WHAT IS ZOMBIE ARMY OR BOTNET ?

A botnet (also known as a zombie army) is a number of Internet computers that, although their owners are unaware of it, have been set up to forward transmissions (including spam or viruses) to other computers on the Internet. Any such computer is referred to as a zombie - in effect, a computer "robot" or "bot" that serves the wishes of some master spam or virus originator. Most computers compromised in this way are home-based. According to a report from Russian-based Kaspersky Labs, botnets -- not spam, viruses, or worms -- currently pose the biggest threat to the Internet. A report from Symantec came to a similar conclusion.

Computers that are rooted to serve in a zombie army are often those whose owners fail to provide effective firewalls and other safeguards. An increasing number of home users have high speed connections for computers that may be inadequately protected. A zombie or bot is often created through an Internet port that has been left open and through which a small Trojan horse program can be left for future activation. At a certain time, the zombie army "controller" can unleash the effects of the army by sending a single command, possibly from an Internet Relay Channel (IRC) site.

The computers that form a botnet can be programmed to redirect transmissions to a specific computer, such as a Web site that can be closed down by having to handle too much traffic - a distributed denial-of-service (DDoS) attack - or, in the case of spam distribution, to many computers. The motivation for a zombie master who creates a DDoS attack may be to cripple a competitor. The motivation for a zombie master sending spam is in the money to be made. Both of them rely on unprotected computers that can be turned into zombies.

According to the Symantec Internet Security Threat Report, through the first six months of 2006, there were 4,696,903 active botnet computers.

Read More

SQL Injection Using Software

Before we see what SQL Injection is. We should know what SQL and Database are.

Database:

Database is collection of data. In website point of view, database is used for storing user ids,passwords,web page details and more.

Some List of Database are:

* DB servers,

* MySQL(Open source),

* MSSQL,

* MS-ACCESS,

* Oracle,

* Postgre SQL(open source),

* SQLite,

SQL:

Structured Query Language is Known as SQL. In order to communicate with the Database ,we are using SQL query. We are querying the database so it is called as Query language.

Definition From Complete Reference:

SQL is a tool for organizing, managing, and retrieving data stored by a computer database. The name "SQL" is an abbreviation for Structured Query Language.

For historical reasons, SQL is usually pronounced "sequel," but the alternate pronunciation "S.Q.L." is also used. As the name implies, SQL is a computer language that you use to interact with a database. In fact, SQL works with one specific type of database, called a relational database.

Simple Basic Queries For SQL:

Select * from table_name :

this statement is used for showing the content of tables including column name.

For eg:

select * from users;

Insert into table_name(column_names,...) values(corresponding values for columns):

For inserting data to table.

For eg:

insert into users(username,userid) values("TheSec","break");

What Is SQL Injection?

SQL injection is Common and famous method of hacking at present . Using this method an unauthorized person can access the database of the website. Attacker can get all details from the Database.

What an attacker can do?

- ByPassing Logins

- Accessing secret data

- Modifying contents of website

- Shutting down the My SQL server

Now let's dive into the real procedure for the SQL Injection.

Steps

Finding Vulnerable Website:

Our best partner for SQL injection is Google. We can find the Vulnerable websites(hackable websites) using Google Dork list. google dork is searching for vulnerable websites using the google searching tricks. There is lot of tricks to search in google. But we are going to use "inurl:" command for finding the vulnerable websites.

Some Examples:

inurl:index.php?id=

inurl:gallery.php?id=

inurl:article.php?id=

inurl:pageid=

Here is the huge list of Google Dork

http://www.4shared.com/file/lzdEULnW/new_file.html

How To Use?

Copy one of the above command and paste in the google search engine box.

Hit enter.

You can get list of web sites.

We have to visit the websites one by one for checking the vulnerability.

So Start from the first website.

- After finding the vulnerable website open Havij, lets say the vulnerable site has

URL:- “http://website.com/index.php?module=pages&id=85”

- If you get error then site is vulnerable to S.Q.L. injection attack .

- Download havij from here.

- After opening Havij paste the above URL like this i-e of vulnerable Site:-

- After that hit “Analyze” and thus it will scan site that whether sql injection is possible or not. 

- It will tell you the type of server and also the type of OS running on the server and will give a message like :- Target Vulnerable if the site is vulnerable.

Now go to “Tables” and “Get Database” and after getting data bases check all of them and hit “Get Tables” After getting tables of DB’s , select the admin table and hit “Get Columns” , after getting columns now a hacker can check the password and username column and can hit “Get Data”.

Now a You will get data in encrypted form , like mostly in “md5 hash” but we can decrypt it easily by using havij or other online tools present, After decrypting md5 , you have to find “admin page” using havij, find the buttons for decrypting md5 and finding admin page, Point the browser to the admin page, where you have to put the decrypted “password” and “username” of the admin to login into the website.

