ဧည္႔စရင္း


hit counter

Sunday, January 28, 2024

How To Fetch Data From The Database | Tutorial 4


Welcome to my another PHP and MYSQL tutorial. In the previous I've discussed about the data insertion into database by using PHP and MYSQL. So i did successfully in the previous video.

In this video tutorial I'll discuss How to fetch data from the database called as data fetching. It's really a simple thing to access your data which is in database. You just have to do a little work for this. For fetching data you have follow some steps.

How to Fetch Data from Database

Step 1:

Make a connection with your database which i did in the previous blog.

Step 2:

If you wanna fetching a values in "form" or in a table so just have to create a form, table or whatever you want in HTML. I've created a table where I'll show you how to fetch data in table form.

Step 3:

Write a query SELECT * FROM table_Name;

Step 4:

Create a Loop for fetching all the data on a single click. 

Step 5:

Create variables for the sake of storing a different values from the combined values in the loop variable like:

//while loop to fetch all the values from the database and stored in the variable named "row".
while($row = mysql_fetch_array(mysql_query($conn,$query))){

$name = $row['username']; //$name will save all the username values from the loop variable 'row'.
$pass = $row['password']; //$pass will save the password values from the loop variable 'row'.

}

Now watch the video for better understanding.


Related news


  1. Physical Pentest Tools
  2. Beginner Hacker Tools
  3. Game Hacking
  4. Pentest Tools For Windows
  5. Hacking Tools Kit
  6. Hacker Security Tools
  7. Hacker Tools Free Download
  8. Hacking Tools Usb
  9. Pentest Tools List
  10. Hacker
  11. Hacker Tools Mac
  12. Top Pentest Tools
  13. Pentest Tools Framework
  14. Hacking App
  15. Hacking Tools Kit
  16. Hacking Tools Windows
  17. Hacker Tools Github
  18. Hacking Tools Pc
  19. Pentest Tools Website
  20. Hacking Apps
  21. Pentest Tools For Windows
  22. Pentest Tools Android
  23. Hacking Tools For Mac
  24. Hack Tools
  25. Kik Hack Tools
  26. Hacker Tools Software
  27. Hacker Tools 2020
  28. Hacking Tools Online
  29. Hacker Tools List
  30. Hack Tools
  31. Wifi Hacker Tools For Windows
  32. Tools For Hacker
  33. Hacker Tools
  34. Hack App
  35. Beginner Hacker Tools
  36. Pentest Tools Android
  37. Hack Tool Apk
  38. Hacker Techniques Tools And Incident Handling
  39. Hack Apps
  40. Hacker Tools
  41. Hacking Tools For Pc
  42. Hack Tool Apk No Root
  43. Hacking Tools For Kali Linux
  44. What Is Hacking Tools
  45. Hack Tools Mac
  46. Pentest Tools Free
  47. Hacking Tools Github
  48. Github Hacking Tools
  49. Termux Hacking Tools 2019
  50. Hacker Tools Online
  51. Hacking Tools For Beginners
  52. Nsa Hack Tools
  53. Hacker Tools Free
  54. Hacker Tools Free Download
  55. Pentest Tools For Ubuntu
  56. Pentest Tools Linux
  57. Hackers Toolbox
  58. Pentest Box Tools Download
  59. Hacker Search Tools
  60. Hacking Tools For Windows Free Download
  61. Hacks And Tools
  62. Hack Apps

Hacking Windows 95, Part 1

During a CTF game, we came across very-very old systems. Turns out, it is not that easy to hack those dinosaur old systems, because modern tools like Metasploit do not have sploits for those old boxes and of course our "133t h4cking skillz" are useless without Metasploit... :)

But I had an idea: This can be a pretty good small research for fun.

The rules for the hack are the following:
  1. Only publicly available tools can be used for this hack, so no tool development. This is a CTF for script bunniez, and we can't haz code!
  2. Only hacks without user interaction are allowed (IE based sploits are out of scope).
  3. I need instant remote code execution. For example, if I can drop a malware to the c: drive, and change autoexec.bat, I'm still not done, because no one will reboot the CTF machine in a real CTF for me. If I can reboot the machine, that's OK.
  4. I don't have physical access.
I have chosen Windows 95 for this task. First, I had to get a genuine Windows 95 installer, so I visited the Microsoft online shop and downloaded it from their official site.

