Hack System Through IP Address

How to hack remote computer using IP Address

Literally, hacking is accessing something or somebody in internet without their permission or interest. While, speaking in summary, hacking is very easy job, it is like instead of using front door, finding the hidden door of a house and hijacking the precious things. Among all the hacking, hacking via IP address is one of the most common yet powerful beginning.
You may want to hack the website and put your advertisement there or grab some database information In this type of hacking, you are playing with the web server’s computer instead of the administrator’s computer. Because, www.website.com is hosted in separate web server rather than personal computer.
Another can be accessing your friend’s computer from your home. Again this is IP based and this is possible only when your friend’s computer is online. If it is off or not connected to internet then remote IP hacking is totally impossible.
Well, both of the hacking has the same process. Let’s summarize what we must do.

1. Confirm the website or a computer you want to hack.
2. Find or trace their IP address.
3. Make sure that IP address is online
4. Scan for open ports
5. Check for venerable ports
6. access through the port
7. Brute-force username and password

Now let me describe in brief in merely basic steps that a child can understand it.

First, getting the IP address of victim.

To get the IP address of the victim website, ping for it in command prompt.

For example,

ping www.google.com

will fetch the IP address of Google.com

This is how we can get the IP address of the victims website.
How about your friend’s PC? You can’t do www.yourfirend’sname.com, can you? Finding your friend’s IP address is little tough job, and tougher it is if he has dynamic IP address that keeps changing.
One of the widely used method to detect IP address of your friend is by chatting with him.
You might find this article helpful

• How to get the IP address using MSN/Yahoo/Pidgin messenger

Now you got the IP address right? Is it online? To know the online status just ping the IP address, if it is online it will reply.
If the IP address is online, scan for the open ports. Open ports are like closed door without locks, you can go inside and outside easily.
Use Advanced Port Scanner to scan all open and venerable ports.

Now you’ve IP address and open port address of the victim, you can now use telnet to try to access them. Make sure that you’ve telnet enabled in your computer or install it from Control panel > Add remove programs > add windows components.
Now open command prompt and use telnet command to access to the IP address. Use following syntax for connection.
telnet [IP address] [Port]

You’ll be asked to input login information.

If you can guess the informations easily then it’s OK. Or you can use some brute-forcing tools like this one.
In this way you’ll able to hack remove computer using only IP address

Increase Firefox Speed

11 Tricks to Increase Firefox speed 10 times

11 Tricks to Increase Firefox Speed

1. Type about:config in the address bar and then press Enter.

2. In the filter search bar type network.http.pipelining. Be sure the value field is set true,if not double-click to set true. HTTP is the application-layer protocol that most web pages are transferred with. In HTTP 1.1, multiple requests can be sent before any responses are received. This is known as pipelining. Pipelining reduces page loading times, but not all servers support it.

3. Go back to the filter search bar and type network.http.pipelining.maxrequests. Double-click this option and set its value to 8.

4. In the filter search bar and type network.http.proxy.pipelining. Once opened doubleclick on it and set it to true.

5. In IPv6-capable DNS servers, an IPv4 address may be returned when an IPv6 address is requested. It is possible for Mozilla to recover from this misinformation, but a significant delay is introduced.

Type network.dns.disableIPv6 in the filter search bar and set this option to true by double clicking on it.

6. CONTENT INTERRUPT PARSING

This preference controls if the application will interrupt parsing a page to respond to UI events. It does not exist by default. Right-click (Apple users ctrl-click) anywhere in the about:config window, select New and then Boolean from the pop-up menu. Then:

A. Enter content.interrupt.parsing in the New boolean value pop-up window and click OK

B. When prompted to choose the value for the new boolean, select true and click OK.

7. Rather than wait until a page has completely downloaded to display it to the user, Mozilla applications will regularly render what has been received to that point. This option controls the maximum amount of time the application will be unresponsive while rendering pages. Right-click (Apple users ctrl-click) anywhere in the about:config window, select New and then Integer from the pop-up menu.

