Showing posts with label info. About Hacking. Show all posts

Saturday, 16 September 2017

Some Amazing internet hacks ?

Use Google Dorks

A Google dork query, sometimes just referred to as a dork, is a search string that uses advanced search operators to find information that is not readily available on a website.Google Dorking, also known as Google hacking, can return information that is difficult to locate through simple search queries.

cache:

Google will highlight those words within the cached document.

usage:–>cache:www.google.com web

this will show the cached content with the word “web” highlighted.

link:

will list web pages that have links to the specified web page.
usage:–>link:www.google.com
will list web pages that have links pointing to the Google homepage.

will list web pages that are “similar” to a specified web page.
usage:–>related:www.google.com
will list web pages that are similar to the Google homepage.

info:

will present some information that Google has about that web page.
usage:–>info:www.google.com
will show information about the Google homepage.

define:

will provide a definition of the words you enter after it, gathered from various online sources.

site:

Google will restrict the results to those websites in the given domain.
usage:–>help site:www.google.com
will find pages about help within http://www.google.com.

allintitle:

Google will restrict the results to those with all of the query words in the title.
usage:–>allintitle: google search
will return only documents that have both “google” and “search” in the title.

intitle:

Google will restrict the results to documents containing that word in the title.
usage:–>intitle:google search
will return documents that mention the word “google” in their title, and mention the word “search” anywhere in the document (title or no).

inurl:

dork is basically used to find the entered text in URL.
usage:–>inurl:google search
will return documents that mention the word “google” in their URL, and mention the word “search” anywhere in the document (URL or no).

intext:

This google dork is used to find entered text in URL and description as if we enter intext: welcome admin username.

now this will search every text in description and URL too.

inall:

This google dork is used to find text everywhere whether in title or description or in URL etc as if we enter

inall:admin login

this will search everywhere admin login text in a website.

ext:

You can use ‘filteype’ at a place of ‘ext’.:
ext:ppt hacking – this will return powerpoint presentations (ppt files) on topic ‘hacking’.
ext:doc hacking – this will return microsoft word files on topic ‘hacking’
Extensions that google supports are pdf,swf,rtf,doc,ppt,dwf,ps,kml,kmz,xls.

Files Containing Usernames:

filetype:conf inurl:proftpd.conf -sample

finding admin panel examples:

inurl:/admin/index.php & intext:/welcome admin user name pass
inurl:admin/login.asp
inurl:admin/login.php
and lot more.

unsafe control panels Dorks examples::

inurl:.php? intext:CHARACTER_SETS,COLLATIONS, ?intitle:phpmyadmin
inurl:phpmyadmin/index.php

sql injection example:

intext:SQL syntax & inurl:index.php?=id

Files containg passwords examples:

finding upload paths example:

inurl:.http://co.in & inurl:upload.php & intext:browse

cam Dorks:

inurl:”ViewerFrame?Mode=”
intitle:”Live View / – AXIS” | inurl:view/view.shtml
inurl:”MultiCameraFrame?Mode=”
intitle:”WJ-NT104 Main”
inurl:LvAppl intitle:liveapplet
“Powered by webcamXP”
inurl:indexFrame.shtml “Axis Video Server”
intitle:flexwatch intext:”Copyright by Seyeon TECH Co”
inurl:”CgiStart?page=”
inurl:/view.shtml
intitle:”Live View/ — AXIS
inurliview/view.shtml
inurl:ViewerFrame?M0de=
inurl:ViewerFrame?M0de=Refresh
inurliaxis-cgi/jpg
inurliaxis-cgi/mjpg (motion-JPEG) (disconnected)
inurl:view/indexFrame.shtml
inurliview/index.shtml
inurliview/view.shtml
liveapplet
intitle:”live view” intitle:axis
intitleiliveapplet
allintitle:”Network Camera NetworkCamera” (disconnected)
intitleiaxis intitle:”video server”
intitleiliveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View/ — AX|S”
intitle:”Live View/ — AXIS 206M”
inti’r|e”‘l ive View / — AXIS 706W”
intitle:”Live View/ — AXIS 210?
inurl:indexFrame.shtml Axis
inurl1″MultiCameraFrame?Mode=Motion” (disconnected)
intitleistart inurl:cgistart
intitle:”WJ-NTI 04 Main Page”
intitleisnc-220 inurl:home/
intitleisnc-cs3 inurl:home/
intitleisnc-r230 inurl:home/
intitle:”sony network camera snc-pl ?
intitle:”sony network camera snc-ml ?
site:.http://viewnetcam.com -Viewnetcam.com
intitle:”Toshiba Network Camera” user Iogin
intitle:”netcam live image” (disconnected)
intitle:”i-Catcher Console — Web Monitor”

