All Tricks

By Parth Makadiya How To Hack FACEBOOK ? Hello friends ! Previously I've posted different ways to hack the user account of Email Server or Social Networking site. For more information please click  here . Today I'll illustrate the  SESSION HIJACKING technique to hack FB Account. In this scope I will be using  BACKTRACK , a Penetration Testing Distribution   integrated with the below tools for Network Scan, MIMA and Packet Analysis. 1. NMAP 2. ARPSPOOF 3. WIRESHARK And two below scripts which are compatible with  Mozilla Firefox  will be used for Cookie Injection: 1. GREASEMONKEY 2. COOKIE INJECTOR Techniques:     1. First Scan your network and find the target using  NMAP , a Network Scanner. In this case i got 192.168.1.3 as the Target. 2. Next I need to start the  IP Forwarding  which enables my machine to forward any network traffic it receives from the target to t...

NETBIOS HACKING By Parth Makadiya Hello friends...Hope you guys are enjoying my previous posts on XP hacking...Now I will show you how to hack a remote computer and gain access to its hard disk and printer...This technique is called NetBIOS Hacking ...NetBIOS stands for  Network Basic Input Output System ...It was originally developed by  IBM  and  Sytek  as an  Application Programming Interface  (API) for client software to access LAN resources...By default it runs on port 139...Ok, let's start NetBIOS :-) 1. Goto " start " and click " Run "... 2. Type " cmd " and click " Ok "...the Command Prompt will appear... 3. First use " nbtstat " command for manually interact with NetBIOS Over TCP/IP...All the attributes (switches) used with  nbtstat  command and their usage can be viewed... Syntax :   C:\>nbtstat -n An intruder could use the output from an  nbtstat  against your machines to begin gathering informati...

CLICKJACKING By Parth Makadiya What is Clickjacking ? Clickjacking  is a malicious technique of tricking web users into revealing confidential information or taking control of their computer while clicking on seemingly innocuous web pages. Clickjacking involves generating a fake graphical overlay on top of an existing Web page in order to visually change the Web page while preserving its functionality (buttons, forms, etc.). This is done with the intension of misleading users to interact with the hidden Web page while they believe they are interacting with a completely different Web site. Description: Using only CSS Z-INDEX and HTML IFRAME, an attacker can create a transparent victim web page that contains privileged buttons. Underneath this transparent IFRAME, the attacker puts content, like a game, that entices the user to click. You may think you're playing a game, when you're actually starting a webcam recording. Sample Script Code: <h...

SESSION HIJACKING By PARTH MAKADIYA What is Session Hijacking ? Session hijacking is the act of taking control of a user session after successfully obtaining or generating an authentication session ID. Session hijacking involves an attacker using captured, brute forced or reverse-engineered session IDs to seize control of a legitimate user's Web application session while that session is still in progress. TCP session hijacking is when a hacker takes over a TCP session between two machines. Since most authentication only occurs at the start of a TCP session, this allows the hacker to gain access to a machine. Techniques : There are mainly three methods used to perpetrate a session hijack. These are: 1. Session Fixation: The session fixation attack is a class of Session Hijacking, which steals the established session between the client and the Web Server after the user logs in. Instead, the Session Fixation attack fixes an established session on the victim's brows...

By Parth Makadiya What is Clickjacking? Clickjacking is a technique used by hackers or spammers to trick or cheat the users into clicking on links or buttons that are hidden from normal view (usually links color is same as page background). Clickjacking is possible because of a security weakness in web browsers that allows web pages to be layered and hidden from general view. In this situation what happens is that You think that you are clicking on a standard button or link, like the PLAY button or download button on an video or some stuff, but you are really clicking on a hidden link. Since you can’t see the clickjacker’s hidden link, you have no idea what you’re really doing. You could be downloading malware or making all your Facebook information public without realizing it. Some good hackers make ajax keyloggers and put them as javascripts over their fake websites and when you open them they retrieve all your passwords stored in web browser and records whate...

By Parth Makadiya What is Phishing ? Phishing is a way of deceiving your victim by making him login through one of your webpages which is a copy of the original one. By doing so the fake webpage will save his E-mail ID or username and password. This is used for criminal activities for stealing Credits Cards and So on. Now we are going to make a fake login page of Facebook Mobile. Lets start the tutorial... Step 1: Register a new Wapka Account First create a new wapka account from the link below. Step 2: Editing Wapka Texts Login to your Wapka account. Goto  Settings>Edit text> Forum/chat  and change the following words, Name:  Email or Phone  Text:  Password  Submit:  Log In  It's shown in the screenshot below. Click 'Edit' to save and Login to your account in ADMIN mode. Step 3: Create a new forum Create a new forum to save all hacked usernames and passwords in your site. You can do it by  Edit Site>For...

Using Diskpart in a Elevated Command Prompt 1.  If you have not already, you will first need to  delete the partition or volume  that you want to extend into to make it unallocated space. 2.  Open a  elevated command prompt , or a  command prompt at boot . 3.  In the elevated command prompt, type  diskpart  and press  Enter . (See screenshot below)   4.  In the elevated command prompt, type  list disk  and press  Enter . (See screenshot below) NOTE:   This is to help you ID the disk that has  Free  space that you want to extend into, and to see the disk size to make it easier to ID it's volume number in step 5. For example, Disk 1 .   5.  In the elevated command prompt, type  list volume  and press  Enter . (See screenshot below) NOTE:   Look for the volume number that has the same  Size  as from the size in step 4 minus the  Free  space. Fo...