Tuesday, June 20, 2017
Manga Storm The Ultimate Manga Reader hack 2014
Manga Storm The Ultimate Manga Reader hack 2014
The application is 100% authentic and works without any problems. This Manga Storm The Ultimate Manga Reader hack hack is the magic formula cheat to give you indefinite resources and funds.
Be a legend in the game with the aid of Manga Storm The Ultimate Manga Reader hack hack tool. This is the quintessential hack tool to help you change the game for the ultimate domination. As soon as you load the game, open software and the Manga Storm The Ultimate Manga Reader hack cheat will scan the files to search for variables that you may alter at your advantage, giving you supreme power over other individuals.
The potency of the Manga Storm The Ultimate Manga Reader hack cheat doesn’t end at modding resources. You can fiddle with the graphics or debug pesky problems.
Even though the Manga Storm The Ultimate Manga Reader hack engine is rich with awesome features, it is unexpectedly easy to use. The interface is clean and easy to understand, and allows you to play with the quantities with just a couple of mouse clicks. You do not need any computer programming expertise, because Manga Storm The Ultimate Manga Reader hack hack tool does all the work for you and makes adjusting the game a smooth procedure. You may even download and install cheat files from the server for specific resources or missions if you do not feel like modifying the files yourself. The tutorial will guide you through the installation process, how to use the cheat tool, and how to down load any additional cheat files. It is user friendly and you will be able to start owning the game completely in no time.
The Manga Storm The Ultimate Manga Reader hack itself is frequently updated to support all the latest patches and security issues, so that you won’t encounter any problems in using this cheat. The support staff is ready to answer any questions and resolve bug reports as quickly as possible.
The Manga Storm The Ultimate Manga Reader hack has been scanned by most popular antivirus programs and tested by special selected beta testers.
Download and install Manga Storm The Ultimate Manga Reader hack now to dominate the game and make yourself into a superstar!
Requirements: Latest .NET Framework installed and DirectX: 9.0c
Manga Storm The Ultimate Manga Reader hack 2014
Available link for download
Saturday, June 17, 2017
Marvel Avenger Alliance Hack Apk Direct Download No Survey
Marvel Avenger Alliance Hack Apk Direct Download No Survey
Strategize and defeat evil forces in epic 3-on-3 combat
Level-up and customize Super Heroes
Collect and equip unique abilities for each Super Hero
Take on dozens of replayable missions
Win bonus rewards for completing Daily Operations
Get powerful rewards in PVP tournaments
Team up with friends Super Heroes to conquer missions
2. Massive Damage.
3. Player Always Dodge.
4. Mobs Disarmed.


Available link for download
Tuesday, May 16, 2017
MARVEL Avengers Academy hack No Survey Direct Download
MARVEL Avengers Academy hack No Survey Direct Download
- Blue Missions give Shards
- Green Missions give Shards.
- Increased credits on orderboard.
- Buy any credits item and sell to get twice the credits back. Buy any shard item and sell and get more credits back.
- Complete tutorial on local game. If you synced your game with Google, check out Step 1a. If you didnt sync with Google, go to Step 2.
- Open the normal app and go into account settings and log out of Google. Your local game would be there and complete tutorial on it.
- Uninstall Play Store app and install mod.


Available link for download
Saturday, May 13, 2017
Manual SQL Injection Basic Tutorial For Hack A Website
Manual SQL Injection Basic Tutorial For Hack A Website

