Way To Hackintosh : BEGINNERS

The Flood Spreading Methods Amazing Methods!

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: red;"><span style="font-size: medium;">Method 1</span></span>: <span style="font-size: small;">YouTube Spreading</span><br />
1. The things you will need in this method are a YouTube Account and a File Sharing Account. <br /><br />
2. Basically what you are going to be doing is record yourself using a 
program, attracting the user to download and execute the program.(The 
program will be binded with your stub)<br /><br />
3. So you will obviously need DarkComet or some other programs involving
 stubs. Bind your stub with the program that you are "advertising" or 
using in the video that you made with YouTube. <br /><br />
4. When your file is uploaded, you can post the link in the description and simply label it "Download Link" like this: <img alt="[Image: aJXDCHT.png]" border="0" src="http://i.imgur.com/aJXDCHT.png" /><br /><br />
5. Make sure the site that you upload your file on doesnt have any 
surveys, this will turn off people from downloading your binded file. <br />
<br />
<br />
 <span style="color: red;"><span style="font-size: medium;">Method 2</span></span> : <span style="font-size: small;">VB Project + YouTube Spreading</span> <br />
1. The things you will need for this method are Visual Basic or Studio, a YouTube Account, and a File Sharing site.<br /><br />
2. This method is basically making a simple program(doesnt have to be simple) and binding it with your stub. <br /><br />
3. Things you could make are... a pinger with 1000's of packets(to lag 
people) a game launcher, an alarm clock, a website pinger(to snatch 
website ip's) and much more.(the booter/pinger will be very popular)<br /><br />
4. You are going to want to make a video of you using your program, then
 uploading to YouTube. You will bind your stub with the made program and
 upload it to a File Sharing Site.<br /><br />
 5. Some methods to spread your video and your download link are posting 
on pastebin, go on YouLikeHits and you can get your video many likes and
 views. Also, you can get subscribers. Last, you can post your programs 
on forums, there are many people looking for these little tools. You can
 learn how to make these tools on YouTube and Google.<br />
<br />
<br />
<span style="color: red;"><span style="font-size: medium;">Method 3</span></span>: <span style="font-size: small;">E-Whoring</span><br />
1. E-Whoring is when you act like a girl, 
and get someone to download your infected file. This is a great method 
if you want this specific type of slaves; weirdos and desperate people.<br />
<br />
2. Some sites you can E-Whore on are... Omegle, ChatRoulette, any chat 
room site, and forums. Theses sites and web "places" are the most 
popular places to E-Whore, and the most promising. <br /><br />
3. If you are going to E-Whore, you are going to have to act cute. I 
know this sounds pretty queer but whatever it takes to get bots and 
slaves.Some ways to E-Whore are to say that you have a picture of you, 
have a video of you, and or a slideshow of you. To do this, you will 
probably need an extension spoofer which you can find on HackForums, the
 search bar is your friend <img alt="Thumbsup" border="0" src="http://x.hackforums.net/images/modern_bl/images/smilies/thumbsup.gif" style="vertical-align: middle;" title="Thumbsup" /> . Also, you must be patient and very persuasive in the process.</div>

The Flood *Spreading Methods* Amazing Methods!

Method 1 : YouTube Spreading 1. The things you will need in this method are a YouTube Account and a File Sharing Account. 2. Basically wh...

where to begin with hacking ? [how-to]

minix 2 5 things a Beginner Hacker should know, Basic Hacking, BEGINNERS, hacking, windows hacking

