Thankyou all the people that helped support our campaign to help byrma cyclone victims by donating to the red cross.
All your donations reached Byrma. Once again thankyou.
All your donations reached Byrma. Once again thankyou.
Tuesday, May 13, 2008
Download these to someone you hates computer
Hacking Online Banking and Credit Card Transactions
Hacking Online Banking and Credit Card Transactions – And How to Prevent It:
Here is process for hacking online banking and credit cards transactions and also a process to prevent from them .The Scenario
You go to a coffee shop for a cup of coffee and to utilize the shop’s Wi-Fi HotSpot to surf the web. You connect to the hotspot network and decide to perform some online banking or to purchase something online. By the way, this could happen to you at home, as well. As an end-user, you feel quite secure, as you see the lock in the bottom corner of your Internet browser, symbolizing that the online banking or online credit card transaction is safe from prying eyes. Your data, including username, password, credit card info, etc. will be encrypted with 128-bit encryption. So it's secure, right?
It is not uncommon to perform banking and to purchase products online with your credit card. It is also a common thought that doing so is secure, as this is done via SSL. For the most part, this is true and the sessions are secure. Discover Card, for example, posts the following statement on their website:
Figure 1
The problem is that it is not “virtually impossible” for someone else to see your data, such as login information or credit card numbers. It can actually be relatively easy, as you’ll see, if you as an end-user are not knowledgeable about how you can be exploited and know the signs that this is occurring.
Figure 2 (Indicates a Secure SSL Session)
Continuing with the scenario, what you didn’t realize is that a hacker has intercepted your Online Banking login credentials and credit card information and can now log into your Online Banking Website or purchase items with your credit card. How is this possible, since SSL was used and is hard to break? The answer is that you made a fatal mistake that subjected you to an SSL Man-in-the-Middle (MITM) attack.
The Attack
The fatal flaw that enabled the sensitive information to be stolen is possible when an end-user is not properly educated on an easy to do and well-known SSL exploit – SSL MITM.
Here’s how it’s done:
The hacker goes to coffee shop and connects to the same Wi-Fi network you are connected to. He runs a series of utilities to redirect other user’s data through his machine. He runs a number of other utilities to sniff the data, act as an SSL Certificate Server and to be the Man-the-Middle. The following diagram shows a very simplified graphic of how your SSL Banking session should work under normal conditions, then how it would work during an attack:
Figure 3
Figure 4
An important concept to grasp here is that a certificate is used to establish the secure SSL connection. This is a good thing, if you have a good certificate and are connecting directly to the website to which you intended to use. Then all your data is encrypted from your browser to the SSL website where the bank’s website will use the information from the certificate it gave you to decrypt your data/credentials. If that is truly the case, then it is pretty darn hard for a hacker to decrypt the data/credentials being transmitted, even if he is able to sniff your data.
This is a bad thing if you have a “Fake” certificate being sent from the hacker, and you are actually connecting to his machine, not directly to the bank’s website. In this case, your credentials are being transmitted between your browser and the hacker’s machine. The hacker is able to grab that traffic, and, because he gave you the certificate to encrypt the data/credentials, he can use that same certificate to decrypt your data/credentials.
Here are the exact steps a hacker could use to perform this attack:
The first thing he would do is turn on Fragrouter, so that his machine can perform IP forwarding
Figure 5
After that, he’ll want to direct your Wi-Fi network traffic to his machine instead of your data traffic going directly to the Internet. This enables him to be the “Man-in-the-Middle” between your machine and the Internet. Using Arpspoof, a real easy way to do this, he determines your IP address is 192.168.1.15 and the Default Gateway of the Wi-Fi network is 192.168.1.1:
Figure 6
The next step is to enable DNS Spoofing via DNSSpoof:
Figure 7
Since he will be replacing the Bank's or Online Store’s valid certificate with his own fake one, he will need to turn on the utility to enable his system to be the Man-in-the-Middle for web sessions and to handle certificates. This is done via webmitm:
Figure 8
At this point, he is setup and ready to go, he now needs to begin actively sniffing your data passing through his machine including your login information and credit card info. He opts to do this with Ethereal, then saves his capture:
Figure 9
He now has the data, but it is still encrypted with 128-bit SSL. No problem, since he has the key. What he simply needs to do now is decrypt the data using the certificate that he gave you. He does this with SSL Dump:
Figure 10
The data is now decrypted and he runs a Cat command to view the now decrypted SSL information. Note that the username is “Bankusername” and the password is “BankPassword”. Conveniently, this dump also shows that the Banking site as National City. FYI, the better, more secure banking and online store websites will have you first connect to another, preceeding page via SSL, prior to connecting to the page where you enter the sensitive information such as bank login credentials or credit card numbers. The reason for this is to stop the MITM-type attack. How this helps is that if you were to access this preceeding page first with a "fake" certificate and then proceeded to the next page where you were to enter the sensitve information, that page where you would enter the sensitive information would not display. That is because the page gathering the sensitive information would be expecting a valid certificate, which it would not receive because of the Man-in-the-Middle. While some online banks and stores do implement this extra step/page for security reasons, the real flaw in this attack is the uneducated end-user, as you'll soon see:
Figure 11
With this information, he can now log into your Online Banking Account with the same access and privileges as you. He could transfer money, view account data, etc.
