Home / Archives for January 2011

THC-Hydra-6.0 Network Logon password Cracker

Posted by Deepanker Verma Monday, January 31, 2011 0 comments

THC-Hydra.V.6

A very fast network logon cracker which support many different services

If you want to crack password of various networking protocols to access remote logon, Hydra is the best tool for that. Hydra is a parallized login cracker which supports numerous protocols to attack. New modules are easy to add, beside that, it is flexible and very fast. Version 6 was tested to compile cleanly on Linux, windows/Cygwin, Solaris 11, FreeBSD 8.1 and OSX.

Currently this tool supports:

TELNET, FTP, HTTP, HTTPS, HTTP-PROXY, SMB, SMBNT, MS-SQL, MYSQL, REXEC, RSH, RLOGIN, CVS, SNMP, SMTP-AUTH, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, LDAP2, LDAP3, Postgres, Teamspeak, Cisco auth, Cisco enable, AFP, Subversion/SVN, Firebird, LDAP2, Cisco AAA (incorporated in telnet module). For HTTP, POP3, IMAP and SMTP, several login mechanisms like plain and MD5 digest are supported.

Create a virus to block websites

Posted by Deepanker Verma 1 comments

How to create a virus to block websites

Today i am going to write a post on a simple virus written in C. It will block websites on your computer system. This C code is only the implementation of my previous post How to block a website without any software
I am implementing that process by a C program to create it as a virus. Once the virus is clicked, it will block the some specific websites on victim's computer. The website which you want to block is mentioned in the source code of the program. Change the list according to your choice.

Kaspersky Anti-Virus Source Code Leaks Online | available for download

Posted by Deepanker Verma Sunday, January 30, 2011 2 comments

The source code for one of Kaspersky's security suite products has been leaked online. You can download it from torrent and file hosting. websites for free.

It is reported that these sources were stolen from Kaspersky Lab in 2008 and the last changes made to them date from December 2007. The Kaspersky source code that recently made its way onto public websites was leaked by a former employee of the antivirus vendor, who is already serving a prison sentence for intellectual property theft. The former worker was subsequently arrested and sentenced to three years in jail, to be followed by another three of supervised release.

Windows 0-Day Vulnerability Allows Attackers to Steal Info

Posted by Deepanker Verma 0 comments

Windows 0-Day Vulnerability Allows Attackers to Steal Info

A new zero day vulnerability on Microsoft windows OS has been confirmed yesterday. The company confirmed reports of the newly discovered Windows security hole, as well as the fact that both published information and proof-of-concept code made their way into the wild. This vulnerability affects all client and server versions of Microsoft Windows up to and including Windows 7 and Windows Server 2008 R2.

XSS Rays: Google Chrome XSS Scanning Extension

Posted by Deepanker Verma Saturday, January 29, 2011 0 comments

XSS Rays: Google Chrome XSS Scanning Extension

XSS Rays is a complete XSS reversing/scanner tool. You can find how a site is filtering code, check for injections and inspect objects. This tool was originally written as a stand alone application. It is a security tool to help in pen testing of large web sites. It’s main features include a XSS scanner, XSS Reverser and object inspection. If you want to know how a certain page filters output and don’t have its source code, XSS Rays will perform a blackbox reverse of the XSS filter without needing the source code.

World's first hack-free software developed

Posted by Deepanker Verma Friday, January 28, 2011 0 comments

World's first hack-free software

MELBOURNE: A team of Australia's ICT Research Centre of Excellence's spinout company Open Kernel Labs (OK Labs) developed a microkernel The 'seL4' and claimed it to be the the world's first hack-free software which can protect systems from failure or malicious attacks. It is a small operating system kernel which regulates access to a computer's hardware. Its unique feature is that it has been mathematically proven to operate correctly, enabling it to separate trusted from untrusted software, protecting critical services from a failure or a malicious attack, say the scientists.

