The Hacking Trick : Free Hacking Tools Tricks Tips and Tutorials | H4xOrin' Th3 WOrLd |

DOWNLOAD IDM 6.20 WITH CRACk + Serial Keys

noreply@blogger.com (Unknown) — Tue, 01 Jul 2014 10:09:00 +0000

Internet Download Manager gives you the tools to download many types of files from the Internet and organize them as you see fit. You can categorize each file as you download it, and then access all downloads right from the app's main interface.

DOWNLOAD IDM 6.20 WITH CRACk + Serial Keys

How To Crack IDM 6.20 tutorial :

Internet download manager 6.18 clean patch (idm 6.18 crack)

noreply@blogger.com (Unknown) — Sun, 29 Dec 2013 15:25:00 +0000

Hello H4x0rs today i will share with you the easiest method to register idm 6.18 using a crack basically you don't need any skills to do this just follow the steps :

Step 1 :

Download IDM 6.18 from the offical site here

Download Patch IDM 6.18 Build 7 here

Total virus report

Step 2:

install the IDM 6.18
Registre IDM with One of the

following Keys:
9QNBL-L2641-Y7WVE-QEN3I
NZ2CT-GBN1G-8BQ8J-CAW9E
HFM96-NFUDF-IDZIY-XMTJ8
RIU8I-RF6FX-ZDQS3-HU2LE
K4LP8-G4YL4-IT6TM-5GAKG
DPC2Q-KLL22-WTBXF-26JJL
635R2-LIAT1-TP29G-MTUBK
51SM3-13XZ2-EYHP5-AR5LZ
B72MZ-DC6WV-W627R-HCQWJ
RXMC9-FJITN-2PAGE-66RJW
R3QAA-M3475-5JABK-QLKE5
ZBGRD-FW8QY-RBHXG-QL72H
AJ4TG-9M2WG-G385I-XID8I
CDANV-K15WY-KXG4D-E5BDX

close IDM 6.18 application or CTRL+ALT+DEL and terminate IDMan.exe processeur

Step 3 :

extratct Patch file anywhere your PC

then run Patch IDM 6.18 Build 7.exe as administarator

Now click on installer .

Congratulations Now You have IDM 6.18 full version !!

please if you have any questions or suggestions post it in this topic and i will see what i can do :) ,

and if you need the serial method click here

Version 6.19 Build 9 :

Download PuTTY SSH and telnet client

noreply@blogger.com (Unknown) — Sun, 01 Dec 2013 09:50:00 +0000

PuTTY

PuTTY is an SSH and telnet client, developed originally by Simon Tatham for the Windows platform. PuTTY is open source software that is available with source code and is developed and supported by a group of volunteers.

You can download PuTTY here.

PuTTY
Website	http://www.putty.org/
Download Page	http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
File size	196 kb
License	Freeware
Operating System	Windows 2000/XP/Windows 7/windows 8

Download Advanced Port Scanner

noreply@blogger.com (Unknown) — Sun, 01 Dec 2013 09:40:00 +0000

Very small size, fast and simple for use port scanner . Just type IP Addresses of the computer or you can scan a range , and you´ll get detailed descriptions for common ports.

this software is similar to Angry Ip scanner

File size	426 KB
Operating System	Windows 95/98/ME/NT4.0/2000/XP/2003/Vista/2008
License:	Free

Download Instant PDF Password Remover v3.0 tools for free

noreply@blogger.com (Unknown) — Mon, 04 Nov 2013 19:29:00 +0000

Instant PDF Password Remover is the FREE tool to instantly remove Password of protected PDFdocument. It can remove both User & Owner password along with all PDF file restrictions such as Copy, Printing, Screen Reader etc.

Often we receive password protected PDF documents in the form of mobile bills, bank statements or other financial reports. It is highly inconvenient to remember or type these complex and long passwords.

'Instant PDF Password Remover' helps you to quickly remove the Password from these PDF documents. Thus preventing the need to type these complex/long password every time you open such protected PDF documents.

Note that it cannot help you to remove the unknown password. It will only help you to remove the KNOWN password so that you don't have to enter the password everytime while opening the PDF file.

It makes it even easier with the 'Right Click Context Menu' integration. This allows you to simply right click on the PDF file and launch the tool. Also you can Drag & Drop PDF file directly onto the GUI window to start the password removal operation instantly.