This is only for educational purpose. I am not responsible for wrong use of any dork.

Hope it will help you..!!

Hackers: How Can I Get Started With Hacking ?

September 16, 2017 Unknown Hacking Tricks, info. About Hacking, Password hacking tricks No comments

Image result for Hackers: How Can I Get Started With Hacking ?

First, it takes intellectual curiosity. But you're already showing you have some of that by asking the question. Probably the most important skill to have is the ability to take a bug, a system, or a process, and try to think how it could be compromised to do different things than what was intended. It's this skill that takes a normal crash bug in a software program and makes it into an exploitable condition: the concept of "But what if I turned the bug sideways a little bit and tried to do something else with it?"

Interestingly enough, many developers and younger people don't realize they often have a hacker skill set already. The company I work for, HackerOne (http://www.hackerone.com), is always trying to encourage new hackers to learn more and get into the business of hacking because not only does it make computing and the Internet more secure, you can even make money off of it through bounty programs.

Here are some links you might find useful. The material ranges from technical to ethical consideration, and even tools. By utilizing one (or all) of these offerings you can help increase your hacking knowledge.

Additional Resources

Free Chapter of Kali Linux – A Guide to Ethical Hacking

September 01, 2017 durgesh jangid Hacking Tricks, info. About Hacking, kali linux No comments

assoul Ghaznavi-Zadeh, author of “Kali Linux – Hacking tools introduction”, has been an IT security consultant since 1999. He started as a network and security engineer, gathering knowledge on enterprise businesses, security governance, and standards and frameworks such as ISO, COBIT, HIPPA, SOC, and PCI. With his assistance, numerous enterprise organizations have reached safe harbors by testing, auditing and following his security recommendations.

Rassoul Ghaznavi-zadeh, author of "kali linux – Hacking tools introduction

What made you write this book?

I have been working on Cybersecurity for more than 10 years now. A couple of years ago, I put together all my notes about penetration and ethical hacking and released them as a book. While I didn’t expect it, I received lots of good comments and sold a lot of copies. This year, I decided to release a similar book with more details and information which can even be used in academic environments.

The first chapter states that the purpose of your book is to encourage and prepare the readers to act and work as ethical hackers. Can you describe your views on what it means to be an ethical hacker?

Ethical hacking is a process of investigating vulnerabilities in an environment, analyzing them and using the information gathered to tighten security to protect that environment.

An Ethical hacker would have extensive knowledge about a range of devices and systems. Ideally, you should have multiple years of experience in the IT industry and be familiar with different hardware, software, and networking technologies.

As an Ethical hacker, you have a clear response about how you use your knowledge and techniques. It is also important to understand the client’s expectations from an ethical hacker and consider them when assessing the security of a customer’s organization.

Can you give us a quick tip on starting a penetration project as an ethical hacker?

As hackers, breaking the law or getting into trouble can sometimes be difficult to avoid, so it’s important to act legitimately and get your paperwork ready in advance. This includes signed approvals to access the customer’s network and system, signing an NDA, defining clear goals and timelines for you and your team and notifying appropriate parties, such as the sys admin, security department, legal department etc.

What new knowledge did you gain whilst writing your book?

Obviously writing a book is not an easy task, considering this is not my main job. Writing this book was a good opportunity for me not only to learn more about professional writing but also refreshing my knowledge about the hacking tools and techniques. For every single tool introduction in this book, I have done some manual work by installing and testing the latest version of them on the newest version of Kali operating system.

