Tricks And Tweaks

PDF, or the Portable Document Format is ane of the most pop format for document sharing. Its popularity is mainly because PDF files are multi-platform (can last run on most devices without whatever alter inward formatting), smaller inward size, tin last opened on most devices amongst gratis software as well as are hard to edit equally they are "read only".

Despite PDF files existence "read only" past times default, at that topographic point are sure enough tools as well as software you lot tin purpose to alter the contents of a PDF file for gratis without resorting to paid software similar Adobe Acrobat.

Free Tools To Edit PDF files

2 stride PDF Editing
This basically involves converting PDF files into unopen to other format as well as thus editing the converted PDF file. After editing, you lot tin purpose a PDF author to reconvert the edited file dorsum to PDF.


If your PDF file tin last suitably edited equally a Word document, you lot tin purpose a PDF to Word converter for mo conversion. Edit the converted file as well as then, you lot tin purpose whatever gratis PDF author to recreate a PDF file. If you lot accept Open Office, you lot tin purpose its export equally PDF characteristic to create a PDF file from nigh whatever printable document.

Multivalent Browser: Multivalent browser offers minimal PDF editing inward the flat of allowing to add together annotations. It also contains several ascendancy line of piece of job tools which allow for merging as well as compressing PDF files.

Edit Meta information of PDF files
Meta Data is the information that is associated amongst a PDF file. If you lot wishing to alter this information, you lot tin purpose the gratis PDFMetaEdit to edit information similar title, author name, bookmarks as well as other creation information of a PDF document. PDFMetaEdit tin also last used to take away as well as add together passwords (encrypt) to PDF files.

Edit PDF files on Android phones
Xodo PDF Reader & Editor is a gratis application that you lot tin download on your Android based mobiles as well as tablets to write on, underline text as well as annotate PDF files as well as forms.

Advanced PDF Editors (editing text, images etc.)

The freeware tools mentioned higher upward volition last useful for most users amongst basic PDF editing requirements. However, if you lot accept advanced PDF editing needs, the higher upward tools volition non last that useful. There are unopen to advanced PDF editing tools available that are equally adept equally most paid products.

Open Office Draw
The opened upward root alternative to Microsoft Office tin also last used equally an alternative to Adobe Acrobat. All you lot request is the PDF Import extension (older version here). Then you lot tin purpose Open Office Draw to easily as well as rapidly edit PDF files. With Open Office Draw's inline editing features, you lot tin edit whatever PDF document equally easily equally you lot tin edit a Word document. It also supports adding as well as replacing images, changing font size as well as color, replacing default font-family, adding annotations, charts, shapes, tables all through an slow to purpose interface.

To charge the PDF Import extension inward Open Office, exactly opened upward Extension Manager from the Tools Menu, click on Add as well as thus choose the place of the downloaded extension. For those of you lot who desire a PDF Editor without whatever initial setup, LibreOffice, an Office suite descended from Open Office, has this extension included past times default. If you lot don't take heed the download size, Open Office Draw is exactly the best gratis PDF editor available.

Inkscape: Inkscape is a vector graphics editor that allows you lot import as well as export PDF files. You tin purpose Inkscape to choose text, icon or whatever other object on a PDF file as well as thus alter its seat or fifty-fifty delete it. It also lets you lot practice gratis mitt drawing on PDF files as well as add together annotations. While Inkscape offers unopen to actually adept features, its complex interface makes it hard for users to purpose it. Moreover, it exclusively allows you lot to edit exclusively a unmarried page at a time. You can, however, convert these to a unmarried PDF file using a PDF combiner.

PDFTools: PDFTools is a PDF administration application that supports encrypting, decrypting (remove password), joining as well as splitting PDF files. Its Stamp characteristic tin last used to add together text as well as images over a PDF file. You tin postage to the place of your choice using the X as well as Y co-ordinates. It includes a PDF creator which tin last used to create a PDF file from whatever XML document. It also supports re-arranging pages inward a PDF file.

PDFEscape
If you lot are looking for PDF editing on the go(changing bits of text to shroud your personal information or exactly filling a form), you lot tin effort PDFEscape to edit PDF files correct inward your browser. It allows you lot to modify text, images as well as add together annotations amongst the aid of custom shapes as well as arrows. One of PDF Escape's slap-up characteristic is its mightiness to password protect PDF files. It also allows you lot to shroud text amongst its white out tool (this is dissimilar from deleting it). It fifty-fifty lets you lot edit password protected PDF files as well as add together hyperlinks to spider web addresses. To purpose PDFEscape, all you lot request is a JavaScript enabled spider web browser.

