The Content Provided on HackClarify are Only for Security Awareness & Educational Purposes Only, Hackclarify is Not Responsible for any Harm Done!
Place Your Ads Here By Requesting Using The Contact Form
Steal/Copy a Wordpress website's Theme
Copying the whole wordpress theme is not easy task but not too difficult as you think. In this post, I’m going to teach you how to copy the wordpress theme using Firefox and Firefox plugin called Firebug. But I’m afraid that my guideness will lead you to be a thief. Keep in mind that you should consider copyright and respect other’s people work. This tutorial will helps you to improve your knowledge of XHTML, CSS and the wordpress coding.
Before you start you must have Wordpress runing on your local machine, knowledge of XHTML, CSS and programming. And your computer must has Firefox installed and it’s plugin called Firebug.
So, lets get started. First, make a theme folder (name it whatever you like) under /wp-content/themes/. Visit the blog you like to copy it’s theme. Here, I’m using Wordpress’s classic theme. Copy the CSS codes from CSS tab in Firebug Windows .
Select all of CSS codes and paste into text editor (notepad). Put the following codes at the beginning of CSS codes previously copied into notepad. The following codes are used for wordpress theme information.
/*
Theme Name: Your theme name
Theme URI: OpenDNS
Description: Your theme description blah blah blah
Version: 1.1
Author: Your name
Author URI: E-Commerce Hosting
*/
Save it as style.css into theme folder you created under wp-content/themes/.
Firebug’s HTML tab collasped the heading tag and body tag by default. Create a index.php under your theme folder. Write the following codes.
<!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”>
Before you start you must have Wordpress runing on your local machine, knowledge of XHTML, CSS and programming. And your computer must has Firefox installed and it’s plugin called Firebug.
So, lets get started. First, make a theme folder (name it whatever you like) under /wp-content/themes/. Visit the blog you like to copy it’s theme. Here, I’m using Wordpress’s classic theme. Copy the CSS codes from CSS tab in Firebug Windows .
Select all of CSS codes and paste into text editor (notepad). Put the following codes at the beginning of CSS codes previously copied into notepad. The following codes are used for wordpress theme information.
/*
Theme Name: Your theme name
Theme URI: OpenDNS
Description: Your theme description blah blah blah
Version: 1.1
Author: Your name
Author URI: E-Commerce Hosting
*/
Save it as style.css into theme folder you created under wp-content/themes/.
Firebug’s HTML tab collasped the heading tag and body tag by default. Create a index.php under your theme folder. Write the following codes.
<!DOCTYPE html PUBLIC “-//W3C//DTD XHTML 1.0 Transitional//EN” “http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd”>
<html xmlns=”http://www.w3.org/1999/xhtml”>
<head profile=”http://gmpg.org/xfn/11″>
</head>
<body>
</body>
</html>
<head profile=”http://gmpg.org/xfn/11″>
</head>
<body>
</body>
</html>
language_attributes() can be used to add lang, xml:lang and dir attributes to the html tag for your theme. Put this function after xmlns attribute in html tag.
<html xmlns=”http://www.w3.org/1999/xhtml” <?php language_attributes(); ?>>
Understanding BlogInfo functions
BlogInfo returns the information you set in User Profile and General Options from your Wordpress Administration panel. Following codes are the basic information of your wordpress needed for html. Those codes must be inside heading <head> tags.
BlogInfo returns the information you set in User Profile and General Options from your Wordpress Administration panel. Following codes are the basic information of your wordpress needed for html. Those codes must be inside heading <head> tags.
