Hackatrick

30+ Bangladeshi Government sites hacked by Silent hacker from Indishell : Cyber War

2012-02-11T18:29:00.002+05:30

A hacker named as "Silent Hacker" from Indishell hackers group has hacked over 30 Bangladeshi government sites after Ashell announced cyber war against Bangladesh .

Silent hacker defaced these websites as payback of giving challenge to Indian hackers group. Bangladesh Ministry of Commerce, cga.gov.bd,Food Division,Coefficient Design & Development Limited and other government websites become victim of this cyber war.

Hacked sites:

http://www.www.moef.gov.bd/
http://www.mincom.gov.bd/
http://www.cga.gov.bd/
http://www.bdlaws.minlaw.gov.bd/
http://www.mopme.gov.bd/
http://www.rdcd.gov.bd/
http://www.moysports.gov.bd/

Here is the full list of hacked sites and mirror link :
http://pastebin.com/GJN8i8FQ

40 Computer Pranks & Fake Viruses to Play With your Friends PC

2012-02-09T17:37:00.001+05:30

So, guys 1 April is coming be ready to do pranks with your friends & make them April Fool.these are 40+ more Computer Pranks & Fake viruses that will surely surprise your friends. Check them out !!!

1. Add / Remove - Add/Remove is a cool prank that makes it appear that all of your software on your computer is being removed using the Windows Add/Remove Program feature. This is so real, that it will shock the most of the experienced user.

Download Add / Remove Prank

2. Avoid – It makes your Windows Start button avoid any mouse clicks. Just launch this program exe and watch as your Start button jumps away from your mouse cursor whenever you try to click on it.

Download Avoid

3. Bomb – It will run the program you want to run, then after a delay for 5 second, it will display the BOMB message. This will simulate that the program you just ran is bombed.

Download Bomb

4. Click Me – It will display a button on which you can never click with your mouse.

Download Click Me

5. ClickStart – ClickStart is one of the cool Windows prank program which hides itself in the background and after every 45 seconds it will click on the start button causing the start menu to open. Users will be surprised when their start menu pops up, they will have no idea what is going on.

Download ClickStart

6. Clippy – It is a simulated office assistant that, when ran, will hide in the background for 1 minute then popup in the lower right hand corner of the screen and say something useless.

Download Clippy

7. Copy Cursor – It replicates the current Windows mouse cursor over-and-over again on the screen. This is VERY annoying which makes it a great prank!

Download Copy Cursor

8. Crazy Num Caps Scroll – It will toggle the Num Lock, Caps Lock, or Scroll Lock keys at user defined intervals which makes the working of any user very annoying experience.

Download Crazy Num Caps Scroll

9. Create Message Pro – It allows you to configure and create stand alone .EXE files for distribution across your network or the Internet. It adds the ability to specify the message text, buttons to appear on the message, and the type of message icon that appears.

Download Create Message Pro

10. Cursor Fun – It will change the current mouse cursor to a user specified cursor. It allows you to choose which Windows cursor to change, what type of cursor to change it to.

Download Cursor Fun

11. Dirty Mouse – It is a windows prank that simulates the mouse ball is dirty. How many times have you tried to move your mouse and it does not move.

Download Dirty Mouse

12. DownHoax – This is a great prank makes it appear as though an “unwanted” file is being downloaded from the Internet. DownHoax randomly chooses a site from its internal database of “undesirables” and proceeds to simulate downloading an equally distasteful file.

Download DownHoax

13. Email Fun – When executed, Email Fun displays a fake email screen complete with the To:, From:, Subject: and message contents. Then it immediately pretends to automatically type an email to everyone that is in your address book.

Download Email Fun

14. Fake Delete – Fake Delete simulates the deletion of all files/folders in the Windows directory or whichever directory is passed via the command line. Fake Delete uses the standard Windows delete dialog so it appears very realistic, and it cannot be disabled or stopped.

Download Fake Delete

15. Fake Format – Fake Format mirrors the Windows “Format” functionality. Once the program is started, no matter which buttons are chosen, the program simulates formatting the specified drive.

Download Fake Format

16. Fake Shutdown – This prank program simulates what would occur when a user chooses to shut down Windows. Each screen was cautiously created to mirror the look of the actual Windows shutdown sequence.

Download Fake Shutdown

17. Fake Start Menu – This program will replace the existing Windows 95 Start Menu (task bar). It will respond to nothing from the user.

Download Fake Start Menu

18. Flasher – Flasher is a hidden prank program that allows you to flash any image to the computer screen, almost like a subliminal message.

Download Flasher

19. Flip It – It will display a fake Windows message that appears to have flipped upside-down. Clicking on the YES button will slowly make each piece of text rotate 180 degrees until you can read it again.

Download Flip It

20. Floppy Madness – Floppy Madness is a small prank program that will try and access the floppy drive at user specified intervals. If this does not seem fun, just download it and see.

Download Floppy Madness

21. Follow Me – When you execute this program, it will automatically hide in Windows and wait for your mouse cursor to move. Once your cursor moves, it automatically moves your Start Button to the same position, horizontally, on the Windows Task Bar.

Download Follow Me

22. Gas Gripe – This program will lead you through a series of price comparisons with other liquid products. With the help of a very clean interface, Gas Gripe will have you laughing in your chair as you watch the price per gallon go up with other products

Download Gas Gripe

23. HeadAche – A program that would instantly give you a headache, download and run to know how it produce a headache.

Download HeadAche

24. Message Manager Lite – Message Manager it will allow you to setup a message dialog to be displayed upon a network login. You can specify the text to be displayed, the image, the buttons (up to 9), and when to display the message.

Download Massage Manager

25. Mouse Droppings – Watch as your mouse drops little black turds all over your screen, randomly. This is a great joke to play on an unsuspecting co-worker, you can even email this prank to a friend.

Download Mouse Droppings

26. Mouse Move – Mouse Move is a a program that can run hidden to move the users mouse cursor to random positions on the screen.

Download Mouse Move

27. MouseClicks – MouseClicks is a harmless gag program that allows you to disable the left, right or both mouse clicks every x seconds.

