Free Licenses.Blogspot.Com: Website Hacking

Showing posts with label Website Hacking. Show all posts

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div>
<h2 style="text-align: center;">
<span style="color: red;">Bypassing the XSS Filters :<br />Advanced XSS Tutorials for Web application Pen Testing</span></h2>
<br /></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
Hi friends, last time, i explained what is XSS and how an attacker can inject malicious script in your site. As i promised earlier, i am writing this advanced XSS tutorial for you(still more articles will come)</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
</div>
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxNgeVIGlsWmiE8xEw-wLpGaWS6kY52c2gnz-d-_aQyKqx16VCbLh6JmvBBo9_uS3ZvaRysdSyIrv4wMd-J37eidLau4rCU8L0jPpYXa_SyzCjXwakPO8Ax6OBSYlU8D8O8HpasR8-oXWr/s1600/XSS+Vulnerability+Tutorial+BreakTheSec.png" imageanchor="1" style="color: #888888; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxNgeVIGlsWmiE8xEw-wLpGaWS6kY52c2gnz-d-_aQyKqx16VCbLh6JmvBBo9_uS3ZvaRysdSyIrv4wMd-J37eidLau4rCU8L0jPpYXa_SyzCjXwakPO8Ax6OBSYlU8D8O8HpasR8-oXWr/s1600/XSS+Vulnerability+Tutorial+BreakTheSec.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Sometimes, website owner use XSS filters(WAF) to protect against XSS vulnerability.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg: if you put the <scirpt>alert("hi")</scirpt></span></div>
, the Filter will <span class="IL_AD" id="IL_AD5" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">escape</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> the "(quote) character , so the script will become</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<script>alert(>xss detected<)</script></blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now this script won't work. Likewise Filters use different type of filtering method to give protection against the XSS.  In this case, we can use some tricks to bypass the filter.  Here i am going to cover that only. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
1.Bypassing magic_quotes_gpc</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">The magic_quotes_gpc=ON is a PHP setting(configured in PHP.ini File) , it </span><span class="IL_AD" id="IL_AD4" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">escapes</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the every ' (single-quote), " (double quote) and \  with a backslash automatically.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Eg:</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><scirpt>alert("hi");</scirpt></span> will be filtered as <script>alert(\hi\)</script>.so the script won't work now.<br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This is well known filtering method, but we can easily bypass this filter by using ASCII characters instead.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Eg:  alert("hi"); can be converted to</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">so the script will become <script>String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</script>.  In this case there is no "(quotes) or '(single quotes) or / so the filter can't filter this thing.  Yes, it will successfully run the script.</span><br />
<div class="info_box" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
String.fromCharCode() is a javascript function that converts ASCII value to Characters.</div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<b style="background-color: white; color: #274e13; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">How to convert to ASCII values?</b><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">There are some online sites that converts to ASCII character. But i suggest you to use</span><a href="https://addons.mozilla.org/en-US/firefox/addon/hackbar/" style="background-color: white; color: #888888; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-decoration: none;">Hackbar Mozilla addon </a><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">After installing hackbar add on ,press F9.  It will open the small box above the url bar. click the XSS->String.fromCharCode()</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://1.bp.blogspot.com/-HOO_mqpXuys/TvdV-D5KW2I/AAAAAAAABHs/QHEmx1FBjgY/s1600/XSS+breaking+security.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://1.bp.blogspot.com/-HOO_mqpXuys/TvdV-D5KW2I/AAAAAAAABHs/QHEmx1FBjgY/s1600/XSS+breaking+security.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://4.bp.blogspot.com/-JqB82lpCwjQ/TvdV_l4bE7I/AAAAAAAABH0/21POwKEv2jc/s1600/XSS+bypassing+filters.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://4.bp.blogspot.com/-JqB82lpCwjQ/TvdV_l4bE7I/AAAAAAAABH0/21POwKEv2jc/s1600/XSS+bypassing+filters.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now it will popup small window. enter </span><span class="IL_AD" id="IL_AD6" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the code</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">for instance alert("Hi").  click ok button.  Now we got the output.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="http://3.bp.blogspot.com/-9tuNcvwOvx4/TvdV7zrQlwI/AAAAAAAABHk/uzUWnsyk5ls/s1600/xss+advanced+tutorial.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="http://3.bp.blogspot.com/-9tuNcvwOvx4/TvdV7zrQlwI/AAAAAAAABHk/uzUWnsyk5ls/s1600/xss+advanced+tutorial.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">copy the code into the <script></script> inside and insert in the vulnerable sites</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<i style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg: </i><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q=<script>String.fromCharCode(97, 108, 101, 114, 116, 40, 34, 104, 105, 34, 41, 59)</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #274e13; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
2.HEX Encoding</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">we can encode our whole script into HEX code so that it can't be filtered. </span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For example:  <script>alert("Hi");</script> can be convert to HEX as:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e</blockquote>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now put the code in the vulnerable site request.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For ex: </span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q=%3c%73%63%72%69%70%74%3e%61%6c%65%72%74%28%22%48%69%22%29%3b%3c%2f%73%63%72%69%70%74%3e</blockquote>
<b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> Converting to HEX:</b><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This site will convert to hex code: http://centricle.com/tools/ascii-hex/ </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
3.Bypassing using Obfuscation</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Some website admin put the </span><i style="background-color: white; color: #cc0000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">script</i><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">,</span><i style="background-color: white; color: #cc0000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">alert</i><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> in restricted word list.  so whenever you input this</span><span class="IL_AD" id="IL_AD3" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">keywords</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">, the filter will remove it and will give error message like "you are not allowed to search this". This can bypassed by changing the case of the keywords(namely Obfuscation). </span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For eg:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<script>ALeRt("hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This bypass technique rarely works but giving trial is worth. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<h2 style="background-color: white; color: #38761d; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 11px; font-stretch: normal; margin: 0px 0px 1em; position: relative;">
4. Closing Tag</h2>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Sometimes putting "> at the beginning of the code will work. </span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
"><script>alert("Hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This will end the previous opened tag and open our script tag.</span><br />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Example:</span><br />
<blockquote class="tr_bq" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
hxxp://vulnerable-site/search?q="><script>alert("Hi");</script></blockquote>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div style="background-color: white; color: #990000; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b>Conclusion:</b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">From above article, it is clear that XSS filters alone not going to protect a site from the XSS attacks. If you really want to make your site more secure, then ask PenTesters to test </span><span class="IL_AD" id="IL_AD8" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">your application</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> or test yourself.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Also there are lot of different filter bypassing technique, i just covered some useful techniques for you.</span><br />
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" />
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b><span class="Apple-style-span" style="color: #cc0000;">Disclaimer:</span></b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This article is intended for educational purpose only.</span></div>

