New Hacking tricks||Learn Hacking Online,Best Hacking Site ,How to Hack Facebook Account: website hacking

Showing posts with label website hacking. Show all posts

Hack Website with IIS Exploit

<div dir="ltr" style="text-align: left;" trbidi="on">
Read Our first post about website hacking <a href="http://www.newhackingtricks.com/2014/02/how-to-hack-website.html">http://www.newhackingtricks.com/2014/02/how-to-hack-website.html</a><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtq2HrUtf2oGV_wFqOZD85G77nijPVCW3LbXdtMz8CYkINCI2cElv5YEP1atMWaDJnzS1yUXGLVaeOJcThhCl11tfbuPsDkcaW9AiPT-hlcyDH_SoUl2X0eSFmsdq75eF8j43n3qLdOKI/s1600/5.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhtq2HrUtf2oGV_wFqOZD85G77nijPVCW3LbXdtMz8CYkINCI2cElv5YEP1atMWaDJnzS1yUXGLVaeOJcThhCl11tfbuPsDkcaW9AiPT-hlcyDH_SoUl2X0eSFmsdq75eF8j43n3qLdOKI/s1600/5.png" /></a></div>
<br />
<br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">With IIS Exploit we can upload the Defaced page on the Vulnerable Server without any Login. It is most Easiest way to Hack any site.</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">STEP 1: Click on Start button and open "RUN".</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">STEP 2: Now Type this in RUN</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">%WINDIR%\EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08</span><wbr style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"></wbr><span class="word_break" style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline-block; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"></span><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">002B30309D}\::{BDEADF00-C265-1</span><br />
<wbr style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"></wbr><span class="word_break" style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline-block; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"></span><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">1d0-BCED-00A0C90AB50F}</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">Now A Folder named "Web Folders" will open.</span><span class="text_exposed_show" style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"><br /><br />STEP 3: Now "Right-Click" in the folder and Goto "New" and then "Web Folder".<br /><br />STEP 4: Now type the name of the Vulnerable site in this. e.g." http:// victimsite .com/" and click "Next".<br /><br />STEP 5: Now Click on "Finish"<br /><br />STEP 6: Now the folder will appear. You can open it and put any deface page or anything.<br /><br />STEP 7: I put text file in that folder. Named "securityalert.txt" (you can put a shell or HTML file also). If the file appear in the folder then the Hack is successful but if it don't then the site is not Vulnerable.<br /><br />Now to view the uploaded site i will go to " http:// victimsite .com/ securityalert.tx t"<br />In your case it will be " www.[sitename].com/[file name that you uploaded] "</span><br />
<br />
<br />
<span class="text_exposed_show" style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">Enjoyy!!!!! </span></div>

Hack Website with IIS Exploit

Read Our first post about website hacking http://www.newhackingtricks.com/2014/02/how-to-hack-website.html With IIS Exploit we can uplo...

+ Read more »