Thus after successful login into the website as admin the hacker can do whatever he wants.

Read More

Unlock Android Phone Pattern or Password Lock With PC

Android lock screen is a very strong protection of data on any android device. There may be times if you forget your pattern and want to reset it, this article shows how you can unlock your android pattern lock screen with very simple steps. This is an educational article. Try this at your own risk. This website is not responsible for any issue which may occur.

Also See : Increase Facebook Likes for Free Using Script

1. Enabling USB Debugging

For this process to be a success, the device which you wish to unlock should be enabled with USB Debugging. For this go to Settings->Development->USB debugging and enable it.

2. Connect Your Device to the Computer

Now after making sure that the device is USB Debugging enabled, Connect it to the computer. 

Go to start and open CMD. 

Type the following code very carefully. 

adb shell 

Now press enter 

rm /data/system/gesture.key

Also See : Learn To Hide Files Behind The Images

3. Reboot Your Device

After giving the commands in the CMD, restart or reboot the android device. Now give any pattern and your device should be unlocked.

If you any doubts in the above process, please feel free to contact us.

Read More

How To Bypass SMS Verification online

We must have often faced a situation where we have been asked by a site before opening our account or do some other works that they ask for a verification code to be entered before one can proceed further with their work. This a very old technique used by sites mainly for security purposes. This method helps the sites to put an end to the spammers and gives a whole new layer of security for the users. The other side of the coin is that this technique is also used by the sites as a way of advertisement and helps in their promotional activities as this is the best and the biggest user administrator interaction ground.

Also See : Learn To Hide Files Behind The Images

>>What is bypass of SMS verificaton?

Bypass of SMS verification means that the process by which one has to enter their mobile numbers to get verification code which can be used to activate their accounts can be surpassed by a simple technique. 

>> Why to bypass SMS verification?

Well, most of the times they are for our security and even when they are used as for advertisement purposes, they do not cause a lot of problems for a person. But sometimes the numbers entered can be hacked and known to hackers who can use it for unwanted purposes and also sometimes the spammers go far ahead by sending spam advertisements to our cellular devices. So these are mainly the reasons one need to bypass the online verification SMS.

>> How to bypass the SMS verification online?

This question has a simple answer one can easily achieve this by following some simple steps which are shown below and this does not take much of one’s precious time.

• Firstly, one has to go to any of below sites

www.Receive-SMS-Online.com

www.receiveonlinesms.net

www.receive-sms-now.com

• Secondly, one has to choose any one of the number which is available over there.
• Then one has to copy that number which we have chosen and paste it over the place where we have been asked for entering the number on which the verification code has to be sent to.
• Then it is pretty simple, we just have to come back and click on the chosen number at once and check across the whether any site has sent any verification code for you on that number or not.
• Now just enter the code which one has received on the number chosen onto the website where the code has to entered and finish. One has successfully completed by passing SMS verification online

>> Some advice before use it.

We should always remember and keep in mind the fact that we should never use these online numbers for any banking purposes or for your e wallet as this can prove to be very dangerous for the user is something goes wrong in the due process. The next thing we would like to say that we should use this technique of SMS by passing only at certain times and not always as this verification process provides a very important security cover for all the users.

Also See : Awesome Whatsapp Tricks and Tips 2014

Read More

Trick To Bypass PayPal Payments

Hello Friends, As the name suggests,Today i am going to tell you all a trick by use of which you will be able to download paid software's , Eboks, Games for free.The Tricks is very simple and works on more than 800 websites..!!! So I suggest you to use this trick when you seriously need because i don't take any responsibility for any harm caused due to this trick because this trick is for educational purpose only and so that if you are a webmaster or owner of a site which is using a java script Paypal button than you can immediately take steps to prevent users from downloading premium content from your site for free.

Follow Below Steps:

Step 1 : Open Google and search for the below line without removing the "quotes"

"this order button requires a javascript enabled browser"

NOTE:IF U WANT TO DOWNLOAD CONTENT OF YOUR INTERST OR CHOICE YOU CAN ADD THAT THING AFTER THE STRING.

For Example if you want to download ebooks than search for "this order button requires a javascript enabled browser"ebooks

Step 2 : Now Choose any site from the search results and wait till the site loads fully.

Step 3: Now copy the below line and paste it in your browser's address bar. as shown in the image below,

javascript:top.location=document.getElementsByName('return')[0].value; javascript:void(0);

Now You will be redirected to the thankyou or Transaction complete page and now you will be able to download the free stuff provided by that website..!!

Hope you liked my article do share your views in the comments below.

Read More