.:: Dark Site ::.

Free Learn Wifi Security With Vivek Ramachandran ( Books | Video Tutorials & Concepts )

Hi everyone it really Feel great that Vivek RamaChandran Sir has done an awesome video series of wifi security which makes you clear on most of the concept related to wifi security .past few days i have a great interest on learn wifi security so i found wifi security by vivek sir and let me tells you this video series some contain some quality training material with live practicals and clear cut understanding. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix3ryC73Dtaype1CnlFnxSVKPruQfQlnBjSPDFCOH4J7gBQoavhrdXVvzpUu4OtNU9nJcviniS0Nwx2hFQQ5doLxEh3WVgpDNUPA1MjuYwmWPVgdDnHBg7-a2C_ETquuYu4f8z_dQyTw9Y/s1600/free+learn.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="free download wifi hacking videos and books" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix3ryC73Dtaype1CnlFnxSVKPruQfQlnBjSPDFCOH4J7gBQoavhrdXVvzpUu4OtNU9nJcviniS0Nwx2hFQQ5doLxEh3WVgpDNUPA1MjuYwmWPVgdDnHBg7-a2C_ETquuYu4f8z_dQyTw9Y/s1600/free+learn.png" /></a></div>You must have seen our previous Post 
 
<a href="http://www.darksite.co.in/2013/05/free-download-backtrack-5-wireless.html">Free download BackTrack 5 Wireless Penetration Testing By Vivek Ramachandran</a> Which share free e book by vivek sir. 
 
let me tell you about some contents about the video series:- 
 
It Contain fully practical with explanation.it is best for penetration testers, security enthusiasts and network administrators. 
This video series will take you through a journey in wireless LAN (in)security and penetration testing.it will also teach you very basics of how WLANs work, graduate to packet sniffing and injection attacks, move on to audit infrastructure vulnerabilities, learn to break into WLAN clients and finally look at advanced hybrid attacks involving wireless and applications 
 
A non-exhaustive list of topics to be taught includes: 
 
<li>Bypassing WLAN Authentication – Shared Key, MAC Filtering, Hidden SSIDs 
<li>Cracking WLAN Encryption – WEP, WPA/WPA2 Personal and Enterprise, Understanding encryption based flaws (WEP,TKIP,CCMP) 
<li>Attacking the WLAN Infrastructure – Rogues Devices, Evil Twins, DoS Attacks, MITM, Wi-Fi Protected Setup 
<li>Advanced Enterprise Attacks – 802.1x, EAP, LEAP, PEAP, EAP-TTLS 
<li>Attacking the Wireless Client – Honeypots and Hotspot attacks, Caffe-Latte, Hirte, Ad-Hoc Networks and Viral SSIDs, WiFishing 
<li>Breaking into the Client – Metasploit, SET, Social Engineering 
<li>Enterprise Wi-Fi Worms, Backdoors and Botnets 
 
About VivekRamachandran (Author of Book /Trainer):- 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglZMgJRuFn50SEPF0pR85W8ojzJf5PxM8J3mRYGgW6ZLuwEob7n1QayR7bh7YUHAO5SaLOOyn7ailMDyAwMUX6lv3L5yHcx2cbdoEopj5VY8_YG35WO9H2tCP1Be0fK6-YsDZWjb2NxNlJ/s1600/vivek+sir.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Vivek Ramachandran" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglZMgJRuFn50SEPF0pR85W8ojzJf5PxM8J3mRYGgW6ZLuwEob7n1QayR7bh7YUHAO5SaLOOyn7ailMDyAwMUX6lv3L5yHcx2cbdoEopj5VY8_YG35WO9H2tCP1Be0fK6-YsDZWjb2NxNlJ/s1600/vivek+sir.jpg" /></a></div>Vivek has been into Wireless security research since 2003 ,He was also one of the winners of Microsoft Security Shootout contest held in India among a reported 65,000 participants,his work on wireless security has been quoted in BBC online, InfoWorld, MacWorld, The Register, IT World Canada etc. places. He has spoken/trained at top conferences around the world including Blackhat USA and Abu Dhabi, Defcon, Hacktivity, Brucon, ClubHack, SecurityByte, SecurityZone, Nullcon, C0C0n etc.He is best known in the hacker community as the founder of SecurityTube.net where he routinely posts videos on Wi-Fi Security, Assembly Language, Exploitation Technique. 
 
i think you all security geeks knows him so no need to write more about him. 
 
<a href="http://securitytube.aircrack-ng.org/Wi-Fi-Security-Megaprimer/WLAN-Security-Megaprimer-v1.iso">Download All Free Video Tutorial</a> (iso File 4.2 GB) 
you can also see all video tutorial part wise <a href="http://www.securitytube.net/groups?operation=view&groupId=9">here</a> 
 
TO start up with you need ALFA NETWORK AWUS036NH 2W USB Wireless N Adapte You can easily purchase from<a href="http://www.ebay.com/itm/ALFA-NETWORK-AWUS036NH-2W-USB-Wireless-N-Adapter-WiFi-b-g-N-2000mW-/400611594109?pt=US_USB_Wi_Fi_Adapters_Dongles&hash=item5d464fcf7d"> ebay</a>/amazon .You also need to <a href="http://www.darksite.co.in/2012/05/how-to-install-backtrack-5-r1-in-your.html">set up backtrack</a> on your laptop/pc(<a href="http://www.darksite.co.in/2012/08/how-to-install-vmware-tools-in-backtrack.html">vmweare/virtual box</a>) which i think very easy and i know even a kid can do it. 
 
