Showing posts with label Hacking Tricks. Show all posts

Saturday, 16 September 2017

Some Amazing internet hacks ?

Use Google Dorks

A Google dork query, sometimes just referred to as a dork, is a search string that uses advanced search operators to find information that is not readily available on a website.Google Dorking, also known as Google hacking, can return information that is difficult to locate through simple search queries.

cache:

Google will highlight those words within the cached document.

usage:–>cache:www.google.com web

this will show the cached content with the word “web” highlighted.

link:

will list web pages that have links to the specified web page.
usage:–>link:www.google.com
will list web pages that have links pointing to the Google homepage.

will list web pages that are “similar” to a specified web page.
usage:–>related:www.google.com
will list web pages that are similar to the Google homepage.

info:

will present some information that Google has about that web page.
usage:–>info:www.google.com
will show information about the Google homepage.

define:

will provide a definition of the words you enter after it, gathered from various online sources.

site:

Google will restrict the results to those websites in the given domain.
usage:–>help site:www.google.com
will find pages about help within http://www.google.com.

allintitle:

Google will restrict the results to those with all of the query words in the title.
usage:–>allintitle: google search
will return only documents that have both “google” and “search” in the title.

intitle:

Google will restrict the results to documents containing that word in the title.
usage:–>intitle:google search
will return documents that mention the word “google” in their title, and mention the word “search” anywhere in the document (title or no).

inurl:

dork is basically used to find the entered text in URL.
usage:–>inurl:google search
will return documents that mention the word “google” in their URL, and mention the word “search” anywhere in the document (URL or no).

intext:

This google dork is used to find entered text in URL and description as if we enter intext: welcome admin username.

now this will search every text in description and URL too.

inall:

This google dork is used to find text everywhere whether in title or description or in URL etc as if we enter

inall:admin login

this will search everywhere admin login text in a website.

ext:

You can use ‘filteype’ at a place of ‘ext’.:
ext:ppt hacking – this will return powerpoint presentations (ppt files) on topic ‘hacking’.
ext:doc hacking – this will return microsoft word files on topic ‘hacking’
Extensions that google supports are pdf,swf,rtf,doc,ppt,dwf,ps,kml,kmz,xls.

Files Containing Usernames:

filetype:conf inurl:proftpd.conf -sample

finding admin panel examples:

inurl:/admin/index.php & intext:/welcome admin user name pass
inurl:admin/login.asp
inurl:admin/login.php
and lot more.

unsafe control panels Dorks examples::

inurl:.php? intext:CHARACTER_SETS,COLLATIONS, ?intitle:phpmyadmin
inurl:phpmyadmin/index.php

sql injection example:

intext:SQL syntax & inurl:index.php?=id

Files containg passwords examples:

finding upload paths example:

inurl:.http://co.in & inurl:upload.php & intext:browse

cam Dorks:

inurl:”ViewerFrame?Mode=”
intitle:”Live View / – AXIS” | inurl:view/view.shtml
inurl:”MultiCameraFrame?Mode=”
intitle:”WJ-NT104 Main”
inurl:LvAppl intitle:liveapplet
“Powered by webcamXP”
inurl:indexFrame.shtml “Axis Video Server”
intitle:flexwatch intext:”Copyright by Seyeon TECH Co”
inurl:”CgiStart?page=”
inurl:/view.shtml
intitle:”Live View/ — AXIS
inurliview/view.shtml
inurl:ViewerFrame?M0de=
inurl:ViewerFrame?M0de=Refresh
inurliaxis-cgi/jpg
inurliaxis-cgi/mjpg (motion-JPEG) (disconnected)
inurl:view/indexFrame.shtml
inurliview/index.shtml
inurliview/view.shtml
liveapplet
intitle:”live view” intitle:axis
intitleiliveapplet
allintitle:”Network Camera NetworkCamera” (disconnected)
intitleiaxis intitle:”video server”
intitleiliveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View/ — AX|S”
intitle:”Live View/ — AXIS 206M”
inti’r|e”‘l ive View / — AXIS 706W”
intitle:”Live View/ — AXIS 210?
inurl:indexFrame.shtml Axis
inurl1″MultiCameraFrame?Mode=Motion” (disconnected)
intitleistart inurl:cgistart
intitle:”WJ-NTI 04 Main Page”
intitleisnc-220 inurl:home/
intitleisnc-cs3 inurl:home/
intitleisnc-r230 inurl:home/
intitle:”sony network camera snc-pl ?
intitle:”sony network camera snc-ml ?
site:.http://viewnetcam.com -Viewnetcam.com
intitle:”Toshiba Network Camera” user Iogin
intitle:”netcam live image” (disconnected)
intitle:”i-Catcher Console — Web Monitor”