Reverse-Engineering of Malware | REMnux v.2.0

Posted by Deepanker Verma 0 comments

Reverse-Engineering of Malware | REMnux v.2.0

ReMnux V.2.0 is launched. It is a lightweight Linux distribution tool for assisting malware analysts in reverse-engineering of malicious software. Visit REMnux's main page for download ReMnux as a virtual appliance and as a Live CD. The distribution of ReMnux is based on Ubuntu and is maintained by Lenny Zeltser. REMnux is designed for running services that are useful to emulate within an isolated laboratory environment when performing behavioral malware analysis. As part of this process, the analyst typically infects another laboratory system with the malware sample and directs potentially-malicious connections to the REMnux system that's listening on the appropriate ports.

Change MAC Address of the Computer

Posted by Deepanker Verma Thursday, January 27, 2011 1 comments

Changing MAC Address of the Computer

MAC (Media Access Control) Address of Computer
It is a unique identifier assigned to network interfaces. MAC addresses are also known as hardware addresses or physical addresses. They uniquely identify an adapter on a LAN. Any packet sent to remote system on the network contains MAC address and IP address of your computer. MAC address is fixed and cannot be changed unless network card is replaced. Although we cannot change the MAC address of the network card adaptor, we can certainly change it in the operating system.

Here are the steps to change the MAC address on windows and linux

facebook founder Mark Zuckerberg's facebook fan page hacked

Posted by Deepanker Verma Wednesday, January 26, 2011 0 comments

Facebook founder Mark Zuckerberg's facebook fanpage www.facebook.com/markzuckerberg gets hacked.

Hackers post on page "Let the hacking begin: If Facebook needs money, instead of going to the banks, why doesn't Facebook let its users invest in Facebook in a social way? Why not transform Facebook into a ‘social business’ the way Nobel Price winner Muhammad Yunus described it? http://bit.ly/fs6rT3 What do you think? #hackercup2011

Critical vulnerability found in Opera web browser

Posted by Deepanker Verma 0 comments

Critical vulnerability found in Opera web browser

Critical security vulnerability in Opera web browser has been reported by French security services provider VUPEN. This could allow crafted web pages to infect Windows systems with malware. The problem is said to be caused by an integer truncation error within the Opera Internet Browser module 'opera.dll' when handling a HTML 'select' element containing an overly large number of children.

HTTPS Everywhere | protection against Firesheep attack

Posted by Deepanker Verma Tuesday, January 25, 2011 0 comments

HTTPS Everywhere

protection against Firesheep attack

Firsheep add on is an easiest method to hack facebook, Gmail or any other account over an unsecured wireless network. I also wrote about Blacksheep add on to protect your account from Firesheep attack. That was a good choice as a protection against Firesheep. But now i am going to write another way of protecting your account against firesheep attack.

Evercookie | advance visitor tracking method

Posted by Deepanker Verma 0 comments

Evercookie

Extremely Persistent Cookies

advance visitor tracking

Websites use several methods to identify a specific user visiting their service, or other third party service to which they are affiliated with. Most common Method is use of standard HTML cookies and Flash cookies, also known as Local Shared Objects.

What is Evercookie ??
Evercookie is used to produse extremely persistent cookies in client's browser. The main purpose of this is to identify a clients even after they have removed standard cookies. For this type of advance identification of user, evercookie stores the cookie data in several types of storage mechanisms availabe on the browser. If evercookie has found that user has removed any of the types of cookie, it recreates them using each mechanism available.

Computer Security Threats | malicious programs | Malwares

Posted by Deepanker Verma Monday, January 24, 2011 0 comments

Computer Security Threats | malicious programs | Malwares

Computer security threats or Malicious code or Malwares comes in a wide variety of forms and is distributed through an ever growing number of delivery mechanisms. In general malicious program is any software that impedes the normal operation of a computer or networking device. This software most often executes without the user's consent.