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing

Bypassing the XSS Filters : Advanced XSS Tutorials for Web application Pen Testing Hi friends, last time, i explained what is XSS and...

+ Read more »

What is XSS (Cross Site Scripting)

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4O3b3Jnto6A_4gEkMBw2Th0gH8D6BGjzWHxIhOn_CNp40pvvSTsdPP3ibW2yMHWh6XhsFZ_WOkNu4QvS4wyjupGEOJXV_yVt_uB3AOaiOo-PHNAyEY2R16O8TPB9O8K-FHU693YZIRINI/s640/cross-site-scripting-xss.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj4O3b3Jnto6A_4gEkMBw2Th0gH8D6BGjzWHxIhOn_CNp40pvvSTsdPP3ibW2yMHWh6XhsFZ_WOkNu4QvS4wyjupGEOJXV_yVt_uB3AOaiOo-PHNAyEY2R16O8TPB9O8K-FHU693YZIRINI/s640/cross-site-scripting-xss.png" /></a></div>
<br />
<b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #38761d;">What is XSS?</span></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to run his own client side scripts(especially Javascript) into web pages viewed by other users.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">In a typical XSS attack, a hacker inject his malicious javascript code in the legitimate website . When a user visit the specially-crafted link , it will execute the malicious javascript. A successfully exploited XSS vulnerability will allow attackers to do phishing attacks, steal accounts and even worms. </span><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> </b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Example :</b><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Let us imagine, a hacker has discovered XSS vulnerability in Gmail and inject malicious script. When a user visit the site, it will execute the malicious script. The malicious code can be used to redirect users to fake gmail page or capture cookies. Using this stolen cookies, he can login into your account and </span><span class="IL_AD" id="IL_AD9" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">change password</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.It will be easy to understand XSS , if you have the following prerequisite:</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br />
<ul style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;">
<li style="margin: 0px 0px 0.25em; padding: 0px;">Strong Knowledge in HTML,javascript(<a href="http://w3schools.com/" rel="nofollow" style="color: #888888; text-decoration: none;">Reference</a>).</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Basic Knowledge in HTTP client-Server Architecure(<a href="http://101.lv/learn/CGIperl/ch2.htm" rel="nofollow" style="color: #888888; text-decoration: none;">Reference</a>)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">[optional]Basic Knowledge about server side programming(php,asp,jsp)</li>
</ul>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span class="Apple-style-span" style="background-color: white; color: #38761d; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 19px; font-weight: bold;">XSS Attack:</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Step 1: Finding Vulnerable Website</b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Hackers use google dork for finding the vulnerable sites for instance  "?search=" or ".php?q=" .  1337 target specific sites instead of using google search.  If you are going to test your own site, you have to check every page in your site for the vulnerability. </span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Step 2: Testing the Vulnerability:</b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">First of all, we have to find a input field so that we can inject our own script, for example: search box, username,password or any other input fields.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja0byma54fJGG8idnecwhP3aQyz0C1LbQtS9c0tZTnjeM0EuIM5FuUXqVr18E1M45Di6d-uOIWawyOeYMJ6Ruat0FrY-KAD-cQMfkDQo79i8KENm4rPJFvqxtEIHUo0vPISVL76Mmp0u8/s1600/search+box.jpg" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja0byma54fJGG8idnecwhP3aQyz0C1LbQtS9c0tZTnjeM0EuIM5FuUXqVr18E1M45Di6d-uOIWawyOeYMJ6Ruat0FrY-KAD-cQMfkDQo79i8KENm4rPJFvqxtEIHUo0vPISVL76Mmp0u8/s1600/search+box.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><i>Test 1 :</i></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Once we found the input field, let us try to put some string inside the field, for instance let me input "BTS". It will display the  result .</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXngL1NRorBv-7FFzAe_6YQIJ5OrpfrzWb2A-iuTILw-rDQdvEP1u2r5Cd6KQQ0c-ojMRFWab4s8DVUI_2W7xONdsLT_XMEj1r7elWDLP6O7o6Sc-f3dIjj-Z9S9ci3H9tjwm2vI_s9nw/s1600/XSS_input.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXngL1NRorBv-7FFzAe_6YQIJ5OrpfrzWb2A-iuTILw-rDQdvEP1u2r5Cd6KQQ0c-ojMRFWab4s8DVUI_2W7xONdsLT_XMEj1r7elWDLP6O7o6Sc-f3dIjj-Z9S9ci3H9tjwm2vI_s9nw/s1600/XSS_input.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now right click on the page and select view source.   search for the string "BTS" which we entered in the input field.  Note the location where the input is placed.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbg96oYtcvtFTAcXIl6eM8MuBszgLYKwDlR-r5E632GgaVlB3F74hZ24ZqDyQqwcAcfYdhbQDrLz5sEpYFHiYTiORfgqKFkCt0iBaO0b7lWZeaElEZ144wMV-m_q6WELRNK4YGWufXqFk/s1600/BTS_XSS.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="69" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbg96oYtcvtFTAcXIl6eM8MuBszgLYKwDlR-r5E632GgaVlB3F74hZ24ZqDyQqwcAcfYdhbQDrLz5sEpYFHiYTiORfgqKFkCt0iBaO0b7lWZeaElEZ144wMV-m_q6WELRNK4YGWufXqFk/s1600/BTS_XSS.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><i>Test 2:</i></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now we are going to check whether the server sanitize our input or not.  In order to do this , let us input the <script> tag inside the input field. </span><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"></p>
<div class="separator" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; clear: both; text-align: center; background-color: rgb(255, 255, 255);">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO4bnV0_W6J1gbexCQ1QquWobSZAilA1swX9lI5X_A-mJs0QoIGIwk-ERVldwiRvrBVoAAwXvChZlkRL8ZzZXSuiNU4jDgy6sGG-zOVCHsFAGVWa-P-wCvjFoBd_DqRU6H4c8KVAXnKvc/s1600/Xss_script_tag.gif" style="text-decoration: none; color: rgb(136, 136, 136); margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjO4bnV0_W6J1gbexCQ1QquWobSZAilA1swX9lI5X_A-mJs0QoIGIwk-ERVldwiRvrBVoAAwXvChZlkRL8ZzZXSuiNU4jDgy6sGG-zOVCHsFAGVWa-P-wCvjFoBd_DqRU6H4c8KVAXnKvc/s1600/Xss_script_tag.gif" width="200" style="border: 1px solid rgb(238, 238, 238); position: relative; padding: 5px; -webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;"></a></div>
<p>
<span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">View the source of the page . Find the location where input displayed place in previous test.</span><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"></p>
<div class="separator" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; clear: both; text-align: center; background-color: rgb(255, 255, 255);">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBZC118gbOJ-dnrWSPPLxOWm2zOSkwvn9s4vG8zm5uCXYD0tFYS4hsdTbyb-rtmwBUhBr5cbJvR_yywLEXfWIxgMs7IwIgDzfG-pZOSCa23vxB1-9yh3hyOpK0NQSdv-8anrVpDHh9C7A/s1600/xss-SUCCESS_Noparsing.gif" style="text-decoration: none; color: rgb(136, 136, 136); margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjBZC118gbOJ-dnrWSPPLxOWm2zOSkwvn9s4vG8zm5uCXYD0tFYS4hsdTbyb-rtmwBUhBr5cbJvR_yywLEXfWIxgMs7IwIgDzfG-pZOSCa23vxB1-9yh3hyOpK0NQSdv-8anrVpDHh9C7A/s1600/xss-SUCCESS_Noparsing.gif" width="250" style="border: 1px solid rgb(238, 238, 238); position: relative; padding: 5px; -webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; background-image: initial; background-attachment: initial; background-size: initial; background-origin: initial; background-clip: initial; background-position: initial; background-repeat: initial;"></a></div>
<p>