Download MouseClicks

28. Password Prank – This program displays a fake, but very realistic, password box to the user. No matter what key the user presses, it starts typing in its own password. Once the password is entered an error message is displayed to the user telling them their password is not long enough.

Download Password Prank

29. Pirated Software – Pirated Software is a prank that emulates the standard software installation or setup. However, the installation walks you through the steps of installing illegal software.

Download Pirated Software

30. Popup Prank – Popup Prank is a gag software program that allows you to simulate these online popup advertisements.

Download Popup Prank

31. Print Me – When you launch Print Me the standard Windows Print dialog appears, no matter which button is pressed a fake print dialog screen displays to the user.

Download Print Me

32. WAV Launcher – This is a hidden program launcher. It will launch a specified program or .wav file at user defined intervals.

Download WAV Launcher

33. Random Bumper – It is a hidden software program that will play gross burp sounds randomly every minute until closed.

Download Random Bumper

33. ReplaceKeys – ReplaceKeys is a fun little prank that allows you to replace many keyboard keystrokes with different keyboard keystrokes.

Download ReplaceKeys

34. Rotate – Rotate is a desktop manipulator that will randomly flip the desktop into all sorts of weird positions.

Download Rotate

35. Screen Screw – Screen Screw does just that, it screws with your screen. When you launch Screen Screw it will appear as though your screen has some type of problem painting its colors.

Download Screen Screw

36. Shakedown – Shakedown will take your current desktop and shake it violently, This will not only annoy you to death, but also give your eyes a good strain.

Download Shakedown

37. Show – Hide Desktop – Show – Hide Desktop is another fun Windows prank from RJL Software. This prank allows you to configure how often the desktop icons will hide and then show again.

Download Show – Hide Desktop

38. The Finger – The Finger on an unsuspecting user and watch their reaction when the cursor changes to the middle finger and then back to normal again.

Download The Finger

39. Time Traveler – Time Traveler is a devious little prank that changes the Windows system clock to a random time. To make matters worse, Time Traveler runs invisible in the background performing this task every 30 seconds.

Download Time Traveler

40. Vista Upgrade Prank – The Vista Upgrade Prank starts by emulating the Windows Update service screen. Clicking the install or cancel button closes the update service window and appears to initiate the Vista Upgrade Advisor.

Download Vista Upgrade Prank

41. Y2K Joke – Y2K is a silly software program that spoofs all of the Y2K issues. It simulates fixing your BIOS, mouse, monitor, and even corrects your calendar problems by changing all letter Ys to letter Ks.

Download Y2K Joke

These all pranks are safe & designed just for entertainment purpose. Try with your friends and have fun.

yash and prateek from team nuts strikes more than 140 pakistani sites

2012-02-06T09:21:00.002+05:30

Indian Hacker Yash sarma and prateek from team nuts hacked and defaced about 140 pakistani sites.This group is very active now a days.

This was the messages that were written on the deface sites.

"We Are Team Nuts
- Mayank yadav Aka Mack - Rahul Roshan Aka chipthehackboy - Underground devil - kinni - Gagan - Chetan - Mohit Bumb - Harsh Gupta - Vivek Arora

You Forgot Us ? ur Dads are back again with a bang !

This Was The Hack In Responce Of www.highwaypolicems.in Hacked By Pak Cyber Pirates

[#] Admin : Gud News FoR You , Only Logs Are Deleted
[#] Porkies : Dad's Will Remain DadS lol , N Accept The Fuckin' Reality We Indians Are Your Dads :D
[#] Porkies : Dudh Mangoge To Kheer Denge , Kashmir Mangoge To Cheer Denge :D , You Wont get kashmir by hacking sites lol , Kashmir is ours will be ;)

Listen Porkies, We Are Again Saying We Dont Want Cyber War Stop Defacing Indian Sites Else We Will Make Your Life A Living Hell...... x-(
Love to : All Indian Hackers"

Here are the list of all the sites and their mirror:

http://www.alsiraj.com.pk/

http://www.ahlehadith.com.pk/

http://pakistanmarkaz.com/

http://thebestpk.com/

http://iqraholyquran.com/

http://www.forex-mag.com/

http://scdpakistan.org/

http://dquran.com/

http://alkausartravel.com/

http://hazaraha.com/

http://masterpaints.com.pk/

http://www.hameedlatifhospital.com/admin_pakistan/

http://sditalmubarak.com/

http://www.freearabicjoke.com/

http://ramadan2011.livearabictv.org/

http://pcsfamily.org/

http://abmepi.org/

http://esolpakistan.com/

http://mehrganfoundation.com/

http://capferf.com/

http://ahsasfoundation.org/

http://qqwina.com/

http://yehacollection.com/

http://ptkabua.com/

http://www.pakistanbusinessjournal.com/nuts.htm

http://pdopakistanfoundation.org/nuts.htm

http://esolpakistan.com/nuts.htm

http://www.sda.com.pk/

http://vehicles.com.pk/nuts.asp

http://royalz.pk/nuts.htm

http://www.pakvisitor.com/nuts.htm

http://www.artpk.org/nuts.htm

http://www.alsiraj.com.pk/nuts.htm

http://www.iapex.com.pk/nuts.htm

http://www.hameedlatifhospital.com/nuts.htm

http://abeertrust.org/nuts.htm

http://balochconsultants.com/nuts.htm

http://qqwina.com/nuts.htm

http://swopk.org/nuts.htm

http://siasitotay.com/nuts.htm

http://www.cosmedixth.com/nuts.htm

http://itustad.com/nuts.htm

http://ramadan2011.livearabictv.org/nuts.htm

http://dquran.com/nuts.htm

http://www.forex-mag.com/nuts.htm

http://ptkabua.com/nuts.htm

http://alkausartravel.com/nuts.htm

http://haifawehbe.biz/nuts.htm

http://freearabicradio.com/nuts.htm

http://www.loonislandoutdoors.com/nuts.htm

http://www.pakwebpages.com/

http://www.autismpak.com/

http://www.bmun.org.pk/

http://www.yokohama.com.pk/

http://www.beaconedge.pk/

http://itplanet.pk/

http://www.humanshieldpk.org/

http://www.softstore2.com/

http://sharifengineering.com/

http://toyotagujranwala.com/

http://iqraholyquran.com/

http://gemini-aviation.com/

http://toyotagujranwala.com/

http://www.yashphotos.com/

http://manzil-e-murad.org.pk/

http://www.saher.org.pk/

http://www.qurantutorspk.com/

http://www.freenetpk.com/

http://beautytipspk.com/

http://pbclive.com/

http://www.akbaria.org/

http://www.majliseilmi.org/

http://www.haleemi.com/

http://capitolrealestateuae.com/

http://www.badaltidunya.com/

http://www.4bstarinternational.com/

http://ginixtechnologies.com/

http://ijfashions.com/

http://innovatorsit.com/

http://www.libertypharmaceuticals.com/

http://rpgroup.com.pk/

http://www.archlogics.com/

http://mtbryk.com/

http://www.mozaikglocal.com/

http://diaentertainment.com/

http://mslawchambers.com/

http://jamshedahmed.com/

http://sportsgarment.com/

http://uniquesplasticsurgery.com/

http://www.autismpak.com/

http://www.bmun.org.pk/

http://ptvchat.com/

http://pakconsumer.com/

http://depression-guide.org/

http://www.nmirza.com/

http://allehelp.com/

http://www.coacss.com/

http://feather05.com/

http://degreeguideline.com/

http://www.thelegalaffairs.com/

http://beecconsultants.com/

http://u-tubeservices.com/

http://ladyzboutique.com/

http://www.ashab-e-sufa.com/

http://www.einfopk.com/

http://www.cellplugin.com/

http://coderbay.com/

http://heritage.pk/

http://blendblogger.com/

http://thetopnewz.com/

http://urdublog.com/

http://www.cricketplug.com/

http://www.horsesandalucia.com/

http://www.hmllawfirm.com/

http://www.dhamaltv.com/

http://www.seplaafoundation.org/

http://www.dateline.com.pk/

http://lahorelaparoscopicsurgeon.com/

http://www.powerstitch.com/

http://kbswelfare.org/

http://www.gmiscam.com/

http://www.eminipek.com/

http://www.net-oman.com/

http://www.rmaco.pk/

http://www.miim.edu.pk/

http://pakistanmatch.com/yash.html

http://tajmahal.com.pk/yash.html

http://www.ptea.org.pk/yash.html

http://al-zahid.net/yash.html

http://www.zilvertech.com/yash.html

http://weaveinn.com/yash.html

http://www.smsfree.pk/mobile/images/

[#] MIRRORS :