Understanding how malwares works can help you develop defensive strategies, select

download Award keylogger

Posted by Deepanker Verma Saturday, January 22, 2011 2 comments

Award keylogger

Award Keylogger is fast, invisible and easy-to-use surveillance tool that allows you to find out what other users do on your computer in your absence. It records every keystroke to a log file. The log file can be sent secretly with email or FTP to a specified receiver. Award Keylogger can also detection specified keywords and take a screenshot whenever one is typed, displaying findings in a tidy log viewer. It causes no suspicious slowdowns and takes very few system resources. all this is happening in full stealth mode so the person you are monitoring will never be aware of it.

how to create Proxy chain | proxy chaining tutorial

Posted by Deepanker Verma Friday, January 21, 2011 2 comments

Proxy chaining

A proxy is a server that acts as a gateway between your computer and your destination. Read my previous post on proxy server for detail. Proxy servers are used to stay anonymous over the internet. Take a look on my previous post where i wrote a list of proxies.
By using proxy server you can hide your real IP over the internet while surfing.

User---------->[proxy]----------->[website]

the website will get the IP of the proxy not yours.

Proxy Chaining: Proxy chaining is the use of more than 1 proxy servers to stay anonymous. You can use as many proxy servers as you can or want. The more you have, the more anonymous you will be. This can be shown like this..

Now use google and facebook id's to use yahoo services

Posted by Deepanker Verma Thursday, January 20, 2011 0 comments

There are many yahoo services such as yahoo news and online games. You have to signup for a yahoo account for using those services. While this does not take a long-time, some web users see it as a nuisance. Now yahoo will allow a user to use those services with his/her google or facebook credentials. It is easier to use yahoo for a new users.

Batch programming tool

Posted by Deepanker Verma Wednesday, January 19, 2011 0 comments

Batch programming

Batch programming tool

Dr.Batcher 2.1.3 | 5.12 Mb

Dr.Batcher is the simplest batch file editor available on market for batch programming. Using Dr.Batcher you can create batch file even if you have never done it before. If you know a lot about the creation of BAT and CMD files, Dr.Batcher is still useful for you. With Dr.Batcher you can use handy features of professional IDEs like syntax highlighting, code tooltips and bookmarks, that make writing code of batch file easier. Dr.Batcher really helps you to create bat files in easy and fast way!

The Hacker’s Underground Handbook | ebook on hacking

Posted by Deepanker Verma Monday, January 17, 2011 5 comments

The Hacker’s Underground Handbook

Learn What it Takes to Crack Even the Most Secure Systems

By: David Melnichuk

The Hacker’s Underground Handbook will guide you through password hacking, windows hacking, malware, phising, web hacking, network hacking and Linux (intro, installation, etc). All this material fully packed with images, thus being a top step-by-step guide, on the course of which you cannot fail.

A great starting book which will guide you in the right direction, helping you understand the basic concepts of computer security and matters that you should take in consideration.

Facebook has bought FB.com domain

Posted by Deepanker Verma Saturday, January 15, 2011 0 comments

Facebook has bought FB.com domain

Facebook is now on fb.com

Facebook has bought FB.com for 8.5 million dollars from American Farm Bureau. Facebook bought the Web address for Facebook employees' internal use. The transaction was announced by Facebook founder and chief executive Mark Zuckerberg on Nov. 15 when the company

facebook magical tricks | play with your fb page

Posted by Deepanker Verma 14 comments

facebook magical tricks | play with your fb page

This is a simple facebook trick. Those who know JavaScript and document object model(DOM) can easily understand this trick. This is really cool trick and trusted too. feel free to use it.
If you know DOM and JavaScript, you can modify this code for any website you like..
Here i am showing you two magical tricks which are really funny. Try and have fun

you will not be able to copy anything from the page to prevent content theft. so download these javascript code from he link given .

