.:: Dark Site ::.: Cracking and Hacking

Cracking WPA/WPA2 Password Protected WiFi Network

Hi all today we are going to discuss how we can crack wpa/wpa2 password protected wifi network and this time i am going to use a dictionary to do it on my next tutorial i will try to show you how even we can crack without dictionary . 
so lets talk about wpa/wpa2 protected network as in our previous tutorial(<a href="http://www.darksite.co.in/2014/05/cracking-wep-protected-wifi-network-in.html">Cracking WEP easy way</a>) you must have seen we were able to crack wep network and utilizing the same technique you can crack any wep network so people says WEP is very weak and yes its weak so to over come that another wifi encryption is introduced which is known as Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II (WPA2) now WPA is said to be more advance than wep and safer how ever as i said we can still hack it how to do it follow the below tutorial step wise. 
 
At first check your back track machine is having its wifi drive ready to know more you can see our previous tutorial. 
type ifconfig on terminal on backtrack or kali. 
<h3>same procedure applied for cracking wpa2 protected wifi network</h3> 
now start youe wlan0 interface on monitor mode which can be easily done with airmon-ng start wlan0 this command 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7_fSeTl2zZB2aOiiblfPlORHL2NVrWXbtWd1lTqzQaLZtGegENFeIp07rK0azEZW_t2mwDdElQ9RTgAh-1Y1yVfutAvdqKzMKneE2dl6IGrbI5DxIZBzeYOpfCCu82LgV-VneclWaSdon/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7_fSeTl2zZB2aOiiblfPlORHL2NVrWXbtWd1lTqzQaLZtGegENFeIp07rK0azEZW_t2mwDdElQ9RTgAh-1Y1yVfutAvdqKzMKneE2dl6IGrbI5DxIZBzeYOpfCCu82LgV-VneclWaSdon/s520/1.png" /></a></div> 
now to see the wifi data packets those are available around you using monitor interface (mon0) .simply type airodump-ng mon0.and it will display the packet available around you. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipcHxOh4Q8l5kbuXwGnG11rL3kywAr9FSkpa7FfVR5g6EY-ZBJIqqmZ8g06fQWGmF-IXnmxlTFoMnDtxYxBNcHEfoGOkpe3hTwy9VC9nk1aDFqFI-kldUiIiDcRD2S6EFRuk4Bolpkw9Ud/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipcHxOh4Q8l5kbuXwGnG11rL3kywAr9FSkpa7FfVR5g6EY-ZBJIqqmZ8g06fQWGmF-IXnmxlTFoMnDtxYxBNcHEfoGOkpe3hTwy9VC9nk1aDFqFI-kldUiIiDcRD2S6EFRuk4Bolpkw9Ud/s520/2.png" width="520" /></a></div> 
now as you can see here is a wpa protected network available around us known as hackers on channel 11.now lets hack the hackers .bring your mon0 inteface mon0 to channel 11 which can be easily done with iwconfig mon0 channel 11 
now write the data packet into a file which we will utilize for cracking later . 
command is again simple old one airodump-ng channel 11(channel number) mon0(interface) --write crackingwpa --bssid (device bssid) 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZR_8mpMnFCX1lJfomWpohhlRxVQvA9VUsseE3eCNaZp0n32IvlC6EAJYOJjG70K9i21-Yudb5OG2UXEWD47DE4e1ZBYRojcQQ_y94SXWNYUErdF66gevJXn3iz1bDrhlypvHpQz4WU1VQ/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZR_8mpMnFCX1lJfomWpohhlRxVQvA9VUsseE3eCNaZp0n32IvlC6EAJYOJjG70K9i21-Yudb5OG2UXEWD47DE4e1ZBYRojcQQ_y94SXWNYUErdF66gevJXn3iz1bDrhlypvHpQz4WU1VQ/s520/3.png" width="570" /></a></div> 
now to be able to crack the wpa we need a handshake data packet which can be generated by sending out deauth packet from your interface .now you can broadcast a deauth packet or you can disconnect a specific client and get the hand shake done. 
so we will be broadcasting the deauth packet and then stop it in-order to get the handshake done and capture the handshake, 
command to do that is aireplay-ng --deauth 0 -e hackers mon0after sending some deauth stop and re allow to get the handshake, 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5zOYwvoHiixgdoarB1ukIW-v-JDMHYiZXRt2Q4UmG5yLWsCieTU_XotSW9WJoo6r7HqJZrlLp95FKMrEMapIww03Q3IvaeuDE9L2gRb-V8rI7JmTT4d1AOID1cdVgPVXP2YaIOamy_ImY/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5zOYwvoHiixgdoarB1ukIW-v-JDMHYiZXRt2Q4UmG5yLWsCieTU_XotSW9WJoo6r7HqJZrlLp95FKMrEMapIww03Q3IvaeuDE9L2gRb-V8rI7JmTT4d1AOID1cdVgPVXP2YaIOamy_ImY/s520/4.png" width="520" /></a></div>now as soon as you stop broadcasting the deauth packet you will get a handshake done :) which will lead to make cracking possible. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRQL24s3XcHsprjun0KOc2Ltvoz81PEHVQyFELpP_ccvDK8oOtmQ2cGnDaX0IhlpY-h5a_-RdMXJelnU1vMF0rqaUkg6rqH36BiLQ7w0ccgWbLNXjcxFY2CaqzL3pRAmNp7PKA_Exn-SKb/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRQL24s3XcHsprjun0KOc2Ltvoz81PEHVQyFELpP_ccvDK8oOtmQ2cGnDaX0IhlpY-h5a_-RdMXJelnU1vMF0rqaUkg6rqH36BiLQ7w0ccgWbLNXjcxFY2CaqzL3pRAmNp7PKA_Exn-SKb/s720/5.png" width="520" /></a></div>so finally after getting the hand shake all you have to do is use aircrack to crack the password from pasword dictionary list. 
now its all depends on number of password possible list for your easy shake i am giving a password list which contain 10K very possible password list.<a href="https://raw.githubusercontent.com/discourse/discourse/master/lib/common_passwords/10k-common-passwords.txt">download best 10K password </a> save this as password.lst and save indie root folder of aircrack then simple run this command 
 
aircrack-ng -w password.lst crackingwpa-01.cap 
and yes you will be successfully able crack the password now . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitTIV_p0OgazSDXhuqTYIi1-eXrwv9rr86GeAZERyyIyERIKA6BRQKL6wseqb_lfoeHYMaejOb75Mp1mUAPgTsBwamWsyX18BmpS77xN8Wzy_9tFroqHyrE_6gkiC520VoUeCMjbDNBxnt/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitTIV_p0OgazSDXhuqTYIi1-eXrwv9rr86GeAZERyyIyERIKA6BRQKL6wseqb_lfoeHYMaejOb75Mp1mUAPgTsBwamWsyX18BmpS77xN8Wzy_9tFroqHyrE_6gkiC520VoUeCMjbDNBxnt/s620/6.png" width="520" /></a></div>yuppi you can connect to that wifi now and password is 12344321 :). 
Now if the password contains (A-Z,a-z,0-9,*#$% symbol in other word complex enough )then you need to have strong password list . 
also you can do the cracking using john the ripper which might take take 1-2 day or even more but you have to be more patient there.go to terminal and type this to crack using john ripper 
./john –stdout –incremental:all | aircrack-ng -b 00:11:22:33:44:55 -w – /root/crackingwpa-01.cap 
 
next time i will posting about how we can carck wpa/wap2 without using dictionary thanks keep visiting :).

Cracking WPA/WPA2 Password Protected WiFi Network

Hi all today we are going to discuss how we can crack wpa/wpa2 password protected wifi network and this time i am going to use a dictionary ...

Cracking WEP Protected WIFI Network In Easy Way

Hi all After a long day back to another exciting post so this time we are going to learn how to crack wep protected wifi network . 
WEP Protected wifi network are not very strong in nature it can be easily be broken by any guy who has good idea on wifi things,so lets go directly into the tutorial it self i am not going to make you boar with old theory. 
 
first of all we need a back track machine you can easily make it live boot using pendrive,DVD after entering into the backtrack /kali terminal look for your network card status if it is up and running you can easily know by typing ifconfig on terminal. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTpSHEVAlPsSboANqiLK3PP6Rh00rXXVKjcRlQVpeeCMk0kvZjnbiixhHMhxG1phTDNlN_CmOXtCkBTURxtL2hh_7KmshKCI9wUo2a444_6CSm6MJsUnOAfjrJ881wRq_utMnHuXw7bpRd/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTpSHEVAlPsSboANqiLK3PP6Rh00rXXVKjcRlQVpeeCMk0kvZjnbiixhHMhxG1phTDNlN_CmOXtCkBTURxtL2hh_7KmshKCI9wUo2a444_6CSm6MJsUnOAfjrJ881wRq_utMnHuXw7bpRd/s650/1.png" width="550" /></a></div>Now make you laptop device wireless n/w that is wlan0 in monitor mode (this mode enable you to see/capture the data packet that are floating on air ) 
Command to do that is : airmon-ng start wlan0 this will create mon0 interface for monitor mode 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzbwPXPoIajNJsE9HQ4u4XlLfTdeq6gRcqPSbgcb3bdcaovlEnBJfpX5TTkQ6y3o08sdtbtd91D38lvOEt2rXIiGSiSFjUFoaORHKZCFDIKU7pccTNcR-YysgNhfWKt02MtKwhxqtHA8LV/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzbwPXPoIajNJsE9HQ4u4XlLfTdeq6gRcqPSbgcb3bdcaovlEnBJfpX5TTkQ6y3o08sdtbtd91D38lvOEt2rXIiGSiSFjUFoaORHKZCFDIKU7pccTNcR-YysgNhfWKt02MtKwhxqtHA8LV/s520/2.png" width="550" /></a></div>now to see the data packet those are available on air using mon0 interface the command is 
airodump-ng mon0 this will give you all packets those are available around you . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhomJHTbLXZHkr6QUywOaoeAtIxCcTju9dLdDbs0qVZMMRGgQt4ONytDM95FZ7JLRck6AQhi5NU0O2hvkI4IZYrWVfNHSgHPZI7ahWhWKR20a-jh4TVlUw1Lp3I5h_lB23-mV9KsqIw5e9C/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhomJHTbLXZHkr6QUywOaoeAtIxCcTju9dLdDbs0qVZMMRGgQt4ONytDM95FZ7JLRck6AQhi5NU0O2hvkI4IZYrWVfNHSgHPZI7ahWhWKR20a-jh4TVlUw1Lp3I5h_lB23-mV9KsqIw5e9C/s420/3.png" width="550" /></a></div>So as we can see MGMNT is wep on channel 11 protected and we want to hack it/ break the key so lets do it. 
you can set you mon0 on that specific channel so to do that you can use these command 
iwconfig mon0 channel 11 (this is needed as our wifi interface can do better communication over same channel ) 
next write all the packet into a file which we will utilize for cracking 
airodump-ng --channel (channel numbe here its)11 (interface)mon0 --write name(anyname) --bssid bssid(Access point you want to hack bssid). 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf6g41cvnJzlT8PNub3GmaJmvY_0FkHS4W5DJGcBVbK-WTVcRBDq1Rz8AWvUIjRDGLJokgW2un_czktaZqiP_CPI6Q3Cwo60uvUGI1GrdvVMVKENPN1iyGa0nm93O9fG3CbcYSgTb1mubp/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf6g41cvnJzlT8PNub3GmaJmvY_0FkHS4W5DJGcBVbK-WTVcRBDq1Rz8AWvUIjRDGLJokgW2un_czktaZqiP_CPI6Q3Cwo60uvUGI1GrdvVMVKENPN1iyGa0nm93O9fG3CbcYSgTb1mubp/s420/4.png" width="550" /></a></div>After that is done you have to populate data packet from that Access point which can be done using arpreplay 
command will be aireplay-ng --arpreplay -e MGMNT mon0 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivuT17VFIDAhIE66t1x3U7owRKmi5RLTROExE8Yhx5M1YRQG5xt4gXxtlyX4GASx1jvwVWWEEQNOfDRiF2xDqkCLQsqccA6UorV1rt8rfYiqqiuSDAWThh1AXRLf1XoHrX84IXNu6DfRxk/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivuT17VFIDAhIE66t1x3U7owRKmi5RLTROExE8Yhx5M1YRQG5xt4gXxtlyX4GASx1jvwVWWEEQNOfDRiF2xDqkCLQsqccA6UorV1rt8rfYiqqiuSDAWThh1AXRLf1XoHrX84IXNu6DfRxk/s420/6.png" width="550" /></a></div>now next point how do we get arp pakcet to do the replay action that can easily be done using an deauth packet or showing a fake connection (if no devices are connected to that access point) 
Deauth (open a new terminal type ) arpreplay-ng --deauth 0 -e MGMNT mon0 
other wise you can show fake auth (if no devices are connected to access point ) 
arpreplay-ng --fakeauth 0 -e MGMNT mon0 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwoBy3xkLHeVZ2DIzkk934c_gfElM3bD0EBUEjLgSyaRJDre77_7Vco0mqzA8e8Ee5ataxL0ZPutfgaYsHtNvBMA07JfYHp3GXfbwhBuXUKPjXXpHF3gYKo5QaiTNZZw_IAbVDBH850cXi/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwoBy3xkLHeVZ2DIzkk934c_gfElM3bD0EBUEjLgSyaRJDre77_7Vco0mqzA8e8Ee5ataxL0ZPutfgaYsHtNvBMA07JfYHp3GXfbwhBuXUKPjXXpHF3gYKo5QaiTNZZw_IAbVDBH850cXi/s420/5.png" width="550" /></a></div>once any client connect to access point MGMNT your arp replay will start showing you action by pumping numerous data packet . 
so finally after collecting more that 22K data packet that is enough to crack any wep encryption (coz of weak IV if you wann know technical details you can as me mail or chat) ..using aircrack again the command is simple 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXYNsXY5-oblHrAHf2757AFaCLtuduxDQ6BIia3ypqvlP_rPFFFntsao5xjPMB9McXa-LQYFRW4R7BurTLxVN2tN68nm3CurYme6P6J5sZCbJMzxNTE2Utk2-xLRFGLxC6rYT5wvdDW-ka/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXYNsXY5-oblHrAHf2757AFaCLtuduxDQ6BIia3ypqvlP_rPFFFntsao5xjPMB9McXa-LQYFRW4R7BurTLxVN2tN68nm3CurYme6P6J5sZCbJMzxNTE2Utk2-xLRFGLxC6rYT5wvdDW-ka/s420/7.png" width="550" /></a></div>aircrack-ng filename-01.cap 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO7T6_71tWLuSGUH2g8Y5KA8eVsXNiDee4IilrI4NJX0xoAz9BfPNvO_PC31xxiNXS8X1GEwJUweY9Y2uSzY515KVSxau0SqsrSvnaUZVzi-LryhuJZdIC_7bEuZvA5_OpJXK5uo5Zi9hL/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO7T6_71tWLuSGUH2g8Y5KA8eVsXNiDee4IilrI4NJX0xoAz9BfPNvO_PC31xxiNXS8X1GEwJUweY9Y2uSzY515KVSxau0SqsrSvnaUZVzi-LryhuJZdIC_7bEuZvA5_OpJXK5uo5Zi9hL/s620/8.png" width="550" /></a></div>that will display your cracked key which you can use later to connect to that access point and then have free fun internet :). 
do comments your query if you stuck any where we are happy to help you and thanks