GIMP: GIMP or the GNU Image Manipulation Program tin also last used equally a PDF editor. Just import whatever PDF file equally an icon or a layer, thus edit it, as well as thus purpose its export business office to larn a PDF file. The exclusively downside is that similar Inkscape, GIMP also allows you lot to edit exclusively a unmarried page at a time. You can, however, easily combine these to larn a unmarried PDF file using gratis software similar the higher upward mentioned PDFTools.

PDF-XChange Viewer: The gratis version of PDF-XChange viewer tin last used to conduct type text on PDF files. This makes this software a adept PDF flat filler. Its icon postage characteristic tin last used to insert images conduct on whatever PDF document.

PDFEdit: PDFEdit is a total fledged PDF editor for Unix-Like operating systems. Its downside is that it does non back upward editing protected or encrypted PDF files. PDFEdit has a beta version for Windows, but it didn't operate for me.

PDF too Word (.doc too .docx) are 2 document formats most estimator users run across on a frequent basis. PDF files lead maintain advantages of beingness platform independent, difficult to edit too smaller inward size. Word documents on the other mitt are slow to edit, format too read on devices that back upward them. As both of these formats lead maintain their advantages, many users lead maintain felt the ask to convert a document inward i format to the other to lead maintain payoff of the other's features.

There are many paid tools that back upward this conversion, but nigh all of them are besides expensive. There are many gratuitous online conversion tools every bit good but either they final result inward depression character conversion amongst lots of missing resources or lead maintain besides much fourth dimension due to server limitations. Most of these online tools also boundary the size of files y'all tin convert. Additionally, many people are non comfortable amongst uploading their personal files to a 3rd political party website.

In this situation, the solution to obtain high character conversion from i format to the other too that besides speedily too without compromising your privacy is past times using a programme installed on your PC. There are many gratuitous software available for this but the work amongst most of them is that similar online tools, they besides create non offering high character conversion too final result inward lots of missing resources. However, non all software lead maintain these flaws. There are certainly gratuitous products that offering quick too high character conversion from PDF to Word too vice versa. This article contains roughly such software.

In this article:
1. Convert PDF to Word
2. Convert Word to PDF

Convert PDF to Word

Open Office
The basic version of Open Office that y'all download from OpenOffice.org lacks PDF operability. To add together PDF functionality to Open Office, y'all volition ask to install the PDF Import extension. If y'all lead maintain older versions of Open Office, y'all tin exercise the older version of this extension. LibreOffice, an business office suite descended from Open Office has this extension included past times default.
While Open Office does non back upward direct conversion of PDF files to Word documents, y'all tin exercise an indirect method to hand this conversion. To create this, opened upward whatever PDF document inward Open Office Draw too re-create all its elements.(by pressing Ctrl+A followed past times Ctrl+C keyboard shortcuts inward Windows). Now, opened upward Open Office Writer too press Ctrl+V too salve the file every bit a Word document. In this way, y'all tin move out a Word document of your PDF file amongst remarkable accuracy.

You tin also straight edit the PDF file amongst Open Office Draw simply every bit easily every bit a Word document.

UniPDF
UniPDF is a modest free utility that lets y'all convert PDF files to Word documents amongst speed too accuracy. It also offers conversion of PDF files to RTF, JPEG, PNG, GIF, HTML too obviously text. While it lacks a plethora of features, it is skillful at what it promises to do; convert PDF files.

Both of these programs run on Windows 10, Windows 8.1, Windows 8, Windows 7, Windows Vista too Windows XP. It is of import to regime annotation that PDF to discussion conversion is possible exclusively if the PDF file is non a scanned icon too was created every bit a text document.

Online Tools
While the to a higher house mentioned offline tools volition last plenty for most conversion needs, it is e'er skillful to lead maintain a few options. These online tools supply accurate too fast conversion from PDF to Word.

ConvertFiles: Limits the file size to 250 MB. Offers high character conversion amongst OCR support.
ConvertOnlineFree: Limits the file size to thirty MB. Is a skillful pick but lacks OCR support.

Convert Word to PDF

Open Office tin last effectively used for this purpose. Just opened upward a Word document inward Open Office Writer too exercise its Export every bit PDF pick to instantly move out a PDF version. Similarly, y'all tin exercise Open Office to convert XLS too PPT files to PDF every bit well.

