7 Apr 2012

0 Facebook Hacker V1.0 - A Keylogging Software


8
  
  We have wrote several articles on Facebook Hacking, The most recent one we wrote was on "Top 10 Ways How Hackers Can Hack Facebook Accounts In 2012". Which received tremendous amount of responses. However in today's article we would like you to introduce you a software named "Facebook Hacker. Hacking facebook accounts using phishing methods are out of the fashion these days. A new tool known as facebook hacker is introduced. A dangerous tool for the people in need of other’s username and passwords.


This tool is extremely easy to connect and use. All you have to do is give an email address and a password where the stolen information is to deliver. Can’t be easier than that.

Just type in the email address and password and then click on the build button. A new “SERVER.EXE” file will be created and most of the work is already done. Now the big part comes. Just send this file to the victim. Rename it, change the icon and make it more presentable so that the victim opens it for sure.

As soon as the victim opens the file, Server.exe will get all the passwords saved and facebook account credentials and will give them to you. To avoid detection, the facebook Hacker will also look for all the processes related to a security suite and kill them upon detection. The most important thing this software does is it kills all the security suite detecting it.


You should know how to protect yourself from such threats. BitDefender detects this as a Trojan. In order to stay safe ensure that you update your antivirus regularly. Also, remember not to run files you may receive as attachments or via IM, or at least, to scan them beforehand.

Download Facebook Hacker V1.0 here

0 Hacker Arrested For leaking 6 Million Passwords


CSDN hacked(Hacking news:www.rafayhackingarticles.net)The Chinese Police has arrested a suspect, nicknamed Zeng, who was nabbed in Wenzhou east China's Zhejiang Province, on February 4 after an investigation into the case. He is reported to have stolen around 6 million passwords from China's software developer network. He is in police custody on charges of illegal data acquisition. According to the officials the leaked information contained ids, passwords and other personal information in plain text.

Looking at the hacked information the police officials were sure that the data was hacked before July 2010. Zeng got caught because he himself had once posted that he has gained the control of the CSDN database and wanted to contribute for the website. He has accepted that he entered the database through a system loophole.

After the arrest, the Beijing Police has punished CSDN for keeping poor security of the database. CSDN has announced that its database has been completely secured since September 2010 and the customers need not fear of another security breach.

Author

Ajit Singh(www.coolestwebsite.co.cc)

0 Hijacking Facebook Users With Clickjacking Attack


Clickjacking is one of most used attack on Facebook. Scammers use this attack to increase like of a Facebook page and spread some malicious links on Facebook user’s profile. Most of the strange looking auto spreading scams on Facebook are Clickjacking attacks.


Clickjacking name is taken from click Hijacking. In this attack, hacker hijacks users’ click to perform some actions on the webpage. This attack is also known as User Interface redress attack, UI redress attack or UI redressing. In this attack, hacker tricks innocent users to click on something which is not the same thing user is clicking. It means user tries to click on some link button for some specific task while the button or link performs something else.

How this attack works?

As the name suggest, hacker hijacks the click of the user. But this sounds complicated. In this attack, hacker use modified frames in the way that only a specific part of the webpage is visible on the page.
For example, imagine a hacker created a web site that has a button on it which says "click here for get free gifts". But, on the top of web page, hacker has embedded an iframe with a button for subscription directly on top of the "free Gifts" button. Victim visitor will try to click on free gifts button but instead actually clicked on the invisible Subscription button.

This attack is performed with the help of 2 iFrame. First of all we will add the target button to the top left of the webpage in an iframe. First IFrame is used to hide all other elements of the webpage which originally contains the button. Hacker hide border and scroll. This will make hard to identify the frame on the web page.

<iframe id="inner" src="http://hackingtricks.in" frameborder="none" scrolling="no" width="1000" height="3000"></iframe>
#inner { position: absolute; left: -600px; top: -600px ;}

Change the position and iframe size according to the button you are adding.
Now add this web page on target web page inside an IFrame at the position where we want to add the button. Second IFrame is used to add this button on the target web page where we want it to be clickjacked. Do not use border and scroll in this frame too. Now add some texts and images around this framed button so that it appears the part of the page. Also put some false message to get users click on the button.