Cracking WEP Protected WIFI Network In Easy Way

Hi all After a long day back to another exciting post so this time we are going to learn how to crack wep protected wifi network . WEP Prot...

Hackers Favorite Tools For Cracking Password

<div dir="ltr" style="text-align: left;" trbidi="on">SoHi In my Previous i posted about<a href="http://www.darksite.co.in/2013/09/commonly-found-encrypted-password-hash.html"> COMMONLY FOUND ENCRYPTED PASSWORD HASH AND SALTS</a>Now we Will discuss what tools are used for cracking those password so lets begin the cracking . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhg6qrZ8Y1M6xNy7PxUpR-ePKj5KTUhqlwfgc2DmH_ip2BHSSRG0dHcboEG9KSsdJm9Im-D2WvoHqNh7DkZ4uv83a9FfMVtiBFbiRwuSVSrlDopTU-gZr35pk0PMzRhH9XOSi3j4WSJaI0U/s1600/large.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hacker's Favorite Tools For Password Cracking" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhg6qrZ8Y1M6xNy7PxUpR-ePKj5KTUhqlwfgc2DmH_ip2BHSSRG0dHcboEG9KSsdJm9Im-D2WvoHqNh7DkZ4uv83a9FfMVtiBFbiRwuSVSrlDopTU-gZr35pk0PMzRhH9XOSi3j4WSJaI0U/s1600/large.jpg" /></a></div> 
Cain and Abel :- Best tool for windows password cracking.It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. 
 
<a href="http://www.hackingtools.in/free-download-cain-and-abel/">Download Free</a> 
 
John the Ripper :- A powerful, flexible, and fast multi-platform password hash cracker. John the Ripper is a fast password cracker, currently available for many flavors of Unix, DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches. 
 
<a href="http://www.openwall.com/john/">Download Free</a> 
 
THC Hydra :- A Fast network authentication cracker which support many different services. When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more. 
<a href="http://freeworld.thc.org/thc-hydra/"> 
Download Free</a> 
 
L0phtcrack :- Windows password auditing and recovery application L0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc). 
 
<a href="http://download.insecure.org/stf/lc5-setup.exe">Download</a> 
<a href="http://download.insecure.org/stf/lc5-crack.zip">http://download.insecure.org/stf/lc5-crack.zip</a> (keygen) 
 
Pwdump :- Windows password recovery tool. Pwdump is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file. 
 
<a href="http://swamp.foofus.net/fizzgig/pwdump/downloads.htm">Download Free</a> 
 
RainbowCrack :- An Innovative Password Hash Cracker.The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called "rainbow tables". It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished. 
<a href="http://www.antsight.com/zsl/rainbowcrack/"> 
Download Free</a> 
 
Brutus :- A network brute-force authentication cracker 
This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more. 
<a href="http://www.hoobie.net/brutus/brutus-download.html">Download Free</a> 
 
Please Do comment if you know any other tools that you use to break any password you can also share online url . 
 
thank you for your love and support :).</div>

Hackers Favorite Tools For Cracking Password

SoHi In my Previous i posted about COMMONLY FOUND ENCRYPTED PASSWORD HASH AND SALTS Now we Will discuss what tools are used for cracking th...

Commonly Found Encrypted Password Hash And Salts

This post basically gives you a real life idea of few commonly found encrypted .so let me make you understand why this encryption is needed for the website developer? the answer is very simple its basically to make storage of your in secured format rather than storing password in clear text format it is always better to store keep it encrypted format so that nobody can easily see it 
to have better idea lets discuss. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8uu5BBjJEXkuwtVBlN5LHYvaCqLInfNKeRi1r3pS2t2MqS1nf-RYcciCDyC5iy4O1Ork2AFfZWA6MW7veiI9TXVUEpqsB-tQTzl6hE1aWDPKCt0C0-dCfwV0GZ58QyeGlSnv0Dfs6ST4K/s1600/encryption.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8uu5BBjJEXkuwtVBlN5LHYvaCqLInfNKeRi1r3pS2t2MqS1nf-RYcciCDyC5iy4O1Ork2AFfZWA6MW7veiI9TXVUEpqsB-tQTzl6hE1aWDPKCt0C0-dCfwV0GZ58QyeGlSnv0Dfs6ST4K/s320/encryption.png" /></a></div><h3>What is Hash? Types Of HASH</h3> 
It is a common technique use by developer to store password in database in encrypted format so that normal person cannot see the credentials in clear text.every time when ever a user log in to authentication portal his/her password is compared with the stored hash and if it found to be valid then the user is given access to portal,if the two hashes are not the same the passwords do not match and the user is denied access. 
 
<h2>various types of encrypted password with example </h2> 
<li>MD5 - The most common hash you will come across in the wild is an MD5 hash (Message-Digest algorithm) 
 
Characteristics:- 
 
<li>They are always 32 characters in length (128 Bits) 
<li>They are always hexadecimal (Only use characters 0-9 and A-F) 
<blockquote>Example - f5d1278e8109edd94e1e4197e04873b9 
</blockquote>If the hash breaks one of these rules - IT IS NOT MD5. 
 
<li>SHA1 - Still used frequently on the internet and is one of a large family of Secure Hash Algorithms. 
 
Characteristics:- 
 
<li>They are always 40 Characters in length (160 bits) 
<li>They are always hexadecimal (Only use characters 0-9 and A-F) 
<blockquote>Example - ab4d8d2a5f480a137067da17100271cd176607a1 
</blockquote>If the hash breaks one of these rules - IT IS NOT SHA1. 
 
<li>MySQL < 4.1 - These aren't used very often but still come up on very often because people have no idea what to do with them, they are used in older versions of Mysql. 
 
Characteristics:- 
 
They are always 16 Characters in length (64 bits) 
They are always hexadecimal (Only use characters 0-9 and A-F) 
If the hash breaks one of these rules - IT IS NOT MYSQL < 4.1.

<blockquote> 
Example - 606727496645bcba 
</blockquote> 
<li>MYSQL5 - Used in newer versions of MYSQL to store database user passwords. 
 
Characteristics:- 
 
They are always 41 characters in length 
They are always capitalized 
They always begin with an asterisk 
If the hash breaks one of these rules - IT IS NOT MYSQL5. 
<blockquote>Example - *C8EB599B8E8EE7BE9F1A5691B7BC9ECCB8DE1C75 
</blockquote> 
<li>MD5(Wordpress) - Used in word press driven sites, one of the most commonly confused hashes by everyone 
 
Characteristics:- 
 
They always start with $P$ 
They are always variable case alpha numeric (0-9 A-Z a-z) 
The are always 34 characters long 
 
If the hash breaks one of these rules - IT IS NOT MD5(Wordpress). 
<blockquote>Example - $P$9QGUsR07ob2qNMbmSCRh3Moi6ehJZR1 
</blockquote><li>MD5(phpBB3) - Used in PHPBB forums, another commonly miss identified hash, especially amongst skids. 
 
Characteristics:- 
 
They always start with $H$ 
They are always variable case alpha numeric (0-9 A-Z a-z) 
The are always 34 characters long 
If the hash breaks one of these rules - IT IS NOT MD5(PhpBB). 
 
<blockquote>Example - $H$9xAbu5SruQM5WvBldAnS46kQMEw2EQ0 
</blockquote><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt_DC6Pb3C7lTWq9mgBLwWrfv8-0BN9Fd4zQn65g4ty5BdM0Bz_a6FCmDfMeXbV5ASdKA69uo9lyAyee22UoXJl4IR68ikNmbvZ3QkIb8rHoXzwu_UcAv_ZNwtz_-cSw0pUpKZMR2z5CjH/s1600/encryption.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt_DC6Pb3C7lTWq9mgBLwWrfv8-0BN9Fd4zQn65g4ty5BdM0Bz_a6FCmDfMeXbV5ASdKA69uo9lyAyee22UoXJl4IR68ikNmbvZ3QkIb8rHoXzwu_UcAv_ZNwtz_-cSw0pUpKZMR2z5CjH/s320/encryption.jpg" /></a></div><h3>What is SALTS? Types of Salts</h3> 
The most commonly salted hash is MD5 because it is cryptographically weak and easy to crack. So a salt gets added to the password before hashing to increase the parity. For example MD5($password.$salt). 
 
<li>Salted MD5 - Used in a large amount of applications to increase hash parity and to increase the time it takes to crack. 
 
Characteristics:- 
 
They consist of two blocks connected by a colon, the first is the hash the second is the salt. 
The first part of the salted hash is hexadecimal, the second is variable case alphanumeric. 
They first part will always be 32 characters long 
The second part can be any length. 
If the hash breaks one of these rules - IT IS NOT A SALTED MD5. 
<blockquote>Example - 49adee90123f8c77d9020bba968c34dd:PS2en 
</blockquote>Warning - in some cases the salt can contain symbols (but this is rare) 
 
NOTE - You need both the salt AND the hash to decrypt a salted md5. 
 
Cracking these Encryption 
 
This what a hacker always look for after getting the password from database through sql injection /other web vulnerability. 
There are various online as well as offline tools are available for cracking any encrypted password so that i will put in my next post keep visiting have a racking time ahead :).

Commonly Found Encrypted Password Hash And Salts

This post basically gives you a real life idea of few commonly found encrypted .so let me make you understand why this encryption is needed ...

How To Hack|Crack Windows Password With Kali Linux

As I already posted some article on Kali and according to your request here is another post on kali. 
1st of all <a href="http://www.darksite.co.in/2013/03/free-download-worlds-best-hacking.html">download kali linux</a> to a DVD/CD and then Boot Windows machine with the LiveCD. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRL3CS091mP6kVOxGfXxxwn3vm__mVwF4H82gS_4GFc_KBuaWwgCzfqRvxJkeKQ_DGtqRvkpwzWrrNgpnOd8sMOWJDaJSbcg-OwvX5EJH6P9zCqx8nJsunxqwkMt_hQqwau1BCQ0g44nhC/s1600/password.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Crack Windows Password" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjRL3CS091mP6kVOxGfXxxwn3vm__mVwF4H82gS_4GFc_KBuaWwgCzfqRvxJkeKQ_DGtqRvkpwzWrrNgpnOd8sMOWJDaJSbcg-OwvX5EJH6P9zCqx8nJsunxqwkMt_hQqwau1BCQ0g44nhC/s320/password.jpg" /></a></div>On the boot menu of Kali Linux, select Live (forensic mode). 
 