With hackers becoming to a greater extent than in addition to to a greater extent than sophisticated, most users are worried close the security of their personal data. There are many options available to protect the user’s information but none comes around encryption inwards damage of security offered. This article contains some of the best in addition to slow to role methods that allow yous to password protect in addition to encrypt of import files in addition to folders inwards Windows without spending anything.

Encrypting files inwards Windows using the Encrypting Files System (EFS)

Windows offers an inbuilt encryption method called EFS to protect sensitive information from unwanted users. EFS tin sack last used exclusively on difficult drives formatted equally NTFS in addition to on professional person in addition to premium editions of Windows 10, Windows 8.1, Windows 8, Windows Vista or Windows XP. Home editions of Windows practise non back upward this.

To encrypt files amongst EFS, follow these steps:-

1. Right click on the file or folder yous desire to protect in addition to click on Properties at the bottom of the menu.
2. This volition convey upward the Properties window. In this window nether the General tab, click on Advanced.
3. In the Advanced attributes window, tick on Encrypt contents to secure data option.
4. Click OK in addition to Apply.

If the file is encrypted successfully, its call volition by in addition to large last visible inwards greenish color.

If yous encrypt files in addition to folders amongst EFS, it would non alter how yous access those files in addition to folders. You would all the same last able to read, modify in addition to delete those files equally long equally yous are logged into the user concern human relationship that encrypted those files. However, other users from dissimilar user accounts would non last able to practise this. For example, if yous bear the encrypted file inwards a flash drive, yous would non last able to access it from other computers. To access it from other computers, yous volition demand your encryption key.


Make certain that yous backup your encryption fundamental when Windows prompts yous to practise so. It volition last required inwards instance yous desire to access the encrypted files from a dissimilar user concern human relationship or from a dissimilar computer.

To dorsum upward your encryption key, click on the Back upward now pick inwards the pop upward that comes when yous kickoff encrypt a file or folder. Then, click Next on the window titled Certificate Export Wizard. Enter a password for your certificate (make certain it is tough but also slow to remember), select a location to salve it, give it a call in addition to click Finish.

In instance Windows does non prompt yous to dorsum upward your encryption key, yous tin sack dorsum it upward from the File Encryption Certificates manager. Since, EFS relies on your user concern human relationship to give access to protected files, it is of import to select a rigid password for your Windows user account.

EFS is relatively quick in addition to hassle costless but non totally secure equally Windows stores an unencrypted version of protected files inwards the temporary folder (when yous access them) which tin sack last easily accessed past times whatsoever experienced figurer user. To overcome this weakness, ensure that yous build clean upward your temporary files amongst the Disk Cleanup utility every fourth dimension yous access your protected files.

BitLocker

BitLocker is a Windows utility that allows yous to encrypt difficult drives in addition to removable storage devices. BitLocker also uses EFS mentioned inwards a higher house amongst a shaver difference. It encrypts the entire crusade instead of encrypting private files in addition to folders.

With BitLocker too, yous wouldn’t respect much deviation piece using your figurer but if anyone else tries to access them on a dissimilar computer, he volition last shown a covert call for the password. BitLocker To Go tin sack last used to encrypt removable flash drives equally well. BitLocker also depends on the security of your Windows user concern human relationship to ensure that files stay private. Hence, it is extremely of import to role a rigid Windows password.

BitLocker tin sack last turned on inwards the Control Panel. BitLocker exclusively industrial plant on devices having TPM. In instance your PC does non accept TPM, yous volition larn an fault maxim “This device can’t role a Trusted Platform Module.” TPM is a exceptional circuit that’s built onto the motherboards of BitLocker compatible computers.

BitLocker is exclusively available on Professional editions of Windows.

7ZIP

7Zip is a costless in addition to opened upward beginning compression utility that has the pick of allowing users to create a password protected archive. The encryption offered past times 7Zip is AES-256 (AES stands for Advanced Encryption Standard), which is virtually impossible to cleft in addition to used past times everyone from giant tech companies to your adjacent door information technology expert.

7Zip tin sack also allow yous to encrypt the file names inwards the archive in addition to then that no 1 without the correct password has a clue equally to what is acquaint within the protected archive.

To encrypt files in addition to folders amongst 7Zip, either create a novel password protected archive from the 7Zip file managing director or only correct click on the folder or file yous desire to protect in addition to select “Add to archive” from the 7zip sub-menu.

You tin sack select either 7Zip’s .7z or .zip format. If yous role .zip format, an additional encryption method called ZipCrypto is available, which is also goodness but non equally secure equally AES-256. Also, if yous role a .zip archive, yous cannot encrypt file names.

