how to hack a Website Using Havij tools

First Lets Download our Tool:
Now, Find a sqli infected site . Here i found a vulnerable site
http://www.hypetrading.com/productinfo.php?id=285
Now Let’s start
Open havij and copy and paste infected link as shown in figure
Now click in the “Analyze”
Then It shows some messages there….Be alert on it and be show patience for sometime to find it’s vulernable and type of injection and if db server is mysql and it will find database name.Then after get it’s database is name like xxxx_xxxx
Then Move to another operation to find tables by clicking “tables” as figure shown.Now click “Get tables” Then wait some time if needed
After founded the tables ,you can see there will be “users” Put mark on it and click in the ” get columns ” tab as shown in figure
In that Just put mark username and password and click “Get data”
Bingo Got now id and pass that may be admin…
The pass will get as md5 you can crack it also using this tool as shown in figure…

Comments

Post a Comment

Popular posts from this blog

How to Install Android OS in Your Computer?

Image
We all know about Google Android operating system which comes installed in almost all latest smartphones whether its Samsung Galaxy S5 or Google Nexus. You'll find Android OS in almost all latest touch-enabled mobile phones. It has become the most popular operating system for mobile phones and tablets. Did you know you can install or test Google Android OS in your PC? People who don't have an Android mobile phone but want to test Android OS in their Desktop computer or laptop, will definitely find this article useful. If you remember, we have shared a software " BlueStacks " in past which works like an Android emulator and allows you to install and run almost all Google Android apps on your Windows PC. But it doesn't provide a full experience of Google Android OS. Today in this topic, we are going to share a fully functional Google Android OS copy which can be installed in your PC and can be used as a primary operating system. And if you don'
Read more

Google Dork For "Remote File Inclusion"

Image
Google dork s are the center of the Google Hacking. Many hackers use google to find vulnerable webpages and later use these vulnerabilities for hacking. Remote File Inclusion (RFI) is a type of vulnerability most often found on websites. It allows an attacker to include a remote file, usually through a script on the web server. The vulnerability occurs due to the use of user-supplied input without proper validation. List Of Google Dork For Remote File Inclusion: inurl:rte/my_documents/my_files inurl:/my_documents/my_files/ inurl:/shoutbox/expanded.php?conf= inurl:/main.php?x= inurl:/myPHPCalendar/admin.php?cal_dir= inurl:/index.php/main.php?x= inurl:/index.php?include= inurl:/index.php?x= inurl:/index.php?open= inurl:/index.php?visualizar= inurl:/template.php?pagina= inurl:/index.php?pagina= inurl:/index.php?inc= inurl:"index.php?page=contact.php" inurl:"template.php?goto=" inurl:"video.php?content=" inurl:"pages.php?p
Read more

Colasoft MAC Scanner (hack tools)

Image
 Colasoft MAC Scanner allows to scan the network and get a list of MAC addresses along with IP address, machine name, and manufacturer's information. It can automatically detect all subnets according to the IP addresses configured on multiple NICs of a machine. It supports multi-threaded scanning.  Click to download
Read more