Kali Linux initialize and when it loads, it will open a terminal window and navigate to the Windows password database file. 
As i said previously Almost all versions of windows password is saved in SAM file. 
This file is usually located under /Windows/System32/config. 
On your system it may look something like this: /media/hda1/Windows/System32/config. See the screenshot below. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdycIHJwATnpOzytKKQmT9PwmqDH3umKL45CzLXqGS_L9DyrXFrIRMLP5OykK8D6ss_ufcWwgX2bJ5jtY2-zo_mUAfWAa84Ric1a-TdVGd5MiC08bylsh-C26rY-ulwF3SAO7VmYam-l5E/s1600/12.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="hack using kali" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhdycIHJwATnpOzytKKQmT9PwmqDH3umKL45CzLXqGS_L9DyrXFrIRMLP5OykK8D6ss_ufcWwgX2bJ5jtY2-zo_mUAfWAa84Ric1a-TdVGd5MiC08bylsh-C26rY-ulwF3SAO7VmYam-l5E/s1600/12.png" width="560" /></a></div> 
The SAM database is usually in the /media/name_of_hard_drive/Windows/System32/config 
 
The screen shot below lists the SAM database file on my hard drive. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEned4QWTZAOh3H4gmsvAZtNKeFXCFdkSui_ZXKYXquMxZd0TB_oIbd-a3UcbzUybVLK56xlUFy5C3Y3A-TTbPCvt5Y0x1R0Ig0h1bVvr7h2Uayyks0jcYr66-U6sUdJ7IdoYK8IHbtMZ0/s1600/13.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="hacking windows with kali" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhEned4QWTZAOh3H4gmsvAZtNKeFXCFdkSui_ZXKYXquMxZd0TB_oIbd-a3UcbzUybVLK56xlUFy5C3Y3A-TTbPCvt5Y0x1R0Ig0h1bVvr7h2Uayyks0jcYr66-U6sUdJ7IdoYK8IHbtMZ0/s1600/13.png" width="560" /></a></div> 
Type command chntpw -l SAM and it will list out all the usernames that are contained on the Windows system. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEii5OcpRYcVGfCUs1LtkdlXWo5ieglfOMCsVfuR8Zw38lLsQke7wkRyl03APp73mAD-gOqQ5IlARpLUlyR8ssESZ0_I2lF62QpYgJjUX81AzXwWz5OiGliuQd1ZGYri_PDdFpR-Gr414hyphenhyphenb/s1600/14.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="windows password hack" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEii5OcpRYcVGfCUs1LtkdlXWo5ieglfOMCsVfuR8Zw38lLsQke7wkRyl03APp73mAD-gOqQ5IlARpLUlyR8ssESZ0_I2lF62QpYgJjUX81AzXwWz5OiGliuQd1ZGYri_PDdFpR-Gr414hyphenhyphenb/s1600/14.png" width="560" /></a></div> 
The command gives us a list of usernames on the system. 
When we have the username we want to modify and we simply run the command 
chntpw -u “username” SAM 
 
In the example below we typed: chntpw -u “Administrator” SAM and we get the following menu: 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAwMq4nc1QMQCGFKmeBrYotJfkuAjFfkLrf9DeNM8TYvwNdOWLJum-lr45ciEPgNcjyEqpK4YD83mYlnNRrEo-U7Qko0RhNvznRBd_Ss4MZy23ytlo-n4ZC8SExS8i8zgPow5kXUv8i7f7/s1600/15.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="windows password with kali" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgAwMq4nc1QMQCGFKmeBrYotJfkuAjFfkLrf9DeNM8TYvwNdOWLJum-lr45ciEPgNcjyEqpK4YD83mYlnNRrEo-U7Qko0RhNvznRBd_Ss4MZy23ytlo-n4ZC8SExS8i8zgPow5kXUv8i7f7/s1600/15.png" /></a></div> 
We now have the option of clearing the password, changing the password, or promoting the user to administrator. 
Changing the password does not always work on Windows 7 systems, so it is recommended to clear the password. Therefore you will be able to log in with a blank password. 
 
You can also promote the user to a local administrator as well. 
 
this was a simple tutorial on kali if you wants more do comment.

How To Hack|Crack Windows Password With Kali Linux

As I already posted some article on Kali and according to your request here is another post on kali. 1st of all download kali linux to a D...

hack Gmail Password| Account Using Hydra on kali

Here is a small tutorial for those who are asking how to hack gmail account. 
So lets get into tutorial. 
Open Kali terminal and type. 
 
Also you can Manually get this way 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimAheqpu8QWMG2RmiDL33Ct__vUvcUpV_44WVpM_T2y5xcIYLNIuqnZiRo0-AGA1yvodfnBvv5bojid5-eTsx_F2jcDd7C0Fdx0uqa2XGlMmf0vkPUM1HPbfuxHny-QQMQIPPsNFTPlPOo/s1600/12.PNG" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimAheqpu8QWMG2RmiDL33Ct__vUvcUpV_44WVpM_T2y5xcIYLNIuqnZiRo0-AGA1yvodfnBvv5bojid5-eTsx_F2jcDd7C0Fdx0uqa2XGlMmf0vkPUM1HPbfuxHny-QQMQIPPsNFTPlPOo/s620/12.PNG" /></a> 
Kali Linux->Passwords Attacks->Online Attacks->Hydra 
Now when it opened select target tab, and then 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibkbYuK1AHC6nDhrU0HlOZRgWLN5yZOKOsyFlN3FivQLJuS95rq7f2-UZy58vOzc-VswiQuV5GXW-wwgo5EKdnLTvMLQVzfdbPu7StBnnxcrHsCFygqlJVdD5kscdpH6sDxyju30bGAAoq/s1600/1223.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibkbYuK1AHC6nDhrU0HlOZRgWLN5yZOKOsyFlN3FivQLJuS95rq7f2-UZy58vOzc-VswiQuV5GXW-wwgo5EKdnLTvMLQVzfdbPu7StBnnxcrHsCFygqlJVdD5kscdpH6sDxyju30bGAAoq/s320/1223.PNG" /></a></div>Single Target: smtp.gmail.com 
 
Protocol: smtp 
 
Now in In passwords tab, select 
 
Username: Type Victim Email ID 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj27Y227mACiuWYiB1jofOd0q0X_2l45g9H2btGRwAU6-Bo_IHa_ZfUCExUBVcv_rJtQBclTPBVRdktwD-P88Jl6MyKNmjV_lQmdiDW5rpKihQJJSZbi35TH83fzRN25hw1aA0mjyagwnDC/s1600/1234.PNG" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj27Y227mACiuWYiB1jofOd0q0X_2l45g9H2btGRwAU6-Bo_IHa_ZfUCExUBVcv_rJtQBclTPBVRdktwD-P88Jl6MyKNmjV_lQmdiDW5rpKihQJJSZbi35TH83fzRN25hw1aA0mjyagwnDC/s320/1234.PNG" /></a></div> 
In the passwords, select the password list option and browse to select your 
(Note : your password list should contain all possible password list better always create custom password list ) 
 
Passwords file. you can get a good list <a href="https://www.dropbox.com/s/75y5dmff8mjh4t2/10k%20most%20common.txt">Here</a>. 
 
Ok now we are ready to attack now click on start And wait for some while you will get the password. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivDsWkxzJQpmfGI94WZpv48tQc7ArMpNb-k8VfqJZFt5iUREc-m5RdwgPzQTSAeuZaUgoHh-icHRWFKiHstMN0EjmxGPNzdNxX0g2eOIYkj7bV6vmFUfwtLneCx8ne5aJ4zcgseP61p7iq/s1600/1212-vert.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivDsWkxzJQpmfGI94WZpv48tQc7ArMpNb-k8VfqJZFt5iUREc-m5RdwgPzQTSAeuZaUgoHh-icHRWFKiHstMN0EjmxGPNzdNxX0g2eOIYkj7bV6vmFUfwtLneCx8ne5aJ4zcgseP61p7iq/s320/1212-vert.jpg" /></a></div> 
And i am sure you will try it leave comment and thanks

hack Gmail Password| Account Using Hydra on kali

Here is a small tutorial for those who are asking how to hack gmail account. So lets get into tutorial. Open Kali terminal and type. Als...

How To Find Admin Login Panel Of A Website | Online | Top 7 Ways

Hello Friends this is that post which you might be looking for today i am going to tell you how to find admin panel of a website that you want to hack into so are you interested to know so let me list down ways by which you can easily get the admin login panel. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSU6PZX_hanpkR99cTJES24-TCMV3-emjrc__W_xjM9lAN45XtYSO4yTWr2qjhQI4ZzUJdLX0mF3ddq7-YtCEZ1XlCYiYKPUEyIobfUnrobfo9s-pi4-PfGIh6AkPRsB1YmjJERv3hXm_N/s1600/admin.jpg" imageanchor="1"><img alt="Admin Login Panel Finder" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSU6PZX_hanpkR99cTJES24-TCMV3-emjrc__W_xjM9lAN45XtYSO4yTWr2qjhQI4ZzUJdLX0mF3ddq7-YtCEZ1XlCYiYKPUEyIobfUnrobfo9s-pi4-PfGIh6AkPRsB1YmjJERv3hXm_N/s320/admin.jpg" width="550" /></a> 
in various case i find some new born hacker able to get the user id and password by sql injection but still they give up as they unable to find the admin login panel so if you are in search of admin login panel of a website then this post will help you for sure. 
 
Method 1:Adding URL 
This is the first and easiest method to find admin login page. You can add some words 
after the URL.Like 
 
<li>www.site.com/admin 
<li>www.site.com/administrator 
<li>www.site.com/login 
<li>www.site.com/wp-login.php 
<li>www.site.com/admin.php 
 
Method 2:<a href="http://www.darksite.co.in/2012/06/online-admin-page-finder-perl-python.html">Using Various Script</a> 
You can use various scripts like various admin finder to get the admin page.Here I am 
showing you an useful scripts which will help you to get the admin page.(I will release my own admin finder script soon and upadte here) 
To run this script you first need to install Active Perl.get it from 
<a href="http://www.activestate.com/activeperl/downloads">http://www.activestate.com/activeperl/downloads</a> 
 
Now copy the code of <a href="http://pastebin.com/WWZszURW">http://pastebin.com/WWZszURW</a> and save it as anything.pl and 
run the script to get the login page of the desired site.(Remember its a python Script). 
 
Method 3:Crawling software 
You can use various crawling tool to crawl the website and get the login page. These 
website crawl all the pages of the website and show the list of all pages and 
directories. 
Method 4:<a href="http://www.darksite.co.in/2012/04/how-to-find-admin-panel-of-any-web-site.html">Crawling</a> 
By default various search engines crawl the entire site and by using robots.txt the site 
owner actually gives the list of links that are not to be crawled by the engine. 
Now most 
of the time the admin ask the engine not to crawl the admin page so if you view the 
robots.txt you can get the link to the login page. 
www.site.com/robots.txt 
Method 5:<a href="http://www.darksite.co.in/search/label/Google%20Dorks">Google Dorks</a> 
Google dorks are some time very useful if you know to use it properly.so here are some example of useful Google dorks that will definitely help you in finding admin login panle of a website. 
 
<li>Site:site.com “admin” 
<li>Site:site.com inurl:login 
<li>site:site.com intitle:"admin login" 
 
Method 6:<a href="http://www.darksite.co.in/2012/04/free-download-best-hackers-professional.html">Using Online Admin Finder/Scanner</a> 
There are many such online admin finder available but i am giving you the link for one of my favorite one This 
site <a href="http://sc0rpion.ir/af/">http://sc0rpion.ir/af/</a> will help you in finding admin login page online. 
 
Method 7: <a href="http://www.darksite.co.in/2012/04/best-of-sql-injection-tool-havij-v115.html">Havij Tool</a> 
At last you can use the all time popular Havij to find admin page.Click on the HAvij Link to know more i have already written a nice post on it. 
<h2>COUNTERMEASURES BY ADMIN</h2>From this post it becomes very clear that if You (site owners) have not changed the 
default URL of your site’s login page then it can easily be compromised if an attacked 
gets the User name and password or even he can brute it.So it is advised that you 
should change the default URL of yours login page to something uncommon which is 
hard to guess like for example: 
www.site.com/glass.php 
www.site.com/myway.php 
 
Thank You For Reading Please share This article if you like and stay tuned for many such tutorial.