Below is an example of a sniffed SSL credit card purchase/transaction. You can see that Elvis Presley was attempting to make a purchase with his credit card 5440123412341234 with an expiration date of 5/06 and the billing address of Graceland in Memphis, TN (He is alive!). If this was your information, the hacker could easily make online purchases with your card.
Figure 12
Also Real Bad News for SSL VPN Admins
This type of attack could be particularly bad for corporations. The reason for this is that Corporate SSL VPN solutions are also vulnerable to this type of attack. Corporate SSL VPN solutions will often authenticate against Active Directory, the NT Domain, LDAP or some other centralized credentials data store. Sniffing the SSL VPN login then gives an attacker valid credentials to the corporate network and other systems.
What an End-User Needs To Know
There’s a big step and end-user can take to prevent this from taking place. When the MITM Hacker uses the “bad” certificate instead of the “good”, valid certificate, the end-user is actually alerted to this. The problem is that most end-users don’t understand what this means and will unknowingly agree to use the fake certificate. Below is an example of the Security Alert an end-user would receive. Most uneducated end-users would simply click “Yes”… and this is the fatal flaw:
Figure 13
By clicking “Yes”, they have set themselves up to be hacked. By clicking the “View Certificate” button, the end-user would easily see that there is a problem. Below are examples of the various certificate views/tabs that show a good certificate compared to the bad certificate:
Figure 14
(Good Certificate) (Bad Certificate)
Figure 15
(Good Certificate) (Bad Certificate)
Figure 16
(Good Certificate) (Bad Certificate)
How an End-User Can Prevent This
-
Again, the simple act of viewing the certificate and clicking “No” would have prevented this from happening.
-
Education is the key for an end-user. If you see this message, take the time to view the certificate. As you can see from the examples above, you can tell when something doesn’t look right. If you can’t tell, err on the side of caution and call your Online Bank or the Online store.
-
Take the time to read and understand all security messages you receive. Don’t just randomly click yes out of convenience.
How a Corporation Can Prevent This
-
Educate the end-user on the Security Alert and how to react to it.
-
Utilize One Time Passwords, such as RSA Tokens, to prevent the reuse of sniffed credentials.
-
When using SSL VPN, utilize mature products with advanced features, such as Juniper’s Secure Application Manager or Network Connect functionality.
Conclusion
This type of attack is relatively easy to do in a public Wi-Fi hotspot environment. It could also easily happen on a home Wi-Fi network, if that Wi-Fi network isn’t properly configured and allows a hacker to connect to that home network (See Essential Wireless Hacking Tools for more info on securing your home network). An educated end-user and sound security practices by corporations can protect your valuable data.
The credit goes to the Ethical Hackers.
Hack Mobile Phones
how to hack mobile or cell phone. here is a bluetooth hacking software ,using bluetooth hacking software u can hack any mobile or cell phones this software is the latest version Bluetooth Hack v 1.07. click here to download.
Advantages of this software.
Once if ur connected to another phone via bluetooth you can:
- u can read his/her messagess
- u can read his/her contactss
- u can change hi/her profile
- u can also play his/her ringtones even his/her phone is in silent
- u can play his songs from his/her mobile
- u can restart his/her mobile
- u can switch off his/her mobile
- u can restore his/her factory setings
- u can also change ringing volume of his/her mobile..
- the best part of it is u can call from his mobile which also includes all call functions like hold on etc etc... A
This software is very much suitable for sony ericcsson mobiles.
If u like it replies are always welcome.
Advantages of this software.
Once if ur connected to another phone via bluetooth you can:
- u can read his/her messagess
- u can read his/her contactss
- u can change hi/her profile
- u can also play his/her ringtones even his/her phone is in silent
- u can play his songs from his/her mobile
- u can restart his/her mobile
- u can switch off his/her mobile
- u can restore his/her factory setings
- u can also change ringing volume of his/her mobile..
- the best part of it is u can call from his mobile which also includes all call functions like hold on etc etc... A
This software is very much suitable for sony ericcsson mobiles.
If u like it replies are always welcome.
Password Stealer for all Messengers
Password Stealer for all Messengers, hack any messengers password using this software...
For doing this u have build ur pc into server.
