 600; line-height: 24.6133346557617px; text-align: justify;" />
<span style="background-color: white; color: #040000; font-family: Raleway, sans-serif; font-size: 17.7777786254883px; line-height: 24.6133346557617px; text-align: justify;">Well for this Tutorial this is enought. In the next tutorial i will show you how can you find out the correct query out of these assumption queries using some simple tests, and get confirmed. Once we will be confirmed, we will start injecting and understand the whole backend process at the same time.</span>

Part 1: Basic of SQL for SQL Injection

In this Tutorial we will discuss some basics of SQL queries and concentrate on queries and basics which will help us while different Phases of Injection. This will be like a crash course of SQL as per…

Đọc thêm »

san · 26 Dec 2014

<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipznOucCR-qDxAepgCTCEybLd0-RnGUl9MBsBI-T5JJ0LSpXjSeevqE6y6fz0Lg3YowCQIbOXhasXx5OC4g_aUNM5Je-kn49gZLfXVZ6D8B4aYWRJ6Hnor41ZlVFMaAwI6vHF6MV9yB_hY/s1600/metagoofil.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="307" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipznOucCR-qDxAepgCTCEybLd0-RnGUl9MBsBI-T5JJ0LSpXjSeevqE6y6fz0Lg3YowCQIbOXhasXx5OC4g_aUNM5Je-kn49gZLfXVZ6D8B4aYWRJ6Hnor41ZlVFMaAwI6vHF6MV9yB_hY/s1600/metagoofil.png" width="400" /></a></div>
<br />
<br />
<span class="" id="result_box" lang="vi"><span class="hps">Metagoofil</span> <span class="hps">là</span> <span class="hps">một công cụ</span> <span class="hps">mang tính cách mạng</span> nó<span class="hps"> sử dụng</span> <span class="hps">công cụ tìm kiếm</span> <span class="hps">Google</span> <span class="hps">để tìm</span> <span class="hps">dữ liệu từ các</span> <span class="hps">tài liệu có sẵn</span><span class="hps"></span><span class="">.</span></span><br />
<br />
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps">Metagoofil</span> <span class="hps">hoạt động bằng cách</span>:<br /> <span class="hps atn">[</span>#] <span class="hps">Tìm kiếm</span> <span class="hps">các loại tập tin</span><span class="hps"></span> <span class="hps">bằng cách sử dụng</span> <span class="hps">công cụ tìm kiếm</span> <span class="hps">Google</span></span></span></span><br />
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="hps atn">[</span>#] <span class="hps">Tải</span> <span class="hps">tất cả các</span> <span class="hps">tài liệu tìm thấy</span> <span class="hps">và</span> <span class="hps">lưu chúng ổ đĩa</span><span class="hps">.</span></span> </span></span></span></span><br />
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="hps atn">[</span>#] <span class="hps">Trích xuất</span> <span class="hps">các</span> <span class="hps">siêu dữ liệu từ</span> <span class="hps">các</span> <span class="hps">tài liệu tải về.</span></span></span></span></span></span><br />
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="hps atn">[</span>#<span class="">]</span> <span class="hps">Lưu các</span> <span class="hps">kết quả</span> <span class="hps">trong một tập tin</span> <span class="hps">HTML</span></span></span></span></span></span></span></span><br />
<br />
<div class="almost_half_cell" id="gt-res-content">
<div dir="ltr" style="zoom: 1;">
<span class="" id="result_box" lang="vi"><span class="hps">Các</span> <span class="hps">thông tin</span> <span class="hps">có thể được</span> <span class="hps">tìm thấy</span> <span class="hps">bằng cách sử dụng</span> <span class="hps">siêu dữ liệu là</span> <span class="hps">tên người dùng</span><span class="">,</span> <span class="hps">đường dẫn</span><span class="">,</span> <span class="hps">địa chỉ</span> <span class="hps">MAC</span>, phần mềm, <span class="hps">hệ điều hành</span> <span class="hps">vv Những thông tin</span> <span class="hps">này</span> <span class="hps">có thể được</span> <span class="hps">sử dụng sau này</span> <span class="hps">để giúp đỡ trong</span> <span class="hps">giai đoạn</span> <span class="hps">thử nghiệm thâm nhập</span><span class="">.</span></span></div>
<div dir="ltr" style="zoom: 1;">
</div>
<div dir="ltr" style="zoom: 1;">
<span class="" id="result_box" lang="vi"><span class="">Metagoogil có sẵn trên Kali Linux</span></span></div>
<div dir="ltr" style="zoom: 1;">
</div>
<div dir="ltr" style="zoom: 1;">
<span class="" id="result_box" lang="vi"><span class=""><b><span class="post-description" style="text-align: justify;">Metagoofil options</span></b></span></span></div>
<div dir="ltr" style="zoom: 1;">
</div>
<div dir="ltr" style="zoom: 1;">
<span class="" id="result_box" lang="vi"><span class=""><b><span class="post-description" style="text-align: justify;"><span class="" id="result_box" lang="vi"><span class="hps">         -d: domain to search<br />         -t: filetype to download (pdf,doc,xls,ppt,odp,ods,docx,xlsx,pptx)<br />         -l: limit of results to search (default 200)<br />         -h: work with documents in directory (use "yes" for local analysis)<br />         -n: limit of files to download<br />         -o: working directory (location to save downloaded files)<br />         -f: output file</span></span></span></b></span></span></div>