CODE 1: EDIT facebook page and write anything you want

Usb Port Hacking | block/unblock Usb ports

Posted by Deepanker Verma Friday, January 14, 2011 0 comments

Hacking usb ports

block/unblock Usb ports

Today i am going to write about a cool hack. You can block you friends USB ports easily without even working on that system. You just need to compile these C programs. one program is for blocking USB ports and another C program is for unblocking. This trick is for windows computer because i am using registry editing for blocking and unblocking.
this pack contains

block_usb_port.c (compile this and create block.exe)
unblock_usb_port.c (compile this and create unblock.exe)

follow these steps:

compile and make exe of following files.
create an autorun pendrive which would run block.exe on inserting usb device.
give this USB disk to any of your friend.
you can directly send this exe to your friend.

when you want to unblock usb ports run unblock.exe

Download Here:

free download Quick Hide IP 1.0 | anonymous surfing | hide IP

Posted by Deepanker Verma 0 comments

free download Quick Hide IP 1.0

anonymous surfing

hide you IP address

Quick Hide IP 1.0 portable | 4.4 MB

Quick Hide IP protects your online identity by hiding your IP address and replacing with a proxy server IP address.You will appear to access the internet from a different location, not your own (real) location. So all websites you are visiting see the IP address of the proxy server instead of your own IP address.

Sniffers - An Introduction

Posted by Deepanker Verma Wednesday, January 12, 2011 2 comments

Sniffers - An Introduction

A sniffer is a piece of software that captures the traffic on a network. A sniffer can be a packet-capturing or frame-capturing tool. It intercepts traffic on the network and displays it in either a command-line or GUI format to view. They are available for several platforms in both commercial and open-source variations. Network Intrusion Detection Systems (NIDS) use sniffers to match packets against a rule-set designed to flag anything malicious or strange.

Gmail Search | gmail search operators

Posted by Deepanker Verma Tuesday, January 11, 2011 0 comments

Gmail Search Syntax

Gmail offers a rich search syntax for routing through your email message archives. As in my older post i wrote about google searching operators. Now i m going to write those operators which will help you in searching within your gmai

1- from:
Searches through the headers of your email message archive to find of mail sent by someone matching the keyword you provide:
from:deepanker70@gmail.com

download Symantec Norton Antivirus Corporate Olmak Edition

Posted by Deepanker Verma 0 comments

Symantec Antivirus Corporate Olmak Edition Silent 2010.12 | 257 MB

This software solution provides automatic protection against malicious software for workstations and network servers, maximizing uptime for the entire corporate system.
Centralized configuration tools, installation, alarm and recording determine which nodes are vulnerable to attack. Integrated responses from the leader in information security helps enterprises maximize uptime, reduce cost of ownership and ensure data integrity.

Social Engineering

Posted by Deepanker Verma 2 comments

This method is really an effective nontechnical way of breaking the security of a system or a network. It’s the process of deceiving users of a system and convincing them to give out some information that can be used to defeat or bypass security of a system or network. This process is easy to understand. But there are a lot of people who think that this is not an effective way but as i think this is very effective process of breaking into a system or network. This method can be used to gather information before or during an attack.

IBM DeveloperWorks site Hacked and Defaced by Hmei7

Posted by Deepanker Verma Monday, January 10, 2011 3 comments

IBM DeveloperWorks website is defaced by Hacker Hmei7

I got this news 4 hours before this posting, but this is my 3G network which took more than 3.5 hours and more than 20 trials in uploading this snap.. lol
Now the website is recovered and working. you can see it in google cache.

Google Bangladesh hacked by Bangladeshi hacker

Posted by Deepanker Verma Saturday, January 8, 2011 1 comments

Google bangladesh has been ‘hacked’. Company’s Bangladesh search site (Google.com.bd ) see a defaced landing page rather than the usual search site. But now it is recovered.

Local Bangladesh media, including online newspaper bdnews24.com, reported on the news as well, quoting a CTO of a local ISP, who confirmed the hack.

Nevertheless, it seems like only a subset of users see the defaced landing page, while others report that they can visit and use the search engine without any hiccups.

You can still see it in google cache as a screen shot below

Rapidshare Hack | Hotfile Hack | download manager for Letitbit, Rapidshare and others

Posted by Deepanker Verma 0 comments

Rapidshare Hack | Hotfile Hack

FreeRapid Downloader 0.85 Portable | 10.5 MB

This is a fast automatic download manager Depositfiles, Letitbit, Rapidshare and others file sharing websites. FreeRapid Downloader is the only program to date, which download files automatically from all known file hosting without limits.

