Showing posts with label hacking. Show all posts
Showing posts with label hacking. Show all posts

Tuesday, September 27, 2016

Hacking a Website Using Android phone in your hand

Hacking a Website Using Android phone in your hand


Hello everyone, today I will be 
teaching you how to hack a website using your android phones. Surprised and you might be thinking hows it possible to hack using your android mobile phone. Mostly 70% of the websites which are defaced by the hackers are done using the most common vulnerability i.e. SQL Injection.

We will be using an application called DroidSQLi to hack SQL injection vulnerable websites with our phone. So all we need are 3 things.
1.) DroidSQLi application installed on our android phone
2.) SQLi vulnerable website
3.) and obviously an android phone.

Lets get started, first of all download DroidSQLi Tool. It is an first automated SQL Injection exploitation tool for mobile phones. It supports the following type of injections.

Union Based Injection
Blind Injectin
Error Based Injection
Time Based Injection

All you need to do is enter the vulnerable website under Target URL and press on inject button. It will automatically select the best possible injection.


This post is By Hacker  Sachin Rastogi , follow for latest feeds

download now

Read More

Tuesday, September 6, 2016

Hacking into someones facebook account

Hacking into someones facebook account





HACK FACEBOOK PASSWORD USING EASY METHODS

Facebook is the latest teenage craze all around the world. I have seen many people wasting hours for finding different methods and ways for hacking their friends or enemys facebook account. Most of the sites claiming to teach easy facebook hacking methods are spam and try to sell you useless hacking ebooks or other senseless softwares.Some even claim to hack the facebook passwords for free for you. Wake up people and think logically. First let me make something clear to you, there is no such software or tool which will hack the Facebook account password for you, while you sit back and enjoy your cappuccino and dont even think of hacking into the facebook databases to get the passwords. But hacking facebook accounts is not completely impossible, i would say it can be done rather very easily if you decide to give your time and have some patience. There may be hundreds of ways to hack facebook account password, but here i am providing you some, which i am familiar with. This is a long post and i have tried to provide all the methods in great detail so bear with me.Now let us begin.


1) KEYLOGGING


Type:- software and hardware
Tools needed:- Keylogger software or keylogger device 
Special skills needed:- no special skills needed but some commonsense , some prior knowledge of the target and convincing power.
Main enemy:- Antivirus software and Firewalls.

Keylogging is one of the easiest and most widely used hacking method for hacking Facebook passwords. The word keylogging means to keep a track / log of the keys pressed on the computer.There are mainly two ways of keylogging, Software and hardware.

1Hardware:- Special computer devices for keylogging are available. They are connected to the keyboard wire and then to the CPU. It looks like the keyboard wires part and cant be easily detected.When needed the device can be disconnected and the logs can be viewed.
*Bad points:- This method is mostly not preferred for hacking facebook passwords, as the devices are costly and need physical access to the computer.

2Software :- There are thousands of different keylogger software which provide the user with a wide range of options.From them the keylogger which can be remotely installed is preferred for hacking Facebook passwords.They keep log of the keys pressed on the targets computer while remaining hidden and after some specific time send it as a email to the user without the targets knowledge..
*Bad points :-Most of the keyloggers are detected by the Antivirus and Firewall softwares, but some keyloggers are able to bypass the Antivirus and Firewall software. You also have to convince the target to install the keylogger while remote installing it.

Personal Tip:- Try the keyloggers which come under the parental control category which are used by parents to keep an eye on the childs online activities. This keylogger are mostly Antivirus and Firewall friendly. The AV and firewall wont detect them because if they did detect it then the child will come to know about it and it will be of no use. The only short coming of these keylogger is that they dont have remote installation feature.


2) PHISHING

Special skills needed:- no special skills needed but some convincing power.
Many enemy:- Intelligent targets.

Phishing is the most widely used hacking method for hacking Facebook passwords. In phishing the attacker sends the target a link. When the target clicks on the link, it takes the target to a fake website which looks same as the real Facebook login page. The attacker convinces the target to log in through that page. When the target types his password and clicks the log in button, the password is instead send to attacker and the target is again redirected to the real website.

Here is a tutorial about phishing.