<meta http-equiv=”Content-Type” content=”<?php bloginfo(’html_type’); ?>; charset=<?php bloginfo(’charset’); ?>” />
<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />
<link rel=”alternate” type=”application/rss+xml” title=”RSS 2.0″ href=”<?php bloginfo(’rss2_url’); ?>” />
<link rel=”alternate” type=”text/xml” title=”RSS .92″ href=”<?php bloginfo(’rss_url’); ?>” />
<link rel=”alternate” type=”application/atom+xml” title=”Atom 0.3″ href=”<?php bloginfo(’atom_url’); ?>” />
<link rel=”pingback” href=”<?php bloginfo(’pingback_url’); ?>” />
<?php wp_get_archives(’type=monthly&format=link’); ?>
<?php wp_head(); ?>
<style type=”text/css” media=”screen”>
@import url( <?php bloginfo(’stylesheet_url’); ?> );
</style>
<meta name=”generator” content=”WordPress <?php bloginfo(’version’); ?>” />
<link rel=”alternate” type=”application/rss+xml” title=”RSS 2.0″ href=”<?php bloginfo(’rss2_url’); ?>” />
<link rel=”alternate” type=”text/xml” title=”RSS .92″ href=”<?php bloginfo(’rss_url’); ?>” />
<link rel=”alternate” type=”application/atom+xml” title=”Atom 0.3″ href=”<?php bloginfo(’atom_url’); ?>” />
<link rel=”pingback” href=”<?php bloginfo(’pingback_url’); ?>” />
<?php wp_get_archives(’type=monthly&format=link’); ?>
<?php wp_head(); ?>
<style type=”text/css” media=”screen”>
@import url( <?php bloginfo(’stylesheet_url’); ?> );
</style>
Use Better Search Engine Optimization title
<title><?php wp_title(”); ?> <?php if(is_single() || is_page() || is_category){ _e(’»’);}?><?php bloginfo(’name’); ?></title>
Title tag must be inside heading tags.
Let’s start copy the well-formed tag elements
Before you start this lesson, you must have the knowledge about html and wordpress coding. The idea is that we first copy the parent tag elements and then we copy it’s child elements. We repeat the process till all of the tags are copied.
Expand each tags and try to understand the functions used in the theme
It is important to know the wordpress functions used in the theme which you’re going to copy. First expand the tags and look up and determine what functions are used inside the tags.
An example for code shown in above,
Wordpress has bloginfo function that can generate the basic information of your wordpress I already mentioned. Right now, I’m going to change with the wordpress coding. The following codes will generate the result shown in above.
Let’s start copy the well-formed tag elements
Before you start this lesson, you must have the knowledge about html and wordpress coding. The idea is that we first copy the parent tag elements and then we copy it’s child elements. We repeat the process till all of the tags are copied.
Expand each tags and try to understand the functions used in the theme
It is important to know the wordpress functions used in the theme which you’re going to copy. First expand the tags and look up and determine what functions are used inside the tags.
An example for code shown in above,
Wordpress has bloginfo function that can generate the basic information of your wordpress I already mentioned. Right now, I’m going to change with the wordpress coding. The following codes will generate the result shown in above.
<h1><a href=”<?php bloginfo(’url’);?>“><?php bloginfo(’title’);?></a></h1>
<div class=”description”><?php bloginfo(’description’);?></div>
<div class=”description”><?php bloginfo(’description’);?></div>
Many of wordpress theme creators used default posts query in the theme except custom one. Some used query_posts to make custom query for some purposed. It doesn’t matter. All are in the loop.
Understand the basic structure of Post looping
The Loop is used by WordPress to display each of your posts. Using The Loop, WordPress processes each of the posts to be displayed on the current page and formats them according to how they match specified criteria within The Loop tags. This is the basic structure of the_loop. Inside this we normally put the_title(), the_permalink(), the_content(), etc.
Understand the basic structure of Post looping
The Loop is used by WordPress to display each of your posts. Using The Loop, WordPress processes each of the posts to be displayed on the current page and formats them according to how they match specified criteria within The Loop tags. This is the basic structure of the_loop. Inside this we normally put the_title(), the_permalink(), the_content(), etc.
<?php if ( have_posts() ) : while ( have_posts() ) : the_post(); ?>
<?php endwhile; else: ?>
<?php _e(’Sorry, no posts matched your criteria.’); ?>
<?php endif; ?>
<?php endwhile; else: ?>
<?php _e(’Sorry, no posts matched your criteria.’); ?>
<?php endif; ?>
If you’re doing programming, you can easily know that the following codes are generated from Loop.