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="userContent" data-ft="{"tn":"K"}">"where to begin with hacking". <br /> So here is my opinion about how they should get around starting.<br />  <br />  There are three types of hackers:<br />  <br />  White Hats:<br />  <br />
  The White Hat hacker has dedicated himself to fight malware and help 
others with their computer problems. He is a person you can trust, and 
he will most likely end up in a good paying job as a computer programmer
 or a security consultant. He will m<span class="text_exposed_show">ost certainly not end up in jail.<br />  <br />  Grey Hats:<br />  <br />
  The Grey Hat hacker are in between white Hats and Black Hats. He will 
most likely commit pranks at people that he thinks is harmless, but it 
can also be illegal. He can at one time be helpful and help you with a 
computer problem, but at the same time infect you with his own virus. 
There is a chance that the grey hat will end up in prison.<br />  <br />  Black Hats:<br />  <br />
  The Black hat hacker also known as a cracker is the one who deface 
websites, steal private information and such illegal activity. It is 
very time consuming to become a black hat. It can be very hard for them 
to get a job because of the illegal activity. If law enforcements gets 
you, you can expect jail time. <br />  <br />  So where to start?<br />  <br />  You should know the answer to these questions before you start your hacking career.<br />  <br />  <br /> Which type of hacker do you want to be (white hat, grey hat or black hat)?<br /> Which type of hacking do you want to work with (website hacking, system exploits, pen testing etc.)?<br /> What is your end-goal?<br />  <br />  You should meet these requirements to become a successful hacker.<br />   <br /> You shall be patient.<br /> You shall dedicate a lot of time to hacking. You will never stop learning, since hacking is a lifestyle.<br /> You should have a computer (I expect you to have one since you are reading this).<br /> You shall be interested in how the different computer systems works, and how to control them.<br /> <br />  <br />
  Now that you have an idea of what kind of hacker, you want to be we 
will look closer into the different topics you can work with as a 
hacker.<br />  <br />  <br />  Website Hacking:<br />  <br />  You properly 
already guessed it, but website hacking is about hacking websites. You 
use your skills to find exploits and vulnerabilities in websites and web
 applications. Almost all major hacking stories in the news are about 
websites and databases that have been hacked. Once you have enough 
experience in website security you will be amazed about how easy it is 
to find vulnerabilities in websites. However, it will take a lot of 
effort and time to reach that level of skills. You will need to know a 
large amount of server-side languages and website construction languages
 like PHP, HTML, JavaScript, SQL, ASP, ASP.NET and Perl. This was just 
some of the languages you should know about. I will recommend you to 
take JavaScript, SQL and PHP very serious since it is in those languages
 you will find the most vulnerabilities. <br />   <br />  <br />  Pen testing and Forensics:<br />  <br />
  Pen testing and forensics can earn you big money. It is these guys the
 company’s call when they have been hacked. They are experts in 
operating systems, wireless connections and exploiting computers. This 
way will take A LOT of time and effort since there is so much you should
 know about. You shall know about how the different operating systems 
works, which exploit there is to them, how to exploit them, routers, 
encryption, malware etc. the list is almost endless. <br />  <br />   <br />  Code exploiting:<br />  <br />
  Not many people know about this. This will require you to be a 
complete expert at programming. You shall be at least as good at these 
programming languages as your main language like English. This kind of 
hacking is taking a lot of time, and will require you to be patient. Do 
not get me wrong, every company that releases software like Symantec, 
Google, Microsoft, Adobe, and Oracle have hackers with these skills 
employed to check their software for vulnerabilities. Sadly, they cannot
 find every security hole and therefore some very smart black hat 
hackers are able to find them, and exploit them before the companies get
 the vulnerability patched. You should know the most popular languages 
like C++, Java and C etc.<br />   <br />  Computer security:<br />  <br />  The 
work these people do looks a lot like the pentesters. These people is 
able to detect and analyze new viruses and malware. They are working for
 companies like Symantec, KasperSky and Avira etc. Some of them are also
 working on labs that tests AV’s and new viruses. They are experts in 
how viruses works and how they infect systems. <br />   <br />  You should 
now have an idea on where to start and in which direction you want to 
go. If you found any errors or typos feel free to contact me, and I will
 look into it. I will be updating this thread recently and add more 
details. I will soon add a dictionary, which explains the most basic 
hacking terms. I have putted a lot of effort in this tutorial and my 
goal with this tutorial is to give computer-interested people an idea of
 where they should start. <br />  <br />  To the so-called “noobs”, who reads this:<br />  <br />
  I hope I have inspired you to begin at hacking. I hope that I have 
cleared things up a little bit, so it does not seem so messy anymore. If
 you have any questions or something you did not understand, I would 
gladly explain it to you again. Welcome to the hacker’s world, a new 
world will open up for you and you will never regret that you chose to 
become a hacker.</span></span></div>

where to begin with hacking ? [how-to]

"where to begin with hacking". So here is my opinion about how they should get around starting. There are three types of hac...

