Showing posts with label Remote Hacking. Show all posts
Showing posts with label Remote Hacking. Show all posts
Saturday, August 20, 2011
When you receive an email, you receive more than just the message. The email comes with headers that carry important information that can tell where the email was sent from and possibly who sent it. For that, you would need to find the IP address of the sender. The tutorial below can help you find the IP address of the sender. Note that this will not work if the sender uses anonymous proxy servers.First of all, the IP address is generally found in the headers enclosed beween square brackets, for instance, [129.130.1.1]
Finding IP address in Gmail
1. Log into your Gmail account with your username and password.
2. Open the mail.
3. To display the email headers,
- Click on the inverted triangle beside Reply. Select Show Orginal.
Saturday, August 20, 2011 2
What is FZC?
FZC is a program that cracks zip files (zip is a method of compressing multiple files into one smaller file) that are password-protected (which means you’re gonna need a password to open the zip file and extract files out of it). You can get it anywhere – just use a search engine such as google.com.
FZC uses multiple methods of cracking – bruteforce (guessing passwords systematically until the program gets it) or wordlist attacks (otherwise known as dictionary attacks. Instead of just guessing passwords systematically, the program takes passwords out of a “wordlist”, which is a text file that contains possible passwords. You can get lots of wordlists at www.theargon.com.).
FZC can be used in order to achieve two different goals: you can either use it to recover a lost zip password which you used to remember but somehow forgot, or to crack zip passwords which you’re not supposed to have. So like every tool, this one can be used for good and for evil.
The first thing I want to say is that reading this tutorial… is the easy way to learn how to use this program, but after reading this part of how to use the FZC you should go and check the texts that come with that program and read them all. You are also going to see the phrase “check name.txt” often in this text. These files should be in FZC’s directory. They contain more information about FZC.
FZC is a good password recovery tool, because it’s very fast and also support resuming so you don’t have to keep the computer turned on until you get the password, like it used to be some years ago with older cracking programs. You would probably always get the password unless the password is longer than 32 chars (a char is a character, which can be anything – a number, a lowercase or undercase letter or a symbol such as ! or &) because 32 chars is the maximum value that FZC will accept, but it doesn’t really matter, because in order to bruteforce a password with 32 chars you’ll need to be at least immortal..heehhe.. to see the time that FZC takes with bruteforce just open the Bforce.txt file, which contains such information.
FZC supports brute-force attacks, as well as wordlist attacks. While brute-force atta
Bad news for just about every WordPress blogger out there. Thousands of WordPress 3.2.1 installations are at risk of being compromised. It has been found that the latest version 3.2.1 of WordPress, an extremely popular suite of tools for powering blogs, is vulnerable to XSS injection attack which allows users to inject malicious JavaScript as a result of failure in sanitizing the comments field. Without discussing much about what this vulnerability could do to your blog I will jump to how it works and the solution.
How does it work?
Inject one of the below codes into the comment field of the target. Or use your brain to make a more powerful injection
Popup “alert” Box
<script>alert(‘www.cybertricks.co.cc’)</script>
Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Google, Yahoo, Orkut, Facebook, Flickr etc.
What is a CookieLogger?
A CookieLogger is a Script that is Used to Steal anybody’s Cookies and stores it into a Log File from where you can read the Cookies of the Victim.
Today I am going to show How to make your own Cookie Logger…Hope you will enjoy Reading it …
Step 1: Save the notepad file from the link below and Rename it as Fun.gif:
Step 2: Copy the Following Script into a Notepad File and Save the file as cookielogger.php:
Saturday, June 11, 2011
Facebook has introduced a feature of using “Recovering password using Trusted Friends”. In this feature, if we have lost our Facebook account password, Facebook will send the security code to 3 friends. We have to ask those 3 friends for the security codes and after entering them, we can reset Facebook password.
So, in this hack, we will use this feature for hacking Facebook account password. So, you have to create 3 fake accounts and make sure that your victim adds them as his friends. So, your 3 fake accounts must be listed in your victim’s Friends list. Now, if we use the above “Trusted friends” feature for resetting victim’s Facebook password, Facebook will send the security code to our 3 fake accounts and we can easily hack Facebook account.You can use Social engineering skills so that your victim will have no doubt while accepting your fake account as his friend. This is the only tricky part of the hack.
Also, the fake accounts must be at least a week old. Once you are done with fake accounts, move to the steps below.
Saturday, June 11, 2011 337
Monday, May 16, 2011
You May already Know the PowerShell security policies and protection measures that are used by Microsoft, as a reminder there are 4 levels of execution policies that can help in securing different script execution.
Now that post has been mostly focused on system security administrator benefit but what about hackers, do they have benefits for PowerShell usage for compromising remote systems? Can a hacker bypass the existing execution policies to run malicious scripts?
On Defcon18 there has been an interesting presentation called PowerShell …omfg (by David Kennedy (ReL1K) and Josh Kelley (Winfang)) 
the demo has showed how Windows PowerShell enable users to perform almost any task we want. while a new attack vector through Powershell has been released to allow users to deliver whatever payload they want to through Powershell in both a bind and reverse type scenario and drop any executable.
the demo has showed how Windows PowerShell enable users to perform almost any task we want. while a new attack vector through Powershell has been released to allow users to deliver whatever payload they want to through Powershell in both a bind and reverse type scenario and drop any executable.Now if you are on a penetration testing mission you start by running nmap searching for the live windows hosts on the network basically with 1433 active port (Mssql). You launch brute force attack on the “sa” account which is the system administrator account for MSSQL. When using “Mixed Mode” or “SQL Authentication”, the SQL “sa” account automatically gets created. Administrators have to enter a password when creating these accounts and often leave these as weak passwords.
After you open metasploit with the latest update that includes Metsploit PowerShell Debug.
Monday, May 16, 2011 2
How to take control of the PC's at school:
Here are the steps;
- Preparing The Virus
- Setting Up The Virus
- Controlling The PC
- The virus I made which is harmless and you won't even notice it was executed.
- Dropping a Trojan on the school PC.
Subscribe to:
Posts (Atom)
