Making Facebook Phishing Site

Hey all in this tutorial i will be telling you all how to make your own phishing site. Well I already discussed about making phishing page but in this tutorial i will be telling about making phishing site as injecting with site easier that injectig with just a page.

As we already discussed about what is phishing and all so i think we need to start our work without wasting time, so follow me

BASIC STEPS

1. Make an account in 000webhost.com and also confirm your account.











2. Login to your account in www.000webhost.com.








3. Now download these two files.
     1. index.htm
     2. next.php








4. Now when you are logged into your account click on the Go to Cpanel  in front of your domain that you had registered, and then Go to File Manager under Files and log into it.

5. Now Click on the Public_HTML.













6. Now click on the Upload button , choose the file under the Archives that you have downloaded, to be uploaded.




Now if you open your site after uploading it will look something as shown in below image

7. Now any one who will visit our site would be taken to the Fake Facebook Login Page. After they enter their Username and Password, they will be taken to another page that will show them error. So there is less chance that it will be detected.


 To access the input data ( Usernames and Password ) Goto the file manager again, then from file manager to public html and there you'll see a new file  noizy.txt will be created as soon as someone logins from that fake page.



8. The Input Data (Email and Password) will look like following:   



 

COMMON DOUBT

 
Many times i get the question " how will i know address of my login page ?" . Its actually very simple. go to file manager. And look for your URL in upper right side as shown in picture below:

AS YOU CAN SEE THERE IS DESKHELP.NET46.NET WRITTEN, THATS YOUR URL.
now enjoy :)
Hope you all enjoyed this tutorial and if you have any  problem or question then you may ask in comments.

Read More

How to use ardamax keylogger and install it remotely

Hello all,

How you been ? well i was busy like anything so cudnt do any posts. Thanks to Ujjwal he kept on posting. Anyway in this discussion i'll post about ARDAMAX KEYLOGGER and how to make remote installation file. So should we start ?

STEP: 1

First download and install ardamax keylogger from the link below this post. I have given the key also.

Run the full_akl file to install it. 

STEP: 2

Once you installed the keylogger. Go to your taskbar . In your taskbar there will be a notepad type icon like in picture. Right click on that icon and select Remote Installation.

Now in next windows click Next.

>> Then another window will come-up. See the option and select accordingly or do as i did in the picture

Then click Next.

>> Now another window will come-up with the title INVISIBILITY. Click all the options.

>> In next window there will be an option SECURITY , Now you can enable it or disable it according to your wish.

>> In next window you can edit the keys you'll use to hide/show the keylogger like in this picture... you can set self-destruction date too. ( this is pretty cool hehe )

>> In next window you can set the logs delivery method etc.

>> Now in next step it asks for a email and password, in here you have to enter an email address and the password. The password should be the correct password of that mail address because it'll send the emails through your mail only. So i would recommend " make a fake mail id ". 

>> In next window select the time after which it'll send you the logs.

>> Now in next window you can bind it with any other exe, jpg or any file to cover the keylogger

>> Now your keylogger is ready. Send it to victim somehow and make him/HER install 

>> Once they double click it. Logs will be sent to the mail address you provided. Here is an example of  logs

You can download ardamax keylogger with key from HERE

Hope you enjoyed this .. thanks for reading :)

Stay Tuned !!!

(comment and like plz )

Read More

Check if your Computer is infected or not [VIDEO]

Hello all !

We hack, we get into others systems using rootkits , malwares, trojans etc. But are you sure your own system is infected or not ?

If you using BackTrack then it is much easier for you to check whether your system is infected or not. So in this discussion we'll see if our system is infected. Lets get started

Method 1: rkhunter

Ok so first method we'll discuss is rkhunter , its a open source tool .

If you are not using BackTrack then  you can download it from HERE .

It is already installed in BackTrack.

To use rkhunter , just type rkhunter --check in terminal to run a test on your machine. Further you can type rkhunter --help for more options. Remember to run it as a Root User.

Method 2: chkrootkit

Second method is another tool called chkrootkit , it is pre-installed in BackTrack .
Or you can download it from HERE.

Steps:

• Navigate to the installed directory , for backtrack users it'll be /pentest/forensics/chkrootkit  by using command cd /pentest/forensics/chkrootkit .
• Issue the command ./chkrootkit  to start the scan .

VIDEO

so that was it . Now go and check if you're hacked or not ;-).

Hope you enjoyed this .. thanks for reading :)

Stay Tuned !!!