Nmap (Network Mapper) - introduction

minix 0 5 things a Beginner Hacker should know, BEGINNERS, BEST TOOLS EVER, EXPLANATION, EXPLANATION ABOUT, Top 5 Anonymous Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="userContent" data-ft="{"tn":"K"}">Nmap 
("Network Mapper") is a free and open source (license) utility for 
network exploration or security auditing. Many systems and network 
administrators also find it useful for tasks such as network inventory, 
managing service upgrade schedules, and monitoring host or service 
uptime. </span><br />
<br />
<span class="userContent" data-ft="{"tn":"K"}">Nmap uses raw IP packets in novel ways to determine what hosts 
are available on the network, what services (applic<span class="text_exposed_show">ation
 name and version) those hosts are offering, what operating systems (and
 OS versions) they are running, what type of packet filters/firewalls 
are in use, and dozens of other characteristics. </span></span><br />
<br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">It was designed to 
rapidly scan large networks, but works fine against single hosts. Nmap 
runs on all major computer operating systems, and official binary 
packages are avalable for Linux, Windows, and Mac OS X. In addition to 
the classic command-line Nmap executable, the Nmap suite includes an 
advanced GUI and results viewer (Zenmap), a flexible data transfer, 
redirection, and debugging tool (Ncat), and a utility for comparing scan
 results (Ndiff).<br /> <br /> Nmap is ...<br /> <br />     * Flexible: Supports
 dozens of advanced techniques for mapping out networks filled with IP 
filters, firewalls, routers, and other obstacles. This includes many 
port scanning mechanisms (both TCP & UDP), OS </span></span><br />
<br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">detection, version 
detection, ping sweeps, and more.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Powerful: Nmap has been used to scan huge networks of literally hundreds of thousands of machines.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Portable: Most operating systems are supported, including Linux, 
Microsoft Windows, FreeBSD, OpenBSD, Solaris, IRIX, Mac OS X, HP-UX, 
NetBSD, Sun OS, Amiga, and more.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Easy: While Nmap offers a 
rich set of advanced features for power users, you can start out as 
simply as "nmap -v -A targethost". Both traditional command line and 
graphical (GUI) versions are available to suit your preference. Binaries
 are available for those who do not wish to compile Nmap from source.<br /><span> </span></span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show"><span>* Free: The primary goals of the Nmap Project is to help make the 
Internet a little more secure and to provide administrators/auditors/</span><wbr></wbr><span class="word_break"></span>hackers
 with an advanced tool for exploring their networks. Nmap is available 
for free download, and also comes with full source code that you may 
modify and redistribute under the terms of the license.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Well 
Documented: Significant effort has been put into comprehensive and 
up-to-date man pages, whitepapers, tutorials, and even a whole book!<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Supported: While Nmap comes with no warranty, it is well 
supported by a vibrant community of developers and users. Most of this 
interaction occurs on the Nmap mailing lists. Most bug reports and 
questions should be sent to the nmap-dev list, but only after you read 
the guidelines. We recommend that all users subscribe to the low-traffic
 nmap-hackers announcement list. You can also find Nmap on Facebook and 
Twitter. For real-time chat, join the <a class="_58cn" data-ft="{"tn":"*N","type":104}" href="https://www.facebook.com/hashtag/nmap">#nmap</a> channel on Freenode or EFNet.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Acclaimed: Nmap has won numerous awards, including "Information 
Security Product of the Year" by Linux Journal, Info World and 
Codetalker Digest. It has been featured in hundreds of magazine 
articles, several movies, dozens of books, and one comic book series.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Popular: Thousands of people download Nmap every day, and it is 
included with many operating systems (Redhat Linux, Debian Linux, 
Gentoo, FreeBSD, OpenBSD, etc). It is among the top ten (out of 30,000) 
programs at the Freshmeat.Net repository. This is important because it 
lends Nmap its vibrant development and user support communities.<br /> <br /> Installing nMap:<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fbook%2Finstall.html&h=4AQHXMISM&enc=AZNZpceDswHpF9N6vsuQM-IBMSfY4FGQWY2-_8XsEvdB2iIvHwaG_phtLvtZEJ1iB5J2tFjV0Trj58pF_k7fdnRX_RXU6Jxx2ACksUp-7ZYqETbtSV9up97Z2s7_6y1CahseYWX2OnP0nq7BnEHibcaf&s=1" rel="nofollow nofollow" target="_blank"><span>http://nmap.org/book/</span><wbr></wbr><span class="word_break"></span>install.html</a><br /> <br /> Changelog:<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fchangelog.html&h=iAQEVHM_X&enc=AZO-GustSzPsC1xY_uxYjIVixrtdaAlI6WBZO4rc5aaxedw9Xm4OP2Y1txxiE0nM5tFSgO0-QC7lIMMD3YmnSvKBWJ7f3rugmxzFPUQN3zwSlQmKLC1QbAkn9x0wthaCS9nuA-hloPyhbMnhvvUhzWC3&s=1" rel="nofollow nofollow" target="_blank">http://nmap.org/changelog.html</a><br /> <br /> How To Use:<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fbook%2Fman.html&h=hAQH7uXqU&enc=AZNj_1pFBRIm4S8b8Vlxlb0A0mkWBVmVoM6Q38M2jI2gT5UrY4T3uScRUSiMZJDY43UyBY2klXbKLeAO_0Gkk5Dw6yL8zaQ--0Qf1ziOYgeAltxk4uNZa42cmmBQN8355Il7wUl-pUfkogJVbJPDwkxM&s=1" rel="nofollow nofollow" target="_blank">http://nmap.org/book/man.html</a><br /> <br /> Download<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fdownload.html&h=OAQGbF2PM&enc=AZPW9meLTtaq--7Xad49khR97Ah_Gp2k7vDpZc6oOKeXruPBLkpDg9qsn__FnBrCeZSgmf9mFR4ZFrOmSwGo08SPeLFtdRyYcyz7ldKT5DGJ-FcpDMiTwVO8t3sCoBsvlBYmQqT6YnIXoSsn6o9dZ-vw&s=1" rel="nofollow nofollow" target="_blank">http://nmap.org/download.html</a></span></span></div>

Nmap (Network Mapper) - introduction

Nmap ("Network Mapper") is a free and open source (license) utility for network exploration or security auditing. Many systems ...

SSH Tunneling Explained

Admin Jixxi 0 5 things a Beginner Hacker should know, BEGINNERS, EXPLANATION, EXPLANATION ABOUT, SSH Tunneling Explained

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ_N7NUQvAEB8vbEenDFN0aHDiOvQOOdIr0Xd6EA-bOSZuE4UPSvCJzkIw4_RzzMMzHRnDo-8qRhPHUz6v6sT3W_xY-Z9Q7VRVgzIyZ8dcq2Aqrc_WcRnRgwlTJmb29wsivZTbuIOYow3m/s1600/localportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ_N7NUQvAEB8vbEenDFN0aHDiOvQOOdIr0Xd6EA-bOSZuE4UPSvCJzkIw4_RzzMMzHRnDo-8qRhPHUz6v6sT3W_xY-Z9Q7VRVgzIyZ8dcq2Aqrc_WcRnRgwlTJmb29wsivZTbuIOYow3m/s320/localportforwarding.jpg" width="320" /></a></div>
Recently I wanted to set up a remote desktop sharing session from 
home pc to my laptop. While going through the set up guide I came across
 ssh tunneling. Even though there are many articles on the subject still
 it took me a considerable amount of googling, some experimenting and 
couple of Wireshark sessions to grasp what’s going under the hood. Most 
of the guides were incomplete in terms of explaining the concept which 
left me desiring for a good article on the subject with some explanatory
 illustrations. So I decided to write it my self. So here goes…<br />