This is only for educational purpose. I am not responsible for wrong use of any dork.

Hope it will help you..!!

Hackers: How Can I Get Started With Hacking ?

September 16, 2017 Unknown Hacking Tricks, info. About Hacking, Password hacking tricks No comments

Image result for Hackers: How Can I Get Started With Hacking ?

First, it takes intellectual curiosity. But you're already showing you have some of that by asking the question. Probably the most important skill to have is the ability to take a bug, a system, or a process, and try to think how it could be compromised to do different things than what was intended. It's this skill that takes a normal crash bug in a software program and makes it into an exploitable condition: the concept of "But what if I turned the bug sideways a little bit and tried to do something else with it?"

Interestingly enough, many developers and younger people don't realize they often have a hacker skill set already. The company I work for, HackerOne (http://www.hackerone.com), is always trying to encourage new hackers to learn more and get into the business of hacking because not only does it make computing and the Internet more secure, you can even make money off of it through bounty programs.

Here are some links you might find useful. The material ranges from technical to ethical consideration, and even tools. By utilizing one (or all) of these offerings you can help increase your hacking knowledge.

Additional Resources

The Ways To Access The Internet When The Government Blocks It

September 13, 2017 durgesh jangid Hacking Tricks, Internet Tricks, website Hacking Tricks No comments

Method 1 -
Satellite internet is one option, but not all that cost effective in most respects.
In the case of Egypt, WikiLeaks was kind enough to provide a free dial-in service:
Dial-Up Internet in Egypt +33172890150 (login 'toto' pass 'toto')
if you DO have the internet and you just need to circumvent a firewall type protection, then TOR is the way to go:
http://www.torproject.org/

Method 2 -
If it's DNS that is shut down, (I'm in the middle east so these might be slightly faster than the servers in the US if they are using load balancing)

Facebook: 69.63.181.12
Gmail: 209.85.153.83
Twitter: 128.121.146.100

You can get Tor by email as well. From a Gmail or Yahoo mail account send windows to bundle anywhere in the body of the email to get tor AT torproject.org . For bridges send get bridges to the same.
There are also bundles for OSX and Linux avaliable.

Method 3 -
You can either use a proxy website or VPN software or try to access blocked a website by using its IP address or mobile version it may work sometimes.

I only prefer Hotspot Shield free VPN if I want to access Government blocked websites as it is fast, free and provides unlimited bandwidth.
>> http://www.hotspotshield.com/unb...

