Hack a Facebook password with winspy (Video)

Tweet

I have made a couple of tutorials on winspy , but most of the people which are new to this subject failed to understand it,so therefore i am posting a video which will help you to hack a Facebook password with a winspy keylogger.Winspy keylogger is a complete stealth mode spyware keylogger that will record both Local and remote computer.

Steps followed in the video:

• First of all download Winspy keylogger software. 
• After downloading winspy keylogger to hack Facebook account password, run the application. 
• On running, a dialog box will be prompted. 
• Now, create an user-id and password on first run and hit apply password. 
• Remember this password as it is required each time you start Winspy and even while uninstalling. 
• Now, another box will come, explaining you the hot keys(Ctrl + Shift + F12) to start the Winspy keylogger software.

• Now, on pressing hot keys, a login box will come asking userid and password. Enter them and click OK.

• Now, Winspy’s main screen will be displayed as shown in image below:

• Select Remote at top, then Remote install. 
• On doing this, you will get a popup box as shown in image. Now, fill in the following information in this box.

.user - type in the victim’s name

.file name - Name the file to be sent. Use the name such that victim will love to accept it.

.file icon - keep it the same

.picture - select the picture you want to apply to the keylogger.

• In the textfield of “Email keylog to”, enter your email address. Hotmail accounts do not accept keylog files, so use another emailaccount id,my sugession is using a Gmail id 
• Thats it. This much is enough. If you want, can change other settings also. 
• After you have completed changing settings, click on “Create Remote file”. 
• Now just add your picture to a winrar archive. 
• Now, what you have to do is only send this keylog file to your victim. When victim will open this file, all keystrokes typed by victim will be sent to your email inbox. 
• Thus, you will get all his passwords and thus will be able to hack his email accounts and even Facebook account password.

Read More

Facebook is banned in Pakistan

Tweet

Facebook has been banned in Pakistan because of protest by the whole nation . The reason behind it is that on 20th of May an event is held on many pages of facebook about the Sketching of Holy Prophet(P.B.U.H) , which is unbearable for the Muslims so they protest and eventually facebook is banned in many muslim countries including Pakistan.


I think facebook should apologize for their act and should remove all such pages. We should respect all the religions ,i think its the real humanity.


Thnx

Read More

No more Adsense accounts in India

Tweet

Its A Very Sad News To Share ...

Adsense Stopped Approving New Accounts To India Neither You Can Change It From Some other Country To India
Basically It Means No More Accounts For Indians

The Only Way To Get An Account Is Make A Blog Now Keep Updating It A Little Bit For Six Months

And After 6 Months You Might Get An Account With That Blog

And Even Pakistan Is Also Added To The List Of Those Countries Where You Cannot Change Payee Name Neither Address And 6 Months Restriction Is Also Applied I Think

No sure For The Last Point

But Indeed a Very Sad News .....

Read More

How to catch a cheating spouse

Tweet

Is your spouse cheating you? Do you want to catch a cheating spouse? Studies reveal that:

• Only 46% of men believe that online affairs are adultery. (DivorceMag)
• Up to 37% of men and 22% of women admit to having affairs. Researchers think the vast majority of the millions of people who visit chat rooms, have multiple "special friends". (Dr. Bob Lanier, askbob.com)
• One-third of divorce litigation is caused by online affairs. (The Fortino Group)
• Approximately 70% of time on-line is spent in chatrooms or sending e-mail; of these interactions, the vast majority are romantic in nature. (Dr. Michael Adamse, PhD., co-author of "Affairs of the Net: The Cybershrinks' Guide to Online Relationships")

IF you are in a same situation then dont worry, Rafayhackingarticles has got a solution for you:

These computer monitoring software will log and record what your spouse types, who they talk to, documents they open and print, what websites they visit, software titles they run, emails they send and receive, and even screenshots of their actual online activities.

Stop your cheating spouse in their tracks with our powerful monitoring spy software.

RafayHackingArticles recommends following three spywares:

Sniperspy - Remote monitoring SniperSpy is the industry leading Remote password  hacking software combined with the remote install and  Remote Viewing feature. Once installed on the remote pc(s) you wish, you only need  to login to your own personal SniperSpy account to view  activity logs of the remote PC’s!  This means that you can  view logs of the remote PC’s from anywhere in the world as  long as you have internet access

Spytech Realtime-Spy  Realtime-Spy is the latest in cutting-edge computer monitoring technology that allows you to monitor ANY PC from ANYWHERE. Realtime-Spy is remotely deployable (no physical installation needed), and its activity logs are accessible from anywhere - regardless if the remote PC is online or not. Once installed, Realtime-Spy monitors the remote PC in total stealth, and cloaks itself to avoid being detected. Monitors keystrokes, website visits, windows viewed, and more!