LikeJacking:  Likejacking is not the different attack. It is the Clickjacking attack which is used to increase the like of a Facebook page or a Facebook post. Facebook got the solution to prevent this attack in the Facebook’s hacking event Hackathon. Although, Facebook has implemented many security levels to prevent this attack, but hackers always gets some way to perform this on facebook.

Protection against this attack: This is a harmful attack and can be prevented by server side and client side both.

Server Side Protection: Most successful server side protection against this attack is "Defending with Frame Breaking Scripts." In this web developer add a script on the web page which prevents the web page to be framed. This is the code which is used to prevent the page to be framed.
<script type="text/javascript">// <![CDATA[
 if (self == top) {
   var theBody = document.getElementsByTagName('body')[0];
   theBody.style.display = "block";
 } else {
   top.location = self.location;
 }
// ]]></script>
But there are few methods which can break the protection.

Client Side Protections: There are some add-ons and tools available which are used to protect browsers against this attack.

NoScript: No doubt, NoScript is the most useful Firefox add-on which protects users from many types of web attacks. This add-on also prevents users from clicking on invisible or “redressed” page elements of embedded documents or applets. This is the best security tool against this attack.

Ghostery: This is also a nice browser extension which is also used to protect users against this attack. This privacy browser enables users to detect and control tags, web bugs, pixels, and beacons on the webpage which can collect data from their web browsers.

As we know that there is no permanent solution exists to prevent this attack from the server side, we should try to add protections to our web browsing. So I will suggest all users to use client side solutions. If you use Mozilla Firefox, then you must have NoScript Add-on in your web browser. This will protect you against many types of web attacks.

Author Bio:

Deepanker verma is a security researcher and a computer programmer. You can follow his articles on http://hackingtricks.in and http://www.tricksndtricks.in

0 Is It Possible To Crack A Facebook Account?


We have discussed alot about popular password cracking methods such as Bruteforce, Dictionary attack and Rainbow tables. However a question I get asked frequently is if it's possible to crack a Facebook account. So I wish to clear concepts related to Hacking/Cracking Facebook accounts. First of all "Hacking a Facebook account" and "Cracking a facebook account" are both different terminologies.

Hacking a facebook account refers to foolproof methods such as Phishing, keylogging, Social engineering etc.
However the terminology cracking refers to the methods such as Bruteforce, Dictionary attacks etc.

Brute Force Attacks


Bruteforce is one of the most common and most reliable password cracking methodologies. A bruteforce attack tries all possible combinations against the medium, until the correct password is found. However the problem with a bruteforce attack is that as the password complexity increases, the time taken to crack a password also increases.

The chart above illustrates the time the estimated time taken by a computer in order to bruteforce a password, assuming that if it's capable of trying 10,000 passwords per second. However, the time taken can be reduced by adding the number of processors to the task. Therefore the only flaw with the attack is that it requires lots of potential. 

Dictionary Attacks

The only difference with a bruteforce attack and Dictionary attack is that "A Dictionary attack tries the passwords which we want it to try". Confusing?. In a dictionary attack we have the freedom to choose a huge list of words that people commonly use in their password (Depending upon the situation). The following video will help you understand more about Dictionary attacks.


Is It Possible To Crack A Facebook Account?


Coming back to the main topic of this article. A few hours back while I was watching hacking related videos on securitytube.net, I came across to a video in which the hacker claimed that one can use "Hydra To Crack A Facebook Password". However here is why a bruteforce attack won't work against a facebeook account.



Facebook and all other popular social networking websites lock an email account, after few unsuccessful login attempts. They either have introduced an "Account Lockout Feature" or they either have introduced an "Account Lockout" feature, which prevents an automated password cracking method to work. However, even if you get it working, A minimum facebook password length is about 6-characters. kindly refer to the chart and find out your success rate.

Likewise, if you have any questions, Feel free to ask.

