attack – Adwiteeya Agrawal | Home https://adwiteeya.com Security fanatic. Reverse Engineer and Web App Specialist. Sun, 09 Sep 2012 13:10:13 +0000 en-US hourly 1 https://wordpress.org/?v=7.0.7 The SQL injection Presentation. https://adwiteeya.com/the-sql-injection-presentation/ https://adwiteeya.com/the-sql-injection-presentation/#comments Sat, 18 Aug 2012 02:07:30 +0000 http://adwiteeya.com/blog/?p=165 Hi, so we have this subject called DBMS (database management system) which is taken up by Miss. Nishtha Jatana. Nishtha maam follows a different routine for her classes…a rather constructive one. She converts her initial 2 – 3 tutorial classes into presentations that are delivered by the students. If you don’t know what a tutorial class is.. it is basically a kind of an extra class where students can ask doubts or there can be revision of topics or some numerical problems related to the topics can be done. Now the presentations are conducted on a voluntary basis. There is no compulsion, so i decidedto give a presentation on SQL injection. Off course, this was the topic that was closely related to both DBMS and security. So I had the presentation scheduled for 13th august at 4:30pm. BUT I reached the room 10 minutes late! and then my laptop for some reason(winsock reset) did not connect to tata photon that wasted another 20 minutes so i was practically left with 20 minutes only… we (initially i and my friend were giving the presentation together) started the presentation but offcourse it did not end and also there were only 6 students in the class :D . So maam postponed it to 17th august at 2:20pm and the awesome part was she booked the seminar hall !!! and also I had two periods for the presentation!!! and one of the periods was a lecture!! not a tute!! I really thank her for making me do this… because I too learned a lot while researching on SQLi.

Though I had in my mind that 2 periods! thats long …am I really gonna be able to make it till then..! Allright so this time the presentation in the seminar hall and all my classmates present there! :) The best part is that I knew they were bored like hell… obviously its not of there interest … but they supported me… they were quite and occasionally tried listening as well.. :) Thanks to them for being awesome. :) Now I started with the presentation (this time only I was doing it) and noticed that even my proctor Saba maam was present there… Then it went on ….things worked fine.. one of examples took time hence was not completed on the spot… like you know when your software does not recognize the version of the DBMS on the server… But apart from that it was nice… it went how i had planned… and also i loved the complements … in fact I got the best compliment from my proctor. She said that it was really practical… and generally seminars are not so practical!!! And that pretty much is the motto of my life… to keep things practical. :) Then my classmates’ comments… which actually gave me the right feedback and scope for improvement… Things like i need to take breaks in between, i have to interact more with the audience, include less of backtrack and I could use the zoom tool’s bar feature rather than zooming the entire screen. I would keep that in mind next time :) … and lastly the shocking part was i fucking took the entire too periods!! sorry classmates. :D
Also my offer of sharing the resources for a total of more than 12 types of sql injections is still open if you buy me a coke. :D

]]> https://adwiteeya.com/the-sql-injection-presentation/feed/ 6 That’s what i learned https://adwiteeya.com/thats-what-i-learned/ https://adwiteeya.com/thats-what-i-learned/#comments Wed, 09 May 2012 09:07:28 +0000 http://adwiteeya.com/blog/?p=58 Ohkay so there is this software called the metasploit, for hackers its what a wand is for a wizard. The metasploit is a framework, a library of all the exploits and payloads. What happens is basically, that an application may be vulnerable to a certain code..that is for a particular input the application might crash, if that input is converted into a file such that it can attack the application then it is called an exploit. Also there is something that is called as the “PAYLOAD” it is generally the malicious code that is added to the exploit code so that after the exploit has executed the control passes to the payload and a malicious code gets executed, it can act like a trojan and fully compromise your pc or can execute arbitrary shell commands, perhaps it can do pretty much anything you can think of….

Now I recently hacked one of my neighbor’s wifi and then scanned the network i found out that he was using a couple of devices… an Iphone(i came to know that it was an iphone during a conversation with my neighbor… as such the OS fingerprints were not detected on nmap.) …some nokia phone and a desktop….the desktop was a windows machine(with the ip 192.168.1.11) …windows xp sp2. But the problem was he had his firewall on … So one day he came online on facebook..so I asked him to switch off his firewall as that can create problems on a computer…and people tend to fall for things like this…so did he. :P

So the very next day I was online on facebook and i saw that he too was online at around 6:30 pm… so i quickly ran the metasploit loaded the exploit and attacked his machine… i did not expect that this would be successful but it was. :D  i had the meterpreter session running in less than a minute….i was in his machine with the power to do anything. :D
And just for fun i promptly sent a message box to his pc saying “You have been hacked”… aaaahhhh :( that was the mistake… this is the reason i am writing this post.. Whenever…mind my words WHENEVER…you hack something…stay silent dude :D ….

When he received this message box he came to know it was me… had a clue atleast(as he told the same later)… i quickly took screenshots of his desktop as is my habit.. then in around less than 5 second my phone was ringing and it was him calling :D Now that made me laugh! i was caught by the obvious proof!. so i had to tell him to switch on his firewall to stay protected.. But had i not sent that message box… and rather installed a telnet server on his computer and maintained a life long access to his pc… that would have been so much better… but aah! you learn from your mistakes… i learned to stay silent.

Now i cannot go into his pc anymore… there were millions of things i could have done…played around in so many ways if i had not made that mistake…. but never mind…mistake done…lesson learned.. :)

]]> https://adwiteeya.com/thats-what-i-learned/feed/ 4