Protect Yourself from Getting Hacked: Hacking Techniques

Showing posts with label Hacking Techniques. Show all posts

Hack Windows xp/vista/7 administrator password using pwdump7

right click on the image and click open image in new tab to see it bigger

Hi guys! Today in this article i am gonna show you how to hack Windows xp/vista/7 administrator password using pwdump7 .
I would like to tell you that this method cannot provide you 100% success, but this method is very effective and easy to use and mostly the passwords are cracked . I am here using windows7 . Note that your antivirus will alert you. Ignore it and make an exception to the resident shield of your antivirus. If you do not know how to make exceptions then google it :) .

So lets start. Download pwdump7. Click links to download . Place it to your desktop including its libeay32.dll file.
Run cmd.exe by clicking on Start and type in the search box "cmd" then press Enter.

Now write
pwdump7 > myfile.txt

This will write the LM or NTLM hashes into the myfile.txt which will be saved on your Desktop.
Now Download Cain & Abel . Install it, Open it. Click on Cracker>LM&NTLM Hashes.

Now right click anywhere between the screen then select Add to list. Click on Import hashes from a text file. Browse the myfile.txt by clicking "..." button.

Now you will see usernames on your screen. Select the username or all usernames whom you want to crack passwords. Right click>Dictionary attack>NTLM HASHES. Now Add the wordlist.txt from c:/program files/Cain/Wordlists if it is not shown. You can also make you own text file or download huge wordlists from the internet and add it for the cain to crack passwords.

Click Start! and after sometime you might see the cracked passwords. You can make acounts as example and try.

Do note that This is for EDUCATIONAL purpose only.

Also note that if your password is of 8 characters then Go for md5 hashes in Cain, here LM & NTLM hashes will not work.

Thanks for reading!

Any problems? Please mention it in comments .

Hacking facebook, gmail, yahoo accounts using Dark Comet RAT

14:36 Hacking Techniques, RATS

RAT (Remote Assistance Tool) is a software like team viewer which can control remote computers. With the help of this you can control your friends computer and can do many funny things like opening and closing his CD ROM, send him any error messages, play piano on his computer etc. :D . There are many rats software, I will use here Dark Comet RAT.

PROCEDURE:

screenshot 2

Download Dark Comet RAT from its official Website www.darkcomet-rat.com
Install it. Then open it and click on Dark Comet RAT>client settings>no-ip updater. Our ip address is generally dynamic which means the ip is changed after disconnecting and then connecting to the internet. So we need to make it Static ip(which will not change). We will do this with no-ip. Dont Worry i will tell you step by step.
In the no-ip updater click on get a free account(screenshot 1). You will get your No-ip host, username and userpass later after the registration in no-ip.com. To register on no-ip.com Go to no-ip.com then Click on No-ip free(screenshot 2). The rest process you know how to register if any problem please mention it in comments.

screenshot 1

After you are registered to no-ip.com. Login to no-ip.com. Click on Add a Host(screenshot3).

screenshot 3

Now only put your host name eg- yourhostname and click next. It will be created successfully. Now open no-ip updater(step 2) put No-ip host, Username and Userpass you just created. Eg- to No-ip host put the host you just created here it is yourhostname.zapto.org, and put username and userpass of no-ip.com. Then click update DNS.
Now download no-ip DUC from no-ip.com . Install it . Note that It will ask for your no-ip email and password. Now DUC will run on your computer, you can see the DUC icon in the taskbar. Note that you Don't close DUC.
Now open dark comet. Click on Dark comet RAT>server module>minimalist. A new stub window will open.(screenshot 4). Then you put your hostname in IP/DNS, you can also change the stub id icon and keyname as you like.(screenshot 4). Click on normal.

screenshot 4

Give it name example and save it. The stub will be successfully generated(screenshot 5). The file example.exe is SERVER(screenshot 5). Now Click on DarkComet RAT>listen to new port. Enter the port that you Entered before in the process of making server. Dark Comet will start listening to that port.

screenshot 5

You and victim must be connected to the internet. Now give this example.exe to anybody whom you wanted to test dark comet and opens example.exe on his computer. Now Dark Comet will alert you that 1 user is online. Now double click on it(screenshot 6). Many fun functions will be there(screenshot 6) and also a keylogger. If you don't know what is a keylogger then refer this article. Thus any the victim's account can be hacked using Dark Comet RAT. Enjoy...

screenshot 6

Note: This is for educational purpose only

If any problem please mention it in comments.