Coder: c4!N
Compiler: Delphi
testet : Windows XP SP2
Source-Protector: Themida
Description: The UnLimited PW Stealer is a high-quality PW Stealer with the following characteristics:
hack the following accounts:
PW Messanger Packet
MSN Messenger
Windows Messenger
Yahoo Messenger Google Talk
ICQ Lite
AOL Instand Messenger/Netscape 7
Trilian
Miranda
GAIM
PW Mail Packet
Outlook Express
Microsoft Outlook 2000/XP/2003
IncrediMail
Mozilla Thunderbird
Netscape
Group Mail Free, Gmail
Yahoo Mail
Hotmail / MSN Mail
Eudora
Protected Storage PW Packet
Outlook Passwords
Auto Completet password in IE
Password protected sites in IE
MSN Explorer Passwords
Steam PW Packet
Steam Username
Steam Password
Steam game-path
Game Key Stealer
UT 2003/2004
Battlefield 1942 / Road to Rome / Scret Weapons / Vietnam
Need for Speed Hot Pursuit 2
James Bond 007 Nightfire
Command & Conquer Generals / Zero Hour
SimCity 4
Call of Duty 2 / United Offensive / 1
SWAT 4 / EXP
Windows Info Packet
Windows Username, Windows Computername ect. ect.
Other options are:
FTP Upload Information
Crypt the ploadfile PW Files
Crypt the FTP Settings
Melt Server (Self-Delete after Execute)
File Attribut on hidden set
Icon Changer
UPX Packer
and many more Smiley
UnLimited_PW_-_Stealer_0.40.rar
Description:
Download
Filename: UnLimited_PW_-_Stealer_0.40.rar
Filesize: 3.6 MB
Download Here
Password:
http://zone.forums1.net
Just copy & paste the above code where it asks for the passwords...
Free Premium Rapidshare & Megaupload Accounts
TRY THIS 1 YEAR PREMIUM ACCOUNT
BEST WAY TO LEGALLLY OWN A rapidshare 1 year PREMIUM ACCOUNT.
Follow these steps:
1. Create a paypal PREMIUM Account at this address. It is free;
http://www.paypal.com
When asked for credit card details simply say cancel. You do not need to fill it.
2.Then go to the following link:
http://tinyurl.com/2od76v
Join this site. It is also free. You get paid for completing surveys over there 6$ to 4$ dollars per survey and 1.25$ per referral thats a lot u will get a
premium account of 1 year in weeks time ……i myself have a 1 year premium account and now i am collecting some exta cash .
4.. Another thing you can also use paypal money to buy stuff on ebay and other shopping sites.
5. Thats is it. So Simple and I swear it works.
I learnt this from another friend and i thought it will be good for my friends here. So I thought of helping
BEST WAY TO LEGALLLY OWN A rapidshare 1 year PREMIUM ACCOUNT.
Follow these steps:
1. Create a paypal PREMIUM Account at this address. It is free;
http://www.paypal.com
When asked for credit card details simply say cancel. You do not need to fill it.
2.Then go to the following link:
http://tinyurl.com/2od76v
Join this site. It is also free. You get paid for completing surveys over there 6$ to 4$ dollars per survey and 1.25$ per referral thats a lot u will get a
premium account of 1 year in weeks time ……i myself have a 1 year premium account and now i am collecting some exta cash .
4.. Another thing you can also use paypal money to buy stuff on ebay and other shopping sites.
5. Thats is it. So Simple and I swear it works.
I learnt this from another friend and i thought it will be good for my friends here. So I thought of helping
Hackers Secret Tools and Books:
- Rapidshare_Downloader:
- download here
- google_hack. 100 tips and tools:
- download here
- 300_keygen:
- download here
- Hackers_Secrets:
- download here
- DAP_PREMIUM_v8.1.2.1:
- download here
- 2500_Best_Ebooks_Collection_2007:
- download here
PLEASE SUPPORT US, No donation needed CLICK HERE!
PLEASE CLICK ON OUR AD's
We strongly support our ad's... please support them.
we earn money from these ad's and this lets us get new stuff and test it out to see if it can work.
Recent emails:
may 10th, 2008
roughrider67@hotmail.com
Hello i like your youtube channel and i would like to know how to get photoshop for free... i need a serial.
Reply:
Please watch our video on how to get craagle. or more specific:
how to get free serials. whatever its called you will find it.
may 10th, 2008
a.ferrier93@msn.com
Yo. i know you play sa-mp [san andreas multi-player]
can you show me how to get it?
if so please reply soon
Reply:
Its up now watch it!
we earn money from these ad's and this lets us get new stuff and test it out to see if it can work.
SO PLEASE SUPPORT THE AD's YOU SUPPORT THEM YOU ARE SUPPORTING US.
emails below:
Recent emails:
may 10th, 2008
roughrider67@hotmail.com
Hello i like your youtube channel and i would like to know how to get photoshop for free... i need a serial.
