hack with style

Surprise! HWS Developed Its First Facebook HTML IFrame WebPage

2012-02-12T10:03:00.000-08:00

After hours of trial and error and coding and coding and just coding, finally I succeeded in crafting and developing first Fans Welcome Page on Facebook for my new site TheEngineeringProjects. This was indeed one of the most enjoying designing thing I came across so far. Designing blogger templates, widgets, icons, buttons is more like a hobby now but taking a step further and branding a service and product on Facebook was a complete new experience. The Facebook application used in building this Welcome Page is called Static HTML IFrame Tabs. My coming tutorials on this are close to never shared before on any blog, forum or even the Facebook developers page and most often this is done at premium levels but you will be really excited to implement it to your blogs once we publish the series Guide for free. Your motivation has helped me a lot in taking this step and I will need your valuable support always. I am really excited to share this unique "Facebook Welcome Page" of TEP. So let's have a look of it:

PS: Please view it using any browser but not IE. The Page is Compatible with Mozilla, Chrome, Safari and even slightly with IE8+

TEP Fans Welcome Page

I will publish series of posts on this topic with free and unique Code designs and will make sure that the coding is made as easy in implementation as possible. I would be more happy viewing your Welcome Pages with different colors and tastes. Peace and blessings. :)

Need your Feedback on this!

I will highly appreciate your precious feedback on this latest finding. Your comments mean a lot. If you have any idea you can share before we publish the tutorials then please share it openly with all of us. I would love to hear how you like it.

How To Re-Enable Right Click on Websites in Mozilla Firefox

2012-02-07T13:41:00.000-08:00

Many times we come across several websites where the right click has been disabled. This is done mainly to avoid any copying of text or images from the webpages of the website. Now follow the following steps in order to enable right click on various right click disabled websites. The disabling of the right click is done mainly by the means of JavaScript and thus it will also depend on the browser that you might be using. Here we will tell you how to disable it on Mozilla Firefox, Internet Explorer and Google Chrome.

Steps To Follow

Download the RightToClick add-on from the link given below and install it. https://addons.mozilla.org/en-US/firefox/addon/12572/
On installation a golden arrow will appear on the top right corner. When any right click disabled site appears then click on the mouse pointer to generate various options for the right click.
You can access and tweak with the advanced options by clicking on the mouse icon or by going to Tools and then clicking on the RightToClick.

Crack Manually Any Latest Version Of IDM

2012-02-07T13:32:00.000-08:00

Hello Guys, Today I am going to post and explain about this techniques that how to crack a manually any latest version of Internet Download Manager (IDM)…No need of any keygen,any crack, download idm from official website and crack it manually. By Using these steps you can crack idm without any registration. Follow the following steps to crack IDM…

STEP BY STEP GUIDE TO CRACK IDM :

Step # 1

Download IDM from its official website www.internetdownloadmanager.com and if you already install IDM then do it update by going to help and then click on “chek for updates”.

Step # 2

Now open you c drive, and then open windows folder, open system32 folder, now open drivers folder and now open etc folder and click on hosts file….or open hosts file in notepad. Path –> C:\Windows\System32\drivers\etc.

Step # 3

Now right click on hosts file and go to its properties, then go to security tab and then select your admin account, just below u will see an edit button (in front of change permissions), Now give the user full control and write and read rights and then click on apply and then click on Ok, now u will be able to edit the hosts file and save changes in it.

Note : It is not allowed to make changes in hosts file in Windows 7…So for windows 7 users, the soloution is given below.

For Windows 7 Users

For Windows 7 users, due to security reasons you will not be able to save hosts file.so follow this steps :

First of all go to C:/ drive then go to Windows Folder and then go to System32 folder and then go to Drivers folder and then go to Etc Folder, in the Etc folder you will see the hosts file.
Now right click on hosts file and go to its properties then go to Security tab select Users under Group or user names and click on edit button,Permission For Host Window will get open.
In that window select Users account and grant permission in bellow section which is “Permission for SYSTEM” by clicking all checkbox under “Allow” Name and press Ok.Dnt click on any Deny check box.
Otherwise the best option is copy this hosts file to desktop and delete it from etc folder…Now edit hosts file(which copied on desktop)…Make changes according to next step, now again do it copy to etc folder..

Step # 4

Now,at the end of the host file copy and paste the below codes :

127.0.0.1 tonec.com
127.0.0.1 www.tonec.com
127.0.0.1 registeridm.com
127.0.0.1 www.registeridm.com
127.0.0.1 secure.registeridm.com
127.0.0.1 internetdownloadmanager.com
127.0.0.1 www.internetdownloadmanager.com
127.0.0.1 secure.internetdownloadmanager.com
127.0.0.1 mirror.internetdownloadmanager.com
127.0.0.1 mirror2.internetdownloadmanager.com

Now hosts file will look like this :

After adding these piece of code, save the notepad file. And exit from there.

Step # 5

Now open IDM and click on Registration. When you click on registration, Now a new dialog(window) appears that is asking for Name, Last Name, Email Address and Serial Key.

Step # 6

Now Enter you name, last name, email address and in field of Serial Key enter any of the following Keys:

HUDWE-UO689-6D27B-YM28M
UK3DV-E0MNW-MLQYX-GENA1
398ND-QNAGY-CMMZU-ZPI39

Step #7

After you click ok, it will show an message that you have registered IDM successfully.

Now start your Internet download manager, and now you IDM has been converted to full version and specially when you update next time, your registration will not expire.

That means it will remain full version for life time and you can update it without any problem in future.

