Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts

Friday, 20 May 2016

How To Browse Anonymously On Android Phone


Orbot: Proxy with Tor


In this tutorial we will show you “How to browse anonymously on Android phone”.



Step 1: Download and install Orbot and Orweb from Google Play Store

Orbot: Proxy with Tor: Play Store Link

Orweb: Private Web Browser: Direct Link

Step 2: Turn on Orbot and click “Check browser”. Now you can surf on internet.

Step 3: Once you have finished using it Turn off Orbot to save your battery.

Note: Use it in a legal way.
Read More

CEH v9 PDF – Certified Ethical Hacker v9 Course Educatonal Materials + Tools

CEH v9 Course Educatonal Materials

This is the worlds most advanced ethical hacking course with 18 of the most current security domains any ethical hacker will ever want to know when they are planning to beef up the information security posture of their organization. In 18 comprehensive modules, the course covers 270 attack technologies, commonly used by hackers
Real Life Scenario

Our security experts have designed over 140 labs which mimic real time scenarios in the course to help you “live” through an attack as if it were real and provide you with access to over 2200 commonly used hacking tools to immerse you into the hacker world.


Index:
  1. CEHv9 Module 00.unlocked.pdf
  2. CEHv9 Module 01 Introduction to Ethical Hacking.pdf
  3. CEHv9 Module 02 Footprinting and Reconnaissance.pdf
  4. CEHv9 Module 03 Scanning Networks.pdf
  5. CEHv9 Module 04 Enumeration.pdf
  6. CEHv9 Module 05 System Hacking.pdf
  7. CEHv9 Module 06 Malware Threats.pdf
  8. CEHv9 Module 07 Sniffing.pdf
  9. CEHv9 Module 08 Social Engineering.pdf
  10. CEHv9 Module 09 Denial-of-Service.pdf
  11. CEHv9 Module 10 Session Hijacking.pdf
  12. CEHv9 Module 11 Hacking Webservers.pdf
  13. CEHv9 Module 12 Hacking Web Applications .pdf
  14. CEHv9 Module 13 SQL Injection.pdf
  15. CEHv9 Module 14 Hacking Wireless Networks.pdf
  16. CEHv9 Module 15 Hacking Mobile Platforms.pdf
  17. CEHv9 Module 16 Evading IDS, Firewalls, & Honeypots.pdf
  18. CEHv9 Module 17 Cloud Computing.pdf
  19. CEHv9 Module 18 Cryptography.pdf


CEH v9 : Certifies Ethical Hacker v9 Tools Download

  1. CEHv9 Tools 02 Footprinting and Reconnaissance.zip
  2. CEHv9 Tools 03 Scanning Networks.zip
  3. CEHv9 Tools 04 Enumeration.zip
  4. CEHv9 Tools 05 System Hacking.zip
  5. CEHv9 Tools 06 Malware Threats.zip
  6. CEHv9 Tools 07 Sniffing.zip
  7. CEHv9 Tools 08 Social Engineering.zip
  8. CEHv9 Tools 09 Denial of Service.zip
  9. CEHv9 Tools 10 Session Hijacking.zip
  10. CEHv9 Tools 11 Hacking Webservers.zip
  11. CEHv9 Tools 12 Hacking Web Applications.zip
  12. CEHv9 Tools 13 SQL Injection.zip
  13. CEHv9 Tools 14 Hacking Wireless Networks.zip
  14. CEHv9 Tools 15 Hacking Mobile Platforms.zip
  15. CEHv9 Tools 16 Evading IDS, Firewalls and Honeypots.zip
  16. CEHv9 Tools 17 Cloud Computing.zip
  17. CEHv9 Tools 18 Cryptography.zip
Read More

Tuesday, 17 May 2016

You Can't Hack Clash Of Clans

Clash Of Clans

We get many question daily asking us how to hack games such as Clash of Clans this article explains why server side games generally can’t be hacked

Overview –
  •  The Server – This party is responsible for serving content.  
  • The Client – This party requests content from the Server, and displays them to the user. In most cases, the client is a web browser.

