Social Networks have a wealth of information to collect ! :) Check this out ! http://xc0re.net/web/social-network-information-harvesting-snih/
Forum: News and Links

Must Read !!! http://xc0re.wordpress.com/2012/05/23/psychological-warfare/
Forum: News and Links

iGuard Biometrics Access Control Webserver Cross Site Scripting Zeroday vulnerability !! http://www.xc0re.net/index.php?p=1_25_iGuard-Biometrics-Access-Control-Webserver-XSS
Forum: Vendor Talk

I wrote a little blog post for access restriction bypass ! Its in a very simple jargon. Even a newbie would understand what a Tunnel is ! :) https://xc0re.wordpress.com/2011/12/25/bypass-online-filter-restriction/ Peace !
Forum: News and Links

yeh ! :D
Forum: News and Links

1. Locate the person they wish to target 2. Click on the "Report/Block" button. 3. Choose "Inappropriate Profile photo", click "Continue" 4. Select the "Nudity or pornography" option, click "Continue" 5. Only check "Report to Facebook", click "Continue" 6. Only select "Help us take action by selecting additional photos
Forum: News and Links

Hey people ! Check out the latest blog ! http://xc0re.wordpress.com/2011/12/06/facebook-a-datamining-tool/ Peace !
Forum: News and Links

Thank you so much for all the help !! I really appreciate it !
Forum: Obfuscation

Thanx for the help guys ! But the thing is that fsockopen is also not allowed on the remote machine !! I have been running my own shell using almost the same method but it gives an fsockopen not allowed ! :(
Forum: Obfuscation

Hello! I am facing this problem ! While pentesting I was able to upload a webshell onto the server. The problem is that the webshell isnt able to BIND a shell or even connect back to my box running netcat. Even if I want to telnet to my box it doesnt connect. What my analysis is that system() and socket_create() is blocked by the server. My question! How can I bypass it to get a tty she
Forum: Obfuscation

Hey there ! I was pentesting a server when i found that the webapp is vulnerable to SQL Injection . n the server is MS SQL , now the problem is that when i put a hack sign "'" in the login field , it gives an sql error ! n then when i give a 'or '1'='1 , ideally it should login but it comes back to the login page saying that the login or password is wrong ! The second problem i a
Forum: SQL and Code Injection

Thank you so much ! :)
Forum: SQL and Code Injection

I am testing a site which is vulnerable to sql injection ! but as soon as i enter UNION all SELECT **************** , it blocks my request ! is there any way to bypass it !? The webapplication firewall is dotDefender !
Forum: SQL and Code Injection

cool !
Forum: Full Disclosure

This is a website just like Soundclick ! http://www.muziboo.com/search/all?q=%22%3E%3Cscript%3Ealert%281%29%3B%3C%2Fscript%3E%3C%22&search.x=0&search.y=0
Forum: XSS Info

http://www.thedjlist.com/login.php?e=1&mail=%27%3E%3Cscript%3Ealert%281%29;%3C/script%3E%27
Forum: XSS Info

hey !! the thing is ! when ever i inject %22%3E%3C%73%63%72%69%70%74%3E%61%6c%65%72%74%281%29%3B%3C%2F%73%63%72%69%70%74%3E%22 (><script>alert(1);<script>) through post into the email field in login.php ,it echos the whole shit in the username field so i thought that could mean a potential XSS . but then i saw the reply : which contains the script : <script type="te
Forum: XSS Info

Basically currently am a Security consultant at the firm called interactive convergence n have also started my own consultancy stuff so if any consultancy help required contact me ! or post here ! ;)
Forum: Jobs

hey ! i do freelance penetration testing , am in PK ! if some one interested, please PM me !
Forum: Jobs