Spytech Keystroke Spy  Keystroke Spy is a cost-effective monitoring solution that  allows you to easily, and efficiently log what your computer  users are doing. Keystroke Spy is a powerful tool that can  log every keystroke users type. Keystroke Spy can run in  total stealth, email you when specific keywords are typed , and can even be set to log keystrokes only typed in specific applications.

Read More

Hack websites using Auto SQL I Helper

Tweet

In the recent posts we have seen the hacking of a site using manual SQL injection,which is essential to know the basics of SQL.Now we are going to check advanced SQL INJECTION.


At the begening "SQLIHelperV.2.7" is a tool that will hack vulnerable websites using SQL injection. You don't have to spend hours and hours trying to find your way in a website and trying hundreds of combinations and codes to hack a website.
This tool will do it all by itself. You only have to tell her what do and where to look.


Lets start.
first you need to find the potential website that you think it might be possible to hack it. Remember that some websites are simply unhackable.


After you find your website ( better to end with "article.php?id=[number]" ) example: "http://encycl.anthropology.ru/article.php?id=1"




Check if your website can be hacked by trying to go this address :
http://www.domain.com/article.php?id=&amp;amp;#39;1 <------ notice the ' before the number 1.


you should get this message:


Query failedYou have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'1 ORDER BY lastname' at line 1 SELECT * FROM person_old WHERE id=\'1 ORDER BY lastname


This mean that this website can be hacked because you get an error.


Now open your SQL I Helper V.2.7
and write the link :
http://www.domain.com/article.php?id=1 <---- without the '


and press the inject button.


Now you should wait until the tool finish searching for columns . Time may vary depending on your connection speed , your pc speed , and the number of columns in the website.


Make sure that the website support union otherwise the injection won't work.


Now select any element from the "database name" box and press the "Get tables" button ,


then select any element from the "table name" box and press the "Get columns" button


then select any elements you want from the "columns name" box and press "Dump Now"


After clicking "Dump Now" , u will see some hashes


Now copy the hash on a peace of paper and go to this website:


http://www.md5crack.com/


enter the hash and press the button "Crack that hash baby!" and you should get the source of the hash.

Read More

Online Sites Helpful for SQL Injection

Tweet

In the last post we have seen how to Hack an Online Site using SQL Injection and then Some Latest Commands for SQL Injection.Now we are going to see some sites which will help in SQL Injection and help us to find the vulnerable sites and also the number of columns ,tables etc.

1) SQL Vulnerability Finder

• You can find whether the site iz vulnerable for SQL Injection or not through this link

Link : http://sql.wehostsite.com/

2) SQL vulnerability finder script

After finding whether the site is vulnerable or not,just enter the vulnerable site url in the below link and it will return you the following :

• Order by
• Selection Id
• Version
• Database name

Link : http://orderby.wehostsite.com/ 

Read More

SQL commands [useful for Injection]

Tweet

In the last post we have seen how to Hack an Online Site using SQL Injection. This technique is quite easy to use and i think its best technique but it is not applicable on new sites using cpanel. As you have understand the whole technique now i am introducing some useful commands related to SQL injection :