http://attack-h.org/attack/?id=22442

http://attack-h.org/attack/?id=22441

http://attack-h.org/attack/?id=22440

http://attack-h.org/attack/?id=22439

http://attack-h.org/attack/?id=22438

http://attack-h.org/attack/?id=22316

http://attack-h.org/attack/?id=22191

http://attack-h.org/attack/?id=22190

http://attack-h.org/attack/?id=22189

http://attack-h.org/attack/?id=22188

http://attack-h.org/attack/?id=22187

http://attack-h.org/attack/?id=22186

http://attack-h.org/attack/?id=22185

http://attack-h.org/attack/?id=22184

http://attack-h.org/attack/?id=22183

http://attack-h.org/attack/?id=22182

http://attack-h.org/attack/?id=21846

http://attack-h.org/attack/?id=21845

http://attack-h.org/attack/?id=21844

http://attack-h.org/attack/?id=21843

http://attack-h.org/attack/?id=21842

http://attack-h.org/attack/?id=21841

http://attack-h.org/attack/?id=21840

http://attack-h.org/attack/?id=14375

http://attack-h.org/attack/?id=26611

http://attack-h.org/attack/?id=29111

http://attack-h.org/attack/?id=29112

http://attack-h.org/attack/?id=29114

http://attack-h.org/attack/?id=29115

http://attack-h.org/attack/?id=29116

http://attack-h.org/attack/?id=29117

http://attack-h.org/attack/?id=29118

http://attack-h.org/attack/?id=29119

http://attack-h.org/attack/?id=29120

http://attack-h.org/attack/?id=29121

http://attack-h.org/attack/?id=29122

http://attack-h.org/attack/?id=30172

http://attack-h.org/attack/?id=30171

http://attack-h.org/attack/?id=30170

http://attack-h.org/attack/?id=30169

http://attack-h.org/attack/?id=30168

http://attack-h.org/attack/?id=30167

http://attack-h.org/attack/?id=30166

http://attack-h.org/attack/?id=30165

http://attack-h.org/attack/?id=30163

http://attack-h.org/attack/?id=30162

http://attack-h.org/attack/?id=30161

http://attack-h.org/attack/?id=30160

http://attack-h.org/attack/?id=30158

http://attack-h.org/attack/?id=30095

http://attack-h.org/attack/?id=31109

http://attack-h.org/attack/?id=31108

http://attack-h.org/attack/?id=31107

http://attack-h.org/attack/?id=31105

http://attack-h.org/attack/?id=31104

http://attack-h.org/attack/?id=31103

http://attack-h.org/attack/?id=31102

http://attack-h.org/attack/?id=31101

http://attack-h.org/attack/?id=31100

http://attack-h.org/attack/?id=31098

http://attack-h.org/attack/?id=31096

http://attack-h.org/attack/?id=31095

http://attack-h.org/attack/?id=31094

http://attack-h.org/attack/?id=31093

http://attack-h.org/attack/?id=31092

http://attack-h.org/attack/?id=31091

http://attack-h.org/attack/?id=31090

http://attack-h.org/attack/?id=31089

http://attack-h.org/attack/?id=31088

http://attack-h.org/attack/?id=31087

http://attack-h.org/attack/?id=31086

http://attack-h.org/attack/?id=31084

http://attack-h.org/attack/?id=31083

http://attack-h.org/attack/?id=31082

http://attack-h.org/attack/?id=31081

http://attack-h.org/attack/?id=31080

http://attack-h.org/attack/?id=31079

http://attack-h.org/attack/?id=31078

http://attack-h.org/attack/?id=31077

http://attack-h.org/attack/?id=31076

http://attack-h.org/attack/?id=31075

http://attack-h.org/attack/?id=31074

http://attack-h.org/attack/?id=31073

http://attack-h.org/attack/?id=31072

http://attack-h.org/attack/?id=31071

http://attack-h.org/attack/?id=31070

http://attack-h.org/attack/?id=31069

http://attack-h.org/attack/?id=31068

http://attack-h.org/attack/?id=31065

http://attack-h.org/attack/?id=31064

http://attack-h.org/attack/?id=33280

Daily Mail Website Hacked and Defaced by TeaMp0isoN

2012-02-05T23:07:00.002+05:30

Popular online daily news paper, Daily Mail website has been hacked and defaced by TeaMp0isoN. He has defaced one of the subdomain of the website
“For years you’ve poisoned the mainstream media with your sensationalist, ultranationalist nonsense, continuing to inject reader’s minds with anti- immigration and borderline racist propaganda,” the hackers Posted on the defaced page.

“Your distorted bias on news is wrongly justified by patriotism and conservatism, though we see through your hateful slurs.”

The vulnerable subdomain was redirecting visitors to another website.

Create Fake Login Page of any site with Super Phisher Tool

2012-02-04T07:20:00.002+05:30

Today I am going to explain you how to make your own Phishing page without any sort of copy & pasting but just with a simple click.

First of all let me specify some key features of this Phishing tool :-

* Simple and easy tool which can be used even by a 10 years old boy.

*Create any fake page. For ex- Facebook, Gmail, Yahoo, Hotmail, etc.

Steps to create your own Fake Page:-

* Download Super Phisher here & Extract it.

*Run it

*Fill the Boxes

* In the [url of login box] Type that url which you want to make fake page

ex :-www.facebook.com/login.php

*2nd your password txt file prateek'slogs.txt

*name of fake page file same as phish.php

*site to be redirected after login of victim

2) This is the Output folder where the fake page has been created.

3)These are the Fake pages which are created by the Super Phisher.

Thanks for reading this article. If u face any problem, feel free to ask.

How to seure wordpress blogs

2012-02-03T20:28:00.001+05:30

Hackers are the person like you and us but the only difference is that they use their skills for the negative and destructive purposes, they use their skills to break a website, they normally destroy all the stuff's, so if you are a admin of a website you should care about the security of the website.

As you know that the wordpress is a common and most popular plate form for blogging, but the security of the wordpress is always a hot discussion and it need more and more concentration because vulnerability discover everyday. Below are some tips to make your blog secure:

Secure WP-Admin By IP

Let suppose if someone can get the ability(username & Password) to enter into your website WP section, you can restrict this area by your IP. It prevent brute forcing attack and only you can able to control on your website because of IP restriction.

Order deny,allow

Deny from All

Allow from 123.456.789.0

You can allow and deny IP's from a range use this:

order deny,allow deny from all # allow my home IP address allow from XX.XX.XXX.XXX # allow my work IP address allow from XX.XX.XXX.XXX

Protect WP-Config.php File

WP-Config.php file has a great importance on wordpress plate form, it need more care and usually an attacker get the required information about the database of your website from WP-Config file. Basically if you use a strong database user-name and password while your WP-Config security is low than an attacker can get your strong user-name and password from wp-config file, because it contain all the information about the security and other things of your website.

Access .htaccess file is located at the root your WordPress installation open it and paste the following code.

order allow,deny

deny from all

Hide WordPress Version Number

You must hide the version of your wordpress because an attacker may find the available exploit by searching it on different exploit database by version number and it may cause a great harm for your blog so be care about it.

This tag is in the header.php file that displays your current version of wordpress

Copy and paste the code in the functions.php file of your theme and than you are done.

remove_action('wp_head', 'wp_generator');

Remove Error Message From Login Screen

This is your clever move to remove the error message that an attacker would not able to see if the user-name and password incorrect, update your function.php by this code.

add_filter('login_errors',create_function('$a', \"return null;\"));

Some Other Security Tips

Use your mind because mind is an essential part to secure yourself on the jungle of web.

Create strong passwords that are not easily be guess or crack.

Secure your own side(your computer) from different malware.

Make regular backup of your blog.

Update your wordpress to latest version

Use SSH instead of FTP

Avoid using your account on public places

You must be ware on different attacks to secure yourself.

About The Author

This post is written by an Irfan Shaeel An Ethical hacker and Penetration tester, Irfan blogs At his blog Ehacking.net

FBI will Monitor Social Media using Crawl Application

2012-01-30T07:08:00.001+05:30

The Federal Bureau of Investigation is looking for a better way to spy on Facebook and Twitter users. The Bureau is asking companies to build software that can effectively scan social media online for significant words, phrases and behavior so that agents can respond.A paper posted on the FBI website asks for companies to build programs that will map sentiment and wrongdoing.

“The application must be infinitely flexible and have the ability to adapt quickly to changing threats to maintain the strategic and tactical advantage,” the Request for Information said, “The purpose of this effort is to meet the outlined objectives…for the enhancement [of] FBI SOIC’s overall situation awareness and improved strategic decision making.”The tool would be used in “reconnaisance and surveillance missions, National Special Security Events (NSS) planning, NSSE operations, SOIC operations, counter intelligence, terrorism, and more.

Although the police, including in Britain, already use Facebook routinely to ascertain the whereabouts of criminals, automatically filtering out irrelevant information remains challenging. The new FBI application will be able to automatically highlight the most relevant information. The FBI is seeking responses by 10 February.

Anonymous Takes Down FBI, RIAA, DOJ and White House Following Megaupload Closure

2012-01-20T15:35:00.000+05:30

In a hastily assembled retaliation against the federal shutdown of MegaUpload.com, hacktivist group Anonymous has allegedly taken down a number of websites--including those of the U.S. Department of Justice, the Motion Picture Association of America (MPAA), and the Recording Industry Association of America (RIAA).