Hacking facebook, gmail, yahoo accounts using ardamax keylogger

12:44 Hacking Techniques, key-loggers

You must have heard about key-loggers. A key-logger records every keystroke that you type through your keyboard. In this article you will learn how to make a remote key-logger. A remote key-logger records keystroke of a remote computer and sends the keystroke to you through email. There are many key-loggers but i will use here ardamax key-logger.

PROCEDURE :

Download ardamax key-logger from here. Note your antivirus may alert you since it is a key-logger but don't worry allow it. Extract the 3 files. Now install full_akl.exe. now right click on task bar icon of ardamax key-logger and click enter registration key. Now register ardamax keylogger, the registration name and password are present in the pass.txt file that you have extracted.
Now again right click on the ardamax key-logger from the task bar then click on Remote Installation. Now follow the screen shots ->

here append means to join your remote keylogger to any software or image file . This can be useful to fool victim. ;)

All option should be Check marked. Then click next

If You want your remote keylogger password protected then click on Enable security and Enter password.

The self destruct feature will destruct the remote keylogger automatically after specific interval of time if you will check mark on it. If you dont want your remote keylogger to be self destruct then click next.

Check mark send logs every option. Select which option suits you best then click next.

Enter your email in SEND TO then type your email password.

I advise you to use gmail. If everything goes well then you will get test delivery message in your inbox.

I am neglecting some previous steps you just click next till you reach here(see screenshot above). Then click next. Turn your antivirus protection off for some time because it will delete the remote keylogger file.

The deployment package will create successfully. When you press ok a new window will open with the icon and name of the keylogger that you have given, you can change the name and icon as you like. Now give this

install.exe to your friends and their logs will be in your email including username and passwords. But as usual Antivirus softwares will be the problem. But luckily if the victim does not have Antivirus software installed then he can be hacked easily :)!!!

note :this is for educational purpose only.

Any problems please mention in it comments.

hacking facebook, gmail, yahoo accounts using Phishing

08:54 Hacking Techniques, Phishing

Go to facebook.com or any other site you want to make fake page. Right click anywhere then click on view page source. A new window will open containing the page source. Now copy everything from the page source window and paste it in notepad. Now find action= (by pressing CTRL+F then search action=) in the notepad. Remove https://www.facebook.com/login.php?login_attempt=1 and write example.php . Save it as example.html. We will upload this example.html later. It should look like this ->
Now go to www.my3gb.com and register. Download this file. Extract it. The zip file contains example.php. Upload example.php and example.html(the file we created before see step 1) to your my3gb account. (how to upload => click on control panel>file manager>upload files)
Now your phishing link is ready. Copy the link address of example.html from your my3gb account by right click on it and copy. Give this link to victim. When vicitm enter his login details, the email and password are stored in text file pass.txt which will be automatically created in your my3gb account. You can view the passwords by opening pass.txt. (See Image)

To protect yourself from phishing always see the website url.

NOTE : this is for educational purpose only .

When victim enters his login details and press login button he can be redirected to another website. So to fool the victim you can redirect him to another website. How?-> upload the .html page to my3gb that you want the victim to redirect to and copy its link from my3gb. Now open example.php and paste the link you have just copied where i have given place. Now this new example.php should be uploaded to my3gb in order to redirect vicitm.

Also my3gb suspend account within 2-3 days if they found phishing. So you must complete your phishing within time. If Any problems please mention it in comments ...