It can unlock PDF document protected with all versions of Adobe Acrobat Reader using different (RC4, AES) encryption methods.

Download Instant PDF Password Remover v3.0

Hacking and Security Tools for Beginners and Elite - Complete Tool Kit

noreply@blogger.com (Unknown) — Sat, 19 Oct 2013 11:12:00 +0000

Here is this post I have listed out few of the frequently and widely used Tools used by Hackers of all levels.But one thing i would like to mention is that "Hackers make tool but tool do not make Hackers"If you depend more on tools then you cannot evolve as a hacker rather you will be surrounded by tools and dependent on them.

1.Password Cracking Tools:

a) John the ripper-http://www.openwall.com/john/

b) THC hydra-http://www.thc.org/thc-hydra/

c) Brutus-http://www.hoobie.net/brutus/

d) L0PhtCrack-http://www.l0phtcrack.com/

e) SAMInside-http://insidepro.com

f) Cain and abel-http://www.oxid.it/cain.html

g) Pwdump-http://www.foofus.net/fizzgig/pwdump/

2.Pentesting Tools:

a) Metasploit framework- http://www.metasploit.com/

b) Canvas- http://www.immunitysec.com/products-canvas.shtml

3.Sql injector Tools:

a) Sqlihelper

b) Havij

c) SQL Exploiter

4.Website Vulnerability Scanner:

a) Acunetix- http://www.acunetix.com/

b) Rational appscan- http://www.ibm.com/software/awdtools/appscan/

5.Vulnerability Scanner:

a) Nessus-http://www.nessus.org/

b) Retina-http://www.eeye.com/html/Products/Retina/index.html

c) Sara-http://www-arc.com/sara/

6.Port Scanner:

a) Nmap- http://nmap.org/

b) Angry Ip scanner- http://www.angryziber.com/ipscan/

c) Super Scan- http://www.foundstone.com/us/resources/proddesc/superscan.htm

7.Intrusion detection Tools:

a) Snort-http://www.snort.org/

b) Sguil-http://sguil.sourceforge.net/

8.Live CDs:

a) Ophcrack- http://ophcrack.sourceforge.net/

b) Backtrack- http://www.backtrack-linux.org/

c) Hiren’s boot cd- http://www.hiren.info/pages/bootcd

d) Ultimate boot cd- http://www.ultimatebootcd.com/

9.Wireless Tools:

a) Wireshark- http://www.wireshark.org/

b) Kismet-http://www.kismetwireless.net/

c) Aircrack- http://www.aircrack-ng.org/

d) Netstumbler- http://www.stumbler.net/

10.Steganography Tools:

A list of few "STEGANOGRAPHY TOOLS " free to DOWNLOAD.

11.IP Tracing Tools:

a) Neo Trace- http://www.networkingfiles.com/neotrace/

b) Visual Trace-http://www.visualiptrace.com

12.Software Cracking Tools:

a) Debuggers-OllyDbg,WinDbg

b) Unpackers-QUnpack

c) DisAssemblers-WIN32Dasm

d) Decompilers-Boomerang,Mocha,JAD

e) Hex Editors-Hexworkshop,Hview, HxDSetupEN

A list of few "REVERSE ENGINEERING" tools free to Download.

13.Virtual Enviroment Software:

a) Vmware- http://www.vmware.com/

b) Virtual box- http://www.virtualbox.org/

c) Sandboxie- http://www.sandboxie.com/

[Resolver v1.0.9] The reverse/bruteforce DNS lookup

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 19:00:00 +0000

Resolver is a windows based tool which designed to preform a reverse DNS Lookup for a given IP address or for a range of IP’s in order to find its PTR. Updated to Version 1.0.3 added dns records brute force.

Resolver features:

Resolve a Single IP
Resolve an IP Range
Resolve IP’s provided in a text file
Export Results to a text file
Copy results to Clipboard
DNS Records brute force

Download Resolver v1.0.9

Change (Spoof) MAC Address on Windows 2000, XP, 2003, VISTA, 2008, Windows 7

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 18:56:00 +0000

Method 1:

This is depending on the type of Network Interface Card (NIC) you have. If you have a card that doesn’t support Clone MAC address, then you have to go to second method.