Each side’s programming, refers to code which runs at the specific machine, the server’s or the client’s.

Server Side Code –

Server side is the code that resides at web server.
For every client request code is executed at server side and result is send to the client in simple HTML format.
Performance is lower than client side code due to server round trips.
Client cannot see the business logic though it is stored on server.

Client Side Code –

Client side code is reside at client’s browser itself. It is executed at
client side only. User can easily see the code by View – > Source option.
It is generally used in validation form like text field is empty or not, email address validation etc. It is faster than server side code
Server side code is responsible to execute and provide
the executed code to the browser at the client side. The executed code only have the
values or the results that are executed on the server.




There are many programs out there that claim to be able to hack games such as Clash of Clans, these are all fake, here’s why:

Any so called ‘gem hack’ will not work because the data is stored server side, so editing the data client side will then need to be confirmed server side.

In other words, there is no way to hack such a game. If there were a way, somebody would have figured it out, spread the information, and then it would have to have been patched rapidly. These kinds of games are specifically designed for people to not be able to hack into them. In order to do so you would have to gain access to the server and alter the information that contains things like how many gems you have. This in itself is a near impossible task because this information is sensitive and secure. It’s like if you were trying to gain credit card information off of a website like Amazon. It’s extremely unlikely and illegal that you’ll find a crack, but leaks do occur from time to time.
Read More

Thursday, 5 May 2016

Benefits Of Rooting Android Devices And How To Root Without Computer

Android Root Benefits $ Howto

To root or not to root? It's a question that most people don't ever ask themselves, because Android devices are powerful and customizable from the get-go, and rooting can be risky.

But it's not that risky. And if you want to really unlock the full potential of your device—if you want to be able to control everything, backup everything, customize everything, and do all sorts of fun things like install custom ROMs and get Android Lollipop ahead of the pack—you'll need to root your phone.


I'm not saying you have to root your Android device…but I am saying you might be a goody two-shoes if you don't.

Benefits of Rooting Android Devices

Automate everything

Powerful root-only apps like Tasker can turn your dream of a super-smartphone into a reality. Tasker uses the "if this, then that" mentality to make your phone a genius -- for example, you can use Tasker to automatically silence your phone at night, turn on your Wi-Fi when you're at home, or open up an app when you connect to your car's Bluetooth. 

Lollipop, here I come!

Android phone makers have a habit of not releasing updates in a timely manner. Or at all, sometimes. So why are you still waiting for the latest OS when you could simply root your phone and get it right now? Patience is for people who don't know how to root.

Faster than the speed of…your CPU

Contrary to what the phone-makers want you to believe, your Android device could definitely be faster. And you can take speed matters into your own hands with apps like SetCPU, which is only available after you root. What's a little battery life lost when you have more power?

Better battery life

You know how you can overclock your device's CPU for ultra-speedy app-switching (who doesn't want to multitask like Sonic the Hedgehog)? Well you can also use SetCPU to underclock, or slow down, your CPU for when you need that extra 29 minutes of battery life.

Bye-bye, bloatware

Nuking factory-installed bloatware beats disabling it any day.

Really, really back up your stuff

OK, so Google does a pretty good job of keeping your mail, contacts, calendar, apps, and other Google-y things in order. But if you want to truly backup everything, as in, if you want to take a literal snapshot of your device and stick it somewhere safe, you'll need the root-onlyTitanium Backup. Satisfy your hoarding tendencies!

Customize all the things!

Android is pretty customizable, even without rooting your phone. But with a root you can literally customize everything. Vibration strength? Precise screen color calibration? Gesture control? There's a (root-only) app for that.

Store apps wherever the hell you want to

Use a root-only app like FolderMount to store apps, not just files, on your microSD card. Now your device has infinite (read: 128GB) of real usable storage!

