Dear Readers: HWS has recently started a new project for the students of engineering ====> The Engineering Projects


Write at HWS !!!

Guest Posting

How secure is your Computer ?

Check out your computer safety here . A lot of tools , tricks and hacks related to computer .

Blogger Tips and Tricks

A Lot of tips ,tricks and hacks related to blogger . Seo tricks to get maximum targetted traffic to your blog.

Easy ways to Earn Online

Online earning is not so difficult but it needs a lot of patience and hardwork. Here are some techniques to earn money through internet.

Facebook Tricks

A lot of facebook tips , tricks and hacks.It requires a lot of time but reading is must.

Pro Hacking

If you have knowledge about basic techniques then try this,but be careful as it is highly toxic.

Thursday, February 2, 2012

Hacker attack techniques and tactics: Understanding hacking strategies

Introduction of hacking

Although this famous Chinese general determines nothing about hacking techniques as he had heard 2,500 years ago, "The Art of War," wrote so you have to agree with his recommendation to know that it is very good, the enemy and his techniques only. If they had a network administrator, then one of its main tasks the defense of their own systems. Knowing what attacks are possible and how to combat them is a huge help and allows them to keep their systems from damage. Although there are thousands of possible attacks, which are read in countless books and websites to the smallest detail, to give them the following five categories an excellent overview of the lion's share of attacks that may threaten their systems.

Standard Attacks

Nowadays you get any hardware or network application on the market in the rule with the following settings: User name and password that allow an administrator to access the system. One of the most common ways to get unauthorized access to a system is that the administrators do not change these default settings. Whether this is a database application, a router or a printer - the protection against these attacks is very simple. The first thing that should make everyone, if she/he is a new system connects to a network or install an application on a server, the immediate need to change the default access settings.

Phishing

Phishing is probably the technique of virtual identity theft more popular than exists on the network because of its effectiveness, but much of this honor comes on the basis of its establishment and procedure, which may be of the most easy and economical to carry out. What usually happens is that the perpetrators make a false application, message, mail or any means with the aim of bringing the user to log into your account, for example, its commercial banks to continue with whatever was interested in the message? The trick is that when the user enters their email address and your password on the wrong page of your bank, the information sent to a text file on the server hosting the fake page or by mail to which it attacks.

Stealers

Leaves many users store passwords you use every day in browsers, but beyond that anyone can enter and go to these passwords manually, as there are applications that automatically stealers steal sensitive data through commands stored very easy to perform or even GUIs accessible to any attacker. Its use with auto run pen drives can be a powerful combination.

Parallel Session Hijacking (Side jacking)

Similar in function and objectives that the hijacking, but the difference this time take advantage of victims who are connected to the same network or public wi-fi open the perpetrator. The side jacking is a normal session hijacking, but over wi-fi networks, so that the process is similar. Applications that performs sniffing, using both Chrome and Firefox that to have Fire sheep, that shows the active sessions and unprotected in a wireless network.

DNS Spoofing

It is very similar to phishing. That is, if you share with someone local network connection and this person wants to know your password, say, Facebook, you can create a site using redirection reply and that opens when you enter the actual address of Facebook. In this case, you are giving data directly to this person and probably not because you find out could then send the information, we redirect back to the beginning of simulating a bad original Facebook password input or redirected to your profile through the creation of a parallel process that takes center stage once the part of data theft.
About the author: Alia Haley is a blogger by profession. She loves writing on technology and luxury. Beside this she is fond of cell phones. These days she is busy in writing an article on Wooden headsets and 3g Tablet.

Saturday, January 28, 2012

Apache server in BackTrack 5R1 : how to host.[with video]

Hey guys . How you been ?
Have you ever hosted files in free web hosting servers like my3gb or x10hosting etc. For what you use them ?
answer may be >> For Phising >>for cookie stealing >>for IP logging etc etc.
sometimes they block your ID . So why dont you create your own server in your own computer . here is the video which explains how to do that using backTrack 5 R1.

Commands Used

  • apache2ctl start
  • mcopy  
  • apache2ctl stop
  • apache2ctl restart

Video



Guys plz comment and share and like .... thanks
Stay Tuned !!!!


Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker" 

Thursday, January 19, 2012

BACKTRACK 5 R1 : using w3af to scan website for vulns.