So Even i have Started to learn wifi security gone upto 22+ videos and the whole video series contain 45+ Videos so have fun and special thanks to vivek sir _/\_ for making these videos and sharing it for free.

Free Learn Wifi Security With Vivek Ramachandran ( Books | Video Tutorials & Concepts )

Hi everyone it really Feel great that Vivek RamaChandran Sir has done an awesome video series of wifi security which makes you clear on most...

How to Protect your website from web vulnerability Scanners

Hello here i come with a small trick but quite useful it can make your website safe from kiddie hackers :P. some time actually new born hackers do use various web scanners like Acunetix, nessus, Openvas & other scanner available at backtrack.so being a web sec guy how can you protect your website from such automated scanner the code is very simple all you need to do is Just add the below given codes to your .htaccess file . <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmz1A7mBmj7rW5bKf_y_p_VuRsvAZxqgEXTuWPfRPSmkE3KNus8cDAGaR7hc2ZherD6SN_BKZsfGmLUv8PBabw9t_DqsHWTxP4FG767HUtjamAbAv6EFNrPla2vtMHp_zLOW2n4KOtG4yA/s1600/hacker.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="protect from web vulnerability scanners" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmz1A7mBmj7rW5bKf_y_p_VuRsvAZxqgEXTuWPfRPSmkE3KNus8cDAGaR7hc2ZherD6SN_BKZsfGmLUv8PBabw9t_DqsHWTxP4FG767HUtjamAbAv6EFNrPla2vtMHp_zLOW2n4KOtG4yA/s620/hacker.png" /></a></div><blockquote>RewriteEngine On 
<�IfModule mod_rewrite.c> 
RewriteCond %{HTTP_USER_AGENT} ^w3af.sourceforge.net [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} dirbuster [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} nikto [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} SF [OR] 
RewriteCond %{HTTP_USER_AGENT} sqlmap [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} fimap [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} nessus [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} whatweb [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} Openvas [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} jbrofuzz [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} libwhisker [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} webshag [NC,OR] 
RewriteCond %{HTTP:Acunetix-Product} ^WVS 
RewriteRule ^.* http://127.0.0.1/ [R=301,L] 
<�/�IfModule> 
(Please Remove � On Original Code) 
</blockquote>after adding this content to .htaccess save it now.this is just a counter step taken to stay away from web scanners. hope you like this post do share ,comments ,like and thank you :) .

How to Protect your website from web vulnerability Scanners

Hello here i come with a small trick but quite useful it can make your website safe from kiddie hackers :P. some time actually new born hack...

installing Nessus Scanner For Network Vulnerability in Backtrack

uhh...hi everyone after a long days i have started posting tut so lets get started today we will be installing nessus scanner on backtrack and using it.<a href="http://www.darksite.co.in/2012/05/how-to-install-and-configure-best.html">Check my long old post :D </a> 
<h3>What is Nessus is For?</h3><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX3IS68Or44IhgjeaSeH9KDV4akvVyBTXQzpAuoi4sKl0cM5t7iU1SOBS6PnphfKVGfzSgK8wonGE9oxaLQ22-coIL87Hk15dlyokzLcWK0i9R3sev4NS7LMsMemohSOmzHthBrGreO7Ki/s1600/nessus.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX3IS68Or44IhgjeaSeH9KDV4akvVyBTXQzpAuoi4sKl0cM5t7iU1SOBS6PnphfKVGfzSgK8wonGE9oxaLQ22-coIL87Hk15dlyokzLcWK0i9R3sev4NS7LMsMemohSOmzHthBrGreO7Ki/s320/nessus.jpg" /></a></div>Nessus is a network vulnerability scanning program thats give you power to find you all the Vulnerability present on the network/host . It is free for personal use. Its can detect vulnerabilities on the systems. Nessus is the most popular vulnerability scanner in the computer security. Nessus allows scans for vulnerabilities, Misconfiguration, default passwords / common passwords / blank passwords on some system accounts, etc. You can use Nessus to scan your system and patch the vulnerability. If you want install Nessus on Backtrack 5 R3 first thing to do is download it from <a href="http://www.tenable.com/products/nessus/">http://www.tenable.com/products/nessus/</a> 
 