How to Hack a website

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWFi-gLy7TgKi2ETRNRogUL_dQIA0REzddcni_6RhP1OfG8NGd7mDw8cSuHZDj3J1Q4HeLDHAtqYYw-KL2IZRTk27eIrJJB3Qrs1OI_aSm4QrBSZSIC2ZQY-QqKDpTpw1iLr5EkUKr6bU/s1600/5.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgWFi-gLy7TgKi2ETRNRogUL_dQIA0REzddcni_6RhP1OfG8NGd7mDw8cSuHZDj3J1Q4HeLDHAtqYYw-KL2IZRTk27eIrJJB3Qrs1OI_aSm4QrBSZSIC2ZQY-QqKDpTpw1iLr5EkUKr6bU/s1600/5.png" /></a></div>
<h4 style="text-align: left;">
<span style="color: red;"><b><span style="background-color: white; display: inline ! important; float: none; font-family: 'lucida grande',tahoma,verdana,arial,sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; text-align: left; text-transform: none; white-space: normal; word-spacing: 0px;">First find a Vulnerable Website?</span></b></span></h4>
<div style="text-align: left;">
<br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">Common Methods used for Website Hacking</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">There are lots of methods that can be used to hack a website but most common ones are as follows:</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">1.SQL Injection</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">2.XSS(Cross Site Scripting)</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">3.Remote File Inclusion(RFI)</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">4.Directory Traversal attack</span><br style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;" /><span style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline !important; float: none; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;">5.Local File inclusion(LFI)</span><span class="text_exposed_show" style="-webkit-text-stroke-width: 0px; background-color: white; color: #333333; display: inline; font-family: 'lucida grande', tahoma, verdana, arial, sans-serif; font-size: 13px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 18px; orphans: auto; text-align: left; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px;"><br />6.DDOS attack<br /><br />Tools:<br /><br />Acunetix:<br />Acunetix is one of my favorite tool to find a venerability in any web application It automatically checks your web applications for SQL Injection, XSS & other web vulnerabilities.<br /><br />Nessus:<br />Nessus is the best unix venerability testing tool and among the best to run on windows. Key features of this software include Remote and local file security checks a client/server architecture with a GTK graphical interface etc.<br /><br />Retina:<br />Retina is another Vulnerability Assessment tool,It scans all the hosts on a network and report on any vulnerabilities found.<br /><br />Metasploit Framework:<br />The Metasploit Framework is the open source penetration testing framework with the world's largest database of public and tested exploits.</span></div>
</div>

How to Hack a website

First find a Vulnerable Website? Common Methods used for Website Hacking There are lots of methods that can be used to hack a website ...

+ Read more »

How To Recover Your Hacked WordPress Website In Easy Steps?