That's All Enjoy guys..... :))

Undo Sent Emails in Gmail

2012-02-03T13:33:00.000-08:00

Did you know you can undo a sent e-mail in Gmail? It’s a lesser known feature, but Google just made it even better than it was before. When it first launched, you were given a 5-second window during which you could hit “undo.” Now that’s up to 30 seconds, Google Operating System Discovered.
The feature is hidden from most users who don’t know where to look, so here’s a quick guide to avoiding social and workplace faux pas with the click of a button. Be aware that the feature is part of Gmail Labs, though. That means it’s still in testing and it might not always work as intended.

Go to Gmail Lab

Since the Undo Send feature is part of Gmail Labs, you’ll have to navigate to the Gmail Labs page to activate it. Load up Gmail and look in the top-right corner of the page. Between your e-mail address and Settings you’ll see the green Labs icon. Give it a click.

Enable “Undo Send” and Save Your Change.

You’ll be presented with a list of features Google is testing in Gmail. Some are very useful and some are just fun. We’ve gone into more depth on all Gmail Labs has to offer in previous articles, but this time we’re here just for the Undo Send feature.You’ll usually find it close to the bottom of the list. We’ve included a picture of it above so you know what you’re looking for. Just select Enable then scroll down and save your changes.

Customize Undo Send’s Duration

By default, Gmail gives you a 10-second window of time in which you may undo a sent e-mail. You can change that to five, 20 or 30 seconds by going to Settings (in the top right corner of the main Gmail page, right next to the Labs icon) and finding the Undo Send section inside the “General” tab.

There you can enable or disable Undo Send and change the duration with a drop-down selection box as pictured above.

Write and Send Your E-mail

Now that Undo Send is enabled, it works each time you send a new e-mail. You don’t have to do anything unusual beforehand to make it possible to use Undo Send with that e-mail.

Click the “Undo” Button After You Send

Now you have either five, 10, 20 or 30 seconds to undo your sent e-mail, depending on what you selected under Settings.As soon as you hit Send, a subtle line of text will appear above your Inbox saying “Your message has been sent.”

It will be accompanied by a few extra options. Among them is “Undo.” Click that within the allotted time and your faux pas will be prevented.Note that you can hit “Z” on your keyboard, the Gmail shortcut for undo.

Just don’t navigate away from or close this page, because once you do, you’ll lose the opportunity to undo your sent message forever.

“Sending Has Been Undone”

You’ll immediately be taken back to the e-mail composition page, and your e-mail will be in draft form, unsent and ready for further editing — or deletion, if writing it was ill-advised to begin with!

Turn Your Desktop in 3D (windows xp, and 7)

2012-02-02T14:55:00.000-08:00

If you are not keen on the cookie-cutter appearance of your Oprating system or windows, i have covered some great tools for tweaking every last pixel of your desktop
so it looks and acts just how you want. These are all small things that can be changed to make the desktop experience more desirable, cutom and geared to our own interests.

SphereXP- ShphereXP is world's number one 3-dimensional desktop for windows xp =)

YODM 3D- Virtual Desktop Manager featuring the Cube 3D effect, really awesone effect

Matodate- convert your desktop in a 3D and make it very impressive !

Shock 4Way3D : Multiwindows and mirror effects

Hope you guys like it .... :))

Facebook Timeline Cover: Create Hot Designs!

2012-02-02T14:47:00.000-08:00

Facebook's new Timeline profile design have almost replaced all old profiles and offers a complete different social touch. We have shared detailed tutorials on how to customize the look, colors and layout of Facebook and now its time to customize Facebook timeline Cover Photos. New creative ways of Changing the look of timeline is at its peak. Some online tools have been created that lets you to automatically generate a Cool Cover for your new profile. These generated covers fit perfectly in your timeline with proper width and height dimensions. Using these tools you can make amazing cover photos either using your memorable photos or a cool designed version of your Profile title or your name.

I am listing below 4 great website tools that will help you make beautiful Cover photos for your FB Profiles. Lets check them out then!

FB Cover PIX - Facebook Cover Gallery

FB Cover Pix is created exclusively for uploading, exploring, and sharing cover photos that can be used on Facebook's new Timeline profile design. It offers a large gallery of downloadable images which you can upload to Facebook and add them as your cover pages.

myFBCovers - Facebook Cover Gallery

myFBCovers is an interesting site that does not only allow you to create a Facebook Cover but you can also share your personalized cover with myFBcovers members and can expect to win a cash prize up to $50 per week and $100 per month if your cover gets the most downloads. You can also take inspiration from thousands of cool designed covers and can see which colors and design is downloaded the most. I am going to design one, will you? :)

It allows you to crop and adjust your cover size. You can also add effects like Polaroid and panorama. It has all possible Cover categories like Abstract, nature, celebrities, holidays and much more!

TheSiteCanvas - Generates a Profile Cover

The intro image that you see at the top of this post is created using thesitecanvas. It is my favorite because it lets you convert your simple Facebook Name into a beautiful Movie like Title Design. You can select which design would you like for your name or can you can even choose your photos to give them a unique look and pattern. Do try it out!

Facebook Profile Covers

Facebook Profile Covers also lets you choose a Design cover for yourself out of 1000 available profile covers. It is pretty much similar to myFBcovers but it does not offer any cover Contest. You can only create and download your designs but can not make Money online with your covers. It is still worth try due to its beautiful colors and variations. It though contains a watermark on all designs.