Latest Sql Injection Commands

• ABORT -- abort the current transaction
• ALTER DATABASE -- change a database
• ALTER GROUP -- add users to a group or remove users from a group
• ALTER TABLE -- change the definition of a table
• ALTER TRIGGER -- change the definition of a trigger
• ALTER USER -- change a database user account
• ANALYZE -- collect statistics about a database
• BEGIN -- start a transaction block
• CHECKPOINT -- force a transaction log checkpoint
• CLOSE -- close a cursor
• CLUSTER -- cluster a table according to an index
• COMMENT -- define or change the comment of an object
• COMMIT -- commit the current transaction
• COPY -- copy data between files and tables
• CREATE AGGREGATE -- define a new aggregate function
• CREATE CAST -- define a user-defined cast
• CREATE CONSTRAINT TRIGGER -- define a new constraint trigger
• CREATE CONVERSION -- define a user-defined conversion
• CREATE DATABASE -- create a new database
• CREATE DOMAIN -- define a new domain
• CREATE FUNCTION -- define a new function
• CREATE GROUP -- define a new user group
• CREATE INDEX -- define a new index
• CREATE LANGUAGE -- define a new procedural language CREATE OPERATOR -- define a new operator
• CREATE OPERATOR CLASS -- define a new operator class for indexes
• CREATE RULE -- define a new rewrite rule
• CREATE SCHEMA -- define a new schema
• CREATE SEQUENCE -- define a new sequence generator
• CREATE TABLE -- define a new table
• CREATE TABLE AS -- create a new table from the results of a query
• CREATE TRIGGER -- define a new trigger
• CREATE TYPE -- define a new data type
• CREATE USER -- define a new database user account
• CREATE VIEW -- define a new view
• DEALLOCATE -- remove a prepared query
• DECLARE -- define a cursor
• DELETE -- delete rows of a table
• DROP AGGREGATE -- remove a user-defined aggregate function
• DROP CAST -- remove a user-defined cast
• DROP CONVERSION -- remove a user-defined conversion
• DROP DATABASE -- remove a database
• DROP DOMAIN -- remove a user-defined domain
• DROP FUNCTION -- remove a user-defined function
• DROP GROUP -- remove a user group
• DROP INDEX -- remove an index
• DROP LANGUAGE -- remove a user-   DROP TYPE -- remove a user-defined data type
• DROP USER -- remove a database user account
• DROP VIEW -- remove a view
• END -- commit the current transaction
• EXECUTE -- execute a prepared query
• EXPLAIN -- show the execution plan of a statement
• FETCH -- retrieve rows from a table using a cursor
• GRANT -- define access privileges
• INSERT -- create new rows in a table
• LISTEN -- listen for a notification
• LOAD -- load or reload a shared library file
• LOCK -- explicitly lock a table
• MOVE -- position a cursor on a specified row of a table
• NOTIFY -- generate a notification
• PREPARE -- create a prepared query
• REINDEX -- rebuild corrupted indexes
• RESET -- restore the value of a run-time parameter to a default value
• REVOKE -- remove access privileges
• ROLLBACK -- abort the current transaction
• SELECT -- retrieve rows from a table or view
• SELECT INTO -- create a new table from the results of a query
• SET -- change a run-time parameter
• SET CONSTRAINTS -- set the constraint mode of the current transaction
• SET SESSION AUTHORIZATION -- set the session user identifier and the current user identifier of the current session
• SET TRANSACTION -- set the characteristics of the current transaction
• SHOW -- show the value of a run-time parameter
• START TRANSACTION -- start a transaction block
• TRUNCATE -- empty a table
• UNLISTEN -- stop listening for a notification
• UPDATE -- update rows of a table
• VACUUM -- garbage-collect and optionally analyze a database 

Here you can check some Online Sites helpful for SQL Injection .

Read More

where saved passwords are stored

Tweet

it will help u wen u gain acess in someones pc or u using a system or friend or enemy and u want to know his/her passwords ..........


Enjoy!


# Internet Explorer 4.00 - 6.00: The passwords are stored in a secret location in the Registry known as the "Protected Storage".
The base key of the Protected Storage is located under the following key:
"HKEY_CURRENT_USER\Software\Microso

ft\Protected Storage System Provider".
You can browse the above key in the Registry Editor (RegEdit), but you won't be able to watch the passwords, because they are encrypted.
Also, this key cannot easily moved from one computer to another, like you do with regular Registry keys.


# Internet Explorer 7.00 - 8.00: The new versions of Internet Explorer stores the passwords in 2 different locations.
AutoComplete passwords are stored in the Registry under HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IntelliForms\Storage2.
HTTP Authentication passwords are stored in the Credentials file under Documents and Settings\Application Data\Microsoft\Credentials , together with login passwords of LAN computers and other passwords. 

# Firefox: The passwords are stored in one of the following filenames: signons.txt, signons2.txt, and signons3.txt (depends on Firefox version)
These password files are located inside the profile folder of Firefox, in [Windows Profile]\Application Data\Mozilla\Firefox\Profiles\[Profile Name]
Also, key3.db, located in the same folder, is used for encryption/decription of the passwords.


# Google Chrome Web browser: The passwords are stored in [Windows Profile]\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data
(This filename is SQLite database which contains encrypted passwords and other stuff)




# Opera: The passwords are stored in wand.dat filename, located under [Windows Profile]\Application Data\Opera\Opera\profile




# Outlook Express (All Versions): The POP3/SMTP/IMAP passwords Outlook Express are also stored in the Protected Storage, like the passwords of old versions of Internet Explorer.  

