Home / Archives for March 2011

Bypass new theater photo viewer in facebook

Posted by Deepanker Verma Thursday, March 31, 2011 1 comments

Bypass new theater photo viewer in facebook

Facebook tries to update new features for better user experience. It's developer improve and add many new features weekly.But it is not necessary that every user will also like the new and updated facebook feature. Recently, facebook has upgraded its image viewer, A lot of people are not happy with this new change, Including me too as it is annoying also. Therefore i am posting some tricks to bypass it and come back to classic photo viewer instead of theater photo viewer which is new one.

These are some ways to bypass it

facebook likejacking attack | facebook Deploys Anti-Likejacking Solution

Posted by Deepanker Verma 0 comments

facebook likejacking attack | facebook Deploys Anti-Likejacking Solution

Likejacking term originated from facebook. It's a kind of clickjacking technique to trick facebook users into liking pages. This is achived by making the like button invisible and placing it over another element that is most likely to be clicked by users such as play button of a video player. As a result, users who try to press play will instead end up liking the page without their knowledge if logged into Facebook.

Intrusion Detection for your Network by Security Onion Live CD

Posted by Deepanker Verma Tuesday, March 29, 2011 0 comments

Intrusion Detection for your Network

The Security Onion LiveDVD is a bootable DVD that contains software used for installing, configuring, and testing Intrusion Detection Systems. It is based on Xubuntu 10.04 and contains Snort, Suricata, Sguil, Squert, Xplico, nmap, metasploit, Armitage, scapy, hping, netcat, tcpreplay, and many other security tools.

MySQL.com hacked using blind SQL injection

Posted by Deepanker Verma Monday, March 28, 2011 0 comments

MySQL.com hacked using blind SQL injection

MySQL.com was hacked using blind SQL injection by by two hackers that go by "TinKode" and "Ne0h". MySQL's parent company Sun/Oracle has also been attacked by the same hackers. Both tables and emails were dumped from their databases, but no passwords.

the login credentials revealed in the published part of the database have demonstrated that MySQL employees are not big fans of strong passwords.

How to Show super hidden files in Windows Vista

Posted by Deepanker Verma 0 comments

How to Show super hidden files in Windows Vista

Widonws vista has a nice feature of super hidden files. It means there are 2 levels of hidden files. When you try to show hidden files, some files are still hidden. These are Super Hidden Files. This behavior should keep dummies far away from accidental deletion but it also prevents power user to access these files.

If you want to show these Super hidden files too use registrt trick

HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced

Look for SuperHidden key on the right and assign 1 as value. If missing create a new key.

Reboot and now you can access super hidden files.

Source:

Download Darkjumper v5.8 | Sqli,Lfi,Rfi scanner tool

Posted by Deepanker Verma Sunday, March 27, 2011 0 comments

Download Darkjumper v5.8 | Sqli,Lfi,Rfi scanner tool

Darkjumper is a free penetration testing tool.This is really an important tool for checking many vulnerabilities in web based applications and websites.

Features

1. User enumeration
2. Scan sqli, blind sqli, LFI and RFI on each web server hosted at the same
3. Scanning CGI and web structure common path
4. Port Scan
5. Auto Dictionary Attack after user enumeration
6. Auto sql inject after mysql injection bug found (looking for automatic column width)
7. Additional proxy function
8. Additional verbosity
9. Features ip and geo checking

Download Here:
http://sourceforge.net/projects/darkjumper/

Create your own Virus using V-Maker

Posted by Deepanker Verma 4 comments

Create your own Virus using V-Maker

Today i am going to post about a virus creating tool. This tool is Virus Matic 2010 or in short V-Maker

Main Feature of V-Maker

You can create your own prank files/viruses with ease by V-Maker.

Disable Mouse and Keyboard
Disable Regedit
Delete System32
Block Site
Disable Task Manager
Take Screen Shot Of Victim PC
Message Box (When User Click on Virus)
Automatically Download Start (When User click on virus download start automatic)
USB Spread

Download Here:

BitDefender Launched Free Web Antivirus

Posted by Deepanker Verma Friday, March 25, 2011 1 comments

BitDefender Launched Free Web Antivirus

Famous antivirus vendor BitDefener has launched a free antivirus solution to protect users when browsing the Web. It'a name is TrafficLight and is capable of scanning Web traffic in real time and blocking malicious code and other threats.
It also taps BitDefender's cloud network to check if accessed URLs are associated with phishing or black hat SEO attacks.

Download Arachni | Web Application Security Scanner

Posted by Deepanker Verma Thursday, March 24, 2011 0 comments

Download Arachni a Web Application Security Scanner

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of web applications.

inguma | Penetration Testing And Vulnerability Research Toolkit

Posted by Deepanker Verma Wednesday, March 23, 2011 0 comments

inguma | Penetration Testing And Vulnerability Research Toolkit

Inguma is a penetration testing toolkit entirely written in python. The framework includes modules to discover hosts, gather information about, fuzz targets, brute force user names and passwords and, of course, exploits.

