Saturday, December 12, 2009

List of all the SQL Injection Strings

One of the major problems with SQL is its poor security issues surrounding is the login and url strings. This tutorial is not going to go into detail on why these string work as all these details have been given in my previous article Top 10 Tricks to exploit SQL Server Systems .
First SEARCH the following Keywords in Google or any Search Engine:
admin\login.asp
login.asp
with these two search string you will have plenty of targets to chose from…choose one that is Vulnerable
INJECTION STRINGS: How to use it?
This is the easiest part…very simple
On the login page just enter something like
user:admin (you dont even have to put this.)
pass:’ or 1=1–
or
user:’ or 1=1–
admin:’ or 1=1–
Some sites will have just a password so
password:’ or 1=1–
In fact I have compiled a combo list with strings like this to use on my chosen targets . There are plenty of strings in the list below. There are many other strings involving for instance UNION table access via reading the error pages table structure thus an attack with this method will reveal eventually admin U\P paths.
The one I am interested in are quick access to targets
PROGRAM
i tried several programs to use with these search strings and upto now only Ares has peformed well with quite a bit of success with a combo list formatted this way. Yesteday I loaded 40 eastern targets with 18 positive hits in a few minutes how long would it take to go through 40 sites cutting and pasting each string
combo example:
admin:’ or a=a–
admin:’ or 1=1–
And so on. You don’t have to be admin and still can do anything you want. The most important part is example:’ or 1=1– this is our basic injection string
Now the only trudge part is finding targets to exploit. So I tend to search say google for login.asp or whatever
inurl:login.asp
index of:/admin/login.asp
like this: index of login.asp
result:
17,000 possible targets trying various searches spews out plent more
Now using proxy set in my browser I click through interesting targets. Seeing whats what on the site pages if interesting I then cut and paste URL as a possible target. After an hour or so you have a list of sites of potential targets like so
and so on. In a couple of hours you can build up quite a list because I don’t select all results or spider for log in pages. I then save the list fire up Ares and enter
1) A Proxy list
2) My Target IP list
3) My Combo list
4) Start.
Now I dont want to go into problems with users using Ares..thing is i know it works for me…
Sit back and wait. Any target vulnerable will show up in the hits box. Now when it finds a target it will spew all the strings on that site as vulnerable. You have to go through each one on the site by cutting and pasting the string till you find the right one. But the thing is you know you CAN access the site. Really I need a program that will return the hit with a click on url and ignore false outputs. I am still looking for it. This will saves quite a bit of time going to each site and each string to find its not exploitable.
There you go you should have access to your vulnerable target by now
Another thing you can use the strings in the urls were user=? edit the url to the = part and paste ‘ or 1=1– so it becomes
user=’ or 1=1– just as quick as login process
Combo List
There are lot of other variations of the Injection String which I cannot put on my blog because that is Illegal. If you are interested I can send it to you through Email. Just write in your email address in comment and I will send it to you as early as possible but you need to remain patient it may take 1 or 2 days.
Happy Hunting

Hack Proof Passwords

Today I am going to teach you an incredibly useful skill. How to make Hack Proof Passwords.
Things that make a good password:
  1. Easy To Remember.
    No use having the thing if you can’t even remember it.
  2. Long Long Long!
    If it is not long, people will be able to Brute Force it.
  3. Combinations of Numbers, Letters, Symbols.
    Again due to brute forcing.
  4. Difficult to guess.
    If you make it your wife’s name. People are going to get it.
  5. Unique
    Every site should have a different password.
Now I have a real quick and easy method for making passwords that solve all of those problems. Furthermore these passwords will be drunk proof. In other words, no one will be able to accidentally trick you into telling them yoru password.
How to make the password:
  1. What is the name of the Website?
    Hungry Hackers.
  2. Write the name of the website backwards.
    srekcaH yrgnuH
  3. Perfoms a Rotate 13 on the string. (This means to change the letter 13 places ahead. a becomes n, r becomes e, etc.)
    ferxpnU letahU
  4. Replace all of the letters with 1337 counterparts.
    f3rxp/\/|_| 13tah|_|
  5. Interleave your username into it.
    fZ3erlxlpf/a\z/e|@_y|a h1o3ot.acho|m_|
Easy for you to figure out your password. You simply repeat the 5 steps for a website. There is no way anyone is ever going to guess that password. And further more, there is no way your going to tell someone your password because even you don’t know what it is off the top of your head.
This formula could very easily be made more complicated or simplier. Once you have the general idea of what your doing you can make good passwords in no time.
Love,
Haxor ~Zell Faze~
<3