<br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">Thank god, our code is not being sanitized by the server and </span><span class="IL_AD" id="IL_AD6" style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">the code</span><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"> is just same as what we entered in the field. If the server sanitize our input, the code may look like this </span><i style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span class="Apple-style-span" style="color: rgb(153, 0, 0);"><script></span></i><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">. This indicates that the website vulnerable to XSS attack and we can execute our own scripts .</span><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><b style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span class="Apple-style-span" style="color: rgb(204, 0, 0);">Step 3: Exploiting the vulnerability</span></b><br style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);"><span style="color: rgb(102, 102, 102); font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; background-color: rgb(255, 255, 255);">Now we know the site is somewhat vulnerable to XSS attack.  But let us make sure whether the site is completely vulnerable to this attack by injecting a full javascript code.  For instance, let us input <script>alert('BTS')</script> .</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUXdanup-U2NimSaHps0wS8zDCuNy6vNY2u0lR8CPr16c_hroyScgMNFuxZeIXEgFj1ADB_tXksA8wI2xRSuTUe24_lN3kETfQE6wKx7Ma2sSxonsgFuLTrI5XSQHmgUo9LrgUo17FEaM/s1600/injecting-XSS.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="31" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUXdanup-U2NimSaHps0wS8zDCuNy6vNY2u0lR8CPr16c_hroyScgMNFuxZeIXEgFj1ADB_tXksA8wI2xRSuTUe24_lN3kETfQE6wKx7Ma2sSxonsgFuLTrI5XSQHmgUo9LrgUo17FEaM/s200/injecting-XSS.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Now it will display pop-up box with 'BTS' string. Finally, we successfully exploit the XSS .  By extending the code with malicious script, a hacker can do steal cookies or deface the site and more.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBJY2PNEIUDVKvtgjXzwJ99m_jaV2zSMNwe3rz4GD0lO7tV-eI2nMTuYz-TWDwClXctB5e_0ryqIAFzfUMEdXMX6dvkt4fd4fsGYuTCpnrjX_P3uLVjQYmRbAQdD55jcKE3TYzch8Biko/s1600/alert-box-xss.gif" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="118" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBJY2PNEIUDVKvtgjXzwJ99m_jaV2zSMNwe3rz4GD0lO7tV-eI2nMTuYz-TWDwClXctB5e_0ryqIAFzfUMEdXMX6dvkt4fd4fsGYuTCpnrjX_P3uLVjQYmRbAQdD55jcKE3TYzch8Biko/s1600/alert-box-xss.gif" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; background-position: initial; background-repeat: initial; background-size: initial; border: 1px solid rgb(238, 238, 238); box-shadow: rgba(0, 0, 0, 0.0980392) 1px 1px 5px; box-sizing: border-box; max-width: 100%; padding: 5px; position: relative;" width="200" /></a></div>
<br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span class="Apple-style-span" style="background-color: white; color: #38761d; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 19px; font-weight: bold;">Types of XSS Based on persisting capability:</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Based one Persistence capability, we can categorize the XSS attack into two types namely Persistent and Non-Persistent.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #38761d;">Persistent XSS:</span></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">The Persistent or Stored XSS attack occurs when the malicious code submitted by attacker is saved by the server in the database, and then permanently it will be run in the normal page.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><i style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">For Example:   </i><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Many websites host a support forum where registered users can ask their doubts by posting message  , which are stored in the database.  Let us imagine , An attacker post a message containing malicious javascript code instead.  If the server fail to sanitize the input provided, it results in execution of injected script.  The code will be executed whenever a user try to read the post. If suppose the injected code is cookie stealing code, then it will steal cookie of users who read the post. Using the cookie, attacker can take control of </span><span class="IL_AD" id="IL_AD5" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">your account</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #38761d;">Non-Persistent XSS:</span></b><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Non-Persistent XSS, also referred as Reflected XSS , is the most common type of XSS found now a days. In this type of attack, the injected code will be send to the server via HTTPrequest.  The server embedd the input with the html file and return </span><span class="IL_AD" id="IL_AD8" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">the file</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">(HTTPResponse) to browser.  When the browser executes the HTML file, it also execute the embedded script.  This kind of XSS vulnerability frequently occur in search fields.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><i style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Example:</i><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">Let us consider a project </span><span class="IL_AD" id="IL_AD4" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">hosting</span><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"> website.  To find our favorite project, we will just input the related-word in the search box .  When searching is finished, it will display a message like this "search results for yourword " .  If the server fail to sanitize the input properly, it will results in execution of injected script.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">In case of reflected XSS attacks, attacker will send the specially-crafted link to victims and trick them into click the link. When user click the link, the browser will send the injected code to server, the server reflects the attack back to the users' browser.  The browser then executes the code .</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">In addition to these types, there is also third  type of attack called DOM Based XSS attack, i will explain about this attack in later posts.</span><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><br style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;" /><b style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;"><span class="Apple-style-span" style="color: #990000;">What can an attacker do with this Vulnerability?</span></b><br />
<ul class="checklist" style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 1.4; margin: 0.5em 0px; padding: 0px 2.5em;">
<li style="margin: 0px 0px 0.25em; padding: 0px;">Stealing the Identity and Confidential Data(<span class="IL_AD" id="IL_AD3">credit</span> card details).</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Bypassing restriction in websites.</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Session Hijacking(Stealing session)</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Malware Attack</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Website Defacement</li>
<li style="margin: 0px 0px 0.25em; padding: 0px;">Denial of Service attacks(Dos)</li>
</ul>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b><span class="Apple-style-span" style="color: #38761d;"></span></b><br /><div style="margin: 0px;">
<b><span class="Apple-style-span" style="color: #38761d;"><i><b>Bypassing The XSS Filter Technique: XSS Tutorial Part 2(Coming Soon..!!)</b></i></span></b></div>
<div>
<b><span class="Apple-style-span" style="color: #38761d;"><i><br /></i></span></b></div>
</div>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
</div>
<div style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">
<b><span class="Apple-style-span" style="color: #cc0000;">Disclaimer:</span></b></div>
<span style="background-color: white; color: #666666; font-family: 'Trebuchet MS', Trebuchet, Verdana, sans-serif; font-size: 15.8400001525879px; line-height: 20.5919990539551px;">This article is intended for educational purpose only.</span></div>
</div>