Firewall introduction

Posted by Deepanker Verma 2 comments

Firewall

The filrewall is inserted between the premises network and the internet to establish a controlld link and to erect an outer security wall or perimeter. The aim to provide a single choke point where security and audit can be imposed. The firewall may be a single computer system or a set of 2 ore more systems that cooperate to perform the firewall function.
It is a system designed to prevent unauthorized access to or from a private network. Firewalls can be implemented in both hardware and software, or a combination of both.

Cross Site Request Forgery Attack | CSRF Attack

Posted by Deepanker Verma Friday, January 7, 2011 0 comments

Cross Site Request Forgery Attack

Cross-site request forgery ( CSRF or XSRF) is a type of malicious exploit of a website in which legitimate commands are sent from a user to a website without his permission.CSRF exploits is the trust that a site is in a user's browser.It is also known as a one-click attack or session riding.

Suppose a user login in a website A. After the authentication process, website provides a session id to the user and it'll expire after the logout process. But this session id will exists

Use Skipscreen to bypass waiting time in rapidshare, mediafire, hotfile and more

Posted by Deepanker Verma Tuesday, January 4, 2011 0 comments

Rapidshare hack

hotfile hack

mediafire hack

Most of you use rapidshare, mediafire and other filehosting service for downloading files. In my blog there are also many software download link fro that website. But one drawback of those website is that free user has to wait for some time before downloading starts. Now i am going to tell you a simple trick using firefox to skip that waiting scree.

Install skipscreen addon to your firefox browser.

download SqlInjector v.1.0.2 to perform blind SQL injections

Posted by Deepanker Verma Saturday, January 1, 2011 0 comments

SQLInjector is a tool to perform blind SQL injection in a website. This version only supports MS SQL Server. It uses time based inference to determine true or false conditions to extract data. The key feature is that it uses a binary search mechanism to reduce the character search address space, this means it can get each character value within 7 to 8 requests.

Trojan found attached to several Android games in China

Posted by Deepanker Verma 0 comments

In china, a trojan horse found attached with many android games and apps. The trojan attached to several Android games found on third-party Chinese app stores that could be used to allow the attacker remote control of your Android-enabled device. But all the versions distributed via chinese app stores found affected. The original versions available in Google android Market have not been affected.

SOURCE: JOYSTIA

Hacking Tricks

THC-Hydra-6.0 Network Logon password Cracker

Create a virus to block websites

Kaspersky Anti-Virus Source Code Leaks Online | available for download

Windows 0-Day Vulnerability Allows Attackers to Steal Info

XSS Rays: Google Chrome XSS Scanning Extension

World's first hack-free software developed

Reverse-Engineering of Malware | REMnux v.2.0

Change MAC Address of the Computer

facebook founder Mark Zuckerberg's facebook fan page hacked

Critical vulnerability found in Opera web browser

HTTPS Everywhere | protection against Firesheep attack

Evercookie | advance visitor tracking method

Computer Security Threats | malicious programs | Malwares

download Award keylogger

how to create Proxy chain | proxy chaining tutorial

Now use google and facebook id's to use yahoo services

Batch programming tool

The Hacker’s Underground Handbook | ebook on hacking

Facebook has bought FB.com domain

facebook magical tricks | play with your fb page

Usb Port Hacking | block/unblock Usb ports

free download Quick Hide IP 1.0 | anonymous surfing | hide IP

Sniffers - An Introduction

Gmail Search | gmail search operators

download Symantec Norton Antivirus Corporate Olmak Edition

Social Engineering

IBM DeveloperWorks site Hacked and Defaced by Hmei7

Google Bangladesh hacked by Bangladeshi hacker

Rapidshare Hack | Hotfile Hack | download manager for Letitbit, Rapidshare and others

Firewall introduction

Cross Site Request Forgery Attack | CSRF Attack

Use Skipscreen to bypass waiting time in rapidshare, mediafire, hotfile and more

download SqlInjector v.1.0.2 to perform blind SQL injections

Trojan found attached to several Android games in China

Security Tools

Popular Posts

About Me

Partners

Blog Archive