Method 4 -

20 Ways to Circumvent the Egyptians Governments Internet Block
By: @trickzbuzzz
01] Nour DSL is still working in Egypt, Dial up with 0777 7776 or 07777 666
02] IP addresses for social media: pass on to people in #Egypt: Twitter: 128.242.240.52. Facebook: 69.63.189.34
03] How to circumvent the communications blackout in #Egypt http://slink.us?lr Arabic
04] #hamradio frequencies for #egypt http://slink.us?ls PLEASE SPREAD IRC: http://slink.us?lt
05] Ham Radio Software software for PC, Mac, and Linux http://www.hamsphere.com Communicate w/ #egypt
06] TOR Bridge 189.129.67.78:443 04FD6AE46E95F1E46B5264528C48EA84DB10CAC4
07] There is an Old DSL Dialup 24564600
08] Send SMS reports to +1 949 209 7559 and they will retweet for you. Please spread to those in #Egypt on battlefield
09] #Egypt hams are on 7.050-7.200 MHz LSB
10] Egypt Gov only blocking by DNS. So for Twitter try 128.242.245.148 Facebook 69.63.189.11 Proxy
11] VPN Server http://texnomic.com/url/2L is now stable and open for FREE to ALL
12] Help the Egypt Revolutionaries by overcoming the Firewall https://www.accessnow.org/proxy-cloud
13] 0m band, 7.050-7.200 MHz LSB, 318.5 degrees (northwest/north from Cairo) Ham Radio Operators
14] We are now providing dial-up modem service at +46850009990. user/pass: telecomix/telecomix (only for #egypt, respect that PLEASE!).
15] People of Egypt ONLY! Use this dial-up provided by friends in France to go online: +33172890150 (login 'toto' password 'toto')
16] FREE VPN Server to bypass ANY Blockage on ANY ADSL or Cell Network. Domain: Cloud.Texnomic.com User: FreeEgypt Pass: #Jan25
17] Third party apps: Tweetdeck http://www.tweetdeck.com/ & HootSuite http://hootsuite.com/ still work for updating Twitter
18] I2P anonymizing network http://www.i2p2.de/
19] RetroShare: secure communications with friends http://retroshare.sourceforge.net/
20] Follow @AnonymousRx
We are anonymous
We are legion
We do not forgive
We do not forget
Expect us
Please help support #OpEgypt and join anonymously in IRC chat, you can use a secure web version of IRC called Mibbit @ http://slink.us?ll
Ask what you can do to help when in the chat channel, anonymous members are always willing to help out new members!

Free Chapter of Kali Linux – A Guide to Ethical Hacking

September 01, 2017 durgesh jangid Hacking Tricks, info. About Hacking, kali linux No comments

assoul Ghaznavi-Zadeh, author of “Kali Linux – Hacking tools introduction”, has been an IT security consultant since 1999. He started as a network and security engineer, gathering knowledge on enterprise businesses, security governance, and standards and frameworks such as ISO, COBIT, HIPPA, SOC, and PCI. With his assistance, numerous enterprise organizations have reached safe harbors by testing, auditing and following his security recommendations.

Rassoul Ghaznavi-zadeh, author of "kali linux – Hacking tools introduction

What made you write this book?

I have been working on Cybersecurity for more than 10 years now. A couple of years ago, I put together all my notes about penetration and ethical hacking and released them as a book. While I didn’t expect it, I received lots of good comments and sold a lot of copies. This year, I decided to release a similar book with more details and information which can even be used in academic environments.

The first chapter states that the purpose of your book is to encourage and prepare the readers to act and work as ethical hackers. Can you describe your views on what it means to be an ethical hacker?

Ethical hacking is a process of investigating vulnerabilities in an environment, analyzing them and using the information gathered to tighten security to protect that environment.

An Ethical hacker would have extensive knowledge about a range of devices and systems. Ideally, you should have multiple years of experience in the IT industry and be familiar with different hardware, software, and networking technologies.

As an Ethical hacker, you have a clear response about how you use your knowledge and techniques. It is also important to understand the client’s expectations from an ethical hacker and consider them when assessing the security of a customer’s organization.

Can you give us a quick tip on starting a penetration project as an ethical hacker?

As hackers, breaking the law or getting into trouble can sometimes be difficult to avoid, so it’s important to act legitimately and get your paperwork ready in advance. This includes signed approvals to access the customer’s network and system, signing an NDA, defining clear goals and timelines for you and your team and notifying appropriate parties, such as the sys admin, security department, legal department etc.

What new knowledge did you gain whilst writing your book?

