Friday, December 9, 2011

4shared.com Is Vulnerable To XSS


Free online file sharing website 4shared.com is vulnerable, Rwandan Hackers found this non persistent XSS vulnerability.

To know the Vulnerable link submitted by the hacker click HERE

Monday, December 5, 2011

Babylon Search Engine Is XSS Vulnerable



XSS vulnerability on Babylon search engine. According to the hacker Babylon search engine is vulnerable to a particular type of XSS attack. It can be XSSed by first adding a normal string at the beginning and then pushing the script. Since the search engine has implemented XSS filtering so it can be bypassed by crafting a different vector like the one shown in the screenshot
LINK:
 http://search.babylon.com/?q=helloworld%3Cscript%3Ealert%28%27hacked+alert+by+Rwandan+Hackers%27%29%3B%3C%2Fscript%3Ehelloworld&s=web&as=0&babsrc=home

Sunday, December 4, 2011

Trustbank website Ghana hacked

Multiple sql injection found on www.trustbank.com.gh/ by Rwandan Hackers
Using the vulnerability an attacker can exploit the entire database and gain illegal access
Vulnerable Website

ADMIN INFO:

Saturday, December 3, 2011

20 WEBSITES DEFACED BY RWANDAN HACKERS

22 websites Defaced by Rwandan Hackers.They used sql injection and a new vulnerability called"Encodable"

Defaced Link:
http://www.colorslide.biz/upload/files/hacked/cyulox.html
http://outlawjeep.org/upload/files/cyulox.html
http://96.0.34.254/upload/files/HACKED/cyulox.html
http://www.oipaferrara.org/uploads/tetxt.txt
http://tahan.ismywebsite.com/phUploader/uploads/1322999595.txt
http://upload.paucina.com/slike/1322939016.txt
http://nicnick29.altervista.org/carica/caricati/1322933216.txt
http://www.shujaahmadshekh.com/upload/uploads/1322963291.txt
http://wgiupload.altervista.org/uploads/1322980884wgi.txt
http://portalsphere.free.fr/phUploader/uploads/1322976612.txt
http://www.up.kiousk.com/uploads/1323006593.txt
http://www.uka1.com/images/1322940967.txt
http://www.up.vahidweb.com/uploads/1322969017.txt
http://www.forumkirklareli.com/uploads/1322957114.txt
http://otupload.orangeoval.net/uploads/1322950627.txt
http://www.honesty.co/uploads/1323009960.txt
http://www.chiefehservers.com/upload/uploads/1323011390.txt
http://subland.info/upload/tetxt.txt
http://www.manx-bmd.co.uk/uploads/1322974291.txt
http://www.fidelityprintquick.com/uploads/tetxt.txt






www.premierleaguepool.co.uk Database Hacked

Premier League Fantasy Pool, one of the most popular soccer website of UK is under cyber attack. A hacker  has find SQL-i vulnerability on the official site of Free Premier League Soccer Pool & hacked into the database of that site and exposed 690+ user credentials including user-names, email-id, password and so on. Those hacked information are openly available on here

Thursday, December 1, 2011

smartrwanda.org under ddos attack


Hackers are using a new tool called Assassin DoS 2.0.3. This tool is based on a new attack that uses HTTP for flooding on the site down, it will work if you try a dedicated server key. Another feature of Assassin DoS is that it will not take all your resources such as DoS do. So it's like only 100 mili seconds of delay when you hit the target and its available for Windows


Its available to Download here