<div dir="ltr" style="zoom: 1;">
<span class="" id="result_box" lang="vi"><span class=""><b><span class="post-description" style="text-align: justify;"><span class="" id="result_box" lang="vi"><span class="hps"><br /></span></span></span></b> </span></span></div>
<div dir="ltr" style="zoom: 1;">
<br />
<span class="" id="result_box" lang="vi"><span class="hps">Một ví dụ về</span> <span class="hps">việc sử dụng</span> <span class="hps">metagoofil</span>, <span class="hps">chúng ta sẽ</span> <span class="hps">thu thập tất cả</span> <span class="hps">các</span> <span class="hps">tài liệu từ</span> <span class="hps">mục tiêu</span> <span class="hps">của chúng ta</span> <span class="hps">và</span> <span class="hps">lưu chúng vào một</span> <span class="hps">tập tin</span> <span class="hps">html</span> <span class="hps">có tên</span> <span class="hps">result.html</span>. <span class="hps">Chúng ta giới hạn</span> <span class="hps">tải</span> <span class="hps">cho</span> <span class="hps">từng loại tập tin</span> <span class="hps">là 50</span> <span class="hps">files.</span></span></div>
<div dir="ltr" style="zoom: 1;">
</div>
<blockquote class="tr_bq">
<div dir="ltr" style="zoom: 1;">
<span class="" id="result_box" lang="vi"><span class="hps">metagoofil -d targetdomain.com -t doc,pdf,xls,docx -l 100 -n 50 -o targetdomainfiles -f result.html</span></span></div>
</blockquote>
<div dir="ltr" style="zoom: 1;">
</div>
<div dir="ltr" style="zoom: 1;">
<span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="hps">Từ</span> <span class="hps">các</span> <span class="hps">kết quả</span> <span class="hps">chúng ta nhận được</span> <span class="hps">rất nhiều thông tin</span> <span class="hps">từ</span> <span class="hps">các tài liệu</span> <span class="hps">chúng ta</span> <span class="hps">thu thập được,</span> <span class="hps">chẳng hạn như</span> <span class="hps">tên người dùng</span> <span class="hps">và</span> <span class="hps">thông tin đường dẫn</span>. <span class="hps">Chúng ta</span> <span class="hps">có thể sử dụng</span> <span class="hps">các</span> <span class="hps">tên người dùng</span> <span class="hps">để</span> <span class="hps">brute force</span> <span class="hps">password</span>, <span class="hps">trong khi</span> <span class="hps">các</span> <span class="hps">thông tin đường dẫn</span> <span class="hps">có thể được</span> <span class="hps">sử dụng để</span> <span class="hps">đoán</span> <span class="hps">các</span> <span class="hps">hệ điều hành</span> <span class="hps">được sử dụng bởi</span> <span class="hps">victim</span><span class="hps"></span></span></span></span></div>
</div>
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="hps"> </span></span> </span></span> </span></span></span></span><br />
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps">ví dụ</span></span></span></span><br />
<br />
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps">metagoofil -d microsoft.com -t doc,pdf,xls,docx -l 100 -n 50 -o /home -f result.html </span></span></span></span><br />
<br />
<b><span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps"> </span></span></span></span></b><span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps"><b>/home</b> : Vị trí lưu các file được tải về</span></span></span></span><br />
<span class="" id="result_box" lang="vi"><span class=""><span class="" id="result_box" lang="vi"><span class="hps">File result.html được lưu tại <b>/root</b></span></span></span></span><br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjILj5Wsbav2z0rjVJbGKm1LvjTNAw4u_28GzCUXIcafgbHkNuppF3DzZC6SrUf_08iGGsfdtZ1OYzh8DYyzfdfdYH-9Wsj28a8yv7OxwabvVuQ60PVZk0AbUZq4oShjiH_UTvb6AoJ9pzv/s1600/metagoofil1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="385" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjILj5Wsbav2z0rjVJbGKm1LvjTNAw4u_28GzCUXIcafgbHkNuppF3DzZC6SrUf_08iGGsfdtZ1OYzh8DYyzfdfdYH-9Wsj28a8yv7OxwabvVuQ60PVZk0AbUZq4oShjiH_UTvb6AoJ9pzv/s1600/metagoofil1.png" width="400" /> </a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJe-FW16LadFlZoHm99T1FaKEX-3goLccWeaKe_i-Ln3EJ5BUcIBJpoFdOzAm9w3XqUPsB8i7tMN_tnP7Gg8y6ZDzeKEcAxy77iyP3eh5DIPFh_3MYoaIjjHD3iEQ9w_aDjtmM7d-clug-/s1600/metagoofil2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJe-FW16LadFlZoHm99T1FaKEX-3goLccWeaKe_i-Ln3EJ5BUcIBJpoFdOzAm9w3XqUPsB8i7tMN_tnP7Gg8y6ZDzeKEcAxy77iyP3eh5DIPFh_3MYoaIjjHD3iEQ9w_aDjtmM7d-clug-/s1600/metagoofil2.png" width="400" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<br />
<h2>
<span class="" id="result_box" lang="vi"><span class="post-description" style="text-align: justify;"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span style="color: blue;"><b><span class="hps"><span style="color: red;">Bác nào lech đi đâu vui lòng để lại cho mình cái nguồn. Cảm ơn !</span></span></b></span></span></span></span></span></span></span></span></span></span></span></h2>