According to DownForEveryoneOrJustMe.com, several websites are out of commission as of this writing, likely thanks to DDoS attacks: the U.S. Department of Justice (doj.gov, justice.gov), the U.S. Copyright Office, Universal Music Group, the RIAA, and theMPAA.

At about 2 p.m. on Thursday, @AnonDaily, a Twitter account assumed to be associated with Anonymous, tweeted: "TANGO DOWN! JUSTICE.gov - U.S. Government Website DOWN!" The account has continued to post updates, noting that RIAA, MPAA, Universal Music Group, and U.S. Copyright Office websites were all down, and that Anonymous istrying to knock out several other websites, including the FBI and White House websites.

They are also working on taking down the website of MPAA chief, Chris Dodd, who is a strong supporter of the controversial Stop Online Piracy Act (SOPA) and Protect IP Act (PIPA) bills that are currently making their ways through the congressional circuit. Dodd said Tuesday that yesterday's Internet blackout protests performed by big Web players, including Google and Wikipedia, were an "abuse of power."

Here's what's offline right now, as of 4pm PST:

U.S. Department of Justice
U.S. Copyright Office
Recording Industry Association of America
Motion Picture Association of America
Universal Music Group
BMI Music

Fake Angry Birds Game spreading Malware from Android Market

2012-01-17T16:38:00.001+05:30

From last week premium rate SMS Trojans surfaced in the Android Market. Google has pulled 22 apps that are masquerading as legitimate versions of popular games like Angry Birds and Cut the Rope. Security researchers have discovered a way to bypass an Android smartphone owner's permissions and access private data stored on their smartphone.

Avast Blog explain this as - For example, if someone tried to look for “Cut the rope free”, this malicious application was in the fourth place in the search results. Apps published by the developer Miriada Production may look like well known Android games (Angry birds, Need for speed, World of Goo and others) and users could be easily confused.

The fake apps include "Cut the Rope", "Need for Speed", "Assassins Creed", "Where's My Water? ","Riptide GP", "Great Little War Game", "World of Goo", "Angry Birds", "Shoot The Birds", "Talking Tom Cat 2", "Bag It!" and "Talking Larry the Bird". The apps have been pulled from the Android Market.

The fraudulent apps would install a premium rate SMS Trojan that would rack up hidden charges on the user's phone bill. The apps would lure customers into clicking on options that would send text messages to premium line numbers leaving the user to foot the bill. According to Lookout Mobile Security, the new threat called RuFraud has been found in an initial batch of apps on the Android Market that include horoscope apps, wallpapers, and game apps that pretend to be legitimate games like Angry Birds.What will happens if these threats are installed in your mobile devices? It will attempts to send text messages containing the string “798657” to premium-rate numbers using the infected device’s current default SMS Center (SMSC) by exploiting the Permissions function (android.permission.SEND_SMS), Capable of sending an affected user’s GPS location via HTTP POST, Opens several ports and connects to specific URLs to receive and execute commands from a remote user, Gathers information like International Mobile Equipment Identity (IMEI) and International Mobile Subscriber Identity (IMSI) numbers from infected systems, which is then sent to a specific site and Secretly forwards all incoming text messages to a remote user.

How do users get these threats?

Trend Micro has reported several incidents wherein malware came disguised as Android apps. Samples of Android malware found in the wild include:

ANDROIDOS_DROIDSMS.A: Came disguised as Windows Media Player.
ANDROIDOS_DROISNAKE.A: Came in the form of a game known as Tap Snake.
ANDROIDOS_GEINIMI.A: Came in the form of Trojanized apps hosted in certain third-party app stores in China.
ANDROIDOS_ADRD.A: Comes in the form of a Trojanized wallpaper app.
ANDROIDOS_LOTOOR.A: Trend Micro’s detection for Trojanized versions of legitimate apps like “Falling Down”.
ANDROIDOS_BGSERV.A: Trojanized version of Android Market Security Tool, which was released to address the modifications done by AndroidOS_LOTOOR.A.

Trend Micro Suggest "Users can also check the developer’s profile for other apps. Google also offers developer ratings, as well as the status 'Editor’s Choice' that can further validate the developer’s legitimacy. It is also a good practice to check app ratings and user feedback for more verification. The user rating and feedback feature give people a more accurate view of the experiences users have when using or installing the app. You can find it just below the app icon.,".

How to detect a keylogger in a system

2012-01-17T15:59:00.000+05:30

Keylogger is the software program or a hardware which reads and store all the key stroke by a user in the system it is installed.

Having a keylogger in the system means you are going to loose some thing big. If your system is infected by a keylogger, your email id, facebook account, bank account and all other secure data is on the risk. Now a days hackers are active enough and many website offering free software download with keyloggers attached in it. So you need to know how to protect your system from keyloggers. If you want to know how to detect a keyloggers in a system, you can follow these points:

Check the task list by press ctrl+alt+del in windows. Examine all the tasks running in your system, if you are unsure about a task look it up on a search engine.

Run your antivirus checker, it's possible this will pick up the Keylogger on your system.

Use the system configuration utility to determine which task are loaded at start-up (type "msconfig" in the run box to start).

Download a specific keylogger detector program, and see if it detects anything.

Scan your hard disk for the most recent files stored. Look at the contents of any files continually updating (these might be logs created by antivirus).

How to Remove Facebook Timeline

2012-01-16T13:55:00.001+05:30

We all know that Facebook Implemented Timeline Feature for all people. Some people liked it and some people really hated it. Firstly people wanted timeline, but after sometime, they started neglecting it and thumbs down for Timeline!! Even Facebook did not give any response on how to Disable Facebook Timeline. Well, Many of my friends too asked me that how can they Remove Facebook Timeline. However, this is now possible using a trick. In this series, I am going to shareHow to Remove Facebook Timeline!!!

How to Remove Facebook Timeline:

For Mozilla Firefox:

Open Firefox Browser and Add this User Agent Switcher Addon. After installing it, Restart your browser.

Now go to Tools<Default User Agent<Internet Explorer and Select Internet Explorer 7.

Now go to your Facebook Profile. You might be seeing that the page is having errors and unnecessary spaces between them. So follow the link and Install FB Purity Extension in your Firefox Browser.