How To Find Admin Login Panel Of A Website | Online | Top 7 Ways

Hello Friends this is that post which you might be looking for today i am going to tell you how to find admin panel of a website that you wa...

What is Secure Socket Layer And How hackers can use it ?

Some time back you must have heard about hackers hacking into credit card info,password via public computers.so this post is all about it the secured socket layer what is it actually and how it helps in real life or during money paying transaction time...etc. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9kS7Ujz_4Jq0gLzCcpnTBL7Ek1LneOCB5CiJrinWGcWxRSSlwZgalnBetVfrcManrJ0UiCkfx5l04kKzuE_vZvc0ABNT3z89XEMh-BtyiTEf-g-4pTAHoZVEeretYJK3STHciaOfKQoyl/s1600/ssl_logo.png" imageanchor="1"><img align="left" alt="secured socket layer" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9kS7Ujz_4Jq0gLzCcpnTBL7Ek1LneOCB5CiJrinWGcWxRSSlwZgalnBetVfrcManrJ0UiCkfx5l04kKzuE_vZvc0ABNT3z89XEMh-BtyiTEf-g-4pTAHoZVEeretYJK3STHciaOfKQoyl/s320/ssl_logo.png" /></a> 
A hacker can launch various types of attacks such as Packet sniffing(capturing) or ARP Poisoning to steal your sensitive information. 
 
Secure Sockets Layer (SSL) is the most widely used technology for creating a secure communication between the web client and the web server. You must be familiar with http:// protocol and https:// protocol, You might be wondering what they mean. HTTP protocol is used for standard communication between the Web server and the client. HTTPS is used for a secure communication. 
 
<a href="http://www.darksite.co.in/2012/04/what-cryptography-and-steganography.html">Cryptography Click to Know 
</a> 
 
If two users want to have a secure communication they can also use cryptography to accomplish it 
 
Lets take an example: 
 
DARKSITE (Decrypt Text) EBSLTJUF (Encrypted Text) 
 
See the above example i have used simple encryption and decryption Algorithm=+ for the communication and the key is "1", What comes after D is E so as you can see that S is converted into T, What comes After E is F to letter E from the word secure if converted into F and so on, To help you understand this more better I am adding a Video. 
<iframe width="550" height="315" src="http://www.youtube.com/embed/5lD8d8scvWo" frameborder="0" allowfullscreen></iframe> 
So If the hacker starts sniffing from between he will get Encrypted text and as the Hacker does not know the keys so he cant decrypt it, but if the attacker or hacker is sniffing from the starting point so he will get the key and can easily Decrypt the data 
<h2> 
Standard Communication VS Secure communication</h2><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMHy9p87-_iYHwQZcpsDLGeCYWNOEyUQ4CaxFYzhfWv2CkCnPMvSGS7tosl9_eMcMOeghZv0pGz_sljfyiij1XNBgnuGWDjEGLuoCk-tvvTpIKS45ojnoBZJlAlZ-AMGx5D2mYwr4lU4zn/s1600/secure.jpg" imageanchor="1"><img alt="secured connection" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMHy9p87-_iYHwQZcpsDLGeCYWNOEyUQ4CaxFYzhfWv2CkCnPMvSGS7tosl9_eMcMOeghZv0pGz_sljfyiij1XNBgnuGWDjEGLuoCk-tvvTpIKS45ojnoBZJlAlZ-AMGx5D2mYwr4lU4zn/s320/secure.jpg" /></a> 
Suppose there exists two communication parties A (client) and B (server) 
Standard communication(HTTP) 
When A will send information to B it will be in unencrypted manner, this is acceptable if A is not sharing Confidential information, but if A is sending sensitive information say "Password" it will also be in unencrypted form, If a hacker starts sniffing the communication so he will get the password.This scenario is illustrated using the following figure 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjN6r_4pxbmbadQBFXZ44XHMEqrO_0n6VNEUMUSkn_i6jBnd1pmu_QzSjtr8QOUSzGHnI2BTJl-e5s_Oc1tJVxMkdB_EqHTA1zjwWCrE3xoy17524wtDWQEwUgG9ANe7GQp6Vh17eGoCIeC/s1600/http1.jpg" imageanchor="1"><img alt="http connection" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjN6r_4pxbmbadQBFXZ44XHMEqrO_0n6VNEUMUSkn_i6jBnd1pmu_QzSjtr8QOUSzGHnI2BTJl-e5s_Oc1tJVxMkdB_EqHTA1zjwWCrE3xoy17524wtDWQEwUgG9ANe7GQp6Vh17eGoCIeC/s320/http1.jpg" width="550" /></a> 
Secure communication(HTTPS) 
In a secure communication i.e. HTTPS the conversation between A and B happens to be in a safe tunnel, The information which a user A sends to B will be in encrypted form so even if a hacker gets unauthorized access to the conversion he will receive the encrypted password (“xz54p6kd“) and not the original password.This scenario is illustrated using the following figure 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvKqpVT-oGCIfIWhLIibt898kmaYCVF4NCX7Vykr6vhBfs1To0EH__llIsx8ij_7fwU_bGjaDyYR6f6FCw0NNy19Jh-xUbXeBaEyvJwLuS_6hV9ehLTurnjOc5MqqyN9MG2KWkP2qFkEH0/s1600/https1.jpg" imageanchor="1"><img alt="https connection" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvKqpVT-oGCIfIWhLIibt898kmaYCVF4NCX7Vykr6vhBfs1To0EH__llIsx8ij_7fwU_bGjaDyYR6f6FCw0NNy19Jh-xUbXeBaEyvJwLuS_6hV9ehLTurnjOc5MqqyN9MG2KWkP2qFkEH0/s320/https1.jpg" width="550" /></a> 
How is HTTPS implemented? 
 
A HTTPS protocol can be implemented by using Secure Sockets Layer (SSL), A website can implement HTTPS by purchasing SSL certificate. 
Which websites need SSL Certificate? 
The websites where a private conversation is occurred, Websites related to online transactions or other sensitive information needs to be protected needs to SSL Certificate 
 
How to identify a Secure Connection? 
 
In Internet Explorer and google chrome, you will see a lock icon in the Security Status bar. The Security Status bar is located on the right side of the Address bar. You can click the lock to view the identity of the website. 
 
If you are making an online transaction through Credit card or any other means you should check if https:// secured communication is enabled.

What is Secure Socket Layer And How hackers can use it ?

Some time back you must have heard about hackers hacking into credit card info,password via public computers.so this post is all about it th...

Wifi | Wireless Hacking Using Backtrack | Crack WPA Key With Aircrack-ng

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKV07AcdzJ5E56RbnehfLzPZmTqVPUcsOj5QM2PlaGSt3ClJ6UBDg76KLqRBdSiZOfMDJVij0vDyEmoc8qZZfcmIYbZdaL1ugWOgANp4D_5nVIAYHxqYUUS22GPDac9slqxmxcDNjT7ZNC/s1600/wifi-hacking.png" imageanchor="1"><img alt="Wifi | Wireless Hacking Using Backtrack | Crack WPA Key With Aircrack-ng" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKV07AcdzJ5E56RbnehfLzPZmTqVPUcsOj5QM2PlaGSt3ClJ6UBDg76KLqRBdSiZOfMDJVij0vDyEmoc8qZZfcmIYbZdaL1ugWOgANp4D_5nVIAYHxqYUUS22GPDac9slqxmxcDNjT7ZNC/s320/wifi-hacking.png" /></a> 
Hello Friends after many days i come up with a fresh tutorial on wifi hacking as many of us know there are many such wireless network present around us :D So i decided to tell you how we can hack those wireless/wifi network to get free internet access. 
 
So Lets Begin For this you need Backtrack OS And Network Adapter (Of course it is integrated with your laptop :P). 
Lets do it step wise. 
 
Step 1: Setting up your network device on your laptop 
 
To capture network traffic without being associated with an access point, we need to set the wireless network card in monitor mode. 
To do that, type: 
Command # iwconfig (to find all wireless network interfaces and their status). 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqO3OZaiHTlkIy8r4_sna9-zqZhJ4QrGu_E88ObfY1u6jHsJhNm68QwVOQktx58FCq7vRpBS5O1mXsr29fk_lrP2gWUheZmp5s9nJhYtF-giMtHKimZjJwvmdYyCRmaAHbtlbWdQ3dBkjN/s1600/1+(1).JPG" imageanchor="1"><img alt="check Network status on Backtrack" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjqO3OZaiHTlkIy8r4_sna9-zqZhJ4QrGu_E88ObfY1u6jHsJhNm68QwVOQktx58FCq7vRpBS5O1mXsr29fk_lrP2gWUheZmp5s9nJhYtF-giMtHKimZjJwvmdYyCRmaAHbtlbWdQ3dBkjN/s320/1+(1).JPG" /></a> 
Command # airmon-ng start wlan0 (to set in monitor mode, you may have to substitute wlan0 for your own interface name) 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH-KGprNN7mOzNxqlRpShwDKrYbFEk5qR1hyGStYoBtPIUrqfemCcB3rTPkGvzm4jZlfjXg5AsVglqkyCEhkQp5b9S4zKW-eMATJ2VnLhydSl26Y5LMXxrfqzFuYzPVDQ_-8j-7Z-izeB3/s1600/2+(1).JPG" imageanchor="1"><img alt="wifi hacking darksite.co.in" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjH-KGprNN7mOzNxqlRpShwDKrYbFEk5qR1hyGStYoBtPIUrqfemCcB3rTPkGvzm4jZlfjXg5AsVglqkyCEhkQp5b9S4zKW-eMATJ2VnLhydSl26Y5LMXxrfqzFuYzPVDQ_-8j-7Z-izeB3/s320/2+(1).JPG" /></a> 
Step 2 : Reconnaissance 
 
This step assumes you've already set your wireless network interface in monitor mode. It can be checked by executing the iwconfig command. Next step is finding available wireless networks, and choosing your target: 
 
Command # airodump-ng mon0 (Monitors all channels, listing available access points and associated clients within range. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgy-RBqItn2_4yL5AdeOfGa8vIRfbTWC2LSqJY6zTqz855IvRNpJc9iLxe14BSOmbFxgBPbodDWvCN2oBGdR4RqU-6zJI0bzXmhjP3k2RRziYhs489sXxqWc7VuxoXQck6ue7UqBzG6YqBV/s1600/3.JPG" imageanchor="1"><img alt="wireless hacking darksite.co.in" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgy-RBqItn2_4yL5AdeOfGa8vIRfbTWC2LSqJY6zTqz855IvRNpJc9iLxe14BSOmbFxgBPbodDWvCN2oBGdR4RqU-6zJI0bzXmhjP3k2RRziYhs489sXxqWc7VuxoXQck6ue7UqBzG6YqBV/s320/3.JPG" /></a> 
Step 3 : Capturing Packets 
 
To capture data into a file, we use the airodump-ng tool again, with some additional switches to target a specific AP and channel. Assuming our wireless card is mon0, and we want to capture packets on channel 1 into a text file called data: 
 
Command # airodump-ng -c 1 bssid AP_MAC -w data mon0 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhApr-A1MnwWG6WDzSoanDf4amTwvKqBYtJ0Aiv_YE1FVKyRbRjJdDHpNlkg5c7NUmAfYRpmaDjVjw1s6hiNllXszA94kZrp7a9X4m5prvmFA81kusqBoD2VKGBRxXr5T71jokhKZsBWm2K/s1600/4.JPG" imageanchor="1"><img alt="wep key cracking" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhApr-A1MnwWG6WDzSoanDf4amTwvKqBYtJ0Aiv_YE1FVKyRbRjJdDHpNlkg5c7NUmAfYRpmaDjVjw1s6hiNllXszA94kZrp7a9X4m5prvmFA81kusqBoD2VKGBRxXr5T71jokhKZsBWm2K/s320/4.JPG" /></a> 
Step 4 : De-Authentication Technique 
 
To successfully crack a WPA-PSK network, you first need a capture file containing handshake data. You may also try to deauthenticate an associated client to speed up this process of capturing a handshake, using: 
 
Command # aireplay-ng --deauth 3 -a MAC_AP -c MAC_Client mon0 (where MAC_AP is the MAC address of the access point, MAC_Client is the MAC address of an associated client. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEho9k56Za88n4VeDrFJtGQMAo6XxjnI_B6iGE36h6MFWKjQCrb9kBOcO0PZsIzKWCa4Ozy14BS0ILnskZgXK61_5zFeLVeVH4ATwuWGq-18klcg6uYlCmvZfsriRQFF_aEWYC9hX3Rnhkzp/s1600/5.JPG" imageanchor="1"><img alt="Wpa Key Cracking" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEho9k56Za88n4VeDrFJtGQMAo6XxjnI_B6iGE36h6MFWKjQCrb9kBOcO0PZsIzKWCa4Ozy14BS0ILnskZgXK61_5zFeLVeVH4ATwuWGq-18klcg6uYlCmvZfsriRQFF_aEWYC9hX3Rnhkzp/s320/5.JPG" /></a> 
So, now we have successfully acquired a WPA Handshake. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijev4rsZGmti0f92CA0nOOZumJKoZ5SQA7zJdMHe5J4HMxDUgxOKFUgPSPeVerF-QA7FTzTnTxC1Oipp-o6c12r8SJ1CQknDsqEZ7eRi8QVYhTLg0Crsr5ut2rRxoF1EIm8pxJKoAR1F60/s1600/6-1.jpg" imageanchor="1"><img alt="Wifi hacking darksite.co.in" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEijev4rsZGmti0f92CA0nOOZumJKoZ5SQA7zJdMHe5J4HMxDUgxOKFUgPSPeVerF-QA7FTzTnTxC1Oipp-o6c12r8SJ1CQknDsqEZ7eRi8QVYhTLg0Crsr5ut2rRxoF1EIm8pxJKoAR1F60/s320/6-1.jpg" /></a> 
 
Step 5 : Cracking WPA/WAP2 
 
Once you have captured a four-way handshake, you also need a large/relevant dictinary file (commonly known as wordlists) with common pass phrases. 
 