7Zip supports multiple platforms, is slow to role in addition to also real fast when it comes to creating in addition to extracting archives.

VeraCrypt

VeraCrypt is a fork of in addition to successor to the extremely pop in addition to discontinued encryption software TrueCrypt. VeraCrypt claims to accept removed the issues that were raised piece security auditing TrueCrypt. It supports Microsoft Windows, Mac OS X in addition to Linux.


Like TrueCrypt, VeraCrypt is completely costless in addition to supports AES, Serpent in addition to TwoFish encryption ciphers. VeraCrypt is unproblematic to role in addition to offers real fast encryption process. VeraCrypt also allows a unmarried hidden book to last created within some other volume. The Windows version of VeraCrypt tin sack last used to create in addition to run a hidden encrypted operating system. The best business office close this software is that its code is available for review in addition to the developers claim an private security audit is existence planned.

Important Tips:

1. It is of import to banker's complaint that at that spot are several tools in addition to utilities available inwards the marketplace position that allow yous to interruption encryption in addition to passwords. The programs mentioned inwards a higher house volition maintain your information rubber from a large bulk of such tools but they, similar all methods of encryption are non infallible.
2. Even if yous encrypt a file, it can all the same last deleted. So, last certain to dorsum upward your encrypted files.
3. Make certain that yous role a memorable password in addition to maintain your encryption fundamental rubber to forestall yous from losing access to your encrypted files.

With the basis going wireless inwards every sphere of technology, the query of safety has oftentimes been raised. The same is truthful for wireless network networks alongside hackers together with Wi-Fi intruders e'er looking for ways to gain access to unsecured networks.

Security aside, at that topographic point are several reasons why yous mightiness desire to protect your Wi-Fi network. Influenza A virus subtype H5N1 secured wireless network volition non exclusively hateful reduced bills but also faster network speeds. This post service contains few uncomplicated techniques yous tin dismiss role to brand for sure that your wireless network is equally secure equally it possible tin dismiss be.

Protect your Wireless Internet Network

1) Encrypt your Wi-Fi Network: When yous role a Wi-Fi network for accessing the internet, every slice of information yous ship together with have over the air tin dismiss live on easily snooped past times anyone alongside the correct laid upward of tools. Packet sniffers tin dismiss live on used past times fifty-fifty the most novice of users to sniff your data. This way that a hacker tin dismiss non exclusively encounter which websites are yous accessing but also larn the login details of your personal together with professional person accounts.

Encryption basically involves scrambling the information that is transmitted together with received past times yous piece using a wireless network. This way that fifty-fifty if a hacker intercepts your information transmission, (s)he volition non live on able to exploit the information contained inside it.

There are 2 encryption standards available that yous tin dismiss use: WEP (Wired Equivalent Privacy) together with WPA (Wireless Protected Access). WEP is the older touchstone of encryption together with tin dismiss straight off live on bypassed inwards a affair of minutes. WPA is relatively newer but it withal has safety holes. AirCrack together with coWPAtty are 2 complimentary tools that allow anyone to easily cleft WEP together with WPA encryption using bruteforce technique. WPA2 is the latest touchstone together with is what yous must role if yous desire the highest degree of protection for your wireless network. The encryption keys used alter each fourth dimension a device accesses the network making WPA to a greater extent than hard to hack.

The encryption used past times all devices inwards the network must live on the same for the network to move properly. Your network will exclusively live on equally secure equally its to the lowest degree secure device. Make for sure all devices yous role back upward WPA2 encryption. Use a rigid encryption key. Make for sure that it is longer than 10 characters together with contains a mixture of majuscule together with pocket-size letters, numbers together with symbols. Do non role mutual words together with materials that people tin dismiss approximate virtually yous equally your password.

2) Replace default passwords on your router alongside rigid passwords: The biggest error most wireless network users brand is non changing default passwords on their routers. Hackers utilize world databases that incorporate default passwords together with usernames from virtually every manufacturer. This enables them to alter the safety settings of your router according to their needs. Using a rigid password for your router ensures that hackers together with miscreants cannot alter your network's safety settings. To alter the password on your router, see Administration settings on your router's settings page. Also, create non shop passwords inwards browsers equally they can live on easily made visible.

3) Change default SSID
Your network's SSID or Service Set Identifier is the mention of your wireless network. Usually, the SSID is the mention of the router's manufacturer along alongside the model give away of the router. Changing it to non display this information prevents yous from giving additional information virtually your router to prospective hackers.