So we will discuss how we can install it online (if you are having internet connection) 
Nessus 4.4.1 now comes pre-installed on BackTrack 5 and requires that the user activate the installation. 
Here are the commands to install nessus : open terminal and type(if you don't know :P) 
 
apt-get install nessus 
 
After install it, create an account with adduser command like this 
 
/opt/nessus/sbin/nessus-adduser 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi096BdbvQ3tivzStOhO2i-NKqbUuGFAai-CU-88JyLpJh8W6ITIIcjIbeJ3I1Rr8CMn7ov-mPNM5QUn4xSaz8soNJvL27tfvLnjd_AYErs3c38gKLme8fXLtlYIeB7ibEayf0b6jXF_3SF/s1600/BT5-Adding-User.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi096BdbvQ3tivzStOhO2i-NKqbUuGFAai-CU-88JyLpJh8W6ITIIcjIbeJ3I1Rr8CMn7ov-mPNM5QUn4xSaz8soNJvL27tfvLnjd_AYErs3c38gKLme8fXLtlYIeB7ibEayf0b6jXF_3SF/s400/BT5-Adding-User.png" /></a></div>After you've entered a username, the nessus-adduser program asks you if the user account should have admin privileges or not. It is recommended that the initial user account have admin privileges so you can use the Nessus Web Interface to create subsequent accounts. The only difference between a Nessus admin user and a regular user is the ability to create user accounts. 
<h3>Registering Account For Nessus</h3> 
Once you have Nessus installed on BackTrack 5, you will need to obtain a Nessus activation code. If you wish to purchase a ProfessionalFeed, you can visit the <a href="https://store.tenable.com/">Tenable Store</a>. If you are using Nessus at home or wish to evaluate Nessus, you can <a href="http://www.tenable.com/products/nessus/nessus-homefeed">register a HomeFeed</a>. It’s important to note that the HomeFeed is limited to 16 IP addresses per scan (whereas the ProfessionalFeed allows you to scan an unlimited number of IP addresses). The ProfessionalFeed also gives you access to features such as Configuration and Sensitive Data Auditing, SCADA plugins, Nessus Technical Support and access to the Tenable Customer Portal. 
 
After registering they will send you activation code to your email. After you get the key, run this command, fill change xxxx-xxxx-xxxx-xxxx-xxxx with your key 
 
/opt/nessus/bin/nessus-fetch --register xxxx-xxxx-xxxx-xxxx-xxxx 
 
It will take some time because plugin is being updated. After the update complete, run your Nessus 
 
/etc/init.d/nessusd start 
 
Then open your browser and type this in the URL of the browser 
 
https://localhost:8834/ 
(You can also access the Nessus Web Interface remotely/outside by using the IP address assigned to BackTrack 5 (e.g. https://192.168.37.210:8834/).) 
 
Nessus will run on the secure channel https and on the port number 8834. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaKnRnPSJ3-PSC_CjQMlJ9Rj7OIj503WC3gwmGfzTY_wVcOo2eKP8Z8JSG_VpK7dfKW3pi3IDsusTRVsHl3HMaPUuk8N976dkf-i-IjCUhE2Z3qIv4Mhs3wbmQNXH3pqJQ89SVYYJdZEIa/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaKnRnPSJ3-PSC_CjQMlJ9Rj7OIj503WC3gwmGfzTY_wVcOo2eKP8Z8JSG_VpK7dfKW3pi3IDsusTRVsHl3HMaPUuk8N976dkf-i-IjCUhE2Z3qIv4Mhs3wbmQNXH3pqJQ89SVYYJdZEIa/s320/2.png" /></a></div> 
Now try and use Nessus for your own risk :-D.. 
 
Next tutorial i will post how to scan a host and get a report using nessus scanner.if you need anyhelp on any tools do post as a comment i will definitely reply on you also i also encourage everyone to use Backtrack if you wann learn more on security things 
.

installing Nessus Scanner For Network Vulnerability in Backtrack

uhh...hi everyone after a long days i have started posting tut so lets get started today we will be installing nessus scanner on backtrack a...

Scanning For Web Vulnerability Using Vega Scanner On Backtrack | kali

hi everyone this is one more post on another web vulnerability scanner tool.so this time we will be discussing more about a tool known as Vega.this is very simple tool to use as well as detect some quality (High) vulnerability... 
 
About Vega : 
Vega is an open source scanner and testing platform to test the security of web applications. Vega can help you find and validate SQL Injection, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. 
Vega includes an automated scanner for quick tests and an intercepting proxy for tactical inspection.Vega can be extended using a powerful API in the language of the web: Javascript. 
Vega was developed by Subgraph. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrmWhadJGWeN4yhX6Tj1n0y_1A7QltEthu40Im0UxMd65Luh_t3-M01LU-zFN3po4LOq7X_-RumrpgHdp_7nh0ks0hzKH9gIBhj5dJxNpvI41W2ht9zp8j5sR-A0EvUt5nkw4SI6Uc8-th/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgrmWhadJGWeN4yhX6Tj1n0y_1A7QltEthu40Im0UxMd65Luh_t3-M01LU-zFN3po4LOq7X_-RumrpgHdp_7nh0ks0hzKH9gIBhj5dJxNpvI41W2ht9zp8j5sR-A0EvUt5nkw4SI6Uc8-th/s700/1.png" width="560" /></a></div> 
Lets scan for a website for vulnerability as you can see you directly browse this tool on backtrack by following path. 
 