Hey guys , you might be disappointed from HWS because its been a long since we made any tutorial.
Actually Xeo is busy with his projects and me , well m having my SEMESTERS .
okay , i get many queries regarding how to hack a website .So first step should be gathering information and second step must be finding vulnerability in that site so that you can exploit that vulnerability to gain access.

FOR EDUCATIONAL PURPOSE ONLY !

If you using BackTrack then it'll be much easier for you cause in BT w3af is already installed so lets get started !

For BackTrack users


Go to Application > BackTrack > Exploitation > Web Exploitation tools => w3af gui .
Click on w3af gui , a window will apear and there is your w3af.



For Windows


You have to install in manually if you using windows .
You can download it from HERE
When download is completed extract it and you'll find the installation file there. Install it

Using w3af


Now its time to use w3af , its pretty easy. When you start w3af you'll see a window like :


There is a Target text field , you have to enter the URL of the target website there . Below that there is a Plugin and Active tabs . After entering the URL of the website , you have to select the Scan type by selecting those plugins . More plugin you select , more will be the time to scan.

Select the Scan type and press the play button above .

Getting the results


When the scan is running or finished , you'll see a window like :


Can you see the lower right corner , there are 3 pointers with some signs and with numbers 2 0 0 . Those are vulnerabilities no. . If you get numbers on 2nd pointer then you'll have a high rate of success.


Now go to Results . There you'll find the result of the scan .
Above window is Exploits window , if you see anything on middle panel then the site is more vulnerable. Now when you have the vulnerabilities , you can exploit that according to your choice .

Guys plz comment and share and like .... thanks
Stay Tuned !!!!


Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker" 

Friday, January 6, 2012

Installing Flash Player Plugin on Firefox without having Administrator Access or Premissions

Hello guys ,hope you all are great and enjoying good health. Today was my first day on my new job and i am provided a laptop but when I opened YouTube I encountered a problem that flash is not installed and when i tried to install it,it encountered a problem.Actually the IT department there has banned the installation of flash player, but how is it possible for a hacker to give up in front of the IT,so below is the method which I used to run YouTube videos without installing flash player.

This is how I managed to install it without administrator permissions:
  1. Download this ZIP archive to your hard disk.
  2. Extract the file in the archive. You can use any program capable of opening .zip files (WinZip, WinRAR or the free and great 7-zip). There are also websites which can uncompress archives: wobzip.org.
  3. Copy the file NPSWF32.dll to %APPDATA%\Mozilla\Plugins\
    • %APPDATA% is not a real folder. It's an alias. By inserting it in your windows explorer address bar, you'll be redirected to the real folder which holds your applications profiles and settings. The location of this folder depends on various setting that's why we need the alias and not an absolute path.
    • You can open this folder simply choosing "Start → Run → Type in %APPDATA% → OK".
    • In case you don't have a Plugins folder you can create one and place your files there.
  4. Restart Firefox
  5. Enjoy your flash websites!
NOTE : If you don't find the folder Plugins,then create it as in my case it was not present there. Enjoy .... ;))

Thursday, December 29, 2011

Few Google Tricks for Begineers

A few things you might want to try with Google:
Hand type the following prefixes and note their utility:





 
 
  • link:url Shows other pages with links to that url. 
  • related:url same as "what's related" on serps.
  • site:domain restricts search results to the given domain.
  • allinurl: shows only pages with all terms in the url.
  • inurl: like allinurl, but only for the next query word.
  • allintitle: shows only results with terms in title.
  • intitle: similar to allintitle, but only for the next word. "intitle:webmasterworld google" finds only pages with webmasterworld in the title, and google anywhere on the page.
  • cache:url will show the Google version of the passed url.
  • info:url will show a page containing links to related searches, backlinks, and pages containing the url. This is the same as typing the url into the search box.
  • spell: will spell check your query and search for it.
  • stocks: will lookup the search query in a stock index.
  • filetype: will restrict searches to that filetype. "-filetype:doc" to remove Microsoft word files.
  • daterange: is supported in Julian date format only. 2452384 is an example of a Julian date.
  • maps: If you enter a street address, a link to Yahoo Maps and to MapBlast will be presented.
  • phone: enter anything that looks like a phone number to have a name and address displayed. Same is true for something that looks like an address (include a name and zip code)
  • site:www.somesite.net "+www.somesite.+net"
  • (tells you how many pages of your site are indexed by google)
  • allintext: searches only within text of pages, but not in the links or page title
  • allinlinks: searches only within links, not text or title.