Go to Start->Settings->Control Panel and double click on Network and Dial-up Connections.
Right click on the NIC you want to change the MAC address and click on properties.
Under “General” tab, click on the “Configure” button
Click on “Advanced” tab
Under “Property section”, you should see an item called “Network Address” or "Locally Administered Address", click on it. (See figure below as an example)
On the right side, under “Value”, type in the New MAC address you want to assign to your NIC. Usually this value is entered without the “-“ between the MAC address numbers.
Goto command prompt and type in “ipconfig /all” or “net config rdr” to verify the changes. If the changes are not materialized, then use the second method.
If successful, reboot your systems.

Method 2:

This method requires some knowledge on the Windows Registry. If you are not familiar with Windows Registry, just use the simple-to-useSMAC MAC Address Changer to change the MAC addresses (the easiest and safest way,) or consult with a technical person before you attempt on the following steps. Also, make sure you have a good backup of your registry.

1. Goto command prompt and type “ipconfig /all”, and

I. Record the Description for the NIC you want to change.

II. Record the Physical Address for the NIC you want to change. Physical Address is the MAC Address

figure 1.

2. Goto command prompt and type “net config rdr”, and you should see something like

figure 2.

3. Remember the number between the long number (GUID) inside the { }. For example, in the above “net config rdr” output, for MAC address “00C095ECB793,” you should remember {1C9324AD-ADB7-4920-B02D-AB281838637A}. You can copy and paste it to the Notepad, that’s probably the easiest way. (See figure 2.)

4. Go to Start -> Run, type “regedt32” to start registry editor. Do not use “Regedit.”

5. Do a BACKUP of your registry in case you screw up the following steps. To do this

Click on “HKEY_LOCAL_MACHINE on Local Machine” sub-window

Click on the root key “HKEY_LOCAL_MACHINE”.

Click on the drop-down menu “Registry -> Save Subtree As” and save the backup registry in to a file. Keep this file in a safe place.

IF YOU ARE NERVOUS ABOUT THIS STEP, JUST USE SIMPLE-TO-USE GUI BASED SMAC MAC ADDRESS CHANGER TO MAKE THIS PROCESS SAFER and EASIER FOR YOU. ☺

6. Go to “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}. Double click on it to expand the tree. The subkeys are 4-digit numbers, which represent particular network adapters. You should see it starts with 0000, then 0001, 0002, 0003 and so on. (See figure 3.)

Figure 3.

7. Go through each subkey that starts with 0000. Click on 0000, check DriverDesc keyword on the right to see if that's the NIC you want to change the MAC address. The DriveDesc should match the Description you recorded from step (a.-I.). If you are not 100% sure about the DriverDesc, then you can verify by checking if the NetCfgInstanceID keyword value matches the GUID from step (c).
If there is no match, then move on to 0001, 0002, 0003, and so on, until you find the one you want. Usually 0000 contains the first NIC you installed on the computer.
In this demonstration, 0000 is the NIC I selected. (See figure 3.)

8. Once you selected the subkey (i.e. 0000), check if there is a keyword "NetworkAddress" exist in the right side of the window.(See figure 3.)

I. If "NetworkAddress" keyword does not exist, then create this new keyword:

i. Click on the drop down menu “Edit -> Add Value”.

        ii. In the Add Value window, enter the following value then click OK. (See figure 4.)
            Value Name: = NetworkAddress
            Data Type: = REG_SZ

Figure 4.

iii. String Editor window will pop up at this time (see figure 5.)

iv. Enter the new MAC address you want to modify. Then click OK.
(There should not be any "-" in this address. Your entry should only consist of 12 digits as seen in the figure 5.)

II. If "NetworkAddress" keyword exists, make sure it shows the keyword type is REG_SZ, and it should show asNetworkAddress:REG_SZ: . This keyword might not have a value at this time.

i. Double click on the keyword NetworkAddress and the String Editor window will pop up. (See Figure 5.)

ii. Enter the new MAC address you want to modify. Then click OK.
(There should not be any "-" in this address. Your entry should only consist of 12 digits as seen in the figure 5.)

Figure 5.