In this post we will hack a website and obtain its data using SQL injection attack. We will not use any tools. This is one of the few tuts on this blog for which you dont need Kali Linux. You can easily carry it out from Windows machine on any normal browser. If you need to get a big picture of what a SQL injection attack actually does, take a look at this tutorial on How to Hack Website Using Sql Map in Kali Linux - Sql Injection
Finding A Vulnerable Website
The first step is obviously finding a vulnerable website. There are a lot of ways to do so. the most common method of searching is by using dorks.
Dorks
A more specific definition could be "Advanced Google searches used to find security loopholes on websites and allow hackers to break in to or disrupt the site." (from 1337mir)
Using Dorks
Now basically what a dork does is uses Googles "inurl" command to return websites which have a specific set of vulnerable words in url. For that, we need to know which words in the url make a website potentially vulnerable to a SQL injection attack. Many websites offer a comprehensive list of google dorks. For example, the l33tmir website has a list of hundreds of google dorks. However, creativity is your best tool when it comes to finding vulnerable sites, and after practicing with some google dorks, you will be able to create your own. A few dorks have been listed below. What you have to do is paste them into the google search bar and google will return potentially vulnerable sites. NOTE: Dont mind the root@kali:~# behind the code. I have implemented this on all the code on my blog, and the majority of it is really on Kali Linux so it makes sense there but not here.inurl:"products.php?prodID="
inurl:buy.php?category=
What you have to notice here is the structure of the commands. The inurl instructs google to look at the URLs in its search index and provide us with the ones which have a specific line in them. Inside the inverted commas is the specific URL which we would expect to see in a vulnerable website. All the vulnerable sites will surely have a .php in their URL, since it is an indicator that this website uses SQL database here. After the question mark you will have a ?something= clause. What lies after the = will be our code that is known to cause malfunctioning of databases and carrying out of a Sql Injection attack.
After you have used the dork, you have a list of potentially vulnerable sites. Most of them though, may not be vulnerable (i.e not the way you want them to be, they might still be having some vulnerabilities you dont know about yet). The second step is finding the actually vulnerable sites from a list of possible ones.
Testing sites for vulnerabilities
Now lets assume we used the first dork, i.e. products.php?prodID=. We then came across a site www.site.com/products.php?prodID=25. Now we have to check if that website is vulnerable or not. This is pretty simple. All you have to do is insert an asterisk at the end of the url instead of 25. The url would look somewhat like this www.site.com/products.php?prodID=
If you are lucky, then the site would be vulnerable. If it is, then there would a some kind of error showing up, which would have the words like "Not found","Table","Database","Row","Column","Sql","MysqL" or anything related to a database. In some cases, there would be no error, but there would be some berserk/ unexpected behavior on the page, like a few components not showing up properly, etc.
![]() |
A typical error message |
Finding number of columns/rows
Now we need to find the number of columns in the table. For this, we will use trial and error method, and keep executing statements incrementing the number of columns till we get an error message.
www.site.com/products.php?prodID=25+order+by+1
Effectively, we added order by 1 to the end of the original url. If there is atleast one column in the table, then the page will continue to work all right. If not, then an error will be displayed. You can keep increasing the number of columns till you get an error. Lets assume you get an error for
www.site.com/products.php?prodID=25+order+by+6
This means that the page had 5 columns, and the database couldnt handle the query when you asked for the 6th one. So now you know two things
- The site is vulnerable to SQL injection
- It has 5 columns
Now you need to know which of the columns is vulnerable
Finding Vulnerable columns
Now lets assume we are working on our hypothetical site www.site.com which has 5 columns. We now need to find out which of those columns are vulnerable. Vulnerable columns allow us to submit commands and queries to the SQL database through the URL. We now need to find which of the columns is vulnerable. To do this, enter the following into the url
www.site.com/products.php?prodID=25+union+select+1,2,3,4,5
In some cases you might need to put a - behind the 25. The page will now load properly, except for a number showing up somewhere. This is the vulnerable column. Note it down.
Lets say the page refreshes and displays a 2 on the page, thus 2 being the vulnerable column for us to inject into.
Now we know which column is vulnerable. Next part is obtaining the SQL version, since the remaining tutorial will vary depending on which version of SQL is being used.
Unification
From here on, the things will get tough if you are not able to follow what Im doing. So, we will unify under a single website. This website is intentionally vulnerable to SQL injection, and will prove highly useful since we will be doing the same thing. The purpose of introducing this site at a later stage was to give you an idea how to find vulnerable sites yourself and also find the vulnerable columns. This is what will prove useful in real life. However, to make what follows comparatively easier, we all will now hack the same website.
The actual vulnerability is here: http://testphp.vulnweb.com/listproducts.php?cat=1
Notice that the URL has the structure that you now know well. If used properly, a google dork could have led us to this site as well. Now we will replace the 1 with an asterisk

This is what you vulnerable page looks like to start with
![]() |
As you can guess, it is vulnerable to SQL injection attack |
![]() |
| 10 columns. Nothing so far. |
![]() |
12 columns. Error.... |
http://testphp.vulnweb.com/listproducts.php?cat=1+union+select+1,2,3,4,5,6,7,8,9,10,11
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,11
![]() |
| Now we can see total four numbers on the page. 11,7,2 and 9. It wont be hard to figure out which of them depicts the vulnerable column |

Now we are finally where we left out before we changed our stream. We need to find the sql version. It can sometimes be very tricky. But lets hope its not in this case.
Now get the code that told you about the vulnerable column and replace the vulnerable column (i.e. 11) with @@version. The url will look like this.
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,@@version