I hope you find these tools helpful in branding and personalizing your timeline layouts. I will be posting more on customizing Timeline profile. Peace and blessings pals! :)

Hacker attack techniques and tactics: Understanding hacking strategies

2012-02-02T14:15:00.000-08:00

Introduction of hacking

Although this famous Chinese general determines nothing about hacking techniques as he had heard 2,500 years ago, "The Art of War," wrote so you have to agree with his recommendation to know that it is very good, the enemy and his techniques only. If they had a network administrator, then one of its main tasks the defense of their own systems. Knowing what attacks are possible and how to combat them is a huge help and allows them to keep their systems from damage. Although there are thousands of possible attacks, which are read in countless books and websites to the smallest detail, to give them the following five categories an excellent overview of the lion's share of attacks that may threaten their systems.

Standard Attacks

Nowadays you get any hardware or network application on the market in the rule with the following settings: User name and password that allow an administrator to access the system. One of the most common ways to get unauthorized access to a system is that the administrators do not change these default settings. Whether this is a database application, a router or a printer - the protection against these attacks is very simple. The first thing that should make everyone, if she/he is a new system connects to a network or install an application on a server, the immediate need to change the default access settings.

Phishing

Phishing is probably the technique of virtual identity theft more popular than exists on the network because of its effectiveness, but much of this honor comes on the basis of its establishment and procedure, which may be of the most easy and economical to carry out. What usually happens is that the perpetrators make a false application, message, mail or any means with the aim of bringing the user to log into your account, for example, its commercial banks to continue with whatever was interested in the message? The trick is that when the user enters their email address and your password on the wrong page of your bank, the information sent to a text file on the server hosting the fake page or by mail to which it attacks.

Stealers

Leaves many users store passwords you use every day in browsers, but beyond that anyone can enter and go to these passwords manually, as there are applications that automatically stealers steal sensitive data through commands stored very easy to perform or even GUIs accessible to any attacker. Its use with auto run pen drives can be a powerful combination.

Parallel Session Hijacking (Side jacking)

Similar in function and objectives that the hijacking, but the difference this time take advantage of victims who are connected to the same network or public wi-fi open the perpetrator. The side jacking is a normal session hijacking, but over wi-fi networks, so that the process is similar. Applications that performs sniffing, using both Chrome and Firefox that to have Fire sheep, that shows the active sessions and unprotected in a wireless network.

DNS Spoofing

It is very similar to phishing. That is, if you share with someone local network connection and this person wants to know your password, say, Facebook, you can create a site using redirection reply and that opens when you enter the actual address of Facebook. In this case, you are giving data directly to this person and probably not because you find out could then send the information, we redirect back to the beginning of simulating a bad original Facebook password input or redirected to your profile through the creation of a parallel process that takes center stage once the part of data theft.

About the author: Alia Haley is a blogger by profession. She loves writing on technology and luxury. Beside this she is fond of cell phones. These days she is busy in writing an article on Wooden headsets and 3g Tablet.

Apache server in BackTrack 5R1 : how to host.[with video]

2012-01-28T02:19:00.000-08:00

Hey guys . How you been ?
Have you ever hosted files in free web hosting servers like my3gb or x10hosting etc. For what you use them ?
answer may be >> For Phising >>for cookie stealing >>for IP logging etc etc.
sometimes they block your ID . So why dont you create your own server in your own computer . here is the video which explains how to do that using backTrack 5 R1.

Commands Used

apache2ctl start
mcopy
apache2ctl stop
apache2ctl restart

Video

Guys plz comment and share and like .... thanks
Stay Tuned !!!!

Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker"

Apache server in BackTrack 5R1 : how to host.[with video]

2012-01-19T07:40:00.000-08:00

Hey guys , you might be disappointed from HWS because its been a long since we made any tutorial.
Actually Xeo is busy with his projects and me , well m having my SEMESTERS .
okay , i get many queries regarding how to hack a website .So first step should be gathering information and second step must be finding vulnerability in that site so that you can exploit that vulnerability to gain access.

FOR EDUCATIONAL PURPOSE ONLY !

If you using BackTrack then it'll be much easier for you cause in BT w3af is already installed so lets get started !

For BackTrack users

Go to Application > BackTrack > Exploitation > Web Exploitation tools => w3af gui .
Click on w3af gui , a window will apear and there is your w3af.

For Windows

You have to install in manually if you using windows .
You can download it from HERE
When download is completed extract it and you'll find the installation file there. Install it

Using w3af

Now its time to use w3af , its pretty easy. When you start w3af you'll see a window like :

There is a Target text field , you have to enter the URL of the target website there . Below that there is a Plugin and Active tabs . After entering the URL of the website , you have to select the Scan type by selecting those plugins . More plugin you select , more will be the time to scan.

Select the Scan type and press the play button above .

Getting the results

When the scan is running or finished , you'll see a window like :

Can you see the lower right corner , there are 3 pointers with some signs and with numbers 2 0 0 . Those are vulnerabilities no. . If you get numbers on 2nd pointer then you'll have a high rate of success.

Now go to Results . There you'll find the result of the scan .
Above window is Exploits window , if you see anything on middle panel then the site is more vulnerable. Now when you have the vulnerabilities , you can exploit that according to your choice .

Guys plz comment and share and like .... thanks
Stay Tuned !!!!

Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker"

Installing Flash Player Plugin on Firefox without having Administrator Access or Premissions

2012-01-06T07:59:00.000-08:00

Hello guys ,hope you all are great and enjoying good health. Today was my first day on my new job and i am provided a laptop but when I opened YouTube I encountered a problem that flash is not installed and when i tried to install it,it encountered a problem.Actually the IT department there has banned the installation of flash player, but how is it possible for a hacker to give up in front of the IT,so below is the method which I used to run YouTube videos without installing flash player.