Rooting your Android Device gives you Super User access for your mobile by rooting your android device even you can uninstall built-in apps, now i am going to show you 2 easy ways to root your android device easily without computer.


Method 1:(Framaroot)

Framaroot is android app it can easily root your android device now its not available in play store so click here to download the app and install it.

Framaroot homepage

After installing open the app and choose Install Supersu from drop down menu show above.

How to root using Fraamaroot

It show number of exploit methods to root your android device choose anyone of the method my first preference is Boromir if it fails try other exploit methods.

Framaroot Exploit Result

Within seconds it show the result after that you need to restart your device to install Supersu which manage root access and you need net connection to download it.

UnRoot

If you need to unroot your android device simply select Unroot option from the drop down menu of framaroot give below.

Unroot Using Framaroot

This method help to root and unroot your android device in easy way it mostly works for most of the android device if it not works follow the method 2.

Method 2:(Kingroot)

Kingroot app gives you to one touch root access, Click here  to download the app.

Install and open the Kingroot app.

Root using Kingroot

Tap the START ROOT option to root your android device the rooting process is like given below.

Rooting process


After rooting you will get the confirmation screen like given below.

Kingroot Root Sucessfully


Now your android device is rooted enjoy the superuser access on your android..........
Read More

Tuesday, 12 April 2016

12 Best Android Hacking Apps 2016


Top Android Hacking Apps

As we all know hacking and pen testing is only can be done on computers. But now the world is changing now your mobile is small hacking toolkit using these apps. Apart from the normal mobile user, techie guys also like its flexible features that allows them to do various new task. As with this its security concerns also headed up. Recently we have noted that many of the cyber hackers are targeting Android users. There are many techie guys have also unrestricted the features that are restricted by its owners, Google. So I thing the below words are familiar to them but many of them have not been aware. Here I am discussing some of the Apps that are meant for the Security tester, Ethical hacker and for those guys who really explore the tech world.

Best Android Hacking Apps 2016
Best Hacking apps of 2016


Lets see Best Android Hacking Apps 2016 that are meant for hacking, hackers, security researchers:


Hackode : The hacker’s Toolbox is an application for penetration tester, Ethical hackers, IT administrator and Cyber security professional to perform different tasks like reconnaissance, scanning performing exploits etc.


Remote Administration Tool for Android. Androrat is a client/server application developed in Java Android for the client side and in Java/Swing for the Server.


APKinspector is a powerful GUI tool for analysts to analyse the Android applications. The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code.


DroidBox is developed to offer dynamic analysis of Android applications.


Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities.


zANTI is a comprehensive network diagnostics toolkit that enables complex audits and penetration tests at the push of a button. It provides cloud-based reporting that walks you through simple guidelines to ensure network safety.


DroidSheep can be easily used by anybody who has an Android device and only the provider of the web service can protect the users. So Anybody can test the security of his account by himself and can decide whether to keep on using the web service.


dSploit is an Android network analysis and penetration suite which aims to offer to IT security experts/geeks the most complete and advanced professional toolkit to perform network security assessments on a mobile device.


Arpspoof is a tool for network auditing originally written by Dug Song as a part of his dsniff package. This app redirects traffic on the local network by forging ARP replies and sending them to either a specific target or all the hosts on the local network paths.


Traffic sniffer, works on 3G and WiFi (works on FroYo tethered mode too). To open dump use WireShark or similar software, for preview dump on phone use Shark Reader. Based on tcpdump.


Nmap (network mapper) is one the best among different network scanner (port finder) tool, Nmap mainly developed for Unix OS but now it is available on Windows and Android as well. Nmap for android is a Nmap apps for your phone! Once your scan finishes you can e-mail the results. This application is not a official apps but it looks good.


Android Secure Shell: Secure shell or SSH is the best protocol that provides an extra layer of security while you are connecting with your remote machine.SSHDroid is a SSH server implementation for Android. This application will let you to connect to your device from a PC and execute commands (like “terminal” and “adb shell”).