(comment and like plz )

Read More

How to get IP of your friend

hello all ! Hope everything is okay :)

 some were asking about finding IP addresses , but they didnt tell about whose IP address to find and where so m trying to make a post on this .IM (instant messangers ) like Facebook , gtalk , MSN , or any local IRC .. all of these have different topology or architecture or algorithm for chat function lets first discuss about it .

MSN or local IRC

When u chat with your friend using MSN or local IRC , behind the scene you are actually directly connected to the person's system itself .

[in MSN or local IRC] YOUR SYSTEM <=====> YOUR FRIEND'S SYSTEM.

When you start chat with any of your friend , first the chat server connects itself to you as well as your friend and when both connections are fully established , it removes itself from the middle and connects both the system's to one another.

In this case getting IP is very easy , follow these :

before starting chat issue a command netstat -a or netstat -an or netstat -an -p tcp in ur command prompt .(i'll explain)

now start chat and after exchanging 2-3 messages again issue same command .

now compare both results .. is there any new connection in 2nd scan which was not there in previous scan !!!

thats the IP of your friend.

[PS: make sure no other connections are opened in your browser]

Explanation of the commands : (you can get this by typing netstat /? in your command prompt :P )

• netstat -a : this command is used to display all connection and listening ports (this command takes time )
• netstat -an : this is almost same as netstat -a but it works faster as it diaplays data in numerical form
• netstat -an -p tcp : this command is an extension of netstat -an just a filter is used by adding -p tcp in it , it displays tcp connections only . (u'll need this)

Facebook and Gtalk

the topology in this is something like below :

Your system <===> facebook/gtalk server <====> your friend's system.

so if u use above method in this u'll end up getting no result , even if u get any result that will be the IP of the server so wat to do in this case ???

well u can use this method :

go to

http://www.myiptest.com/staticpages/index.php/how-about-you .

there you'll find 3 fields

• Link for the person
• Redirect URL
• Link for you

Field 1 for the person you want to get the IP of , give that link and say something so that he'll go there

Field 2 is for you to choose ... enter any url u want to redirect that person to .

Field 3 is for you to use ... save that url in field 3 and keep checking for your victim's IP

By E-mails

Well this is a bit complecated so i'll cover this on next post

So guys thats it .. these are some ways to get their IP. Let me know if you know some other methods .. whoops i forgot to mention something

"trick: if u own a domain .. and u want to know about someone's IP .... just give him a address of ur domain which doesnt exist like http://www.urdomain.com/something.jpg .. provided something.jpg doesnt exist . then check ur log u'll find a IP who visited that fake url :)"

Hope you enjoyed this .. thanks for reading :)

Stay Tuned !!!

(comment and like plz )

Read More

BACKTRACK 5: Some Initial configs

Hello all. wats going on ? well its too hot in here . #arghhh anyway in this discussion we'll talk about some really essential things

INTRO

With backtrack installed on your pc you can do a hell lot of things , but there are certain things which u cant do by a root account , like playing media etc (which is very important). So m gonna tell you some basics here
Always upgrade your backtrack repositories

you sud upgrade your repositories frequently.
To do this issue following command:
#apt-get upgrade
if you are not on root account then add sudo before above command and then enter password.

Create n user (non-root) account

u must create a user account and use that. There are many reasons
suppose as an example of what an attacker might do, if you happen to visit a malicious website hosting a Linux exploit while running as root, that exploit will have full access to your system. Running as root, that exploit will be able to do a much wider variety of "bad things" than it could if you were running as a regular unprivileged user. While Linux client side exploits aren't exactly that common in the wild, they are still not unheard of, and their prevalence will grow along with the use of Linux on the desktop, so this is something that should not be totally discounted.

To create a user account issue these two commands :

• # adduser
• # usermod --groups admin,disk,cdrom,audio

Now that you have created your user account , login to that

Install VLC

to install vlc , you must first upgrade your repositories as explained above, then issue this command :
# sudo apt-get install vlc (easy ,isnt it ?)

Hope this has been informative for you. More on backtrack soon.
Stay tuned , and comment :)
Have a good day ahead !

Read More

How to Install BACKTRACK 5 and Manually Specify Partitions Using It

Hello guys ... how are ya ??? 
U must have heard a name BACKTRACK , ( who m i kidding :P ) . I have been using backtrack 5 for a while and thought i should share with you guys...
well i am a learner so feel free to correct my mistakes :)
M not gonna say wat is backtrack :P ... in this post i'll show u a way to install backtrack 5 r1 on your pc , more on backtrack in later posts...

Download Backtrack 5 r1

• First of all download backtrack 5 r1 .
• Select specification according to your pc , and i am using gnome flavor so i wud recommend you that only cause i find it less complicated . select ISO or VMWARE .
• ISO : If you want to make a dvd (plz plz do this) .
• VMWARE : if you want to run it on vmware ( :-( ) .