The Simple-to-Use SMAC MAC Address Changer (Spoofer) is definitely a lot SAFER and EASIER for this type of process. Check out some SMAC screenshots. ☺

9. There are 2 ways to make the new MAC address active. Method I does not require a system reboot:

    I. Goto Start->Setting->Control Panel, and double click on "Network Neighborhood".
    WARNING: Make sure you understand that you WILL lose the network connection after completing step "ii." below, and
    if you have a DHCP client, you will get a new IP address after completing step "iii."

i. Select the Network Adaptor you just changed the MAC address.

ii. Right click on the selected Network Adaptor and click "Disable."
Verify the status column for this adaptor changes to "Disabled"

iii. Right click on the selected Network Adaptor and click "Enable."
Verify the status column for this adaptor changes to "Enabled"

iv. If for any reason it cannot be disabled or re-enabled, you have to
reboot your system to make the changes effective.

II. Reboot your Windows system.

10. Once completing step j (if rebooting the system, wait until the reboot is completed), go to command prompt, type “ipconfig /all” to confirm the new MAC address.

Few Online Tools for Computer and Online Security

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 18:49:00 +0000

Computer security is of foremost importance these days even more than our physical security..lol.There are few online tools available through which we ensure our security to certain extent.We cannot say our PC will be 100% secure but to some extent we will be benefited for sure.

(if you are looking for Antiviru software Click here)

File scanner:

1.Kaspersky:
It can used to scan files upto size 1mb and archieve file(zip,arj format etc) upto 1mb.The database is updated every 3 hours to ensure that newest virus are detected.

2.Avast:
Here you can scan a single file each time and that should not be more than 16mb.

3.VirusTotal:
Here you can scan a file upto 20mb.You can send file by SSL and via email also.

4.NovirusThanks:
Here you can scan file upto 20mb,where the file will be scanned by 24 antivirus engine and is one of the best online scanning tool.

System scanner:

1.Bitdefender:
It can scan your PC ,system memory,boot sector.It can be used without uninstalling the existing security product.

2.Symantec(Norton):
It can be used to scan the system.It is the one of the old Anti-virus company and easy to use.

3.Eset:
Administrative previleges is required to use this online scanner.It is user friendly and operates from the browser.

4.PandaSecurity:
You need the activex control to use this online tool.It is a good product from panda.

Browser scanner:

1.Qualys:
You need to install the required plugin to use this tool.It checks for vulnerability and issues in the browser.

2.BrowserScope:
It scans for browser functionality and issues.

3.Scanit:
It will scan the browser for issues and vulnerabilites.You need to close all other tabs before using it and enable persistent cookies.

4.Panopticlick:
It test your browser and give scores for uniqueness and trackable functionality.

Url scanner:

1.UrlVoid:
It scans the url with multiple antivirus engine.It is simple to use.

2.Avg:
Just copy and drop the suspicious url and press enter.

3.VirusTotal:
It is a simple tool to use as the file scanner of it.

4.OnlineLinkscan:
It scan the link from potential threats with a simple click.

Port scanner:

1.T1shopper:
It scans the Ipaddress for open ports.There is a list of some essential ports on the webpage.

2.Nmap:
It is one of the best port scanning tool and easy to use.

3.SubnetOnline:
It scans an Ipaddress for open and closed TCP ports.

4.AuditmyPc:
Here you can scan for ports to test the strength of your firewall.

5.Hashmian:
It provide a range of ports to scan and list of some essential ports.

If you find this post useful and interesting then do drop your comment.,it will be appreciated.. :)

Http Tunneling | Bypass firewall and proxy

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 18:40:00 +0000

In most of the institutions and companies due to security risk many restrictions are being imposed on network like blocked ports etc.There are many ports that are blocked for outbound connection and few ports for http connection are opened so that people working over there can access there email etc.As the http port outbound is opened so it can be used for http tunnel to access restricted applications like IM etc.In this post we will see how we can do that.

What is Http Tunnel?
It is a technique in which the communications that are restricted in the network are bundled within the http protocol and allowed to communicate.The user uses a httptunnel software with client-server but to use it with administrative privileges.

How it works?
The user need a http_Tunnel-client and a server other than the original client-server.What happens that when the original_client decides to connect to a desire server then it sends its request through the httptunnel_client to the httptunnel_server then to the original_server as shown in the figure below.

Actually the restrcited application that is the client(in the figure) sends a request other than http through the httptunnel_client bundle inside the http request.Then the httptunnel_server receives its unwrap,decrypt,uncompress it and forward it to the original server in the same way the data is transferred.The main concept over here is that there is middle (client-server) other than the orginal client-server.

