How to crack a wep protected wifi by aeroway and wifislax.

Note : This article is for educational purpose only, Cracking a wi - fi is illigel in all countries.

This tutorial shows how to crack
a WEP key using Airoway in
Wifislax 3.1. For this process it
is necessary to have an
IPW3945 as chipset of the NIC
(Network Interface Card).

Follow these steps :

1.Download Wifislax
from the official page .

2.Burn the downloaded
.iso into a CD in order
to boot it.

3.Reboot the computer
(if necessary) and
boot it .
Press Enter when
necessary .
Elect the option no
pcmcia and press
Enter .

4.Introduce root as
user and toor as
password in order to
login.

5.Introduce now startx
to start the operative
system in graphics
mode .
Go to Start> Wifislax>
Asistencia Chipset>
Asistencia intel pro
wireless> Cargar
ipw3945 inyección -
ipwray-ng; to start
injection mode . The
system must detect
now 2 more network
card interfaces: wifi0
and rtap0.

6.Write in the Shell that
have just appeard
airodump-ng wifi0 .
Take a look of which
WEP encrypted
network (ENC
category) has more
Beacons and pay
special attention on
what channel it is (CH
category) and what's
it's name (ESSID
category) . That will
posibly be the network
with more signal
received.

7.Press Ctrl+C and
introduce airoway .sh.
Move with the cursor
to the channel of the
wanted network and
press Enter when the
wanted network
appear .

8.Elect the network
with the number it
has associated .
Press number 2 . There
will appear some
information refered to
an association. If you
succeed there will
appear this:
Association
successful :-) .
Press number 3 . There
will appear some
information refered to
a reply.

9.Now wait till the
attack 3 (the step
told just before)
comence to catch
ARP's and #Data
category reaches
30000 .

10.Press number 8 when
you have collected
the required Data .
There will appear some
red letters and
numbers. If you
succeed it must appear
a KEY FOUND down in
the window.
11.Write in a piece of
paper both keys (HEX
and ASCII
respectively) .

Tips :

1.Pay special attention to the
encryption type of the
network, it must be WEP
not WPA.

2.To know if your computer
possesses the chipset
IPW3945 you can execute
the command ipconfig /all
in Windows' MS-DOS. You
have to look for Intel PRO/
Wireless 3945ABG
Network Connection. In
other operating systems like
Linux-based ones, you can
download programs like
hardinfo to obtain a
complete list of the
hardware of your computer,
where it would be included
the chipset of your NIC.
This chipset is very common
on laptops.

3.It is better to crack a
network with good signal
because if not, it could be
imposible to do it.

4.When you introduce the
keys on Windows you
should introduce ASCII key
(the second one). You can
introduce the HEX key (the
first one) but without the :.
If you obtain only one key
take note of it and
introduce it in Windows
without the :, if any.

5.The liveCD of Wifislax
sometimes crashes or
doesn't recognize the
injection interfaces. The
solution to this is rebooting
the operating system.

6.Wifislax could be
incompatible with some
computers or need
configuring to work on
graphics mode.

7.If attack 2 (when you press
number 2) don't succeed,
you have to try again later
or crack another network.

8.Sometimes the #Data
needed is superior to 30000
packets. Sometimes
1000000 packets are
necessesary to crack the
key.

9.Sometimes the catch of Data
starts in an hour or maybe
never. You could try later,
rebooting the computer or
changing the location of
your computer.

                         Source: wikihow

SQL Injection

SQL Injection


                This is one the best way to attack a site or simply in words you can say that to I-Iack a  site.
SQL injection is an attack in which malicious code is inserted into strings that are later passed to an instance of SQL Server for parsing and execution. Any procedure that constructs SQL statements should be reviewed for injection vulnerabilities because SQL Server will execute all syntactically valid queries that it receives. Even parameterized data can be manipulated by a skilled and determined attacker.
The primary form of SQL injection consists of direct insertion of code into user-input variables that are concatenated with SQL commands and executed. A less direct attack injects malicious code into strings that are destined for storage in a table or as metadata. When the stored strings are subsequently concatenated into a dynamic SQL command, the malicious code is executed.
The injection process works by prematurely terminating a text string and appending a new command. Because the inserted command may have additional strings appended to it before it is executed, the malefactor terminates the injected string with a comment mark "--". Subsequent text is ignored at execution time.
this was the explanation of sql according to Microsoft....
well the most simple definition about an sql algorithm in my view will be that
"giving any value to the asp server that in any case that valur returns true like 1=1 means in any aspect 1 can not be equal to 0. so like this we pass a sql equation in a the login field of the target site.
fallow the following steps for hacking you first site-
1- search "asp admin log in" in google.
2- click on any asp based site from list.
3- type in login field 1' or'1'='1  or '1'='1 and many more...
    type the same code in password field also and at last.
4- press enter or click on log in.
CONGRATULATIONS you have successfully logged in the site admin page as admin of the site ..... for more info visit http://en.wikipedia.org/wiki/SQL_injection


Vulnerability description

Multiple products that use data in SQL queries are vulnerable to SQL injection. Attackers can use SQL injection techniques to exploit Web sites and applications that implement SQL queries without first removing potentially harmful characters. Using SQL injection, attackers can create and modify tables, and possibly gain complete control over the database, host computer, and network of trusted computers.

