Showing posts with label Website Hack. Show all posts
Showing posts with label Website Hack. Show all posts

Domain Hijacking – How to Hijack a Domain

n this post I will tell you about how the domain names are hacked and how they can be protected. The act of hacking domain names is commonly known as Domain Hijacking. For most of you, the term “domain hijacking” may seem to be like an alien. So let me first tell you what domain hijacking is all about.

Domain hijacking is a process by which Internet Domain Names are stolen from it’s legitimate owners. Domain hijacking is also known as domain theft. Before we can proceed to know how to hijack domain names, it is necessary to understand how the domain names operate and how they get associated with a particular web server (website).
The operation of domain name is as follows

Facebook To Start Paying Security Bug Bounty

Facebook is the most recent company to come to the bug-bounty party, officially announcing recently that-
To show our appreciation for our security researchers, we offer a monetary bounty for certain qualifying security bugs.”
Here’s how it works:
Eligibility:
To qualify for a bounty, you must:
  • Adhere to our Responsible Disclosure Policy
  • Be the first person to responsibly disclose the bug
  • Report a bug that could compromise the integrity or privacy of Facebook user data, such as: Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF/XSRF), Remote Code Injection.

Anonymous Defaces Syrian Defense Ministry Website

The Anonymous hacking group has added the website of the Syrian Ministry of Defense to its ever-lengthening list of victims, defacing it with a message in support of the anti-Government insurrection.

Overnight, visitors to the website were greeted with the logo of the Anonymous collective plus links to videos showing protests, with a message in Arab and English.

TeaMp0ison Defaces BlackBerry Blog

The Official BlackBerry Blog – Inside BlackBerry, has been defaced by TriCk of TeaMp0ison in retaliation to an earlier statement issued by RIM regarding full cooperation with telecom operators and law enforcement officials relating to the riots in London.

DDoS and Hacking Services for Sale

According to Daniel Krebs an independent security researcher, hackers have started contending among themselves openly by providing DDoS (distributed denial-of-service) services that can help in causing websites to collapse. Signalnews reported this on August 2, 2011.
Apparently, several secret forums exist on which subscribers canvass their skills for carrying out devastating DDoS assaults in return for a payment.

Linux Source Code Repository Compromised

The Kernel.org website – home to the Linux project and the primary repository for the Linux kernel source code – sports a warning notifying its users of a security breach that resulted in the compromise of several servers in its infrastructure.
The discovery was made on August 28th, but according to the current results of the investigation mounted by the site’s team, the break-in seems to date back to August 12 or even earlier.

DroidSheep – Android Application for Session Hijacking

DroidSheep – One-click session hijacking using your android smartphone or tablet computer.

Ramnit Worm Targets Facebook, Over 45,000 Accounts Compromised

Much has been written about the Ramnit worm and its transformation into a financial malware. And now, Seculert’s research lab has discovered that Ramnit recently started targeting Facebook accounts with considerable success, stealing over 45,000 Facebook login credentials worldwide, mostly from people in the UK and France.

All Web Application Attack Techniques

  • * Arbitary File Deletion
  • * Code Execution
  • * Cookie Manipulation ( meta http-equiv & crlf injection )
  • * CRLF Injection ( HTTP response splitting )
  • * Cross Frame Scripting ( XFS )
  • * Cross-Site Scripting ( XSS )
  • * Directory traversal
  • * Email Injection
  • * File inclusion
  • * Full path disclosure
  • * LDAP Injection
  • * PHP code injection
  • * PHP curl_exec() url is controlled by user

DVWA – SIMPLE WEBSITE HACKING TECHNIQUE EXPLAINED


Now many of you I think all want to learn hacking you read eBook and watch videos but what do you learn if you don’t use that knowledge on your practical work. If you hack a website than you may get caught so here in this tutorial I will tell you How to learn web hacking (with DVWA).
Before moving on first check that you have installed your server or not If you have not installed a Server in your PC than first read this “How to create your