Advantages:
1.Undo restrictions on applications like instant messengers etc

2.Helpful in accessing restrcited pages and sites.

3.May be helpful in bypassing firewall restriction but not in an extensive manner.

Lets see how we can use http tunneling.

Http Tunneling Software:

1.Http-Tunnel(Download)

2.HttpTunnel(Download)

3.Hopster(Download)

4.Super Network Tunnel(Download)

5.HttpTunnel(Linux)(Download)

Requrirements:

1.Http Tunneling Software(Client-server)

2.Administrative Previlage.

Procedure:

Step 1.
Here I have used the soft named HttpTunnel for tunneling with both server and client.Download and install it.

Step 2.
Now click on the client and server part of it and you can use port mapping or socks5 for connecting throught the client.

Step 3.
Here I have used Rediff bol as a restricted application and socks5 for connecting.As you set the settings click on "Test" to see if it could connect ot the server,if it is successful then proceed as shown below.

Http tunnel in the network can be still detected by analysing the data and packets in the network.On more thing is that http connections last for less interval of time but since in http tunnel with tcp protocol bundled in side it may last for extended period of time so it may create a suspicion in the mind of the network admininstrator.

[SuperPutty Password Decryptor] SuperPutty Session Login Password Recovery Software

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 18:27:00 +0000

SuperPutty Password Decryptor is the Free desktop tool to instantly recover all the login passswords from SuperPutty session history.

SuperPutty is a Windows GUI Application that allows PuTTY SSH Client to be opened in Tabs. It also stores the session details allowing users to automatically login without entering the password every time.

SuperPutty Password Decryptor helps you to quickly recover all the stored login passwords from this session file. It also automatically detects SuperPutty session file for the current user and displays it. Alternatively, you can also select another session file copied from remote system.

After the successful recovery, you can generate detailed password report in HTML/XML/TEXT file. It is very simple and easy to use tool with its cool GUI interface.

[Arachni v0.4.5.1-0.4.2] Open Source Web Application Security Scanner Framework

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 18:23:00 +0000

Arachni is a Free/Open Source project, the code is released under the Apache License Version 2.0 and you are free to use it as you see fit.

Initially started as an educational exercise, it has since evolved into a powerful and modular framework allowing for fast, accurate and flexible security/vulnerability assessments. More than that, Arachni is highly extend-able allowing for anyone to improve upon it by adding custom components and tailoring most aspects to meet most needs.

New Changes

Optimized pattern matching to use less resources by grouping patterns to only be matched against the per-platform payloads. Bottom line, pattern matching operations have been greatly reduced overall and vulnerabilities can be used to fingerprint the remote platform.
Modules
- Path traversal ( path_traversal)
  - Updated to use more generic signatures.
  - Added dot-truncation for MS Windows payloads.
  - Moved non-traversal payloads to the file_inclusion module.
- File inclusion ( file_inclusion) — Extracted from path_traversal.
  - Uses common server-side files and errors to identify issues.
- SQL Injection ( sqli) — Added support for the following databases:
  - Firebird
  - SAP Max DB
  - Sybase
  - Frontbase
  - IngresDB
  - HSQLDB
  - MS Access
- localstart_asp — Checks if localstart.asp is accessible.
Plugins — Added:
- Uncommon headers ( uncommon_headers) — Logs uncommon headers.

Download Arachni v0.4.5.1-0.4.2

[ollydbg-binary-execution-visualizer] New Tool for Visualizing Binaries With Ollydbg and Graphvis

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 18:21:00 +0000

Sometimes crackme’s or something you might be reversing will constantly bug you due to the excessive usage of f7 & f8. It will be quiet neat if you can see how the application is executing visually and set your break points accordingly.

Requirements:

o Ollyscript plugin

o Bunch of your favorite anti-‐debug plugins (phantom , ollyadvanced, …etc) o Pygraphviz

o Graphviz

o Python 2.7

Approach:

Create an ollyscript that will do the following

o Log all EIP for main application

o Disregard to log calls to kernel32 , ntdll & addresses which are above

7C000000 using step over not step into include more addresses to

exclude if needed later for other system dll’s 77000000 … etc. o Save EIP Logs to file
Parse the log file
Feed it into pygraphviz
Export to png
Visualize & note needed breakpoints.
Re-‐run the app setting above breakpoints.