2 || HACKED BY J@GU@R ||

HACKED BY JAGUAR HACKER
OWN3D BY J@GU@R
http://123mobiles.info/cgi-sys/suspendedpage.cgi
http://accasupport.com/cgi-sys/suspendedpage.cgi
http://accedeint.com/cgi-sys/suspendedpage.cgi
http://actresspk.com/cgi-sys/suspendedpage.cgi
http://adamjeekkpipes.com/cgi-sys/suspendedpage.cgi
http://aespak.org/cgi-sys/suspendedpage.cgi
http://agocltd.com/cgi-sys/suspendedpage.cgi
http://ajwaamakkah.com/cgi-sys/suspendedpage.cgi
http://ak-surgical.com/cgi-sys/suspendedpage.cgi
http://akberia.org/cgi-sys/suspendedpage.cgi
http://akberiafoundation.org/cgi-sys/suspendedpage.cgi
http://alawal.com.pk/cgi-sys/suspendedpage.cgi
http://alhafizoon.com/cgi-sys/suspendedpage.cgi
http://alhonain.com/cgi-sys/suspendedpage.cgi
http://alhujat.org/cgi-sys/suspendedpage.cgi
http://alinatextilesourcing.com/cgi-sys/suspendedpage.cgi
http://anasimtiaz.com/cgi-sys/suspendedpage.cgi
http://angelsproducts.com/cgi-sys/suspendedpage.cgi
http://apnahujra.com/cgi-sys/suspendedpage.cgi
http://apnakharian.com/cgi-sys/suspendedpage.cgi
http://apnarawaj.com/cgi-sys/suspendedpage.cgi
http://apnimodels.com/cgi-sys/suspendedpage.cgi
http://apnirecipes.com/cgi-sys/suspendedpage.cgi
http://approvearticle.com/cgi-sys/suspendedpage.cgi
http://aquakinpk.com/cgi-sys/suspendedpage.cgi
http://areehaindustries.com/cgi-sys/suspendedpage.cgi
http://asiavoip.net/cgi-sys/suspendedpage.cgi
http://babychoice.net/cgi-sys/suspendedpage.cgi
http://bajwa.com.pk/cgi-sys/suspendedpage.cgi
http://basicsofcomputer.com/cgi-sys/suspendedpage.cgi
http://beautifulsms.com/cgi-sys/suspendedpage.cgi
http://besafe.com.pk/cgi-sys/suspendedpage.cgi
http://bestbatterieshop.com/cgi-sys/suspendedpage.cgi
http://bhf.org.pk/cgi-sys/suspendedpage.cgi
http://biocarepharmaceuticals.com/cgi-sys/suspendedpage.cgi
http://bizznus.com/cgi-sys/suspendedpage.cgi
http://blinks.com.pk/cgi-sys/suspendedpage.cgi
http://bloomsinn.com.pk/cgi-sys/suspendedpage.cgi
http://blueskypk.com/cgi-sys/suspendedpage.cgi
http://bpwf.co.uk/cgi-sys/suspendedpage.cgi
http://burqmark.com/cgi-sys/suspendedpage.cgi
http://buzox.com/cgi-sys/suspendedpage.cgi
http://careerph.com/cgi-sys/suspendedpage.cgi
http://careerzone.edu.pk/cgi-sys/suspendedpage.cgi
http://chtextile.com/cgi-sys/suspendedpage.cgi
http://clearvisionconsultants.co.uk/cgi-sys/suspendedpage.cgi
http://clevelandinc.co.uk/cgi-sys/suspendedpage.cgi
http://comfowear.com/cgi-sys/suspendedpage.cgi
http://criminology.com.pk/cgi-sys/suspendedpage.cgi
http://csign.biz/cgi-sys/suspendedpage.cgi
http://cynosure-consultants.com/cgi-sys/suspendedpage.cgi
http://dailyinformationtimes.com/cgi-sys/suspendedpage.cgi
http://dailykafeel.com/cgi-sys/suspendedpage.cgi
http://dangerzworld.com/cgi-sys/suspendedpage.cgi
http://danishurdu.com/cgi-sys/suspendedpage.cgi
http://databackuptapes.com/cgi-sys/suspendedpage.cgi
http://deals9.co.uk/cgi-sys/suspendedpage.cgi
http://desitechs.com/cgi-sys/suspendedpage.cgi
http://devit-inc.com/cgi-sys/suspendedpage.cgi
http://devit-inc.com/cgi-sys/suspendedpage.cgi
http://digicomtechnologies.co.uk/cgi-sys/suspendedpage.cgi
http://digitaldevicesgroup.com/cgi-sys/suspendedpage.cgi
http://digitaldevicesonline.co.uk/cgi-sys/suspendedpage.cgi
http://diplomat.pk/cgi-sys/suspendedpage.cgi
http://dirasatulquran.com/cgi-sys/suspendedpage.cgi
http://dolphinshippers.com/cgi-sys/suspendedpage.cgi