So, that's all! Refresh your Facebook profile. And you will be seeing that your old profile look is back!

For Google Chrome:

Go to your desktop. Right Click on Google Chrome's Shortcut and Click on Properties.

Now properties Window will open. Go to Shortcut Tab. Now you need to add some changes in theTarget.

Paste the following code in the Target window after the : “C:\ProgramFiles\Google\Chrome\Application\chrome.exe”

Code to add For Windows Vista & Windows 7 Users.

–user-agent=”Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)”

Code to add for For Windows XP Users.

–user-agent=”Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)”

Remember, you need to leave space between:

“C:\Program Files\Google\Chrome\Application\chrome.exe”<SPACE>–user-agent=”Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)”

Apply it and Hit OK.

Now go to your Facebook Profile. In this you will be seeing that you are having errors in your timeline. So Now you need to install FB Purity in your Chrome Browser.

Refresh your Profile page (Ctrl+F5) !!

So that's all!! You got rid of Facebook Timeline in Chrome too!!

URL redirection Vulnerability in Google

2012-01-16T12:28:00.001+05:30

An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect.

A similar vulnerability is reported in Google by "Ucha Gobejishvili ( longrifle0x )". This problem may assist an attacker to conduct phishing attacks, trojan distribution, spammers.

Url: https://accounts.google.com/o/oauth2/auth?redirect_uri=http://www.something.com

Same vulnerability in Facebook, Discovered by ZeRtOx from Devitel group:

http://www.facebook.com/l.php?h=5AQH8ROsPAQEOTSTw7sgoW1LhviRUBr6iFCcj4C8YmUcC8A&u=www.something.com

Impact of Vulnerability :

The user may be redirected to an untrusted page that contains malware which may then compromise the user's machine. This will expose the user to extensive risk and the user's interaction with the web server may also be compromised if the malware conducts keylogging or other attacks that steal credentials, personally identifiable information (PII), or other important data.
The user may be subjected to phishing attacks by being redirected to an untrusted page. The phishing attack may point to an attacker controlled web page that appears to be a trusted web site. The phishers may then steal the user's credentials and then use these credentials to access the legitimate web site.

HTTPS Everywhere | protection against Firesheep attack

2012-01-02T21:28:00.002+05:30

Firsheep add-on is an easiest method to hack facebook, Gmail or any other account over an unsecured wireless network.today I am going to say you how to protech yourself from this attack.This new trick is HTTPS Everywhere Firefox add-on
The Electronic Frontier Foundation developed HTTPS Everywhere before Firesheep came on the scene, but it’s revamped it to offer more robust protection against Firesheep snooping.

Many websites offer limited support for encryption over HTTPS, but they make it difficult to use. They may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS. HTTPS Everywhere alters browsing so that your default connection is no longer unencrypted http but the more secure, encrypted https whenever a site offers that capability.

restriction:

HTTPS Everywhere can protect you only when you’re using sites that support HTTPS and for which HTTPS Everywhere includes rules

Firefox users can get it by clicking here:

https://www.eff.org/files/https-everywhere-latest.xpi

hack a website using c99 script

2012-01-02T11:09:00.000+05:30

The c99 shell script is a very good way to hack a php enable web server. You have to find an unsecure uploader to upload this file to the server. Here i used unsecure uploader means the uploader which can’t check for file extension and allow us to upload our executable scripts to the server.

This c99 shell allows an attacker to hijack the php enable web server. This script is very user friendly and having very good interface so it is easy to use. You can issue any php command to run on the web server. You can use any of the commands given in the script to run on the web server.

NOTE: This post is only for educational purpose. We advice you not to try this on any website. Use of this script on any website is illegal.

For hacking a website using C99 script follow these steps.

1) Find a php web site with an uploader.
2) Test the file uploader to be secure or not by uploading files with a server executable extension.
3) If uploader is unsecure then upload the shell script.
4) Execute the uploaded code by navigating to the uploaded page.
5) A c99 script GUI will show up with a lot of options and details.
6) Look for the server details if the safe mode is on or off. If safe mode is off then the entire web server can be controlled by the script. If its on then on the directory in which c99 shell script is uploaded can only be controlled by the script.
7) Apart from being able to chmod, modify and delete files c99 also lets its user brute force the ftp but it requires an additional dictionary file which can run into hundreds of MBs.

NOTE: You can also execute this script on the web server by RFI

Search the and download the script from google. or download from link
c99
but upper link may not work because script will soon be deleted by the file host.

Patator – Multi Purpose Brute Forcing Tool

2012-01-01T10:09:00.000+05:30

This tool has many advanced features which are not available in other brute force attack tool. This tool is multithreaded and easy to use.

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.When Medusa, Hydra or other brute-force tools fail to do what you want, Patator might be what you need.

This tool support

ftp_login : Brute-force FTP
ssh_login : Brute-force SSH
telnet_login : Brute-force Telnet
smtp_login : Brute-force SMTP
smtp_vrfy : Enumerate valid users using the SMTP VRFY command
smtp_rcpt : Enumerate valid users using the SMTP RCPT TO command
http_fuzz : Brute-force HTTP/HTTPS
pop_passd : Brute-force poppassd (not POP3)
ldap_login : Brute-force LDAP
smb_login : Brute-force SMB
mssql_login : Brute-force MSSQL
oracle_login : Brute-force Oracle
mysql_login : Brute-force MySQL
pgsql_login : Brute-force PostgreSQL
vnc_login : Brute-force VNC
dns_forward : Forward lookup subdomains
dns_reverse : Reverse lookup subnets
snmp_login : Brute-force SNMPv1/2 and SNMPv3
unzip_pass : Brute-force the password of encrypted ZIP files
keystore_pass : Brute-force the password of Java keystore files

Download:

http://patator.googlecode.com/files/patator_v0.3.py

Pak Cyber Combat Squad Hacked 165 Indian Websites In The Month Of December

2011-12-27T18:04:00.002+05:30

Since last few years Pakistani hackers are hacking Indian websites. They have hacked several Indian high profile sites which includes BSNL too. Yes Pakistani hackers have hacked BSNL website on 27/10/2011.

