Home » Archive

Articles in the BlackHat Category

BlackHat, Database Hacking »

[2 Aug 2009 | No Comment | ]

This perl script allows extraction of data from Blind SQL Injections. It accepts custom SQL queries as a command line parameter and it works for both integer and string based injections.
Bsqlbf first hit the net back in April 2006 with bsqlbf v1.1, then the v2.0 update in June 2008 .This new update adds much better Oracle support.
Databases supported:
•MS-SQL
•MySQL
•PostgreSQL
•Oracle
The 6 Attack Models
•Type 0: Blind SQL Injection based on true and false conditions returned by back-end server
•Type 1: Blind SQL Injection based on true and error(e.g syntax error) returned by back-end server.
•Type …

BlackHat, Hacking Windows »

[1 Jul 2009 | No Comment | ]

Normally in a local area network, most of the workstation uses dynamic IP address assigned by the DHCP service. It is possible but very tedious work to check which computer is up and running in the network by using the PING command from command prompt. To make things easier, today I will be sharing with you about a network scanning tool tool which I’ve been using all along. It is a network scanner which is able to automatically scan the whole network for computers that is connected to the network.
Other …

BlackHat, Cracking, Database Hacking »

[25 May 2009 | No Comment | ]

SQLI Helper is handy software to hack website. You don’t need to have any knowledge of SQL to hack website using SQLI Helper. Just follow the guidelines below:
1. Free download SQLI Helper to hack website.
Password: djrohan.com
2. Unzip the file to obtain SQLI Helper to hack website.
3. Now, when you have website hacking software, you need to find website with potential vulnerability. There are some websites that are unhackable. While finding hackable websites, it is better to search for sites with format “article.php?id=[number]” in url.
Lets consider one example which I will …

BlackHat, Hacking Windows »

[5 Apr 2009 | No Comment | ]

Another method to login to a password protected Windows even if you do not have the password is by making Windows accepting any passwords.
There is a far better way to get into Windows XP. It is easy and it does not reset the password. Hack into a computer running Windows XP without changing the password and find out all and any passwords on the machine (including admin accounts). You do not need access to any accounts to do this. Of course, do not do this on anyone elses computer without …

BlackHat, Hacking Windows »

[19 Feb 2009 | No Comment | ]

I am always curious to know if it is possible to run an image file as an executable file. So far I only know about the double extension trick such as file.jpg.exe. If the user enabled “Hide extensions for known file types” in Folder Options, most probably the user will think that it is a JPG image file but in fact the .exe extension is hidden. That’s why the first thing I do after reinstalling Windows is to enable show hidden files and disable hide extensions for known file types.
Few …

BlackHat, Hacking Windows »

[7 Feb 2009 | No Comment | ]

Go to cmd
type AT (time) /interactive “cmd.exe”
enter time in 24hr format
means if you want to enter 5.00pm then enter 17:00
then a new window of cmd will open at specified time
In new window type net(space)user
press enter
after this u will see some names on ur screen
notedown the name of admin acc
then type
net user (name of admin acc u want to crack into) *
e.g if the name of admin acc is raj then type
net user raj*
then it will ask u for new password
enter password of ur choice
and u got the admin password