Escaping Restricted Linux Shells

If you want to see all of this article, please go to the Source.

ReconnaissanceThe first step should be to gather a little information. You'll need to know your environment. Run the 'env' command to understand how your profile is configured. You'll see which shell you're running and where your PATH is pointing to. Once you know what your PATH is, list the contents of the directory (i.e. 'ls /

iCrack Online/Offline MD5 Cracker [Python Script]

Cool scripts written in python , iCrack is an Online/ofline md5 cracker script in Python. Currently containes about 14 db for online cracking.

Download Link:: https://code.google.com/p/lnxg33k/downloads/detail?name=icrack.py


Source: http://tools.thehackernews.com/2012/06/icrack-python-md5-online-offline.html

If you like my blog, Please Donate Me




One Dollar $1.00 Two Dollar $2.00

HOWTO: Port a C/C++ Library to JavaScript (xml.js)

I've been porting various libraries to JavaScript recently (lzma.js, sql.js) and I thought it might be useful to write up details about how this kind of thing is done. So here is how I ported libxml - an open source library that can validate XML schemas - in response to a request. Note that this isn't a general HOWTO, it's more a detailed writeup of what I did to port libxml in particular, but I

Basic Functions & programs of C | 2nd Session

Hello friends so today as i said today i'm gonna teach you some common function & also write some basic programs of c . so lets start.



The structure of C program

C is made up entirely of building blocks which have a particular ‘shape’ or form .A program is made up of functions, functions are made up of statements and declarations surrounded by curly braces { } .One and only one of these functions in the program must have the name main(). This function is always the starting point of a C program . The parentheses ‘()’ which follow the name of the function must be included even though they apparently serve no purpose at this stage.


’m

The Headers 

#include header.h
At the top of a program file. For instance:
#include "myheader.h"
Includes a personal header file which is in the current directory Or
#include <stdio.h>
includes a file which lies in a standard directory like ‘/usr/include’.
The #include directive is actually a command to the C preprocessor .



Now i will tell you about printf function .

The printf() function 

• What is full form of  printf  function?  

    - Print format function

• What is print format (printf) ?

      - It refers to a control parameter used by a class of functions typically associated with some types of     programming languages. The format string specifies a method for rendering an arbitrary number of varied data type parameter(s) into a string. In simple words we can say It provides an superbly versatile way of printing text.

• How to print a normal string  ?

     -  printf ("..some string..."); 

• How to print a Integer ?

     - Here we cant use the same command we used in printing the text, we have to use control sequence  -    %d  . The variable someinteger is printed instead of ‘%d’  . Below you see the command .

        printf ("Integer = %d",someinteger);

Here is a small program with its output showing the example of printf function .

|| Download Turbo C  ||
|| How to install Turbo C ||

/***********************************************************/
/* any program */
/***********************************************************/
#include <stdio.h>
/***********************************************************/
main () /* program */
{
printf ("Astronomy is %dderful \n",1);
printf ("And interesting %d \n",2);
printf ("The ear%d volves around the sun \n",3);
printf ("And makes a year %d you \n",4);
printf ("The moon affects the sur %d heard \n",5);
printf ("By law of phy%d great \n",6);
printf ("It %d when the the stars so bright \n",7);
printf ("Do nightly scintill%d \n",8);
printf ("If watchful providence be%d \n",9);
printf ("With good intentions fraught \n");
printf ("Should not keep up her watch divine \n");
printf ("We soon should come to %d \n",0);
}

Output - 

Astronomy is 1derful \n"
And interesting 2
The ear3 volves around the sun
And makes a year 4 you
The moon affects the sur 5 heard
By law of phy6d great
It 7 when the the stars so bright
Do nightly scintill8
If watchful providence be9
With good intentions fraught
Should not keep up her watch divine
We soon should come to 

Then after you have successfully compiled it  then save it as printf.c  . It has its own extension .c, like .exe, pdf .

Some Questions for practice -
1. Why is #include <stdio.h> used for ?

2. Write a command to print out the message "hackingsec".
3. Write a command to print out the number 97?
4. Write two commands to print out "The 2 hackers" two different ways.





So hope its clear & you can solve this question .
if any doubt then please mention it Via comment



.

Introduction to C language | 1st session

Today is the first session of the c language so i will tell all the basics of c & other  .

What is C & its uses ?

• C is called a higher level compiler language which can be used for general purpose programming like for writing small  programs or to write complex application .
• The C language has been equipped with features that allow programs to be organized in an easy and logical way.
• C allows meaningful variable names and meaningful function names to be used in programs without any loss of efficiency and it gives a complete freedom of style .
• C has a set of very flexible loop structure & clean ways of making decisions & this provide an excellent basis of controlling the flow of program .
• C allows things which are disallowed in other languages: this is no defect but a very powerful freedom .
• C tries to make the best of a computer by linking as closely as possible to the local environment .

Now i will tell you some characteristics of C :.

Characteristics of C  :

• Small size
• Extensive use of function calls
• Loose typing -- unlike PASCAL
• Structured language
• Low level (BitWise) programming readily available
• Pointer implementation - extensive use of pointers for memory, array, structures and functions .
• It has high-level constructs.
• It can handle low-level activities.
• It produces efficient programs.
• It can be compiled on a variety of computers.

Basic C Program structure :

• Preprocessor Commands
• Type definitions
• Function prototypes -- declare function types and variables passed to function.
• Variables
• Functions

In the session  i will teach you about common functions, commands & also to write small programs so  be updated ...
& any doubt then i'm always ready to answer ;)

Introduction To Programming

Hello guys , i'm back & from today i will also be posting programming tutorials . All the programming languages tutorials will also be thought . so firstly before you start learning programming you  should know what is programming ? what are their uses ?  who are programmers ? . so in this session i will clear all your Doubts & tell you what is programming . The programming is very important for each & every hacker, without the knowledge of programming you cant claim yourself an hacker , Without the knowledge of programming
you cant write your own exploits . So my dear readers start learning programming & be a programmer .