But this time a Pakistani hackers group ‘Pak Cyber Combat Squad’ hacked 165 indian websites in the month of December. 1st they hacked 100 indian websites on December 12 and they have poasted the links of all the hacked site at http://www.pastie.org/3011079 where they have written that ‘100 more sites got 0wned by Krayzie & Unkn0wn’. This is the case of December 12,2011.

Pakistani hackers group “Pak Cyber Combat Squad” again hit the mark on the 3rd week of December. These are the links:

• http://commotradehub.com/
• http://wtsjobs.com/
• http://wtsacademy.org/
• http://wtsjobs.in/
• http://wtsacademy.com/
• http://wtsacademy.in/
• http://freshersindia.in/
• http://aviskarinfrastructure.in/
• http://daibadeepinfotech.com/
• http://smslane.in/
• lhttp://tigroup.in/
• http://vision28.com/
• http://microtechsols.com/
• http://multilevelmarketingsoftware.in/
• http://domso.in/
• http://bcig.in/
• http://vaaptechnology.com/
• http://sujankumarsarkar.com/
• http://webims.in/
• http://mlmgoogle.com/
• http://globeoneservices.com/
• http://ecogreenmkt.in/
• http://tfkolkatabsnl.co.in/
• http://day2dayinvestments.com/
• http://webtechsols.in/
• http://a1services.co.in/
• http://djshelly.com/
• http://velamaritime.gr/
• http://asteltech.com/
• http://divineconsultants.in/
• http://jakly.com/
• http://dynacon.in/
• http://asteltech.com/
• http://ivineconsultants.in/
• http://dynacon.in/
• http://wwsols.com/
• http://samridhee.com/

But the fact is that this group has continued hacking more and more Indian sites. About two days back,they have again hacked 18 more Indian sites.

These are the hacked site:

1. http://www.123businesstips.com/
2. http://www.123financemanagement.com/
3. http://www.123indianfashion.com/
4. http://www.123jewelryshopping.com/
5. http://www.123luxuryhotels.com/
6. http://www.123musicmasti.com/
7. http://www.123weddingsupplier.com/
8. http://www.3waylinkbuilding.com/
9. http://www.aieee-india.com/
10. http://www.dreamzcraftweddingplanner.com/
11. http://www.freelanceseo.in/
12. http://www.jobbridge.in/
13. http://www.pinklotusboutique.com/
14. http://www.pinklotusboutique.in/
15. http://www.ramsinghmedicalstores.info/
16. http://www.sachinsaxena.in/
17. http://www.sanchiweblead.com/
18. http://www.traveltalks.org/

After hacking the above mentioned sites they have added a picture and the following messages were written there:

‘krayzie &unknown was here for a while !’they also added that they love to break highly secured server.

How to send password protected Email

2011-12-27T12:21:00.000+05:30

Now a days, Email is the most common media for information interchange. It is used by most of the working person. Most of the popular email servers such as GMail, Yahoo mail, Hotmail and many other provide this email service for free. Users need to create a free account and then they can use their account for sending and recieveing emails.

But Cyber criminals are always try to hack passwords of users email account to read emails and misuse the account. Do you know? you can also protect each mail sent by you with a password for better information security. If some one maneged to get into the account, he would not be able to read the email without knowing the password

. To send the password protect email, you have to use a third party service named as LockBin

go the link http://www.lockbin.com/lockbin.php
Fill the form and send the mail. And also inform receiver that you have sent the mail and password as well
Recipient will get the email with a link. To read the email, he will have to go the link and verifiy the password which you have entered while sending the email.
After submitting password Receiver can view message.

The Mole – Automatic SQL Injection SQLi Exploitation Tool

2011-12-20T22:34:00.001+05:30

Advance automatic sqli tool which is easy to use. It only takes URL and the valid string to detect the injection and exploit.

Features:

Support for injections using Mysql, SQL Server, Postgres and Oracle databases.
Command line interface. Different commands trigger different actions.
Auto-completion for commands, command arguments and database, table and columns names.
Support for query filters, in order to bypass certain IPS/IDS rules using generic filters, and the possibility of creating new ones easily.
Developed in python 3.

Download for Windows

Download for Linux

[VIDEO]Yeahh!! It Happens on Live Television – How to Stop Spreading This Spam

2011-12-16T21:47:00.004+05:30

My Facebook timeline (you no longer call it wall after the facebook update) was filled with this spam video from many friends who clicked on the link on their timeline. The thumbnail posted along with the link on the timeline looks like a video and adding to it the most cleverest part the spammer did was adding the users name on the post in the timeline. This urges the user to further think the video was posted by his/her friend since it directly calls out their name and asks them to watch the video.

Though you may already be knowing that it was a spam after you clicked on the link, You still might be spamming your friends timeline every hour or so and many of my friends told they had no idea how it was happening. This post will help you to stop the spam post from being spread on your friend’s timeline.

How the Spam Infected You

Given below are the steps that you passed through when you clicked on the link on your timeline.

Step 1. You clicked on the link and Landed on a page which is similar to the one below.

Step 2.You were asked to click on the Install Plugin in order to watch the video, You were so desperate to watch the video that you least bothered to look around the page and notice that its not a Trustworthy Youtube page. Finally you clicked on the link.

Step 3. You clicked on Allow incase you were using Firefox.

Step 4. You clicked on Install after the countdown. If you had bothered to look a bit you would have noticed the site serving the addon under the Youtube Extension heading.

Step 5. Refreshed the page > Either watched a lame fake video else Punched your fist on the desk realizing it was fake. :/

How to Disinfect Yourself from the Spam.

Firefox Users -

Step 1. Open Browser > Click on Options > Addons OR Press Ctrl + Shift +A.

Step 2. Click on Remove button beside the Youtube Extension or something similar.

Step 3. Restart Browser.

Chrome Users -

Step 1. Open Browser > Click on the Spanner Icon (Settings) > Tools > Extensions.

Step 2. Click on Remove button beside Extension Youtube or something similar.

After performing the above steps, It is recommended to use CCleaner application and clear all cookies and caches of your browsers.