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
WordPress is one of the most popular content management systems at present. However as a general law, the increasing popularity comes with a number of dangerous has gained attention of bad boys as well. There are so many people who are reporting the cases of hacked WordPress account on a regular basis. So I have thought of putting a complete guide to discuss <em style="margin: 0px; padding: 0px;"><strong style="margin: 0px; padding: 0px;">how to recover your hacked WordPress</strong></em>.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgTteBMijyh7d9ibJvpMMIQrGJPrOzB0-YBzdws_b1ivOnvSjbIK3o5a3jTs2Iicf5npvlCEtrIQwu4Yeap0QyaMnGGVuxAk6KKnpwtRcjwW5w6AbF4fjycF2QWR-cq2dhlI-Pu52UQuA/s1600/prevent-wordpress-hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgTteBMijyh7d9ibJvpMMIQrGJPrOzB0-YBzdws_b1ivOnvSjbIK3o5a3jTs2Iicf5npvlCEtrIQwu4Yeap0QyaMnGGVuxAk6KKnpwtRcjwW5w6AbF4fjycF2QWR-cq2dhlI-Pu52UQuA/s1600/prevent-wordpress-hacking.jpg" /></a></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<br /></div>
<h2 style="background-color: #fdfdfd; clear: both; font-family: Arial, Helvetica, sans-serif; font-size: 23px; line-height: 18px; margin: 0px 0px 20px; padding: 0px;">
<b style="margin: 0px; padding: 0px;">Ways To Recover Hacked Account</b></h2>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
Below is the perfect path to follow to get your <strong style="margin: 0px; padding: 0px;">hacked account</strong> back:</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<b style="margin: 0px; padding: 0px;">Backup </b>– Even if your website is infected to a small extent, it is still very much necessary to secure the backup for your website before waiting for watching the things turning into worst. Don’t forget to take backup of your entire database and all files. You can also try for a faster solution by using BackupBuddy.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<b style="margin: 0px; padding: 0px;">Change Login Details and Secret Access Keys </b>– At the time you sense the hacking attempt, just try to login to your account to check whether your login details are still effective or not. If the username and password details are not yet changed then immediately change all the WordPress secret access keys in wp-config.php file and of-course your username and password.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<b style="margin: 0px; padding: 0px;">Running Scanners </b>– Running a scanner is also a very helpful step and comes at number 3 in this list. The scanners are basically used for identifying the compromises at the level of database. You can try out Cloud Sites WP Scanner plug-in or Sucuri Malware Scanner. After running the scanner you should make sure to move the next step stated below.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<b style="margin: 0px; padding: 0px;">Installing Your WordPress Again </b>– Next important step involves Deleting all the files existing in the directory of WordPress except wp-config.php file and wp-content directory. After that you need to download and install a totally fresh copy of WordPress. Now edit the wp-config-sample.php file by substituting the sample values by picking the actual database values from the wp-config.php file that you haven’t deleted as stated above. Now you can delete the present file and replace it with your own file.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<b style="margin: 0px; padding: 0px;">Review Content Folder</b> – Next task involved to check all the folders to find ones with any suspicious activity in your wp-content directory. So carefully analyze the folders content and remove any one that seems not to be belonging to you. If you later find that the folder was actually needed then you can get it back from your backup.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<b style="margin: 0px; padding: 0px;">Analyze and Re-install Your Plug-ins </b>– The next steps after completing with reviewing the folders’ content includes reviewing the plug-ins. Collect information about what plug-ins you are not using currently and uninstall them all for the time being. Now coming to all other activated plug-ins that you are using currently, deactivate and delete these plug-ins and then re-install and activate the active plug-ins.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<b style="margin: 0px; padding: 0px;">Analyze Your Themes </b>– Now the next thing that should be taken care of is the task of removing the extra themes which are not in use currently. Next task again involves reviewing your activated theme. Look through the PHP or Javascript code to find out any suspicious activity there. Most of the time hackers make such malicious changes in header.php or footer.php files.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1ykUEUoDwU9fqIo8FxqTdCcKooZrSEyYkcvWCGe5mh9ve8_vSj7V1Kq9dKY7wmEgo4LF6XKFHhPr2-Tos6ymzJbasr041qPwcYGTNaIiA4GsRK1H5zToJSliHFUbOf4BrpJG82-3DTGc/s1600/vendetta_mask.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj1ykUEUoDwU9fqIo8FxqTdCcKooZrSEyYkcvWCGe5mh9ve8_vSj7V1Kq9dKY7wmEgo4LF6XKFHhPr2-Tos6ymzJbasr041qPwcYGTNaIiA4GsRK1H5zToJSliHFUbOf4BrpJG82-3DTGc/s1600/vendetta_mask.jpg" /></a></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<br /></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