Step 1) First you must sign for a free webhosting service likewww.byethost.com
And register your subdomain.
after signing you will have a subdomain like www.yourname.byethost.com

Step 2) Now login to your account go to "control panel" then in site management option go to "online file manager" and open the folder "htdocs".

Step 3) Now DOWNLOAD THIS FILE  (Alternate link)to your computer add extract the file. Inside the folder you will find two files index.htm and write.php.

Step 4) Now replace the index.htm file in the "htdocs" of the "online file manager" with the file index.htm of the phisher folder in your computer and also upload write.php file in "htdocs" thats it! you are done.

Step 5) Now your homepage www.yourname.byethost.com has become a phisher. open it, you will see that your page www.yourname.byethost.com has become the login page of the site you want to hack.now all you have to do is send this link to the person whose account you want to hack.when he tries to login through it you will receive a file password.html in your "htdocs" folder of your phpnet.us account which contains the username and password of your victim. 

Personal Note:- The attacker must have a very good convincing power to hack the facebook password with this method. Please try this method carefully as now it is widely known and the target may soon guess the attackers intentions. The target may report the fake site and you may get in trouble. 


3) HTTP SESSION HIJACKING (Cookie Stealing)

Tools needed:- FIRESHEEP software and a laptop, as this is a wireless Internet vulnerability.
Special skills needed:- No special skills is needed.
Main enemy :- Blacksheep  

This method is a bit less known but in recent months it has become widely popular due to the introduction of the software FIRESHEEP. When you log in to your account at a website, your web browser sends your username and password to the website server. The password is first encrypted and then send over the network. Then the server checks the username and password against the database and if they both match then sends to the users browser a "cookie" (a text which the browser uses for further requests to the web server) but unlike the password the cookies are not encrypted and are sent as it is over the network, this cookies can be easily captured as they travel through the network or a busy WI-FI. The newly released Firefox extension "FIRESHEEP" makes it more easy. Actually so easy that even a total nube can capture this cookies. For a detailed tutorial on Firesheep  CLICK HERE

PERSONAL NOTE:- The addon Firesheep had become very popular recently so software Blacksheep was developed which stops Firesheep. 



4) SOCIAL ENGINEERING

Type :-Psychological
Special skills :- Patience and Confidence.
Main enemy:- intelligent target.


This is not a sure way of hacking facebook passwords but given the time and Patience can yield pretty interesting results.Social engineering attack means to gather information from the target or by using the prior knowledge of the target and then use it to hack the targets facebook password by guessing the password or resetting the password. Gather basic information about the target like 
  • Birth date
  • Mobile number
  • The skill he is good at.
  • favourite historical personality etc
and from this information try to guess the target password you will be surprised to see how many people have such guessable passwords.

Personal Note:- Though this is a effective method dont waste too much time in it as there are other aspects of social engineering which i am know presenting in front of you try them.

FORGOT PASSWORD HACK
Type:- it is a type of social engineering.
Special skills needed:- Logic.
Main enemy :- Intelligent targets.

Every social networking site has a password retrieval system to help the user in case he or she forget their password. Facebook also has a password retrieval system which can be wisely used to hack facebook accounts.

To hack someones account get acces to his primary mail system . This can be done by resetting password using victims phone or by his email.

5) Revealing Saved passwords in Firefox.

If you have access to the victims computer. You can check whether the passwords are saved in his browser. By clicking settings tab , open manage password tab, click show password.
NOTE:- If any of the above procedure or link is not working properly, please report. I would be very grateful. Thank you. 

download now

Read More

Wednesday, August 31, 2016

Best Android hacking apps 2016

Best Android hacking apps 2016


Top 9 Android hacking applications 2016

Android has emerged as the top mobile operating system, we have seen a great rise in the Android hacking apps. For our readers, we have prepared a list of the best hacking apps for Android that can be used by a technology enthusiast, an IT security administrator, or an ethical hacker. 

Best Android hacking apps 2016

1) AndroRAT - stands for Android and RAT (Remote Administrative Tools). This top hacking tool was released a long time ago as a client/server application. The app aims to give you the control of the Android system remotely and fetch the information from it. This Android app runs as a service right after the boot. So, a user doesn’t need to interact with the service. The app provides you the ability to trigger the server connection by a call or SMS.