Bancktrack>vulnerability assessment >web application assessment >web vulnerability scanner>vega 
of course you can easily browse this by some command on terminal 
#cd /pentest/web/vega 
then ./Vega 
Now on the top select scan option since it open graphical user interface of this scanner. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip6vp-8TL3qRYmT0n4dw4TY4fcVpnp_byod3-v4VGCLChAf450fEdiLRGmhVd1Ma95ySqoRl1D8yYI-V4zplvIUFzELz7LROIlXRMTLyXGvLctMFXOjDqahXrsiPpWQO2CSBy8hyyVwtij/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEip6vp-8TL3qRYmT0n4dw4TY4fcVpnp_byod3-v4VGCLChAf450fEdiLRGmhVd1Ma95ySqoRl1D8yYI-V4zplvIUFzELz7LROIlXRMTLyXGvLctMFXOjDqahXrsiPpWQO2CSBy8hyyVwtij/s640/2.png" width="560" /></a></div> 
it will ask you for url to scan and below option which you can mark for a scan. 
 
next you can even set the login cookie if your site need any credentials for access. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidoqEKAgqyy8JZ5BWdv5RcNiYAk-xNBkXcHCd5FUeUxmXT289HwyRagT5zKEvaLwUs5LsVoC-T-qLLiubv1so0KV0DJpjuDdFajz-ElqOau-i5p7oldoRYibnUlfGu_LsHK2z-R58uGNhk/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEidoqEKAgqyy8JZ5BWdv5RcNiYAk-xNBkXcHCd5FUeUxmXT289HwyRagT5zKEvaLwUs5LsVoC-T-qLLiubv1so0KV0DJpjuDdFajz-ElqOau-i5p7oldoRYibnUlfGu_LsHK2z-R58uGNhk/s600/3.png" width="560" /></a></div> 
next click on finish it will scan your website quickly.showing below the vulnerability count as well as url. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnm_FiuqiG-DV-6Kq2StEz3kLFSPx8mk-HYsWXWWFDJAGaZBq3brfJ-v9NBoZXb_pxRwmLUXWPh0B3w0ZTPVb43ekgytbkOcSuUSzs_d4GHxD6Q82nNk3CaRWBBoHBYKS4Ew0fn3iSLVKy/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjnm_FiuqiG-DV-6Kq2StEz3kLFSPx8mk-HYsWXWWFDJAGaZBq3brfJ-v9NBoZXb_pxRwmLUXWPh0B3w0ZTPVb43ekgytbkOcSuUSzs_d4GHxD6Q82nNk3CaRWBBoHBYKS4Ew0fn3iSLVKy/s600/4.png" width="560" /></a></div> 
Next you just need to re-verify /cross check those vuln url simply by following those url and exploitation. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitMjF9FIefJ_ZCQMWBSti6fcjdtgiemqxgqY29GrnzmavlkBH2hnO_niJLjfll46SftsjsBxDJ55oHoFsvr6HGUrK7cedEXs9x_cnyJJcrrETjR1qqYBIvCjLXaevyWAJalUH7oeqqaCj3/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="vega scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitMjF9FIefJ_ZCQMWBSti6fcjdtgiemqxgqY29GrnzmavlkBH2hnO_niJLjfll46SftsjsBxDJ55oHoFsvr6HGUrK7cedEXs9x_cnyJJcrrETjR1qqYBIvCjLXaevyWAJalUH7oeqqaCj3/s600/5.png" width="560" /></a></div>you can also prepare reports easily for showing to your boss ;). 
have fun ...

Scanning For Web Vulnerability Using Vega Scanner On Backtrack | kali

hi everyone this is one more post on another web vulnerability scanner tool.so this time we will be discussing more about a tool known as Ve...

Best LFI | RFI Scanner in BackTrack Fimap-Exploitation Tool

Hi everyone this is a one more post on web scanner that is actually best on its Business For LFI (Local File Inclusion) And Remote File Inclusion .Though there are various tools available on backtrack but Fimap is one of the finest tool for detecting LFI and RFI on target website and exploiting it. 
 
About Fimap Tool 
 
It is a python tool which can find, prepare, audit, exploit and even google automaticly for local and remote file inclusion bugs in webapps. fimap is another tool which is best for getting LFI and RFI Out of a web app.it is still under development but works very fine. 
 
Features and Functions 
 
<li>Automatically find the root of the file system 
<li>Detect default files outside of the web folder 
<li>Attempts to detect passwords inside the files 
<li>Supports basic authentication 
<li>Can use null byte to bypass some controls 
<li>Writes a report of the scan to a file 
<li>Add your own payloads and patches to the config.py file. 
<li>Has a Harvest mode which can collect URLs from a given domain for later pentesting. 
<li>All commands will now be send base64 encoded. So you can use quotes as much as you want. 
<li>php://input detection is now 100% reliable. 
<li>You can now define a POST string for relative and absolute files in the config.py. 
<li>TTL implemented. You can define it with “—ttl “. Default is 30 seconds. 
<li>Experimental HTTP Proxy support. You can define a HTTP(s) proxy with “—http-proxy localhost:8080″. 
<li>Googlescanner can now skip the first X pages. Use “—skip-pages X”. 
<li>Lots of bugfixes and additional regular expressions. 
<li>Harvest mode which can collect URLs from a given domain for later pentesting. 
<li>Can handle directories in RFI mode like: 
<blockquote><*? include (*$*_GET["inc"] . "/content/index.html"); *?**> 
<***? include (*$*_GET["inc"] . "_lang/index.html"); *?**> 
(Remove * symbol) 
</blockquote>where Null-Byte is not possible. 
<li>You always define absolute path names in the configs. No monkey like redundant pathes like: 
../etc/passwd 
../../etc/passwd 
../../../etc/passwd 
<li> Has a Blind Mode (--enable-blind) for cases when the server has disabled error messages. BlindMode 
<li>Test and exploit multiple bugs: 
include() 
include_once() 
require() 
require_once() 
 