Command # aircrack-ng -w wordlist ‘capture_file’.cap (where wordlist is your dictionary file, and capture_file is a .cap file with a valid WPA handshake) 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZM2BIAL_o9Lu-gXoaGUTsMzL_B1M1S5WiZHLSHm6SALqGjFc0WCtVVoIblzz-uZHABcvRnmf4Wa-wE-ea_88lOB8wJeeVd3VjhaL_D_0Te6afTJAAyYBUvOhM5Abgk5VDF1S7vxJr0Hjc/s1600/7.JPG" imageanchor="1"><img alt="Wifi | Wireless Hacking Using Backtrack" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZM2BIAL_o9Lu-gXoaGUTsMzL_B1M1S5WiZHLSHm6SALqGjFc0WCtVVoIblzz-uZHABcvRnmf4Wa-wE-ea_88lOB8wJeeVd3VjhaL_D_0Te6afTJAAyYBUvOhM5Abgk5VDF1S7vxJr0Hjc/s320/7.JPG" /></a> 
Cracking WPA-PSK and WPA2-PSK only needs (a handshake). After that, an offline dictionary attack on that handshake takes much longer, and will only succeed with weak pass phrases and good dictionary files. 
 
Cracking WPA/WPA2 usually takes many hours, testing tens of millions of possible keys for the chance to stumble on a combination of common numerals or dictionary words. Still, a Weak/short/common/human-readable pass phrase can be broken within a few minutes using an offline dictionary attack. 
 
This One Is Real Tested one and working perfectly so all the best hackers.

Wifi | Wireless Hacking Using Backtrack | Crack WPA Key With Aircrack-ng

Hello Friends after many days i come up with a fresh tutorial on wifi hacking as many of us know there are many such wireless network prese...

Introduction To WebGoat A Revolutionary Web Attack Tool

Guest Post By:Nikhalesh Singh 
 
What is WebGoat?<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDkC7ScAS8yHU21Qr-z2Y4GN348wqvXzXvh5-3W-IZcxaF-hSDqxZXtQ-aLNObF5kK70AbIFCQ-WADzdoxoBZ-TQAEjFF_7FNKue5K3n2LY-Ax_Kc6OuqxO-SJPabzS8LLgOjQQ470418g/s1600/webinaria.jpg" imageanchor="1" style="clear:right; float:right; margin-left:1em; margin-bottom:1em"><img border="0" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiDkC7ScAS8yHU21Qr-z2Y4GN348wqvXzXvh5-3W-IZcxaF-hSDqxZXtQ-aLNObF5kK70AbIFCQ-WADzdoxoBZ-TQAEjFF_7FNKue5K3n2LY-Ax_Kc6OuqxO-SJPabzS8LLgOjQQ470418g/s400/webinaria.jpg" width="304" /></a></div>WebGoat is a J2EE web application, created by the OWASP community to provide a teaching environment for webapplication security. 
It is a deliberately insecure program, where you must go through a number of lessons. In each lesson, you learn about a new sort of vulnerability, and in the same moment get a hands-on try at exploiting that vulnerability. 
Why you need webgoat ? 
 
If you in field of hacking and security you know Web application security is difficult to learn and practice. Not many people have full blown web applications like online book stores or online banks that can be used to scan for vulnerabilities. In addition, security professionals frequently need to test tools against a platform known to be vulnerable to ensure that they perform as advertised. All of this needs to happen in a safe and legal environment. Even if your intentions are good, we believe you should never attempt to find vulnerabilities without permission. 
 
From webgoat you can perfume attack and learn 
 
HTTP Splitting and Cache Poisining<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8fxhXitIOduZC7kKHuqUGOfaKAl906jCuU68CW6jS382HAACuY8BhNoryjMop6jIHwhSrgF21NK0CZofrwJ2emhRZPE7BguiO5pVseIajlJDaqasvA4MoBOUBIngLQza3o5ascavskRwC/s1600/report.jpg" imageanchor="1" style="clear:right; float:right; margin-left:1em; margin-bottom:1em"><img border="0" height="248" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8fxhXitIOduZC7kKHuqUGOfaKAl906jCuU68CW6jS382HAACuY8BhNoryjMop6jIHwhSrgF21NK0CZofrwJ2emhRZPE7BguiO5pVseIajlJDaqasvA4MoBOUBIngLQza3o5ascavskRwC/s400/report.jpg" width="400" /></a></div>Bypass Client Side JavaScript Validation 
Bypass a Role Based Access Control Scheme 
Exploit the Forgot Password Page 
Spoof an Authentication Cookie 
Hijack a Session 
Cross Site Scripting 
Blind SQL Injection 
String SQL Injection 
XPATH Injection 
Log Spoofing 
And many more attacks 
 
 
Download :<a href="http://code.google.com/p/webgoat/downloads/list">Click Here To download</a> 
 
Video Tutorial: 
 
<iframe width="560" height="315" src="http://www.youtube.com/embed/lm8sIjY1v_I" frameborder="0" allowfullscreen></iframe> 
 
For more details <a href="https://www.owasp.org/index.php/Category:OWASP_WebGoat_Project">See here</a> 
 
The content of this Article "Introduction to WebGoat" is for public to know more about it and information is provided by various sources. 
 
About Author: 
 
Nikhalesh Singh(Security specialist,CEH,EC-Council Certified Security Analyst) 
Description : He is Owner of website GuruNsb .He is having 3 year experience in field of Information Security. Currently working as independent Information security researcher. 
Facebook: https://www.facebook.com/nikhaleshsingh1 
Twitter: https://twitter.com/nikhaleshsingh 
Email: nikhaleshsingh@gmail.com

Introduction To WebGoat A Revolutionary Web Attack Tool

Guest Post By:Nikhalesh Singh What is WebGoat? WebGoat is a J2EE web application, created by the OWASP community to provide a teaching env...

How to do Brute Force - Password cracking ?

Hello , Today i am posting an article on "Brute Force".As In many situation we need to brute force to crack any password protected panel. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl-VOqIBcT5ZhTQM_5Q8FWkdMzqaL8GxboEWAV4o8fGMVANmpqVWP51BYyW8y6LO8xisSJF1N4GXAKYnu-4cAygYkJ-m0PKIbsgKVHrdDq_auBhMYns4WOeTmnclFlG96hKtZtcFjwmyIs/s1600/bruteforcealbumcover1res.jpg" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="291" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhl-VOqIBcT5ZhTQM_5Q8FWkdMzqaL8GxboEWAV4o8fGMVANmpqVWP51BYyW8y6LO8xisSJF1N4GXAKYnu-4cAygYkJ-m0PKIbsgKVHrdDq_auBhMYns4WOeTmnclFlG96hKtZtcFjwmyIs/s320/bruteforcealbumcover1res.jpg" width="320" /></a></div> 
<h2> 
What Is Brute-forcing? </h2> 
Brute force (also known as brute force cracking) is a trial and error method used by application programs to decode encrypted data such as passwords or Data Encryption Standard (DES) keys.Just as a hacker might break into, or "crack" a safe by trying many possible combinations, a brute force cracking application proceeds through all possible combinations of legal characters in sequence. Brute force is considered to be an infallible, although time-consuming, approach. 
 
Crackers are sometimes used in an organization to test network security. 
 
Example: 0phtcrack uses brute force to crack Windows NT passwords from a workstation. PC Magazine reported that a system administrator who used the program from a Windows 95 terminal with no administrative privileges, was able to uncover 85 percent of office passwords within twenty minutes. 
 
You must have seen in movies how a hacker cracks a password. He take out a small device from his pocket. Connect it to the locker or whatever he wants to crack and then lots of digits and alphabets are shuffled on the device’s screen and in a matter of minutes (and sometimes in seconds), the thing is unlocked. Pretty Impressive but it doesn’t happen that way. Basically a online system (by online system i means a system which requires you to log in to get access) can’t be hacked like that. Even a password stored in a offline file can’t be hacked so easily. 
 
You want to access a file which is password protected. You create a program that tries every possible combination of alphabets and numbers and then feed it to the file if its the right one. This procedure is repeated till the right combination is accepted by the file. This is what we call as a attack. And this very procedure of trying possible combinations is called Brute Force Attack. 
 
Now even if a hacker has the best of hardware, he can’t hack that easily. Why? Ever entered a password wrong multiple times? It requires you to enter the image to confirm that you are a human and it is not a account and even if that fails (yes there are algorithms that can read the text behind the image), the user is forbidden to enter the password for a fixed amount of time. So, there is no way in hell that a hacker can hack by Brute force or even with the help of rainbow tables. But it surely gets the job done for offline files... 
 
Here is the list of most popular brute forcing softwares: 
 
1.Attack tool kit 
2.CrackWhore 2.0 
3.Apache scanner 
4.Brutus 
5.Brutus 2006 
6.CGI scan 
7.crackftp 
8.E-mail cracker 
9.hackers utillity 
10.php brutforcer 
11.php BB pass extracter 
12.php cracker 
13.shadow scan 
14.web crack 4.0 
and a many more... 
 
You can googel it and download them easily...for free 
 
Download <a href="http://www.mediafire.com/?qd5b18334mnq353">MT Box SL3 Local Brute Force v0.1.zip Here</a> 
 
Thank you for reading Keep Visiting...:)

How to do Brute Force - Password cracking ?

Hello , Today i am posting an article on "Brute Force".As In many situation we need to brute force to crack any password protecte...

How to Hack|Crack Password Of Mac OS X Login Screen

After Hacking|Cracking All Windows ,Linux system login password 
We Finally Take on Mac’s OS X which as we said earlier is based on UNIX and is difficult to change password compared to Linux but Like i always said "Nothing Is Impossible" to be hacked. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiZPygNFHOyT1rwCbNcNeZNBk2guho9yxzuoP7El4r8KF7qqa8lhfdEkO16zLfVmje14bTDgTY9cpGS09LbFkUSr4FvRl0i-xRk1N8v29rUg8kBtSGNkGSCV5C_mZ0uxHDwmDacFTMK1hw/s1600/all.jpg" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="165" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiiZPygNFHOyT1rwCbNcNeZNBk2guho9yxzuoP7El4r8KF7qqa8lhfdEkO16zLfVmje14bTDgTY9cpGS09LbFkUSr4FvRl0i-xRk1N8v29rUg8kBtSGNkGSCV5C_mZ0uxHDwmDacFTMK1hw/s400/all.jpg" width="500" /></a></div> 
The easiest method would be to use Ophcrack on this also as it works with Mac and Linux in addition to Windows but it works on later version of MAC OS. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_4dgI0wh1Xi9LmGeo1-8CDMS5SpHIjzGbtaJZ6qtymcn6wxTdXyrZbbPHNOi94TJNV7U0lwQi0YbDFtBklfaUo3LH4peHLu9eh23CvXZ9y24U9VqkE5ZsU1hqsJPUPB9Mq30JK0-ROG8H/s1600/macosxlion.png" imageanchor="1" style="clear:right; float:right; margin-left:1em; margin-bottom:1em"><img border="0" height="100" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi_4dgI0wh1Xi9LmGeo1-8CDMS5SpHIjzGbtaJZ6qtymcn6wxTdXyrZbbPHNOi94TJNV7U0lwQi0YbDFtBklfaUo3LH4peHLu9eh23CvXZ9y24U9VqkE5ZsU1hqsJPUPB9Mq30JK0-ROG8H/s320/macosxlion.png" width="100" /></a></div> 
However, there are other methods that can be used, as demonstrated below. 
 