This is how I managed to install it without administrator permissions:

Download this ZIP archive to your hard disk.
Extract the file in the archive. You can use any program capable of opening .zip files (WinZip, WinRAR or the free and great 7-zip). There are also websites which can uncompress archives: wobzip.org.
Copy the file NPSWF32.dll to %APPDATA%\Mozilla\Plugins\
- %APPDATA% is not a real folder. It's an alias. By inserting it in your windows explorer address bar, you'll be redirected to the real folder which holds your applications profiles and settings. The location of this folder depends on various setting that's why we need the alias and not an absolute path.
- You can open this folder simply choosing "Start → Run → Type in %APPDATA% → OK".
- In case you don't have a Plugins folder you can create one and place your files there.
Restart Firefox
Enjoy your flash websites!

NOTE : If you don't find the folder Plugins,then create it as in my case it was not present there. Enjoy .... ;))

Few Google Tricks for Begineers

2011-12-29T08:05:00.000-08:00

A few things you might want to try with Google:
Hand type the following prefixes and note their utility:

link:url Shows other pages with links to that url.
related:url same as "what's related" on serps.
site:domain restricts search results to the given domain.
allinurl: shows only pages with all terms in the url.
inurl: like allinurl, but only for the next query word.
allintitle: shows only results with terms in title.
intitle: similar to allintitle, but only for the next word. "intitle:webmasterworld google" finds only pages with webmasterworld in the title, and google anywhere on the page.
cache:url will show the Google version of the passed url.
info:url will show a page containing links to related searches, backlinks, and pages containing the url. This is the same as typing the url into the search box.
spell: will spell check your query and search for it.
stocks: will lookup the search query in a stock index.
filetype: will restrict searches to that filetype. "-filetype:doc" to remove Microsoft word files.
daterange: is supported in Julian date format only. 2452384 is an example of a Julian date.
maps: If you enter a street address, a link to Yahoo Maps and to MapBlast will be presented.
phone: enter anything that looks like a phone number to have a name and address displayed. Same is true for something that looks like an address (include a name and zip code)
site:www.somesite.net "+www.somesite.+net"
(tells you how many pages of your site are indexed by google)
allintext: searches only within text of pages, but not in the links or page title
allinlinks: searches only within links, not text or title.

New Facebook Chat Smileys

2011-12-25T03:52:00.001-08:00

[[171108522930776]] Troll Face
[[164413893600463]] MEGUSTA
[[218595638164996]] YAO
[[189637151067601]] Lol
[[129627277060203]] Poker face.
[[227644903931785]] Forever ALONE.
[[100002752520227]] OKAY
[[105387672833401]] F**K YEA.
[[100002727365206]] CH AC.
[[125038607580286]] Forever alone navidad.
[[143220739082110]] FK KIDDING ME.
[[168040846586189]] Feel like a Sir.
[[169919399735055]] NOT BAD
[[142670085793927]] M O G.
[[170815706323196]] Cereal Guy
[[167359756658519]] NO
[[224812970902314]] Derp
[[192644604154319]] Derpina

Must know things in HACKING

2011-12-24T08:02:00.000-08:00

Hey guys , how you doing ? hope everything is alryt ! :)
Well some of my friends like ujjwal ;-) asked me about port numbers , IPs , and all those basics . So i thought it would be good if i post a tutorial on these things .
I'll be explaining these things in brief .

INTRO

So here i start . I'll be explaining about IPs , Port numbers , port scanners , IP scanners , whois and archive.org in brief .
Because in network or web-hacking these are most fundamental and most essential information you are gonna use .

IP

IP is short form of Internet Protocol. Like we all have unique address and u can say phone numbers , every computer connected to any network , that might be internet or any private network , must have its own unique IP.

We track any computer through its IP only . There are two types of IP

Static ip - these types of IPs are generally assigned to organizations , like your college or university may have static IP.
Dynamic IP - these type of IP are assigned to private users like us . Dynamic IPs keep on changing.

To know about how to find IP of anyone check my tutorial on How to know the IP of your friend .

Port numbers

Port numbers are virtual ports on your computer on which different services are running . like when you browse internet , http - protocol for website browsing , uses port 80 .
When hacking a particular computer on any network , after IP address , port number is the most important thing you need to know . If our desired port is opened , we can exploit that according to our choice . Ports can be closed using firewalls.

Suppose someone says that some website's FTP password is this . now what he mean is , FTP : file transfer protocol , by which you can manage your files on a server via any ftp client , or via your command prompt or terminal , can be used using this password.
Now you must know how to use ftp via your command window. you use ftp command in both linux and window to get it done here is an example :

ftp www..com (23) //23 is optional as default port for ftp is 23

IP and Port scanners

There are lot of tools to know the computers which are connected to a particular network by scanning the network by any of these tools. You just have to give the IP range you want to scan for. I am listing some of the scanners below , these scanners shows you open PORTS too.

Angry IP scanner
LAN scanner
Advanced IP scanner

Just google them to download .

whois

First step in a mannered website hacking is footprinting or information gathering.
whois is a very popular service used by hackers to get information about whatever website they going to hack.
How to use whois:
simple, just search google for whois , then go to any site and enter the website address there. It will show you details of the website . some usefull links are :

http://www.whois.com/
http://who.is/
http://www.whois.net/

archive.org

This is fun :) .
Go to www.archive.org and put any website address there and then click on TAKE ME BACK button . It will show you the history of that site , like when it was published and the dates when it was modified , how it looked back then. this is also a very good step in footprinting .