What is XSS (Cross Site Scripting)

What is XSS? Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to...

+ Read more »

Hotfile.com Is Permanently Shutdown By US Federal Court

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="background-color: white; clear: both; color: #666666; font-family: Helvetica, Arial, sans-serif; font-size: 12px; line-height: 20px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7BFWcdsK7lbwji7QZxL5Dl2zPZsRvkcRys696M8Y-48JDdAVq4DhdbqFKy6P2cln02jhObFlWxNYq4B4F9AnvhCEM2jcbeEWIF9BZxH9zQUajajbaGSNA-_9tJCExdX0-aoBzhIBTdVMW/s1600/Hotfile+dot+com.png" imageanchor="1" style="border: none; clear: left; color: #f79100; float: left; list-style: none; margin: 0px 1em 1em 0px; outline: none; padding: 0px; text-decoration: none;"><img border="0" height="368" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg7BFWcdsK7lbwji7QZxL5Dl2zPZsRvkcRys696M8Y-48JDdAVq4DhdbqFKy6P2cln02jhObFlWxNYq4B4F9AnvhCEM2jcbeEWIF9BZxH9zQUajajbaGSNA-_9tJCExdX0-aoBzhIBTdVMW/s640/Hotfile+dot+com.png" style="border: none; list-style: none; margin: 0px; max-width: 600px; outline: none; padding: 0px;" width="640" /></a></div>
<span style="background-color: white; border: none; color: #666666; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; line-height: 20px; list-style: none; margin: 0px; outline: none; padding: 0px;"><br /></span><span style="background-color: white; color: #666666; font-family: Helvetica, Arial, sans-serif; font-size: 12px; line-height: 20px;"></span><span style="background-color: white; border: none; color: #666666; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; line-height: 20px; list-style: none; margin: 0px; outline: none; padding: 0px;">Top sharing website Hotfile.com has been shutdown due to Copyright. Hotfile is agrees to pay $80 million to movie studios and ceased all operation. It was founded by Hotfile Corp in 2006, its allowed users to upload and download files with any web browser. Non-registered users were allowed to upload up to 400 MB.</span><br style="background-color: white; color: #666666; font-family: Helvetica, Arial, sans-serif; font-size: 12px; line-height: 20px;" /><span style="background-color: white; border: none; color: #666666; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; line-height: 20px; list-style: none; margin: 0px; outline: none; padding: 0px;">Now when you open Hotfile.com then it a message on home page, </span><br style="background-color: white; color: #666666; font-family: Helvetica, Arial, sans-serif; font-size: 12px; line-height: 20px;" /><span style="border: none; color: #666666; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; line-height: 20px; list-style: none; margin: 0px; outline: none; padding: 0px;"><span style="background-color: white;">"As a result of a US federal court having found </span><a href="http://hotfile.com/" style="background-color: white;">Hotfile.com</a><span style="background-color: white;"> to in violation of copyright law, the site has been permanently shutdown."</span></span></div>

Hotfile.com Is Permanently Shutdown By US Federal Court

Top sharing website Hotfile.com has been shutdown due to Copyright. Hotfile is agrees to pay $80 million to movie studios and ceased all ...