If the Mac runs OS X 10.4 or later then you only need the installation Disk/CD/DVD :D 
 
Steps: 
1)Insert it into the computer, reboot. 
 
2)When it starts up, 
 
select UTILITIES > RESET PASSWORD. 
 
3)Choose a new password and then use that to log in. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguU2Wuu-jQ6xWfjBleAcQ-Qlo30F0PfrCiXtJFdf474igfId4dn7zhscSCgp_Z1_IEMhfuj4_TCeLOxcLHM981tQLw2848FbKINNKQh-Fz9-fplqaZMrmTPJbvStr6TaJsMISDLixykL6I/s1600/terminal-root.jpg" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEguU2Wuu-jQ6xWfjBleAcQ-Qlo30F0PfrCiXtJFdf474igfId4dn7zhscSCgp_Z1_IEMhfuj4_TCeLOxcLHM981tQLw2848FbKINNKQh-Fz9-fplqaZMrmTPJbvStr6TaJsMISDLixykL6I/s400/terminal-root.jpg" width="500" /></a></div> 
If the Mac runs OS X 10.5 
1) Restart the computer and press COMMAND + S. 
 
5) When at the prompt, type: 
 
fsck -fy 
mount -uw / 
launchctl load /System/Library/LaunchDaemons/com.apple.DirectoryServices.plist 
dscl . -passwd /Users/UserName newpassword 
 
 
That’s it. Now that the password is reset, you can login. 
 
With this i believe ,i have completed to hack all the type of operating system login password hack/Crack so If you have forgotten your pc|laptop Password Or want to hack your friends PC or steal information by logging in to any one Pc then never be worry Visit Darksite i am sure you will find solution for it have happy hack. Thank you Take care 
 
Do visit Regularly ,Share,comments ,Likes..etc :)

How to Hack|Crack Password Of Mac OS X Login Screen

After Hacking|Cracking All Windows ,Linux system login password We Finally Take on Mac’s OS X which as we said earlier is based on UNIX and...

How to Crack/Hack Password Of Linux Operating System

Hello friends Thanks For Making Dark Site As One Of The Popular Site ... 
today i am posting a tutorial on hacking/cracking Linux Operating System Password... 
lets Begins.. 
 
So If you have ever stuck on the Login screen of Linux system, as you don’t know the System password, then don’t worry now. 
Its very easy to crack the password in Linux system. 
 
For Hacking/Cracking window7 password You can See My this Post 
<a href="http://www.darksite.in/2012/03/best-way-to-hack-crack-break-window-7.html">Hack Win 7 Password</a> 
 
All it takes is adjusting the boot parameters slightly and typing a command or two. Just follow the below given commands, and the work would be done. 
<h2>Steps For Hacking/Cracking Linux Password :</h2> 
1)Reboot your computer, and then as soon as you see the GRUB Loading screen, make sure to hit the ESC key so that you can get to the menu. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTLN3992OifXiOYf4HxH-B-i1FryL0XOSvDVtqt5puJz_2U-UX4uAJ4cReOTkA9LdhJTHDyXncvMV0R8ni8hFwYCsxARpGdpQyEoy679b39YGgOSesgUi8qZsr1jfW9wjtbpx2xozqL8Vn/s1600/01.jpg" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="217" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTLN3992OifXiOYf4HxH-B-i1FryL0XOSvDVtqt5puJz_2U-UX4uAJ4cReOTkA9LdhJTHDyXncvMV0R8ni8hFwYCsxARpGdpQyEoy679b39YGgOSesgUi8qZsr1jfW9wjtbpx2xozqL8Vn/s400/01.jpg" width="486" /></a></div> 
2)Now you have two options: 
 
Root Shell Method 
 
If you have the option, you can choose the “recovery mode” item on the menu, usually found right below your default kernel option. 
 
Then choose “Drop to root shell prompt” from this menu (This is called the Single User Mode). 
This should give you a root shell prompt. 
 
Alternate Root Shell Method 
 
If you don’t have the recovery mode option, this is the alternate way to manually edit the grub options to allow for a root shell. 
 
First you’ll have to make sure to choose the regular boot kernel that you use (typically just the default one), and then use the “e” key to choose to edit that boot option. 
 
Now just hit the down arrow key over to the “kernel” option, and then use the “e” key to switch to edit mode for the kernel option. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ0CR-Hv3_5hCMEqhoyBNmNO1vLztD06RVaxE1W1Hbq8Zey6bGfHMA4r8zIJQtMLw4ekKSRiZkkWLgi8u_cQWxeNH5lmUCJ0IdSOp07EDh-HtWgbEHIHqryOFFsshsGqkaDP-1hn2R0x1Y/s1600/02.jpg" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="282" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJ0CR-Hv3_5hCMEqhoyBNmNO1vLztD06RVaxE1W1Hbq8Zey6bGfHMA4r8zIJQtMLw4ekKSRiZkkWLgi8u_cQWxeNH5lmUCJ0IdSOp07EDh-HtWgbEHIHqryOFFsshsGqkaDP-1hn2R0x1Y/s400/02.jpg" width="540" /></a></div>Now in the next screen that you see, you have to remove the “ro quiet splash” part with the backspace key, and then add this onto the end: 
rw init=/bin/bash 
 
(On some versions of Linux, you might have other shells as the default shell. 
So you have to type the above line accordingly. But most Linux versions have the “bash” shell as the default shell.) 
 
Once you hit enter after adjusting the kernel line, you’ll need to use the B key to choose to boot with that option. 
 
At this point the system should boot up very quickly to a command prompt. 
You are now at the Root Shell Prompt (also called the Single User Mode) 
 
Now Reset the Password 
 
1)Once you are the Root Shell Prompt, by following any of the above given method, you can use following command to reset the password of any user account: 
passwd username 
 
2)After the command is successful, type the following command to make sure the changes are written to the hard disk, before you reboot the computer: 
sync 
 
3)Now reboot the computer using the command: 
reboot -f 
 
Once the computer restarts, you shall be able to login from the account, for which you had changed the password. 
 
Now I must say You Will Like my this post... 
Do share+ Comments +Like and Those who are copying my site content give me a back link 
like source www.darksite.in followed by my name. 
 
Stay Tuned I will post how to hack/Crack Mac Os X Password on my next post :)

How to Crack/Hack Password Of Linux Operating System

Hello friends Thanks For Making Dark Site As One Of The Popular Site ... today i am posting a tutorial on hacking/cracking Linux Operating ...

Online Admin Page Finder Perl | Python Scripts | Admin Penal Of Websites

<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8BIUJidw0WWqn03ki4tRCAz0MUdpAT15WgTTLll4j2k3e0z6qWcaRfbwOsHu8dBmSRAI97dlFZt3QR3Lavw8wr-6noxiQpjGgiDOJSUtkVO4HRQdeApJh4xee00ZdexeNjSA2a-lN7zIL/s1600/285890-PHP_AdminPanel_Website_Back_End_Script.png" imageanchor="1" style="margin-left:1em; margin-right:1em"><img border="0" height="402" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8BIUJidw0WWqn03ki4tRCAz0MUdpAT15WgTTLll4j2k3e0z6qWcaRfbwOsHu8dBmSRAI97dlFZt3QR3Lavw8wr-6noxiQpjGgiDOJSUtkVO4HRQdeApJh4xee00ZdexeNjSA2a-lN7zIL/s400/285890-PHP_AdminPanel_Website_Back_End_Script.png" width="570" /></a> 
 
Hello friends thanks for supporting Dark site for ...Today i am posting an article on online admin finder.. 
we all know the value of searching on admin page of any website so it better to find the admin page of of any site using these script its very easy an worth using... 
<a href="http://www.darksite.in/2012/04/how-to-find-admin-panel-of-any-web-site.html">Previously An Article on How to Find Admin panel of website </a> 
(We Strongly recommend you to visit this Past Post If You are a new visitors) 
 
The Perl Script given Below this box will help you to find admin page of any site so in my language its PHPADMINFinder 
 
<textarea cols='67' id='bloglinking' name='bloglinking' onclick='this.focus();this.select()' onfocus='this.select()' onmouseover='this.focus()' readonly='readonly' rows='10'>#!/usr/bin/perl 
#*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* 
# 
# //////////////////////////////////// 
# Yakamoz PHPmyadmin Finder v.x.x 
# //////////////////////////////////// 
# 
# Title : PHPmyadmin Finder 
# Author: !-Bb0yH4cK3r_Dz-! 
# From : Azarbycan 
# Category : Remote 
# Emails : !-Bb0yH4cK3r_Dz-!@Yahoo.com , !-Bb0yH4cK3r_Dz-!@Hotmail.com , !-Bb0yH4cK3r_Dz-!@Gmail.com 
# 
#*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-* 
 
use HTTP::Request; 
use LWP::UserAgent; 
 
 
system ("cls"); 
system ("title !-Bb0yH4cK3r_Dz-! (Yakamoz)..."); 
print "\t\t/////////////////////////////////////////////////\n"; 
print "\t\t_________________________________________________\n"; 
print "\t\t\t PHPmyadmin Finder v.x.x\n"; 
print "\t\t\t Coded By !-Bb0yH4cK3r_Dz-!\n"; 
print "\t\t\t Made In Azarbycan\n"; 
print "\t\t\t Version In English\n"; 
print "\t\t_________________________________________________\n"; 
print "\n\n"; 
sleep (1); 
print "\n\n"; 
print "\t HOST=> (ex: http://www.site.com)\n"; 
print "\t HOST=> :"; 
$host=<stdin>; 
chomp($host); 
if($host !~ /http:\/\//) { $host = "http://$host"; }; 
 
print "\n\n"; 
print "\t\t*-*-*-*-*-* Scanning *-*-*-*-*-*\n"; 
print "\n\n"; 
@p = ("/phpMyAdmin/", 
"/phpmyadmin/", 
"/PMA/", 
"/admin/", 
"/dbadmin/", 
"/mysql/", 
"/myadmin/", 
"/phpmyadmin2/", 
"/phpMyAdmin2/", 
"/phpMyAdmin-2/", 
"/php-my-admin/", 
"/phpMyAdmin-2.2.3/", 
"/phpMyAdmin-2.2.6/", 
"/phpMyAdmin-2.5.1/", 
"/phpMyAdmin-2.5.4/", 
"/phpMyAdmin-2.5.5-rc1/", 
"/phpMyAdmin-2.5.5-rc2/", 
"/phpMyAdmin-2.5.5/", 
"/phpMyAdmin-2.5.5-pl1/", 
"/phpMyAdmin-2.5.6-rc1/", 
"/phpMyAdmin-2.5.6-rc2/", 
"/phpMyAdmin-2.5.6/", 
"/phpMyAdmin-2.5.7/", 
"/phpMyAdmin-2.5.7-pl1/", 
"/phpMyAdmin-2.6.0-alpha/", 
"/phpMyAdmin-2.6.0-alpha2/", 
"/phpMyAdmin-2.6.0-beta1/", 
"/phpMyAdmin-2.6.0-beta2/", 
"/phpMyAdmin-2.6.0-rc1/", 
"/phpMyAdmin-2.6.0-rc2/", 
"/phpMyAdmin-2.6.0-rc3/", 
"/phpMyAdmin-2.6.0/", 
"/phpMyAdmin-2.6.0-pl1/", 
"/phpMyAdmin-2.6.0-pl2/", 
"/phpMyAdmin-2.6.0-pl3/", 
"/phpMyAdmin-2.6.1-rc1/", 
"/phpMyAdmin-2.6.1-rc2/", 
"/phpMyAdmin-2.6.1/", 
"/phpMyAdmin-2.6.1-pl1/", 
"/phpMyAdmin-2.6.1-pl2/", 
"/phpMyAdmin-2.6.1-pl3/", 
"/phpMyAdmin-2.6.2-rc1/", 
"/phpMyAdmin-2.6.2-beta1/", 
"/phpMyAdmin-2.6.2-rc1/", 
"/phpMyAdmin-2.6.2/", 
"/phpMyAdmin-2.6.2-pl1/", 
"/phpMyAdmin-2.6.3/", 
"/phpMyAdmin-2.6.3-rc1/", 
"/phpMyAdmin-2.6.3/", 
"/phpMyAdmin-2.6.3-pl1/", 
"/phpMyAdmin-2.6.4-rc1/", 
"/phpMyAdmin-2.6.4-pl1/", 
"/phpMyAdmin-2.6.4-pl2/", 
"/phpMyAdmin-2.6.4-pl3/", 
"/phpMyAdmin-2.6.4-pl4/", 
"/phpMyAdmin-2.6.4/", 
"/phpMyAdmin-2.7.0-beta1/", 
"/phpMyAdmin-2.7.0-rc1/", 
"/phpMyAdmin-2.7.0-pl1/", 
"/phpMyAdmin-2.7.0-pl2/", 
"/phpMyAdmin-2.7.0/", 
"/phpMyAdmin-2.8.0-beta1/", 
"/phpMyAdmin-2.8.0-rc1/", 
"/phpMyAdmin-2.8.0-rc2/", 
"/phpMyAdmin-2.8.0/", 
"/phpMyAdmin-2.8.0.1/", 
"/phpMyAdmin-2.8.0.2/", 
"/phpMyAdmin-2.8.0.3/", 
"/phpMyAdmin-2.8.0.4/", 
"/phpMyAdmin-2.8.1-rc1/", 
"/phpMyAdmin-2.8.1/", 
"/phpMyAdmin-2.8.2/", 
"/sqlmanager/", 
"/mysqlmanager/", 
"/p/m/a/", 
"/PMA2005/", 
"/pma2005/", 
"/phpmanager/", 
"/php-myadmin/", 
"/phpmy-admin/", 
"/webadmin/", 
"/sqlweb/", 
"/websql/", 
"/webdb/", 
"/mysqladmin/", 
"/mysql-admin/"); 
 
 
foreach $myadmin(@p){ 
 
$url = $host.$myadmin; 
$request = HTTP::Request->new(GET=>$url); 
$useragent = LWP::UserAgent->new(); 
 