http://doomagroup.com/cgi-sys/suspendedpage.cgi
http://doorstepdelivery.pk/cgi-sys/suspendedpage.cgi
http://doughtyis.com/cgi-sys/suspendedpage.cgi
http://drirfan.net/cgi-sys/suspendedpage.cgi
http://drirfan.net/cgi-sys/suspendedpage.cgi
http://e-landz.com/cgi-sys/suspendedpage.cgi
http://e-market.pk/cgi-sys/suspendedpage.cgi
http://easternhillsenterprises.com/cgi-sys/suspendedpage.cgi
http://economicsconcepts.com/cgi-sys/suspendedpage.cgi
http://ensys.pk/cgi-sys/suspendedpage.cgi
http://epsicept.com/cgi-sys/suspendedpage.cgi
http://esp-pakistan.com/cgi-sys/suspendedpage.cgi
http://esteeproducts.co.uk/cgi-sys/suspendedpage.cgi
http://epsicept.com/cgi-sys/suspendedpage.cgi
http://eyello.com/cgi-sys/suspendedpage.cgi
http://factsnfacts.com/cgi-sys/suspendedpage.cgi
http://fairylandhotel.com.pk/cgi-sys/suspendedpage.cgi
http://famind.com/cgi-sys/suspendedpage.cgi
http://fasttechnologiespk.com/cgi-sys/suspendedpage.cgi
http://favesland.com/cgi-sys/suspendedpage.cgi
http://feelyoungs.com/cgi-sys/suspendedpage.cgi
http://finantax.net/cgi-sys/suspendedpage.cgi
http://findqurantutor.com/cgi-sys/suspendedpage.cgi
http://fivestarproperty.com.pk/cgi-sys/suspendedpage.cgi
http://floodreliefpakistan.org/cgi-sys/suspendedpage.cgi
http://fnsultannews.com/cgi-sys/suspendedpage.cgi
http://fostertrading.net/cgi-sys/suspendedpage.cgi
http://freelinemovers.com/cgi-sys/suspendedpage.cgi
http://frescosweets.com/cgi-sys/suspendedpage.cgi
http://frm.com.pk/cgi-sys/suspendedpage.cgi
http://frrservices.com/cgi-sys/suspendedpage.cgi
http://funmastee.com/cgi-sys/suspendedpage.cgi
http://galyat.net/cgi-sys/suspendedpage.cgi
http://garghash.net/cgi-sys/suspendedpage.cgi
http://geopknews.com/cgi-sys/suspendedpage.cgi
http://glinksinternational.com/cgi-sys/suspendedpage.cgi
http://globalurduforum.org/cgi-sys/suspendedpage.cgi
http://goodlife-international.com/cgi-sys/suspendedpage.cgi
http://goodlook.com.pk/cgi-sys/suspendedpage.cgi
http://googlenewsarticles.com/cgi-sys/suspendedpage.cgi
http://gulfnetcall.com/cgi-sys/suspendedpage.cgi
http://ha.com.pk/cgi-sys/suspendedpage.cgi
http://hadienterprises.com/cgi-sys/suspendedpage.cgi
http://hafsaonlinequran.com/cgi-sys/suspendedpage.cgi
http://haiderekarartrust.com/cgi-sys/suspendedpage.cgi
http://haidernetwork.com/cgi-sys/suspendedpage.cgi
http://halo.pk/cgi-sys/suspendedpage.cgi
http://happysrproducts.com/cgi-sys/suspendedpage.cgi
http://hardbalochistan.org/cgi-sys/suspendedpage.cgi
http://hazara.edu.pk/cgi-sys/suspendedpage.cgi
http://haziqa.pk/cgi-sys/suspendedpage.cgi
http://healpharma.com/cgi-sys/suspendedpage.cgi
http://healthcarehospital.com.pk/cgi-sys/suspendedpage.cgi
http://helpforhelp.net/cgi-sys/suspendedpage.cgi
http://himalayan-natural-salt-lamps.com/cgi-sys/suspendedpage.cgi
http://hivoxgroup.com/cgi-sys/suspendedpage.cgi
http://hnbenterprises.com/cgi-sys/suspendedpage.cgi
http://holidayapartmentsmuree.com/cgi-sys/suspendedpage.cgi
http://homegrocerz.com/cgi-sys/suspendedpage.cgi
http://homeotreatment.com/cgi-sys/suspendedpage.cgi
http://hostingorbit.net/cgi-sys/suspendedpage.cgi
http://hujrashahmuqeem.org/cgi-sys/suspendedpage.cgi
http://hyprate.com/cgi-sys/suspendedpage.cgi
http://icetpu.com/cgi-sys/suspendedpage.cgi
http://icl-logistics.com/cgi-sys/suspendedpage.cgi
http://icl.gb.net/cgi-sys/suspendedpage.cgi
http://inshaprinters.com/cgi-sys/suspendedpage.cgi
