Instructions for using jSQL Injection, a multifunctional tool for finding and exploiting SQL injections in Kali Linux. Instructions for using jSQL Injection - a multifunctional tool for searching and exploiting SQL injections in Kali Linux Br

Link shortening is one of the best and simple methods making money online in 2017. Link shortening services allow you to make money when you shorten long links. This type earning money is available to everyone, even those who do not have their own website or blog, but if you have one, then that’s even better. You can place shortened links wherever it is convenient for you - on your website\blog, in in social networks, such as Vkontakte, Twitter, Odnoklassniki, Facebook, Google+ or any other social networks.

Once someone clicks on your shortened link, you will receive a cash reward for this. This is perhaps one of the easiest methods of earning money. Just sign up for one of the link shortening services and earn money just sitting at home. Now, in order to make money on the Internet, you don’t need to have any technical skills, everything is as easy as possible.

Here are the best high-paying link shortening services of 2017

1.

It can be called a “historical” service, since it has been working for a very long time, and is considered the oldest in the field of link shortening services. But due to its age, the service has an order of magnitude more functions than other similar services. The minimum payout amount is only $5. The service also allows you to earn money by inviting referrals. For inviting referrals, you will receive 20% of their earnings. You can make quite a bit of money from this, just imagine that your friend earns $100, and you will receive 20% of this amount for inviting him. And 20% of $100 is as much as $20, not bad, right?

Quite a young service, but it has already proven itself very well among link shortening services that are willing to pay for clicks. The service has pretty good functionality, for example: Mass Shrinker, Quick Link, and full page script (Full Page Script). You can earn additional income through referrals. And by inviting referrals, you will receive 20% of their earnings, which can increase your earnings significantly. The minimum withdrawal amount is only five dollars, and payments are made on the 1st and 15th of each month.

This is another link shortening service that will pay you for each click on the shortened link. Thus, you can earn money every time you place your link somewhere or share it on the Internet. The service interface is very similar to Ouo.io, but with a little more available functions. The referral system allows you to earn 10% of the referral’s profit, which is also quite good, and allows you to increase your earnings.

It is also one of the most proven link shortening services that allow you to make money by shortening long links. The service offers from $3 to $5 per 1000 clicks on a shortened link. Range available good features, such as Multi Shrink, Quick Shrink, Custom Link, Website Script, API. An excellent 20% referral program will, as always, help you increase your earnings through referrals.

Another time-tested service for making money by shortening links. And recently the service changed its interface to a more modern and user-friendly one. The functionality of the service is also tailored to any user requests. And you can use any functions of this service completely free of charge and increase your earnings. The following functions are available: Bulk Link, API, Easy Link, Full Page Link, Website Open Script, Google Analytics. You also have the opportunity to receive 10% of your referrals’ earnings.

Also well known as one of the best services to make money by shortening links. The service has a wide range of functionality, namely: Quick link, API for developers, Bulk shortener, Wordpress plugin, DLVR.it integration. Payments are made on the 10th of every month. The minimum withdrawal amount is $5. You can also increase your earnings with affiliate program service. Which will pay 20% commission on the earnings of your referrals.

It is also one of the oldest, proven sites for making money by shortening links. This service appeared around the same time as Adf.ly, and for this reason, it is worth your attention and should be trusted. The service also has a good set of functions, such as: Single Link, Multiple Link, Full Page Script, Visit Script, Tools(Links API). The service also has an excellent referral program that will reward you with 20% of your referrals, and you will also receive a % of your referrals' referral earnings (it doesn't sound like much, but it's a very cool thing). That is, by inviting a referral, he can also invite referrals, and you will receive profit from all of them!

An excellent service for making money by shortening links. It has a minimum withdrawal amount of only $1, which allows you to receive your earnings even if you are not able to receive many clicks on your links. The downside of the service is that additional functionality needs to be purchased (although $9 for a year of using the extended functionality is not such a big figure compared to what you can earn). The service also has a referral program that will pay you 20% of the income of your referrals for life.