The features in this useful Android hacking app include collecting information like contacts, call logs, messages, and location. The app also allows you to remotely monitor received message and state of phone, making a phone call and sending texts, taking picture from camera, opening URL in the default browser etc.

Link : https://github.com/wszf/androrat

2) Hackode - is an Android app which is basically a collection of multiple tools for ethical hackers, IT specialists, and penetration testers. In the app, there are three modules –Reconnaissance, Scanning, Security Feed — available in the application.

With this app, you get the functionalities like Google hacking, SQL Injection, MySQL Server, Whois, Scanning, DNS lookup, IP, MX Records, DNS Dif, Security RSS Feed, Exploits etc. It’s a great Android hacking app to start with and it doesn’t ask for your private information to operate.

Link: https://play.google.com/store/apps/details?id=com.techfond.hackode

3) zANTI - is a reputed Android hacking suite from Zimperium. This software suite comes with multiple tools that are widely used for penetration testing purposes. This mobile penetration testing toolkit allows the security researchers to scan a network easily. This toolkit allows the IT administrators to simulate an advanced hacking environment to detect multiple malicious techniques.

zANTI could be called an app that brings the power of Backtrack on your Android device. As soon as you login into zANTI, it maps the entire network and sniffs the websites being visited along with their cookies — thanks to ARP cache poisoning on devices.

The various modules in the app are network mapping, port discovery, sniffing, packet manipulation, DoS, MITM, and more.

 Link: https://www.zimperium.com/zanti-mobile-penetration-testing

4) FaceNiff - is a top Android hacking app that allows you to intercept and sniff your WiFi network traffic. This tool is widely used to snoop into people’s Facebook, Twitter and other social media websites using your Android device. This hacker-favorite tool steals cookies from WiFi network and gives an attacker an unauthorised access to victim’s account.

FaceNiff is developed by Bartosz Ponurkiewicz — the same developer who wrote Firesheep for Firefox hacking on desktop.

Link: http://faceniff.ponury.net/

5) Droidsheep - is an effective hacking app developed for security analysts interested in playing with Wi-Fi networks. The app has the ability to hijack the web session profiles over a network and it works with almost all services and websites.

As you fire up the Droidsheep app, it acts a router that monitors and intercepts all the Wi-Fi network traffic and fetches the profiles of active sessions. With this app, one can sniff Facebook, LinkedIn, Twitter and other social media accounts.

DroidSheep Guard, another version of app, helps you to detect ARP-Snoofing on the networks i.e. the attacks by FaceNiff, Droidsheep, and other software.

Link: http://droidsheep.de/

6) DroidBox - is an app that offers dynamic analysis of Android applications. Using the app, one can get a wide range of results about the hashes for the APK package, network traffic, SMS and phone calls, information leaks via different channels etc.

This top Android hacking application also gives you the ability to visualize the behaviour of an Android app package.

Link: https://code.google.com/p/droidbox/

7) APKInspector - is an app that allows you to perform reverse engineering tricks (sample BMT PLDT WiFi apk). With this app, you can get the graphic features and analysis functions for the users to get a deep insight. This powerful Android hacking tool helps you get the source code of any Android app and visualize the DEX code to erase the credits and license.

 Link: https://github.com/honeynet/apkinspector/

8) Nmap - One of the most popular network scanning apps for desktop can also be used on Android operating system. Nmap works on both non-rooted and rooted phones. If you are a beginner Android hacker, this hacking app app is a must have.

 Link: https://secwiki.org/w/Nmap/Android

9) SSHDroid - is a SSH server implementation developed for Android that allows you to connect your Android device to a PC and run commands like ‘terminal’ and ‘adb shell’ and edit files. It provides an extra security later when you are connecting to a remote machine.

The app provides features like shared-key authentication, WiFi autostart whitelist, extended notification control etc,


Note: Some of this apps needs a rooted phone, this list just for educational purposes.

download now

Read More

Sunday, August 28, 2016

Hacking Reliance GSM mobile By Hacker Sachin Rastogi

Hacking Reliance GSM mobile By Hacker Sachin Rastogi


Get Any Reliance Gsm customer Detail

click here to check details

1. Enter the number of whom u want details..

2. Enter any fake email id.

3. And then click Continue.

And now u will get a screen with the number and customer name.

