Hacking & Stuff

18.Automated Padding Oracle Attacks with PadBuster      There’s been a lot of buzz recently about Padding Oracle Attacks, an attack vector demonstrated by Juliano Rizzo and Thai Duong during their presentation at BlackHat Europe earlier this summer. While padding oracles are relatively easy to exploit, the act of exploiting them can be time consuming if you don’t have a good way of automating the attack. The lack of good tools for identifying and exploiting padding oracles led us to develop our own internal padding oracle exploit script, PadBuster, which we’ve decided to share with the community . The tool can be downloaded here , here I’ll spend a little bit of time discussing how the tool works and the various use cases it supports. Some Background : Before we discuss using PadBuster, let’s briefly discuss the fundamentals of a classic padding oracle attack. As the term implies, a critical concept behind a padding oracle attack is the n...

17.CAFFE LATTE ATTACK:     In the Honeypot attacks , we notice that clients will continuously probe for SSIDs they have connected to previously. If the client had connected to an access point using WEP, operati ng systems such as Windows, cache and store the WEP key. The next ti me the client connects to the same access point, the Windows wireless confi gurati on manager automati cally uses the stored key.                                                   The Caffe Latte attack is a WEP att ack which allows a hacker to retrieve the WEP key of the authorized network, using just the client. The attack does not require the client to be anywhere close to the authorized WEP network. It can crack the WEP key using just the isolated client.           In this  exercise, we will retreive the WEP key of a n...

16.HOW TO MAKE UR OWN CRYPTER: What you will need: Visual Basic 6 or Visual Basic 6 Portable A RC4 module A brain The RC4 module and Visual Basic 6 Portable will have the download links at the end of this tutorial. TABLE OF CONTENTS: 1. Introduction 2. Building your crypter 3. Conclusion 1. Introduction RC4 : In cryptography , RC4 (also known as ARCFOUR or ARC4 meaning Alleged RC4, see below) is the most widely used stream cipher and is used in protocols such as Secure Sockets Layer (SSL) (to protect Internet traffic) and WEP (to secure wireless networks). Stub : A method stub or simply stub in software development is a piece of code used to stand in for some other programming functionality. A stub may simulate the behavior of existing code (such as a procedure on a remote machine) or be a temporary substitute for yet-to-be-developed code. Stubs are therefore most useful in porting, distributed computing as well as general software developm...

15.COMPLETE TUTORIAL ON MAKING XSS ATTACK:                                           XSS (PERSISTENT & NON-PERSISTENT                                                   Hi XSS CAN BE DONE  in 2 ways, Persistent and Non-Persistent type. For XSS we will use something called a cookie catcher. Question will be that why we would need someone else's cookie? The answer is that we can change our browser's cookies to login as them!!! So lets call it Session Hijacking First go to a free hosting site like http://www.110mb.com or other php hosting sites and register there. Then download this cookie catcher and upload it. Cookie Catcher: http://adf....

14.C|EH V7.1  MODULES  TOTAL COLLECTION   Hi Friends This New Post On My Blog is To  Provide And Educate You  With The Greatest Resource C|EH V7.1 MODULES COLLECTION. Before Getting InTo The Link , I Think Everybody Had Heared of  C|EH(Certified Ethical Hacker)   Program that Had Been Established By EC Council. To Know More About It Just Google For It and Search Over In Wikipedia.                                    H3R3 15 7h6 D0wn104d  1ink/....               Click Here To Download.     <== DOWNLOAD HERE     If The RAR File Asked For Password Enter :k3lvinmitnick                                                           ...

13.HOW TO BLOCK AND UNBLOCK WEBSITES. Go to Start and then Run . Type in this C:\ WINDOWS \system32\drivers\etc Now you will see file name Host open that in Notepad . Below " 127.0.0.1 localhost " add IP address of site to be blocked. To unblock any site just reversed the process.         EXAMPLE      127.0.0.1 localhost      69.171.224.14    (This will block Facebook)      NOTE: For each site you block just add " 1 " to the IP (127.0.0.1)  

12.HOW TO GET PASSWORD BEHIND ASTERISKS.  This is trick will let you see password behind asterisks . You might be thinking what is asterisks. It is dots or stars you see when you type password. This trick will let you see password behind asterisks . often people save their password on browser so this trick will let you get their password easily. Go to the page that contain password in asterisks . Now copy the following code . javascript :(function(){var s,F,j,f,i; s = ""; F = document .forms; for(j=0; j<F. length ; ++j) { f = F[j]; for (i=0; i<f.length; ++i) { if (f[i].type.toLowerCase() == "password") s += f[i].value + "\n"; } } if (s) alert("Passwords in forms on this page:\n\n" + s); else alert("There are no passwords in forms on this page.");})(); Paste the code into address bar of the page. Now you will get the password on that page.        NOTE : This trick works on internet explorer and mig...