Reply:
Please watch our video on how to get craagle. or more specific:
how to get free serials. whatever its called you will find it.
may 10th, 2008
a.ferrier93@msn.com
Yo. i know you play sa-mp [san andreas multi-player]
can you show me how to get it?
if so please reply soon
Reply:
Its up now watch it!
Fake yahoo messenger
Fake Yahoo Messenger, This is one of the hacking trick to hack yahoo passwords, actually this is the fake yahoo messenger whenever anyone login in this messenger his yahoo ID and Passwords are saved in ur system...
Steps:
Step 1 - Install Microsoft .NET Framework.(I think almost everyone has this in their computers if don't click here to download )
Step 2 - click here to get fake yahoo messenger
Step 3 - Rename that YPager as Yahoo Messenger.
Step 4 - Tell any of ur friends to login, try to fish them by saying this is the new version of yahoo try it!!!
Step 5 - Open C:\yahoo.txt & dats ur frnds yahoo id & passwords..
Steps:
Step 1 - Install Microsoft .NET Framework.(I think almost everyone has this in their computers if don't click here to download )
Step 2 - click here to get fake yahoo messenger
Step 3 - Rename that YPager as Yahoo Messenger.
Step 4 - Tell any of ur friends to login, try to fish them by saying this is the new version of yahoo try it!!!
Step 5 - Open C:\yahoo.txt & dats ur frnds yahoo id & passwords..
Essential Professional hacking tools
Essential Wireless Hacking Tools,& the most important wireless hacing tools ,here are the most essential tools for wireless hacking ,guys interested in gaining a deeper knowledge of wireless security and exploiting vulnerabilities will need a good set of base tools with which to work. Fortunately, there are an abundance of free tools available on the Internet. This list is not meant to be comprehensive in nature but rather to provide some general guidance on recommended tools to build your toolkit.
Finding Wireless Networks:
Locating a wireless network is the first step in trying to exploit it. There are two tools that are commonly used in this regard:
Network Stumbler a.k.a NetStumbler – This Windows based tool easily finds wireless signals being broadcast within range – A must have. It also has ability to determine Signal/Noise info that can be used for site surveys. I actually know of one highly known public wireless hotspot provider that uses this utility for their site surveys.
Locating a wireless network is the first step in trying to exploit it. There are two tools that are commonly used in this regard:
Network Stumbler a.k.a NetStumbler – This Windows based tool easily finds wireless signals being broadcast within range – A must have. It also has ability to determine Signal/Noise info that can be used for site surveys. I actually know of one highly known public wireless hotspot provider that uses this utility for their site surveys.
(NetStumbler Screenshot)
Kismet – One of the key functional elements missing from NetStumbler is the ability to display Wireless Networks that are not broadcasting their SSID. As a potential wireless security expert, you should realize that Access Points are routinely broadcasting this info; it just isn’t being read/deciphered. Kismet will detect and display SSIDs that are not being broadcast which is very critical in finding wireless networks.
(Kismet Screenshot)
Attaching to the Found Wireless Network:Once you’ve found a wireless network, the next step is to try to connect to it. If the network isn’t using any type of authentication or encryption security, you can simply connect to the SSID. If the SSID isn’t being broadcast, you can create a profile with the name of the SSID that is not being broadcast. Of course you found the non-broadcast SSID with Kismet, right? If the wireless network is using authentication and/or encryption, you may need one of the following tools.
Airsnort – This is a very easy to use tool that can be used to sniff and crack WEP keys. While many people bash the use of WEP, it is certainly better than using nothing at all. Something you’ll find in using this tool is that it takes a lot of sniffed packets to crack the WEP key. There are additional tools and strategies that can be used to force the generation of traffic on the wireless network to shorten the amount of time needed to crack the key, but this feature is not included in Airsnort.
(Screenshot of Airsnort in Action)
CowPatty – This tool is used as a brute force tool for cracking WPA-PSK, considered the “New WEP” for home Wireless Security. This program simply tries a bunch of different options from a dictionary file to see if one ends up matching what is defined as the Pre-Shared Key.
(Cowpatty Options Screenshot)
ASLeap – If a network is using LEAP, this tool can be used to gather the authentication data that is being passed across the network, and these sniffed credentials can be cracked. LEAP doesn’t protect the authentication like other “real” EAP types, which is the main reason why LEAP can be broken.
(Asleap Options Screenshot)
Sniffing Wireless Data:
Whether you are directly connected to a wireless network or not, if there is wireless network in range, there is data flying through the air at any given moment. You will need a tool to be able to see this data.