Note :-
Please Dont misuse or over use it :|
 Provided by Hacker Sachin Rastogi

100% Working Reliance GSM free GPRS Trick.... 

just DiAl *123*099#

Datz Done..!!!
ENjoy..!!
U will shortly Receive a massage saws sucessfully reacharged with Rs.99...!!!!

  Its working fine..!!!!!
Provided by Hacker Sachin Rastogi

Here is new trick..!!
First go here and give the required information

    http://rcom.co.in/rcom/rworld/music/mobileCallerUser_screen1.jsp?plan=postMobileNet

       -> Enter your name and reliance mobile number and you will get password by sms to the that given mobile no. ( Note :- Use 0 before your mobile no. like 0xxxxxxxx )

And Then you will receive some pin like password in your mobile by sms
->Keep the message open in mobile and get to computer

-> Now go to the below link and enter your mobile number and received pin.

    http://rcom.co.in/rcom/rworld/music/MobileAuthentication.jsp?AppID=109&plan=postMobileNet%2099

Now Take Your mobile and dail *367 and here the balance
Now enjoy free gprs for 1 month in mobile and pc.
Use Rcomnet Setting

After One month after the data or validity gets over deactivate the plan by calling customer care and then again click on the second link and get your plan activated

Done...!!!

 Posted by Hacker Sachin Rastogi

download now

Read More

Friday, August 19, 2016

Top android Hacking Software For professionals only

Top android Hacking Software For professionals only


Hack Code:
The hackers Toolbox is an application for penetration tester, Ethical hackers, IT administrator and Cyber security professional to perform different tasks like reconnaissance, scanning performing exploits etc.  
Download


AVD Clone:
 Clone an Android Virtual Device for easy distribution through the Android SDK Manager. You can create an AVD preinstalled with the apps and settings you need, and distribute it to others by having them point their Android SDK Manager to your repository.
  Tool made by Security Compass. Download


APKInspector
 : The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code. APKInspector provides both analysis functions and graphic features for the users to gain deep insight into the malicious appsDownload


Burp Suite:  It is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing
Download


Androguard:   Create your own static analysis tool,; Analysis a bunch of android apps,; Analysis . Open source database of android malware.
Download 



Android Framework for Exploitation :
Smartphone Pentest Framework: Rather this tool allows you to assess the security of the smartphones in your environment in the manner you’ve come to expect with modern penetration testing tools.
Download


Android Network Toolkit (ANTI) 


This app is capable of mapping your network, scanning for vulnerable devices or configuration issues. It is for use by the amateur security enthusiast home user to the professional penetration tester, ANTI provides many other useful features such as:
easy connection to open ports, visual sniffing (URLs & Cookies) and - establishing
MiTM attacks (using predefined and user-defined filters), Server Side / Client Side Exploits, Password cracker to determine password’s safety level, Replace Image as
visual in demos and Denial of Service attacks. All this is packed into a very user-friendly and intuitive Android app (and soon to be released iOS app).
Download

->ANONdroid v. 00.00.008 : JonDonym proxy client for Android



ANONdroid is a client application for theAN.ON anonymisation service. This service allows a user to browse the Web anonymously.

ANONdroid acts as a proxy for your internet applications and will forward the traffic
of your internet applications encrypted to the mix cascades.

ANONdroid uses the core libraries of JonDo with a smartphone compatible GUI.

Download

Am I Hacker Proof

Am I Hacker Proof scans your network, computer or website from the outside as a hacker would, looking for vulnerabilities. Once it finds the vulnerabilities, it will email or text you
 letting you know how many vulnerabilities you have. In addition, in the paid version you can check to see if your voicemail on your cell phone is hacker proof.

This App does not use any resources on your phone. Once you start a scan you will be 
notified via email or text your scan started. When your scan is completed you will be notified again that your scan is complete.

Am I Hacker Proof includes these services for free:
- Choose from three types of scans: A “Quick” scan (up to four hours), a “Complete” scan
 (can take up to four days to complete), and a Web site scan (searches for vulnerabilities in certain types of Web sites; currently supports WordPress Web sites).