Note All content are intended for Security Research Purpose and should not be used illegaly.

Here to Download best android tools for hacking 2016, As we all know hacking and pen testing is only can be done on computers. But now the world is changing now your mobile is small hacking toolkit using these apps.

Read More

Friday, 19 February 2016

How to set your Pendrive as your password protector for PC


If you prevent access to your computer with just a password, you are missing out on an alternate (and more secure) way to lock down your computer.

Predator, a free Windows program, turns your USB drive into a key that locks your computer when it's removed. To unlock your computer, you'll have to plug the USB drive back in. (Talk about having secret-agent-style security.)

Anyone who attempts to access your computer without the USB flash drive will be hit with an epic "Access Denied" message. To get started, follow this guide:

Step 1: Download and install Predator.

Step 2: Once Predator launches, plug in your USB flash drive. None of the contents of the drive will be deleted or altered in any way, so feel free to use your primary thumbdrive.

When you insert the drive, a dialog box will appear asking you to create a password. Click OK to continue.

Step 3: In the Preferences window, take note of a few key settings. First, enter a secure, unique password in the "New password" field. If you lose your USB drive, you'll use it to unlock your computer.

If you'd like, you can check the Always Required box and you'll be asked to enter the password each time you use your thumbdrive to unlock your PC.

Finally, in the section under Flash Drives, ensure that the correct USB flash drive is selected. When you're done, click "Create key" and then OK.

Step 4: Predator will exit. When it does, click the Predator icon in the taskbar to restart the program. A few seconds later, the icon will turn green, alerting you that Predator is running.

Every 30 seconds, Predator will check to see that your USB drive is plugged in. If it isn't, your computer will dim and lock down.
Source Via - Worldwideprogramers
Read More

Tuesday, 9 February 2016

8 Best Mozilla addons used by the Hackers


The creation of penetration testing labs in Kali Linux or Backtrack, has been a popular topic for a long time, but the fact remains that all challenges, practice, and hacking need tools. One of the better known tools is the Addons which comes in many types and forms. We thought it would be fun to bring to you a list of important add-ons for hackers and pentesters. Here are the top 8 that we shortlisted:

1. Tamper Data: This is one of the most used Addons for Pentesters, who traditionally make use of it for viewing and modifying HTTP/HTTPS headers and post parameters, trace and time HTTP response or requests, security test web applications by modifying POST parameters and a lot more. Download Tamper Data

2. Hack Bar: Another well known and very often used tool, it is mostly used for security audit , and comes strongly recommended for installation and XSS, SQL Encoding/Decoding - MD5, SH1, Base64, Hexing, Splitting etc. Download Hack Bar

3. Live HTTP Headers: Similar to the Tamper Data add-on, the one big difference this add-on has is that it allows for viewing HTTP headers of a page while browsing. Download Live HTTP Headers

4. User Agent Switcher: This particular add-on works wonders in adding a menu and a toolbar button to switch the user agent of a browser. This is, in turn, helpful in the changing of a User Agent to IE, Search Robots, I-Phone (I-OS). Besides this, the user can also use this add-on in the creation of his or her own User Agent. Download User Agent Switcher

5. Cookie Manager+ : This is a great add-on for viewing, editing, creating and injecting cookies. The best thing about the add-on is the fact that it displays extra information about cookies, allows edit multiple cookies at once & backup/restore. Download Cookie Manager+

6. HTTP Fox: This add-on works for those looking to monitor and analysing all incoming and outgoing HTTP traffic between the browser and the web servers. The aim of the add-on is to bring the functionality known from tools like Http Watch or IE Inspector to the Firefox browser. Download HTTP Fox

7. Passive Recon: This add-on gives its users the capability of performing "packetless" discovery of target resources utilizing publicly available information. Download Passive Recon

8.SQL Inject Me : SQL Injection vulnerabilites can cause a lot of damage to a web application. A malicious user can possibly view records, delete records, drop tables or gain access to your server. SQL Inject-Me is Firefox Extension used to test for SQL Injection vulnerabilities.Download SQL Inject Me
Read More

Friday, 1 January 2016

Types of Proxy | How to hide IP Address

Every now and then I come across people who want to change there IP address but don’t know how. In this post I will try to give you every possible information to hide the IP address using the various types of Proxy Servers out there. If you want to know about various kind of proxy servers then this post is for you.