The following codes will output shown above
The following codes will output shown above
<div id=”post-<?php the_ID(); ?>” class=”post”>
</div>
</div>
Expand that div you’ll see the following sub elements
Expand h2 tag element.
the_title and the_permalink
the_title returns the post title and the_permalink returns the permalink of your post. So rewrite with the
php code
Expand h2 tag element.
the_title and the_permalink
the_title returns the post title and the_permalink returns the permalink of your post. So rewrite with the
php code
<h2>
<a title=”Permanet Link to <?php the_title();?>” rel=”bookmark” href=”<?php the_permalink();?>”>
<?php the_title();?></a>
</h2>
<a title=”Permanet Link to <?php the_title();?>” rel=”bookmark” href=”<?php the_permalink();?>”>
<?php the_title();?></a>
</h2>
the_time or the_date
the_time returns the all the date of your post. and the_date only returns the date of first post which is published in same day. I prefer you to use the_time
the_time returns the all the date of your post. and the_date only returns the date of first post which is published in same day. I prefer you to use the_time
<small><?php the_time(’F d, Y’);?></small>
Check date time format from PHP.net
the_content
the_content returns the content of post. Optional parameter is used for showing read more link if the post used <!–more–>
the_content
the_content returns the content of post. Optional parameter is used for showing read more link if the post used <!–more–>
<div class=”entry”>
the_content (’Read the rest of this entry’);
</div>
the_content (’Read the rest of this entry’);
</div>
the_tags
the_tags function return the tags link of the post. It was implemented in wordpress 2.3. the_tags(’start’, ’seperate’,’end’);
the_tags function return the tags link of the post. It was implemented in wordpress 2.3. the_tags(’start’, ’seperate’,’end’);
<p class=”postmetadata”>
the_tags (”Tags:”, “, “, “<br />”);
</p>
the_tags (”Tags:”, “, “, “<br />”);
</p>
Wordpress uses header.php, index.php, single.php, page.php, category.php, search.php, comments.php, functions.php and footer.php for theme. Oh! you can use only index.php for your theme. But need to write more complicated codes when you’re using different style for different page. Let’s say, if you want main , single post and page different. You have to choose either conditional_tags or the page.
For example, the following code will show excerpt post while browsing the category, search, tags and main page. It shows full content when browsing … ? ha ha single post
For example, the following code will show excerpt post while browsing the category, search, tags and main page. It shows full content when browsing … ? ha ha single post
<?php if (is_category() || is_search() || is_tags() || is_main()) {
the_excerpt();
}else {
the_content();
}
?>
the_excerpt();
}else {
the_content();
}
?>
This Post is completely for educational purposes, by no means you should copy someone else's personally made template, or steal something without paying for it! Please download a free theme if its that important!
Read More
Add your Comment
4
Replies
WP Scan- WordPress Vulnerability Scanner
Introduction
WPScan is a vulnerability scanner which checks the security of WordPress installations using a black box approach.
Download
Please download the latest WPScan from our Subversion (SVN) code repository by issuing the following command:
svn checkout http://wpscan.googlecode.com/svn/trunk/ ./wpscan
Details
Username enumeration (from author querystring and location header)
Weak password cracking (multithreaded)
Version enumeration (from generator meta tag and from client side files)
Vulnerability enumeration (based on version)
Plugin enumeration (2220 most popular by default)
Plugin vulnerability enumeration (based on plugin name)
Plugin enumeration list generation
Other misc WordPress checks (theme name, dir listing, ...)
Installing on Windows: (not tested)
gem install typhoeus ("Windows is not officially supported")
gem install xml-simple
Read More
Add your Comment
0
Replies
Secure your blog running on Wordpress
Hackers are the people like you and us but the only difference is that they use their skills for the negative and destructive purposes, they use their skills to break a website,but there is a term Ethical Hacker, which are the hackers who increase Security. they normally destroy all the stuff's, so if you are a admin of a website you should care about the security of the website .