A. Enter content.max.tokenizing.time in the New integer value pop-up window and click OK

B. You will be prompted to enter a value. Enter 2250000 and click OK.

8. CONTENT NOTIFY INTERVAL

This option sets the minimum amount of time to wait between re flows. Right-click (Apple users ctrl-click) anywhere in the about:config window, select New and then Integer from the pop-up menu.

A. Type content.notify.interval in the New integer value pop-up window and click OK.

B. You will be prompted to enter a value. Enter 750000 and click OK.

9. CONTENT NOTIFY ON TIMER

A. This option sets if to re-flow pages at an interval any higher than that specified by content.notify.interval. Right-click (Apple users ctrl-click) anywhere in the about:config window and select New and then Boolean from the pop-up menu.

B. Type content.notify.ontimer in the New boolean value pop-up window and click OK.

C. You will be prompted to choose the value for the new boolean. Select true and click OK.

10. Notify Backoffcount

This option controls the maximum number of times the content will do timer-based reflows. After this number has been reached, the page will only reflow once it is finished downloading. Right-click (Apple users ctrl-click) anywhere in the about:config window and select New and then Integer from the pop-up menu.

A. Enter content.notify.backoffcount in the New integer value pop-up window and click OK.

B. You will be prompted to enter a value. Enter 5 and click OK.

11. CONTENT SWITCH THRESHOLD

You can interact with a loading page when content.interrupt.parsing is set to true. When a page is loading, the application has two modes: a high frequency interrupt mode and a low frequency interrupt mode. The first one interrupts the parser more frequently to allow for greater UI responsiveness during page load.

The low frequency interrupt mode interrupts the parser less frequently to allow for quicker page load. The application enters high frequency interrupt mode when you move the mouse or type on the keyboard and switch back to low frequency mode when you had no activity for a certain amount of time. This preference controls that amount of time. Right-click (Apple users ctrl-click) anywhere in the about:config window and select New and then Integer from the pop-up menu.

A. Enter content.switch.threshold in the New integer value pop-up window and click OK.

B. You will be prompted to enter a value. Enter 750000 and click OK.

12. NGLAYOUT INITIALPAINT DELAY

Mozilla applications render web pages incrementally, they display what’s been received

of a page before the entire page has been downloaded. Since the start of a web page

normally doesn’t have much useful information to display, Mozilla applications will wait

a short interval before first rendering a page. This preference controls that interval. Rightclick (Apple users ctrl-click) anywhere in the about:config window and select New and then Integer from the pop-up menu.

A. Enter nglayout.initialpaint.delay in the New integer value pop-up window and click OK.

B. You will be prompted to enter a value. Enter 0 and click OK.

How to Hack Website

How to hack a Website or websites database

  

What are basic things you should know before website hacking?

First of all everything is optional as i will start from very scratch. But you need atleast basic knowledge of following things..

1. Basics of HTML, SQL, PHP.

2. Basic knowledge of Javascript.

3. Basic knowledge of servers that how servers work.

4. And most important expertize in removing traces otherwise u have to suffer consequences.

Now First two things you can learn from a very famous website for basics of Website design with basics of HTML,SQL,PHP and javascript.

http://www.w3schools.com/

And for the fourth point that you should be expert in removing traces . For this you can refer to first 5 hacking classes and specially read these two...

1. Hiding Yourself from being traced.

2. Removing your Traces 

As we know traces are very important. Please don't ignore them otherwise you can be in big trouble for simply doing nothing. so please take care of this step.

METHODS OF HACKING WEBSITE:

1. SQL INJECTION

2. CROSS SITE SCRIPTING

3. REMOTE FILE INCLUSION

4. LOCAL FILE INCLUSION

5. DDOS ATTACK 

6. EXPLOITING VULNERABILITY.

1. SQL INJECTION

 First of all what is SQL injection? SQL injection is a type of security exploit or loophole in which a attacker "injects" SQL code through a web form or manipulate the URL's based on SQL parameters.  It exploits web applications that use client supplied SQL queries.
The primary form of SQL injection consists of direct insertion of code into user-input variables that are concatenated with SQL commands and executed. A less direct attack injects malicious code into strings that are destined for storage in a table or as metadata. When the stored strings are subsequently concatenated into a dynamic SQL command, the malicious code is executed.