Following this step by step guide can really help you a lot in getting your WordPress back. Also always remember to keep checking for the activities on your WordPress site. Also make it a habit to keep a time by time backup of your database. For more recovery details you can check on<a href="http://codex.wordpress.org/FAQ_My_site_was_hacked" style="color: #1982d1; margin: 0px; padding: 0px; text-decoration: initial;">http://codex.wordpress.org/FAQ_My_site_was_hacked</a>.</div>
<h2 style="background-color: #fdfdfd; clear: both; font-family: Arial, Helvetica, sans-serif; font-size: 23px; line-height: 18px; margin: 0px 0px 20px; padding: 0px;">
How to Secure before Getting hacked !</h2>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
Every one is looking to make their blog looks secure and try to make their blog safe from hackers so that hackers can not take any kind of information from your blog. You can protect and increase security of your by doing following things :-</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<strong style="margin: 0px; padding: 0px;">Chap Secure plugin</strong></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
You can increase the security of your log-in by using Chap secure plugin, It helps in encrypting passwords by using CHAP protocol. It will help hacker to get in trouble.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<strong style="margin: 0px; padding: 0px;">Login Lockdown Plugin</strong></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
This plugin helps a lot in stopping a hacker because if he is trying to play with your login screen then this plugin will limit hit after few wrong attempts.Just download the plugin and activate it. This plugin helps to secure your blog from newbie hackers. <img alt=";)" class="wp-smiley" src="http://www.saifullahbutt.com/wp-includes/images/smilies/icon_wink.gif" style="border: none; margin: 0px !important; max-height: 1em; padding: 0px;" /></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<strong style="margin: 0px; padding: 0px;">WP Security Scan</strong></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
This plugin helps to check all the codes of your website from hacking Malware and scripts. It can find out which code or which file has virus in the blog.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<strong style="margin: 0px; padding: 0px;">Updating WordPress regularly</strong></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
Try to upgrade the WordPress regularly as soon as any new version is launched. Most of the bloggers do not update WordPress and chances are huge that old WordPress version can get hacked.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<strong style="margin: 0px; padding: 0px;">Tac Theme Checker</strong></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
You can install a plugin “Tac Theme checker” which can check your theme before activating it. It helps you to check the complete theme when you upload it into Dashboard and it helps to check the files completely in few seconds.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<strong style="margin: 0px; padding: 0px;">Make your security Bullet proof</strong></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
You should increase your security more and more by adding some official steps from WordPress website and you can read them here <a href="http://codex.wordpress.org/Hardening_WordPress" style="color: #1982d1; margin: 0px; padding: 0px; text-decoration: initial;">http://codex.wordpress.org/Hardening_WordPress</a>.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
<strong style="margin: 0px; padding: 0px;">Theme of your Blog</strong></div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
Your theme plays an important part in hacking, If you are using some cracked version of theme then be ready to get hacked soon. Cracked themes often have codes which helps to get you hacked. I would suggest that get a proper theme from any <strong style="margin: 0px; padding: 0px;">web design company</strong> so that there is no chance to get hacked due to unethical themes.</div>
<div style="background-color: #fdfdfd; color: #444444; font-family: 'Segoe UI', helvetica, Tahoma, Arial, sans-serif; font-size: 13px; line-height: 20px; padding: 0px 0px 15px;">
I hope these steps will help you to protect from all the hack attempts. <em style="margin: 0px; padding: 0px;"><strong style="margin: 0px; padding: 0px;">If you have any other method then do let us know in below comments. Thank you</strong></em></div>
</div>