A proxy server acts as an interface between the user and the internet if you want to Change your IP Address.
Don’t know what is IP Address?
Now I’ll come to the heart of the post, which contains the answer to your curious question How to Hide the IP address ? The only solution to hide your IP address is by using a Proxy Server. But Wait! The story doesn’t end here. Even though proxy servers are the only way to hide your IP address, there are several ways of connecting your PC to the proxy server. Before setting up the connection with the proxy servers you must know some information about different types of proxy servers and their uses.
1. Transparent Proxy Server
This type of proxy server identifies itself as a proxy server and also makes the original IP address available through the http headers. These are generally used to speedup the web browsing since thay have a very good ability to cache websites. But they do not conceal the IP of it’s users. It is widely known as transparent proxy because it will expose your real IP address to the web. This type of proxy server does not hide your IP address.
2. Anonymous Proxy Server
This type of proxy server identifies itself as a proxy server, but does not make the original IP address available. This type of proxy server is detectable, but provides reasonable anonymity for most users. This type of proxy server will hide your IP address.
3. Distorting Proxy Server
This type of proxy server identifies itself as a proxy server, but make an incorrect original IP address available through the http headers. This type of proxy server will hide your IP address.
4. High Anonymity Proxy Server (Elite Proxy)
This type of proxy server does not identify itself as a proxy server and does not make available the original IP address. This type of proxy server will hide your IP address.So this is the best way to mask your IP.
Which Proxy Server is the best to Hide My IP ?
I know, you can answer this question better than me.Obviously High Anonymity Proxy or Elite Proxy is the best to hide your IP. But it’s not easy to get a list of working elite proxies. If you search the Google, you will definitely get tons of proxy list. You’ll get a list of proxies in the following format
IP:Port Number
Eg: 221.90.45.67:8080 (221.90.45.67 is the IP of the proxy server and 8080 is the port number)
But most of them don’t work. Here are some of the problems/risks associated with using free proxies that are available on the internet.

  1. Most of them do not work since the proxy servers frequently changes it’s IP/Port number.
  2. Even if you find a working proxy server it may be too slow.
  3. Your privacy is not guaranteed since all your traffic is routed through the proxy server.
  4. The administrators of the proxy servers may steal your valuable information such as passwords, SSN (Social security number), Credit Card details etc.
So with all these being the risks then how to find a working, fast ,highly anonymous and secured Proxy servers?
Now I will share the software that works like charm to change the IP Address.
Hide My Ass pro Vpn is the best proxy server out there. I personally loved it.
How to ensure that the IP is hidden ?
Before you hide your IP you can check your real IP by visiting the following site.
Once you get your real IP, switch on your IP hiding software. Now once again visit the above site and check your IP address. If you see a new IP then this means that your software is doing the right job. Also the above site(Whatismyipaddress.com) is capable of detecting many proxies. If you see the words such as “suspected proxy server or network sharing device” or similar words then it means that the proxy you are using is not an Elite Proxy.
One Final Word before you leave! Even though Elite proxies are almost undetectable they can be detected at a higher level. But the process would be much harder and time consuming than free proxies. So only high end elite proxies are recommended by us.
One More thing, it is unsafe to use free proxy during e-commerce transactions such as Online banking, Online Credit Card payment etc. So please avoid free proxies during these circumstances and use elite proxies (like hide my ass pro vpn) only if required.
I Hope this post helped you to learn about the types of proxy servers and how to hide ip address to a great extent.
Feel free to pass on comments.
Read More