For more basic knowledge about SQL injection visit:
http://www.isoftdl.com/2009/12/hacking-class-14-how-to-deface-websites.html
The above tutorial consists of both types of SQL injection i.e. Manual and automatic through softwares. I will explain SQL injection in more detail with practical example in Next class.

2. CROSS SITE SCRIPTING

  Cross site scripting (XSS) occurs when a user inputs malicious data into a website, which causes the application to do something it wasn’t intended to do.  XSS attacks are very popular and some of the biggest websites have been affected by them including the FBI, CNN, Ebay, Apple, Microsft, and AOL. 
Some website features commonly vulnerable to XSS attacks are:
•  Search Engines
•  Login Forms
•  Comment Fields
Cross-site scripting holes are web application vulnerabilities that allow attackers to bypass client-side security mechanisms normally imposed on web content by modern browsers. By finding ways of injecting malicious scripts into web pages, an attacker can gain elevated access privileges to sensitive page content, session cookies, and a variety of other information maintained by the browser on behalf of the user. Cross-site scripting attacks are therefore a special case of code injection.

 I will explain this in detail in later hacking classes. So keep reading..


3. REMOTE FILE INCLUSION

Remote file inclusion is the most often found vulnerability on the website.
Remote File Inclusion (RFI) occurs when a remote file, usually a shell (a graphical interface for browsing remote files and running your own code on a server), is included into a website which allows the hacker to execute server side commands as the current logged on user, and have access to files on the server. With this power the hacker can continue on to use local
exploits to escalate his privileges and take over the whole system. 
RFI can lead to following serious things on website :

• Code execution on the web server
• Code execution on the client-side such as Javascript which can lead to other attacks such as cross site scripting (XSS).
• Denial of Service (DoS)
• Data Theft/Manipulation

 4. LOCAL FILE INCLUSION

  Local File Inclusion (LFI) is when you have the ability to browse through the server by means of directory transversal. One of the most common uses of LFI is to discover the /etc/passwd file. This file contains the user information of a Linux system. Hackers find sites vulnerable to LFI the same way I discussed for RFI’s.
Let’s say a hacker found a vulnerable site, www.target-site.com/index.php?p=about, by means of directory transversal he would try to browse to the /etc/passwd file: 

   www.target-site.com/index.php?p= ../../../../../../../etc/passwd

I will explain it in detail with practical websites example in latter sequential classes on Website Hacking.

5. DDOS ATTACK

Simply called distributed denial of service attack. A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users. Although the means to carry out, motives for, and targets of a DoS attack may vary, it generally consists of the concerted efforts of a person or people to prevent an Internet site or service from functioning efficiently or at all, temporarily or indefinitely. In DDOS attack we consumes the bandwidth and resources of any website and make it unavailable to its legitimate users.
 For more detailed hack on DDOS visit:
http://www.isoftdl.com/2009/11/hacking-class-11-attacking-websitesddos.html

6.EXPLOTING VULNERABILITY

Its not a new category it comprises of above five categories but i mentioned it separately because there are several exploits which cannot be covered in the above five categories. So i will explain them individually with examples. The basic idea behind this is that find the vulnerability in the website and exploit it to get the admin or moderator privileges so that you can manipulate the things easily.

WiFi Manager

 Hacking Tool

WiFi Manager v5.6 - A must have for every network administrator

ManageEngine WiFi Manager is an integrated and centralized management
and security solution for wireless networks (WLANs) for enterprises.

It enhances the availability and security of your WLANs by continuously
monitoring the network as well as the airspace.

Features:
+ WiFi Manager offers wireless device monitoring, one-click configuration, access point firmware management, wireless security management and a variety of reports that remove the complexity of wireless network management.
+ WiFi Manager can detect almost all major wireless threats including rogue attacks, intrusions, sniffers, DoS attacks, and vulnerabilities.
+ With WiFi Manager you'll have complete control over your wireless devices as well as your airspace, and more time to focus on core IT operations.