$response = $useragent->request($request); 
if ($response->is_success){print "Found : $url\n";} 
if ($response->content=~ /Access Denied/){print "Found : $url =>[Error & Access Denied]\n";} 
else {print "NotFound : $myadmin\n";} 
 
}

I have another one for All Dark site lovers

Show Your love Click To Support Dark Site

Admin Page Finder - Python Script

This python script looks for a large amount of possible administrative interfaces on a given site. Admin Page Finding tools which scans the vulnerable websites for administrator login pages. It makes use of a predefined list for finding the admin login pages. After finding the pages, it may present us the page on which we can login with the administrator password.

#Created for coded32 and his teamopenfire Eliminated Some bugs from my last code shared here as Guest.<br />
#Greets To T.O.F and Indishell<br />
#Thanks friends for find bugs and give suggetions<br />
<br />
#cd direcory/to/code<br />
#direcory/to/code>python code.py<br />
<br />
#improved Error Handling<br />
#Find out usefull stuffs from www.teamopenfire.com<br />
#"wE aRe gREat inDIans"<br />
<br />
import httplib<br />
import socket<br />
import sys<br />
<br />
<br />
try:<br />
print "\t################################################################"<br />
print "\t#                                        www.teamopenfire.com  #"<br />
print "\t#       ###############      ########       ############       #"<br />
print "\t#       #             #     ##      ##      #          #       #"<br />
print "\t#       ######   ######     ##      ##      #   ########       #"<br />
print "\t#            #   #          ##      ##      #   #              #"<br />
print "\t#            #   #          ##      ##      #   #####          #"<br />
print "\t#            #   #          ##      ##      #   #####          #"<br />
print "\t#            #   #          ##      ##      #   #              #"<br />
print "\t#            #   #          ##      ##      #   #              #"<br />
print "\t#            #####    [#]    ########   [#] #####  AdminFinder #"<br />
print "\t#                                                              #"<br />
print "\t#                                            coded by Ajith KP #"<br />
print "\t#                          Greets to Coded32 and T.O.F members #"<br />
print "\t################################################################"<br />
var1=0<br />
var2=0<br />
<br />
php = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',<br />
'memberadmin/','administratorlogin/','adm/','admin/account.php','admin/index.php','admin/login.php','admin/admin.php','admin/account.php',<br />
'admin_area/admin.php','admin_area/login.php','siteadmin/login.php','siteadmin/index.php','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',<br />
'admin_area/index.php','bb-admin/index.php','bb-admin/login.php','bb-admin/admin.php','admin/home.php','admin_area/login.html','admin_area/index.html',<br />
'admin/controlpanel.php','admin.php','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',<br />
'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',<br />
'admin/cp.php','cp.php','administrator/index.php','administrator/login.php','nsw/admin/login.php','webadmin/login.php','admin/admin_login.php','admin_login.php',<br />
'administrator/account.php','administrator.php','admin_area/admin.html','pages/admin/admin-login.php','admin/admin-login.php','admin-login.php',<br />
'bb-admin/index.html','bb-admin/login.html','acceso.php','bb-admin/admin.html','admin/home.html','login.php','modelsearch/login.php','moderator.php','moderator/login.php',<br />
'moderator/admin.php','account.php','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.php','admincontrol.php',<br />
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.php','adminarea/index.html','adminarea/admin.html',<br />
'webadmin.php','webadmin/index.php','webadmin/admin.php','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.php','moderator.html',<br />
'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',<br />
'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html',<br />
'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.php','account.html','controlpanel.html','admincontrol.html',<br />
'panel-administracion/login.php','wp-login.php','adminLogin.php','admin/adminLogin.php','home.php','admin.php','adminarea/index.php',<br />
'adminarea/admin.php','adminarea/login.php','panel-administracion/index.php','panel-administracion/admin.php','modelsearch/index.php',<br />
'modelsearch/admin.php','admincontrol/login.php','adm/admloginuser.php','admloginuser.php','admin2.php','admin2/login.php','admin2/index.php','usuarios/login.php',<br />
'adm/index.php','adm.php','affiliate.php','adm_auth.php','memberadmin.php','administratorlogin.php']<br />
<br />
asp = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',<br />
'memberadmin/','administratorlogin/','adm/','account.asp','admin/account.asp','admin/index.asp','admin/login.asp','admin/admin.asp',<br />
'admin_area/admin.asp','admin_area/login.asp','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',<br />
'admin_area/admin.html','admin_area/login.html','admin_area/index.html','admin_area/index.asp','bb-admin/index.asp','bb-admin/login.asp','bb-admin/admin.asp',<br />
'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','admin/controlpanel.html','admin.html','admin/cp.html','cp.html',<br />
'administrator/index.html','administrator/login.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html','moderator.html',<br />
'moderator/login.html','moderator/admin.html','account.html','controlpanel.html','admincontrol.html','admin_login.html','panel-administracion/login.html',<br />
'admin/home.asp','admin/controlpanel.asp','admin.asp','pages/admin/admin-login.asp','admin/admin-login.asp','admin-login.asp','admin/cp.asp','cp.asp',<br />
'administrator/account.asp','administrator.asp','acceso.asp','login.asp','modelsearch/login.asp','moderator.asp','moderator/login.asp','administrator/login.asp',<br />
'moderator/admin.asp','controlpanel.asp','admin/account.html','adminpanel.html','webadmin.html','pages/admin/admin-login.html','admin/admin-login.html',<br />
'webadmin/index.html','webadmin/admin.html','webadmin/login.html','user.asp','user.html','admincp/index.asp','admincp/login.asp','admincp/index.html',<br />
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','adminarea/index.html','adminarea/admin.html','adminarea/login.html',<br />
'panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html','admin/admin_login.html',<br />
'admincontrol/login.html','adm/index.html','adm.html','admincontrol.asp','admin/account.asp','adminpanel.asp','webadmin.asp','webadmin/index.asp',<br />
'webadmin/admin.asp','webadmin/login.asp','admin/admin_login.asp','admin_login.asp','panel-administracion/login.asp','adminLogin.asp',<br />
'admin/adminLogin.asp','home.asp','admin.asp','adminarea/index.asp','adminarea/admin.asp','adminarea/login.asp','admin-login.html',<br />
'panel-administracion/index.asp','panel-administracion/admin.asp','modelsearch/index.asp','modelsearch/admin.asp','administrator/index.asp',<br />
'admincontrol/login.asp','adm/admloginuser.asp','admloginuser.asp','admin2.asp','admin2/login.asp','admin2/index.asp','adm/index.asp',<br />
'adm.asp','affiliate.asp','adm_auth.asp','memberadmin.asp','administratorlogin.asp','siteadmin/login.asp','siteadmin/index.asp','siteadmin/login.html']<br />
<br />
cfm = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',<br />
'memberadmin/','administratorlogin/','adm/','admin/account.cfm','admin/index.cfm','admin/login.cfm','admin/admin.cfm','admin/account.cfm',<br />
'admin_area/admin.cfm','admin_area/login.cfm','siteadmin/login.cfm','siteadmin/index.cfm','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',<br />
'admin_area/index.cfm','bb-admin/index.cfm','bb-admin/login.cfm','bb-admin/admin.cfm','admin/home.cfm','admin_area/login.html','admin_area/index.html',<br />
'admin/controlpanel.cfm','admin.cfm','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',<br />
'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',<br />
'admin/cp.cfm','cp.cfm','administrator/index.cfm','administrator/login.cfm','nsw/admin/login.cfm','webadmin/login.cfm','admin/admin_login.cfm','admin_login.cfm',<br />
'administrator/account.cfm','administrator.cfm','admin_area/admin.html','pages/admin/admin-login.cfm','admin/admin-login.cfm','admin-login.cfm',<br />
'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.cfm','modelsearch/login.cfm','moderator.cfm','moderator/login.cfm',<br />
'moderator/admin.cfm','account.cfm','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.cfm','admincontrol.cfm',<br />
'admin/adminLogin.html','acceso.cfm','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.cfm','adminarea/index.html','adminarea/admin.html',<br />
'webadmin.cfm','webadmin/index.cfm','webadmin/admin.cfm','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.cfm','moderator.html',<br />
'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',<br />
'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html',<br />
'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.cfm','account.html','controlpanel.html','admincontrol.html',<br />
'panel-administracion/login.cfm','wp-login.cfm','adminLogin.cfm','admin/adminLogin.cfm','home.cfm','admin.cfm','adminarea/index.cfm',<br />
'adminarea/admin.cfm','adminarea/login.cfm','panel-administracion/index.cfm','panel-administracion/admin.cfm','modelsearch/index.cfm',<br />
'modelsearch/admin.cfm','admincontrol/login.cfm','adm/admloginuser.cfm','admloginuser.cfm','admin2.cfm','admin2/login.cfm','admin2/index.cfm','usuarios/login.cfm',<br />
'adm/index.cfm','adm.cfm','affiliate.cfm','adm_auth.cfm','memberadmin.cfm','administratorlogin.cfm']<br />
<br />
js = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',<br />
'memberadmin/','administratorlogin/','adm/','admin/account.js','admin/index.js','admin/login.js','admin/admin.js','admin/account.js',<br />
'admin_area/admin.js','admin_area/login.js','siteadmin/login.js','siteadmin/index.js','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',<br />
'admin_area/index.js','bb-admin/index.js','bb-admin/login.js','bb-admin/admin.js','admin/home.js','admin_area/login.html','admin_area/index.html',<br />
'admin/controlpanel.js','admin.js','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',<br />
'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',<br />
'admin/cp.js','cp.js','administrator/index.js','administrator/login.js','nsw/admin/login.js','webadmin/login.js','admin/admin_login.js','admin_login.js',<br />
'administrator/account.js','administrator.js','admin_area/admin.html','pages/admin/admin-login.js','admin/admin-login.js','admin-login.js',<br />
'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.js','modelsearch/login.js','moderator.js','moderator/login.js',<br />
'moderator/admin.js','account.js','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.js','admincontrol.js',<br />
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.js','adminarea/index.html','adminarea/admin.html',<br />
'webadmin.js','webadmin/index.js','acceso.js','webadmin/admin.js','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.js','moderator.html',<br />
'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',<br />
'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html',<br />
'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.js','account.html','controlpanel.html','admincontrol.html',<br />
'panel-administracion/login.js','wp-login.js','adminLogin.js','admin/adminLogin.js','home.js','admin.js','adminarea/index.js',<br />
'adminarea/admin.js','adminarea/login.js','panel-administracion/index.js','panel-administracion/admin.js','modelsearch/index.js',<br />
'modelsearch/admin.js','admincontrol/login.js','adm/admloginuser.js','admloginuser.js','admin2.js','admin2/login.js','admin2/index.js','usuarios/login.js',<br />
'adm/index.js','adm.js','affiliate.js','adm_auth.js','memberadmin.js','administratorlogin.js']<br />
<br />
cgi = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',<br />
'memberadmin/','administratorlogin/','adm/','admin/account.cgi','admin/index.cgi','admin/login.cgi','admin/admin.cgi','admin/account.cgi',<br />
'admin_area/admin.cgi','admin_area/login.cgi','siteadmin/login.cgi','siteadmin/index.cgi','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',<br />