Thu thập thông tin - Part 9: Thu thập thông tin với metagoofil

Metagoofil là một công cụ mang tính cách mạng nó sử dụng công cụ tìm kiếm Google để tìm dữ liệu từ các tài liệu có sẵn. Metagoofil hoạt động bằng cách: [#] Tìm kiếm các loại tập tin bằng cách sử dụng…

Đọc thêm »

san · 26 Dec 2014

<br />

<br />
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Đây là tool có sẵn trong Kali linux</span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Câu lệnh:</span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">nikto -host <host name></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Ví dụ</span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">nikto -host niit.vn</span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5qv_lMzmqOrexi170Ve6kIebJ6qyl7Rxlhd7CsEKO8QnjDREceKxF6KLr6bz4tS3eidcgVS2Vbfnzibuo4QiSPP6f5axmMSVwc-TgV47Tuem8FBjPbeWalENSTDveSMleExtbidTsh6ql/s1600/nikto2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj5qv_lMzmqOrexi170Ve6kIebJ6qyl7Rxlhd7CsEKO8QnjDREceKxF6KLr6bz4tS3eidcgVS2Vbfnzibuo4QiSPP6f5axmMSVwc-TgV47Tuem8FBjPbeWalENSTDveSMleExtbidTsh6ql/s1600/nikto2.png" width="400" /></a></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><b>Tut By <span style="color: red;">bahacktu</span></b></span></div>
<div class="MsoNormal">
<br /></div>
<br />
<h2>
<span class="" id="result_box" lang="vi"><span class="post-description" style="text-align: justify;"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span style="color: blue;"><b><span class="hps"><span style="color: red;">Bác nào lech đi đâu vui lòng để lại cho mình cái nguồn. Cảm ơn !</span></span></b></span></span></span></span></span></span></span></span></span></span></span></h2>
<br />
<div class="MsoNormal">
<br /></div>