http://iqtedar.net/cgi-sys/suspendedpage.cgi
http://irisevents.net/cgi-sys/suspendedpage.cgi
http://isisn.org/cgi-sys/suspendedpage.cgi
http://itxperts.com.pk/cgi-sys/suspendedpage.cgi
http://jabrannawaz.com/cgi-sys/suspendedpage.cgi
http://jalacreations.com/cgi-sys/suspendedpage.cgi
http://jamvi.net/cgi-sys/suspendedpage.cgi
http://jauhardegreecollege.com/cgi-sys/suspendedpage.cgi
http://jay2eff.com/cgi-sys/suspendedpage.cgi
http://jkrgranites.com/cgi-sys/suspendedpage.cgi
http://jpestate.co.uk/cgi-sys/suspendedpage.cgi
http://koolgirls.net/cgi-sys/suspendedpage.cgi
http://koolstars.com/cgi-sys/suspendedpage.cgi
http://kpi.com.pk/cgi-sys/suspendedpage.cgi
http://labourunity.org/cgi-sys/suspendedpage.cgi
http://lahorebuilder.com/cgi-sys/suspendedpage.cgi
http://lahorecantt.com/cgi-sys/suspendedpage.cgi
http://lavistapk.net/cgi-sys/suspendedpage.cgi
http://m2ask.com/cgi-sys/suspendedpage.cgi
http://magictech.com.pk/cgi-sys/suspendedpage.cgi
http://magmass.biz/cgi-sys/suspendedpage.cgi
http://malakfunsci.com/cgi-sys/suspendedpage.cgi
http://manglavision.com/cgi-sys/suspendedpage.cgi
http://marrithabets.com/cgi-sys/suspendedpage.cgi
http://mediastube.com/cgi-sys/suspendedpage.cgi
http://merawattan.com/cgi-sys/suspendedpage.cgi
http://mgarh.com/cgi-sys/suspendedpage.cgi
http://minervapk.com/cgi-sys/suspendedpage.cgi
http://mirovaimpex.com/cgi-sys/suspendedpage.cgi
http://mobivasglobal.com/cgi-sys/suspendedpage.cgi
http://montye.com/cgi-sys/suspendedpage.cgi
http://motorsexperts.com/cgi-sys/suspendedpage.cgi
http://movie-makers.tk//cgi-sys/suspendedpage.cgi
http://msb-group.com/cgi-sys/suspendedpage.cgi
http://msbkataskeyes.com/cgi-sys/suspendedpage.cgi
http://msgislam.com/cgi-sys/suspendedpage.cgi
http://mycc-online.com/cgi-sys/suspendedpage.cgi
http://mzj.com.pk/cgi-sys/suspendedpage.cgi
http://najmaakhtar.com/cgi-sys/suspendedpage.cgi
http://naseerproperty.com/cgi-sys/suspendedpage.cgi
http://naturalbeautysources.com/cgi-sys/suspendedpage.cgi
http://naturalsaltscreations.com/cgi-sys/suspendedpage.cgi
http://nayabsoft.com/cgi-sys/suspendedpage.cgi
http://neg.com.pk/cgi-sys/suspendedpage.cgi
http://ngosshelterassociation.com/cgi-sys/suspendedpage.cgi
http://nkf.org.pk/cgi-sys/suspendedpage.cgi
http://nyauffaq.com/cgi-sys/suspendedpage.cgi
http://ofpedia.com/cgi-sys/suspendedpage.cgi
http://onlinebizpromoter.com.pk/cgi-sys/suspendedpage.cgi
http://onwebsoft.com/cgi-sys/suspendedpage.cgi
http://pafc.pk/cgi-sys/suspendedpage.cgi
http://pak-media.com//cgi-sys/suspendedpage.cgi
http://pakconsultancy.com/cgi-sys/suspendedpage.cgi
http://pakeconomics.com/cgi-sys/suspendedpage.cgi
http://pakinformation.com/cgi-sys/suspendedpage.cgi
http://ww5.pakischat.com/cgi-sys/suspendedpage.cgi
http://pakistanonyxmarble.com/cgi-sys/suspendedpage.cgi
http://pakmw.com/cgi-sys/suspendedpage.cgi
http://pakprofit.com/cgi-sys/suspendedpage.cgi
http://pakunited.com.pk/cgi-sys/suspendedpage.cgi
http://pakwebhut.com/cgi-sys/suspendedpage.cgi
http://paspidapunjab.com/cgi-sys/suspendedpage.cgi
http://pathfinders.com.pk/cgi-sys/suspendedpage.cgi
http://pclapa.com/cgi-sys/suspendedpage.cgi
http://petroflo.com/cgi-sys/suspendedpage.cgi
http://phpocean.com/cgi-sys/suspendedpage.cgi
http://pillarsofpakistan.com/cgi-sys/suspendedpage.cgi
http://pkshops.com/cgi-sys/suspendedpage.cgi