# Outlook Express (All Versions): The POP3/SMTP/IMAP passwords Outlook Express are also stored in the Protected Storage, like the passwords of old versions of Internet Explorer.


# Outlook 2002-2008: All new versions of Outlook store the passwords in the same Registry key of the account settings.
The accounts are stored in the Registry under HKEY_CURRENT_USER\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\[Profile Name]\9375CFF0413111d3B88A00104B2A6676\[

Account Index]
If you use Outlook to connect an account on Exchange server, the password is stored in the Credentials file, together with login passwords of LAN computers.


# Windows Live Mail: All account settings, including the encrypted passwords, are stored in [Windows Profile]\Local Settings\Application Data\Microsoft\Windows Live Mail\[Account Name]
The account filename is an xml file with .oeaccount extension.


# ThunderBird: The password file is located under [Windows Profile]\Application Data\Thunderbird\Profiles\[Profile Name]
You should search a filename with .s extension.
# Google Talk: All account settings, including the encrypted passwords, are stored in the Registry under HKEY_CURRENT_USER\Software\Google\Google Talk\Accounts\[Account Name]


# Google Desktop: Email passwords are stored in the Registry under HKEY_CURRENT_USER\Software\Google\Google Desktop\Mailboxes\[Account Name]


# MSN/Windows Messenger version 6.x and below: The passwords are stored in one of the following locations:


1. Registry Key: HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger
2. Registry Key: HKEY_CURRENT_USER\Software\Microsoft\MessengerService
3. In the Credentials file, with entry named as "Passport.Net\\*". (Only when the OS is XP or more)


# MSN Messenger version 7.x: The passwords are stored under HKEY_CURRENT_USER\Software\Microsoft\IdentityCRL\Creds\[Account Name] 

# Windows Live Messenger version 8.x/9.x: The passwords are stored in the Credentials file, with entry name begins with "WindowsLive:name=".


# Yahoo Messenger 6.x: The password is stored in the Registry, under HKEY_CURRENT_USER\Software\Yahoo\Pager
("EOptions string" value)


# Yahoo Messenger 7.5 or later: The password is stored in the Registry, under HKEY_CURRENT_USER\Software\Yahoo\Pager - "ETS" value.
The value stored in "ETS" value cannot be recovered back to the original password.


# AIM Pro: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\AIM\AIMPRO\[A

ccount Name]


# AIM 6.x: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\America Online\AIM6\Passwords


# ICQ Lite 4.x/5.x/2003: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\Mirabilis\ICQ\NewOwners\[ICQ Number]
(MainLocation value)


# ICQ 6.x: The password hash is stored in [Windows Profile]\Application Data\ICQ\[User Name]\Owner.mdb (Access Database)
(The password hash cannot be recovered back to the original password)


# Digsby: The main password of Digsby is stored in [Windows Profile]\Application Data\Digsby\digsby.dat
All other passwords are stored in Digsby servers.


# PaltalkScene: The passwords are stored in the Registry, under HKEY_CURRENT_USER\Software\Paltalk\[Account Name].

Read More

Real Hacking Steps

Tweet

1. Information Gathering/Foot printing
2. Port Scanning
3. OS Fingerprinting
4. Banner Grabbing
5. Vulnerability Assessment
6. Search & Build Exploit
7. Attack
8. Maintain Access with help of Root kits and Trojans.
9. Covering Tracks

1.Information Gathering / Foot printing

Informational gathering is the process to get maximum details of target host. It is very important part of remote hacking because when we have more information about target system we can launch more attacks.


Information gathering is done with these steps:

• Find our company URL / IP address
• Google for more information from different websites
• Foot printing Through Job Sites
• Find out whois record of target domain name (open www.who.is)
• Find out physical location of victim (open www.whatismyipaddress.com)

Case-Study: 1.1

You are working in your company as a hacker, and your company want physical address and IP address and employee record and domain details. Your company gives u domain name:
www.kulhari.net

Ans)
1. Open Dos prompt and type ping kulhari.net [Enter] after you will get IP address of victim.
2. Open google.com and search kulhari.net (and browse website for all information’s like contact number, employee records and their services).
3. For domain owner email address and hosting company details open: www.who.is and type www.kulhari.net (any target site).
4. For physical address location of server open www.whatismyipaddress.com and type IP address that you get in step 1. And trace it after that.

Video Link

2. Port Scanning

• What is port?