What is Programming ?

• is the process ofdesigning, writing, testing, debugging, and maintaining the source code of computer programs. This source code is written in one or more programming languages. The purpose of programming is to create a set of instructions that computers use to perform specific operations or to exhibit desired behaviors. The process of writing source code often requires expertise in many different subjects, including knowledge of the application domain, specialized algorithms and formal logic.  In simple words i would say  programming is the action or process of writing computer programs. 

Who are programmers ?

• A programmer, computer programmer, or coder is a person who writes computer software. The term computer programmer can refer to a specialist in one area of computer programming or to a generalist who writes code for many kinds of software. One who practices or professes a formal approach to programming may also be known as a programmer analyst. A programmer's primary computer language (C,C++, Java, Lisp, Python etc.) is often prefixed to the above titles, and those who work in a web environment often prefix their titles with web. The term programmer can be used to refer to a software developer, software engineer, computer scientist, or software analyst 

What are the different Programming languages ?

• There are many programming languages, i cant mention them all here so you can find them here   .The basic programming languages which is must for an programmer are c, c++, java, java (advance), Perl , Python .

So hope you have understood all what is programming & programmers . so in the next session i will teach you the basics of c language .

Bypass Captcha using Python and Tesseract OCR engine

A
CAPTCHA is a type of challenge-response test used in computing as an attempt to
ensure that the response is generated by a person. The process usually involves one computer (a server) asking
a user to complete a simple test which the computer is able to generate and
grade.The term "CAPTCHA" was coined in 2000 by Luis von Ahn, Manuel
Blum, Nicholas J. Hopper, and John Langford (all of Carnegie

Creating executable of Shell Script

By
Nikesh Jauhari










Many times it happen that shell scripts that we write contains sensitive
information like password or some sort of keys or path to some
sensitive files and if you running such script it become very easy for
the normal user to have a look inside the script and get the sensitive
information from the code.
There is a program called "shc" which can provide the

Java Deobfuscate Trick And Tools

Tricks
     Normal Trick:
      1. Assign eval to a variable
        From: eval(code…);
        To: var x = eval(code…); document.write(x);

      2. Replace document.write() with alert()
        From: document.write(code…);
        To: alert(code…);

      3. Replace eval() with document.write()
        From: eval(code…);
        To: document.write(code…);

      4. Wrap code with alert()

PoC: Hacking Facebook with HTML5 By @skeptic_fx

Facebook Graph API Access Token Stealing : Long live UI-Redressing A week after my first Facebook bounty  , i found another place where Facebook did the same mistake of not busting IFrames.And guess what , its another whole domain developers.facebook.com.It includes all the documentation and examples for using the Facebook Graph API and other products like the Legacy REST API , FQL ,

SQL injections, what they are, how they work and how to filter

I found this great tutorial from my twitter about "What's the SQL Injection and How it works?" and I cut some part that I want to note to this post. So if you want to see full detail, please go to the Source.


Today, SQL injections are nothing new, but there are still many developers who know, the very last week I argued with an acquaintance, a well-known developer, which not only unaware of

Backtrack 5 R1 was release

We’re finally ready to release BackTrack 5 R1. This release contains over 120 bug fixes, 30 new tools and 70 tool updates. We will be rolling out some howto’s on our wiki in the next few days, such as VMWare tool installation, alternate compat-wireless setups, etc. The kernel was updated to 2.6.39.4 and includes the relevant injection patches. As usual, please report bugs to us through our

Free Shell Scripting Guide From Apple – Shell Scripting Premier

Apple has updated its free Shell Scripting Premier Guide, which is freely downloadable from Mac OS X Developer Library website.
Chapters included in the freely downloadable Shell Scripting Premier:
Available in PDF format together with zip files containing sample scripts as discussed in the book

Source: http://blog.mypapit.net/2011/08/

HowTo: Learn Batch Programming Fast And Easy

Batch Programming is extremely helpful if you want to automate small tasks, Batch programming is though only restricted to windows platform but it has lots of other uses and the best part is that it's very easy as compared to other programming languages, While browsing on google for batch programming related e-books I came across a fantastic book which teaches batch programming

SQL Injection Bypass WAF

Great article, the source is in the bottom of this post.

1)Comments: SQL comments are a blessing to us SQL injectors. They allow us to bypass a lot of the restrictions of Web application firewalls and to kill certain SQL statements to execute the attackers commands while commenting out the actual legitimate query. Some comments in SQL:

//, — , /**/, #, –+, — -, ;


2)Case Changing:

Flash + 307 Redirect = Game Over

&lt;div class="greet_block wpgb_cornered"&gt;&lt;div class="greet_text"&gt;&lt;div class="greet_image"&gt;&lt;a href="http://feeds.feedburner.com/WhitehatSecurityBlog" rel="nofollow"&gt;&lt;img src="https://blog.whitehatsec.com/wp-content/plugins/wp-greet-box/images/rss_icon.png" alt="WP Greet Box icon"&gt;&lt;/a&gt;&lt;/div&gt;Hello there!

Remotely execute cmd.exe commands on multiple computers

Great job for  "Mohamed Garrana". This script's very useful and I think I can use it in some way...

if it works in cmd.exe , you can remotely execute on multiple servers.This script invokes whatever command you can use in cmd.exe on one or more computers
you input the command you'd like to run as a screen input when you run the script
you can use all cmd.exe command like [del,ipconfig /