Secure Hackers

Tuesday, June 19, 2012

Windows 7 Activator + Loader Download

Tuesday, June 19, 2012

Unknown

4 comments

Activate Your Windows 7 OS From trial to genuine Version using the Activator or Loader..

Download The Tool given below..

Click Here to Download

Share your comments...

Read more »

Monday, June 18, 2012

Vista, Server & Windows 7 Activation keys

Monday, June 18, 2012

Unknown

4 comments

######################################################

Share your Comments here..

Join our blog for mail updates..

Read more »

Sunday, June 17, 2012

Prevent your website from SQL Injection vulnerability

Sunday, June 17, 2012

Unknown

10 comments

MySQL Injection is a type of attack where an end user may hack your database from his browser itself. Here my main attempt will sql injection prevention.

What will be your SQL statement to retrieve a username and a password when we login to your website?

In most cases this will be like

 SELECT 1 FROM user WHERE username=’ABC’ AND password=’1234’;

Now think if a user fills data something like this:
username= ABCD
password= ‘ or ’1′=’1

Now check your SQL query. It has changed now.

SELECT 1 FROM user WHERE username=’ABCD’ AND password= ’’ OR ‘1’ = ’1’ ;

Now with this query a user with an invalid username and without a password can make an unusual entrance to your private areas.

Before 2005 almost 50% website’s admin panel were hacked with this approach.
Even in 2012 it is still active and lots of websites are hacked. This is a simple example of SQL injections. There are lots of predefined SQL injection codes readily available online. You can create your own.

Even a normal internet surfer can break down your security with such a code.

To get rid of this issue we can make our Login QUERY statement something like this.
You need to make another function which will escape all the special characters form the user data if you are using PHP then you can use mysql_real_escape_string function which adds a backslashe to the following characters: \x00, \n, \r, \, ‘, ” and \x1a.

$query = sprintf("SELECT 1 FROM users WHERE user='%s' AND

password='%s'",mysql_real_escape_string($user),mysql_real_escape_string($password));

However this will only save you from incorrect login but what if an authorized user is doing some trick to get additional things from your website.
I will suggest making a function which works globally throughout the website.
Like this one. The following codes let you discover the ways to get rid of every possible SQL Injection attack
.

Now we need to call check_form_submission in each form submission. Please try to understand the logic behind the code. It will check for all the GET and POST variables. You can modify the code accordingly to variable types. But this is OK at all. Let me know if you have discovered something or want to share your experience with me.

Here is a list of SQL Injection Strings you can try to test:

“1 OR 1=1″
“1\’ OR \’1\’=\’1″
“1\’1″
“1 EXEC XP_”
“1 AND 1=1″
“1\’ AND 1=(SELECT COUNT(*) FROM tablenames); –”
“1 AND USER_NAME() = \’dbo\’”
“\\\’; DESC users; –”
“1\\\’1″
“1\’ AND non_existant_table = \’1″
“\’ OR username IS NOT NULL OR username = \’”
“1 AND ASCII(LOWER(SUBSTRING((SELECT TOP 1 name FROM sysobjects WHERE xtype=\’U\’), 1, 1))) > 116″
“1 UNION ALL SELECT 1,2,3,4,5,6,name FROM sysObjects WHERE xtype = \’U\’ –”
“1 UNI/**/ON SELECT ALL FROM WHERE”
“%31%27%20%4F%52%20%27%31%27%3D%27%31″
“1′ OR ’1′=’1″

Read more »

Proxy lists for India

Sunday, June 17, 2012

Unknown

4 comments

Proxy's for India-

Below you will find the list of proxy IP addresses and ports only

Proxy IP	Proxy port

202.65.158.179	8080
59.161.254.105	80
61.16.234.188	80
111.119.199.82	8080
118.91.234.77	8080
182.71.214.229	3128
202.129.240.37	8080
202.159.223.52	3128
202.164.53.124	8080
218.248.4.101	8080

Read more »

6 Ways to Protect Your Blog from being Hacked

Sunday, June 17, 2012

Unknown

20 comments

1. Have Strong Passwords, and Change them Regularly-

The first step you should take to protect your blog from being hacked is to have a password that is very strong. You’ll be surprised at how simple the password some people use is, and they end up complaining when they’re hacked.