Wireshark (formerly Ethereal) – While there has been much debate on the proper way to pronounce this utility, there is no question that it is an extremely valuable tool. Ethereal can scan wireless and Ethernet data and comes with some robust filtering capabilities. It can also be used to sniff-out 802.11 management beacons and probes and subsequently could be used as a tool to sniff-out non-broadcast SSIDs.
(Screenshot of Ethereal in Action)
(Yahoo IM Session being sniffed in Ethereal)
The aforementioned utilities, or similar ones, will be necessities in your own wireless security toolkit. The easiest way to become familiar with these tools is to simply use them in a controlled lab environment. And cost is no excuse as all of these tools are available freely on the Internet.
Protecting Against These Tools:
Just as it’s important to know how to utilize the aforementioned tools, it is important to know best practices on how to secure your Wireless Network Against these tools.
NetStumbler – Do not broadcast your SSID. Ensure your WLAN is protected by using advanced Authentication and Encryption.
Kismet – There’s really nothing you can do to stop Kismet from finding your WLAN, so ensure your WLAN is protected by using advanced Authentication and Encryption
Airsnort – Use a 128-bit, not a 40-bit WEP encryption key. This would take longer to crack. If your equipment supports it, use WPA or WPA2 instead of WEP (may require firmware or software update).
Cowpatty – Use a long and complex WPA Pre-Shared Key. This type of key would have less of a chance of residing in a dictionary file that would be used to try and guess your key and/or would take longer. If in a corporate scenario, don’t use WPA with Pre-Shared Key, use a good EAP type to protect the authentication and limit the amount of incorrect guesses that would take place before the account is locked-out. If using certificate-like functionality, it could also validate the remote system trying to gain access to the WLAN and not allow a rogue system access.
ASLeap – Use long and complex credentials, or better yet, switch to EAP-FAST or a different EAP type.
Ethereal – Use encryption, so that anything sniffed would be difficult or nearly impossible to break. WPA2, which uses AES, is essentially unrealistic to break by a normal hacker. Even WEP will encrypt the data. When in a Public Wireless Hotspot (which generally do not offer encryption), use application layer encryption, like Simplite to encrypt your IM sessions, or use SSL. For corporate users, use IPSec VPN with split-tunneling disabled. This will force all traffic leaving the machine through an encrypted tunnel that would be encrypted with DES, 3DES or AES.
The credit goes to the Ethical Hackers.
Related Articles:Hacking online banking & credit cards
Wireless Network Sniffer
Wireless Hacking
How to make a "Batch" Virus
How to make or create batch virus, this virus is used in destroying hard disk..This virus is very dangerous GO DOWN TO DOWNLOAD AND LOOK AT THE WARNING!
Listen carefully after downloading do not run it on ur system..
Acts its can do.
1.It ll automatically copy in startup.
2.It ll automatically copy over & it runs 1000 times into random spots in ur pc.
3.It ll hide itself & in all the other created programs & files.
4.It kills the tasks of MSN,NORTON.WINDOWS EXPLORER,LIMEWIRE.
5. It swaps left click button of mouse with right.
6.Automatically opens all alert boxes.
7.It changes the display time on ur pc to 12:00 & shutdowns ur pc.
Listen carefully after downloading do not run it on ur system..
Acts its can do.
WARNING
THIS IS NOT MENT FOR YOUR COMPUTER DOWNLOAD IT ON SOMEONE ELSES SO YOU
CAN BREAK IT!... IF YOU WANT TO DOWNLOAD THIS CLICK HERETHIS IS NOT MENT FOR YOUR COMPUTER DOWNLOAD IT ON SOMEONE ELSES SO YOU
1.It ll automatically copy in startup.
2.It ll automatically copy over & it runs 1000 times into random spots in ur pc.
3.It ll hide itself & in all the other created programs & files.
4.It kills the tasks of MSN,NORTON.WINDOWS EXPLORER,LIMEWIRE.
5. It swaps left click button of mouse with right.
6.Automatically opens all alert boxes.
7.It changes the display time on ur pc to 12:00 & shutdowns ur pc.
How to make your ip untracable and trace others
How to 'Protect IP-Address'?????
We all know we r not all safe online, anybody can track out "IP-ADDRESS" & can play games with us.....Do u know dat by knowing da "IP-ADDRESS" he can operate ur system through "DOS",
so guys,safe-gaurd ur "IP-ADDRESS" surf anonymously..
Dis not only hide ur "IP-ADDRESS" buts acts an Anti-Spyware,Total Net-Shield,protect from Nyms...
