Showing posts with label hack. Show all posts
Showing posts with label hack. Show all posts
Tuesday, October 9, 2012
Wednesday, February 1, 2012
How to Hack Website database using XPath tech?

Everyday many website gets hacked by hackers but most of the hackers are
hacking those website just for popularity nothing else. Today i am
writing this tutorial on XPath Injection, in which i will explain you, How Hackers Hack Website Using XPath Injection. M4ERRHCQZ2PY
In a typical Web Application architecture, all data is stored on a Database server. This Database server store data in various formats like an LDAP, XML or RDBMS database. The application queries the server and accesses the information based on the user input.
Normally attackers try to extract more information than allowed by manipulating or using the query with specially crafted inputs.Here, in this tutorial we’ll be discussing XPATH Injection techniques to extract data from XML databases.
In a typical Web Application architecture, all data is stored on a Database server. This Database server store data in various formats like an LDAP, XML or RDBMS database. The application queries the server and accesses the information based on the user input.
Normally attackers try to extract more information than allowed by manipulating or using the query with specially crafted inputs.Here, in this tutorial we’ll be discussing XPATH Injection techniques to extract data from XML databases.
Exploiting a cross-site scripting vulnerability on Facebook

Take a walk through most workplaces and you will surely notice
someone browsing a social networking site. No wonder that website
popularity services like Alexa rate Facebook the second most visited
website after Google and before Youtube! We trust these websites to
reflect the public image that we want to portray and sometimes even
trust with secrets. A single cross-site scripting vulnerability
allows attackers to do anything (that the victim may do) on behalf of
the victim. In this article we will look at how Facebook accounts could
be compromised through such a simple, yet effective vulnerability.
HTTP Only does not protect your site (or Facebook) from XSS exploitation
Sunday, January 29, 2012
Hack Networks with your mobile device

Features
- Hacks WEP, WPA, and WPA2
- Very simple and easy to use layout
- Works on All Android OS phones
- Works on iPod Touch 1st, 2nd, 3rd, and 4th gen
- Works on iPhone 1st, 2nd, 3G, 3GS, 4, 4s
- Works on iPad 1 and iPad 2
How to enable Secure HTTPS browsing in Facebook for preventing hack?

With the
advancement of technology advanced are the dangers. On an unsecure wi-fi
connection hacking facebook is child’s play. You might have heard of “Firesheep” add on of Firefox which enables to login in to others’ opened facebook account on the same network. Apart from that, packet sniffers can also be used to steal your password on the fly. Man in the middle attacks are also very popular in the same sense.
Saturday, January 21, 2012
Microsoft Windows Remote Code Execution

VUPEN Vulnerability Research Team discovered a vulnerability in Microsoft Windows. The vulnerability is caused by a use-after-free error in the TIME (datime.dll) module when loaded via a specific behavior, which could be exploited by remote attackers to compromise a vulnerable system via a specially crafted web page.
Tuesday, December 27, 2011
HACK : Download F.B.I RAT with Full source coding

F.B.I RAT (Full Backdoor Intergration) V0.1. Supports
xp/Vista/Windows 7, all features have been tested on these OS's
including injection, but there have been some limitations on the
sniffer.
SQL Injection : False SQL Injection / Advance Blind SQL Injection

This is a brief whitepaper called False SQL Injection and Advanced Blind SQL Injection. This document is written for publicizing of new SQL injection method about detour some web firewall or some security solution.
In order to read this document, you have to understand basic MySQL principles. I classified the term "SQL Injection" as 2 meanings. The first is a general SQL Injection, we usually call this "True SQL Injection", and the second is a "False SQL Injection". Though in this documentation, you can know something special about "True SQL Injection"
How to hack keylogger/RAT's password?
Keylogger's and RAT's nowadays are everybody's problem across the internet. Hackers use keyloggers to hack the email passwords
of the victim which they receive in the form of emails or text files on
their respective FTP servers. They spread their keyloggers with the
help of cracks, keygen's or patches of popular software's or simply
through hack tools. So friends, today i will teach you how to reverse engineer the keylogger or RAT to hack the hackers FTP server or email password.
Hack windows admin/administrator password
This is one of the best
method to Hack Windows
XP Administrator
Password. For hacking admin you must have log in
as guest or limited account. This methodod
hacking sdmin is very easy. You don't need any
software or live cd. All
hacking is done manual. To hack XP admin password follow these steps. Please
backup your files which we are going to use here.
Saturday, December 24, 2011
Auto rooting script : Hack PC with script

This is the auto-rooting script that is written for Linux, SunOS, Mac OS X, and FreeBSD.
Web Backdoor Cookie