http://prodigiousanalysts.com/cgi-sys/suspendedpage.cgi
http://pyf.org.pk/cgi-sys/suspendedpage.cgi
http://qae-ent.com/cgi-sys/suspendedpage.cgi
http://rabiabookspk.com/cgi-sys/suspendedpage.cgi
http://rabinkhan.com/cgi-sys/suspendedpage.cgi
http://radiant-school.com/cgi-sys/suspendedpage.cgi
http://rafiqsons.com/cgi-sys/suspendedpage.cgi
http://rcim3272.org/cgi-sys/suspendedpage.cgi
http://redhatuganda.com/cgi-sys/suspendedpage.cgi
http://redspots.org/cgi-sys/suspendedpage.cgi
http://resellerorbit.com/cgi-sys/suspendedpage.cgi
http://rganix.com/cgi-sys/suspendedpage.cgi
http://rimi-telecom.net/cgi-sys/suspendedpage.cgi
http://ringtomarket.com/cgi-sys/suspendedpage.cgi
http://rizviaparty.com/cgi-sys/suspendedpage.cgi
http://roadbikecycling.net/cgi-sys/suspendedpage.cgi
http://roundhouse.com.pk/cgi-sys/suspendedpage.cgi
http://rsitco.com/cgi-sys/suspendedpage.cgi
http://rvwintl.com/cgi-sys/suspendedpage.cgi
http://sabeelonet.com/cgi-sys/suspendedpage.cgi
http://saf.edu.pk/cgi-sys/suspendedpage.cgi
http://sasaaherbs.com/cgi-sys/suspendedpage.cgi
http://sasinternational.biz/cgi-sys/suspendedpage.cgi
http://scdo.org.pk/cgi-sys/suspendedpage.cgi
http://scoreyourhost.com/cgi-sys/suspendedpage.cgi
http://serene-group.com/cgi-sys/suspendedpage.cgi
http://sevenzero.org/cgi-sys/suspendedpage.cgi
http://shad1985.com/cgi-sys/suspendedpage.cgi
http://shelteraura.com/cgi-sys/suspendedpage.cgi
http://shetoldsecrets.com/cgi-sys/suspendedpage.cgi
http://sinawan.com/cgi-sys/suspendedpage.cgi
http://smartmoviez.com/cgi-sys/suspendedpage.cgi
http://ssconsultancy.com.pk/cgi-sys/suspendedpage.cgi
http://ssmediahome.com/cgi-sys/suspendedpage.cgi
http://stage.pk/cgi-sys/suspendedpage.cgi
http://starsph.com/cgi-sys/suspendedpage.cgi
http://sunrisecollegekhuzdar.com/cgi-sys/suspendedpage.cgi
http://sunrisefoundation.org.pk/cgi-sys/suspendedpage.cgi
http://systemspecialists.com.pk/cgi-sys/suspendedpage.cgi
http://taameerassociates.com/cgi-sys/suspendedpage.cgi
http://tajgames.com/cgi-sys/suspendedpage.cgi
http://tanzeelulquran.com/cgi-sys/suspendedpage.cgi
http://thebismillah.com/cgi-sys/suspendedpage.cgi
http://themanha.com/cgi-sys/suspendedpage.cgi
http://thestyleplanet.com/cgi-sys/suspendedpage.cgi
http://tiptoparticle.com/cgi-sys/suspendedpage.cgi
http://tjenterprise.com.pk/cgi-sys/suspendedpage.cgi
http://tsoftpk.com/cgi-sys/suspendedpage.cgi
http://tsoltech.com/cgi-sys/suspendedpage.cgi
http://uktimel.com/cgi-sys/suspendedpage.cgi
http://umuslim.com/cgi-sys/suspendedpage.cgi
http://unique-links.com.pk/cgi-sys/suspendedpage.cgi
http://united-enterprises.biz/cgi-sys/suspendedpage.cgi
http://vaairportsflyer.com//cgi-sys/suspendedpage.cgi
http://vohraestablishment.com/cgi-sys/suspendedpage.cgi
http://voipschannel.com/cgi-sys/suspendedpage.cgi
http://w3nations.com/cgi-sys/suspendedpage.cgi
http://webmasterextra.com/cgi-sys/suspendedpage.cgi
http://woman.com.pk/cgi-sys/suspendedpage.cgi
http://xakhera.com/cgi-sys/suspendedpage.cgi
http://xalion.org/cgi-sys/suspendedpage.cgi
http://yahoopress.net/cgi-sys/suspendedpage.cgi
http://youngpharmacists.com/cgi-sys/suspendedpage.cgi
http://youthcraft.net/cgi-sys/suspendedpage.cgi
http://zebaishcollection.com/cgi-sys/suspendedpage.cgi
http://zeoliteintl.com/cgi-sys/suspendedpage.cgi
http://zhouandchenltd.co.uk/cgi-sys/suspendedpage.cgi
http://ziasoft.net/cgi-sys/suspendedpage.cgi