Download
How to 'Trace IP- Address'????
do u want to know how safe ur just click Here ,don't worry frnds nothing will happen it just shows:
| My IP address [?]: | |
|---|---|
| IP address country: | |
| IP address state: | |
| IP address city: | |
| IP address latitude: | |
| IP address longitude: | |
| ISP of this IP [?]: | |
| Proxy: | |
| Organization: | |
| Local Time of this IP country: |
Monday, May 12, 2008
Free FBI online forensic kit
This is a kit i forged from, well may i say some friends.... for agents or wannabe agents. here you go [download at bottom]
Forensics Tools:
Sleuth Kit -Forensics Kit
Py-Flag - Forensics Browser
Autopsy - Forensics Browser for Sleuth Kit
dcfldd - DD Imaging Tool command line tool and also works with AIR
foremost - Data Carver command line tool
Air - Forensics Imaging GUI
md5deep - MD5 Hashing Program
netcat - Command Line
cryptcat - Command Line
NTFS-Tools
qtparted - GUI Partitioning Tool
regviewer - Windows Registry Viewer
X-Ways WinTrace
X-Ways WinHex
X-Ways Forensics
R-Studio Emergency (Bootable Recovery media Maker)
R-Studio Network Edtion
R-Studio RS Agent
Net resident
Faces 3 Full (600 megs)
Encase 4.20
Field Kit Manuals
Incident response - Computer Forensics
Computer Crime investigation
Forensic Pathology
Internet Forensics
Forensic interpretation of Evidence
Windows Forensics
Computer Forensics -An Illustrated Dictionary
Computer Forensics - jumpstart
Additional programs on Boot DVD:
Gentoo Linux 2.6 Kernel - Opyimized for Forensics Use
XFCE - GUI
Apache2 - Server
Mysql PHP4
Open Office
Gimp - Graphics Program
KSnapshot - Screen Capture Program
Mozilla
Gnome CD Master
K3b - CD Burner
XMMS - media player
Porthole - Gentoo Graphics Package Manager
Karchiver - GZIp GUI
Security Tools:
Etherape - GUI Network Traffic Monitor
Clamv - Anti Virus
snort - Command Line
John the Ripper - Command Line password cracker
rkhunter - Command Line
Ethereal - Network Traffic Analyzer
FWBuilder - GUI Firewall App
nessus - network scanner
Download here FBI Tool Kit:
- http://rapidshare.com/files/56210993/F.
B.I._Field_Kit.part01.rar - http://rapidshare.com/files/56216721/F.
B.I._Field_Kit.part02.rar - http://rapidshare.com/files/56221834/F.
B.I._Field_Kit.part03.rar - http://rapidshare.com/files/56227058/F.
B.I._Field_Kit.part04.rar - http://rapidshare.com/files/56231002/F.
B.I._Field_Kit.part05.rar - http://rapidshare.com/files/56234996/F.
B.I._Field_Kit.part06.rar - http://rapidshare.com/files/56239049/F.
B.I._Field_Kit.part07.rar - http://rapidshare.com/files/56243909/F.
B.I._Field_Kit.part08.rar - http://rapidshare.com/files/56249069/F.
B.I._Field_Kit.part09.rar - http://rapidshare.com/files/56255086/F.
B.I._Field_Kit.part10.rar - http://rapidshare.com/files/56261284/F.
B.I._Field_Kit.part11.rar - http://rapidshare.com/files/56267357/F.
B.I._Field_Kit.part12.rar
Hack Passwords using a pendrive
Hacking passwords or any information using USB(pendrives).Here is the small tricks guys for stealing information or passwords of ur friends or enemies using pendrives...
Download this software:
http://www.mediafire.com/?f3ddzyenlug
- Extract it.
- open pcinfo
- select all the files and paste it in ur USB(pendrive)
- it in the pc u wanna hack...
- Open the USB drive, give it 2 sec and and ur job is done...
And now open the dump folder in ur pc and u will have all the info u want....
Info u will obtain:
Ok now the problem which i was facing....
well i think it duznt autorun on PC with antivirus... U have to manually click the nircmd.exe
U have to disable his/her antivirus for auto running this program..
Hack paypal websites
How to hack PayPal sites or how to download applications free from PayPal sites....U just need to know a bit of HTML anyone want to download any application from da sites which r containing PayPal order page & a link to start...
First off all u need to hide ur ip-address use a proxy server otherwise ur ip address will be recorded in some sites click here to hide ur ip-address.
1) Rightclick your mouse (ctrl+click) viewsource and open the source of the site in an a texteditor
2) Search for the word "return"
3) Next to it you can find the url for the thank you page
4) Copy the url and paste it in your browser and you will see the download link
This works only if you can download instantly after payment, it will not work if the link needs to be emailed to you.
You can try it here to start with:
Code:
http://www.ramphelp.com/halfpipe.html
About half way down the page you will find:< type="hidden" name="return" value="http://www.ramphelp.com/65984523/thanks/68912hp654/26865thankyouhp08363215423.html ">
Copy the link into your browser and download.