This is a great service for making money from shortened links. It has a very convenient interface for users, detailed statistics on transitions. Also has two most necessary and useful features, these are: Mass Shrinker and Full Page Script, which will help you increase your earnings. The 15% referral program will also be happy to help you increase your earnings. And the minimum withdrawal amount is only $5, which will allow you to receive your money even if you have too few clicks on links.

Also one of the new link shortening services, but already proven and has a good reputation. It has pretty good prices for 1000 clicks on a shortened link. It also has good functionality. Among the functions, the service has: Website Widget, Browser Button, BlvME API. The referral program is not very generous, but you can still receive 5% of the earnings of your referrals and make money from it.

These are the 10 best services for making money from link shortening in 2017. Now don’t pull the cat by the tail, but go to any of the services provided above and start earning money right now.
Also don't forget to leave your comment a little lower.

Over the past two weeks, we have carried out further work on your applications to identify fraudulent earning schemes. We publish the results of the check - List of Scams below. Please note that these sites We categorically do not recommend it for work.

Here you will receive absolutely nothing after payment! The list of scams below can squeeze every penny out of your wallets. Most of them initially require up to 100 rubles, then up to 1000, then more than 1000 rubles! The check showed that immediately after payment, any connection with the author is severed, and you find yourself on the black list of his contacts.

List of fraudulent sites and their copies

according to the results of our inspection

Earnings from WMR bonuses. Private system 2017, Savelyev Alexey Igorevich
http://zen-bot.ru/

MediaShotCheck, Victor Belyaev
http://viktorblog.ru/
http://mscheck.ru/
http://smartinvestm.com/

QuickTransfer Company, Personal Account
http://quicktransfer.online/

Money for games
http://ru.unitedpixelsltd.com/

VisaTech card, Maxim Zakharov
http://paydomeninstall.ru/

Ready online business for 99 rubles
http://realinvestmen.com/prezentation/

OPEN PAYMENT ISSUER OF THE STATE OF QATAR
http://pay-republic-katar.ru/
http://pay-republic-katar.ru/paysfin

CRYPTOBOT
http://cryptobot.olmavi.com/ru/
http://tryitnow.pw/

INTERPRISE-ACTIVE, Earning money by viewing advertisements
http://cob-club.ru/

VICPAYS
http://vicpays.vipworks1.ru/

AllFinance, Evgeny Kovalenko
http://www.all-financemore.ru/
http://kovalenko-evgen.ru

California system
http://shumaiker-rus.ru/

Earnings from Digital Codes activations
http://digital-codes.ru/

Online mobile phone store
http://sv.vipwork.biz/

Transgaz Povolzhye, Sergey Alekseevich Zolotarevsky
http://sezon-zarabotka.ru/

$90 per day with Intell, Andrey Donskoy
http://intel.programm-alex.ru/

Social Fund: “Happy People”
http://happs.club/

Tengizchevroil Charitable Foundation, Oleg Evgenievich
http://gaztengis.ga/

Audio Money Group, Alexander Torbeev
http://aumgroup.ru

Riving system WorkInEntron
http://workinetron.com/

Inertial platform “Summaries of payment systems”
http://edino-pl.ru/

Official work on the Internet on posting advertisements
http://desk-jobs.ru/

EARN BY SCANING TEXTS WITH ONE CLICK, Earning money by scanning texts, Maxim Firman
http://scan-money.ru/

Ezaem M.F.O, Recruitment
https://ezaem.site/

Cash Coupons, Antonina Nutrikhina
http://nutrixina.ru/

Trading with Algo Sniper
http://algosniper.net/

Shooting Range Online, active earnings
http://www.tironline.net/

Translation from transfers from the “First” pawnshop network, Ekaterina Kapustina
http://money.sochelp5.ru/

Generating codes with mining-money ru, Alexander Stern
http://mining-money.ru/
http://info.programm-alex.ru/

Neftegazprom, Svetlana Mironenko
http://59-tour.ru/neftegazpromfond.ru/
http://neftegazpromfond.ru/