Port is medium for communication between 2 computers. Every service on a host is identified by a unique 16-bit number called a port.

• Some default ports:

     Port number ~ Service

• 7 ~ Ping
• 21 ~ FTP (File Transfer Protocol)
• 22 ~ SSH (Secure Shell)
• 23 ~ Telnet
• 25 ~ SMTP (Mail)
• 43 ~ WHOIS
• 53 ~ DNS
• 80 ~ HTTP
• 110 ~ POP3 (Mail Access)
• 513 ~ Rlogin
• 8080 ~ Proxy

• TCP (Transmission Control Protocol) and UDP (User Datagram Protocol) are two of the protocols that make up the TCP/IP protocol suite which is used universally to communicate on the Internet. Each of these has ports 0 through 65535 available so essentially there are more than 65,000 doors to lock.
• The first 1024 TCP ports are called the Well-Known Ports and are associated with standard services such as FTP, HTTP, SMPTP or DNS.

• What is port scanning?

It is similar to a thief going through your neighborhood and checking every door and window on each house to see which ones are open and which ones are locked.

• What is port scanner?

A port scanner is a piece of software designed to search a network host for open ports. This is often used by administrators to check the security of their networks and by hackers to identify running services on a host with the view to compromising it. To port scan a host is to scan for listening ports on a single target host. To port sweep is to scan multiple hosts for a specific listening port.

• Best port scanners: nmap, Hping2, Superscan.

Download link: http://sectools.org/

• Why we perform port scanning?

We perform port scanning for finding our open services, so after we can search exploits related to that service and application.

Demo video

• NMAP (Port Scanner): A Hacker’s Best Friend

Nmap is a tool that has the ability to detect hosts, scanning ports and Oss. Nmap used in matrix, sword and many hacking movies.

• Nmap Modes of operation:

TCP PING: -PT: This method of pinging sends a TCP packet to the host with an ACK flag. If the host replies with an RST, then the host is UP(running).

ICMP Ping: -PI: This is standard ping used by UNIX / Linux boxes.

Connect (): -ST: All Linux/Unix systems provide a system call to connect to a machine on a specified port, with a given protocol.

SYN Stealth: -sS: This is stealth scan in that it does not get logged.

• How to Find Out Own computer Ports:

Open Dos prompt and type following command.

C:\> netstat –no

After Show active connections:
Active Connections

Proto ~ Local Address ~ Foreign Address ~ State ~ PID
TCP ~ 117.196.225.191:3604 ~ 69.93.227.45:80 ~ ESTABLISHED ~ 2148
TCP ~ 117.196.227.116:1067 ~ 80.190.154.74:80 ~ CLOSE_WAIT ~ 3064
TCP ~ 127.0.0.1:1990 ~ 127.0.0.1:1991 ~ ESTABLISHED ~ 2020
TCP ~ 127.0.0.1:1991 ~ 127.0.0.1:1990 ~ ESTABLISHED ~ 2020
TCP ~ 127.0.0.1:1992 ~ 127.0.0.1:1993 ~ ESTABLISHED ~ 2020
TCP ~ 127.0.0.1:1993 ~ 127.0.0.1:1992 ~ ESTABLISHED ~ 2020


PID is Process ID,
We can find out their associate application with help of following command:

C:\> tasklist

To terminate 2020 PID or another process

C:\> taskkill /PID 2020

After All connections will be close on our system.

_{NOTE: We can know that our system is infected or not with help of former commands, described.}

3. OS Fingerprinting

• OS (Operating System) Fingerprinting is a process to find out victim Operating System (Windows, Linux, UNIX).

Introduction:

When exploring a network for security auditing or inventory/administration, you usually want to know more than the bar IP addresses of identified machines. Your reaction to discovering a printer may be different than to finding a router, wireless access point, telephone PBX, game console, Windows desktop, or UNIX server. Finer grained detection (such as distinguishing Mac OS X 10.4 from 10.3) is useful for determining vulnerability to specific flaws and for tailoring effective exploits for those vulnerabilities.

• Tools: nmap, NetScanTools Pro, P0f.

4. Banner Grabbing

Banner Grabbing is an attack designed to deduce the brand and/or version of an operating system or application. Mean after port scanning we found open port 80 (apache) and target OS is Linux, but we don’t know what is version of apache for remote hacking. Like apache 2.0, 2.2, or 2.6.


Example: c:\> telnet 69.93.227.34 80 [Enter]
Change Target Port 80 to another.