Working With Fimap 
 
Scan a single URL for FI errors 
 
#./fimap -u http://www.example.com/test.php?file=bang&id=23 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTvcm0Tuh8WRPu93-wqSHrOGFAd8qymRm3gdJR-Vx7EPCRcjAAS6pRH49SthsKsE41eXNNRHX2y_TDN4siRlETHbYwWbv9ODVRIz26RIV_XOTmjGix0cwhgSU555NrLHbYTsfbqb1tSLTU/s1600/scan.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="scanning for lfi/rfi" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgTvcm0Tuh8WRPu93-wqSHrOGFAd8qymRm3gdJR-Vx7EPCRcjAAS6pRH49SthsKsE41eXNNRHX2y_TDN4siRlETHbYwWbv9ODVRIz26RIV_XOTmjGix0cwhgSU555NrLHbYTsfbqb1tSLTU/s600/scan.png" width="550" /></a></div> 
Scan Google search results for FI errors 
 
#./fimap.py -g -q inurl:index.php 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipt6b-is1s8_rk4qMWUbrzXIKmgOCbJMI3zgeiMWpOWqhXThlQA39JsYh3SSnqVr1aM6hUJOXwMjz44WbqJl48XCbpLnwS4XaFGJsD3C4bjE4BszLElRgJlf8j8G8tnuP_4gysmhtdK4sN/s1600/123.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="web scanner" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipt6b-is1s8_rk4qMWUbrzXIKmgOCbJMI3zgeiMWpOWqhXThlQA39JsYh3SSnqVr1aM6hUJOXwMjz44WbqJl48XCbpLnwS4XaFGJsD3C4bjE4BszLElRgJlf8j8G8tnuP_4gysmhtdK4sN/s620/123.png" width="550" /></a></div> 
Harvest all links of a webpage 
 
#./fimap.py –H -u http://example.com–d 3 –w /tmp/urllist 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfDpXzst5Prsb2dUlqILHkT2Ha-hYso_kh-_c9pMx5lWoaHogd1dNxQc_uBfIMnSDBqlkNMe7h5sssnFIX7qxIys05TScm3w5z5OubDOZOotTqHVzftq9klGolJ2b-FHD5RT3PP5q4EQlB/s1600/1233.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="best web scanner" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfDpXzst5Prsb2dUlqILHkT2Ha-hYso_kh-_c9pMx5lWoaHogd1dNxQc_uBfIMnSDBqlkNMe7h5sssnFIX7qxIys05TScm3w5z5OubDOZOotTqHVzftq9klGolJ2b-FHD5RT3PP5q4EQlB/s620/1233.png" width="550" /></a></div> 
<li>-m is for mass scanning 
<li>-l is for list 
<li>Scan websites using google dorks 
<li>.fimap.py -g -q ‘inurl:index.php’ 
<li>-g for searching from google 
<li>-q stands for the query which is to be searched in google. 
 
 
Requirements 
 
Needs: Python >= 2.4 
 
Download 
<a href="https://code.google.com/p/fimap/downloads/list">Click Here</a> 
 
Demo Site: 
Vuln Check1 :=http://www.bislig.gov.ph/content1.php?page=5&directLinks=../../../../../../../../../../../../../../etc/passwd 
Vuln Check2 :=http://www.bislig.gov.ph/content1.php?page=5&directLinks=../../../../../../../../../../../../../../proc/self/environ 
 
Exmp 2 := http://www.aladde.org/index.php?load=../../../../../../../../../../../../../../proc/self/environ 
 
Hope you like this tutorial don't forget to leave your valuable comment thank You :)

Best LFI | RFI Scanner in BackTrack Fimap-Exploitation Tool

Hi everyone this is a one more post on web scanner that is actually best on its Business For LFI (Local File Inclusion) And Remote File Incl...

Web Scanner Nikto Tutorial On Kali | Backtrack

Hi everyone as we all know there are numbers of web application scanner present on backtrack os so i will be covering most of the scanner in my upcoming post so today we are going to discuss about a small tool known as Nikto. 
<h2> 
Nikto</h2><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXQgKd98QyzEl5Oi2O14GfaiVkYiXHSsPdbi-10e2CFjGyL7UVgjgWT-N0MJq25o0RmpYWwgOCSS3LLrivT8OUJoApOoaB6i1hvZrZ0gsuBsWS8sd77KHE6lzUf6BVy3tmE8hTxiC0MO1C/s1600/1.png" imageanchor="1"><img height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXQgKd98QyzEl5Oi2O14GfaiVkYiXHSsPdbi-10e2CFjGyL7UVgjgWT-N0MJq25o0RmpYWwgOCSS3LLrivT8OUJoApOoaB6i1hvZrZ0gsuBsWS8sd77KHE6lzUf6BVy3tmE8hTxiC0MO1C/s800/1.png" width="550" /></a></div>Nikto is basically an open source web server scanner which performs comprehensive tests against web servers for multiple items,including over 6500 potentially dangerous files/CGIs, checks for outdated versions of over 1250 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software. Scan items and plugins are frequently updated and can be automatically updated. 
 