27 Mar 2012

0 Detectling keyloggers and All malicious softwares


This tutorial mainly Focusing on how to detect if your Operating System is infected with any Virus, keylogger or RAT.

For this we should First understand the Functionality and meaning of all of them.

Virus : A malicious Software which Replicates itself and takes over the system and do anything for which it is programmed without user permission or will. These kind of programs are usually programmed by programmers/coders to infect a system.


Keylogger: This is a program which save all the keys pressed from the keyboard and send them to the attacker/programmer/coder/owner whom se ever it is built by. These programs focus on getting the users keylogs and to survive in the system they also includes some capablities like Virus so that they can also stealth and replicate themselve to get some more targets. A keylogger may have many capablities like a Virus. They can be of many type which includes FTP Keyloggers, Email Keyloggers, PHP keyloggers etc


RAT (Remote Admin Tool): This one is the most Advanced program in these malicious softwares because once it enters the system it will give complete control of that system to the attacker/programmer/coder/owner whom se ever it is built by. This kind of program mainly focus on waiting for the Masters Order and when ever he do any order they just have to do the same. But again in order to do such things it need to survive into the system without getting detected by the user or the admin. Such Programs include different capabilities like keylogging, Backdooring, Getting Remote Access, Web Cam Hack, Files Theft etc.

As by now we know the functionalities of all these we can move on how to detect them running in your system.