"White Internet 2017"
http://white-internet.pro/

Equity participation in a highly profitable business
https://razzleton.com/

Social fund: "GIN Group"
http://gingroup.ru/

Auto-Earning Program MoneyMaker
http://manymakker.ru/
http://manymakker.ru/600rubvchas/

Inertial platform “Summaries of payment systems”, Elena Novikova
http://evro-clab.ru/
http://edino-pl.ru/

FROM 5500 RUBLES PER DAY, Money Klondike, Dmitry Kipkalo
http://zarabotokvsety.ru/klondaik/

Program "Millionaire Detector"
http://detector-millionera.com/

Poker Automatics is automatic system receiving guaranteed passive income
http://poker-automatics.ru/

System Cryptobanker, Alexey Smolin
http://cryptobankir.pw/
http://easy-moneyyes.ru/

Proven method of making money on the Internet from 500 rubles, New - Winter 2017
http://simple2017.ru/

Working as an Assistant, John Kastler
http://payhelper.ru/

Anti-scam, Cryptocurrency collector
http://1.antilohotron.online/sborshhik.html

"LIFEBUOY" - Internet system
http://ohps.ru/

Cryptobot Pro, CRYPTOSAILER PROGRAM, Alexey Shupletsov
http://took.cf/page/tryitnow
http://cryptobot-pro.com/

MICROTEC-PHARM pharmaceutical company, People's website of the “Health in Every Home” program,receiving daily quotas
http://microtek-farm.ru/rezultatproverkianketi.html

A unique system for making money on the Internet, Denis Morshansky
http://zarabotok-v-internete.gq/
http://best-change.cf/

BizoN-N, Automatic traffic generator
http://bizonn.tk/

Cryptoin Faucet V-2.0
http://kp.sborshhik-2.site/

PrinSkaners company
http://prinskaners.plp7.ru/

Service for making money on bonuses BONUS-MACHINE
http://bonus-machine.ru/
http://sell.bonus-machine.ru/

Company "RiverAlliance", Travel agency Travel agency River Alliance, Kirilova Margarita Aleksandrovna
http://turriveral.ru/

BE EXTREMELY ALERT!

We remind our valued readers that ORDER A CHECK any information product or suspicious site, you can always go to the appropriate section of the menu of our website. If you really want to get a working course that will allow you to earn real, real money, please pay attention to the section on our website.


Sp-force-hide ( display: none;).sp-form ( display: block; background: rgba(255, 255, 255, 1); padding: 5px; width: 100%; max-width: 100%; border -radius: 0px; -moz-border-radius: 0px; -webkit-border-radius: font-family: "Times New Roman", background-repeat: no-repeat; ; background-size: auto; border-width: 2px; border-color: rgba(255, 34, 0, 1); border-style: solid;.sp-form .sp-form-fields-wrapper ( margin: 0 auto; width: 540px;).sp-form .sp-form-control ( background: rgba(247, 244, 242, 1); border-color: #cccccc; border-style: solid; border-width: 2px ; font-size: 15px; padding-right: 8.75px; -moz-border-radius: 7px; : 100%;).sp-form .sp-field label ( color: #444444; font-size: 15px; font-style: normal; font-weight: bold;).sp-form .sp-button ( border- radius: 4px; -moz-border-radius: 4px; -webkit-border-radius: 4px; background-color: #ffffff; width: 100%; font-weight: 700; font-style: normal; font-family: "Segoe UI", Segoe, "Open Sans", sans-serif; border-width: 1px; border-color: #d65600; border-style: solid; box-shadow: inset 0 -2px 0 0 #c24d00; -moz-box-shadow: inset 0 -2px 0 0 #c24d00; -webkit-box-shadow: inset 0 -2px 0 0 #c24d00;).sp-form .sp-button-container ( text-align: center; width: auto;)

DO YOU WANT TO RECEIVE 500 RUBLES

EVERY MONDAY?