Nikto is not designed as an overly stealthy tool.its current version is "Nikto 2.1.5" 
 
Some of its key feature:- 
 
<li>Full HTTP proxy support 
<li>Apache user name enumeration 
<li>Logging to metasploit 
<li>Secure Socket Layer support (SSL) 
<li>Subdomain brute forcing (guessing) 
<li>Easy to update 
<li>Save report on multiple format 
 
 
How to use Nikto for scanning web app ? 
 
The usage of this tool is very simple,but before doing these scanning you just need to update it. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0D5EexEuEZ5T1YyPpjwyuQ2aA14cTl-5TKBAI6kA1NZ8o7y4AfZv_JDm6wQOCABfi9OQDS6bOCCWCfMu1GXaM0OQ-5u6ob89b_zx76qSff0jAwX2-qr-zqFw7Tue4YmLku0-DsgYQUazJ/s1600/2.png"><img height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi0D5EexEuEZ5T1YyPpjwyuQ2aA14cTl-5TKBAI6kA1NZ8o7y4AfZv_JDm6wQOCABfi9OQDS6bOCCWCfMu1GXaM0OQ-5u6ob89b_zx76qSff0jAwX2-qr-zqFw7Tue4YmLku0-DsgYQUazJ/s700/2.png" width="550" /></a></div> 
Command in backtrack 
 
#./nikto.pl -update (on current directory cd/pentest/web/nikto) 
 
In kali it is. 
 
#nikto -update 
 
To run a basic scan you just need to type. 
 
#nikto -h [ip/target address] 
#./nokto -h [ip/host address](in backtrack) 
 
If you want to check different port than use 
 
#nikto -h [target host] -p [port number] 
 
If you want this test via proxy than you can use by this command 
 
#nikto.pl -h [target host] -useproxy http://localhost:8080/ 
 
For help and know more options available just use. 
 
#nikto -H 
 
i hope this tut will help you to use nikto scanner if any more doubt please do comment :). 
 
<a href="http://cirt.net/nikto2">Thank you for reading</a>.

Web Scanner Nikto Tutorial On Kali | Backtrack

Hi everyone as we all know there are numbers of web application scanner present on backtrack os so i will be covering most of the scanner in...

How to find all hidden sub domain name of a website | Domain name

hello every one this is a small post where i will discuss finding sub domain name of a target website. 
So what exactly subdomain name ..its basically a name that s attached to beginning of a domain name like. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkqIM3MitV3Gfye4W33OB2ZS5gXBC6Y4bIDdGlQh-D9qRYG5RHlqoBu8wEEAE5a2i9bXLwL8otirRgLH5iunODRlEsAIefILUX1V_cXZ6ts0uHGtSUqxrSDVb3vgeduq5WvGobteksVxyU/s1600/subdomains.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhkqIM3MitV3Gfye4W33OB2ZS5gXBC6Y4bIDdGlQh-D9qRYG5RHlqoBu8wEEAE5a2i9bXLwL8otirRgLH5iunODRlEsAIefILUX1V_cXZ6ts0uHGtSUqxrSDVb3vgeduq5WvGobteksVxyU/s1600/subdomains.jpg" /></a></div> 
abc.xyz.com 
xxx.xyz.com 
123-xs.xyz.com 
 
Domain name owner usually create such subdomain name in order to create one more side of there Business requirements. 
so as we know some domain name are publicly available but there also some priv8 /hidden domain name that also exist which the owner of domain name might use for internal purpose. 
 
so how we can find those hidden sub domain name so here are some ways by which you can easily find the sub domain name of a website. 
 
<li>Using google 
 
you can simply use a simple google search like. 
 
*.xyz.com 
 
which will list all possible subdomain name indexed by google.com. 
 
<ul>Demo.</ul> 
*.darksite.co.in 
 
 
<li>Using Online site 
 
There are various website which are available for finding possible domain of a website but one of them is . 
 
<a href="http://www.wolframalpha.com/">Wolframalpha</a> 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgUckRzwv9GlBFeGYAu3zLFZi-D7kaNx_l6FzDx9N0ynjKAfrEdYh5BcM3UTvMi5dtYKbX3WhwjanVmp539MRA2Sf28K41fJ5K6x7qi6168cR2QzP8BvCACDTewPeA8J-FTGGZUNMpNLYJ/s1600/Search.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhgUckRzwv9GlBFeGYAu3zLFZi-D7kaNx_l6FzDx9N0ynjKAfrEdYh5BcM3UTvMi5dtYKbX3WhwjanVmp539MRA2Sf28K41fJ5K6x7qi6168cR2QzP8BvCACDTewPeA8J-FTGGZUNMpNLYJ/s320/Search.png" /></a></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjdB3X3zLQ5_wyf3NearC3KCK_DJlRI14Pl6ShDsZpLh6ydzxsn0ELvNMOL_quarKVFZ6pUCuUoCZDFvyN-g5sslRqpkRTYFH7lbeK0RmsFQ9sXaHGdZQnoBHdJbMwKjrmobUk0G-lQ5JQ/s1600/Search_Result.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjdB3X3zLQ5_wyf3NearC3KCK_DJlRI14Pl6ShDsZpLh6ydzxsn0ELvNMOL_quarKVFZ6pUCuUoCZDFvyN-g5sslRqpkRTYFH7lbeK0RmsFQ9sXaHGdZQnoBHdJbMwKjrmobUk0G-lQ5JQ/s320/Search_Result.png" /></a></div> 
it just list you all possible domain using their DNS analysis. 
 
