Follow us on Twitter!
It is never to LATE to become what you never WERE.
Thursday, April 24, 2014
Navigation
Home
HellBoundHackers Main:
HellBoundHackers Find:
HellBoundHackers Information:
Learn
Communicate
Submit
Shop
Challenges
HellBoundHackers Exploit:
HellBoundHackers Programming:
HellBoundHackers Think:
HellBoundHackers Track:
HellBoundHackers Patch:
HellBoundHackers Other:
HellBoundHackers Need Help?
Other
Members Online
Total Online: 28
Guests Online: 25
Members Online: 3

Registered Members: 82905
Newest Member: BLckLIght
Latest Articles
View Thread

HellBound Hackers | HellBound Hackers | Lessons

Author

Reference Manual


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-11-08 12:46
I recently made a Reference manual and thought it would be a good idea to share it with others.Here it is:

SQL:
Basic Injections(for passwords or usernames):
Code
' OR 1=1--


(Note: -- is used to delete all commands after it)
Code
' OR 'a'='a



Direct query in URL:
?SQL Query

***********************************************************************************************
Javascript:
Format: Javascript:Injection (in the location(URL) Bar)
always use alert to confirm sucessful execution
form changer:
Code
"document.forms[0].elements[0].options[0].value"



cookie changer:
Code
"alert(document.cookie='name=value')"



NOTE:
Variables declared in scripts but not inside functions have GLOBAL SCOPE and can be modified by an injection

***********************************************************************************************
HTML Comment:
Code
<!--This is a comment-->


(Comments are used to hide several important points and to place reminders by Admins)

***********************************************************************************************
SSI(Server Side Include):
format:<!--#command-->
Execute CMD or CGI:
Code

   <!--#exec cmd="command"-->
   <!--#exec cgi="command"-->




***********************************************************************************************
Common UNIX Commands:
CD - change directory
ls - List files in directory(ls .. lists files in directory above current one)
CAT - View a file
rm - Delete a file

***********************************************************************************************
RFI(Remote File Include):
URL Format:
Original:
Code
www.example.com/wazzup.php/page=something.php



Changed:
Code
www.example.com/wazzup.php/page=www.google.com





***********************************************************************************************

OLLYDBG(OLLY Debugger):
Steps:
1.)Right click:Search For:All Referenced strings
2.)Search for and find the good boy or bad boy string
3.)Right click on string location and click follow to disassembler
4.)Search the code above the string call to search for the conditional operation and change it acc. to your needs
5.)Run It and check if goal has been accomplished.If it is...Congrats else,Return to step 1

Note:
Good boy string is something that congratulates you when you get the correct password
(example:"Press OK to View password")
Bad boy String is the opposite of Good Boy string
(example:"Wrong Password,Only 3 turns left")


***********************************************************************************************

Websites:
Search Engines:
www.google.com (A Beginner's best friend)
www.clutsy.com (Nice and orderly result display format)
www.altavista.com (Nice,But not as good as google)
Note:Using Certain techniques like the r*b*ts.txt file,Crawlers can be prevented from indexing certain private web pages

Information:
1.)Search Engines
2.)www.wikipedia.com(Nice intros and links to some useful sites)
3.)Forums and Articles on HBH
-------------------------------------------------It Never Ends---------------------------------------------------------------------
(please PM me if you have any doubts,I will try my best to help you)
If you can,Please comment or rate this article

Edited by on 07-11-08 16:16
Author

RE: Reference Manual


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-11-08 13:19
Cool Smile
Good to see people sharing.



Author

RE: Reference Manual

spyware
Member



Posts: 4192
Location:
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 07-11-08 15:04
Lol.



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
[center]�Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?� - Ebert[/ce
Author

RE: Reference Manual


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-11-08 18:07
Ummm. Thanks?


Author

RE: Reference Manual


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-11-08 22:43
I lol'd.


Author

RE: Reference Manual


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 07-11-08 23:43
moshbat wrote:
Nowadays, "lol" means fuck all, really. It's simply a three character word to fill what would otherwise (yeah fucking right) be constructive text.
Lol, to my understanding, means laugh[ed] out loud.
How many times do you say "lol" after you've actually laughed out loud?
Furthermore, it's often used when one is uninterested in what another is saying, and uses lol to avoid reading/answering. I myself am guilty of this when I am busy, but too polite to say I am busy.
It also used as a subliminal way of saying "Shut the fuck up"
Bearing the above line in mind: lol.


LOL


Author

RE: Reference Manual

spyware
Member



Posts: 4192
Location:
Joined: 14.04.07
Rank:
God
Warn Level: 90
Posted on 07-11-08 23:57
whitecell wrote:
LOL


Don't talk to moshbat like that, prick.



img507.imageshack.us/img507/3580/spynewsig3il1.png
"The chowner of property." - Zeph
[small]
Widespread intellectual and moral docility may be convenient for leaders in the short term,
but it is suicidal for nations in the long term.
- Carl Sagan
[center]�Since the grid is inescapable, what were the earlier lasers about? Does the corridor have a sense of humor?� - Ebert[/ce
Author

RE: Reference Manual


Member

Your avatar

Posts:
Location:
Joined: 01.01.70
Rank:
Guest
Posted on 08-11-08 00:16
spyware wrote:
whitecell wrote:
LOL


Don't talk to moshbat like that, prick.


LOL




Edited by on 08-11-08 00:16