+ Read more »

two-million-stolen-facebook-twitter

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 style="text-align: left;">
<span style="color: orange; font-size: large;">Two Million stolen Facebook, Twitter login credentials found on 'Pony Botnet' Server</span></h3>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"><br /></span>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"><br /></span>
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Two million stolen website and email login credentials were found on a botnet command-and-control s</span><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">erver, with most of the compromised accounts belonging to </span><b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"><span style="color: red;">Facebook, Google, Yahoo, Twitter, LinkedIn and other popular services</span></b><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">. Security researchers at Trustwave's SpiderLabs found a </span><b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Pony Botnet Controller Server</b><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"> which was located in the </span><b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">Netherlands.</b><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">In a </span><a href="http://blog.spiderlabs.com/2013/12/look-what-i-found-moar-pony.html" style="background-color: white; color: #999999; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px; text-decoration: none;" target="_blank">blog post</a><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">, the researchers mentioned that after the Pony Version 1.9 Source code was made public and they found a way to get into the Botnet's Admin area, from where they collected stolen database and statistics.</span><br />
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">The Pony Control panel, which is written in Russian language, point outed Facebook was the worst impacted and two Russian Social Media sites i.e. </span><b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">vk.com</b><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"> and </span><b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">odnoklassniki.ru</b><span style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">, credentials were also included in the database.</span><br />
<div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQQSSER1jRBSd5MpGSqXMEm9qibzWATvnXESsTwKQlZ_on9fa4kVBl7W2-JxkClD4qk0gBOy-04BAsOz1ZMi4olTQoj61ELCO4718o5R9L4powY3kGpcE8fshsaWqgsg5eRygBdbKPVKE/s1600/Two+Million+stolen+Facebook,+Twitter+login+credentials+found+on+'Pony+Botnet'+Server.jpg" imageanchor="1" style="color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="257" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhQQSSER1jRBSd5MpGSqXMEm9qibzWATvnXESsTwKQlZ_on9fa4kVBl7W2-JxkClD4qk0gBOy-04BAsOz1ZMi4olTQoj61ELCO4718o5R9L4powY3kGpcE8fshsaWqgsg5eRygBdbKPVKE/s640/Two+Million+stolen+Facebook,+Twitter+login+credentials+found+on+'Pony+Botnet'+Server.jpg" style="-webkit-transition: all 0.4s ease-in-out; border: 1px solid rgb(192, 192, 192); height: auto; max-width: 95%; padding: 4px; transition: all 0.4s ease-in-out;" width="640" /></a></div>
<br style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;" />
<span style="background-color: white; color: red; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"><b>Statistics of stolen login credentials:</b></span><br />
<br />
<ul style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">
<li><b>1,580,000</b> website login credentials stolen (including <b>318,121</b> Facebook login credentials, <b>21,708</b>Twitter accounts, <b>54,437 </b>Google-based accounts and <b>59,549</b> Yahoo accounts)</li>
<li><b>320,000</b> email account credentials stolen</li>
<li><b>41,000 FTP</b> account credentials stolen</li>
<li><b>3,000</b> Remote Desktop credentials stolen</li>
<li><b>3,000</b> Secure Shell account credentials stolen</li>
</ul>
<b style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;"><span style="color: red;">Spider Lab Also listout the most commonly used passwords:</span></b><br />
<div class="separator" style="background-color: white; clear: both; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimFAciO7QPLl7q-osO_WROcJf2eU7knOdcwtgYnPUf8Z0a-XnTgz9jOZLovTxNey49Pk8wnA1dKMnB-TCTHmmvN4DB52kdZnfl90ml2lIGWltI3WpzUJLCcOyjFImDACOVknMvhN9tlcY/s1600/6a0168e94917b4970c019b01abc974970d-500wi.jpg" imageanchor="1" style="color: #999999; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimFAciO7QPLl7q-osO_WROcJf2eU7knOdcwtgYnPUf8Z0a-XnTgz9jOZLovTxNey49Pk8wnA1dKMnB-TCTHmmvN4DB52kdZnfl90ml2lIGWltI3WpzUJLCcOyjFImDACOVknMvhN9tlcY/s320/6a0168e94917b4970c019b01abc974970d-500wi.jpg" style="-webkit-transition: all 0.4s ease-in-out; border: 1px solid rgb(192, 192, 192); height: auto; max-width: 95%; padding: 4px; transition: all 0.4s ease-in-out;" width="196" /></a></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">
To defend your system against such<b> malware issues</b>, <span style="color: blue;"><b>keep your computer and browser up-to-date</b></span> and<span style="color: blue;"><b>virus-free</b></span> and make sure that you have <b><span style="color: blue;">Facebook's Login Notifications and Google's 2-step verification option enabled.</span></b></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">
<br /></div>
<div style="background-color: white; color: #333333; font-family: Verdana, Geneva, sans-serif; font-size: 12px; line-height: 19.1875px;">
<br /></div>
</div>

two-million-stolen-facebook-twitter

Two Million stolen Facebook, Twitter login credentials found on 'Pony Botnet' Server Two million stolen website and email login...

