How to Hack Windows administrator password

This hack will show you how to reset Windows administrator password (for Win 2000, XP, Vista and Win 7) at times when you forget it or when you want to gain access to a computer for which you do not know the password.

Most of us have experienced a situation where in we need to gain access to a computer which is password protected or at times we may forget the administrator password without which it becomes impossible to login to the computer. So here is an excellent hack using which you can reset the password or make the password empty (remove the password) so that you can gain administrator access to the computer. You can do this with a small tool called  Offline NT Password & Registry Editor. This utility works offline, that means you need to shut down your computer and boot off your using a floppy disk, CD or USB device (such as pen drive). The tool has the following features.

• You do not need to know the old password to set a new one
• Will detect and offer to unlock locked or disabled out user accounts!
• There is also a registry editor and other registry utilities that works under linux/unix, and can be used for other things than password editing.

 

How it works?

 

Most Windows operating systems stores the login passwords and other encrypted passwords in a file called sam (Security Accounts Manager). This file can be usually found in \windows\system32\config. This file is a part of Windows registry and remains inaccessible as long as the OS is active. Hence it is necessary that you need to boot off your computer and access this sam file via boot. This tool intelligently gains access to this file and will reset/remove the password associated with administrator or any other account.

The download link for both CD and floppy drives along with the complete instructions is given below
Offline NT Password & Reg Editor Download

It is recommended that you download the CD version of the tool since floppy drive is outdated and doesn’t exist in today’s computer. Once you download you’ll get a bootable image which you need to burn it onto your CD. Now boot your computer from this CD and follow the screen instructions to reset the password.

 

Another simple way to reset non-administrator account passwords

 

Here is another simple way through which you can reset the password of any non-administrator accounts. The only requirement for this is that you need to have administrator privileges. Here is a step-by-step instruction to accomplish this task.

1. Open the command prompt (Start->Run->type cmd->Enter)
2. Now type net user and hit Enter
3. Now the system will show you a list of user accounts on the computer. Say for example you need to reset the password of the account by name John, then do as follows
4. Type net user John * and hit Enter. Now the system will ask you to enter the new password for the account. That’s it. Now you’ve successfully reset the password for John without knowing his old password.
So in this way you can reset the password of any Windows account at times when you forget it so that you need not re-install your OS for any reason. I hope this helps.

-->

Read More

How to Hack My Space Hacking

MySpace being one of the world’s largest social networks, has become today a favorite place for many to maintain secret relationships and exchange cheating messages. I myself have seen many cheaters create MySpace accounts in order to have secret relationships with another person. So, it’s no wonder why many people want to hack MySpace account of their spouse, girlfriend or boyfriend so as to reveal the secret. Well, if you are here to know “how to hack MySpace”, then you have landed at the right place!

Is it possible to hack MySpace?

Yes! As a matter of fact, almost anything can be hacked on the Internet. However, you must be aware of the following things before you proceed to hack MySpace.    

1. Never trust any hacking service that claims to hack a MySpace password in exchange for a fee. I have personally tried and tested many of them; all I can tell you is that they are no more than a scam.  

2. With my experience of over 8 years in the field of hacking and IT security, I can tell you that there are only TWO ways to hack MySpace: They are Keylogging and Phishing. All the other ways are simply scam or don’t work!

The following are the only 2 foolproof methods that work:  

1. Keylogging: The easiest way

The easiest way to hack MySpace is by using a keylogger (also known as spy software). A keylogger is a small program that monitors each and every keystroke that a user types on a specific computer’s keyboard.

Keylogging can not only get you the password, but also has the power to monitor each and every activity that they perform on their computer. To use a keylogger you don’t need to have any special knowledge or technical experience. Anyone with a basic knowledge of computer can install and use the keyloggers with ease.

Hence, for a novice computer user, using a keylogger can be the best way to gain access to MySpace or any other online account. With my experience, I recommend the following keylogger as the best. 

SniperSpy is a revolutionary product that allows you to easily access *ANY* online account or password protected material such as MySpace, Facebook, Yahoo, Gmail etc. There are absolutely *NO* limitations to what accounts or websites this software can access!

Why Sniperspy is the best?

1. With my experience of over 8 years in the field of IT security, I have tried almost every software currently available and know the ins and outs of what it is and how it actually works.   

