Monday, May 2, 2011

Payback by Anonymus!!!! Well done on the name of "The Internet People"

 http://lit.mn/index.php?r=site/joinNow&parent=123

Operation Payback brings you #OpSony


Attachment


Dear Greedy Motherfuckers SONY,

Congratulations! You are now receiving the attention of Anonymous. Your recent legal actions against fellow internet citizens, GeoHot and Graf_Chokolo have been deemed an unforgivable offense against free speech and internet freedom, primary sources of free lulz (and you know how we feel about lulz.)

You have abused the judicial system in an attempt to censor information about how your products work. You have victimized your own customers merely for possessing and sharing  information, and continue to target those who seek this information. In doing so you have violated the privacy of thousands of innocent people who only sought the free distribution of information. Your suppression of this information is motivated by corporate greed and the desire for complete control over the actions of individuals who purchase and use your products, at least when those actions threaten to undermine the corrupt stranglehold you seek to maintain over copywrong, oops, "copyright".

Your corrupt business practices are indicative of a corporate philosophy that would deny consumers the right to use products they have paid for, and rightfully own, in the manner of their choosing. Perhaps you should alert your customers to the fact that they are apparently only renting your products? In light of this assault on both rights and free expression, Anonymous, the notoriously handsome rulers of the internet, would like to inform you that you have only been "renting" your web domains. Having trodden upon Anonymous' rights, you must now be trodden on.

If you disagree with the disciplinary actions against your private parts domains, then we trust you can also understand our motivations for these actions. You own your domains. You paid for them with your own money. Now Anonymous is attacking your private property because we disagree with your actions. And that seems, dare we say it, "wrong." Sound familiar?

Let Anonymous teach you a few important lessons that your mother forgot:
1. Don't do it to someone else if you don't want it to be done to you. 
2. Information is free.
3. We own this. Forever.

As for the "judges" and complicit legal entities who have enabled these cowards: You are no better than SONY itself in our eyes and remain guilty of undermining the well-being of the populace and subverting your judicial mandate.
You can find more information on their website: http://anonnews.org/

Tuesday, April 26, 2011

SQL Injection Attacks "How to" Guide


SQL INJECTION “HOW TO” GUIDE!!!
What is a SQL Injection and what is use for??

SQL injection is a type of exploit attack in which the attacker injects or adds a malicious code to gain access  to a Web form usually an user's authentication box. SQL injection codes takes advantage of insecure code systems connected to the World Wide Web. For more information about SQL Injection you can visit the following website.. http://en.wikipedia.org/wiki/SQL_injection


Today am going to show you guys how to use SQL Injection to gain administrator access to vulnerable websites; below is the user name and password that am going to use today!!

Remember that is illegal to gain administrator access without the permission of the website administrator, and this guide is just for educational purpose so most website can be protected against this type of attacks..

User:Admin <-------- default user account
Password:1'or'1'='1 <----- “malicious code” there are many malicious SQL other example could be 0'or'0'='0. In some cases you can use 1'or'1'='1 as user's account as well.

Now to find our victims website we just type the following on Google admin.login.asp to find the vulnerable websites to SQL Injection..


Here we type the user's name and password user:admin password:1'or'1'='1



As you can see we are inside of our victim database as easy as that!!!

As you can there are some products that the website have, and the option if I want to add a new product!

Here is the products price update screen .. we are able to change the prices right here!!!!


Most of this SQL Injection would not work on well protected website ..

Remember that is illegal to use this on websites that you don't have the permission to test..

On the next “how to guide” I would show you how to use advanced exploitation techniques to exploit secure and sophisticated websites by using applications to detect access control vulnerabilities. However I can only show you the entrance the rest is for yourself to research and learn on your own!!!