+ Read more »

All India Radio Allahabad Hacked by Pakistan Hackers Crew- PHC

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
Hackers from <a href="https://www.facebook.com/PakistanHC" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank">Pakistan Hackers Crew</a> has hacked into another government site. Today they hacked the <a href="http://www.airallahabad.gov.in/www.airallahabad.gov.in/" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="All India Radio Allahabad">All India Radio Allahabad</a> Official Site.</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<strong>They also said that</strong> <span style="color: #3366ff;"><strong>” <a href="http://freelicenses.blogspot.com/2013/11/jaya-tv-hacked-by-pakistan-hackers.html" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Jaya TV and Canara Bank Employee’s Union websites hacked and defaced by Pakistani Hackers"><span style="color: #3366ff;">Jaya Tv</span></a> & <a href="http://freelicenses.blogspot.com/2013/11/jaya-tv-hacked-by-pakistan-hackers.html" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="AIADMK (Political Patry of India) Official Site Hacked and Defaced By Pakistani Hackers"><span style="color: #3366ff;">AIADMK</span></a> sites has been hacked by us. But your poor Cyber police arrested an Indian kid kick him out from Jail <img alt=":D" class="wp-smiley" height="13" src="http://i2.wp.com/techgator.org/wp-includes/images/smilies/icon_biggrin.gif?w=798" style="height: auto; margin: 0px !important; max-height: 13px; max-width: 100%;" width="13" /> “</strong></span><strong></strong></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://www.thehindu.com/todays-paper/tp-national/tp-tamilnadu/hacker-may-have-entered-other-govt-websites-too-police/article5346083.ece" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank">Eswaran</a>, <span style="color: red;">who is now in Puzhal prison under judicial custody for hacked the AIADMK official site.</span> <span style="color: red;">I think</span> <a href="http://www.thehindu.com/todays-paper/tp-national/tp-tamilnadu/hacker-may-have-entered-other-govt-websites-too-police/article5346083.ece" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank">Eswaran</a> <span style="color: red;">hacked this site from jail. lol..</span></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://i2.wp.com/techgator.org/wp-content/uploads/2013/11/airallahabad.jpg" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;"><img alt="airallahabad" class="aligncenter size-large wp-image-3346" height="341" src="http://i2.wp.com/techgator.org/wp-content/uploads/2013/11/airallahabad.jpg?resize=798%2C448" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a></div>
</div>

All India Radio Allahabad Hacked by Pakistan Hackers Crew- PHC

Hackers from Pakistan Hackers Crew has hacked into another government site. Today they hacked the All India Radio Allahabad Official S...

+ Read more »

2013 Delhi Election Website Hacked By Kashmir Hacker

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
One Kashmir Hacker Stamped  <a href="http://www.delhielection2013.in/" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Delhi Election 2013">Delhi Election 2013</a>  <span style="color: red;"><strong><a href="http://www.hack-db.com/870610.html" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Mirror of hacked site"><span style="color: red;">Mirror</span></a></strong></span> Website , Their Team Called As Kashmir Cyber Army And Pakistan Cyber Expert  They Give  Message To India Hacker Through Defacing This Site.</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<strong><span style="color: #333333;">They post an message on the deface page:-</span></strong></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<span style="color: red;">Attacking our Islamic Sites & Abusing Our Islam On that sites dear gay hind bitches stop Abusing Islam & Stop Defacing Bengladeshi & Pakistani Sites Otherwise we will crush Your cyber space.</span></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://i0.wp.com/techgator.org/wp-content/uploads/2013/11/delhi-election.jpg" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;"><img alt="delhi election" class="aligncenter size-large wp-image-3382" height="341" src="http://i0.wp.com/techgator.org/wp-content/uploads/2013/11/delhi-election-1024x575.jpg?resize=798%2C448" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a></div>
</div>

2013 Delhi Election Website Hacked By Kashmir Hacker

One Kashmir Hacker Stamped Delhi Election 2013 Mirror Website , Their Team Called As Kashmir Cyber Army And Pakistan Cyber Expert T...

+ Read more »

Puthiyathalaimurai official site hacked again by PHC

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
Today Puthiyathalaimurai official site had been hacked again by <strong>Hasnain Haxor</strong> a well known hacker from <strong><a href="https://www.facebook.com/PakistanHC" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Pakistan Hackers Crew">Pakistan Hackers Crew</a> </strong>(<strong><a href="https://www.facebook.com/PakistanHC" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="PHC">PHC</a></strong>). It is an second attack on this site already this site defaced by the same hacker on <strong><a href="http://freelicenses.blogspot.com/" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Puthiyathalaimurai TV website hacked and defaced by Pakistani Hackers">15.11.2013</a>.</strong></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/puthiyathalaimurai1.jpg" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;"><img alt="puthiyathalaimurai" class="aligncenter size-large wp-image-3406" height="341" src="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/puthiyathalaimurai1.jpg?resize=798%2C448" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a></div>
</div>

Puthiyathalaimurai official site hacked again by PHC

Today Puthiyathalaimurai official site had been hacked again by Hasnain Haxor a well known hacker from Pakistan Hackers Crew ( PHC )....