How to Prevent Spam Posts on Your Timeline.

Till the spam is blocked, It is recommended that you disable others ability to post on your timeline.

To block it, Follow these instructions.

Open Privacy Settings > How you connect > Who can post on your timeline > Change it to ‘Only Me’.

These instructions should save you from the spam attacks, Do read our Facebook Security Guide for more information on protecting your account.

How to like stories on your wall in facebook at one click

2011-12-05T20:30:00.001+05:30

Do you know? you can like all stories on your wall at one click in facebook. I know its foolish to like all the stories without knowing what they are. But many people do it for fun. And i saw many people who really like all the stories which they see on the wall.

But assume how much time it will take to go on each story and like it. It will take time and effort.

But I have a nice tool which can save your time and effort both. If you have Google chrome web browser, you can do it at a click. If you do not have Google chrome Browser, you can download it a click.

Now open Google chrome and click on the link below

http://www.chromeextensions.org/social-communications/facebook-like-all/

this is the Google chrome extension named as Like All. Install it in your browser.

Now go to your wall and click on the like button at the top rightof your browser.

Now you have liked all the stories at a click

Pak Cyber Combat Squad hackers hacked more than 100 websites

2011-12-05T20:20:00.001+05:30

pakistani hackers are busy in attacking websites and taking them down. They have claimed to hack more than 100 websites and also posted a the links on http://pastebin.com/ZprLHntT

Pak Cyber Combact Squad, the hacker group has also posted the deface message,”We can see that you are trying to free us from the tyrannical regime of dictators where we have freedom, and are replacing it with a so called democracy where the political parties are just legalized form of street gangs, You killed our children in the name of revolution, You bombed and destroyed our homes in the name of collateral damage and left many of us disabled.”

I have also seen a news in Hindustan Times website saying that BSNL website was also hacked by Pakistani hacker groud Pakistan Cyber Army.\According to Telecom Talk, the hack was first spotted at 2:21 am on December 4th, 2011, and the group comprises of five hackers by the aliases x-c0p, nginx-adm1n, enc0der, k3rnel and sm0ky.

A new facebook worm is spreading ZeuS trojan

2011-11-30T08:25:00.001+05:30

According to the report published by a Danish security company, a new facebook worm is spreading ZeuS trojan. This worm relies on stolen Facebook account credentials to spam all the friends of the victim by advertising a link that allegedly points to a jpeg image file. When a user clicks on the link, it servers a malicious screensaver which installs ZeuS Trojan on the users computer.

The worm is also found to have anti-VM capabilities, making it useless to execute and test in a virtual environment, such as Oracle VM VirtualBox and VMWare.

I personally suggest users not to click on any this kind of post or link on po

sted by friends. Always verify the link before clicking on it.

“Password”, Worst Password Of The Year 2011

2011-11-27T21:53:00.001+05:30

Password, the secret word which we use to protect our accounts. There are lots of website online so it is hard to think each time a hard to guess and easy to remember password. people either use the same password over and over again or create easy to remember passwords (or both).

This report is generated by the data,“containing millions of stolen passwords” posted by hackers. Company has analyzed these data and create a list of weak password.

“If you’re one of those people who thought it was clever to use “password” as your password, it’s time to wisen up and make a change. Switching the “o” to a zero to make it ‘passw0rd’? Not much better,” advised SplashID.

If we take a look on the lists of previous years’, most of these re-appears in the common passwords. This is the reason why company restrict passwords to have capital letters, special characters and numbers all in a passwords to force users to keep a secure password. But users often forget this type of passwords. There are may websites and tools which suggest users some strong passwords.

The top 25 most commonly used passwords for 2011 according to SplashID:

password
123456
12345678
qwerty
abc123
monkey
1234567
letmein
trustno1
dragon
baseball
111111
iloveyou
master
sunshine
ashley
bailey
passw0rd
shadow
123123
654321
superman
qazwsx
michael
football

You could soon read emails on your contact lenses

2011-11-23T20:15:00.001+05:30

The scientists are trying to convert this imagination into reality. An international team which claims to have developed a prototype lens that could potentially provide the wearer with hands-free information updates. This imagination is possible by futuristic technology.

The scientists from Washington University in the US and Aalto University in Finland have constructed a computerized contact lens and demonstrated its safety by testing it on live eyes, and there were no signs of any bad side effects.

At the moment, the contact lens device contains only a single pixel, but the team sees this as a "proof-of-concept" for producing lenses with multiple pixels which, could be used to display short emails and text messages right before one's eyes.

The contact lens created by the scientists consist of an antenna to harvest power sent out by an external source, as well as an integrated circuit to store this energy and then transfer it to a transparent sapphire chip containing a single blue LED, 'The Daily Telegraph' reported.

One major problem the researchers had to overcome was the fact that the human eye, with its minimum focal distance of several centimetres, cannot resolve objects on a contact lens. Any information projected on to the lens would probably appear blurry.

2011-11-18T16:09:00.001+05:30

Today i am going to write about a nice firefox addon. It's name is Proxy Tool. It is a powerful, User-friendly proxy tool to manage your proxies and anonymity needs. It includes 43M+ user agents (world's largest), 10 different spoofed HTTP referrers, auto-proxy rotation, plus many more.

Proxy Tool is an user-friendly proxy tool that completely replaces Firefox's limited proxy features.
It has many features that will make it your best friend when surfing the sites anonymity.

Features:

Can import up to 100 tested/working HTTP/HTTPS/SOCKS proxies from various proxy list providers such as http://proxylist.co
Easy to understand the pop-up menu with basic, yet powerful features.
Delete Flash cookies/site cookies manually or automatically.
43 millions different user agents (world's largest) for browsers, including iPhone and iPad browsers.
Spoof HTTP referrers, which can be editable (up to 10). Disable automatically on 2nd page.
Mouse-over Tooltip to display the proxy/actual site details
When entering IP:Port proxy (HTTP or SOCKS) in text box, the proxy settings are updated automaticall
Download Here:
https://addons.mozilla.org/firefox/downloads/latest/239381/addon-239381-latest.xpi