5. Vulnerability Assessment

• What is Vulnerability Assessment?

The word “vulnerability” describes a problem (such as a programming bug or common misconfiguration) that allows a system to be attacked or broken into.

A vulnerability assessment is the process of identifying, quantifying, and prioritizing (or ranking) the vulnerability in a system.

Vulnerability assessments can be conducted for small business to large regional infrastructures. Vulnerability from the perspective of Disaster Management means assessing the threats from potential hazards to the population and to the infrastructure developed in that particular. It can be done in political, social, economic and in environmental fields.

Assessments are typically performed according to the following steps:

1. Cataloging assets and capabilities (resources) in a system.
2. Assigning quantifiable value (or at least rank order) and importance to those resources
3. Identifying the vulnerabilities or potential threats to each resource
4. Mitigating or eliminating the most serious vulnerabilities for the most valuable resources

• Automated Tools: Nessus, Nikto, Core impact, Retina, etc

6. Search & Build Exploit

• Manual Method: We can find vulnerability manually with help of vulnerability archive sites like www.milw0rm.com and http://www.packetstormsecurity.org/
• For exploit and final attack, open the websites say Microsoft, adobe or Mozilla which provides the source code to format. You need to download the code and compile them for preparing exploit for final attack.

7. Attack

Launch attack on remote system and get reverse shell.

8. Maintain Access

After getting remote access we place a root kit or Trojan virus for future remote access, without any password.
[For more information you’ll have to wait for the next chapter]

9. Covering Tracks

Covering Tracks is a process to delete all logs on the remote system. If target system is Linux or UNIX, delete all entries of /var folder and if it is windows OS delete all events and logs.

Case Study: 1.3
You are working in abc company as a ethical hacker and your company get a contract from government to hack terrorist organization server for getting all their emails.


Ans) 1st we perform Information gathering (like collect information like IP address and physical address). 2nd we perform port scanning to find open ports: 22, 25, 80. And then perform OS fingerprinting with help of nmap and p0f and if result is “Linux 2.6” then next perform banner grabbing on port no: 25 (related to email server) in which command is used:


C:\> telnet abc.com 80
Result is : HTTP 1.1 400 BAD REQUEST
Server: Apache 2.0 Linux

So after we perform manual vulnerability assessment manually with help of www.milw0rm.com and search “Apache 2.0” >> then after download exploit code >> compile the exploit code and attack then take all email backup from remote system.

Project DONE!

Read More

Top 5 Most Famous Hacker of All Time

Tweet

1. Jonathan James: James gained notoriety when he became the first juvenile to be sent to prison for hacking. He was sentenced at 16 years old. In an anonymous PBS interview, he professes, “I was just looking around, playing around. What was fun for me was a challenge to see what I could pull off.” James also cracked into NASA computers, stealing software worth approximately $1.7 million.

2. Adrian Lamo: Lamo’s claim to fame is his break-ins at major organization like The New York Times and Microsoft. Dubbed the “homeless hacker,” he used Internet connections at Kinko’s, coffee shops and libraries to do his intrusions. In a profile article, “He Hacks by Day, Squats by Night,” Lamo reflects, “I have a laptop in Pittsburgh, a change of clothes in D.C. It kind of redefines the term multi-jurisdictional.”

3. Kevin Mitnick: A self-proclaimed “hacker poster boy,” Mitnick went through a highly publicized pursuit by authorities. His mischief was hyped by the media but his actual offenses may be less notable than his notoriety suggests. The Department of Justice describes him as “the most wanted computer criminal in United States history.” His exploits were detailed in two movies: Freedom Downtime and Takedown.

4. Kevin Poulsen: Also known as Dark Dante, he gained recognition for his hack of LA radio’s KIIS-FM phone lines, which earned him a brand new Porsche, among other items. His hacking specialty, however, revolved around telephones.

5. Robert Tappan Morris: Morris, son of former National Security Agency scientist Robert Morris, is known as the creator of the Morris Worm, the first computer worm to be unleashed on the Internet. As a result of this crime, he was the first person prosecuted under the 1986 Computer Fraud and Abuse Act.

It think it gives motivation to a hacker .

Read More

Hack facebook account of your friend using Reverting - Social Engineering

Tweet

Welcome to my tutorial on how to hack any facebook accounts using reverting.I have already posted about Facebook Freezer which just freezes facebook account but this is something different. Its also different from the Facebook Tabnabbing and Facebook Keylogging etc.

First of all, I want to say this is not hacking, this is called "Reverting".