Bonus tools: Air crack, hack wifi and wireless key, does support WAP, WAP2, WEP encryption.

Secure Your Gmail Account

Add caption

 How To Secure Your Gmail Account From Hackers ?

                                             All of us have our Email Accounts on Gmail, Yahoo, Hotmail etc.Phising and hacking are on the rise and many of us have already faced the situtaions when our email Id has been compromised.It is very difficult to estimate the loss which one undergoes once his email ID has been hacked.


                   Now you can add an extra layer of security in your Gmail Account . After enabling this feature you have to enter an addtional verification code (sent to your mobile) to login into your account .So, if somebody hacked your password even then he won’t be able to access your email account.

 

 

How to Secure Gmail Account:-

• Login to your Gmail Account.
• Now open this link  https://www.google.com/accounts/SmsAuthConfig.
• Click on the Start Setup button.

• Choose a verification method.By selecting Text message (SMS) or voice call you will recieve the verification code on you phone either as text message or as a call.

• Enter the appropriate information about your country and Mobile Number.

• Choose SMS text message or Voice call option according to your need. (I prefer SMS text message).
• After giving your mobile number test your phone by clicking on the Send Code button.

• Now you will receive a verification code on your given mobile number and type that code in the verification field and click on Verify button.
• After verifying your number click on the Next button.

If you lost your mobile or your number is not available when you need it. For this you can save backup codes in to your computer.

• Click on Next button again.
• Here you will see 10 Backup verification codes. Choose Print codes or Save to text file option whatever you like but keep it safe and don’t lose it.
• Check mark the box and click on Next button.

• Here give your working alternative number. And click on Next button.
• Now again click on the Next button again and then click on the Turn on 2-step verification button.

• Click OK.

That’s it ! Now you have been added 2-step verification security to your Gmail account. Now whenever you will enter your password it will ask you to enter verification code without it you won’t be able to login to your Gmail Account.

Nitro Hackers

'Nitro' hackers target chemical and defense companies, says Symantec

                      Researchers from Symantec say they uncovered a hacking campaign that targeted chemical and advanced material companies, including those that develop materials primarily for use in military vehicles. In a report released Oct. 31, Symantec security response personnel Eric Chien and Gavin O'Gorman say they observed a wave of attacks dubbed "Nitro" that took place from late July through mid-September.

          Report authors describe an increasingly well-known attack vector--namely, that of a spear phishing email with an attachment containing a self-extracting executable. The email "often purported to be meeting invitations from established business partners," they note. At other times, it purported to be a security update.
The executable file contained PoisonIvy, a common backdoor Trojan developed by a Chinese hacker, they add. One installed, PoisonIvy contacted a command and control server on TCP port 80. Attackers then instructed the infected computer to provide its Internet protocol address, the name of all other computers in the same domain and dumps of Windows-cached password hashes.
Attackers' primary goal was to gain access to intellectual property, Chien and O'Gorman say. They traced the attacks back to a virtual private server located in the United States, one owned by "a 20-something male located in the Hebei region in China," they say.
Based on his Chinese handle, report authors dubbed him Covert Grove. In interactions with the authors, Covert Grove said he maintained a U.S.-based virtual private server for the sole purpose of maintaining a static IP address, which he needed in order to turn on a login restriction access feature on a popular Chinese instant messaging system known as QQ. Covert Grove's story "seems suspicious," the report says.
Further, when asked about his hacking skills, Covert Grove "immediately provided a contact that would perform 'hacking for hire'"--although whether he or another person would have conducted the hacking is unknown.
Of the organizations that had infected computers in contact with the command and control server in the 2 weeks Symantec monitored Nitro, 12 were American and 5 from the United Kingdom. Single organizations from Belgium, the Netherlands, Italy, Saudi Arabia and Japan were also affected, as were two form Denmark.
The researchers estimate that a total of 20 companies in the chemical sector were attacked and another 19 in other sectors, primarily the defense sector.