Malaysia mymasjid.net.my’s Web Vulnerability, MySQL Injection

February 2, 2010 PlanetCreator 0 Comments 0 tags

PlanetCreator has reported another critical MySQL Injection (vulnerability) on www.mymasjid.net.my This vulnerability has been alerted to :- Webmaster : [email protected] Applications: ———— PlanetCreator’s_Universal_Advanced_Internet_Securi ty_T00L System Time: ———— (UTC+08:00) Kuala Lumpur,

Read More

Local File Inclusion (LFI) tutorial

January 28, 2010 PlanetCreator 0 Comments 0 tags

This tutorial will guide you into the process of exploiting a website through the LFI (Local File Inclusion). First lets take a look at a php code that is vulnerable

Read More

Blind SQL Injection

January 27, 2010 PlanetCreator 0 Comments 0 tags

Blind injection: you dont actually see anything, you just see how the server responds.Blind injection is a little more complicated/time consuming, but when your injection is multi-select and union isn’t

Read More

MSSQL – injection Tutorial

January 26, 2010 PlanetCreator 0 Comments 0 tags

MSSQL – injection ########################### 1.1 Introduction 1.2 How to ask Vulnerability page? 1.3 How to prove that the site of weakness? 1.4 How to find version / name of the

Read More

[FUD] Simple command-line binder

January 26, 2010 PlanetCreator 0 Comments 0 tags

First of all, why a command-line binder? Automation. Instead of sitting there binding individual, or even groups of files yourself, you can easily automate the binding process by using a

Read More

Download Execution with Java

January 25, 2010 PlanetCreator 0 Comments 0 tags

This tutorial will show you how to use java applets within your website which automatically download and execute your malware onto the visitor’s computer. Some people may of heard about

Read More

Infection via HTML

January 21, 2010 PlanetCreator 0 Comments 0 tags

Edit the code on what and how you need it, and yes this is detectable  in many cases, but you could insert a small FUD downloader to be  downloaded via

Read More