<h3 style="text-align: justify;">
Introduction</h3>
<div style="text-align: justify;">
A SSH tunnel consists of an encrypted tunnel created through a SSH protocol<br />
connection. A SSH tunnel can be used to transfer unencrypted traffic over a<br />
network through an encrypted channel. For example we can use a ssh tunnel to<br />
securely transfer files between a FTP server and a client even though the FTP<br />
protocol itself is not encrypted. SSH tunnels also provide a means to 
bypass firewalls that prohibits or filter certain internet services. For
 example an organization will block certain sites using their proxy 
filter. But users may not wish to have their web traffic<br />
monitored or blocked by the organization proxy filter. If users can connect to<br />
an external SSH server, they can create a SSH tunnel to forward a given port on<br />
their local machine to port 80 on remote web-server via the external SSH<br />
server. I will describe this scenario in detail in a little while.</div>
<div style="text-align: justify;">
To set up a SSH tunnel a given port of one machine needs to be forwarded (of<br />
which I am going to talk about in a little while) to a port in the other<br />
machine which will be the other end of the tunnel. Once the SSH tunnel has been<br />
established, the user can connect to earlier specified port at first machine to<br />
access the network service.</div>
<h3 style="text-align: justify;">
Port Forwarding</h3>
<div style="text-align: justify;">
SSH tunnels can be created in several ways using different kinds of port forwarding<br />
mechanisms. Ports can be forwarded in three ways.</div>
<ol style="text-align: justify;">
<li>Local port forwarding</li>
<li>Remote port forwarding</li>
<li>Dynamic port forwarding</li>
</ol>
<div style="text-align: justify;">
I didn’t explain what port forwarding is. I found Wikipedia’s definition more explanatory.</div>
<blockquote>
Port forwarding or port mapping is a name given to the combined technique of<br />