WeBaCoo (Web Backdoor Cookie) is a web backdoor script-kit, aiming to provide a stealth terminal-like connection over HTTP between client and web server. It is a post exploitation tool capable to maintain access to a compromised web server. WeBaCoo was designed to operate under the radar of modern up-to-dated AV, NIDS, IPS, Network Firewalls and Application Firewalls, proving a stealth mechanism to execute system commands to the compromised server. The obfuscated communication is accomplished using HTTP header's Cookie fields under valid client HTTP requests and relative web server's responses.
Friday, December 23, 2011
Hack email account/password using cookies.
Hi friends,Today i will show you the practical implementation of session hijacking that how can we take over others sessions and hack his email accounts and other website passwords. In this tutorial of hacking email accounts using session cookies, i will explain you with the help of yahoo account. I will tell you how to hack yahoo account using session cookies.
What are Session Cookies or Magic Cookie or Session ID?
Lets discuss this in very simple language, Whenever we login in our account, it generates a unique string that contains the path of automatic login for particular time then after that limited time it expires by itself.Note its life is only up to when your web browser is open. If you close your web browser it will be get deleted(Its latest up gradation in cookie's field for providing more security).
Now this unique string or simply called Magic cookie is stored at two places first copy is stored on server(of which we cannot do anything) and second is stored in our web browser in form of cookie.
This cookie is destroyed by three ways first is when you close your web browser, second is when you sign out of your account and third is if you left your account open for more than 20 minutes idle.
How to access the cookies on local system?
As
i am explaining this tutorial for hacking yahoo email account. So in
your web browser just open yahoo.com and login into your account.After that type the below code exactly and then press enter:
javascript:alert(document.cookie);Now a popup box will appear showing the cookies something like this:

Now create one fake account on yahoo.com and login in that account and retrieve the cookie in same manner and notice the changes in session ID's.
For hacking the session cookies we first need the session cookies of the victim and its quite simple to get the session cookies of the victim. You just need to send him one link as soon as he clicks on that we will get his session cookie.
After hacking the session cookies, we can use stolen session cookie to login into victim's account even without providing username and password as i already explained that session hacking removes the authentication on the server as we have the AUTO LOGIN cookie. In this type of attack when victim sign out , then hacker will also sign out. But in case of YAHOO its little bit different, when victim signout but attacker still have the access to his account. Yahoo maintains the session for 24 hours and then destroy the session ID's from its server.
How to Steal the Session Cookies?
1. Go to the Website and register there: http://www.my3gb.com/register.jsp
2. Download the Cookie stealer files:
3. Now upload the four files on the website and create one empty directory naming Cookies as shown below:

4.
Now Send the link of yahoo.php to victim. Now what will happen when
user clicks on the yahoo.php is that its cookies are get stored into
directory Cookies and simultaneously he is redirected to his account.
5.
Now open the link Hacked.PHP to access the cookies. In my files the
password is "password". You need to put that to access the files.

6.
You must have got the username of victim's account. Simply Click on it
and it would take you to inbox of victim's yahoo account
without asking for any password.

Now it doesn't matter if victim signs out from his account, you would remain logged into it.
Note: You can try this attack by using two browsers. Sign into yahoo account in one browser and run the code. Then sign in through other browser using stolen session.
Note: You can try this attack by using two browsers. Sign into yahoo account in one browser and run the code. Then sign in through other browser using stolen session.
Hack facebook account password via internet (remotely).

Hello
friends today i will explain you how to hack the Facebook password or
accounts remotely using keylogger. Its a 100% working hack and you can
easily hack anyone's Facebook account or password using this hack. In this tutorial i will explain you how to hack Facebook and other passwords of any user using 100% FUD keylogger. The keylogger in this tutorial we will discuss is L33ts keylogger adn its 100% FUD(fully undetectable).
Hacking Facebook account is very easy and just requires not more than 10 minutes of work. Don't worry i will also tell you how to protect your facebook account or passwords from such hacks and hackers. But for this you must know how hackers hack your facebook account. So first i teach you how to hack facebook account remotely and then i will tell how to protect yourself from this.
NOTE: This tutorial is for Educational purposes only i.e. to make you aware how hackers hack your Facebook accounts. Please don't misuse it. I am not responsible for any damage caused by you.
SQL Injection : Updated ;)

If you're looking for string injections, or WAF bypassing please look this post. Its updated :)
How to hack

Hacking can be difficult and there are many different ways to hack and many different exploits to use. Hacking is neither defined nor limited by exploitation or exploration. Hacking into someone else's system may be illegal, so don't do it unless you are sure you have permission from the owner of the system you are trying to hack or you are sure it's worth it AND you won't get caught.
Hacking was primarily used for learning new things about systems and computing in general, 'in the good old days'. In recent years it has taken dark connotations and in general has been looked down upon. Likewise, many corporations now employ "hackers" to test the strengths and weaknesses of their own systems. These hackers know when to stop, and it is the positive trust they have built that earn them large salaries.
There is a major difference between a hacker and a cracker. A cracker is motivated by malicious (namely: money) reasons; a hacker is attempting to gain knowledge through exploration, at any cost and in any way - not always legal. Along with the permission, you NEED TO HAVE a written consent showing proof that you got permission from that person or company.
Wednesday, December 14, 2011
Google hacking : Diggity Project
The Google Hacking Diggity Project is a research and development initiative dedicated to investigating the latest techniques that leverage search engines, such as Google and Bing, to quickly identify vulnerable systems and sensitive data in corporate networks. This project page contains downloads and links to our latest Google Hacking research and free security tools. Defensive strategies are also introduced, including innovative solutions that use Google Alerts to monitor your network and systems.
Saturday, July 9, 2011
Free download Award Keylogger - full version...
Award Keylogger allows you to monitor all users' activity on any
computers in real time and record each computer's usage history. Award
Keylogger makes it easy to view, in real time, the screenshots of the
any computers, all typed keystrokes, visited Web sites, used programs.
You can view a list of running processes and terminate undesirable
ones.
Thursday, July 7, 2011
Subscribe to:
Posts (Atom)
Tuesday, October 09, 2012
Anu