I installed it in a virtualized environment (remember, you need a boot floppy to install from the CD), and it hit me with a serious nostalgia bomb after watching the installer screens. "Easier to use", "faster and more efficient", "high-powered performance", "friendly", "intuitive interface". Who does not want that? :)






Now that I have a working Windows 95 box, setting up the TCP/IP is easy, let's try to hack it!

My first tool is always nmap. Let's scan the box! Below I'm showing the interesting parts from the result:

PORT      STATE           SERVICE       VERSION 139/tcp   open            netbios-ssn 137/udp   open|filtered   netbios-ns 138/udp   open|filtered   netbios-dgm Running: Microsoft Windows 3.X|95 OS details: Microsoft Windows for Workgroups 3.11 or Windows 95 TCP Sequence Prediction: Difficulty=25 (Good luck!) IP ID Sequence Generation: Broken little-endian incremental 

The first exciting thing to note is that there is no port 445! Port 445 is only since NT 4.0. If you check all the famous windows sploits (e.g., MS03-026, MS08-067), all of them use port 445 and named pipes. But there are no named pipes on Windows 95!

Because I'm a Nessus monkey, let's run a free Nessus scan on it!

Only one critical vulnerability found:
Microsoft Windows NT 4.0 Unsupported Installation Detection

Thanks for nothing, Nessus! But at least it was for free.

Next, I tried GFI Languard, nothing. It detected the machine as Win95, the opened TCP port, and some UDP ports as open (false-positive), and that's all...

Let's try another free vulnerability scanner tool, Nexpose. The results are much better:
  • CIFS NULL Session Permitted  
  • Weak LAN Manager hashing permitted
  • SMB signing not required
  • Windows 95/98/ME Share Level Password Bypass   
  • TCP Sequence Number Approximation Vulnerability  
  • ICMP netmask response
  • CIFS Share Readable By Everyone
I think the following vulnerabilities are useless for me at the moment:
  • Weak LAN Manager hashing permitted - without user interaction or services looking at the network, useless (I might be wrong here, will check this later)
  • TCP Sequence Number Approximation Vulnerability - not interesting
  • ICMP netmask response - not interesting
  • CIFS Share Readable By Everyone - unless there is a password in a text file, useless
But we have two interesting vulns:
  • CIFS NULL Session Permitted  - this could be interesting, I will check this later ...
  • Windows 95/98/ME Share Level Password Bypass - BINGO!
Let me quote Nexpose here:

"3.2.3 Windows 95/98/ME Share Level Password Bypass (CIFS-win9x-onebyte-password)

A flaw in the Windows 95/98/ME File and Print Sharing service allows unauthorized users to access file and print shares by sending the first character of the password. Due to the limited number of attempts required to guess the password, brute force attacks can be performed in just a few seconds.

Established connection to share TEST with password P."

The vulnerability description at MS side:

For example if the password is "Password" (without quotes) and the client sends the password "P" (without quotes) and the length of 1, the client is authenticated. To find the rest of the password, the attacker increments the length to 2 and starts guessing the second letter until he reaches "PA" and gets authenticated again. As share passwords in Windows 95 are not case sensitive, "Pa" and "PA" will also be accepted. The attacker can continue to increment the length and guessing the next letter one-by-one until he gets the full "PASSWORD" (as the maximum length is 8 characters).

I believe all characters between ALT+033 and ALT+255 can be used in the share password in Windows 95, but as it is case insensitive, we have 196 characters to use, and a maximum length of 8 characters. In worst case this means that we can guess the full password in 1568 requests. The funny thing is that the share password is not connected to (by default) any username/account, and it cannot be locked via brute force.

Luckily there is a great tool which can exploit this vulnerability:

Let's check this tool in action:


W00t w00t, it brute forced the password in less then 2 seconds!

Looking at a wireshark dump we can see how it is done:


As you can see, in the middle of the dump we can see that it already guessed the part "PASS" and it is brute-forcing the fifth character, it founds that "W" is the correct fifth character, and starts brute-forcing the sixth character.

If we are lucky with the CTF, the whole C:\ drive is shared with full read-write access, and we can write our team identifier into the c:\flag.txt. But what if we want remote code execution? Stay tuned, this is going to be the topic of the next part of this post.