Guys plz comment and share and like .... thanks
Stay Tuned !!!!

Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker"

Setup a LAN on your virtual box with video

2011-12-20T01:12:00.000-08:00

LAN on your PC

hey guys how u been ? hope everything's fine.

anyway what if you want to experiment or check some attacks and you dont have 2 computers ... well you can use virtual box to setup a lan there :D
its great. give it a try :)

VIDEO

guys like and subscribe the videos plz !

command used

ifconfig eth0 192.168.1.2 netmask 255.255.255.0

Guys plz comment and share and like .... thanks
Stay Tuned !!!!

Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker"

Vulnerability in Ajax File Manager - Upload Shell

2011-12-14T04:54:00.000-08:00

AJAX is about updating parts of a web page, without reloading the whole page.

First of all open Google Search Engine.
Now type this google dork in it inurl:/plugins/ajaxfilemanager/
Now hit Search and open any website shown in the result.

For Example :

or any site else ...

Now Put ajaxfilemanager/ajaxfilemanager.php after /plugins/ in url.
It will look like as below :

For example :

Now Find Upload and Upload Your shell/Deface/file
To view you File find /Uploaded/ directory in Website by using your brain.

How to increase Facebook page likes - G+ ones - Twitter Followers

2011-12-11T05:50:00.001-08:00

CLICK HERE to join .

How to Change Status Of Someone's Facebook Account

2011-12-11T05:30:00.001-08:00

Most of us know that Facebook allows us to update our status using our mobile phone. This feature is called Facebook Text. If you have Facebook Text enabled, you have to just type in the status and send this message to “923223265? using your registered mobile phone. Facebook will automatically update your status.

IMPORTANT!! :The slave MUST have the Facebook Text feature enabled in their account , if they don't then this will not work

So, in this Facebook hack, we will use SMSGlobal to change the status of your friend. SMSGlobal allows us to send message to any number from anyone’s number. That is, we will send Facebook a fake SMS from your friend’s registered mobile number.

Facebook will think that the message has been sent by your friend and his status will be updated according to the message contents sent by us.

Go to SMSGlobal.com and register for an account.
After logging in to your account, click on “Send SMS to a Number”

Enter the information as follows:

Send SMS To: 919232232665
Sender ID From: The registered mobile number of your friend.
Message: The status you want to update for your friend. Enter anything you want. It will appear as your friend’s new status.

Hit on Send SMS.
Now, Facebook will update your friend’s status to the message you have sent.

What is Backdoor ? How to use Backdoor

2011-12-10T19:00:00.001-08:00

Using backdoor, hackers can remotely access your computer without any Authentication and do whatever the hacker wants. I will tell you some of the features rest of them you need to try it and find out. These Programs :

Work as a key logger.
Send any Information from Victim’s PC to the Hacker’s PC.
Run any program on the Victims PC.
Display any Violating Image on victim’s Screen.
Open the CD Drive of the Victim’s PC.
Open any Web page on the Victims Screen.
Disable any Specific Key or whole Keyboard.
Shutdown Victim’s PC.
Start a Song on the Victim’s PC.etc.etc…………..

The best backtrack I found is Back Orifice so I am going to discuss it.

Back Orifice

Back Orifice is one of the most common backdoor programs, and one of the most deadly. The name may seem like a joke, but sure, the threat is real. Back Orifice was established in Cult of the Dead Cow group. Back Orifice is an Open Source Program. The main Threat of this software is that by making some changes in the code anybody can make it undetectable to the Anti virus Program running on the Victim’s computer. Apart from the strange title, the program usually gets port 31337, the reference to “Lit” phenomenon is popular among hackers.

Basics Back Orifice consist of 2 main parts. The "client" and the "server".
The client is the part of Bo2k that you use to control the other party's comp. By defult, it's bo2kgui.exe
The server is the file you install in the other party's comp in order to control it. By defult, it's bo2k.exe.
Never ever run bo2k.exe on your own comp unless you know what you are doing.
Another ipmortant component is plugins. To put it simply, Plugins are addon for Bo2k. They enhance the power of Bo2k.
For a list of plugins for Bo2k, goto the Bo2k official Site.
In order to control the other party's comp, you must first sent the bo2k sever to the other party, and once the other party runs it, you just start your bo2k client and using it you can assert your control.

How to use Back Orifice ?

How to use it? First you must configure both the client and the server. First let's configure the server.

Download a copy of Bo2k and unzip it.
Then run the file bo2kcfg.exe.
A window will appear welcoming you to the bo2k configuration wizard.
Click on next (For those experts, they don't use the wizard, they configure it manually.But one thing at a time first.)
Then the wizard will ask you for the bo2k server file(that's bo2k.exe).
By defult you just need to click next. However if you rename it or kept it in another folder, go browse for it.
Now it will ask you if you want TCPIO connection or UDPIO Connection. I would recommand TCPIO.
Now they will ask you what port you want it to listen to. More popular ones are 6666, 54321, 33137, 31336 and 4444. Try to advoid these. Try putting a number that you can remember easily. Avoid 12345, 1080, 8808.
Now they will ask you for your encryption type. Usually you get only to choose the XOR option. Do not choose 3DES if you are not in US.
Now they will ask you what password you want to use.Choose one and remember it.
Then click finished. The wizard will auto config the Client part for you. Be patient you can use it soon.
Now sent the server part(bo2k.exe ) to the other party and when the other party runs it, you will be able to connect to it.