<ol>
<li>translating the address and/or port number of a packet to a new destination</li>
<li>possibly accepting such packet(s) in a packet filter(firewall)</li>
<li>forwarding the packet according to the routing table.</li>
</ol>
</blockquote>
<div style="text-align: justify;">
Here the first technique will be used in 
creating an SSH tunnel. When a client application connects to the local 
port (local endpoint) of the SSH tunnel and transfer data these data 
will be forwarded to the remote end by translating the host and port 
values to that of the remote end of the channel.</div>
<div style="text-align: justify;">
So with that let’s see how SSH tunnels can be created using forwarded ports with an examples.</div>
<h3 style="text-align: justify;">
Tunnelling with Local port forwarding</h3>
<div style="text-align: justify;">
Let’s say that yahoo.com is being blocked using a proxy filter in the University.<br />
(For the sake of this example. :d  
 . Cannot think any valid reason why yahoo would be blocked). A SSH 
tunnel can be used to bypass this restriction. Let’s name my machine at 
the university as ‘work’ and my home machine as ‘home’. ‘home’ needs to 
have a public IP for this to work. And I am running a SSH server on my 
home machine. Following diagram illustrates the scenario.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtLy_3wO0wN4-FfOEILVU-T6Zktxde4L7G4e0SBO6McYJuEOghSb1lz5xN8fiNQe69yd50bdpVbryH6fzQ27rTqsYL-4NJ7ieiVKRaBPJmNY_X4LowMl0tBNWk_5yb4MhUuPOfXewsZK6B/s1600/scenario.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtLy_3wO0wN4-FfOEILVU-T6Zktxde4L7G4e0SBO6McYJuEOghSb1lz5xN8fiNQe69yd50bdpVbryH6fzQ27rTqsYL-4NJ7ieiVKRaBPJmNY_X4LowMl0tBNWk_5yb4MhUuPOfXewsZK6B/s640/scenario.jpg" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div style="text-align: justify;">
To create the SSH tunnel execute following from ‘work’ machine.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L 9001:yahoo.com:80 home</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
The ‘L’ switch indicates that a local port forward is need to be created. The switch syntax is as follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">-L <local-port-to-listen>:<remote-host>:<remote-port></pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Now the SSH client at ‘work’ will connect
 to SSH server running at ‘home’ (usually running at port 22) binding 
port 9001 of ‘work’ to listen for local requests thus creating a SSH 
tunnel between ‘home’ and ’work’. At the ‘home’ end it will create a 
connection to ‘yahoo.com’ at port 80. So ‘work’ doesn’t need to know how
 to connect to yahoo.com. Only ‘home’ needs to worry about that. The 
channel between ‘work’ and ‘home’ will be encrypted while the connection
 between ‘home’ and ‘yahoo.com’ will be unencrypted.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Now it is possible to browse yahoo.com by visiting <a href="http://localhost:9001/" rel="nofollow">http://localhost:9001</a>
 in the web browser at ‘work’ computer. The ‘home’ computer will act as a
 gateway which would accept requests from ‘work’ machine and fetch data 
and tunnelling it back. So the syntax of the full command would be as 
follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L <local-port-to-listen>:<remote-host>:<remote-port> <gateway></pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
The image below describes the scenario.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieF2hNUXvxMcGyDXkvIvdK-vZG1iehwCshQrB_ExTWJmr7zSgH6__ou-IJme_z2fs8Mtr_1MpwFMBkk_70gugglSu_MN8wJhDHgai6Sxp_arriBAgeWyS4SOIFWQI8E0xepJsfILTw8flh/s1600/localportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieF2hNUXvxMcGyDXkvIvdK-vZG1iehwCshQrB_ExTWJmr7zSgH6__ou-IJme_z2fs8Mtr_1MpwFMBkk_70gugglSu_MN8wJhDHgai6Sxp_arriBAgeWyS4SOIFWQI8E0xepJsfILTw8flh/s640/localportforwarding.jpg" width="640" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Here the ‘host’ to ‘yahoo.com’ connection is only made when browser makes the<br />
request not at the tunnel setup time.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
It is also possible to specify a port in the ‘home’ computer itself instead of<br />
connecting to an external host. This is useful if I were to set up a VNC session<br />
between ‘work’ and ‘home’. Then the command line would be as follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L 5900:localhost:5900 home (Executed from 'work')</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
So here what does localhost refer to? Is 
it the ‘work’ since the command line is executed from ‘work’? Turns out 
that it is not. As explained earlier is relative to the gateway (‘home’ 
in this case) , not the machine from where the tunnel is initiated. So 
this will make a connection to port 5900 of the ‘home’ computer where 
the VNC client would be listening in.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The created tunnel can be used to 
transfer all kinds of data not limited to web browsing sessions. We can 
also tunnel SSH sessions from this as well. Let’s assume there is 
another computer (‘banned’) to which we need to SSH from within 
University but the SSH access is being blocked. It is possible to tunnel
 a SSH session to this host using a local port forward. The setup would 
look like this.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSDWZrXleJzE0RdHH808w13j6XagYSlDgoQS9xkQKttvaZWmCOm0jWHhAZs9JpMfL3YpokD1zgy8pQgVyMtKCvXWbRyBaT5LQV-iNQQlFUwcNxNC8-Dk0muFCfRUSu87S2oyaSDWPAQbx3/s1600/sshsessionforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSDWZrXleJzE0RdHH808w13j6XagYSlDgoQS9xkQKttvaZWmCOm0jWHhAZs9JpMfL3YpokD1zgy8pQgVyMtKCvXWbRyBaT5LQV-iNQQlFUwcNxNC8-Dk0muFCfRUSu87S2oyaSDWPAQbx3/s640/sshsessionforwarding.jpg" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div style="text-align: justify;">
As can be seen now the transferred data 
between ‘work’ and ‘banned’ are encrypted end to end. For this we need 
to create a local port forward as follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L 9001:banned:22 home</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Now we need to create a SSH session to local port 9001 from where the session<br />
will get tunneled to ‘banned’ via ‘home’ computer.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -p 9001 localhost</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
With that let’s move on to next type of SSH tunnelling method, reverse tunnelling.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Reverse Tunnelling with remote port forwarding</h3>
<div style="text-align: justify;">
Let’s say it is required to connect to an internal university website from home.<br />
The university firewall is blocking all incoming traffic. How can we 
connect from ‘home’ to internal network so that we can browse the 
internal site? A VPN setup is a good candidate here. However for this 
example let’s assume we don’t have this facility. Enter SSH reverse 
tunnelling..</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
As in the earlier case we will initiate 
the tunnel from ‘work’ computer behind the firewall. This is 
possible since only incoming traffic is blocking and outgoing traffic is
 allowed. However instead of the earlier case the client will now be at 
the ‘home’ computer. Instead of -L option we now define -R which 
specifies<br />
a reverse tunnel need to be created.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -R 9001:intra-site.com:80 home (Executed from 'work')</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Once executed the SSH client at ‘work’ 
will connect to SSH server running at home creating a SSH channel. Then 
the server will bind port 9001 on ‘home’ machine to listen for incoming 
requests which would subsequently be routed through the created SSH 
channel between ‘home’ and ‘work’. Now it’s possible to browse the 
internal site</div>
<div style="text-align: justify;">
<br />
by visiting <a href="http://localhost:9001/" rel="nofollow">http://localhost:9001</a>
 in ‘home’ web browser. The ‘work’ will then create a connection to 
intra-site and relay back the response to ‘home’ via the created SSH 
channel.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjX9_kvDbHvpW100qg15uiRixRH5DIV_rImXn9Elznas9DZJ8KKNWf6V45WKjpajOKslYgKFa972gfr9QdQMYH0o0RoKelmPeKVNzRdwhfyojUb44Jum7Fjt2HyyplwYIwsXq0K6VrlPr3-/s1600/remoteportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjX9_kvDbHvpW100qg15uiRixRH5DIV_rImXn9Elznas9DZJ8KKNWf6V45WKjpajOKslYgKFa972gfr9QdQMYH0o0RoKelmPeKVNzRdwhfyojUb44Jum7Fjt2HyyplwYIwsXq0K6VrlPr3-/s640/remoteportforwarding.jpg" width="640" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
As nice all of these would be still you 
need to create another tunnel if you need to connect to another site in 
both cases. Wouldn’t it be nice if it is possible to proxy traffic to 
any site using the SSH channel created? That’s what dynamic port 
forwarding is all about.</div>
<h3 style="text-align: justify;">
Dynamic Port Forwarding</h3>
<div style="text-align: justify;">
Dynamic port forwarding allows to 
configure one local port for tunnelling data to all remote 
destinations. However to utilize this the client application connecting 
to local port should send their traffic using the SOCKS protocol. At the
 client side of the tunnel a SOCKS proxy would be created and the 
application (eg. browser) uses the SOCKS protocol to specify where the 
traffic should be sent when it leaves the other end of the ssh tunnel.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -D 9001 home (Executed from 'work')</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Here SSH will create a SOCKS proxy listening in for connections at local port<br />
9001 and upon receiving a request would route the traffic via SSH channel<br />
created between ‘work’ and ‘home’. For this it is required to configure the<br />
browser to point to the SOCKS proxy at port 9001 at localhost.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgL8nOMmO4XSZI_R1t3B2uf8UwY4WfIG6HCRs1ucG2vkqps0YlQeKe-O2JrDSEsypouxLFAPpBPbcF6cBj9_QwZMoY3sSxlx3lcUdbm_4NyqgRvfRmpxIbBrFw-njRo55KbcNkpERXoTR6h/s1600/dynamicportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgL8nOMmO4XSZI_R1t3B2uf8UwY4WfIG6HCRs1ucG2vkqps0YlQeKe-O2JrDSEsypouxLFAPpBPbcF6cBj9_QwZMoY3sSxlx3lcUdbm_4NyqgRvfRmpxIbBrFw-njRo55KbcNkpERXoTR6h/s640/dynamicportforwarding.jpg" width="640" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
thats all hope you enjoy this tutorial   :>)    </div>
</div>

SSH Tunneling Explained

Recently I wanted to set up a remote desktop sharing session from home pc to my laptop. While going through the set up guide I came acro...