Related news


Saturday, January 27, 2024

Hackerhubb.blogspot.com

Hackerhubb.blogspot.comMore articles
  1. Hacks And Tools
  2. Hacking Tools For Pc
  3. Hacker Techniques Tools And Incident Handling
  4. Hacker Tools For Ios
  5. Pentest Tools Linux
  6. Hacks And Tools
  7. Hackrf Tools
  8. How To Hack
  9. Hacking Tools Hardware
  10. Hacking Tools Usb
  11. Hackers Toolbox
  12. Hacking Tools For Kali Linux
  13. Hack Tools
  14. Hacker Tools For Ios
  15. Free Pentest Tools For Windows
  16. Pentest Tools Github
  17. How To Install Pentest Tools In Ubuntu
  18. Hacking App
  19. Pentest Box Tools Download
  20. Hack Tools Download
  21. Pentest Tools For Android
  22. New Hack Tools
  23. Pentest Recon Tools
  24. Hacking Tools 2019
  25. Hacker Tools List
  26. Hacker Tools For Pc
  27. Hacker Tools 2019
  28. Hacking Tools Online
  29. Hacking Tools Free Download
  30. Hackrf Tools
  31. Pentest Tools Linux
  32. Pentest Tools Windows
  33. Hacking Tools 2020
  34. Android Hack Tools Github
  35. Hacking Tools Hardware
  36. Pentest Tools Website Vulnerability
  37. Hacking Tools Download
  38. Pentest Tools Free
  39. Hack Tool Apk No Root
  40. Hacking Tools For Windows 7
  41. Black Hat Hacker Tools
  42. Hacker
  43. Hacking Tools Windows
  44. Usb Pentest Tools
  45. Black Hat Hacker Tools
  46. Hacking Tools For Kali Linux
  47. Best Pentesting Tools 2018
  48. Pentest Recon Tools
  49. Kik Hack Tools
  50. Pentest Tools Online
  51. Hacking Tools Hardware
  52. Hacker Tools For Mac
  53. Hack Tools For Pc
  54. Hack Tools Github
  55. World No 1 Hacker Software
  56. Pentest Tools Port Scanner
  57. Hacker Tools Mac
  58. Hacker Tools Github
  59. Hack Tools Online
  60. Pentest Tools For Ubuntu
  61. Termux Hacking Tools 2019
  62. What Is Hacking Tools
  63. Hack Apps
  64. Hacker Techniques Tools And Incident Handling
  65. Hack Tools For Ubuntu
  66. Hacking Tools Name
  67. How To Hack
  68. Hacker Tools For Windows
  69. Hacking Tools Download
  70. Pentest Recon Tools
  71. Hack Tools Github
  72. Hacker Tools Windows
  73. Pentest Tools Bluekeep
  74. Hacker Tools Apk Download
  75. Hacker Security Tools
  76. Hackers Toolbox
  77. Hacker Tools Github
  78. Hack Apps
  79. Termux Hacking Tools 2019
  80. Usb Pentest Tools
  81. Pentest Tools Tcp Port Scanner
  82. Hack Tools Github
  83. Hacker Hardware Tools
  84. Hacking Tools Hardware
  85. Pentest Tools Framework
  86. Hacking Tools Pc
  87. Hacking Tools Github
  88. Hacker Tools Apk
  89. Hacker Tools Hardware
  90. How To Install Pentest Tools In Ubuntu
  91. Hacking Tools For Mac
  92. Wifi Hacker Tools For Windows
  93. Hack Tools Online
  94. Hack Tools Mac
  95. Hack Tools Download
  96. Hack Tools Pc
  97. Pentest Tools Subdomain
  98. Hacker
  99. Blackhat Hacker Tools
  100. Hack Tools For Windows
  101. Pentest Tools Review
  102. Hack App
  103. Game Hacking
  104. How To Make Hacking Tools
  105. Pentest Tools Windows
  106. Best Pentesting Tools 2018
  107. Pentest Tools Review
  108. Hacking Tools Mac
  109. Pentest Tools
  110. Hacker Tools Linux
  111. Hacker Tools Github
  112. Pentest Tools Kali Linux
  113. Hack Tool Apk No Root
  114. Hack Tool Apk No Root
  115. Github Hacking Tools
  116. Hacker Tools For Mac
  117. Hacking Tools For Windows 7
  118. Hack Tools For Pc
  119. Hacking Tools Mac
  120. Pentest Tools Open Source
  121. Hack Tools Mac
  122. Pentest Tools Bluekeep
  123. Pentest Tools Alternative
  124. Pentest Tools Github
  125. Hacking Tools Hardware
  126. Pentest Tools List
  127. Hack Tools 2019
  128. Hacker Tools For Windows
  129. Game Hacking
  130. Pentest Tools Android
  131. Pentest Box Tools Download
  132. Hak5 Tools
  133. Hack Tool Apk No Root
  134. Hacker Tools 2020
  135. Pentest Tools Download
  136. Hacker Hardware Tools
  137. Tools 4 Hack
  138. Hacking Tools Name
  139. What Is Hacking Tools
  140. Hack Apps
  141. Pentest Tools Online
  142. What Are Hacking Tools
  143. Pentest Tools Windows
  144. Hack Website Online Tool
  145. Best Hacking Tools 2019
  146. Hack Tools For Ubuntu
  147. Hacker Tools For Mac
  148. Best Hacking Tools 2019
  149. Pentest Tools Bluekeep
  150. Pentest Tools Apk
  151. Pentest Tools For Windows
  152. What Is Hacking Tools
  153. Pentest Reporting Tools
  154. Pentest Tools Alternative
  155. Hack Tools Github
  156. What Are Hacking Tools
  157. Pentest Reporting Tools
  158. Pentest Tools For Ubuntu
  159. Ethical Hacker Tools
  160. Hacker Tools Apk
  161. Termux Hacking Tools 2019