First off all u need to hide ur ip-address use a proxy server otherwise ur ip address will be recorded in some sites click here to hide ur ip-address.
1) Rightclick your mouse (ctrl+click) viewsource and open the source of the site in an a texteditor
2) Search for the word "return"
3) Next to it you can find the url for the thank you page
4) Copy the url and paste it in your browser and you will see the download link
This works only if you can download instantly after payment, it will not work if the link needs to be emailed to you.
You can try it here to start with:
Code:
http://www.ramphelp.com/halfpipe.html
About half way down the page you will find:< type="hidden" name="return" value="http://www.ramphelp.com/65984523/thanks/68912hp654/26865thankyouhp08363215423.html ">
Copy the link into your browser and download.
How to hack password and more with keylogger
How To Make A Keylogger & hack passwords of anysite using this!!!
I ll show u step by step process for successfully creating keylogger, sending it, and receiving information using Ardamax Keylogger. Now, in this guide, I only use one method of receiving information, and that's an FTP. I also do not protect the files.
Process begins click here u ll move to a Adramax site and scroll down the page and download the free trial version.
After downloading, open the program and install it. Simple enough, right? After installing, go to wherever you installed it at, and open it. It should open at the bottom right corner of your screen, down by the time. If not, press ctrl+shift+alt+h. Now, leave that alone.
Next, click here and download the exact serial
Now, open it, and it should give you a name and a jumble of letters and numbers.
Go back to the Ardamax icon at the bottom right, and right-click it.
Click the "Enter Registration Key" button.
Use your serial/crack to unlock the full version. Congratulations, you are now ready to make your first deployment package.
~NOTE~
If u interested in attaching a keylogger for an already existed file, move on and just place it on ur desktop.
~NOTE~
Again, right click the icon at the bottom-right.
Click "Remote Installation".
Click next.
Further if ur interested in attaching ur keylogger for an already existing file, click the box which says that "Append keyloggers engine "
If u tic it, click Browsee, and select da file.
If ur not yet satisfied t,move down. Da installations folder on the target- computer needs to remain Windows System Folder for added security, so leave it be
U can add an additional component which u like i leave it mine as "log viewer" as i want to grab are da p/w's for gamez
From this point, click next.
Now, this part is self explanatory. I tick all of the boxes, as to hide it from everything visible, otherwise they can just see it and be like "Wtf", uninstall, etc.
Can't have that, now can we?
Click next.
For Security, do what you want. I leave all of it as-is and click next again.
Now, untick the "Check for updates" box, else it will check for updates on their computer and they will know that they are bugged.
Click next.
Tick the "Start in hidden mode" box, and leave the "Run on windows startup" as-is.
You may pick a date to self destruct, if you like. Sounds noisy, right? It simply removes itself on selected date. If not, leave it alone, and it will never self destruct.
Click next.
Tick the "Send logs every.." box, and choose how frequently you would like to recieve information that has been sent.
Select 'FTP' and de-select everything else as a delivery method.
You may choose what you want to see. I have taken " screenshots". as it cause lagging .
You Leav dat 'log format' alonee.
U can choosee 2 send logs if it is exceeding to a certain size, or if ur interested in send no matter wat, untic the box, wat i have done.
Continue on! (next.)
Now the fun part. -_-.
Head on over to:
http://phpnet.us/
Make an account, etc etc.
Save your FTP Account name and password. You'll need it in a moment.
This site will be the site that holds all information recieved by the keylogger.
When you're done, scroll down a bit.
Under "FTP Accounts", click "File Manager".
Near the top, click the "New Dir" button, and create a directory by any name you want. My favorite is "lolbeans".
Now, hold that thought. Bring the keylogger back.
In Ftp Host, put in:
ftp.phpnet.us
In "Remote Folder", put in the new directory's name you made. So, in this scenario, "lolbeans" without the "'s.
Fill in your Username and Password.
I left dat "Passive Mode checked" as I'm not aware of what it does, rofl. :[
you can leave dat port also alone . It's default.
You have to be sure that everything till now is correctly done by u , click it on test. It should tell you it all went through. And to double check, you can refresh your open window. Click your "lolbeans" directory and there should be a test file in it.
Click next, if you're still alive.
Tick anything and everything you want.
Next.
If you selected screenshots to be enabled, pick how you want them delivered. Click next. If not, ignore this step.
Browse the page wer u want to place da keylogger. u have a plus point of changing the icon, which is nifty. If u want to apologies to ur friend, u can change & make ur own icon just goto notepad and name it as "Apology", dats it u r done with it
Next.
This screen will go over with you everything that you have chosen. Make sure it's all correct.
Click Finish.
Now, if you appended the keylogger to something, you're going to need to put the "install" (feel free to rename it so it's not so obvious) and appended file into a .zip or .rar file.