What is Reverting?

Reverting means undoing the effects of one or more edits, which normally results in the page being restored to a version that existed sometime previously.

NOTE: This tutorial is for educational purposes only, I am NOT responsible in any way for how this information is used, use it at your own risk, also you can learn how to get your account back from this. Ok, let's start:

• First of all open this link:http://www.facebook.com/help/contact.php?show_form=account_hacked This will be the form you will be filling out.

NOTE: Be sure you are not logged in.

• Your email address.Simple, write your "own" email adress, or the victim you are hacking.
• Can you send and receive emails from your login email address? Choose "No". 
• Has the login email address that you normally use to log in to your account been hacked? Choose "Yes". 
• Has the login email address on your account been changed? Choose "Yes" again.
• Full name on the account. If you already know the full name of the victim you're going to hack, you can write it
• Email address(es) that may be affiliated with the account.Write "No".
• Your contact email address.Write your email adress where facebook can contact you. Example crazy@gmail.com.
• Your username (if applicable).

NOTE:If you have created username, write it there. If you are not sure about your victim, ask him first, if he looks like confused and asking you what's that, then probably he doesn't have one. You can make username by logging your facebook first, going to "Settings" and click "change" on your username. Personally I don't have an username. Many people don't have a username, so write there "none", "don't have" or "no".

•  URL (web address link) to your profile page.You can find victim's profile page, by searching their email. ogin to your facebook, write their email in the search button and press Enter. After some seconds, it will appear their name, click on it and copy the URL. There are more instruction in the pictures. They look bad but that was the best I could do.
• Ok then, write victim's prifle URL, and click the button "Submit".
• Once you're done and pressed the Submit button a message will appear: "Thanks, your inquiry has been forwarded to the Facebook Team."
• That means, you're done and you have to wait while facebook check up your request and send you email to the email you wrote where they can contact you.

Read More

hack orkut accounts easily

Tweet

How to create yahoo/orkut fake webpage in order 2 get da victim pass.

INSTRUCTIONS:

• Download the Fake Page which is a zip file.
•  Extract the contents to of a folder
• Edit mailer.php file with notepad and keep the email ID where you want hacked passwords to come as.
• Uplaod all the 3 pages Loginerror.html ,index.html,mailer.php to a free webhost site
• Send the site link to the victim
• When he logs in tha uploaded yahoo fake page ,The ID pass which the victim entered will be sent to the email ID which you entered in mailer.php file.

More Installation instructions

• You need a hosting account with PHP installed.
• If you do not have one you can make one for free @ http://www.tripod.lycos.co.uk/ or http://www.igotfree.com or search for more webhosts with PHP support , no forced ads. 
• You only need to change 2 variables in this script.
• - ($to = "Put_Email_Here@yahoo.com";) Email
• - ($mailOrText = "YeS";) "yes" for email "no" for text file on server
• Place YOUR email between the quotes $to = "emailid@yahoo.com";
• *Upload ALL the files to the server!
• If you are not able to upload files in lycos then use some other server the best is www.ripway.com

If theres any problem then ask me in comments.

Read More

Hack someone's PC using NETBIOS

Tweet

What is it?

NetBIOS Hacking is the art of hacking into someone else’s computer through your computer. NetBIOS stands for “Network Basic Input Output System.” It is a way for a LAN or WAN to share folders, files, drives, and printers.


-How can this be of use to me?-
Most people don’t even know, but when they’re on a LAN or WAN they could possibly have their entire hard drive shared and not even know. So if we can find a way into the network, their computer is at our disposal.


-What do I need?-
Windows OS
Cain and Abel

==========================
-[Step 1, Finding the target.]-
==========================
So first off we need to find a computer or the computer to hack into. So if your plugged in to the LAN, or connected to the WAN, you can begin. Open up Cain and Abel. This program has a built in sniffer feature. A sniffer looks for all IP addresses in the local subnet. Once you have opened up the program click on the sniffer tab, click the Start/Stop sniffer, and then click the blue cross


Another window will pop up, make sure “All host in my subnet” is selected, and then click ok.


It should begin to scan.


Then IP’s, computer names, and mac addresses will show up.
Now remember the IP address of the computer you are going to be breaking into.
If you can’t tell whether the IP address is a computer, router, modem, etc, that’s ok.
During the next step we will begin our trial and error. 