Sunday, December 25, 2011

New Facebook Chat Smileys

  • [[171108522930776]] Troll Face 
  • [[164413893600463]] MEGUSTA 
  • [[218595638164996]] YAO 
  • [[189637151067601]] Lol 
  • [[129627277060203]] Poker face. 
  • [[227644903931785]] Forever ALONE. 
  • [[100002752520227]] OKAY 
  • [[105387672833401]] F**K YEA. 
  • [[100002727365206]] CH AC. 
  • [[125038607580286]] Forever alone navidad. 
  • [[143220739082110]] FK KIDDING ME. 
  • [[168040846586189]] Feel like a Sir. 
  • [[169919399735055]] NOT BAD 
  • [[142670085793927]] M O G. 
  • [[170815706323196]] Cereal Guy 
  • [[167359756658519]] NO 
  • [[224812970902314]] Derp 
  • [[192644604154319]] Derpina

Saturday, December 24, 2011

Must know things in HACKING


Hey guys , how you doing ? hope everything is alryt ! :)
Well some of my friends like ujjwal ;-) asked me about port numbers , IPs , and all those basics . So i thought it would be good if  i post a tutorial on these things .
I'll be explaining these things in brief .

INTRO


So here i start . I'll be explaining about IPs , Port numbers , port scanners , IP scanners , whois and archive.org in brief .
Because in network or web-hacking these are most fundamental and most essential information you are gonna use .


IP


IP is short form of Internet Protocol. Like we all have unique address and u can say phone numbers , every computer connected to any network , that might be internet or any private network , must have its own unique IP.

We track any computer through its IP only . There are two types of IP
  • Static ip - these types of IPs are generally assigned to organizations , like your college or university may have static IP.
  • Dynamic IP - these type of IP are assigned to private users like us . Dynamic IPs keep on changing.
To know about how to find IP of anyone check my tutorial on How to know the IP of your friend .


Port numbers

Port numbers are virtual ports on your computer on which different services are running . like when you browse internet , http - protocol for website browsing , uses port 80 .
When hacking a particular computer on any network , after IP address , port number is the most important thing you need to know . If our desired port is opened , we can exploit that according to our choice . Ports can be closed using firewalls.

Suppose someone says that some website's FTP password is this . now what he mean is , FTP : file transfer protocol , by which you can manage your files on a server via any ftp client , or via your command prompt or terminal , can be used using this password.
Now you must know how to use ftp via your command window. you use ftp command in both linux and window to get it done here is an example :
ftp www..com (23) //23 is optional as default port for ftp is 23

IP and Port scanners


There are lot of tools to know the computers which are connected to a particular network by scanning the network by any of these tools. You just have to give the IP range you want to scan for. I am listing some of the scanners below , these scanners shows you open PORTS too.
  • Angry IP scanner
  • LAN scanner
  • Advanced IP scanner
Just google them to download .


whois


First step in  a mannered website hacking is footprinting or information gathering.
whois is a very popular service used by hackers to get information about whatever website they going to hack.
How to use whois:
simple, just search google for whois , then go to any site and enter the website address there. It will show you details of the website . some usefull links are :
  • http://www.whois.com/
  • http://who.is/
  • http://www.whois.net/


archive.org


This is fun :) .
Go to www.archive.org and put any website address there and then click on TAKE ME BACK button . It will show you the history of that site , like when it was published and the dates when it was modified , how it looked back then. this is also a very good step in footprinting .

Guys plz comment and share and like .... thanks
Stay Tuned !!!!


Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker"




Tuesday, December 20, 2011

Setup a LAN on your virtual box with video


LAN on your PC


hey guys how u been ? hope everything's fine.

anyway what if you want to experiment or check some attacks and you dont have 2 computers ... well you can use virtual box to setup a lan there :D
its great. give it a try :)


VIDEO


guys like and subscribe the videos plz !



command used


ifconfig eth0 192.168.1.2 netmask 255.255.255.0

Guys plz comment and share and like .... thanks
Stay Tuned !!!!



Copyright © 2011. All rights reserved by “Kumar Sourav" & "xeo hacker"

Twitter Delicious Facebook Digg Stumbleupon Favorites More

 

Recent Posts

Join Me On Facebook

700+ Followers

Followers


meet women in Ukraine contatore visite website counter
DMCA.com

Recent Comments

Follow Me On Twitter

1112+ Followers