Thu thập thông tin - Part 8: Thu thập thông tin với nikto

Normal 0 false false false EN-US X-NONE X-NONE

Đọc thêm »

san · 26 Dec 2014

<br />

<br />
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Hping là một trong những
công cụ scan tốt, nó cho phép ta tạo các gói tin theo ý muốn và điều chỉnh lưu
lượng các gói tin gửi đi… ở đây tôi sử dụng trực tiếp trong Kali linux nếu các bạn
sử dụng hệ điều hành window thì có thể download về cài đặt </span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">a/ kiểm tra help trong
Hping, chúng ta có thể gõ:”hping3 –h” để xem các hỗ trợ lệnh của hping3</span></b></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihheAK8AhXv0Oxv7H_HOhfyyHQtzxXnwM3R1LCBA6hazXk3pH2XjCD-FJfSpWI-JmoGKhl3l8dDJIijz2fQGf7kQ6zGHvsIw3pttODA9MICwAD5UxnWDID1Hc0NuWBRXehzojz3jI2Lv5x/s1600/hping.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihheAK8AhXv0Oxv7H_HOhfyyHQtzxXnwM3R1LCBA6hazXk3pH2XjCD-FJfSpWI-JmoGKhl3l8dDJIijz2fQGf7kQ6zGHvsIw3pttODA9MICwAD5UxnWDID1Hc0NuWBRXehzojz3jI2Lv5x/s1600/hping.png" width="400" /> </a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
</div>
<br />
<div class="separator" style="clear: both; text-align: left;">

</div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;"><br /></span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-weight: bold; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-fareast;">1. Scan theo giao thức
SYN:</span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-weight: bold; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-fareast;"></span></div>
<br />
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-weight: bold; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-fareast;">

</span></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">để scan theo kiểu SYN
chúng ta thêm –S,<span style="mso-spacerun: yes;">  </span>-p la port. </span></div>
 <br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhs4GRcCfpSHXOmKso57zplDCKMsXg2oM-kY4uY-5D0oOgqSfyGyB3GzKq1xaMuYVs3Q0o3E-sUoXLrjc3sLL7aeptNiK3bRRb3Wpxaxf61HLl0m3W7g1MkOR62l2Pcy9wWCh-65KXKi021/s1600/hping1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="253" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhs4GRcCfpSHXOmKso57zplDCKMsXg2oM-kY4uY-5D0oOgqSfyGyB3GzKq1xaMuYVs3Q0o3E-sUoXLrjc3sLL7aeptNiK3bRRb3Wpxaxf61HLl0m3W7g1MkOR62l2Pcy9wWCh-65KXKi021/s1600/hping1.png" width="400" /></a></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-ansi-language: EN-US; mso-bidi-font-weight: bold; mso-bidi-language: AR-SA; mso-fareast-font-family: "Times New Roman"; mso-fareast-language: EN-US; mso-fareast-theme-font: minor-fareast;"><br /></span></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">

</div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Khi gửi các gói ACK Probe
với giá trị sequence number random, nếu không có packet response thì port bị
filter(firewall), nếu có RST packet reponse thì port không bị filter(không có
firewall), như sau: <b>hping3 -A -p 443 -c 3 niit.vn</b></span></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbSzdkM_VM0euTq1WPDNkTseP6VcHLufJMzuf3UOK3faSnXCKNbJc6QM2DMAitQzV4j04jhUXxhybis9wzWM6xCF8mdwJhkBxNeMsEdERy-wf5DuXacr4dZC6yPxUCbNyjDZLCHgSLpBGS/s1600/hping2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjbSzdkM_VM0euTq1WPDNkTseP6VcHLufJMzuf3UOK3faSnXCKNbJc6QM2DMAitQzV4j04jhUXxhybis9wzWM6xCF8mdwJhkBxNeMsEdERy-wf5DuXacr4dZC6yPxUCbNyjDZLCHgSLpBGS/s1600/hping2.png" width="400" /></a></div>
<div class="MsoNormal">
<br /></div>
<br />
<div class="separator" style="clear: both; text-align: left;">
  </div>
<div class="separator" style="clear: both; text-align: left;">