- You can perform a scan on any Web or IP address.

- You can scan up to 10 times a month.

- Built- in tools – Ping, Traceroute, Whois, ISP/E-mail Service Providers database and real
 time cyber security news feeds.
- Your reports are saved in a PDF file that you can read on your device or forward to any email address you like.

- Your account on your device works on the website www.AmIHackerProof.com so you can have access to more applications.

-> Voicemail Hacking.


- Built-in tools – Ping, Traceroute, Whois, ISP/E-mail Service Providers database and real time cyber security news feeds.

- Search through the scans you performed by address, time, number of vulnerabilities, or status.

- You get an email and text message letting you know the number of vulnerabilities found on that IP address or website.

Download


Andro Rat
AndroRat is a remote administration Android tool.
you can bind this spyware tool with the other android application and ask the victim to download this app.  It can read all messages, contacts, records and acall without knowing of the user.
Download


Droid Pentest: Its help you to find all android apps for penetration testing and hacking so you can make complete penetration test platform . This Tool developed by Nikhalesh Singh.
Download


Android SDK: A software development kit that enables developers to create applications for the Android platform. The Android SDK includes sample projects with source code.
Download


DroidBox: Its developed to offer dynamic analysis of Android applications. The following information is shown in the results, generated when analysis is ended:
•    Hashes for the analyzed package
•    Incoming/outgoing network data
•    File read and write operations
•    Started services and loaded classes through DexClassLoader
•    Information leaks via the network, file and SMS
•    Circumvented permissions
•    Cryptography operations performed using Android API
•    Listing broadcast receivers
•    Sent SMS and phone calls
Additionally, two images are generated visualizing the behavior of the package. One showing the temporal order of the operations and the other one being a treemap that can be used to check similarity between analyzed packages.
Download


Dex2jar: dex2jar is a lightweight package that provide you with four components in order to work with .dex and java .class files. dex-reader is designed to read the Dalvik Executable (.dex/.odex) format. It has a light weight API similar with ASM.
Download


Jd-gui: JD-GUI is a standalone graphical utility that displays Java source codes of “.class” files. You can browse the reconstructed source code with the JD-GUI for instant access to methods and fields.
Download

Wifi Protector - Protect Your Android From Wi-Fi Sniffing Attacks
 The only app that is able to countermeasure "Man In The Middle" attacks on    Android  platform - Wifi Protector. No other app provides this type of high network security. Protects your phone from tools like FaceNiff, Cain & Abel, ANTI, Ettercap, DroidSheep,  
NetCut,and all others that try to hijack your session via "Man In The Middle" through ARP spoofing / ARP poisoning.
Download

-> Free Avast Antivirus For Android Security

  Full-featured Antivirus and Anti-Theft security for your Android phone.
   By using Avast Mobile Security in your Android phone, your cell phone will be                         protected  by virus, threat, hacker, even it’s able to minimize your loss if your Android       cell phone is stolen. The antivirus component supports real-time protection and                    automatic updates. Updates can be configured to only be downloaded over certain
  types  of connections and the interface can be protected with a password.
Protect personal data with automatic virus scans and infected-URL alerts. Stop hackers by adding a firewall (rooted phones). Control anti-theft features with remote SMS commands for: history wipe, phone lock, siren activation, GPS tracking, audio monitoring, and many other useful tools.
  Call and SMS filtering can help device owners block annoying advertising calls or spam   text messages. Users can define groups of phone numbers and configure the blocking intervals for them.The firewall component is only available for rooted devices because it requires special system-level access to enforce its rules. Device owners can use it to block individual applications from accessing the Internet over certain types of connections.

Download

Wi-Fi Key Recovery

 ->You need root to use this application.
 ->You need to have connected to the network in the past.
 -> This app cannot "hack" into an unknown/new network.

Have you ever forgotten the password of your home WiFi network, or the one you setup for your parents a few months back?

This application will help you recover the password of a wireless network you have connected to with your device in the past.

You can then either tap on an entry to copy it, or export the list to SD, or share it using the standard Android sharing facilities.

  It does not crack the network, or use the MAC/SSID address to deduce the password. It    simply reads it from the device itself. 

