Greeting to my all friends, recently I posted some tutorial on carding, but the major problem was cc. They don’t have cc to card, or they don’t know site where they can buy a cc. Today I am going to talk about how you can hack cc for shopping sites. Did I say from shopping sites? Yes! I said. Do you know that when anyone buys anything from a shopping site, he share is private information with that site like his credit card’s details, his dob etc. Many of sites from those shopping site are vulnerable means that are not protected enough to hide their client details. So today we are using this weakness to hack cc. Hope you get basic idea of this tutorial J.

  • ·       Havij 1.16 Pro [size=5mb]
  • ·       SQLi-DB [size=872kb]
  • ·       Carding Dorks [size=8kb]
  • ·       Vulnerable Sites 
Let's divide this tutorial into two part first to find vulnerable sites and second to get data from these sites?

 How To Find Vulnerable Sites?

First we are going to find shopping sites I mean vulnerable site. To find vulnerable sites, you need to use the SQLi-DB and the carding dorks. Let’s do it step by steps.
Step 1. Copy one of the dork, i m using inurl:/merchandise/index.php?cat=and paste it in SQLi-DB. 
You can get unlimited dork, in text file, which I uploaded to mediafire (no survey, no ads). [Download:Fresh Havij dork.text]

Step 2. Set up the setting and click on the "scan" button. This is not high level setting, it is simple choose search engine, duplicate result should be removed or not. Set it yourself.


Step 3. Once you set it all, start scanning, the result will be shown in the screenshot as below:
Step 4 .Click on Vulnerable to filter the result and only show the vulnerable results. Bingo! Boom you completed your first task.

Getting Data From Vulnerable Site:

Now, you need to run Havij as administrator and follow the steps below
Step 1. Paste the vulnerable site in the target TextBox on Havij and click Analyze

Step 2. Once the process finished, you will see something like in the image below on your Havij log box.


Step4. Now, look for a table named "Orders" or something similar. Tick the table and click on Get Columns
Step 5. You will get the columns that are in the table "Orders". Now tick on something that related to credit cards information, such as cc_number , cc_type , cc_expired_year , cc_expired_month , and cvv or cvv2. Once you're done, click on Get Data.

Post a Comment