Where can one acquire your book?

The book is available on most online stores like Amazon, Google, Itunes, Barns and Noble, Kobo, etc. I also have a couple of more books which can be found there including the original version of this book, “Hacking and Securing Web Applications” and “Enterprise Security Architecture”.

Following is the first of three chapters from “Kali Linux- Hacking tools introduction”.

Chapter 1- Ethical Hacking and Steps

By Rassoul Ghaznavi-Zadeh

Ethical hacking is a process of investigating vulnerabilities in an environment, analyze them and use the information gathered to protect that environment from those vulnerabilities. Ethical hacking requires a legal and mutual agreement between an ethical hacker and the asset and system owners with a defined and agreed scope of work. Any activity outside of the agreed scope of work is illegal and not considered as part of ethical hacking.

What is the purpose of this book?

The purpose of this book is to prepare the readers to be able to act and work as an ethical hacker. The techniques on this book must not be used on any production network without having a formal
approval from the ultimate owners of the systems and assets. Using these techniques without having an approval can be illegal and can cause serious damage to others intellectual property and is a crime.

What are the responsibilities of an Ethical Hacker?

As an Ethical hacker, you have a clear response about how you use your knowledge and techniques. It is also very important to understand what the expectations from an Ethical hacker are
and what you should consider when assessing the security of a customer’s organization. Below are a couple of important things you must consider as an Ethical hacker:

Must use your knowledge and tools only for legal purposes
Only hack to identify security issues with the goal of defense
Always seek management approval before starting any test
Create a test plan with the exact parameters and goals of test and get the management approval for that plan
Don’t forget, your job is to help strengthen the network and nothing else !

What are the customer’s expectations?

It is very important to understand the customer’s expectation before starting any work. As the nature of this work (Ethical hacking) is high risk and requires a lot of attentions; if you don’t have a

clear understanding of their requirements and expectations, the end result might not be what they want and your time and effort will be wasted. This could also have some legal implications as well if you don’t follow the rules and address customer’s expectation. Below are some important things you should note:

You should work with customer to define goals and expectations
Don’t surprise or embarrass them by the issues that you might find
Keep the results and information confidential all the time
Company usually owns the resultant data not you
Customers expect full disclosure on problems and fixes

What are the required skills of the hacker?

To be an Ethical hacker you should have extensive knowledge about a range of devices and systems. Ideally, you should have multiple years of experience in IT industry and be familiar with different hardware, software, and networking technologies. Some of the important skills required to be an Ethical hacker are as below:

Should already be a security expert in other areas (perimeter security, etc.)
Should already have experience as network or systems administrator
Experience on a wide variety of Operating Systems such as Windows, Linux, UNIX, etc.
Extensive knowledge of TCP/IP – Ports, Protocols, Layers
Common knowledge about security and vulnerabilities and how to correct them
Must be familiar with hacking tools and techniques (We will cover this in this book)

How to get prepared for the Preparation testing

Once you want to start a penetration project, there are a number of things that you need to consider. Remember, without following the proper steps, getting approvals and finalizing an agreement with a customer; using these techniques is illegal and against the law.

Important things to consider before you start:
Get signed approval for all tests from the customer
You need to sign confidentiality agreement (NDA)
Get approval of collateral parties (ISPs)
Put together team and tools and get ready for the tests
Define goals (DoS, Penetration, etc.)
Set the ground rules (rules of engagement with the customer and team)
Set the schedule (non-work hours, weekends?)
Notify appropriate parties (Sys admin, Security department, Legal department, law enforcement)

Here are Top Best Indian Hackers We All Should Know

August 18, 2017 durgesh jangid Hacking Tricks, info. About Hacking No comments

Rahul Tyagi VP-Lucideus Training is a post-graduate with majors in Computer Science and has conducted to his account, more than a hundred training sessions globally in past 5 years. Being a cyber space researcher himself, Rahul can claim to have found critical vulnerabilities on websites of VMware, Forbes, Intel, Sony, HP, Discovery Networks, TED and much more. He is also listed in BlackBerry Hall of Fame for his contributions to the organization. A Published Author of two books - Hacking Crux 1 & 2 - both on information security. He has been covered extensively by the global media and is one of the most followed Indian Information Security Expert on various social media platforms.