PHP.net Wiki Server Hacked

Posted by Deepanker Verma Tuesday, March 22, 2011 0 comments

PHP.net Wiki Server Hacked

The php.net team announced that the server of the php.net developer wiki has been hacked by unidentified attackers who stole account credentials. Based on the results of a preliminary investigation, the point of entry was a vulnerability in the DokuWiki software used on the platform. The attackers then managed to obtain root privileges on the device by exploiting a local Linux privilege escalation vulnerability.

How hackers hack Hotmail or windows live id

Posted by Deepanker Verma Sunday, March 20, 2011 24 comments

How hackers hack Hotmail or windows live id

Hotmail is also a very famous email service. It is widely used in US and European countries. Today i am going to write how to hack hotmail id. We will use phishing for hacking. The complete process with phoshing script is given below.

follow these steps:
1: download the hotmail phishing page below. This phishing page uses php for storing password in text files
Hotmail phishing

2: Host this script to any free webhost that support php. Get the list of some free host from here

3: Now check your script on your host. this page is just like hotmail login page.

4: send this page to victim via mail or any other service and force him to sign in from this page. Use any kind of social engineering for this.

5: check stored password in yourdomain/detail.txt page

If you have any problem comment below

download Ncrack - High-speed network authentication cracker

Posted by Deepanker Verma Saturday, March 19, 2011 0 comments

Ncrack - High-speed network authentication cracker

Ncrack is a high-speed network authentication cracking tool. It was built to help companies secure their networks by proactively testing all their hosts and networking devices for poor passwords. Security professionals also rely on Ncrack when auditing their clients. Ncrack was designed using a modular approach, a command-line syntax similar to Nmap and a dynamic engine that can adapt its behaviour based on network feedback. It allows for rapid, yet reliable large-scale auditing of multiple hosts.

How to spy or hack a computer - download Sniper spy

Posted by Deepanker Verma Thursday, March 17, 2011 1 comments

How to spy a computer - download Sniper spy

If you want to spy on a computer without having physical access to it. I have a best tool for you for this. Download SniperSpy and enjoy it's features . SniperSpy is the industry leading Remote password hacking software combined with the Remote Install and Remote Viewing feature.
Once installed on the remote PC(s) you wish, you only need to login to your own personal SniperSpy account to view activity logs of the remote PC’s!

This means that you can view logs of the remote PC’s from anywhere in the world as long as you have internet access. This Remote PC Spy software also saves screenshots along with text logs of chats, websites, keystrokes in any language and more. Remotely view everything your child, employee or anyone does while they use your distant PC. Includes LIVE admin and control commands.

Hack ImageShack | How to Bypass ImageShack Block

Posted by Deepanker Verma Wednesday, March 16, 2011 1 comments

Bypass ImageShack Block

ImageShack is a popular media hosting website which allow users to host images and videos and then share it with friends.

1. Get firefox if you don't have it already
2. Download and install this add-on
https://addons.mozilla.org/firefox/953/
3. Restart firefox after install
4. Open the options (bottom right of ff)
5. Click add site
6. In site put : imageshack.us
7. Make the action Custom and put in textbox : www.google.com
8. hit okay

Firewall Bypassing using Httptunnel | Httptunnel tutorial

Posted by Deepanker Verma Tuesday, March 15, 2011 0 comments

Firewall Bypassing using Httptunnel

Httptunnel creates a bidirectional virtual data path tunneled in HTTP requests. The requests can be sent via an HTTP proxy if so desired. This can be useful for users behind restrictive firewalls. If WWW access is allowed through a HTTP proxy, it's possible to use httptunnel and telnet or PPP to connect to a computer outside the firewall.

Here is how htc sends data to the destination:

Open TCP connection to hts
Send HTTP POST with a large Content-Length
Send TUNNEL_DATA packets until POST Content-Length would be exceeded.
Send TUNNEL_PADDING packets to exactly satisfy Content-Length - 1
Send TUNNEL_DISCONNECT (1 byte)
Close TCP connection
Go to step 1

Gmail has introduced a new feature click to call

Posted by Deepanker Verma Friday, March 11, 2011 2 comments

Gmail has introduced a new feature click to call

Gmail has now introduce a new feature called "CLICK TO CALL". With the CLICK TO CALL functionality, any phone number in emails or from your contacts can be dialed with a simple click just like a new page on click on the hyperlink.

Download with resume from file sharing websites | Rapidshare, hotfile, fileserve hack

Posted by Deepanker Verma 4 comments

Download with resume from file sharing websites | Rapidshare, hotfile, fileserve hack

Rapidshare, Megaupload, Hotfile, fileserve, filesonic, Megaupload are some most popular file sharing websites. But the main problem is that none of these websites support downloading with resume capability. Today i am going to write a new trick on how you can download files with resume capability from these websites.

Follow these Steps:

Go to http://foxleech.com/
Paste the link in the Link box.
Hit the Download button.
Click the “Download Now” button. A popup window will open which will start leeching. Do not close it and let it leech. After some time download will start with resume capability.