What to do when victim clicks on server ?

Start bo2kgui.exe.
Click on file, then new server.
Type what ever name you want to call it.
Now type the ip address of the other party. If you don't know it,then you are out of luck.
If the other party is on irc, just goto irc and type /dns and you will get the ip (plz dun include the <> when typing /dns).
Now click on connect. You should see a window saying "Retriving server capability. Please wait.."
However if you see "Cannot connect to Remote server" that means the other party either did not run the Bo2k.exe or he is behind a firewall or maybe he has gone offline. Then you are out of luck. :)
One you have connnect, on the right window you should see some folders. I will explain the functions inside the folder in the next post .

Download Back Orifice 2000

Back Orifice 2000 can be downloaded at the following address: http://sourceforge.net/projects/bo2k/

How do I delete Back orifice 2000

Removing Back Orifice 2000 may require that you change the registry settings. To remove it at 7 simple steps, refer to the diagram below.

Click Start> Run, and type “Regedit”(without the quotes)
Follow the path below: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices “
Now looking in the right box: “The umgr32 = ‘c: \ windows \ system \ umgr32.exe”
Right-click on this entry and click Remove. Now restart your computer.
After restarting only open Windows Explorer. Make sure you can see all registered extensions. To do so, select “View Options and configure the appropriate settings.
Go to the WINDOWS \ SYSTEM directory, and find “umgr32.exe” file. Once you find it, delete it.
Exit Windows Explorer and reboot again.

NOTE : Only for educational purposes and If I got good response on it ,I will furthur explain the functions of folder and also how to add plugins in it.So give your comments if you like it !!!

Underscores vs dashes in URLs - Which is Better?

2011-12-10T17:41:00.001-08:00

The best thing I love about webmaster team is Matt Cutts video tutorials. He discusses SEO Tips and removes misconceptions and myths being wrongly propagated by several SEO agencies. I am proud of Google's great customer service. We all write post titles daily and these titles are responsible for driving most of the traffic from search engines. People often don't realize that every single character in the title has its own significance. Titles that are called the king are only those which are highly optimized in terms of keyword choice, word limit and use of Special Characters that we will be discussing today.

What is an optimized title?

Any title which has these features:

Title containing no more than 66 Characters.Use one liners
Title containing simple daily used English words. You don't need to use complex Vocabulary and no need to consult a Thesaurus for writing titles. Just apply the rule of KISS (Keep it simple Stupid). Average internet user always go for words that sound familiar in search results page.
Select choice of words from Google Keyword Tool. Ignore word Tracker
You can use the following symbols frequently: - : ! ?
Use the following symbols rarely: . & % # |
Never use the long Dash or Underscore i.e. _

Lets See What Google Says

Matt Cutts from webmaster help suggests that Underscores should always be avoided because Underscores are normally used by programmers while writing algorithms and is often misinterpreted by search robots. He suggested that dashes are much better to act as separators. Lets see what else he said:

How to Download Any Torrent File With IDM

2011-12-08T11:48:00.001-08:00

Downloading files from the Torrents site is easy and its legal (unless you are downloading copyrighted files). But the downloading speed from torrents depends upon many factors like seeders, leechers, internet connection etc. So if you have high speed internet connection still it happens sometimes that you are not getting good downloading speeds.Here is the solution for this problem, you can use IDM to download them.There are many methods on the internet to do this but this is the easiest, simplest and tested method, which I come to know just 2 minutes before by one of the member of our Facebook group named Rahul Ramachandran .

How to Download Torrent Files with IDM:

First of all,Search and Download the torrent file (.torrent) of your desired file from any site,like I am using Torrentz .

After downloading the file, go to Torcache and browse the downloaded torrent file and then click on the cache button.

This will generate a new link for your torrent file.
Now just copy that new link from the opened window as shown in below image.

Now go to the Torrific and create a free account there if you don't have already and log in your account.
In the text field paste the address of the new torrent file obtained in 4th step ( also shown in above image ) and click on "Get" button.

After clicking the GET button ,you will get the list of available files that are present in that torrent file.
Now Click on initiate bittorrent transmission button.

This will give the full option to download all the available files. Just click on any link and you can see the download manager IDM popping out for downloading the file.
Now enjoy the ultimate Speed of IDM for downloading torrents too.

Now Start Downloading your file.

NOTE : The maximum limit is 100 MB per file,you cant download the files above 100MB.Secondly, You should use this method only if you are getting very poor speed with your torrent client because if you download it with IDM the link will not be resumable and you have to finish it without breaking your internet connection.

Latest Shortcut Keys for Facebook

2011-12-06T07:23:00.000-08:00

If you spend a lot of time on Facebook as we know we all do then why not spend this time more efficiently and quickly.There are some keyboard shortcuts for Facebook which are specific to browser.Using these shortcuts you can easily create new messages,view account settings,View notifications etc .In the beginning its a little difficult to use them but once you get familiar with these shortcuts then you will really feel easy to navigate on facebook.So today I will share some Facebook shortcut keys with you guys for Google Chrome, Firefox and Internet Explorer.There is also a trick to create custom shortcuts keys for your computer programs.

Here is a comprehensive list of Facebook Shortcuts for each browser.