So is it important to find subdomain name of a website for hackers ? 
 
The answer is very simple .sub domain name usually helps hackers to find the vulnerable url and exploit it. few months back one pakistani guy Rafay Baloch got 5,000$ for finding a sub domain name of paypal and he just guessed the password to be "root".so do find some hidden sub domain and all the best :) .

How to find all hidden sub domain name of a website | Domain name

hello every one this is a small post where i will discuss finding sub domain name of a target website. So what exactly subdomain name ..its...

Secure your Smart Phone ! Don't Let Your Smart Phone Be the next

Hi everyone after a long day here is one of my post on mobile security ...as the dayz progressing people are getting much friendly with doing things from their cell phone now every task is simulated into app and merged into smart phone now.starting from ticket booking ,banking transaction,online purchasing and selling ...many we are depending on our smart phone only.so as you know humans are weakest link of security you should observe following few tips to stay protected against these mobile phone based attack(Smart phone base attack as it is emerging day by day ) 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKCPUuROQS77Cu4SJJMHnTWd8Yr4h_kz1hjVNk-0Uu7aRMcUHEKucKxyeysCa_4HQC2_dtSDRtg-VuMsBx43lgjXHv7WCfZj1gJFXVatzb8NAGiSZXAXZ7twomMUmOl1cTdTHMwzuVcONc/s1600/darksite.png" imageanchor="1"><img alt="smart phone hacking" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKCPUuROQS77Cu4SJJMHnTWd8Yr4h_kz1hjVNk-0Uu7aRMcUHEKucKxyeysCa_4HQC2_dtSDRtg-VuMsBx43lgjXHv7WCfZj1gJFXVatzb8NAGiSZXAXZ7twomMUmOl1cTdTHMwzuVcONc/s1600/darksite.png" width="560" /></a> 
Golden Tips to stay safe using Smart Phone 
<li>Always use lock (complicated Pattern is best)..you never know where your phone travel and reveal. 
<li>don't connect your smart phone to un-trusted Network (Thinking lets enjoy free internet) 
<li>Don't install app without verification. 
<li>don't disable data protection option that is there in your phone... 
<li>there are many key logger program available for smart device which can actually store all your key touched and logs and send to attacker so be safe on that. 
<li>always better to have install a security program /app. 
 
There are many such tips available which i will be updating if you know such feel free to comment.

Secure your Smart Phone ! Don't Let Your Smart Phone Be the next

Hi everyone after a long day here is one of my post on mobile security ...as the dayz progressing people are getting much friendly with doin...

Hack Remote Pc Using ShellCodeExec In Social Engineering Tool Kit | By Passing Antivirus