DNS poisoning - EXPLANATION | hacking trick

Admin Jixxi 0 5 things a Beginner Hacker should know, BEGINNERS, DNS poisoning, EXPLANATION, EXPLANATION ABOUT, hacking

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;">
<span style="font-family: "Courier New",Courier,monospace;"><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">DNS poisoning is a technique that tricks a DNS</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">server into believing that is has received authentic</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">inforamtion when, in reality, it has not. It results in</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">substitution of a false Ineternet provider address at</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">the domain name service level where web addresses</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">are converted into numeric internet provider</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">addresses. It allows attacker to replace IP address</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">DNS entries for a target site on a given DN</span><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">S server<br />with IP addresses of the server he/she controls.<br />Attacker can create fake DNS entries for files with<br />same names as that of target server.<br />The DNS provides a way for computers to translate<br />the domain names we see to the physical IPs they<br />represent. When you load a webpage, your browser<br />will ask its DNS server for the IP of the host you<br />requested, and the server will respond. Your browser<br />will then request the webpage from the server with<br />the IP address that the DNS server supplied.<br />To launch a DNS poisoning attack, follow these<br />steps:</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br />+ set up a fake website on your computer</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br />+ Install treewalk and modify the file mentioned in<br />the readme.txt to your IP address. Treewalk will<br />make you the DNS server.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Modify the file dns-spoofing.bat and replace the IP<br />address with your IP address.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br />+ Trojanize the dns-spoofing.bat file and send it</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ When the host clicks the Trojanned file, it will<br />replace DNS-entry in her TCP/IP properties to that of<br />your machine.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ You will become the DNS server and her DNS<br />requests will go through you<br />There are four types of DNS poisoning attacks using<br />which you can compromise the target system:</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Intranet DNS spoofing (local network)<br />When an attacker performs DNS poisoning on a locl<br />area network (LAN), it is called intranet DNS<br />spoofing. An attacker can perform intranet DNS<br />spoofing attack with the help of the ARP poisoning<br />technique. THis is usually conducted on a swithced<br />LAN. To perform this attack, you must be connected<br />to the LAN and be able to sniff the traffic or packets.<br />Once the attacker succeds in sniffing the ID of the<br />DNS request from the intranet, he or she can send a<br />malicious reply to the sender before the actual DNS<br />server.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Internet DNS spoofing (remote network)<br />Internet DNS poisoning is also known as remote<br />DNS poisoning. This attack can be performed either<br />on asingle or multiple victims anywhere in the world.<br />In order to perform this attack, you need to set up a<br />rouge DNS server with a static IP address.<br />Internet DNS spoofing is performed when the<br />victim's system is connedted to the Internet. It is<br />done with the help of Trojans. It is one of the MITM<br />types of attacks, where the attacker changers the<br />primary DNS entries of the victim's computer. The<br />attacker replaces the victim's DNS IP address with<br />the fake IP address that refers t the attacker's<br />system; thus all traffic will be redirected to the<br />attacker's machine. Now the aatcker can easily sniff<br />the victim's confidential information.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Proxy server DNS poisoning<br />In the proxy server DNS posoning technique, tha<br />taattacker changes the proxy server setting of the<br />victim to that of the attacker. This is done with the<br />help of a Trojan. This redirects the victim's request<br />to the attacker's fake website where the attacker can<br />sniff the confidential information of the victim.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ DNS cache poisoning<br />The DNS system uses cache memory to hold the<br />recently resolved domain names. It is populated<br />with recently used domain names and respective IP<br />address entries. When the user request comes, the<br />DNS resolver first checks the DNS cache; if the<br />domain name that the user requested is found in the<br />cache, then the resolver sends its respective IP<br />address quickly. Thus, it redueces the traffic and<br />time of DNS resolving.<br />Attacker target this DNS cache and make changes or<br />add entries to the DNS cache. The attacker replaces<br />the user-requested IP address with the fake IP<br />address. Then, after when user requests that domain<br />name, the DNS resolver checks the entry in the DNS<br />cache and picks the matched entry. Thus, the victim<br />is rediirected to the attacker's fake server instead of<br />the authorized server.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br /></span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">How to defend against DNS spoofing:</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br /></span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">Resolve all DNS queries to local DNS servers<br />Block DNS requests from going to external severs<br />Implement DNSSEC<br />Configure the DNS resolver to use a new random<br />source prot from its available range for each<br />outgoing query<br />Configure the firewall to restrict external DNS lookup<br />Restrict the DNS recuring service, either full or<br />partial, to authorized users<br />Use DNS Non-Existent Domain rate limitng<br />Secure your internal machines<br />Implement IDS and deploy it correctly<br />Use static ARP and IP table<br />Use SSH encryption<br />Use sniffing detection tools<br />Do not open suspicious files<br />Always use trusted proxy sites<br />Audit your DNS server regularly to remove<br />vulnerabilities</span></span></div>
</div>

DNS poisoning - EXPLANATION | hacking trick

DNS poisoning is a technique that tricks a DNS server into believing that is has received authentic inforamtion when, in reality, it has n...