4) Do non broadcast your SSID
Hiding SSID prevents unsophisticated together with inexperienced hackers together with wifi intruders from determining that your network exists. Hiding your SSID is relatively slowly together with the alternative to create hence is commonly nether basic wireless settings on your router's settings page. However, it is of import to annotation that or hence devices, including those running newer versions of Windows, volition present every network fifty-fifty if they cannot position its name. Moreover, your network volition withal incorporate the SSID inwards information packets making unmasking ridiculously slowly alongside tools similar inSSIDer, Kismet together with Commview for WiFi.

5) Use scary names to discourage Wi-Fi theft: If your wireless network has a mention similar C:\virus.exe, most people who mightiness otherwise access your network volition non for the fright of getting their devices infected. You tin dismiss role your inventiveness to discover to a greater extent than unsafe names for your wireless network.

6) See Connected Devices List: Almost every novel router volition guide keep a page which displays the listing of every device that is connected to the network. You should cheque this page at regular intervals to encounter that unknown devices are non leeching your network. When yous encounter an unknown device, yous tin dismiss live on for sure that someone has breached your network. You tin dismiss endeavour AirSnare, a complimentary utility which scans your network for unexpected MAC addresses together with also looks into DHCP requests.

7) Turn off Guest networking: While most routers volition guide keep invitee networking disabled past times default, it e'er pays to encounter that yous may non guide keep accidentally enabled it. Guest networking allows others to access your network.

8) Enable MAC address based filtering: Media Access Control or MAC address identifies each device connected to your network. MAC address is an alphanumeric fundamental separated past times colons. Enabling MAC address based filtering allows exclusively devices having exceptional MAC addresses to access your network. You demand to move into the MAC address of every device yous want to allow to connect to your network on your router's settings page. This prevents unknown devices from connecting to your network fifty-fifty if they know your password. To discover the MAC address of your computer, opened upward command prompt together with execute “ipconfig /all” without quotes inwards Windows based computers.

While it may preclude inexperienced users from getting access to your network, experienced hackers together with advanced users tin dismiss role a wireless network analyzer similar Nmap together with and then alter the MAC address of their computer.

9) Keep your firmware upward to date: Router vendors regularly loose firmware updates together with post service them on their websites. You should occasionally cheque the manufacturer's website to encounter if a novel firmware update has been released. Newer routers volition automatically inform yous when novel firmware is available.

10) Reduce wireless indicate range: If yous trim the attain of your wireless network, mutual feel tells that it volition preclude hackers located at a distance from detecting your network. This has the wages that if hackers create non know that a wireless network exists, they volition non endeavour to interruption into it. You tin dismiss house your router at places which would block the Wi-Fi signals. While this technique is advantageous, a hacker groovy on hacking into your network volition simply guide keep to role a larger antenna to pick upward your router's signals. Moreover, reducing the attain of your wireless network mightiness motility troubles for genuine users.

11) When non using your network network, plough it off: This is self explanatory. If yous are non using your network, turning it off saves yous from giving extra fourth dimension to hackers to endeavour together with hack into your wireless network. While it may live on impractical to plough off your network every fourth dimension yous are non using it, it withal is advisable to create hence during extended periods of non use.

If yous follow all these techniques, your Wi-Fi network volition live on a lot to a greater extent than protected together with hackers volition guide keep a tough fourth dimension breaking into it.

Windows automatically creates an Administrator concern human relationship amongst elevated privileges during the installation process. We generally demand to access it to perform tasks express entirely to arrangement Administrators. These are tasks performing which lawsuit inwards the UAC scream for for confirmation fifty-fifty if y'all are using an concern human relationship amongst administrative privileges. The elevated Administrator concern human relationship is disabled past times default inwards Windows 7, Windows 8, Windows 8.1, Windows 10 together with Windows Vista.

To activate it, y'all demand to utilisation whatever i of the the next elementary methods.

Important: It is recommended to entirely utilisation this concern human relationship for troubleshooting purposes together with disable it i time the chore is complete. Even if y'all create move out it enabled, protect it amongst a rigid password to foreclose unauthorized access.

Enable/ Disable the Administrator Account Using the Elevated Command Prompt

Command Prompt together with guide Run every bit Administrator. Windows eight together with 8.1 users, search for CMD on the Start enshroud together with inwards the results returned, correct click on Command Prompt together with guide Run every bit Administrator. Windows 10 users, search for CMD inwards the showtime bill of fare together with press Ctrl+Shift+Enter.