How To Recover Your Hacked WordPress Website In Easy Steps?

WordPress is one of the most popular content management systems at present. However as a general law, the increasing popularity comes wit...

+ Read more »

What is HTTP Header Injection Vulnerability

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 style="text-align: left;">
<span style="background-color: white; font-family: Arial, Helvetica, sans-serif;">HTTP Header</span></h3>
<span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;">HTTP Header is the component of HTTP requests and responces. Header fields are transimitted with each request and responce and carry additional data about the requests and responces.</span><br style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 14px; margin: 0px; padding: 0px;" /><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;"><br style="line-height: 14px; margin: 0px; padding: 0px;" /></span><span style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px;"></span><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;">See the typical request and responce headers Here at Web-Sniffer.net</span><br style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 14px; margin: 0px; padding: 0px;" /><h3 style="background-color: white; font-family: Verdana, sans-serif; margin: 10px 0px; padding: 0px;">
<span style="font-family: Arial, Helvetica, sans-serif; margin: 0px; padding: 0px;">HTTP header injection</span></h3>
<span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;">HTTP header injection is a kind of web application vulnerability which exists on those web applications that generatd HTTP headers based on the input given by users. If it uses User based input in the headers, it can be used for HTTP response splitting, cross-site scripting (<span style="font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px; position: static;"><span class="kLink" style="background-color: transparent; background-image: none; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px 0px 1px !important; position: static; width: auto !important;">XSS</span></span>), Session fixation via the Set-Cookie header, and malicious redirects attacks via the location header.</span><br style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 14px; margin: 0px; padding: 0px;" /><div class="separator" style="background-color: white; clear: both; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4nsCkW54WxskF-4ene1Quw3iQeWudfPbWyTBGRBWPpec3JqLIwImwWmdPw18C0fevtA4Tzpn7lii8SoRM9nvxwbmsv14vrg41Cg41rmSJe35BI-a80U4YM1RvZSDBgD_As7D0egqS5jaY/s1600/network-security-auditing.jpg" imageanchor="1" style="color: #0000dd; margin: 0px 1em; padding: 0px; text-decoration: initial;"><img border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg4nsCkW54WxskF-4ene1Quw3iQeWudfPbWyTBGRBWPpec3JqLIwImwWmdPw18C0fevtA4Tzpn7lii8SoRM9nvxwbmsv14vrg41Cg41rmSJe35BI-a80U4YM1RvZSDBgD_As7D0egqS5jaY/s320/network-security-auditing.jpg" style="border: 0px; margin: 0px; padding: 0px;" width="320" /></a></div>
<span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;"><br style="line-height: 14px; margin: 0px; padding: 0px;" /></span><span style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px;"></span><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;"></span><br style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 14px; margin: 0px; padding: 0px;" /><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;">I recently found a similar kind of vulnerability in http://canadaedu.apple.com and for this I was also acknowledged by Apple on its website.</span><br style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 14px; margin: 0px; padding: 0px;" /><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;"><br style="line-height: 14px; margin: 0px; padding: 0px;" /></span><span style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px;"></span><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;">It used apache 1.3.33 that was vulnerable to the HTML and malicious javascript injection through  "Expect" header.</span><br style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 14px; margin: 0px; padding: 0px;" /><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;"><br style="line-height: 14px; margin: 0px; padding: 0px;" /></span><span style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px;"></span><span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;">See the responce header of the website:</span><br style="background-color: white; font-family: Verdana, sans-serif; font-size: 14px; line-height: 14px; margin: 0px; padding: 0px;" /><blockquote class="tr_bq" style="background-color: #f6ebc1; border-left-color: rgb(252, 226, 124); border-left-style: solid; border-left-width: 10px; font-family: Verdana, sans-serif; font-size: 14px; line-height: 22px; margin: 1em 2em; padding: 0.5em 1em;">
<span style="font-family: Arial, Helvetica, sans-serif; margin: 0px; padding: 0px;">GET / HTTP/1.0<br style="line-height: 14px; margin: 0px; padding: 0px;" />Accept: */*<br style="line-height: 14px; margin: 0px; padding: 0px;" />User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; .NET CLR 1.1.4322)<br style="line-height: 14px; margin: 0px; padding: 0px;" />Host: canadaedu.apple.com<br style="line-height: 14px; margin: 0px; padding: 0px;" />Cookie: PHPSESSID=3b8026225d719c6945155129c5c7335d<br style="line-height: 14px; margin: 0px; padding: 0px;" />Connection: Close<br style="line-height: 14px; margin: 0px; padding: 0px;" />Expect: <script>alert(411731119275)</script><br style="line-height: 14px; margin: 0px; padding: 0px;" />Pragma: no-cache</span></blockquote>
<span style="background-color: white; font-family: Arial, Helvetica, sans-serif; font-size: 14px; line-height: 22px; margin: 0px; padding: 0px;">The alert box added in the Expect field could be injected for Cross <span style="font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px; position: static;"><span class="kLink" style="background-color: transparent; background-image: none; border-bottom-color: blue; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px 0px 1px !important; position: static; width: auto !important;">Site </span><span class="kLink" style="background-color: transparent; background-image: none; border-bottom-color: blue; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; font-family: inherit !important; font-size: inherit !important; margin: 0px; padding: 0px 0px 1px !important; position: static; width: auto !important;">Scripting</span></span>.</span></div>

What is HTTP Header Injection Vulnerability

HTTP Header HTTP Header is the component of HTTP requests and responces. Header fields are transimitted with each request and responce an...

+ Read more »