How to remove this vulnerability

Review every parameter of every script that interacts with a Web site or application. If testing the script yields any form of database error message in any part of the response (including hidden fields and headers), then the application is vulnerable to SQL injection.
These guidelines can help minimize the possibility of SQL injection and mitigate the risk:
  • If you have the ability to modify the script or application, implement strict filtering over all variables (using a default-deny regular expression) for any characters or strings that could be used maliciously. It is safer to build a regular expression that permits only alphanumeric characters (for example, s/^[0-9a-zA-Z]//g), as opposed to enumerating every forbidden character and possibly missing a few, rendering the application vulnerable.
  • Limit database rights so that the Web application only has access to essential stored procedures.
  • Remove stored procedures and scripts that are not essential for the Web application.

How can I automatically test my site for SQL injection attacks, using either a script or program?


yes you will need to use these tools 
Free tools like paros proxy [crawls] (previously mentioned),
burpsuite (previously mentioned [crawls] but active attacks requires pro): http://portswigger.net/burp/
sqlninja (sqlserver only) http://sqlninja.sourceforge.net/
google rat proxy: [crawls] http://code.google.com/p/ratproxy/
websecurify: [crawls] http://www.websecurify.com/
wapiti: [crawls but takes work to set up - can be used specifically for sqli with spider]http://wapiti.sourceforge.net/


thank you for reading....
{this topic and all related content has been posted for education (or ethical hacking )purpose only i do not responsibility of any wrong use}

Micromax canvas HD

The most anticipated phone in today's date in India, Micromax Canvas HD disappeared from the shelves within fifteen minutes of its release.
Released on 14th february on Snapdeal.com, Micromax Canvas HD goes out of stock within 15 minutes.
The monster phone is running on Jellybean 4.1.2 out of the box with a planned upgrade to Jellybean 4.2.The main headline of the smartphone is a 5 inch ips display with a resolutipn of 1280 * 720 pixels (294 ppi, 16 million colours).It is featured with a 1.2 ghz quadcore processor, powervr series5xt gpu and 1 gb of ram.The canvas HD has 4 gb of internal memory which is expandable upto 32 gb via microsd card.The connectivity options on this phone includes usb 2.0 , bluetooth 4.0,wifi,gps with assisted gps, 3g hsdpa.It has a 8 mp autofocus camera with dual led flash,720p video recprding @ 30 fps, 2 mp front camera for video calls, dual sim support, 2000 mah battery.Some inbuilt apps includes mizone, facebook, milive etc.

In the box - Handset, usb cable, charger, earpiece, user manual

Price - Rs. 13,999.

It is the direct competitor with Samsung Galaxty Grand but is much cheaper than it and has more ppi.You can say it is a war between brand and features.

Upcoming windows smartphones in february 2013

The finish giant Nokia is continuously expanding it's windows lineup by releasing new windows phones in really short span of time.It is not too late when Nokia introduced lumia 510 and now two new phones are rumuored too viz - nokia lumia 520 and 620.Although,other top brands are focusing on android Nokia is  focusing on nurturing windows 8.Here, is a list of windows 8 smartphones that will be release in upcoming weeks -

1.Nokia Lumia 520 - The successor of Lumia 510 will feature a 1ghz dual core processor with 512 mb of ram,8 gb of inbuilt storage ,expandable upto 64 gb, 5 mp rear camera and a 4 inch highly sensitive display.

2.Nokia Lumia 620 -  Announced previosly than lumia 520 & lumia 720 It is perhaps the first windows phone which overcomes the memory expandation limiation of windows smarrphones .It has 8 gb internal and 64 gb expandable storage capacity & 7gb of skydrive storage, 3.7 inch display, 5mp a/f camera with flash, 720p video recording, 1ghz dual core processor,512 mb ram, adreno 305 gpu. It will be tough competitor of mid - range android devices and HTC 8s.

3.Nokia Lumia 720 - It will feature a 4.3 inch clear black display, 1ghz dual core processor with 512 mb of ram, 8 gb internal storage expandable upto 64 gb via sdcard, 6mp rear a/f camera with flash and 2 mp front camera for video calls , 3g hspa+.
    These are upcoming windows8 phones from nokia .For upcoming list of android smartphones stay tuned with us.

How to create a gmail account on mobile?

If you don't have a gmail account  or you want to create a new one, you can create it simply by going to google.com and signing up on your desktop.But, have you ever comes through a situation when you tried to create a gmail account on your mobile and it's saying -
"Need an account go to google.com on your pc".
Basically, it is impossible to create an acoount by going to gmail.com on a mobile device.But I have a cool trick to do so.Just follow these simple steps -
1.Go to plus.google.com on your mobile and click on sign up.
2.It  will ask you to enter your mobile number, enter it.
3. Now, google will send you a code on your number.
4.On the next screen,enter the code which you have recieved.
5.Congratulations, now you have google account and you can use it to use any of google's service i.e, gmail, google+ etc.