Obviously writing a book is not an easy task, considering this is not my main job. Writing this book was a good opportunity for me not only to learn more about professional writing but also refreshing my knowledge about the hacking tools and techniques. For every single tool introduction in this book, I have done some manual work by installing and testing the latest version of them on the newest version of Kali operating system.

Where can one acquire your book?

The book is available on most online stores like Amazon, Google, Itunes, Barns and Noble, Kobo, etc. I also have a couple of more books which can be found there including the original version of this book, “Hacking and Securing Web Applications” and “Enterprise Security Architecture”.

Following is the first of three chapters from “Kali Linux- Hacking tools introduction”.

Chapter 1- Ethical Hacking and Steps

By Rassoul Ghaznavi-Zadeh

Ethical hacking is a process of investigating vulnerabilities in an environment, analyze them and use the information gathered to protect that environment from those vulnerabilities. Ethical hacking requires a legal and mutual agreement between an ethical hacker and the asset and system owners with a defined and agreed scope of work. Any activity outside of the agreed scope of work is illegal and not considered as part of ethical hacking.

What is the purpose of this book?

The purpose of this book is to prepare the readers to be able to act and work as an ethical hacker. The techniques on this book must not be used on any production network without having a formal
approval from the ultimate owners of the systems and assets. Using these techniques without having an approval can be illegal and can cause serious damage to others intellectual property and is a crime.

What are the responsibilities of an Ethical Hacker?

As an Ethical hacker, you have a clear response about how you use your knowledge and techniques. It is also very important to understand what the expectations from an Ethical hacker are
and what you should consider when assessing the security of a customer’s organization. Below are a couple of important things you must consider as an Ethical hacker:

Must use your knowledge and tools only for legal purposes
Only hack to identify security issues with the goal of defense
Always seek management approval before starting any test
Create a test plan with the exact parameters and goals of test and get the management approval for that plan
Don’t forget, your job is to help strengthen the network and nothing else !

What are the customer’s expectations?

It is very important to understand the customer’s expectation before starting any work. As the nature of this work (Ethical hacking) is high risk and requires a lot of attentions; if you don’t have a

clear understanding of their requirements and expectations, the end result might not be what they want and your time and effort will be wasted. This could also have some legal implications as well if you don’t follow the rules and address customer’s expectation. Below are some important things you should note:

You should work with customer to define goals and expectations
Don’t surprise or embarrass them by the issues that you might find
Keep the results and information confidential all the time
Company usually owns the resultant data not you
Customers expect full disclosure on problems and fixes

What are the required skills of the hacker?

To be an Ethical hacker you should have extensive knowledge about a range of devices and systems. Ideally, you should have multiple years of experience in IT industry and be familiar with different hardware, software, and networking technologies. Some of the important skills required to be an Ethical hacker are as below:

Should already be a security expert in other areas (perimeter security, etc.)
Should already have experience as network or systems administrator
Experience on a wide variety of Operating Systems such as Windows, Linux, UNIX, etc.
Extensive knowledge of TCP/IP – Ports, Protocols, Layers
Common knowledge about security and vulnerabilities and how to correct them
Must be familiar with hacking tools and techniques (We will cover this in this book)

How to get prepared for the Preparation testing

Once you want to start a penetration project, there are a number of things that you need to consider. Remember, without following the proper steps, getting approvals and finalizing an agreement with a customer; using these techniques is illegal and against the law.

Important things to consider before you start:
Get signed approval for all tests from the customer
You need to sign confidentiality agreement (NDA)
Get approval of collateral parties (ISPs)
Put together team and tools and get ready for the tests
Define goals (DoS, Penetration, etc.)
Set the ground rules (rules of engagement with the customer and team)
Set the schedule (non-work hours, weekends?)
Notify appropriate parties (Sys admin, Security department, Legal department, law enforcement)

Trickz Buzz

Follow All The Tutorials Step by Step Carefully, You Get Success