Google Chrome Facebook Shortcuts

Alt+1: View your News Feed
Alt+2: View your own Profile
Alt+3: View pop-up of friend requests
Alt+4: View pop-up of messages
Alt+5: View pop-up of notifications
Alt+6: View Account Settings
Alt+7: View Privacy Settings
Alt+8: View Facebook’s own profile
Alt+9: Read latest Terms of Service agreement.
Alt+?: Search
Alt+m: Compose a new message

Firefox Facebook Shortcuts

If you are using Firefox browser then you also need to press SHIFT along with the above shortcut keys.

Shift+Alt+1: View your News Feed
Shift+Alt+2: View your own Profile
Shift+Alt+3: View pop-up of friend requests
Shift+Alt+4: View pop-up of messages
Shift+Alt+5: View pop-up of notifications
Shift+Alt+6: View Account Settings
Shift+Alt+7: View Privacy Settings
Shift+Alt+8: View Facebook’s own profile
Shift+Alt+9: Read latest Terms of Service agreement.
Shift+Alt+0: Open Facebook Help Center
Shift+Alt+?: Search
Shift+Alt+m: Compose a new message

NOTE : If you are using Internet Explorer then you you can use the Facebook shortcuts of Google chrome but you have to press ENTER after each shortcut .

Hack your desired PC on LAN

2011-12-02T18:25:00.000-08:00

As I have told in my previous post Simple Commands for LAN Hacking for Beginners that these days I am working on LAN Hacking so guys here is my new post in this respect .Hope you guys love it .Dont forget to Change your IP Address if you want to remain safe but its not compulsary.Through this technique you will be able to hack your desired PC on LAN .

This technique will be taking advantage of Port 139.Most of the time,Port 139 will be opened.But if unfortunately your victim's Port 139 is filtered or closed then you can't hack him by this method .So guys follow these steps carefully and at the end you will be able to hack Lan computers.

NOTE : All the tools used in this tutorial have already been sent to all the Email subscribers to their emails,but if someone didn't got it then post your email in the comments and if we find that email in subscription list we will send you all the tools.

Steps to Follow

First of all,I will do a port scanning at the target computer which is 192.168.40.128.This computer is inside my LAN network.
Scan it using Nmap, this is actually for checking either its port is opened or closed.

I get the result and it shows Port 139 is opened up for me.
Now we will need both of these tools:

USER2SID & SID2USER
NetBios Auditing Tool

I have already sent these tools to all the Email Subscribers.
After you get both of them,put them in the C: directory.

Now you need to create a null session to the target computer.For this open cmd prompt and write this below command as it is as shown in image below :

Now open the Command Prompt and browse to the USER2SID & SID2USER folder.There will be 2 tools inside it,one will be USER2SID and another one will be SID2USER.

We will first using USER2SID to get the ID.Just follow all the codes same as shown in below image ,just replace the IP Address of victim

We will test against the Guest account because Guest account is a built in account.
After we get the ID,we need to do some modification on the ID.
We take the ID we get from the guest account and modified it become "5 21 861567501 1383384898 839522115 500".
Please leave out the S-1-,leave out all the - too.

Now you will see that you get the username of the Administrator account.
In this case,the Administrator account is Administrator.

MAIN PART

Now we are going to crack the Administrator account for the password in order to access to the target computer.
First of all,extract the NetBios Auditing Tool in C directory, which you have received in your email.
Now open cmd prompt and write the below code as it is :

Press on enter and the tool will run and finally you will crack the password.

In this case,I have get the password.
In order to proof that I can get access to the target computer using this password.

After you press enter,it will prompt you for the username and password.

Therefore,just input them inside the prompt and continue.

Target C drive will be on your screen.You are done ....

Prevention

In order to prevent from this attack,close down port that you do not want to use such as Port 135,Port 136,Port 137,Port 138 and Port 13.

Change your IP in less than 30 seconds

2011-11-29T06:00:00.000-08:00

The following is a guide on how to change your IP in 30 seconds or less. This can be used if your IP has been banned from a game server, or on gunbound if your IP get's blocked. I've tried this on both Windows XP and Windows 2000, and it has worked :

Click on "Start" in the bottom left hand corner of screen.
Click on "Run"
Type in "command" and hit ok.
You should now be at an MSDOS prompt screen.
Type "ipconfig /release" just like that, and hit "enter"
Type "exit" and leave the prompt
Right-click on "Network Places" or "My Network Places" on your desktop.
Click on "properties"

NOTE : You should now be on a screen with something titled "Local Area Connection", or something close to that, and, if you have a network hooked up, all of your other networks.

Right click on "Local Area Connection" and click "properties"
Double-click on the "Internet Protocol (TCP/IP)" from the list under the "General" tab
Click on "Use the following IP address" under the "General" tab
Create an IP address (It doesn't matter what it is. I just type 1 and 2 until i fill the area up).
Press "Tab" and it should automatically fill in the "Subnet Mask" section with default numbers.
Hit the "Ok" button here
Hit the "Ok" button again

NOTE : You should now be back to the "Local Area Connection" screen.

Right-click back on "Local Area Connection" and go to properties again.
Go back to the "TCP/IP" settings
This time, select "Obtain an IP address automatically"
Hit "Ok"
Hit "Ok" again
You now have a new IP address

NOTE : This only changes your dynamic IP address, not your ISP/IP address. If you plan on hacking a website with this trick be extremely careful, because if they try a little, they can trace it back.

Simple Commands for LAN Hacking for beginners

2011-11-29T05:02:00.001-08:00

I am sure many guys know all these commands.I am just gonna start on LAN Hacking so I am starting from basics.These commands are for beginners.These commands will run on CMD prompt.