Full documentation here

Download ollydbg-binary-execution-visualizer

[JBrute v0.9.4] Open Source Security tool to audit hashed passwords

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 18:17:00 +0000

JBrute is an open source tool written in Java to audit security and stronghold of stored password for several open source and commercial apps. It is focused to provide multi-platform support and flexible parameters to cover most of the possible password-auditing scenarios.

Java Runtime version 1.7 or higher is required for running JBrute.

Features

Muli-platform support (by Java VM)
Several hashing algorithms supported
Flexible chained hashes decryption (like MD5(SHA1(MD5())))
Both brute force and dictionary decryption methods supported
Build-In rule pre-processor for dictionary decryption
Multi-threading support for brute force decryption

Supported algorithms:

MD5
MD4
SHA-256
SHA-512
MD5CRYPT
SHA1
ORACLE-10G
ORACLE-11G
NTLM
LM
MSSQL-2000
MSSQL-2005
MSSQL-2012
MYSQL-322
MYSQL-411
POSTGRESQL
SYBASE-ASE1502

Download JBrute v0.9.4

[Syhunt Sandcat Browser v4.1] A Penetration-oriented browser (extented to Web Application Assessment)

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 17:18:00 +0000

Sandcat Browser 4 brings unique features that are useful for pen-testers and web developers. Sandcat is built on top of Chromium, the same engine that powers the Google Chrome browser, and uses the Lua programming language to provide extensions and scripting support.

Features

Live HTTP Headers — built-in live headers with a dedicated cache per tab and support for preview extensions
Sandcat Console — an extensible command line console; Allows you to easily run custom commands and scripts in a loaded page
Resources tab — allows you to view the page resources, such as JavaScript files and other web files.
Page Menu extensions — allows you to view details about a page and more.
Pen-Tester Tools — Sandcat comes with a multitude of pen-test oriented extensions. This includes a Fuzzer, a Script Runner, HTTP & XHR Editors, Request Loader, Request Replay capabilities and more.

Pentesting tools

Cookies and Cache Viewers
JavaScript Executor extension — allows you to load and run external JavaScript files
Lua Executor extension — allows you to load and run external Lua scripts
Page Menu extensions — allows you to view the page headers, cookies, whois information and more
Request Editor extension with request loading capabilities
Request Editor (Low-Level version)
Request Viewer — allows you to view details about a request or replay a request.
Ruby Console extension
Sandcat Tasks (Extensions that run as isolated processes):
- Fuzzer extensions with multiple modes and support for filters
- CGI Scanner extension
- HTTP Brute Force
Script Runner extension — can execute scripts in a variety of languages
Tor Button extension — Anonymity for standard browsing
XHR Editor
Various Encoders/Decoders, new Sandcat Console commands, security related search engine options, and more

Web application hacking is based on QuickInject

QuickInject is an extensive toolkit for manual web application security assessment. QuickInject allows to tailor injection requests that you can send or load using Sandcat, and can be used for performing a number of different operations, such as URL and POST Data Manipulation, Filter Evasion, as well as Referer and User-Agent Spoofing, and HTTP Header Manipulation. In addition to the capability to build requests, QuickInject can also be used to execute JavaScript in a loaded page. The first release of QuickInject is focused on File Inclusion, XSS and SQL Injection and comes with the following options:

SQL Injection functions
- Filter Evasion – Database-Specific String Escape (CHAR & CHR). Conversion of strings to quoted strings, conversion of spaces to comment tags or new lines
- Filter Evasion (MySQL-Specific) – String Concatenation, Percent Obfuscation & Integer Representation (eg: ’26′ becomes ‘ceil(pi()*pi())*(!!!pi()+true)+ceil(@@version)’, a technique presented by Johannes Dahse).
- UNION Statement Maker
- Quick insertion of common injections covering DB2, Informix, Ingres, MySQL, MSSQL, Oracle & PostgreSQL
File Inclusion functions
- One-Click Log Poisoning
- Quick Shell Upload code generator
- PHP String Escape (chr)
Cross-Site Scripting (XSS) functions
- Filter Evasion – JavaScript String Escape (String.fromCharCode), CSS Escape
- Various handy alert statements for testing for XSS vulnerabilities.
Hash functions
- MD5 Hash Crackers – Built-in (offline) and online MD5 hash crackers
- Hash Generators – MD5, SHA-1, SHA-2 (224, 256, 384 & 512), GOST, HAVAL (various), MD2, MD4, RIPEMD (128, 160, 256 & 320), Salsa10, Salsa20, Snefru (128 & 256), Tiger (various) & WHIRLPOOL
Encoders/Decoders
- URL Encoder/Decoder
- Hex Encoder/Decoder – Converts a string or integer to hexadecimal or vice-versa (multiple output formats supported).
- Base64 Encoder/Decoder
- CharCode Converter – Converts a string to charcodes (eg: ‘abc’ becomes ’97,98,99′) or vice-versa.
- IP Obfuscator – Converts an IP to dword, hex or octal.
- JavaScript Encoders – Such as JJEncode by Yosuke HASEGAWA
HTML functions
- HTML Escape/Unescape
- HTML Entity Encoder/Decoder – Decimal and hexadecimal HTML entity encoders & decoders
- JavaScript String Escape
Text Manipulation functions – Uppercase, Lowercase, Swap Case, Title Case, Reverse, Shuffle, Strip Slashes, Strip Spaces, Add Slashes, Char Separator
Time-Based Blind Injection code – Covering MySQL, MSSQL, Oracle, PostgreSQL, Server-Side JavaScript & MongoDB
CRC Calculators – CRC16, CRC32, CRC32b, and more.
Classical Ciphers – ROT13 & ROT[N]
Checksum Calculators – Adler-32 & Fletcher
Buffer Overflow String Creator
Random String & Number Generation functions
URL Splitter
Useful Strings – Math, character sets and more.

Download Syhunt Sandcat Browser v4.1

Enema v.1.6 SQL Injection Tool Released

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 17:11:00 +0000

OpenSource tool for sql injection security testing

SQLSentinel is an opensource tool that automates the process of finding the sql injection on a website. SQLSentinel includes a spider web and sql errors finder. You give in input a site and

SQLSentinel crawls and try to exploit parameters validation error for you. When job is finished, it can generate a pdf report which contains the url vuln found and the url crawled.

Download: Here

sqlcake v.1.1 Released

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 17:08:00 +0000

Automatic SQL injection and database information gathering tool.

Automatic dump database & interactive sql shell tool dumps the current database structure including tables and columns and turns into an interactive mysql prompt with extra features

- sqlcake is an automatic SQL injection exploitation kit written in Ruby. It's designed for system administration and penetration testing.
- sqlcake offers a few useful functions to gather database information easily by sql injection usage.
- sqlcake also allows you to bypass magic quotes, dump tables and columns and gives you the possibility to run an interactive MySQL shell.
- sqlcake supports union stacked queries for real fast processing and blind injections with logarithmic techniques for saving time.

Download: Here

[WFacebook] Facebook Password Cracker

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 17:06:00 +0000

Facebook Password Cracker.

Video:

Download WFacebook

[WiFi Password Dump] Command-line Tool to Recover Wireless Passwords

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 16:52:00 +0000

WiFi Password Dump is the free command-line tool to quickly recover all the Wireless account passwords stored on your system.

It automatically recovers all type of Wireless Keys/Passwords (WEP/WPA/WPA2 etc) stored by Windows Wireless Configuration Manager.

For each recovered WiFi account, it displays following information

WiFi Name (SSID)
Security Settings (WEP-64/WEP-128/WPA2/AES/TKIP)
Password Type
Password in Hex format
Password in clear text

Being command-line tool makes it useful for penetration testers and forensic investigators. For GUI version check out the Wi-Fi Password Decryptor.

[SterJo NetStalker v.1.0] Security software able to detect all authorized and unauthorized connections

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 16:50:00 +0000

SterJo NetStalker is innovative and FREE security software able to detect all authorized and unauthorized connections to your computer and send you alert for each new connection.

The software is based on similar principles as most firewalls work and also could create a custom security policies with an advantage to run it totally portable. It serves as an entry point into your computer and instantly informs you about all the processes able to establish a connection with an external network.