2. Sniperspy is the only software that offers a complete stealth and easy access to any password. Hence I recommend SniperSpy as the best to hack MySpace password. 

Here is a summary of benefits that you will receive with Sniperspy: 

1. Access ANY Password  

Sniperspy records every keystroke typed on the computer thereby allowing you to access any type of password protected account such as MySpace, Facebook, Hi5 and other email accounts. 

2. Monitor all the Activities on the Target Computer and Access Protected MySpace Accounts  

With Sniperspy, you can secretly capture the screenshots, record IM conversations, monitor their web activity and do many more…  

 3. Never Get Caught 

This software runs in a total stealth mode which makes it possible to record the activities without anyone knowing it. Thus, you need not worry about being traced back!

4. Remote Install Feature 

No physical access to your remote PC is needed to install the spy software. You can install the software even if the PC is out of country and easily gain access to the target MySpace account! 

5. Extremely Easy to Use 

SniperSpy is designed for novice computer users and thus requires no special skills. 

How safe is to use SniperSpy?

SinperSpy is completely safe and secure since it neither collects any information from your computer nor contact you in any way unless you request assistance. SniperSpy is a reputed, trustworthy and reliable company which offers 100% privacy for it’s users.

What are the minimum system requirements?

Any computer running on Pentium or AMD 433mhz or Better, at least 64MB RAM with Windows 2000/XP/Vista/7 OR Mac.

Is my online order 100% secure?

Absolutely Yes! All the e-commerce transactions for SniperSpy are routed through a highly secure payment gateway. So all your information remains private and secure. So go grab SniperSpy now and expose the truth!

2. Other ways to hack Myspace account

Phishing is the most commonly used method to hack into MySpace or any other email account. This technique involves the use of Fake Login Page (also known as spoofed page). These fake login pages resemble the original login pages of sites like Yahoo, Gmail, MySpace etc. Here, the victim is tricked to make him believe the fake login page to be the real one and enter his password there. But once the user attempts to login through these pages, his/her login details are stolen away by the hacker who is behind the phishing attack. Therefore phishing can be a very effective way in gaining access to password protected online accounts such as MySpace. 

However, phishing requires specialized knowledge and high level skills to implement; which is not possible for a novice computer user. Also, phishing is considered as a serious crime and the attacker can go behind the bars if caught. So, I recommend the use of keyloggers as the best way to hack MySpace.

I hope this information has helped you. If you have any further queries, you can leave a comment below so that I can come up with a response. Please don’t contact me asking to hack a MySpace account for you, which I would definitely not. Kindly be advised that this website only offers information on ethical hacking and security and does not provide any sort of paid/personal hacking service.

-->

Read More

Desktop Phishing Tutorial - The Art of Phishing

-->

phishing is another type of Phishing. In desktop phishing hackers change your Windows/System32/drivers/etc/hosts file, this file controls the internet browsing in your PC

 Difference between phishing and desktop phishing is as follows.

In phishing 

1. Attacker convinces the victim to click on the link of fake login page which resembles a genuine login page.
2.Victim enters his credentials in fake login page that goes to attacker.
3. Victim is then redirected to an error page or genuine website depending on attacker.

But main drawback in phishing is that victim can easily differentiate between fake and real login page by
looking at the domain name. We can overcome this in desktop phishing by spoofing domain name.

In desktop phishing

1. Attacker sends an executable file to victim and victim is supposed to double click on it. Attacker's job is done.
2. Victim types the domain name of orignal/genuine website and is taken to our fake login page. 
But the domain name remains the same as typed by victim
and victim doesn't come to know.
3. Rest of the things are same as in normal phishing. 


What is Hosts File ?

The hosts file is a text file containing domain names and IP address associated with them.
Location of hosts file in windows: C:\Windows\System32\drivers\etc\, Whenever we visit any website, say www.anything.com , an query is sent to Domain Name Server(DNS) to look up for the IP address associated with that website/domain. But before doing this the hosts file on our local computer is checked for the IP address associated to the domain name.

Suppose we make an entry in hosts file as shown. When we visit www.anywebsite.com , we would be taken to this 115.125.124.50. No query for resolving IP address associated with www.anywebsite.com would be sent to DNS.

What is the attack ?
 