+ Read more »

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 style="text-align: left;">
<span style="color: #6fa8dc;"><br /></span></h3>
<h3 style="text-align: left;">
<span style="color: #6fa8dc;">   Sun Network and Red fm websites hacked and defaced by Pakistani Hackers</span></h3>
<div>
<span style="color: #6fa8dc;"><br /></span></div>
<div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
Hacker from Pakistan Haxors Crew has hacked into Sun TV network official website.  <a href="http://freelicenses.blogspot.com/2013/11/jaya-tv-hacked-by-pakistan-hackers.html" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Jaya TV and Canara Bank Employee’s Union websites hacked and defaced by Pakistani Hackers">Jaya Tv</a>also hacked by the same hacker. Sun TV is one of the major Tamil language satellite television channels based in Chennai, India. The following sites are hacked by the hackers.</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://www.sunnetwork.in/index.html" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="sunnetwork.in"><strong>Sunnetwork.in</strong></a></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/sunnetwork.jpg" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;"><img alt="sunnetwork" class="aligncenter size-large wp-image-3368" height="341" src="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/sunnetwork.jpg?resize=798%2C448" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://www.sun.in/" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Sun.in"><strong>Sun.in</strong></a></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/sun.jpg" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;"><img alt="sun" class="aligncenter size-large wp-image-3369" height="341" src="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/sun.jpg?resize=798%2C448" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
The hacker also Hacked the <a href="http://www.redfm.in/index.html" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Red fm "><strong>Red Fm</strong></a> website. which is an one of the part of sunnetwork.</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/redfm.jpg" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;"><img alt="redfm" class="aligncenter size-large wp-image-3370" height="341" src="http://i1.wp.com/techgator.org/wp-content/uploads/2013/11/redfm.jpg?resize=798%2C448" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a></div>
</div>
</div>

Sun Network and Red fm websites hacked and defaced by Pakistani Hackers Hacker from Pakistan Haxors Crew has hacked into Sun TV ...

+ Read more »

Consulate General of India, New York (USA) Hacked By Pakistani Hacker

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="block loop-single" style="background-color: white; float: left; font-family: Helvetica, Arial, sans-serif; font-size: 14px; line-height: 22px; margin: 0px 30px 0px 25px; width: 798px;">
<article class="post-3521 post type-post status-publish format-standard hentry category-hacking category-hacking-news tag-aiadmk-official-site-hacked-by-pakistani-hackers tag-consulate-general-of-india tag-hacked-by-pakistani-hackers tag-new-york-usa-hacked-by-pakistani-hackers tag-pakistan-hackers tag-pakistan-hackers-crew tag-pakistan-hackers-crew-phc tag-pakistani-hackers tag-phc" id="post-3521" style="border-bottom-style: none; overflow: hidden; padding: 25px 0px 0px;"><header class="post-header" style="position: relative;"><h3 style="text-align: left;">
<span style="color: #494949;">   </span><span style="color: yellow;">  </span><span style="color: #3d85c6;">Consulate General of India, New York (USA) Hacked By Pakistani Hacker</span></h3>
<div>
<a href="http://i0.wp.com/techgator.org/wp-content/uploads/2013/11/india.jpg" style="-webkit-transition: all 0.2s ease-out; clear: left; color: #00c8ff; float: left; font-size: 15px; line-height: 27px; margin-bottom: 1em; margin-right: 1em; transition: all 0.2s ease-out;"><img alt="india" class="aligncenter size-large wp-image-3522" height="312" src="http://i0.wp.com/techgator.org/wp-content/uploads/2013/11/india.jpg?resize=798%2C409" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a><span style="color: #494949; font-size: 15px; line-height: 27px;">Official site of the Consulate General of India, New York (USA) was Hacked and Defaced By Kai Behroz a well known hacker from </span><a href="https://www.facebook.com/PakistanHC" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; font-size: 15px; line-height: 27px; transition: all 0.2s ease-out;" target="_blank" title="Pakistan hackers crew[PHC]">Pakistan hackers crew[PHC]</a><span style="color: #494949; font-size: 15px; line-height: 27px;">. Today he hacked and defaced the Official site of the Consulate General of India, New York (USA). </span><span style="color: red; font-size: 15px; line-height: 27px;"><strong><a href="http://www.indiacgny.org/ny/" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Consulate General Of India [ New York , USA ]"><span style="color: red;">Defaced Site</span></a></strong></span><span style="color: #494949; font-size: 15px; line-height: 27px;"> </span><strong style="color: #494949; font-size: 15px; line-height: 27px;"><span style="color: red;"><a href="http://www.pak-mirror.com/defacements/?id=1159" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;" target="_blank" title="Mirror of the hacked site"><span style="color: red;">Mirror</span></a></span></strong></div>
</header></article></div>
</div>

Consulate General of India, New York (USA) Hacked By Pakistani Hacker

Consulate General of India, New York (USA) Hacked By Pakistani Hacker Official site of the Consulate General of India, New York ...

+ Read more »

WorldCall Hacked Data Leaked

<div dir="ltr" style="text-align: left;" trbidi="on">
<h4 style="text-align: left;">
<br /></h4>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://pakmediablog.net/wp-content/uploads/2009/08/worldcall.gif" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="http://pakmediablog.net/wp-content/uploads/2009/08/worldcall.gif" /></a></div>
<h4 style="text-align: left;">
<br /></h4>
<h4 style="text-align: left;">
<span style="font-family: Arial, Helvetica, sans-serif;"><a aria-haspopup="true" aria-owns="js_8" data-hovercard="/ajax/hovercard/page.php?id=109506385742705&extragetparams=%7B%22directed_target_id%22%3A0%7D" href="https://www.facebook.com/pages/WorldCall/109506385742705?directed_target_id=0" id="js_47" style="background-color: white; color: #3b5998; cursor: pointer; font-size: 13px; line-height: 18px; text-decoration: none;" target="_blank">WorldCall</a><span style="background-color: white; color: #37404e; font-size: 13px; line-height: 18px;"> Hacked Data Leaked</span></span></h4>
Target Worldcall Official Websites :<br />
<br />
1: www.worldcall.net.pk<br />
<br />
2: www.go4b.net.pk<br />
<br />
Sql vulnerability Found :<br />
<br />
1) www.worldcall.net.pk/contact.php?city_id=10‎<br />
<br />
2) www.go4b.net.pk/contact.php?city_id=10<br />
<br />
Leaked Data  Download from here.<br />
<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="http://www.worldcall.com.pk/images/innerpage_07.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="http://www.worldcall.com.pk/images/innerpage_07.jpg" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<a href="http://www.tusfiles.net/n7spom729f8h" target="_blank">http://www.tusfiles.net/n7spom729f8h </a><br />
<a href="http://www.tusfiles.net/7xotomrgkbeg" target="_blank">http://www.tusfiles.net/7xotomrgkbeg</a><br />
<a href="http://www.tusfiles.net/aol5b7xq6pon">http://www.tusfiles.net/aol5b7xq6pon</a><br />
<a href="http://www.tusfiles.net/33xhn86ynqz6">http://www.tusfiles.net/33xhn86ynqz6</a><br />
<div>
<br /></div>
<br />
<br />