Make sure your password doesn’t contain your name, address, or even date of birth. Use something nobody can ever associate with you, and don’t ever talk about your password to anybody. Also make sure you change your password regularly; like every 3-6 months, and you will be able to protect yourself from being trailed by a hacker.

2. Have More than One Admin Account-

It could be 3 or more, and it could be only two. It is very important not to have just one admin account. The reason for this is that the first thing an hacker will do once they hack your blog is to change your details, and you can protect yourself by taking control through your other admin account.

Another thing you should realize is that this technique is just as dangerous as it is helpful, so make sure you prepare yourself for this; the more admin accounts you have on your blog, the more routes an hacker can take to get to you. To protect yourself from this, make sure the username and passwords for all your admin accounts are so unique and different, so that it will be difficult for any hacker to take control upon getting to your blog.

3. Install Plugin that Monitors Your Files and Notify You of Changes Immediately-
You can also tell your hosting to help you configure your server to notify you in case there is any change in any of your files at any time, or you can look for a plugin that makes this easy.

A lot of little changes happen to our blog every day, but the reality is that some of them shouldn’t be. It is important for you to make sure you don’t come to know about any of these changes lately, so make sure you regularly monitor your sever and wordpress installation for any changes.

4. Scan Every Theme and Plugin You Want to Install-

This is especially important if you download your themes and plugins from other websites online, or if you’re using cracked plugins and themes. You never know when a sleazy programmer will put a little code in your theme or plugin, or when that cracked software you’re downloading will be virus infected.
Don‘t just wait to get hacked before you realize this, so make sure you scan every theme and plugin you want to install on a regular basis; scan them with your own antivirus before you install them.

5. Back up Your Blog Regularly-

Don’t ever miss a day, because you never know when your blog will be hacked. One thing I have noticed in the hacking world is that, no matter how secure, there is nothing that cannot be hacked. Of course, you can invest time and effort into making your blog very secure, and you can even hire an expert to take care of this aspect. But the reality is, if a group of hackers dedicate their efforts to bring down your blog, it will only last a few hours at best.

The best thing to do in a situation like this is to back up your blog regularly. Have at least 2 plugins/

software that backs up your entire blog, and make sure you check regularly to ensure your files are properly backed up.

6. Use Different Passwords for Every Aspect of Your Website-

For every webmaster you can have up to 3 different username and passwords for your hosting, and these 3 passwords can make it easy for you to recover your website in the case that you’re hacked.

*. The first password is for your hosting account; where you can see tickets, pay for hosting, and change your Cpanel details.

*. The second password is for your Cpanel; where you can access various parts of your website and make changes directly to your blog.

*. The third password is for your wordpress installation in itself; where you can add new posts, reply to comments, create new accounts, and update your blog directly.

The deadliest mistake any blogger can make is to make all 3 passwords the same, and you can protect yourself to an extent by making these passwords different.

You should also make sure all 3 usernames are different, and try getting your web host to help you change your details from the default one to something more secure..

Share your Comments.. Join our Blog...

Read more »

Secure Hackers

Followers

Like Us

Rate our Blog

Share Us

Warning: Internet to face global outage on July 9

Basic Website Hacking Tutorial for beginners

6 Ways to Protect Your Blog from being Hacked

Proxy lists for India

Free Proxies 2012

Tuesday, June 19, 2012

Windows 7 Activator + Loader Download

Monday, June 18, 2012

Vista, Server & Windows 7 Activation keys

Sunday, June 17, 2012

Prevent your website from SQL Injection vulnerability

Proxy lists for India

6 Ways to Protect Your Blog from being Hacked

Popular Posts

Categories

Archives