'admin_area/index.cgi','bb-admin/index.cgi','bb-admin/login.cgi','bb-admin/admin.cgi','admin/home.cgi','admin_area/login.html','admin_area/index.html',<br />
'admin/controlpanel.cgi','admin.cgi','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',<br />
'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',<br />
'admin/cp.cgi','cp.cgi','administrator/index.cgi','administrator/login.cgi','nsw/admin/login.cgi','webadmin/login.cgi','admin/admin_login.cgi','admin_login.cgi',<br />
'administrator/account.cgi','administrator.cgi','admin_area/admin.html','pages/admin/admin-login.cgi','admin/admin-login.cgi','admin-login.cgi',<br />
'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.cgi','modelsearch/login.cgi','moderator.cgi','moderator/login.cgi',<br />
'moderator/admin.cgi','account.cgi','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.cgi','admincontrol.cgi',<br />
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.cgi','adminarea/index.html','adminarea/admin.html',<br />
'webadmin.cgi','webadmin/index.cgi','acceso.cgi','webadmin/admin.cgi','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.cgi','moderator.html',<br />
'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',<br />
'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html',<br />
'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.cgi','account.html','controlpanel.html','admincontrol.html',<br />
'panel-administracion/login.cgi','wp-login.cgi','adminLogin.cgi','admin/adminLogin.cgi','home.cgi','admin.cgi','adminarea/index.cgi',<br />
'adminarea/admin.cgi','adminarea/login.cgi','panel-administracion/index.cgi','panel-administracion/admin.cgi','modelsearch/index.cgi',<br />
'modelsearch/admin.cgi','admincontrol/login.cgi','adm/admloginuser.cgi','admloginuser.cgi','admin2.cgi','admin2/login.cgi','admin2/index.cgi','usuarios/login.cgi',<br />
'adm/index.cgi','adm.cgi','affiliate.cgi','adm_auth.cgi','memberadmin.cgi','administratorlogin.cgi']<br />
<br />
brf = ['admin/','administrator/','admin1/','admin2/','admin3/','admin4/','admin5/','usuarios/','usuario/','administrator/','moderator/','webadmin/','adminarea/','bb-admin/','adminLogin/','admin_area/','panel-administracion/','instadmin/',<br />
'memberadmin/','administratorlogin/','adm/','admin/account.brf','admin/index.brf','admin/login.brf','admin/admin.brf','admin/account.brf',<br />
'admin_area/admin.brf','admin_area/login.brf','siteadmin/login.brf','siteadmin/index.brf','siteadmin/login.html','admin/account.html','admin/index.html','admin/login.html','admin/admin.html',<br />
'admin_area/index.brf','bb-admin/index.brf','bb-admin/login.brf','bb-admin/admin.brf','admin/home.brf','admin_area/login.html','admin_area/index.html',<br />
'admin/controlpanel.brf','admin.brf','admincp/index.asp','admincp/login.asp','admincp/index.html','admin/account.html','adminpanel.html','webadmin.html',<br />
'webadmin/index.html','webadmin/admin.html','webadmin/login.html','admin/admin_login.html','admin_login.html','panel-administracion/login.html',<br />
'admin/cp.brf','cp.brf','administrator/index.brf','administrator/login.brf','nsw/admin/login.brf','webadmin/login.brfbrf','admin/admin_login.brf','admin_login.brf',<br />
'administrator/account.brf','administrator.brf','acceso.brf','admin_area/admin.html','pages/admin/admin-login.brf','admin/admin-login.brf','admin-login.brf',<br />
'bb-admin/index.html','bb-admin/login.html','bb-admin/admin.html','admin/home.html','login.brf','modelsearch/login.brf','moderator.brf','moderator/login.brf',<br />
'moderator/admin.brf','account.brf','pages/admin/admin-login.html','admin/admin-login.html','admin-login.html','controlpanel.brf','admincontrol.brf',<br />
'admin/adminLogin.html','adminLogin.html','admin/adminLogin.html','home.html','rcjakar/admin/login.brf','adminarea/index.html','adminarea/admin.html',<br />
'webadmin.brf','webadmin/index.brf','webadmin/admin.brf','admin/controlpanel.html','admin.html','admin/cp.html','cp.html','adminpanel.brf','moderator.html',<br />
'administrator/index.html','administrator/login.html','user.html','administrator/account.html','administrator.html','login.html','modelsearch/login.html',<br />
'moderator/login.html','adminarea/login.html','panel-administracion/index.html','panel-administracion/admin.html','modelsearch/index.html','modelsearch/admin.html',<br />
'admincontrol/login.html','adm/index.html','adm.html','moderator/admin.html','user.brf','account.html','controlpanel.html','admincontrol.html',<br />
'panel-administracion/login.brf','wp-login.brf','adminLogin.brf','admin/adminLogin.brf','home.brf','admin.brf','adminarea/index.brf',<br />
'adminarea/admin.brf','adminarea/login.brf','panel-administracion/index.brf','panel-administracion/admin.brf','modelsearch/index.brf',<br />
'modelsearch/admin.brf','admincontrol/login.brf','adm/admloginuser.brf','admloginuser.brf','admin2.brf','admin2/login.brf','admin2/index.brf','usuarios/login.brf',<br />
'adm/index.brf','adm.brf','affiliate.brf','adm_auth.brf','memberadmin.brf','administratorlogin.brf']<br />
<br />
try:<br />
site = raw_input("Web Site for Scan?: ")<br />
site = site.replace("http://","")<br />
print ("\tChecking website " + site + "...")<br />
conn = httplib.HTTPConnection(site)<br />
conn.connect()<br />
print "\t[$] Yes... Server is Online."<br />
except (httplib.HTTPResponse, socket.error) as Exit:<br />
raw_input("\t [!] Oops Error occured, Server offline or invalid URL")<br />
exit()<br />
print "Enter site source code:"<br />
print "1 PHP"<br />
print "2 ASP"<br />
print "3 CFM"<br />
print "4 JS"<br />
print "5 CGI"<br />
print "6 BRF"<br />
print "\nPress 1 and 'Enter key' for Select PHP\n"<br />
code=input("> ")<br />
<br />
if code==1:<br />
print("\t [+] Scanning " + site + "...\n\n")<br />
for admin in php:<br />
admin = admin.replace("\n","")<br />
admin = "/" + admin<br />
host = site + admin<br />
print ("\t [#] Checking " + host + "...")<br />
connection = httplib.HTTPConnection(site)<br />
connection.request("GET",admin)<br />
response = connection.getresponse()<br />
var2 = var2 + 1<br />
if response.status == 200:<br />
var1 = var1 + 1<br />
print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")<br />
raw_input("Press enter to continue scanning.\n")<br />
elif response.status == 404:<br />
var2 = var2<br />
elif response.status == 302:<br />
print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")<br />
else:<br />
print "%s %s %s" % (host, " Interesting response:", response.status)<br />
connection.close()<br />
print("\n\nCompleted \n")<br />
print var1, " Admin pages found"<br />
print var2, " total pages scanned"<br />
raw_input("[/] The Game Over; Press Enter to Exit")<br />
<br />
<br />
if code==2:<br />
print("\t [+] Scanning " + site + "...\n\n")<br />
for admin in asp:<br />
admin = admin.replace("\n","")<br />
admin = "/" + admin<br />
host = site + admin<br />
print ("\t [#] Checking " + host + "...")<br />
connection = httplib.HTTPConnection(site)<br />
connection.request("GET",admin)<br />
response = connection.getresponse()<br />
var2 = var2 + 1<br />
if response.status == 200:<br />
var1 = var1 + 1<br />
print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")<br />
raw_input("Press enter to continue scanning.\n")<br />
elif response.status == 404:<br />
var2 = var2<br />
elif response.status == 302:<br />
print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")<br />
else:<br />
print "%s %s %s" % (host, " Interesting response:", response.status)<br />
connection.close()<br />
print("\n\nCompleted \n")<br />
print var1, " Admin pages found"<br />
print var2, " total pages scanned"<br />
raw_input("The Game Over; Press Enter to Exit")<br />
<br />
if code==3:<br />
print("\t [+] Scanning " + site + "...\n\n")<br />
for admin in cfm:<br />
admin = admin.replace("\n","")<br />
admin = "/" + admin<br />
host = site + admin<br />
print ("\t [#] Checking " + host + "...")<br />
connection = httplib.HTTPConnection(site)<br />
connection.request("GET",admin)<br />
response = connection.getresponse()<br />
var2 = var2 + 1<br />
if response.status == 200:<br />
var1 = var1 + 1<br />
print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")<br />
raw_input("Press enter to continue scanning.\n")<br />
elif response.status == 404:<br />
var2 = var2<br />
elif response.status == 302:<br />
print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")<br />
else:<br />
print "%s %s %s" % (host, " Interesting response:", response.status)<br />
connection.close()<br />
print("\n\nCompleted \n")<br />
print var1, " Admin pages found"<br />
print var2, " total pages scanned"<br />
raw_input("The Game Over; Press Enter to Exit")<br />
<br />
if code==4:<br />
print("\t [+] Scanning " + site + "...\n\n")<br />
for admin in js:<br />
admin = admin.replace("\n","")<br />
admin = "/" + admin<br />
host = site + admin<br />
print ("\t [#] Checking " + host + "...")<br />
connection = httplib.HTTPConnection(site)<br />
connection.request("GET",admin)<br />
response = connection.getresponse()<br />
var2 = var2 + 1<br />
if response.status == 200:<br />
var1 = var1 + 1<br />
print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")<br />
raw_input("Press enter to continue scanning.\n")<br />
elif response.status == 404:<br />
var2 = var2<br />
elif response.status == 302:<br />
print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")<br />
else:<br />
print "%s %s %s" % (host, " Interesting response:", response.status)<br />
connection.close()<br />
print("\n\nCompleted \n")<br />
print var1, " Admin pages found"<br />
print var2, " total pages scanned"<br />
raw_input("The Game Over; Press Enter to Exit")<br />
<br />
if code==5:<br />
print("\t [+] Scanning " + site + "...\n\n")<br />
for admin in cgi:<br />
admin = admin.replace("\n","")<br />
admin = "/" + admin<br />
host = site + admin<br />
print ("\t [#] Checking " + host + "...")<br />
connection = httplib.HTTPConnection(site)<br />
connection.request("GET",admin)<br />
response = connection.getresponse()<br />
var2 = var2 + 1<br />
if response.status == 200:<br />
var1 = var1 + 1<br />
print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")<br />
raw_input("Press enter to continue scanning.\n")<br />
elif response.status == 404:<br />
var2 = var2<br />
elif response.status == 302:<br />
print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")<br />
else:<br />
print "%s %s %s" % (host, " Interesting response:", response.status)<br />
connection.close()<br />
print("\n\nCompleted \n")<br />
print var1, " Admin pages found"<br />
print var2, " total pages scanned"<br />
raw_input("The Game Over; Press Enter to Exit")<br />
<br />
if code==6:<br />
print("\t [+] Scanning " + site + "...\n\n")<br />
for admin in brf:<br />
admin = admin.replace("\n","")<br />
admin = "/" + admin<br />
host = site + admin<br />
print ("\t [#] Checking " + host + "...")<br />
connection = httplib.HTTPConnection(site)<br />
connection.request("GET",admin)<br />
response = connection.getresponse()<br />
var2 = var2 + 1<br />
if response.status == 200:<br />
var1 = var1 + 1<br />
print "%s %s" % ( "\n\n>>>" + host, "Admin page found!")<br />
raw_input("Press enter to continue scanning.\n")<br />
elif response.status == 404:<br />
var2 = var2<br />
elif response.status == 302:<br />
print "%s %s" % ("\n>>>" + host, "Possible admin page (302 - Redirect)")<br />
else:<br />
print "%s %s %s" % (host, " Interesting response:", response.status)<br />
connection.close()<br />
print("\n\nCompleted \n")<br />
print var1, " Admin pages found"<br />
print var2, " total pages scanned"<br />
raw_input("The Game Over; Press Enter to Exit")<br />
except (httplib.HTTPResponse, socket.error):<br />
print "\n\t[!] Session Cancelled; Error occured. Check internet settings"<br />
except (KeyboardInterrupt, SystemExit):<br />
print "\n\t[!] Session cancelled"<br />
<br />

Admin Finder Script is an open source script which is designed in Python Language. For use this tool we need to install Python on our machine.

Do Share,Hit likes, Subscribe us to get Daily Update Thanks For visiting :)

Online Admin Page Finder Perl | Python Scripts | Admin Penal Of Websites

Hello friends thanks for supporting Dark site for ...Today i am posting an article on online admin finder.. we all know the value of sear...