I hope you have got an idea that how modification of this hosts file on victim's computer can be misused.
We need to modify victim's hosts file by adding the genuine domain name and IP address of our fake website /phishing page.Whenever victim would visit the genuine website , he would be directed to our fake login page and domain name in the URL box would remain genuine as typed by victim. Hence domain name is spoofed.

Steps to perform attack 

1. Host phishing page on your computer. 
Since the webshosting sites like 110mb.com,ripway.com etc where we usually upload our phishing page do not provide a IP that points to your website like www.anything.110mb.com. An IP address points to a webserver and not a website. So we need to host the phishing page on our computer using a webserver software like wamp or xampp.

Download the wamp or xampp.

• Copy your phishing page and paste it in the WWW directory in wamp, the default path is "C:\Wamp\WWW" 

• Run Wamp server on your pc

• Right click the wamp icon in the system tray and select Start all services, Visit your public IP address and you must see your phishing page

2.Modify Hosts file.
If you dont have physical access to victim's computer. Then copy your hosts file and paste anywhere. 
Edit it with any text editor and associate your public IP address with domain you wish as show.

Like in this case , when victim would visit gmail.com , he would be take to website hosted on IP 'xxx.xxx.xxx.xxx'.

Replace it with your public IP.
 
3. Compress hosts file such that when victim opens it, it automatically gets copied to default 
location C:\Windows\system32\drivers\etc and victim's hosts file get replaced by our modified hosts file. 

The you can bind this file with any exe using a binder or directly give it to victim. He/she is supposed to click it
and you are done .

Limitation of attack 
 
1.Since our pubilc IP address is most probably dynamic that it gets changed everytime we disconnect and
connect. To overcome this we need to purchase static IP from our ISP. 
2. The browser may warn the victim that Digital Certificate of the website is not genuine.


Countermeasures:-
 
Never just blindly enter your credentials in a login page even if you yourself have typed a domain name in
web browser. Check the protocol whether it is "http" or "https" . https is secure,

Read More

Hackers compromised cPanel's proxy server used by Technical Analysts

-->

cPanel announced that one of the cPanel proxy servers which is used by their Technical analysts for accessing customer servers has been compromised by hackers.

According to their forum post, the hacker compromised proxy machine by compromising a single workstation used by one of our Technical Analysts.

The company said "only a small group of our Technical Analysts uses this particular machine for logins".

The company also claimed that they found no evidence that any sensitive customer data was exposed and there is no evidence that the actual database was compromised.

cPanel restructured the process used to access customer server to "reduce the risk" of this type of security breach.

Read More

Fern wifi Cracker- A Wireless Penetration Testing Tool

WiFi is now become the way for short distance Internet, for long distance we have WiMAX standard but WiFi is very important because you can find WiFi hot-spot everywhere like at the airport, coffee shop and at the educational places. There are so many people out there who are using WiFi at there home and at offices. Cracking a WiFi connection is a essential part of wardriving but for a penetration tester and a ethical hacker WiFi or wireless network security is an important part. If you are doing a job as a IT security engineer and your task is to do a pen test on the wifi network. What tools are you going to use?Operating system for this case is usually Linux or specially Ubuntu or backtrack, backtrack 5 contain different tools for WiFi cracking like aircrack-ng but in this article I will discuss something about Fern WiFi Cracker.

                                                 What Is Fern WiFi Cracker ?

Fern wifi cracker is a wireless security auditing application that is written in python and uses python-qt4. This application uses the aircrack-ng suite of tools. It can be run on any linux distribution like Fern wifi cracker is use in ubuntu or even you can use fern wifi cracker in windows but you must have some dependencies to run fern wifi cracker on windows.Requirements of Fern wifi Cracker:pythonpython-qt4macchangeraircrack-ngxtermsubversion

                                     

 Fern wifi cracker can easily be install on ubuntu and backtrack, backbox,gnackbox and other distribution.

Fern wifi Cracker Tutorial

Click the refresh button to display monitor interfaces:

Please Note, the scan button is a dual button, meaning, by clicking it the first time it scans for networks,then by clicking the button again, it stops any scan that was initialized (vise versa).

Fern wifi is a GUI and it can crack WEP and WPA as well.

-->

Read More

XSS EXPLOITS

Hello friends. These days I am on an XSS rampage.  Since then I got several request from the readers to post a quick article on cross site scriptting. This tutorial will be divided into two parts. In the first part I will cover the basics of XSS and how the attack vector is implemented. In the next tutorial we will discuss some techniques by which we can prevent XSS attacks.