If making an analysis of all open ports on your system with a standard port scanner would take a few minutes, with this program it would be done only in a few milliseconds. This is also quite powerful software for making analysis of all running processes on your system as well as those that look suspicious.

The program offers an option to display details about all connections and closing individual connection or entire process.

If you are one of those who want to know exactly where your connections are targeted then this program is the ideal solution for you.

Download SterJo NetStalker v.1.0

[CookieCatcher] Session Hijacking Tool

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 16:35:00 +0000

CookieCatcher is an open source application which was created to assist in the exploitation of XSS (Cross Site Scripting) vulnerabilities within web applications to steal user session IDs (aka Session Hijacking). The use of this application is purely educational and should not be used without proper permission from the target application.

Features:
- Prebuilt payloads to steal cookie data
- Just copy and paste payload into a XSS vulnerability
- Will send email notification when new cookies are stolen
- Will attempt to refresh cookies every 3 minutes to avoid inactivity timeouts
- Provides full HTTP requests to hijack sessions through a proxy (BuRP, etc)
- Will attempt to load a preview when viewing the cookie data
- PAYLOADS
- Basic AJAX Attack
- HTTPONLY evasion for Apache CVE-20120053
- More to come

Video Demo: http://www.youtube.com/watch?v=2GH6RRozOpY

Download :https://github.com/DisK0nn3cT/CookieCatcher

SpearPhisher – A Simple Phishing Email Generation Tool

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 16:29:00 +0000

SpearPhisher is a simple point and click Windows GUI tool designed for (mostly) non-technical people who would like to supplement the education and awareness aspect of their information security program. Not only is it useful to non-technical folks, penetration testers may find it handy for sending quick and easy ad-hoc phishing emails. The tool supports specifying different sending names and email addresses, multiple recipients via TO, CC, BCC, and allows bulk loading with one recipient email address per line in a file. It allows customization of the subject, adding one attachment, and SSL support for SMTP enabled mail servers. One of the popular features with our client is the WYSIWYG HTML editor that allows virtually anyone to use the tool; previewing results as you point and click edit your malicious email body. If you want to add custom XSS exploits, client side attacks, or other payloads such as a Java Applet code generated by the Social Engineer Toolkit (SET), its split screen editor allows more advanced users to edit HTML directly.
Download : Here

Official website : Here

BBQSQL - Blind SQL Injection Exploitation Tool

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 16:25:00 +0000

BBQSQL is a SQL injection framework specifically designed to be hyper fast, database agnostic, easy to setup, and easy to modify. The tool is extremely effective at exploiting a particular type of SQL injection flaw known as blind/semi-blind SQL injection. When doing application security assessments we often uncover SQL vulnerabilities that are difficult to exploit.

While current tools have an enormous amount of capability, when you can’t seem to get them to work you are out of luck. We frequently end up writing custom scripts to help aid in the tricky data extraction, but a lot of time is invested in developing, testing and debugging these scripts.

BBQSQL helps automate the process of exploiting tricky blind SQL injection. We developed a very easy UI to help you setup all the requirements for your particular vulnerability and provide real time configuration checking to make sure your data looks right. On top of being easy to use, it was designed using the event driven concurrency provided by Python’s gevent. This allows BBQSQL to run much faster than existing single/multithreaded applications.

Download: Here

DroidSQLi - MySQL Injection tool for Android

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 16:21:00 +0000

DroidSQLi is the first automated MySQL Injection tool for Android. It allows you to test your MySQL-based web application against SQL injection attacks.

DroidSQLi supports the following injection techniques:
- Time based injection
- Blind injection
- Error based injection
- Normal injection

Get it from https://play.google.com/store/apps/details?id=net.edgard.droidsqli

jSQL Injection v0.3

noreply@blogger.com (Unknown) — Fri, 18 Oct 2013 16:20:00 +0000

jSQL Injection is a lightweight application used to find database information from a distant server.

jSQL is free, open source and cross-platform (Windows, Linux, Mac OS X, Solaris).

Features:

GET, POST, header, cookie methods
Normal, error based, blind, time based algorithms
Automatic best algorithm selection
Thread control (start/pause/resume/stop)
Expose URL calls
Simple evasion
Data retrieving progression bar
Proxy setting
Distant file reading
Webshell deposit
Terminal for webshell commands
Configuration backup
jSQL version checker
Supports MySQL

Download: https://code.google.com