HI every one today i am going to explain you ho you can hack remote pc using social engineering tool kit present in backtrack. 
so lets do it mostly i will show you rather than putting lots theory stuff. and this is the quick way to learn it and don't forget to practice so follow these step by step. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFlaVTtGnwyLn4P5fiJQHXGJR-mkKLz4VHkG2ZA_TqtMXSa2eiwormrPZ8wZPFBXRYT10GmlIQ6Ym-D2w-ml0eWhmcbjJUPx5lxw-WElECL0-XYq6RMhO9yp_s8ial8_8scnvqbjuGUJ1/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBFlaVTtGnwyLn4P5fiJQHXGJR-mkKLz4VHkG2ZA_TqtMXSa2eiwormrPZ8wZPFBXRYT10GmlIQ6Ym-D2w-ml0eWhmcbjJUPx5lxw-WElECL0-XYq6RMhO9yp_s8ial8_8scnvqbjuGUJ1/s320/1.png" /></a></div>Now after opening social engineering tool kit press 1. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2ZQDOdfdiHvXoi-JKFTAJtnNFWUk0azwMMKX4WNuKPyRvi9A2NEthpCVGxIJjh5ARJCM4sj6YpVA6Jn538jUWd-F5pTiJj8SK-rWWnWMIUTQSEH8wpQ-hLSkZVOuv9o5BMln9lG0xIsLP/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2ZQDOdfdiHvXoi-JKFTAJtnNFWUk0azwMMKX4WNuKPyRvi9A2NEthpCVGxIJjh5ARJCM4sj6YpVA6Jn538jUWd-F5pTiJj8SK-rWWnWMIUTQSEH8wpQ-hLSkZVOuv9o5BMln9lG0xIsLP/s320/2.png" /></a></div>Next select option 2 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4F1TKHNxvDCM4hY-Hce_UXZtdVhWpyVc0p1XP851zAGpe4s192jRIWuMbV-4lD3cJTAhaaL_qI8UVx3F0Sg4HszZZsvNOVrYKxOE1VoU1f5BQodAtB8iuJ13pMa4A-xzb0kNLCc9PVJbK/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi4F1TKHNxvDCM4hY-Hce_UXZtdVhWpyVc0p1XP851zAGpe4s192jRIWuMbV-4lD3cJTAhaaL_qI8UVx3F0Sg4HszZZsvNOVrYKxOE1VoU1f5BQodAtB8iuJ13pMa4A-xzb0kNLCc9PVJbK/s320/3.png" /></a></div>Next select option 1 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpYMF_oDvxL3r_Dr8c05SV2dBB1ce6-WQfSEM-E7O20hVg3U3HllP0D_u9gbLmsld73G3Y8_q_6WWeeztPVWkLY6DRBLahrGQWQmIqH-sf8UmO5DBtwIg2q_klCAZ-bnUknqMZsCftWhLC/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjpYMF_oDvxL3r_Dr8c05SV2dBB1ce6-WQfSEM-E7O20hVg3U3HllP0D_u9gbLmsld73G3Y8_q_6WWeeztPVWkLY6DRBLahrGQWQmIqH-sf8UmO5DBtwIg2q_klCAZ-bnUknqMZsCftWhLC/s320/1.png" /></a></div>After that select 2 and select nat/port forwarding to be no and give your ip address .you can easily know your ip address by 
typing ifconfig command and then provide a url which the victim will be redirected after clicking link.just below see image. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuE9qD72wRJd6ZMaNSTysklbtypwXhch-jRChVmxIRI4wlnTyFf2DdeqvBAQaog_yXX-3soVdznrlF_-fGCvbESnPCW6LbLAFZkNs02QZ44d1gNvcgL1iOZa9fsUEmPvBxmJwvLFuNq_Ci/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiuE9qD72wRJd6ZMaNSTysklbtypwXhch-jRChVmxIRI4wlnTyFf2DdeqvBAQaog_yXX-3soVdznrlF_-fGCvbESnPCW6LbLAFZkNs02QZ44d1gNvcgL1iOZa9fsUEmPvBxmJwvLFuNq_Ci/s320/2.png" /></a></div>Next come the important stuff select the pay laod to be 14 that is shellcodexec AV Safe. and for port to listen just press enter as it take 443 to be default port.and in the end select the payload to be deliver by shellcodeexec to be 1 that is Windows meterpreter reverse tcp. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBDfGvpmALLyOEq2JuFZKJoyW6WTigVrtFNpovUpqBkEVvqpjtXyNjwpNA-mLz-vhzV2rgvzHyH3svKkpIpCWwZnZSIwcj0KRhd3n88BlcPhcB9XXkZ40SQUujwdXIE6l9HL808XHzcFyw/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBDfGvpmALLyOEq2JuFZKJoyW6WTigVrtFNpovUpqBkEVvqpjtXyNjwpNA-mLz-vhzV2rgvzHyH3svKkpIpCWwZnZSIwcj0KRhd3n88BlcPhcB9XXkZ40SQUujwdXIE6l9HL808XHzcFyw/s320/4.png" /></a></div>Now wait for some time finally it will show server started and finally send the url to victim and victim open it 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6Asb8UaOeGwK55yjndby1T-iTROk3PYzAKEQqxjNX0D_M2nnYvg7DdRZp_10VzM1H7VyWUSjBG-M7ziYV150U1Wd6BvRIa0mnJAn2ltoY_HqSNcpI8pm-seIVya_64D0Oitnq0COGnal6/s1600/9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg6Asb8UaOeGwK55yjndby1T-iTROk3PYzAKEQqxjNX0D_M2nnYvg7DdRZp_10VzM1H7VyWUSjBG-M7ziYV150U1Wd6BvRIa0mnJAn2ltoY_HqSNcpI8pm-seIVya_64D0Oitnq0COGnal6/s320/9.png" /></a></div>he/she will be redirected to google page and now lets check in backtrack whether session created or not? 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxgyIz88o0BtkQ7j5PxsmC_79GsY9w0tm_-MiZLEu4Jip3rdUjrF27c1REfcmquU-Pzhrcg_VLWFBmg6s6yyfR6omOePp98yOh-eiCnKnyfRLQWd-ROR1o0_dR7FMQ9fouBNPG16RwZOUu/s1600/11.png" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjxgyIz88o0BtkQ7j5PxsmC_79GsY9w0tm_-MiZLEu4Jip3rdUjrF27c1REfcmquU-Pzhrcg_VLWFBmg6s6yyfR6omOePp98yOh-eiCnKnyfRLQWd-ROR1o0_dR7FMQ9fouBNPG16RwZOUu/s320/11.png" /></a> 
now we have access to remote pc ,with the help of <a href="http://www.darksite.co.in/2012/05/metaspolit-for-penetration-test_03.html">meterpreter command</a> we do what ever we want. 
Hav a nice hack enjoy at any step any doubt do comment below we are always love to answer. 
Thanks :).

Hack Remote Pc Using ShellCodeExec In Social Engineering Tool Kit | By Passing Antivirus

HI every one today i am going to explain you ho you can hack remote pc using social engineering tool kit present in backtrack. so lets do i...