OWASP lists sql injection and XSS as the two most common vulnerabilities in web pages and web apps. We have covered SQL injection quiet extensively so I decided to write on xss.

Cross Site Scripting or XSS  is a web application attack that involves injecting a piece of malicious code into the vulnerable web application/web page. The attacker injects a client side script mainly through the web browser to reach the other users of the particular website. This attack can open several doors for the attacker ranging from session hijacking to entire database compromise.

Reflected or Non-persistent XSS attack

This is the most common form of XSS attack in which the attackers crafts a malicious code and transfers it to the server side either through the HTTP request parameter or through some HTML form submission. A simple Reflected XSS attack looks like this-

                                        (Embedded Script)

           (External script)

Consider this real time example of reflected XSS in action:

XSS vulnerability in Babylon Search

Stored or Persistent XSS attack

This attack is more dangerous and complicated compared to reflected XSS attack. In Stored or persistent XSS attack, the vulnerable script is stored on the target server and is activated once another user clicks on it. For example, consider a forum where the attacker posts a message containing a link to malicious script. Another user when views the message and clicks it, then the script activates and causes respective attack.

The attacker can craft a malicious script like a cookie stealing script of the form and steal victims cookies to perform session hijacking.

DOM based XSS attack

DOM or document object model based XSS attacks tries to exploit the structure of the page in which they reside. The attacker tries to trick the browser to execute the JavaScript or HTML code of his choice. Unlike the other two XSS attacks, DOM based attack takes the advantage of vulnerable javascript which executes directly in the user’s browser.

Consider the following piece of code:

var loc = document.location + '?gotoHomepage=1';
document.write('Home');

The javascript variable document.location can easily be compromised by the attacker to pass a malicious javascript as it has no user input filters. A url of the form : http://site.com/index.html?   can be created and passed as the HTTP header and can be executed directly into user’s document. 

Complete Cheat Sheet on XSS:

Pwned

">

Bypassing Xss Simple Filteration Without Alteration:

Now we notice, the above script we used for filtration is evolving only a few strings, knowing there are bunch of ways and

strings to inject a malicious request.

It's only filtering '< > /' means leaving hackers with a vast amount of other strings to inject a malicious code.

Now the question is since '<' and '>' are filtered, how we will be able to send a javascript or html code injection?

Well, the answer is quite easy, javascript can be executed using ' and " before the orignal script.

For instance, 

')alert('xss');

This will generate an alert box again on a vulnerable server.

Secondly,

");alert('xss');

This will too generate an alert box on a vulnerable server.

Bypassing Advance Xss Filtration:

Some webmasters filter lot more than this, especially it's filtered on important sites like gov and org sites.
But all depends on their pattern if they are doing this in javascript, we will of course just alter the page but what if the filtration is not in javascript, instead is in html or php or even asp.
There's nothing impossible, we will try to get as much info about the filtration as much we can.
Supposing a server that have filtered all strings just more than common in a way that it reads the malicious string in the beginning or in the end to avoid and abort it, this of course can be bypassed too!

An example can be likely so:

helloworld

The above script will bypass filtration for the server that reads the malicious string in the beginning.

helloworld

This will bypass message filtration.

Now we will study some more advance filtration bypass.

Some webmasters just simply define a pattern of a cross-site scripting script that is possibly common.

In this case, I will mention here the full array of strings to inject, bypassing the filtration.

We will suppose injecting in a search form.

victim.com/search.php?query=">
victim.com/search.php?query=">
victim.com/search.php?query=">
victim.com/search.php?query=">
victim.com/search.php?query=//">
victim.com/search.php?query=abc
victim.com/search.php?query=abc">
victim.com/search.php?query=abc">

victim.com/search.php?query=abc//abc">alert(/hello world/);
victim.com/search.php?query=000">
victim.com/search.php?query=000abc
victim.com/search.php?query=--alert(/1337/);
victim.com/search.php?query=pwned
victim.com/search.php?query=pwned
victim.com/search.php?query=pwned')alert(1337);//
victim.com/search.php?query=pwned";)alert(1337);//
victim.com/search.php?query=pwned");alert(/pwned/);//
victim.com/search.php?query=pwned//">
victim.com/search.php?query=">
victim.com/search.php?query=">

Read More