Introduction to Social Engineering world

Admin Jixxi 0 BEGINNERS, EXPLANATION, Hacking tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3>
What is Social Engineering?</h3>
Social engineering is the act of 
manipulating people into performing actions or divulging confidential 
information, rather than by breaking in or using technical cracking 
techniques.[1]  While similar to a confidence trick or simple fraud, the
 term typically applies to trickery or deception for the purpose of 
information gathering, fraud, or computer system access; in most cases 
the attacker never comes face-to-face with the victim.<br />
<a href="http://www.blogger.com/blogger.g?blogID=7300937913117639331" name="more"></a><br />
<br />
"Social engineering" as an act of psychological manipulation was 
popularized by hacker-turned-consultant Kevin Mitnick. The term had 
previously been associated with the social sciences, but its usage has 
caught on among computer professionals.<br />
Example 1: You receive an e-mail where the sender and the manager or someone on behalf of the support department of your bank.<br />
<br />
In the message he says that the Internet Banking service is presenting a
 problem and that this problem can be corrected if you run the 
application attached to this message.<br />
<br />
The implementation of this application presents a screen similar the one
 you use to access bank account, waiting for you to type your password. 
In fact, this application is prepared to steal your password to access 
the bank account and sends it to the attacker.<br />
<br />
<br />
<br />
<b>Some Examples </b><br />
Example 1: You receive an e-mail where the sender and the manager or someone on behalf of the support department of your bank.<br />
<br />
In the message he says that the Internet Banking service is presenting a
 problem and that this problem can be corrected if you run the 
application attached to this message.<br />
<br />
The implementation of this application presents a screen similar the one
 you use to access bank account, waiting for you to type your password. 
In fact, this application is prepared to steal your password to access 
the bank account and sends it to the attacker<br />
<br />
Example 2: You receive an e-mail saying that your computer is infected 
by a virus. The message suggests that you install a tool available on an
 Internet site, to eliminate the virus from your computer.<br />
<br />
The real function of this tool and does not eliminate a virus, but I 
give someone access to your computer and all data stored on it.<br />
<br />
Example 3: a stranger calls your house and says it is the technical support of your ISP.<br />
In this connection he says that his connection to the Internet is 
presenting a problem and then, ask your password to fix it. If you give 
your password, this so-called technical can perform a multitude of 
malicious activities, using your access account<br />
Internet and therefore such activities relating to its name.<br />
<br />
<h4>
Practical Examples:</h4>
Retail Paging Systems<br />
---------------------<br />
Wal-Mart store phones have clearly marked buttons for the paging system.  Wal-Mart is<br />
the exception, not the rule.  So how do you get on the paging system to have a little<br />
fun when you're bored out of your mind shopping with your girlfriend?  Social<br />
engineering, my whipped friend.  Find a phone and dial an extension, preferably the<br />
store op.  The key here is to become a harried employee, saying something similar<br />
to..."This is Bill in shoes.  What's the paging extension?"  More often than not,<br />
you'll get the extension without another word.  Now, get some by saying something<br />
sweet over the intercom.<br />
<br />
Airport White Courtesy Phones<br />
-----------------------------<br />
Imagine you've already been stripped searched and you're waiting for your delayed<br />
flight.  Naturally, you gravitate to a phone.  Is it white?  Then you've got a free<br />
call right in front of you.  Just pick up to get the op.  "This is Bill at Southwest,<br />
Gate A5.  We're swamped and our phones are tied.  Can I get an outside line?"  If<br />
the phone does not have DTMF, or the op wants to dial the call for you, do not call<br />
a number related to you.<br />
<br />
Hotels<br />
------<br />
Hotels hold such promise.  Some hotels have voice mail for each room, guests<br />
receiving a PIN when they check in.  Hotels also have "guest" phones; phones outside<br />
of rooms that connect only to rooms or the front desk.  Pick up a guest phone, make<br />
like a friendly guest and say, "I forgot my PIN.  Could I get it again?  Room XXX."<br />
Knowing the registered name of the target room helps, for the Hotel and Restaurant<br />
Management Degree Program graduate may ask for it.<br />
<br />
Do not follow through with the next social engineering example.  Or, like the author,<br />
try it on a friend.  Go to the front desk and tell the attendant that you've locked<br />
your key (card) in the laundromat, in your room, lost it, etc.  Do not try this with<br />
the attendant that checked you in.  And again, do not enter someone's room without<br />
permission.<br />
<br />
<br />
Calling Technical Support<br />
------------------------- <br />
So you've found a new-fangled computerized phone and you want to learn more about it.<br />
Do the same thing you do when you have trouble with your AOL - call tech support.<br />
First, do a little planning (after getting the tech support number off of the phone<br />
or the web).  Get some info on the phone, like phone number, model number, other<br />
identifying numbers, etc.  Also, know the name of the facility in which the phone is<br />
located.  Now that you've got some ammo, you're ready to make the call.  Posing as an<br />
employee of the facility, call tech support and make up a problem for the phone<br />
you've identified.  Act a little dumb and be apologetic, acting like you don't want<br />
to waste their time.  All the while, pumping them for information - "I hate to bug<br />
you for this, but <insert problem here>."  <You'll get some info from tech support<br />
here.>  <Build on what you've learned and curiously ask another question.> And so<br />
on until you reach the point where you can feel that it's time to end the call.<br />
Occasionally acting amazed at their knowledge may be helpful.<br />
<br />
<br />
<div id="MedhodsforSE">
<h3>
Methods of Social Engineering</h3>
</div>
<br />
<b>Phishing </b><br />
Phishing is a technique of fraudulently obtaining private information. 
Typically, the phisher sends an e-mail that appears to come from a 
legitimate business — a bank, or credit card company — requesting 
"verification" of information and warning of some dire consequence if it
 is not provided. The e-mail usually contains a link to a fraudulent web
 page that seems legitimate — with company logos and content — and has a
 form requesting everything from a home address to an ATM card's PIN.<br />
<br />
For example, 2003 saw the proliferation of a phishing scam in which 
users received e-mails supposedly from eBay claiming that the user's 
account was about to be suspended unless a link provided was clicked to 
update a credit card (information that the genuine eBay already had). 
Because it is relatively simple to make a Web site resemble a legitimate
 organization's site by mimicking the HTML code, the scam counted on 
people being tricked into thinking they were being contacted by eBay and
 subsequently, were going to eBay's site to update their account 
information. By spamming large groups of people, the "phisher" counted 
on the e-mail being read by a percentage of people who already had 
listed credit card numbers with eBay legitimately, who might respond.<br />
<b><br />
Vishing or Phone Phishing:</b><br />
This technique uses an Interactive Voice Response (IVR) system to 
recreate a legit sounding copy of a bank or other institution's IVR 
system. The slave is prompted to call in to the "bank" via a phone 
number provided in order to "verify" information.<br />
<br />
<b>Baiting</b><br />
Baiting is like the real-world Trojan Horse that uses physical media and
 relies on the curiosity or greed of the slave. In this attack, the 
attacker leaves a malware infected floppy disc, CD ROM, or USB flash 
drive in a location sure to be found, gives it a legitimate looking and 
curiosity-piquing label, and simply waits for the slave to use the 
device.<br />
<br />
<b>Quid pro quo</b><br />
Quid pro quo means something for something:<br />
<br />
* An attacker calls random numbers at a company claiming to be calling 
back from technical support. Eventually they will hit someone with a 
legitimate problem, grateful that someone is calling back to help them. 
The attacker will "help" solve the problem and in the process have the 
user type commands that give the attacker access or launch malware.<br />
<br />
* In a 2003 information security survey, 90% of office workers gave 
researchers what they claimed was their password in answer to a survey 
question in exchange for a cheap pen. Similar surveys in later years 
obtained similar results using chocolates and other cheap lures, 
although they made no attempt to validate the passwords.
</div>