Download

download now

Read More

Sunday, August 14, 2016

Hacking watsapp Account By unordinious sachin

Hacking watsapp Account By unordinious sachin


How to hack WhatsApp account

DISCLAIMER : All contents of this article are provided for information and educational purposes only.
How to hack WhatsApp account
METHOD 1 : MAC Spoofing
Step 1
How to hack WhatsApp account
First of all, completely uninstall WhatsApp from your phone.
Step 2
How to hack WhatsApp account
Obtain someone else’s phone which you want to access.
Step 3
How to hack WhatsApp account
And find the MAC address of that phone. It’ll be in six pairs like-  01:43:65:87:98:cb
For Android, go to Settings – About phone – Status – WI-Fi MAC address.
For iPhone, go to Settings – General – About – WI-Fi Address.
For Windows phone, find this in Settings – About – More info – MAC address.
For BlackBerry, go to Options – Device – Device and Status info – WLAN MAC.
Step  4
Now find your MAC address also and save both MAC addresses at any safe place.
Step  5 
How to hack WhatsApp account
Another step is install MAC spoofing apps for changing the MAC address of your phone. For iPhones install MacDaddy X or WifiSpoof. And for Android you can install some free apps like BusyBox and Terminal Emulator, which are available on google play store.
Step 6
Now open app, in the terminal, type “ip link show” to see a list of interfaces. Identify the one that has your MAC address — for this example, we’ll use the eth0 interface. In the terminal emulator, enter “IP link set eth0 address XX:XX:XX:XX:XX:XX” and “ip link set eth0 broadcast XX:XX:XX:XX:XX:XX”, where eth0 is the interface you identified and XX:XX:XX:XX:XX:XX is your target’s MAC address. To check that you’ve successfully changed your MAC address, enter “ip link show eth0.”
Step  7 
How to hack WhatsApp account
Install WhatsApp on your phone but do not enter your phone number, enter your target’s phone number to set up WhatsApp rather than your own.  Now catch the target’s phone second and last time for receiving whatsapp verification code, after getting that code, delete that message from the target’s mobile phone. Now all tasks have been done ENJOY!!
How to hack WhatsApp account
Step 8
When you no longer need to access your target’s WhatsApp account, change your MAC address back to what it was. By following the same method as above.

METHOD 2 : Spy Software
How to hack WhatsApp accountUsing a spy software program is the easiest way to spy on WhatsApp messages. Although there are a handful of companies marketing substandard WhatsApp spy programs on the market today, there exists a few genuine products as well that are worth considering. One of the best software to spy on WhatsApp is mSpy which is known for its quality and top notch features.You will have to download and install the mSpy app onto the target phone on which you need to monitor WhatsApp messages..For this you should have the target phone in your hand at least for a few minutes.
How to hack WhatsApp account
Once the installation is complete, the monitoring process of WhatsApp messages will begin and the recorded logs are silently uploaded to your mSpy account. You can login to your online account at any time to view the logs containing WhatsApp messages and other activity details.

download now

Read More

Free ebooks To Learn Hacking By Unordinious Sachin

Free ebooks To Learn Hacking By Unordinious Sachin


Download Free E-books about Hacking


Hello guys, if you want to learn more about Hacking & Computer Security ,i uploaded below eBooks on dropbox.Download link is in end.

List of Books are as follow.

(1)CEH(Certified Ethical Hackers)2010V6.

(2)Hacking Wireless Networks For Dummies.

(3)H gray hat hacking.

(4)Blind_SQLInjection.

(5)backtrack-4-assuring-security-by-penetration-testing.

(6)Collections of Ankit Fadia Hacking Book.

(7)Secrets of Reverse Engineering.

(8)Social Engineering toolkit

(9)Ethical Hacking and Countermeasures- Web Applications and Data Servers.

New books Added

(10)CSRF attack & Defense

(11)Armitage guide

(12)Pass-the-hash attacks: Tools and Mitigation

(13)HACKING: THE ART OF EXPLOITATION


(14)XSS Attacks - Exploits and Defense


(15)Seven Deadliest Network Attack 


Download link:- Please click here (Sachin Rastogi)

download now

Read More