</div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Chúng ta cũng có thể thêm
giá trị Source port như sau:</span></div>
<br />
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCZNUgq2vgKqL_iJfKbK1dPVhOK3ly32dli_rrfMP9Ti55Qf7JB2G_exA0CqWWE8uir8NvCSkHH1J6hd5RSWgJWJntMj4G_DQoykt47ntrF9J1mIElSJjhnfkfcvEWVkSYUh-tnFC91ARZ/s1600/hping3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCZNUgq2vgKqL_iJfKbK1dPVhOK3ly32dli_rrfMP9Ti55Qf7JB2G_exA0CqWWE8uir8NvCSkHH1J6hd5RSWgJWJntMj4G_DQoykt47ntrF9J1mIElSJjhnfkfcvEWVkSYUh-tnFC91ARZ/s1600/hping3.png" width="320" /></a></div>
<br />
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<br />
<div class="MsoNormal">
<br /></div>
<br />
<div class="MsoNormal">

</div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Chúng ta cúng có thể thực
hiện Spoofing ip bằng cách thêm và –a như sau</span></div>
<div class="MsoNormal">
<b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%;">hping3 -S -p 80 -s 5555 -a 192.168.1.69
-c 10 </span></b><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%;"><b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%;">112.213.95.85</span></b></span></b></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%; mso-bidi-font-weight: bold;">Hoặc để scan nhiều port
cùng lúc, chúng ta sử dụng thêm options –scan như sau:</span></div>
<div class="MsoNormal">
<b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%;">hping3 -S --scan 80,53,143 112.213.95.85</span></b></div>
<div class="MsoNormal">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXccNyp-Ru39W8IJCIIdrVC_N-IwQwWMVzHw1avQvHGYzD5c4bDsxuYf3R5vgifqneyMzMgjzLRMHz0DrUxgnz-TwfhV5W02hSPFLm3fWRcty_sQgqvlSdRzETX_UqjMF69zpjzjnsbId2/s1600/hping4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXccNyp-Ru39W8IJCIIdrVC_N-IwQwWMVzHw1avQvHGYzD5c4bDsxuYf3R5vgifqneyMzMgjzLRMHz0DrUxgnz-TwfhV5W02hSPFLm3fWRcty_sQgqvlSdRzETX_UqjMF69zpjzjnsbId2/s1600/hping4.png" width="400" /></a></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%;">Tut By <span style="color: red;">bahacktu</span></span></b></div>
<div class="MsoNormal">
<br /></div>
<div class="MsoNormal">
<br /></div>
<br />
<h2>
<span class="" id="result_box" lang="vi"><span class="post-description" style="text-align: justify;"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span class="hps"><span class="" id="result_box" lang="vi"><span class="" id="result_box" lang="vi"><span style="color: blue;"><b><span class="hps"><span style="color: red;">Bác nào lech đi đâu vui lòng để lại cho mình cái nguồn. Cảm ơn !</span></span></b></span></span></span></span></span></span></span></span></span></span></span></h2>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<b><span style="font-family: "Times New Roman","serif"; font-size: 14.0pt; line-height: 115%;"><span style="color: red;"></span> </span></b></div>
<br />

Thu thập thông tin - Part 7: Thu thập thông tin với Hping

Normal 0 false false false EN-US X-NONE X-NONE

Đọc thêm »

Free share all

Cài đặt perl, ruby

Cài đặt và cấu hình vsftpd trên centos 6.5

Cài đặt mysql server - PHP - PhpMyadmin

Part 1: Basic of SQL for SQL Injection

Thu thập thông tin - Part 9: Thu thập thông tin với metagoofil

Thu thập thông tin - Part 8: Thu thập thông tin với nikto

Thu thập thông tin - Part 7: Thu thập thông tin với Hping

Bài đăng phổ biến

Bình luận

Lưu trữ Blog