2. In the Elevated Command Prompt, type together with execute the next command.

net user administrator /active:yes

3. You should encounter a message indicating that the ascendance was completed successfully.

4. Upon logging out, y'all volition encounter the Administrator concern human relationship available on the login screen.

Disable the built-in Administrator account

To disable the Administrator account, type execute the next ascendance inwards Step 2.

net user administrator /active:no

This volition disable the Administrator concern human relationship together with it volition no longer seem on the login screen.

Enable the Administrator concern human relationship using the Local Users together with Groups Manager

1. Press Windows key+R to opened upward the Run dialog box.

2. In it, type lusrmgr.msc together with press Enter. This volition showtime the Local Users together with Groups Manager.

3. In the Local Users together with Groups Manager, click on Users inwards the left manus pane.

4. Then, inwards the move expanse on the correct side, double click on Administrator.

5. In the next dialog box, uncheck the Account is disabled pick together with click OK.

6. Administrator concern human relationship volition endure at nowadays available on the login screen.

To disable the Administrator account, cheque the "Account is disabled" pick inwards pace 5.

This method volition entirely move if y'all are using Professional or Enterprise editions of Windows 7, Windows 8(.1) together with Windows 10. If y'all are using habitation together with basic versions of these operating systems, this method volition non move for y'all every bit Local Users together with Groups director is non available on them.

Enable or Disable the Administrator concern human relationship using the Local Security Policy Editor

1. Press Windows key+R to opened upward the Run dialog box.
2. Type secpol.msc together with press Enter. This volition showtime the Local Security Policy Editor.

3. In the Local Security Policy Editor, navigate to Local Policies\Security Options.

4. In the move expanse on the correct side, double click "Accounts: Administrator concern human relationship status."

5. In the next dialog box, encircle Enable or Disable to respectively enable together with disable the Administrator account.

6. Press OK. Log off to the login enshroud to encounter the Administrator account.

Local Security Policy Editor is non available on habitation editions of Windows.

SQL Injection attacks with Havij

This is a fictional adventure with fictional characters that have fictional (non)skills based on true events. This post was created for informational purposes only and no admins lost their job during the writing of this story. It was inspired by Troy Hunt's "Hacking is child's play" article.

Bob, a 20-something year old boy, never considered himself a computer “guru”. He started using computers around the age of 18, late compared to his friends. What he lacked in experience, he gathered through patience.

Saturday morning news, July 2012: Yahoo voices was breached, half a million emails and passwords were leaked. The attack was made possible due to a SQL injection flaw on their servers.

 

SQL injection? Sound like a medical term. Bob moves to his computer and starts typing:

He goes through the results, reads various topics and his eyes fall on: 

He was never very tech-savvy so this might be what he was looking for. Another search follows:

Bam, first results, his beloved piratebay. The torrent is small in its size so it should be ready soon enough. In the meantime he'll grab a coffee, smoke a cigarette or two and wait.

Minutes later when he returns, the download session is complete. He registers – by using the all-too-easy provided steps - and fires-up the application. 

But, he remembers that he needs some websites to test it on. Opens Firefox again, set's the homepage to google.uk and enters:

This is the google “dork” he choose from a list. It's an example of “advanced search string operators” - termed by some people as “dorking”. Since Bob is inexperienced, he doesn't really care what these are or why they're named “dorks”. 

He starts copying and pasting the available results into Havij. First site doesn't work, Havij returns:

MySQL error based injection method cant be used!

MySQL time based injection method can't be used!

He moves on to the other results. Finally, one site seems to be vulnerable, he pressed “Analyze” and in less than 5 seconds:

This is getting interesting. From all the tables, only one seems to have the data he's looking for: labeled_user. He selects the table and clicks on “Get columns”. The important columns are there:

He selects three of them: email, username and password, then presses on “Get data”. Finally, he has access to the admins usernames and passwords. But the passwords are encrypted so he needs to dig-on.

Havij has an MD5 decryption option available, let's try that one. He tries with the first encrypted password - Havij is using online resources to decrypt passwords.

Success! The results came in seconds and the password has been revealed: johnC1980 – it's a combination between the name of the web admin and his birthday dates - common password combination. Bob moves to the “Find admin” tab and clicks on start. The program found something like nameofthesite.co.uk/admin . He pastes the link into his browser and tries the username and password combination:

admin

John121980

 

He's in. It was easier than he thought and now he has access to admin panels of this recruitment agency from the UK. He'll dig more into it tomorrow but for now he's done. He wants to celebrate his script-kiddie success.