==========================
-[Part 2, Trial and Error]-
==========================
Now, we don’t know if we have our designated target, or if we have a computer or printer, or whatever else is on the LAN or WAN.
If you did get the IP of the target though, I still recommend reading through this section, for it could be helpful later on.
Click on the start menu and go to run, type in cmd, and click ok.
This should bring up the command prompt.
From here we will do most of the hacking.
Now I will be referring to certain commands that need to be inputted into the command prompt.
I will put these commands in quotes, but do not put the quotes in the code when you type it into the prompt.
I am only doing this to avoid confusion.
Let’s get back to the hacking.
Type in “ping (IP address of the target).” For example in this tutorial, “ping 192.168.1.103.”
This will tell us if the target is online.
If it worked, it will look something like this (note, I have colored out private information):


IF it didn’t work, meaning that the target is not online, it will look something like this:


If the target is not online, either switch to a different target, or try another time. If the target is online, then we can proceed.  

==========================
-[Part 3, Gathering the Information.]-
==========================

Now, input this command “nbtstat –a (IP address of target).” An example would be “nbtstat –a 192.168.1.103.”
This will show us if there is file sharing enabled, and if there is, it will give us the: currently logged on user, workgroup, and computer name.

Ok, you’re probably wondering, “What does all this mean to me?” Well, this is actually very important, without this, the hack would not work. So, let me break it down from the top to bottom. I will just give the first line of information, and then explain the paragraph that follows it.


The information right below the original command says: “Local Area Connection,” this information tells us about our connection through the LAN, and in my case, I am not connected through LAN, so the host is not found, and there is no IP. 

The information right below the “Local Area Connection,” is “Wireless Network Connection 2:” It gives us information about the connection to the target through WAN. In my case I am connected through the WAN, so it was able to find the Node IpAddress. The Node IpAddress is the local area IP of the computer you are going to break into.


The NetBIOS Remote Machine Name Table, give us the workgroup of our computer, tells us if it is shared, and gives us the computer name. Sometimes it will even give us the currently logged on user, but in my case, it didn’t. BATGIRL is the name of the computer I am trying to connect to. If you look to the right you should see a <20>. This means that file sharing is enabled on BATGIRL. If there was not a <20> to the right of the Name, then you have reached a dead end and need to go find another IP, or quit for now. Below BATGIRL is the computers workgroup, SUPERHEROES. If you are confused about which one is the workgroup, and the computer, look under the Type category to the right of the < > for every Name. If it says UNIQUE, it is one system, such as a printer or computer. If it is GROUP, then it is the workgroup

==========================
-[Step 4, Breaking In]-
==========================


Finally it’s time.
By now we know: that our target is online, our target has file sharing, and our target’s computer name.
So it’s time to break in.
We will now locate the shared drives, folders, files, or printers. Type in “net view \\(IP Address of Target)”
An example for this tutorial would be: “net view \\192.168.1.103”

We have our just found our share name. In this case, under the share name is “C,” meaning that the only shared thing on the computer is C. Then to the right, under Type, it says “Disk.” This means that it is the actual C DISK of the computer. The C DISK can sometimes be an entire person’s hard drive. 

All's that is left to do is “map” the shared drive onto our computer. This means that we will make a drive on our computer, and all the contents of the targets computer can be accessed through our created network drive. Type in “net use K: \\(IP Address of Target)\(Shared Drive). For my example in this tutorial, “net use K: \\192.168.1.103\C.” Ok, let’s say that you plan on doing this again to a different person, do u see the “K after “net use?” This is the letter of the drive that you are making on your computer. It can be any letter you wish, as long as the same letter is not in use by your computer. So it could be “net use G...,” for a different target.

As you can see, for my hack I have already used “K,” so I used “G” instead.
You may also do the same for multiple hacks.
If it worked, it will say “The command completed successfully.”
If not, you will have to go retrace you steps.
Now open up “my computer” under the start menu, and your newly created network drive should be there.

Now, if you disconnect from the WAN or LAN, you will not be able to access this drive, hence the name Network Drive.
The drive will not be deleted after you disconnect though, but you won’t be able to access it until you reconnect to the network.
So if you are doing this for the content of the drive, I recommend dragging the files and folders inside of the drive onto your computer,
because you never know if the target changes the sharing setting.
If you are just doing this to hack something, then go explore it and have some well deserved fun!


Congratulations! You’re DONE!


-Commands used in this tutorial:
PING
NBTSTAT -a (IP Address of Target)
NET VIEW \\(IP Address of Target)
NET USE K: \\(IP Address of Target)\(SHARENAME)

 

Read More