➤ Join our

Services and tricks with which you can find EVERYTHING.

Why is this needed: Did you briefly read the article in the morning and decided to take a closer look in the evening, but it’s not on the website? A few years ago you visited a useful site, today you remembered it, but there’s nothing left on the same domain? This has happened to each of us. But there is a way out.

Everything that goes on the Internet is stored there forever. If some information is posted on the Internet for at least a couple of days, there is a high probability that it has become the property of the collective mind. And you will be able to reach her.

Let's talk about simple and publicly available ways to find sites and pages that have been deleted for some reason.

1. Google cache that remembers everything

Google specifically stores the text of all web pages so that people can view them if the site is unavailable. To view the version of the page from Google cache need to in address bar dial:

http://webcache.googleusercontent.com/search?q=cache:http://www.site/

Where http://www.site/ must be replaced with the address of the site you are looking for.

2. Web-archive, which contains the entire history of the Internet

6. Archive.is, for your own cache

If you need to save some web page, you can do this on archive.is without registration and SMS. There is also a global search for all versions of pages ever saved by users of the service..

7. Caches of other search engines, you never know

If Google, Baidu and Yandex did not manage to save anything sensible, but a copy of the page is really needed, then we go to seacrhenginelist.com, go through the search engines and hope for the best (so that some bot visits the site at the right time).

8. Browser cache when all else fails

You can’t view the entire page this way, but pictures and scripts from some sites certain time are stored on your computer. They can be used to search for information. For example, using a picture from the instructions, you can find a similar one on another site. Briefly about the approach to viewing cache files in different browsers:

Safari

Looking for files in a folder ~/Library/Caches/Safari.

Google Chrome

In the address bar we type chrome://cache

Opera

In the address bar we type opera://cache

Mozilla Firefox

Type in the address bar about:cache and find on it the path to the directory with the cache files.

9. Trying to download the page file directly from the server

We go to whoishostingthis.com and find out the address of the server on which the site is or was located:

After that, open the terminal and using the command curl trying to download the required page:

What to do if nothing helps at all

If none of the methods gives results, but find deleted page If you desperately need it, then all you have to do is contact the owner of the site and shake out the treasured information from him. First, you can get through the contacts associated with the site on emailhunter.com:

And about collecting information about people, read the articles and.

Run the downloaded file by double clicking (you need to have virtual machine ).

3. Anonymity when checking a site for SQL injection

Setting up Tor and Privoxy in Kali Linux

[Section under development]

Setting up Tor and Privoxy on Windows

[Section under development]

Proxy settings in jSQL Injection

[Section under development]

4. Checking the site for SQL injection with jSQL Injection

Working with the program is extremely simple. Just enter the website address and press ENTER.

The following screenshot shows that the site is vulnerable to three types of SQL injections (information about them is indicated in the lower right corner). By clicking on the names of injections you can switch the method used:

Also, the existing databases have already been displayed to us.

You can view the contents of each table:

Typically, the most interesting thing about tables is the administrator credentials.

If you are lucky and you find the administrator’s data, then it’s too early to rejoice. You still need to find the admin panel where to enter this data.

5. Search for admin panels with jSQL Injection

To do this, go to the next tab. Here we are greeted with a list of possible addresses. You can select one or more pages to check:

The convenience lies in the fact that you do not need to use other programs.

Unfortunately, careless programmers who store passwords in open form, not much. Quite often in the password line we see something like

8743b52063cd84097a65d1633f5c74f5

This is a hash. You can decrypt it using brute force. And... jSQL Injection has a built-in brute forcer.

6. Brute force hashes using jSQL Injection

The undoubted convenience is that you do not need to look for other programs. There is support for many of the most popular hashes.

This is not the best option. In order to become a guru in decoding hashes, the Book “” in Russian is recommended.

But, of course, when there is no other program at hand or there is no time to study, jSQL Injection with its built-in brute force function will come in very handy.

There are settings: you can set which characters are included in the password, the password length range.