Insect Pro v.2.5 released | download with video tutorial

Posted by Deepanker Verma Wednesday, March 9, 2011 1 comments

Insect Pro v.2.1

INSECT Pro is a penetration security auditing and testing software solution designed to allow organizations of all sizes mitigate, monitor and manage the latest security threats vulnerabilities and implement active security policies by performing penetration tests across their infrastructure and applications.

M86 SecureBrowsing | New Browser Plug-In for Real-Time URL Scanning in Search Results

Posted by Deepanker Verma 0 comments

M86 SecureBrowsing | New Browser Plug-In for Real-Time URL Scanning in Search Results

M86 security researcher developed a new Firefox and Internet Explorer plug-in name M86 SecureBrowsing which offers real-time malware scanning for URLs displayed in search results and on social media websites. This plug-in is free to use.
After installing this plug-in, it will send all URLs displayed in search results to the company's cloud systems. System's scanner check those pages using REAL TIME CODE ANALYSIS (RTAC) technology and return report back with the status. This status will displayed s a visual indicator next to each link in search results.

Green checkmark - Safe pages
Yellow question mark - page couldn't be scanned
Red cross -Malicious pages

This plug-in also scans URLs posted on social media websites Facebook, LinkedIn, Twitter, MySpace, Digg and Blogger.
The main aim of this plug-in is to protect users from black hat search engine optimization (BHSEO) and social networking attacks which are two common infection vectors in recent times.
This plug-in supports Internet Explorer 6, 7, 8 and Mozilla Firefox 3.x running on Windows XP, Vista or 7.
downloaded here.
http://www.m86security.com/securebrowsing/

Metasploit 3.6.0 Released

Posted by Deepanker Verma Monday, March 7, 2011 0 comments

Metasploit 3.6.0 Released

TOday, Metasploit 3.6.0 released. This release adds 15 new exploits for a total of 64 new modules since version 3.5.1. All editions of Metasploit now include Post Exploitation modules that provide local exploits and additional data gathering capabilities. Metasploit Express and Metasploit Pro users benefit from the Project Activity Report and Global Search capabilities now available in the user interface. Metasploit Pro users now have access to the new Pro Console, PCI Report, and Asset Tagging features.

Download and read more:
http://www.metasploit.com/

download Premium Proxy Switcher | firefox addon

Posted by Deepanker Verma 3 comments

download Premium Proxy Switcher | firefox addon

Premium Proxy Switcher makes proxy usage user friendly. It can download proxy list automatically/manually, setup, switch proxy automatically/manually, enable or disable proxy easy and fast, with single click.

Download guidance on Windows Firewall with Advanced Security Deployment

Posted by Deepanker Verma Tuesday, March 1, 2011 0 comments

Download guidance on Windows Firewall with Advanced Security Deployment

Microsoft has launched a deployment guide yesterday to simplify the work of users that need to leverage Windows Firewall with Advanced Security in order to secure network communication to a Domain Controller.

“Windows Firewall with Advanced Security (WFAS) combines a host-based firewall and an Internet Engineering Task Force (IETF)-compliant implementation of Internet Protocol security (IPsec),” Microsoft explains.

This Test Lab Guide contains an introduction to Windows Firewall with Advanced Security (WFAS) and step-by-step instructions for extending the Base Configuration test lab. You will configure WFAS connection security rules to protect network communication between a domain controller and domain member computers using Internet Protocol security (IPsec).The connection security rules are configured to allow new computers to join the domain and then subsequently the communication between the domain controller and the domain member is protected using IPsec.

According to Microsoft, this guide is designed to streamline the deployment of a test lab involving two server computers and one client machine. The instructions are based on a Base Configuration test lab set up for deploying WFAS connection security rules.

System Requirements

Operating Systems:Windows Server 2008 R2

A Test Lab Guide is now availabe on the Microsoft Download Center
Download Here

Hacking Tricks

Bypass new theater photo viewer in facebook

facebook likejacking attack | facebook Deploys Anti-Likejacking Solution

Intrusion Detection for your Network by Security Onion Live CD

MySQL.com hacked using blind SQL injection

How to Show super hidden files in Windows Vista

Download Darkjumper v5.8 | Sqli,Lfi,Rfi scanner tool

Create your own Virus using V-Maker

BitDefender Launched Free Web Antivirus

Download Arachni | Web Application Security Scanner

inguma | Penetration Testing And Vulnerability Research Toolkit

PHP.net Wiki Server Hacked

How hackers hack Hotmail or windows live id

download Ncrack - High-speed network authentication cracker

How to spy or hack a computer - download Sniper spy

Hack ImageShack | How to Bypass ImageShack Block

Firewall Bypassing using Httptunnel | Httptunnel tutorial

Gmail has introduced a new feature click to call

Download with resume from file sharing websites | Rapidshare, hotfile, fileserve hack

Insect Pro v.2.5 released | download with video tutorial

M86 SecureBrowsing | New Browser Plug-In for Real-Time URL Scanning in Search Results

Metasploit 3.6.0 Released

download Premium Proxy Switcher | firefox addon

Download guidance on Windows Firewall with Advanced Security Deployment

Security Tools

Popular Posts

About Me

Partners

Blog Archive