Pranav Mistry is a computer scientist and Inventor. At present, he is the Global Senior Vice President of Research at Samsung and the head of Think Tank Team. He is best known for his work on SixthSense, Samsung Galaxy Gear and Project Beyond.

Ankit Fadia is an Indian author, speaker, television host, and self-proclaimed "ethical hacker" of computers, whose skills and ethics have been debated. His work mostly involves OS-based tips and tricks, proxy websites and lifestyle.

Koushik Dutta, better known as "Koush" to the Android power user community, was one of the original Cyanogen, Inc. employees when the company incorporated last year. But he's been giving Android users some great stuff for much longer than that: most people's first exposure to his work comes from ClockworkMod, still one of the most widely-used custom recoveries available, not to mention various tools like ROM Manager, ClockworkMod Tether, and DeskSMS. Lately, he's been expanding into more general apps like Helium Backup and AllCast.

Vivek Ramachandran is a world renowned security researcher and evangelist. His expertize includes computer and network security, exploit research, wireless

Trishneet Arora is an Indian author, cyber security expert, and entrepreneur. Arora has written books on cyber security, ethical hacking, and web defense. He is the founder and CEO of TAC Security, an IT security company

Benild Joseph is a 25-year-old Limca Book Record Holder and renowned White Hat Hacker with definitive experience in the field of computer security in India. ... He is a regular speaker at Information security & digital forensics conferences in India and abroad. ... The Information Systems

The Professional Ethical Hacker Bundle

August 17, 2017 durgesh jangid Hacking Tricks, info. About Hacking No comments

Description:-

"Hacking" is a term that is thrown around a lot in the media these days, but as the dark side of hacking grows, so too does the light! Ethical hackers are in higher demand than ever as corporations and government organizations scramble to ensure their network security is as good as it can be. In this course, you'll learn everything you need to pass some exemplary certifications and load your resume with network engineering and IT security skills that will help you get a high-paying career in ethical hacking.

Access 19 lectures & 60 hours of content 24/7
Study to pass the Certified Ethical Hacker, Computer Hacking Forensics Investigator, Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), and Certified Information Systems Security Professional (CISSP) exams
Carry out an investigation according to industry best practices & legal guidelines
Acquire & duplicate data to preserve evidence & facilitate further investigation
Fortify your learning w/ exercises & examples

Instructor:-
e-Careers is an institution of passionate and talented educationists who support more than 300,000 students all over the world. The institution consists of over 180 individuals specializing in their own aspects of combining education with technology. Each instructor has a minimum of 15 years real-world experience and is an expert in their field. For more details on the course and instructor, click here.

Specs:-

Details & Requirements

Length of time users can access this course: 1 year
Access options: web streaming, mobile streaming
Certification of completion included
Redemption deadline: redeem your code within 30 days of purchase
Experience level required: all levels
Free technical support available 24/5 via email, telephone & online chat

Compatibility

Internet required
Processor: 1 GHz
RAM: 1GB
Operating systems:
- OS X (to use on your Mac see here)
- Windows 7 or newer
- iOS
- Android
Browsers:
- Google Chrome
- Safari 8
- Mozilla Firefox
- Internet Explorer 8 or later

Terms

Instant digital redemption
Upon redemption, course login details and instructions will be emailed to you within 3 working

Top 5 Websites To Learn How To Hack Like A Professional

August 17, 2017 durgesh jangid Hacking Tricks, info. About Hacking No comments

Your intention for learning how to hack is completely your own. I do not judge. However, it should be noted that there are two forms of hacking – “white hat” and “black hat”. White hat hackers call themselves “ethical hackers”, in that they find vulnerabilities simply to make systems and applications more secure for everyone. However, there’s a whole other community of hackers – the black hats – who find vulnerabilities only to exploit them as much as possible. Now that you know what sort of community you may be entering, let’s get on with the list of top sites where you can learn to hack.

