G33K-TRICKS: Computers
Showing posts with label Computers. Show all posts
Showing posts with label Computers. Show all posts

Sunday, March 20, 2016

Ethical hacking of web sites using "HEXJECTOR"


Hexjector is an Opensource, Multi-Platform PHP script to automate site Penetration test for SQL Injection Vulnerabilities.



The Tools has following features...

1.Check for SQL Injection Vulnerablities.
2.Pentest SQL Injection Vulnerablities.
3.Web Application Firewall Detector.
4.Scan For Admin Page
5.Manual Dump Function
6.SQL Injection Type Detection
7.Search For Vulnerable Sites by using Google Dork
8.WAF Bypass
9.Multithreaded(HexaFind)


Download Hexjector here:-  sourceforge
Webhacking made easy with Hexjector.

Saturday, March 19, 2016

How to view Live web Cams for free all over the world



Free Webcams search queries



Did you know that , you can get an easy access to IP web cameras throughout the world for free.
These Live Web Cams are always available over the internet.
You just need to search the Free Cams over the internet, thats all.

Using google , type and search below links and you will see the list on unprotected Cams at different places in the world.
The fun part is, for few cams you can pan and zoom using the available on screen remote control.

The trick lies behind the search list is to use the Google Search keywords. For example, the inurl keyword from Google help you find out the URLs that contains certain word or text. Similarly, the intitle keyworkd finds the list of Titles that has certain text. 

Here is the List of Free Live IP Web Cams around the world 

Watch Free Live Cams

inurl:/view.shtml
intitle:”Live View / - AXIS” | inurl:view/view.shtml^
inurl:ViewerFrame?Mode=
inurl:axis-cgi/jpg
inurl:axis-cgi/mjpg (motion-JPEG)
inurl:ViewerFrame?Mode=Refresh
inurl:view/indexFrame.shtml
inurl:view/index.shtml
intitle:start inurl:cgistart
inurl:view/view.shtml
intitle:”live view” intitle:axis
liveapplet
intitle:snc-z20 inurl:home/

intitle:liveapplet
inurl:"viewerframe?mode=motion"
intitle:”i-Catcher Console - Web Monitor”
intitle:axis intitle:”video server”
intitle:liveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View / - AXIS 206W”
intitle:”Live View / - AXIS 210″
intitle:”Live View / - AXIS”
intitle:”Live View / - AXIS 206M”
inurl:”MultiCameraFrame?Mode=Motion”

intitle:Axis 2400 video server
intitle:"snc-rz30 home" 
allintitle:”Network Camera NetworkCamera”
inurl:indexFrame.shtml Axis
intitle:”WJ-NT104 Main Page”
intitle:”sony network camera snc-p1″
intitle:snc-cs3 inurl:home/
intext:”MOBOTIX M10″ intext:”Open Menu”
intext:”MOBOTIX D10″ intext:”Open Menu”
intext:”MOBOTIX M1″ intext:”Open Menu”
intitle:”netcam live image”
intitle:”Toshiba Network Camera” user login
intitle:snc-rz30 inurl:home/
intitle:”sony network camera snc-m1″
site:.viewnetcam.com -www.viewnetcam.com


Another website which is sort of free directory to Public Cams,
Hundereds of free surveilance webcams across globe are listed in one place.
Live Camera Project: http://insecam.org/
How to get Nonencrypted password using Website Login Form


On Few websites you can just verify the password directly using the PHP or Java Script code.
Though not always , you can get the password with few easy steps.

1. Right-Click on the "Login Form" of the website which you want hack.
2. Select ''Inspect element''
3. Search for  ''
and then ''action=''  in the code

4. If the URL ends with  ''.js'' Bingo!!! you hit the bullseye. Just copy it and paste it in the URL bar of your browser.
And in-case if the URL ends with ''.php'', type ''view-source:'' before pasting the URL
Then search for  ''password'' in the source code.

WARNING: This method works better for .JS pages than with .PHP.
Sometimes, there is no URL after ''action='' you will find just a JS function.
Again view source and look for "password".


How to hack the Website password