Introduction to Social Engineering world

What is Social Engineering? Social engineering is the act of manipulating people into performing actions or divulging confidential info...

EASY WEBSITE HACKING FOR BEGINNERS|A Complete Guide

Admin Jixxi 5 BEGINNERS, hacks, Website Hacking Tools Collection

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="userContent">EASY WEBSITE HACKING FOR BEGINNERS |A Complete Guide| :<br /> <br /> <br /> REMEMBER :<br /> <br /> RULE 1. Destruction of anyone's hard work is a shame and nothing to be proud of!!!<br /><span class="text_exposed_show">
 RULE 2. All my Tutorials are for Educational Purpose Only and as usual I
 vehemently refuse to accept any responsibility for its Misuse.<br /> RULE
 3. In no way will I accompany you to any correctional facility or help 
pay the fine Imposed for being stupid enough to get caught in the first 
place!<br /> RULE 4. REMEMBER to REMEMBER THAT YOU NEED TO USE FIREFOX!!!<br /> <br /> STEP BY STEP INSTRUCTION :<br /> <br /> * STEP 1. Go to GOOGLE!!!<br /> <br /> * STEP 2. TYPE AND SEARCH FOR :<br /> <br /> " Powered by EasySiteNetwork /category.php "<br /> (REMEMBER : When you are choosing a site to hack, make sure you dont choose one mentioning about sql injection...)<br /> <br /> * STEP 3. APPLYING THE EXPLOIT :<br />
 Make sure the url of the site you chose contains category.php somewhere
 in the link.Now copy the Script given below and starting from 
category.php highlight the rest of the url and replace it with the given
 script.<br /> <br /> " /category.php?catid=1+union+select+111,222,concat_ws(char(58),login,password,email),444+from+users/* "<br /> <br /> HIT Enter and notice the changes to the page.<br /> <br /> * STEP 4. INTERPRETING THE RESULT :<br /> The user information will be displayed along this format :<br /> Username: Password: Email<br /> <br /> NOTE: Incases having more then one username and password, then most likely the one displayed second is the Admin Account...<br /> <br /> <br /> * STEP 5. LOGGING INTO THE ADMIN CONTROL PANEL :<br /> In order to login to the Admin Control Panel, Just add the following extension to the original url :<br /> <br /> " /siteadmin/index.php "<br /> <br />
 NOTE: In most cases you'll see the popup for the Admin Control Panel 
login, but if in few cases it is-int displayed or doesn't work, then 
just login like any other user would on the home page.<br /> <br /> <br /> * 
STEP 6. Congrats!!! You are now logged into the Admin Control Panel and 
you have complete access to do as you please.(Doesnt mean you Deface a 
site!!!)<br /> If you can find out the server or host on which your 
victims website is Hosted, you can even login to their FTP by typing in a
 false path!!!<br /> <br /> If you are going to copy these posts...Don't forget to credit our work :)<br /> <br /> Happy Hacking ;) !!!</span></span></div>

EASY WEBSITE HACKING FOR BEGINNERS|A Complete Guide

EASY WEBSITE HACKING FOR BEGINNERS |A Complete Guide| : REMEMBER : RULE 1. Destruction of anyone's hard work is a shame and nothin...