First of all, open your Network Connection.
Now right click and select Properties.
Then Select TCP/IP and click on Properties again.
Click on Advanced and WINS tab.
Here select Default for NeBIOS.
Now come back to the main window named Local Area Connection.
Now select File and Print Sharing for Microsoft Networks and hit enter.

NOTE : This is just to make sure you have NetBIOS enabled. We will have some fun with NetBIOS on CMD.

First thing you need to know is some very helpfull commands to use on CMD(Command Prompt).
In case you don’t know how to get CMD open in your box, then click on Start, then Run, then type “cmd”.

Codes

nslookup
net view
net use
net user
ping
tracert
arp
route
nbtstat
netstat
ipconfig

In case you don’t know some of them, then just type the command on CMD and hit enter. A little help will show up in your screen. Read it and understand what the command does.

1) Ping

This command will allow you to know if the host you pinging is alive, which means if it is up at the time of executing the “ping” command.

CODE :

ping x.x.x.x (x is the IP address).
ping www.whatever.com (www.whatever.com is the website you want to ping, but you don’t know the IP)

NOTE : Keep in mind that if the host you pinging is blocking ICMP packets, then the result will be host down.

2) Nslookup

This command is mostly for resolving DNS into IP.

Lets say you know the website URL but you don’t know its IP(and you want to find out).
nslookup www.whatever.com (www.whatever.com is the website you want to find out the IP)
Now, another really nice function of nslookup is to find out IP of specific Mail Severs.

CODE :

nslookup (enter)
set type=mx (enter)
yahoo.com

This command will give you the mail server IP of yahoo.com. You can use whatever server you want and if it is listed on DNS, then you get the IP.

Now why would you want to have an IP of a mail server?
To send spoofed mail to your friends or even for SE.
In case you looking for “How to spoof email”, then look for my “How to spoof email tutorial” http://www.infowar.com/forums/showthread.p…p;threadid=2360

3) Tracert

This command will give you the hops that a packet will travel to reach its final destination.
OBS: This command is good to know the route a packet takes before it goes to the target box.

CODE :

tracert x.x.x.x (x is the IP address)
tracert www.whatever.com (www.whatever.com is the website you don’t know the IP)

4) Arp

This command will show you the arp table. This is good to know if someone is doing arp poisoning in your LAN.

CODE :

arp -a

Route

This command will show you the routing table, gateway, interface and metric.

CODE :

route print

5) Ipconfig

This command will show tons of very helpful things.Your IP, gateway, dns in use.

CODE :

ipconfig
ipconfig /all

This command will give all that info but for all networks you might have it.Also, in case you have a dynamic IP and want to change it, then type.

ipconfig /release (this will release your IP)
ipconfig /renew (this will renew your iP)

NOTE : Keep in mind that those commands will change your IP, but the new IP will still be tighed up to you. So don’t do anything stupid.

6) Netstat

This command will show you connection to your box.

CODE :

netstat
netstat -a (this will show you all the listening ports and connection with DNS names)
netstat -n (this will show you all the open connection with IP addresses)
netstat -an (this will combined both of the above)

7) Nbtstat

This command will show you the netbios name of the target box.

CODE :

nbtstat -A x.x.x.x (x is the IP address)
nbtstat -a computername
net view x.x.x.x or computername (will list the available sharing folders on the target box)
net use \ipaddressipc$ “” /user:administrator (this command will allow you to connect to the target box as administrator)
Now if you want to connect to the target box and browse the entire C drive, then use this command: net use K: \computernameC$ (this will create a virtual drive on your “my computer” folder)

NOTE : Keep in mind that this will only works if the target box doesn’t have an administrator password set.

And least but not last, the “help” command.

whatevercommand /help
whatevercommand /?

This command will help you to understand what it does and all the switchs available for each command.
Very useful if you know the command, but forgot the right switch.

Batch File To Start Program In Start up of Computer

2011-11-26T19:03:00.001-08:00

Whenever I start my computer it is usually so in the beginning I have to start the same program, which in my case is FrontPage. I update my webpage everyday so I decided to get rid of this thing so I created a batch file to start this program automatically at start up so it is always ready for me to useand no need to run it manually.

Batch File to Start Desired Programs on Start up of Computer

First of all open notepad. It is located at Start Menu >> All Programs >> Accessories >> Notepad (Windows XP)
Then type start frontpg.exe
Now click on save as and save this file with .bat filename extension. I have called mine startup.bat
Now you can double click on it on the desktop to test if it opens FrontPage.
Now Right click on the Start Menu.
Now open the Programs folder, then The Startup Folder.
Paste your file in the Startup folder.
Now whenever you start your computer, your program will automatically start for you. You do not even have to click on the batch file to start your program.

You can start any exe file with this simple little batch file. An exe file is an executable file that usually starts a program. Here are some variations of the simple batch file.

start /min frontpg.exe
start /min iexplorer.exe
start /min notepad.exe
start /min iexplorer.exe
start /min msimn.exe

Notes:

/min = When the program opens it is minimized in the task bar
/max = When the program opens it will be maximized and open on your screen Also writing nothing does the same thing.
winword.exe Microsoft words .exe filename.
msimn.exe Opens Outlook Express.
Leave your batch file on your desktop You can just press on it yourself to start all your programs. It starts them so quick!!! I would rather do it this way. It is even quicker than pressing on the icon on the desktop…Don’t ask me why.
You can also drop a shortcut to a program into the startup folder and it should do the same thing.. Give it a try
start /min 10.0.0.1 This will take you to a network computer. You need to replace the IP address with the address of the computer you want to connect to. You can also put a server name or computer name as long as it is on the network.