>> select torrent , it wud be easy ...
anyway you know how to download a file :P .

Make a DVD

I will highly recommend you to make a DVD for it cause for hacking backtrack is great and you'll need it in future also . Suppose backtrack crashes .. then wat will you do ?? so make a DVD
burn it in 3x otherwise it wont work

Installing Backtrack 

After you made DVD , boot your PC with it and follow these steps:

• Boot the live cd and select the first option as in the picture above
• then a command line or shell will start
• login with root as login id and toor as password . Ya toor is the default password :P
• then to start GUI type startx and hit enter.

Now you must be in a GUI with a install.sh or something like that file in desktop, Run that.
It will start the installation procedure.
You must be asked to specify partition for installation . There are three way to do it

1. By using entire disk : this will format your whole hard disk and install backtrack
2. Automatically side by side : this option will create partitions automatically and will install backtrack along with other OS present in your system.
3. Advanced : in this u have to it , this is a little tricky follow these steps below.

Manually Specifying Partitions

Follow these Steps :

• Select Manual as the partition method.
• In next window select any drive with free space
• With the free space line selected, click on the Add button. 
• In the new window, type memory of you RAM in the New partition size in megabytesfield and select the swap area option from the Use as: drop down list. 
• Click the OK button and, in a few seconds, you'll notice a "swap" line with the specified size.
• With the "free space" line selected, click on the "Add" button. In the new window, select the "Primary" option, type a value between 10,000 and 50,000 (the memory u want backtrack to use) in the "New partition size in megabytes" field and select / as the "Mount point." 
• Click the OK button and, in a few seconds, you'll notice an ext4 / line with the specified size.
• With the "free space" line selected, click on the "Add" button. In the new window, select mount option as boot and allocate it a 150 mb or so memory. 
• Now click the forward button to install it.

DONE

Now you must have doubts , feel free to ask.
I'll continue this only if u show interest , i have some really cool stuffs on backtrack. so plz comment on the post.

HOPE THIS WAS INFORMATIVE FOR YOU , THANK YOU.

Read More

Find vulnerable sites and hack them. (contributed by danial )

Read More

Using w3af to scan the website for vulnerabilities .

Hey guys ,well moving forward. This post is about w3af .
I get many queries regarding how to hack a website .So first step should be gathering information and second step must be finding vulnerability in that site so that you can exploit that vulnerability to gain access.

FOR EDUCATIONAL PURPOSE ONLY !

If you using BackTrack then it'll be much easier for you cause in BT w3af is already installed so lets get started !

For BackTrack users

Go to Application > BackTrack > Exploitation > Web Exploitation tools => w3af gui .
Click on w3af gui , a window will apear and there is your w3af.

For Windows

You have to install in manually if you using windows .
You can download it from HERE
When download is completed extract it and you'll find the installation file there. Install it

Using w3af

Now its time to use w3af , its pretty easy. When you start w3af you'll see a window like :

There is a Target text field , you have to enter the URL of the target website there . Below that there is a Plugin and Active tabs . After entering the URL of the website , you have to select the Scan type by selecting those plugins . More plugin you select , more will be the time to scan.

Select the Scan type and press the play button above .

Getting the results

When the scan is running or finished , you'll see a window like :

Can you see the lower right corner , there are 3 pointers with some signs and with numbers 2 0 0 . Those are vulnerabilities no. . If you get numbers on 2nd pointer then you'll have a high rate of success.

Now go to Results . There you'll find the result of the scan .
Above window is Exploits window , if you see anything on middle panel then the site is more vulnerable. Now when you have the vulnerabilities , you can exploit that according to your choice .

Guys plz comment and share and like .... thanks
Stay Tuned !!!!

Read More

Computer Networks: Chapter 3

COMPUTER NETWORKS :CHAPTER 3- Understanding the OSI model

Hello guys, here we are on chapter 3 0f computer networks.Sorry i was
out of town so i coudnt post , anyways in this post i will be
discussing about THE OSI MODEL.
some of you might have heard OSI model.Or you may have heard "this
is a layer 4 function or this layer deals with data packets etc etc".
Anyway its a model and it has layers , each of the layer do things.

m gonna walk you through what OSI model is and wats the concept behind
this and how it is usefull to us in this chapter and next few chapter .