And the thing I said about it being tricky sometimes. Sometimes the server does not understand the @@version command directly and you need to convert it. You will need to replace @@version with convert(@@version using latin1) or unhex(hex(@@version)).
Now the information gathering part is complete. We have to move to actual download of tables. Just write down all you know about their database, table and server. You must have a real sense of accomplishment if you have followed the tutorial so far. The boring part always requires maximum motivation and determination.
Extracting tables from SQL database
Now the method to extract data is different depending on the version . Luckily its easier for version 5, and thats what youll come across most of the time, as is the case this time. All the data regarding the structure of the table is present in the information schema. This is what were gonna look at first.
In our query which we used to find vulnerable columns (i.e. testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,11), we will replace the vulnerable column with table_name and add prefix +from+information_schema.tables.
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,table_name+from+information_schema.tables

As you can see, the name of the table is character_sets. However, this is just one table. We can replace the table_name with group_concat(table_name) to get all tables
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,group_concat(table_name)+from+information_schema.tables

As you see, the ending of the last table is incomplete. To correct this, you can modify the end of the url to something like +from+information_schema.tables+where+table_schema=database()
Obtaining columns
It is similar to obtaining tables, other than the fact that we will use information_schema.columns instead of information_schema.tables, and get multiple columns instead of just one using the same group concat. We will also have to specify which table to use in hex. We will use the table events (Ive highlighted it above too). In hex its code is 4556454e5453 (You can use text to hex converter - also prefix 0x behind the code before entering it). The final code will be-
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,group_concat(column_name)+from+information_schema.columns+where+table_name=0x4556454e5453
![]() |
| We now know the columns of the table events |
Extracting data from columns
We will follow the same pattern as we did so far. We had replaced the vulnerable column (i.e. 11) with table_name first, and then column_name. Now we will replace it with the column we want to obtain data from. Lets assume we want the data from the first column in the above pic, ie. event_catalog. We will put the fol. URL-
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,EVENT_CATALOG+from+information_schema.EVENTS
![]() |
| The page didnt display properly, this means that the our query was fine. The lack of any data is due to the fact that the table was actually empty. We have to work with some other table now. Dont let this failure demotivate you. |
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,group_concat(CHARACTER_SET_NAME)+from+information_schema.CHARACTER_SETS
![]() |
| This table has a lot of data, and we have all the character_sets name. |
http://testphp.vulnweb.com/listproducts.php?cat=-1+union+select+1,2,3,4,5,6,7,8,9,10,group_concat(CHARACTER_SET_NAME,0x3a,DEFAULT_COLLATE_NAME,0x3a,DESCRIPTION,0x3a,MAXLEN)+from+information_schema.CHARACTER_SETS

Recommended Web Hacking Tutorials:
- Kali Linux Tutorial: Manually Creating a Fake AP to Capture Website Logins
- Kali Linux Tutorial: How To Brute Force Wordpress Using Wpscan Tool
- How to Hack Website Using Sql Map in Kali Linux - Sql Injection
- Kali Linux Tutorial: Find Vulnerabilities for Any Website Using Nikto
- Heartbleed Attack: Exploiting OpenSSL Vulnerability Using Metasploit
- Kali Linux Tutorial: Hack a Website login Page Password Using Wireshark
Available link for download
Thursday, May 11, 2017
Marvel Contest of Champions hack No Survey Direct Download
Marvel Contest of Champions hack No Survey Direct Download
1. No AI Attack The enemy does not attack
2. No Damage The enemy does not cause damage
3. Base Damage Sets the base damage for the player (from 0 to 5 000 000
4. AI Level Sets the complexity of the enemy (1 to 9)
5. No Special Level3 Disables third special attacks opponent
6. Auto Battle Autobot (does not work when switched on no AI Attack)


Available link for download
Saturday, April 22, 2017
Make More! v1 2 1 Hack Mod Android Apk
Make More! v1 2 1 Hack Mod Android Apk
Make More! v1.2.1 Hack Mod Android Apk Download

Category: Android Games Download
Game Type: Casual
Release Date: 06.01.2017
Language: English
Size: 23.7 MB
Developer Company: Fingersoft
File Type: .apk
Price Status: FREE
Mod: YES






Alternative Link
MOD APK Download
Available link for download
Monday, April 17, 2017
MARVEL Avengers Academy v1 10 0 Hack Mod
MARVEL Avengers Academy v1 10 0 Hack Mod
MARVEL Avengers Academy v1.10.0 Apk Hack Mod Download

Category: Android Games Download
Game Type: Adventure
Release Date: 21.01.2017
Language: English
Size: The size varies according to device.
Developer Company: TinyCo
File Type: .apk
Price Status: Free
Mod: HACK MOD





Alternative Link
MOD APK Download
Available link for download