As you know that the wordpress is a common and most popular plate form for blogging, but the security of the wordpress is always a hot discussion and it need more and more concentration because vulnerability discover everyday. Below are some tips to make your blog secure:
Secure WP-Admin By IP
Let suppose if someone can get the ability(username & Password) to enter into your website WP section, you can restrict this area by your IP. It prevent brute forcing attack and only you can able to control on your website because of IP restriction.
Order deny,allow
Deny from All
Allow from 123.456.789.0
You can allow and deny IP's from a range use this:
order deny,allow deny from all # allow my home IP address allow from XX.XX.XXX.XXX # allow my work IP address allow from XX.XX.XXX.XXX
Protect WP-Config.php File
WP-Config.php file has a great importance on wordpress plate form, it need more care and usually an attacker get the required information about the database of your website from WP-Config file. Basically if you use a strong database user-name and password while your WP-Config security is low than an attacker can get your strong user-name and password from wp-config file, because it contain all the information about the security and other things of your website.
Access .htaccess file is located at the root your WordPress installation open it and paste the following code.
order allow,deny
deny from all
Hide WordPress Version Number
You must hide the version of your wordpress because an attacker may find the available exploit by searching it on different exploit database by version number and it may cause a great harm for your blog so be care about it.
This tag is in the header.php file that displays your current version of wordpress
Copy and paste the code in the functions.php file of your theme and than you are done.
remove_action('wp_head', 'wp_generator');
Remove Error Message From Login Screen
This is your clever move to remove the error message that an attacker would not able to see if the user-name and password incorrect, update your function.php by this code.
add_filter('login_errors',create_function('$a', \"return null;\"));
Some Other Security Tips
Use your mind because mind is an essential part to secure yourself on the jungle of web.
Create strong passwords that are not easily be guess or crack.
Secure your own side(your computer) from different malware.
Make regular backup of your blog.
Update your wordpress to latest version
Use SSH instead of FTP
Avoid using your account on public places
You must be ware on different attacks to secure yourself.
Read More
Add your Comment
0
Replies
Hack Passwords by Turning Firefox into Password Stealer
Hello all!
Everyone wants to hack his friends and other people facebook,orkut,yahoo,msn or gmail accounts.Now i am giving you a small trick and after applying this trick Firefox will store all the passwords without promting the person who is typing his/her password to login. So in this way you will get victim password and username. But physical access is important for this hack.
Follow this Guide to Convert Firefox Into Stealer and Hack Passwords:
1. Close Firefox2) Navigate to:
Windows - C:/Program Files/Mozilla Firefox/Components
Mac - Applications > Right click Firefox > Show Package Contents > Contents/MacOS/Components
3) We are going to edit a file called nsLoginManagerPrompter.js, it is recommended you create a copy of it by pasting original file somewhere so you can replace the original file when you want to turn off this feature.
I recommend you download the following file and simply overwrite the existing nsLoginManagerPrompter.js with it,this file is already edited and works well
Download Edited nsLoginManagerPrompter.js
(skip the add from the upper right corner)
From now on, when someone logs onto any site, they username and password will be saved automatically, without prompt!
To retrieve the account information, make sure Firefox is opened, go to Tools > Options > Security Tab > click on saved passwords, then click on show passwords, and press yes!
Read More
Add your Comment
2
Replies
Create Templates for Joomla,Blogger,Wordpress etc [WYSIWYG] with Artisteer
Description
Artisteer is the first and only Web design automation product that instantly creates fantastic looking, unique website templates and blog themes.