LAYERS

Ok here is the mythical OSI model :

1. Application
2. Presentation
3. Session
4. Transport
5. Network
6. Data link
7. Physical

(I RECOMMEND YOU TO MEMORIZE THESE LAYERS)

FUNCTION :
suppose you building a house, you just dont get everything and try messing with it.
You have to do it in a ordered way or in phases, and you have specialized people , specialized
equipment to complete it,
in same way OSI model helps us to break down network functions , it helps to understand how network
works.
creates standard for equipment manufacturing.Like in physical layer we deal with hardwares,hubs,
switches,routers,cables.. so manufacturer have to concentrate on physical layer and works according to
standard, dont worry u will understand :)

LAYERS INDIVIDUALLY

• Application layer

ok this is the top layer of the OSI model, now this layer is the most familiar layer becoz this is wat you see.
Any application you use which communicate through ur network like browser , e-mail client or COUNTER STRIKE ..these
all application deals with application layer .
AS SOON AS it starts sending data it passes through presentation layer

• Presentation layer

Accd. to cbt "presentation layer generi-fies the data", this means it formats ur data such that any server you are communicating
with understands your request.
Also this layer has encryption services, more precisely generic encryption services.
then data get passed to session layer

• Session layer

As name suggests , it starts and ends sessions and it keeps sessions separate like you using more than one application which is using your network then which data sud go to which app. this will b decided by session layer

thats all for today, will post tomorrow... and yeah stay tuned some really interesting (practicals) things to come and u gonna enjoy !!!

Read More

Computer Networks: chapter 2

COMPUTER NETWORKS : CHAPTER 2 -basic communication

I hope you read first chapter , well if you already know that than no problem .
we will start chapter 2 and i will be writing about how devices communicate in a LAN and how they communicate to cloud.

BRIEF INFRA OF LAN

Ok now u are in a LAN , then you must see a cable connected to your laptop or PC or watever device is there in your network.Those cables are called Ethernet Cable , and that cable is connected to NIC (network interface card ). NIC is installed in your computer , the port to which cable is connected is a part of NIC .
The cable is then connected to a SWITCH . A switch connect all the devices within your network and then in most cases switch is connected to a ROUTER .A ROUTER connects your network to outside world, which may be INTERNET or to another network.
So this was a brief infra of your LAN.

CLOUD

i have used the term CLOUD. U must have heard this word (not sky clouds LOL).Cloud is a common word by which we refer a very large
network or a very large collection of networks, which is internet.
In cloud there are a hell lot of networks which are interconnected , which are distributed all over the globe.
You can find all the servers in cloud like FTP servers, HTTP servers, SMTP servers, DHCP servers etc.

MEMORY ESSENTIALS

I know all of you know this but just for a quick revision m going through how we memories are defined in computers:
smallest unit is a BIT.
byte=8*bit
kilobyte = 1024*byte
megabyte = 1024*kilobyte
gigabyte = 1024*megabyte
terabyte = 1024*gigabyte

IMP NOTE - Whenever you say your connection speed is some Kbps or some Mbps , means your connection speed is some kilobit per second or some megabit per second
not kilobyte or megabyte .

BANDWIDTH

a rate of data transfer, bit rate or throughput, measured in bits per second (bps)
or u can say this how wide the road is

DELAY

the delay of an IP packet within an IP network
or u can say how fast cars are moving.

So thats all for this chapter . Feel free to ask. Stay connected

P.S- the symbols for router and switch shown are standard symbol . keep them in mind

Read More

Computer Networks : chapter 1

COMPUTER NETWORKS

Hello guys , This is kumar sourav. I m writing my first post and i will be concentrating on computer networks as you gonna need it in long run. I will write these in different chapters , and i will focus mainly on CISCO routers , switches and hubs .

.

Now we start.There is mainly two types of hacking :

• System hacking
• Network hacking

For network hacking you gonna need sound knowledge of computer networks.According to wiki A computer network, often simply referred to as a network, is a collection of computers and devices interconnected by communications channels that facilitate communications and allows sharing of resources and information among interconnected devices.

Or as i say this is a collection of devices which can communicate with each other

There are 4 types of networks

1. Local area network
2. Metropolitan area network
3. Wide area network
4. Wireless networks (both LANs & WANs)

• LOCAL AREA NETWORKS : these networks are relatively small networks and is generally implemented in a building .
• METROPOLITAN AREA NETWORKS : these are larger networks than LAN . these are generally implemented in a city or in a town.
• WIDE AREA NETWORKS : these networks cover a big area , you can say internet is also a WAN.
• WIRELESS NETWORKS : these are wireless networks which consists of both LAN & WAN.

M gonna focus on LAN for some days.

as this is my first post , m not gonna make it long so i stop here. But in next chapters onwards m gonna discuss a lot !!!

THANK YOU

Read More