**Methods For Hacking Any Website (Education Purpose Only)** ***The Simple SQL Injection Hack*** SQL Injection involves entering SQL code into web forms, eg. login fields, or into the browser address field, to access and manipulate the database behind the site, system or application. When you enter text in the Username and Password fields of a login screen, the data you input is typically inserted into an SQL command. This command checks the data against the relevant table in the database. If you‘re input matches table/row data, youre granted access (in the case of a login screen). If not, youre knocked back out. In its simplest form, this is how the SQL Injection works. Its impossible to explain this without reverting to code for just a moment.Here is the code Suppose we enter the following string in a User name field: OR 1=1 The authorization SQL query that is run by the server, the 37 command which must be satisfied to allow access, will be something along the lines of: SELECT * FROM users WHERE username = „USRTEXT AND password = „PASSTEXT‟ Where USRTEXT and PASSTEXT are what the user enters in the login fields of the web form. So entering `OR 1=1 — as your username, could result in the following actually being run: SELECT * FROM users WHERE username = ‗ OR 1=1 — AND password = ‘ In terms of login bypass via Injection, the hoary old OR 1=1 is just one option. If a hacker thinks a site is vulnerable, there are cheat-sheets all over the web for login strings which can gain access to weak systems. Here are a couple more common strings which are used to dupe SQL validation routines: username field examples: admin— ) or (a=a ”) or (a”=”a hi” or a”=”a **Cross site scripting ( XSS )** Cross-site scripting or XSS is a threat to a websites security. It is the most common and popular hacking a website to gain access information from a user on a website. There are hackers with malicious objectives that utilize this to attack certain websites on the Internet. But mostly good hackers do this to find security holes for websites and help them find solutions. Cross-site scripting is a security loophole on a website that is hard to detect and stop, making the site vulnerable to attacks from malicious hackers. This security threat leaves the site and its users open to identity theft, financial theft and data theft. It would be advantageous for website owners to understand how cross-site scripting works and how it can affect them and their users so they could place the necessary security systems to block cross-site scripting on their website. **Denial of service ( Ddos attack )** A denial of service attack (DOS) is an attack through which a person can render a system unusable or slow down the system for legitimate users by overloading the resources, so that no one can access it.this is not actually hacking a webite but it is used to take down a website. If an attacker is unable to gain access to a machine, the attacker most probably will just crash the machine to accomplish a denial of service attack,this one of the most used method for website hacking **Cookie Poisoning** Well, for a starters i can begin with saying that Cookie Poisoning is alot like SQL Injection Both have OR1=1 or maybe 1=1 But in cookie poisoning you begin with alerting your cookies Javascript:alert(document.cookie) Then you will perharps see username=rahul and password=hacking123 in this case the cookie poisoning could be: Javascript:void(document.cookie=username=OR1=1); void(document.cookie=password=OR1=1); It is also many versions of this kind... like for example 1=1 OR1=1 OR1=1OR and so on.
Posted on: Thu, 20 Mar 2014 08:24:55 +0000
Trending Topics
Recently Viewed Topics
© 2015