Design awesome blogs and cool web templates in minutes Export to Blogger, Joomla, Wordpress and other CMS products No need to learn Photoshop, CSS, HTML or other technologies Fun and easy to use! New in version 3: create complete websites and blogs, edit pages, write content, and publish online! New in version 3: preview, download and edit online website and template samples!With Artisteer YOU immediately become a Web design expert, editing and slicing graphics, coding XHTML and CSS, and creating Web Design Templates, Joomla templates, Drupal themes, Wordpress themes, DotNetNuke skins, and Blogger templates all in minutes, without Photoshop or Dreamweaver, and no technical skills.
Top 10 reasons to use Artisteer :
1. Generate cool Web design ideas.
2. Adjust generated designs to create great looking Web and Blog templates.
3. Create perfectly correct, validated HTML and CSS that conform to Web standards.
4. You don't need to learn Photoshop, CSS, HTML and other Web technologies to create great looking designs, including images and buttons.
5. If you are a Web designer, generate ideas, prototypes and quick Websites for your clients and friends.
6. Choose and use many included design elements, from backgrounds to photo objects and buttons.
7. Automatically solve problems with image aliasing, Web browser compatibility and other details requiring time and knowledge.
8. Learn how to create professional HTML and CSS code.
9. Save money on Wordpress Themes and Web design templates.
10.If you don't have the time, hire your kids to create great looking web design for you.
File information:
File Name-Artisteer.3.0.0.45570 Web Design_doridro.com
File Size- 102 MB
OS- Win Xp, Vista, Win 7
Password : doridro.com
Download Link
http://www.mediafire.com/?jvz6zloefhe8ovz
Credit Goes to Doridro.com for uploading!
Read More
Add your Comment
1 Replies
4 Ways To Protect Your Coupon Blogs from getting Hacked.
Many people’s blogging careers have hit the wall due to the penetration of hackers on their blogs. If you are truly concerned about your blog, you won’t envision it being hacked. Power bloggers are spending high bills to guarantee the security of their blogs. Though, not all of us can afford spending much cash to ensure the security of our blogs there are some smart ways to keep your blog safe from hackers.While promoting my discount coupon blog where I talk about weight watchers and ediet, I have learnt some proper ways to make sure your blog is safe from hackers without necessarily having to spend too much money in the process. I am going to share some of these tips with you in this blog post.
I turn on my firewall
A firewall is a program that is built in your computer’s operating system to protect your network from being penetrated without your notice. Firewall is the “antivirus” built for your computer at default. If you need more security, you’ll have to turn your firewall on.
To ensure that my computer is intact and safe from intrusion that might cost me my blog, I make sure my computer’s firewall is always on.
I use alphanumeric password combination
If your Wordpress password is not strong enough, just a few trial of “brute force” would actually give access to your blog’s dashboard. You should make sure your passwords are strong enough by combining numbers with letters. Avoid using your birthday dates as your passwords.
It’s also risky to use you the same password for your several accounts. When choosing passwords for your email addresses, Wordpress or social media accounts make sure you use entirely different password combinations for each of them.
I always make sure my computer is free of virus
I know that having a single virus in my computer can put my confidential life in jeopardy so I always make sure my computer is free from viruses. There are several ways to make sure your computer is not going to contact virus. Below are some tips that will help you stay away from viruses while using your computer on the internet or offline.
- While surfing the internet avoid visiting portals you don’t know the reason of their existence.
- When downloading attachments from emails, make sure they are scanned with a solid antivirus program.
- Install a strong antivirus program on your computer to prevent unwanted programs from floating into your system from the internet or from a virus infested flash drive.
- For Using Strong Antivirus I would say that use Antiviruses and Inorder to remain safe from USB scams read or Shortcut Autorun Virus on Flash Drive – Be Safe use USB Disk Security.
I don’t share my details unnecessarily
Sharing your confidential details carelessly can lead to you losing your accounts. You should avoid telling you passwords and usernames to people you hardly know. People hardly trust others with such information because it can lead to terrible situations.
You might tell your friend what the password to your account is, but he may not be careful with it enough as you would.
I don’t share the details of my coupon blog with just anybody. Doing so will only lead to something, my blog being hacked!
Read More
Add your Comment
0
Replies