</div>

WorldCall Hacked Data Leaked

WorldCall Hacked Data Leaked Target Worldcall Official Websites : 1: www.worldcall.net.pk 2: www.go4b.net.pk Sql vulnerabili...

+ Read more »

124 websites has been hacked by an pakistani hacker

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
                                              </div>
<h3 style="text-align: left;">
             <span style="color: red;">124 websites has been hacked by an pakistani hacker</span></h3>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
Recently Hacker from pakistan Known As “<strong>SpeeDy</strong>” Cyber Nick : DaN1 | Mr.CopyPaste Hacked 193 websites. At the time of writing, all of the affected websites still showing the defacement page.</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<a href="http://i2.wp.com/techgator.org/wp-content/uploads/2013/11/dan1.jpg" style="-webkit-transition: all 0.2s ease-out; color: #00c8ff; transition: all 0.2s ease-out;"><img alt="dan1" class="aligncenter size-large wp-image-3519" height="299" src="http://i2.wp.com/techgator.org/wp-content/uploads/2013/11/dan1.jpg?resize=798%2C393" style="border: none; clear: both; display: block; height: auto; margin: 10px auto; max-width: 100%;" width="608" /></a></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
<strong>The following Domains are defaced:-</strong></div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.salvi.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.magraid.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.galcilsi.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.anticoborgochieti.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.usplecce.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.primocircoloagropoli.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.tavolinihifi.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.campermonoscocca.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://astronascente.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.joy-village.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.nsaspa.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.decanatodibrivio.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.fise-lazio.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.dalforner.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.federterme.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.avismacerata.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://lnpsrl.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.montesole.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.flyaca.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.aumshanti.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.sailinsenigallia.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://progettoefesto.csad.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.triathlonteam.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.neuroscienzeanemos.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.hoursinmotion.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.centrobenesserehb.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://ahservizi.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.fidalma.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.bbmoccia.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.albertobertoli.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.argovenezia.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.cilentoinformatica.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.annalisacreazioni.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.centroolisticoitaliano.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.usatovip.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.amada.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.tendaggietappezzeria.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.confartigianato.av.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.dentrochefuoripiove.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.madonnadicampoe.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.europea-export.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.ready4english.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.dramma.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.hera.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.ghostshockey.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.fiorentininelmondo.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.adusbef.lombardia.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.psicologopadova.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.porte-finestre-infissi-grate-scale-parquet.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.caketops.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.flaweb.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.scuolamaternacagliari.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.collinamacchine.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.parcoteresa.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.orangepress.it/media/x.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.nomadcamp.eu/admin/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.good-migration.co.uk/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://inox.md/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.linx-lmn.ro/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.sochi.microlana.ru/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.kkrence.si/popravki/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.kkzone1.go.th/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.epdpnews.com/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.sh.mahidol.ac.th/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.cksdesignstudio.com/spaw2/uploads/files/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.matix-power.ro/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.dlfformia.it/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.uniaks.ru/spaw2/uploads/files/SpeeDy.html</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.skylinepark.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.aamaguul.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.nddcag.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://n8bmb.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://gasparannamaria.hu/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.realunitedfutbol.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.nosilos.com/J25/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://ramogieconomicforum.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.pirtonschool.org.uk/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.omertipuradedin.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.dfonte.co.za/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.fariestopandtrim.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.draiochtherbs.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.pcsitx.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.azvetdentists.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.grappenhallsportsfc.co.uk/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://livestockpromotioncameroon.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.huhuonline.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.v8x.com.au/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://windward-oahu.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://fitzroviacommunitycentre.org/joomla2/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://abbey.msmabbey.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://backyardbarandgrille.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.greenwich.k12.nj.us/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://alanderrick.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.yourwowfactor.biz/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.caritasindia.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://dentsimlab.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.conservelakecounty.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.bromyard.info/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.cvbhejo.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.donerg.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.storevertical.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.saant.org.za/files/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.kennyins.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.laikipiaonline.co.ke/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://bayareahanumantemple.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.coretrainingandtherapy.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.sog-rc27.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://sharrondansby.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.philosophicalinvestigations.co.uk/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://estro25.educase.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://kist.ac.rw/kist/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.zoomtutoring.com/joomla25/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.ayrshirebridge.co.uk/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
https://lgmo.uplb.edu.ph/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.johnwargo.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://nwsmba.amba.org.au/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://parkersburgveterinaryhospital.net/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://mobilemusicteacher.com/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.keystonechristianchurch.net/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.zl2ko.org.nz/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.talkorange.co.za/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.magicrete.in/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://www.newdimensionsda.org/images/SpeeDy.txt</div>
<div style="background-color: white; color: #494949; font-family: Helvetica, Arial, sans-serif; font-size: 15px; line-height: 27px; margin-bottom: 20px;">
http://grapeland.net/images/SpeeDy.txt</div>
</div>

124 websites has been hacked by an pakistani hacker

124 websites has been hacked by an pakistani hacker Recently Hacker from ...

+ Read more »