If not, you have the simple "Install" on your desktop. Also, feel free to rename it to something like "Apology" or "OMFGFunnypicture!!!.jpg"
Upload the file or .rar/.zip somewhere, and let your target download it. They will double click it, and on their end, nothing will happen, but secretly, they have been keylogged.
Check your FTP Directory that you made as frequently as you told it to send logs, and you'll have everything you need.
I ll show u step by step process for successfully creating keylogger, sending it, and receiving information using Ardamax Keylogger. Now, in this guide, I only use one method of receiving information, and that's an FTP. I also do not protect the files.
Process begins click here u ll move to a Adramax site and scroll down the page and download the free trial version.
After downloading, open the program and install it. Simple enough, right? After installing, go to wherever you installed it at, and open it. It should open at the bottom right corner of your screen, down by the time. If not, press ctrl+shift+alt+h. Now, leave that alone.
Next, click here and download the exact serial
Now, open it, and it should give you a name and a jumble of letters and numbers.
Go back to the Ardamax icon at the bottom right, and right-click it.
Click the "Enter Registration Key" button.
Use your serial/crack to unlock the full version. Congratulations, you are now ready to make your first deployment package.
~NOTE~
If u interested in attaching a keylogger for an already existed file, move on and just place it on ur desktop.
~NOTE~
Again, right click the icon at the bottom-right.
Click "Remote Installation".
Click next.
Further if ur interested in attaching ur keylogger for an already existing file, click the box which says that "Append keyloggers engine "
If u tic it, click Browsee, and select da file.
If ur not yet satisfied t,move down. Da installations folder on the target- computer needs to remain Windows System Folder for added security, so leave it be
U can add an additional component which u like i leave it mine as "log viewer" as i want to grab are da p/w's for gamez
From this point, click next.
Now, this part is self explanatory. I tick all of the boxes, as to hide it from everything visible, otherwise they can just see it and be like "Wtf", uninstall, etc.
Can't have that, now can we?
Click next.
For Security, do what you want. I leave all of it as-is and click next again.
Now, untick the "Check for updates" box, else it will check for updates on their computer and they will know that they are bugged.
Click next.
Tick the "Start in hidden mode" box, and leave the "Run on windows startup" as-is.
You may pick a date to self destruct, if you like. Sounds noisy, right? It simply removes itself on selected date. If not, leave it alone, and it will never self destruct.
Click next.
Tick the "Send logs every.." box, and choose how frequently you would like to recieve information that has been sent.
Select 'FTP' and de-select everything else as a delivery method.
You may choose what you want to see. I have taken " screenshots". as it cause lagging .
You Leav dat 'log format' alonee.
U can choosee 2 send logs if it is exceeding to a certain size, or if ur interested in send no matter wat, untic the box, wat i have done.
Continue on! (next.)
Now the fun part. -_-.
Head on over to:
http://phpnet.us/
Make an account, etc etc.
Save your FTP Account name and password. You'll need it in a moment.
This site will be the site that holds all information recieved by the keylogger.
When you're done, scroll down a bit.
Under "FTP Accounts", click "File Manager".
Near the top, click the "New Dir" button, and create a directory by any name you want. My favorite is "lolbeans".
Now, hold that thought. Bring the keylogger back.
In Ftp Host, put in:
ftp.phpnet.us
In "Remote Folder", put in the new directory's name you made. So, in this scenario, "lolbeans" without the "'s.
Fill in your Username and Password.
I left dat "Passive Mode checked" as I'm not aware of what it does, rofl. :[
you can leave dat port also alone . It's default.
You have to be sure that everything till now is correctly done by u , click it on test. It should tell you it all went through. And to double check, you can refresh your open window. Click your "lolbeans" directory and there should be a test file in it.
Click next, if you're still alive.
Tick anything and everything you want.
Next.
If you selected screenshots to be enabled, pick how you want them delivered. Click next. If not, ignore this step.
Browse the page wer u want to place da keylogger. u have a plus point of changing the icon, which is nifty. If u want to apologies to ur friend, u can change & make ur own icon just goto notepad and name it as "Apology", dats it u r done with it
Next.
This screen will go over with you everything that you have chosen. Make sure it's all correct.
Click Finish.
Now, if you appended the keylogger to something, you're going to need to put the "install" (feel free to rename it so it's not so obvious) and appended file into a .zip or .rar file.
If not, you have the simple "Install" on your desktop. Also, feel free to rename it to something like "Apology" or "OMFGFunnypicture!!!.jpg"
Upload the file or .rar/.zip somewhere, and let your target download it. They will double click it, and on their end, nothing will happen, but secretly, they have been keylogged.
Check your FTP Directory that you made as frequently as you told it to send logs, and you'll have everything you need.
Subscribe to:
Posts (Atom)