Exploiting a FCKeditOr.
What you will need:1) Modified .htaccess (Code is below)2) Shell in name_php.gif format3) Site with FCKeditorChapter I - Collecting vulnerable siteIt's easy to dork one.Simple dork:Code:inurl:fckeditor intitle:Connectors Test NOTE: Sometimes this method will not work. When you found a site navigate to the:Code:/fckeditor/editor/filemanager/browser/default/connectors/test.html...

Upload a shell via SSI injection
Things you will need:1) Site vulnerable to SSI injection (I will be giving few dorks and few vulnerable sites to practice on)2) Common sense.What is SSI?SSI Injection (Server-side Include) is a server-side exploit technique that allows an attacker to send code into a web application, which will later be executed locally by the web server....

Blocking Automated Scanners Against Your Website.
We all know that there has been a vast development in automated vulnerability scanners. There are countless private , public , free commercial automated web vulnerability scanners. And since they are available all over the internet so it has become a easy thing for anyone to find out vulnerability in your website by running automated scanner against your website. And that results in problems for the webmasters. Even if the vulnerability...

Phpmyadmin Exploit With Google Dork
phpmyadmin exploitDork : allinurl:index.php?db=information_schemaGo to google.com and enter this dOrk, google will show you About 161,000 resultsguess how many website are vuln fOr this attack !This dork bypasses the admin username and pass and takes You directly to information schema tables to get data and You can delete data;}One more think...

How To Upload Shell By Live Http Headers
Requirements:-Mozilla FiroxLive HTTP Headers Add On for FirefoxA shellSo now lets begin,Login to that site as a admin, then find a place to upload a file in that particular site.Then rename your shell name to shell.php.jpg (or what ever that site supports. In my case, site supports only jpg file. Thats why i renamed it to shell.php.jpg.)Then...

Best SQL Injection
Here I ll write many type of sql injection, How Sql works in back ground and everything which you Need To know .before go to main paper we need some basics like what is sql and about all querieswhat is SQL?Ans: SQL (pronounced "ess-que-el") stands for Structured Query Language. SQL is used to communicate with a database. According to ANSI...