7. File operations after detecting SQL injections

In addition to operations with databases - reading and modifying them, if SQL injections are detected, the following file operations can be performed:

  • reading files on the server
  • uploading new files to the server
  • uploading shells to the server

And all this is implemented in jSQL Injection!

There are restrictions - the SQL server must have file privileges. The sensible ones system administrators they are disabled and access to file system won't be able to get it.

The presence of file privileges is quite simple to check. Go to one of the tabs (reading files, creating a shell, uploading a new file) and try to perform one of the specified operations.

Another very important note - we need to know the exact absolute path to the file with which we will work - otherwise nothing will work.

Look at the following screenshot:

To any attempt to operate on a file, we receive the following response: No FILE privilege(no file privileges). And nothing can be done here.

If instead you have another error:

Problem writing into [directory_name]

This means that you incorrectly specified the absolute path where you want to write the file.

In order to guess an absolute path, you need to at least know operating system on which the server is running. To do this, switch to the Network tab.

Such a record (line Win64) gives us reason to assume that we are dealing with Windows OS:

Keep-Alive: timeout=5, max=99 Server: Apache/2.4.17 (Win64) PHP/7.0.0RC6 Connection: Keep-Alive Method: HTTP/1.1 200 OK Content-Length: 353 Date: Fri, 11 Dec 2015 11:48:31 GMT X-Powered-By: PHP/7.0.0RC6 Content-Type: text/html; charset=UTF-8

Here we have some Unix (*BSD, Linux):

Transfer-Encoding: chunked Date: Fri, 11 Dec 2015 11:57:02 GMT Method: HTTP/1.1 200 OK Keep-Alive: timeout=3, max=100 Connection: keep-alive Content-Type: text/html X- Powered-By: PHP/5.3.29 Server: Apache/2.2.31 (Unix)

And here we have CentOS:

Method: HTTP/1.1 200 OK Expires: Thu, 19 Nov 1981 08:52:00 GMT Set-Cookie: PHPSESSID=9p60gtunrv7g41iurr814h9rd0; path=/ Connection: keep-alive X-Cache-Lookup: MISS from t1.hoster.ru:6666 Server: Apache/2.2.15 (CentOS) X-Powered-By: PHP/5.4.37 X-Cache: MISS from t1.hoster.ru Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Date: Fri, 11 Dec 2015 12:08:54 GMT Transfer-Encoding: chunked Content-Type: text/html; charset=WINDOWS-1251

On Windows, a typical folder for sites is C:\Server\data\htdocs\. But, in fact, if someone “thought of” making a server on Windows, then, very likely, this person has not heard anything about privileges. Therefore, you should start trying directly from the C:/Windows/ directory:

As you can see, everything went fine the first time.

But the jSQL Injection shells themselves raise doubts in my mind. If you have file privileges, then you can easily upload something with a web interface.

8. Mass checking of sites for SQL injections

And even this function is available in jSQL Injection. Everything is extremely simple - download a list of sites (you can import from a file), select those that you want to check and click the appropriate button to start the operation.

Conclusion from jSQL Injection

jSQL Injection is a good, powerful tool for searching and then using SQL injections found on websites. Its undoubted advantages: ease of use, built-in related functions. jSQL Injection can be a beginner's best friend when analyzing websites.

Among the shortcomings, I would note the impossibility of editing databases (at least I did not find this functionality). Like all instruments with graphical interface, one of the disadvantages of this program can be attributed to the inability to use it in scripts. Nevertheless, some automation is also possible in this program - thanks to the built-in function of mass site checking.

The jSQL Injection program is much more convenient to use than sqlmap. But sqlmap supports more types of SQL injections, has options for working with file firewalls and some other functions.

Bottom line: jSQL Injection - best friend novice hacker.

Help for this program in the Encyclopedia Kali Linux you will find on this page: http://kali.tools/?p=706

From GeekBrains? Comprehensive annual program practical training covering all main topics, as well as additional courses For a present. Based on the results of training, a certificate established sample and certificate. By special discount for any faculties and courses!