Following are some of the common symptoms if having your computer Infected:

1. Usually pc gets Slow/Hang while working.
2. Hang Up event takes place again and again after particular time gaps.
3. Getting Error message when running TaskManger/Registry/CMD/Msconfig.
4. TaskManger/Registry/CMD/Msconfig gets killed as they run.
5. List Processes in running under Current user using cmd - tasklist /fi "username eq %username%".
6. Use HTTP debugger and check your traffic to trace out its activity.
7. Use cport to track the applications that are connecting to a port and remote computer.
8. Use "Process Explorer" to track hidden processes.
9. Use "Reg From App" & "Process Activity View" to track Registry and files changes bieng made by any program.
10.Detecting By the Process name is also a easy task but it needs some experience to identify the malicious process from the taskmanager processes tab.

0 What are Keyloggers??

Hey This is a very basic tutorial on Keyloggers.
After Reading this tutorial you will be enough clear on what are keyloggers,
how they work, how to use them, different types of keyloggers, what is the
keyword FUD, How to detect them, how to infect your victim with any of the
Key logger server.
So lets start with the very basic about the Key loggers. Yeah its quite
clear by its name that its a device or a Software that is used to Log the
keys. So lets see what are they Types of Key loggers available.
1. Offline keylogger.
2. Email Keylogger.
3. FTP keyloggers.
4. PHP keyloggers.
5. Hardware keyloggers.
So a offline keylogger is basically a Keylogger that Keylogs the victim and
save those logs in the same Machine so it dont need any internet connection
to work. But these kind of keyloggers need physical access to the Machine to
get it installed and get the Keylogs file. I guess you are not much
interested in such keyloggers..
Now lets give a look to Email loggers....yeah these keylogers are
configured to send the keylogs on email so yeahhhh...you would love them to
get your victims all the passwords and email accounts and all the details
sent to you on your mail account.....damn these days kids are really
criminal.
okey!! well Email Keyloggers makes the logs data quite messy but yeah here
comes the FTP keyloggers which are configured to send the keylogs on FTP and
yeah these keylogs are really easy to read and fun to use.
PHP keyloggers...hmmm these kinda keyloggers are new...ahmm not actually new
but yeahh newer than the others. So these are the keyloggers that send the
data to a php file and that php file save that data in the hosting. so Such
keylogger bieng new are not usually easily detected by the Keyloggers.
hmmmm Hardware keyloggers..such keyloggers are just for professional
use...coxz i dont think that you will love to spend your money in getting
that device which need physical access to the machine as well.
so using them is not at all a big deal...it just you need to buy them so
leave it i dont wanna waste our time talking much about them.
======HOW TO INSTALL A KEYLOGGER======
i dont thing you are that n00b that you cant install a offline keylogger in
victim pc. Coz a Offline keyloggers needs simple installation. Lets talk
about how to install a remotely installable keylogger in victims pc.
there are many ways you can install a Keylogger in victim pc remotely some
of them are:
sending the Server using email.
sending the server using Social engineering on SOcial Networking Sites.
Sending the server using Pendrive
Hide them under games or any software which your frends need.
Hide them Under WOrd or PDF Files
etc...
Okey i dont need to tell you much about the above ways of sending the
keylogger in victim pc.....hmm lemme tell you that server is the executable
file that is specially configured to get installed in a hidden mode on a one
time execution.
Many times people have problem sending keylogger in a mail. yeah right most
of the email providers block exe files as attachment. yup so here is an easy
way just upload yours server on any webhosting and send its link when the
user will click it will automatically downloaded.
Hiding your server in other application needs a special software called
Binders. These are used to Bind two exe files or JPG or any pdf or DOC files
with a exe.
Okey but if you want to hide them under a Word or PDF file then you need to
do this with metasploit. HOw to do this???!! ahmm its out of reach of this
Tutorial [:D]
what is FUD...if you dont know it then its FUlly UnDetectable. YOu can also
make your keylogger server undetectable using Crypters. and some other ways
which will be discussed later in my Next tutorail.
Happy hacking have fun.

 

Devil Dawn [ Irzzat Badut ] Copyright © 2011 - |- Template created by O Pregador - |- Powered by Blogger Templates