Top 5 Best TV Series Based On Hacking & Technology 2018

Best TV Series Based On Hacking & Technology 2018

Top 5 Best TV Series Based On Hacking & Technology 2018

Top 5 Best TV Series Based On Hacking And Technology 2018

Well, if you are a tech fanatic then you will love watching TV shows which are based on hacking and technology. If you are a tech geek, then you will know that hacking stuff in movies/serials always generates glamor and mystery and adds that special oomph factor to the movie or Tv SHOW.
However, there are not much movies/ or TV serials made on hacking and technology. Technology is rapidly becoming the key point in human lives. The previous year we have seen how hackers had made their marks on giant companies. So, in this article, we are going to discuss top TV shows which have to hack as the central theme. So, have a look at the list.

#1 Mr. Robot

Mr. Robot: Best TV Series Based On Hacking & Technology 2018
Mr. Robot: Best TV Series Based On Hacking & Technology 2018
Well, the reason why I listed Mr. Robot on the top is because this show has millions of followers and this is the first show that portrays an elite hacker. The elite hacker group uses computers, smartphones and many other technologies to penetrate secure network to take down evil corporation while being anonymous. The show displays the life of a young programmer named Elliot who works as a cyber-security engineer and a vigilante hacker by night.

#2 Silicon Valley

Silicon Valley
Silicon Valley
This TV series displays the tech and hacking with a bit of comic touch. The series shows the competition between techies in the high-tech gold rush of modern Silicon Valley. What's more interesting is the people who are more qualified are least successful whereas underdogs are making it big. This show is running successfully for three years now.

#3 The IT Crowd

The IT Crowd
The IT Crowd
The IT Crowd is very popular series and is running successfully for eight years from 2006 to 2013. It is not like Mr.Robot it has its moments of hacks. The series shows the comedic adventures of a rag-tag group of technical support workers at a large corporation.

#4 Person Of Interest

Person Of Interest
Person Of Interest
It is one of the best TV series made till now. You will get to see the humor, twists, and lots of other things. In this show and intelligent programmer built and AI (Artificial intelligence) that helps to stop the crimes in the city. The show will definitely give you chills.

#5 Chuck

Chuck: Best TV Series Based On Hacking & Technology 2018
Chuck: Best TV Series Based On Hacking & Technology 2018
The TV series was somehow popular and ran from 2007 to 2013. The show shows the character of a young hacker and nerd who accidentally downloads US Govt, secrets into his brain and there is where the story starts CIA and NSA agents protect him and at the same time exploit him.

Related news