1.Hacking Tutorial:
Infrequently, culminate English isn’t all that matters. Hacking Tutorial is a case of when the written work attitude of the writer doesn’t fundamentally liken to the nature of his or her specialized information. This is really the case over at Hacking Tutorial, where the writer offers articles like “Customer Side Attack Using Adobe PDF Escape EXE Social Engineering”, “Misusing MS11_003 Internet Explorer Vulnerability”, and “Hacking Using BeeF XSS Framework”.

2.EvilZone Hacking Forums
It is easily one of the largest forum communities that you’ll find on the subject of hacking. With over 13,042 members and over 50,000 posts (and counting), this community likely has the skills and knowledge to answer any programming question you could possibly have. Just be careful about coming across as a “noob” – these guys don’t handle newcomers with kid gloves, so be careful.

3.Hack A Day
You really have to give credit where credit is due when it comes to a particular niche like hacking – and Hack a Day definitely offers an amazing library of information for anyone looking for specific categories like cell phones, GPS or digital cameras. Over the years, Hack A Day has transformed the site into a fairly popular blog.More than any other site, this particular “hacking” site is very much hardware based, and they redefine the meaning of the word hacking by helping you learn how to hack up electronic devices like a Gameboy or a digital camera and completely modifying it, or building electronics for the sole purpose of hacking other commercial devices

4.Hack In The Box
Hack In The Box has really changed significantly through the years. It is rebranded as HITB, and the site is completely transformed into what looks like a WordPress-based platform. Still, today Hack In The Box remains focused on security and ethical hacking. However, it has obviously shifted gears at some point and changed to a more content-focused approach with a greater volume of news and fewer in-depth articles with detailed hacks.

5.Hack This Site
This site is for the beginners those who want to know what is hacking and how it is done.A Step by Step process learning can be achieved here.This Site is a free, safe and legal training ground for hackers to test and expand their hacking skills. More than just another hacker wargames site, we are a living, breathing community with many active projects in development, with a vast selection of hacking articles and a huge forum where users can discuss hacking, network security, and just about everything. Tune in to the hacker underground and get involved with the project.

How To Hack Wifi – WPA & WPA2 Network In Kali Linux Using airodump-ng and aircrack

August 17, 2017 durgesh jangid Hacking Tricks, info. About Hacking, wife hacking tricks No comments

It is very easy to hack WEP password but very difficult to hack WPA OR WPA2, so now I will explain how to hack WPA & WPA2 passwords easily in Linux based operating system.

By guessing the PIN, the router will actually throw back, whether or not the first four digits (of eight) are correct. Then, the final number is a checking number used to satisfy an algorithm. This can be exploited to brute force the WPS PIN, and allow recovery of the WPA password in an incredibly short amount of time, as opposed to the standard attack on WPA

Requirements:

1) Kali Linux – Operation System In Your System Or In Your Flash Disk (USB Pendrive)

2) 4GB or Above Pendrive

3) Kali Live Boot

4) Word List –

5) Wifi networks near by with Excellent Signal to make hacking faster

Click Here to download KaliLinux

Click Here to See How To Make Kali USB Live Boot

3) There are many kinds of word lists, so it is better to use 13Gb Word List or 50mb Wordlist, those word lists contain 1 to 10 million word – they are the passwords from all over the world here Are The Links To Download Word lists – One Is Enough, but I will give you few links Click To Download— 13Gb Wordlist Compressed To 4Gb Click Here To Various Wordlists

Procedure: Just follow the commands in the pictures, now open a new terminal and type the following command

========== Hacking Don’t Need Agreements ==========

Just Remember One Thing You Don’t Need To Seek Anyone’s Permission To Hack Anything Or Anyone As Long As It Is Ethical, This Is The Main Principle Of Hacking Dream Thank You for Reading My Post, I Hope It Will Be Useful For You

Trickz Buzz

Follow All The Tutorials Step by Step Carefully, You Get Success