Translate

Showing posts with label hack. Show all posts
Showing posts with label hack. Show all posts

Wednesday, May 8, 2019

Ways To Be Anonymous Online :



Hi do you want to be anonymous online to view blocked websites, protect your self from hackers or want to hack some one
and stay un-traced?. In the following post i will explain 4 easy ways by which you can stay anonymous online!

1. Using Proxies
A proxy is an address ( IP address ) of a Server (proxy server) that is placed between your computer and the Internet The advantage of a proxy is that your real IP address is Hidden so when you hack your giving the IP address of the proxy sever and not your real IP address Same way if your a normal Internet user the hacker won't get your real IP but the IP of the proxy server.You can use it to enter site or forum that you are IP is banned. To know more about proxies les me know above this post and I will post a full Tutorial about it.


2. Using Tor
Tor-proxy is a free proxy-server service that Internet users can use to hide their IP address while surfing the Web. Tor (The Onion Router) is free software for enabling online anonymity. Tor directs Internet traffic
t4 Ways To Be Anonymous Online : DataBuster
Want to be anonymous online to view blocked websites, protect your self from hackers or want to hack some one
and stay un-traced?. In the following post i will explain 4 easy ways by which you can stay anonymous online!
PDF By : @DataBusterz Click To Join For More Trick
1. Using Proxies
A proxy is an address ( IP address ) of a Server (proxy server) that is placed between your computer and
the
Internet The advantage of a proxy is that your real IP address is Hidden so when you hack your giving the IP
address of the proxy sever and not your real IP address Same way if your a normal Internet user the hacker
won't get your real IP but the IP of the proxy server.You can use it to enter site or forum that you are IP is
banned. To know more about proxies les me know above this post and I will post a full Tutorial about it. 2. Using Tor
Tor-proxy is a free proxy-server service that Internet users can use to hide their IP address while surfing
the Web. Tor (The Onion Router) is free software for enabling online anonymity. Tor directs Internet traffic
through a free, worldwide volunteer network consisting of more than three thousand relays to conceal a
user's
location or usage from anyone. I have written a complete How to guide on how to use tor - just let me know
if
you need it
3. SSH Tunneling
SSH tunnel is an encrypted tunnel created through an SSH protocol connection. SSH tunnels may be used
to
tunnel unencrypted traffic over a network through an encrypted channel.In easy language,you can surf net
without being monitored and even surf blocked sites too. To know more about SSH and SSH tunneling let
me know
if you would like to read: SSH tunneling guide. 4. Using VPN
Virtual Private Network. Basically its a private network which lets users to connect to other users or remote
sites using a public network usually internet. It uses “virtual” connections routed through the Internet from
the company's private network to the remote site or employee instead of physical connections. In short, it
is
private network constructed within a public network infrastructure, such as the global Internet. The Biggest
difference between proxy and VPN is everything in a VPN is encrypted which gives an additional layer of
security.hrough a free, worldwide volunteer network consisting of more than three thousand relays to conceal a
user's
location or usage from anyone. I have written a complete How to guide on how to use tor - just let me know
if
you need it


3. SSH Tunneling

SSH tunnel is an encrypted tunnel created through an SSH protocol connection. SSH tunnels may be used
to
tunnel unencrypted traffic over a network through an encrypted channel.In easy language,you can surf net
without being monitored and even surf blocked sites too. To know more about SSH and SSH tunneling let
me know
if you would like to read: SSH tunneling guide.

4. Using VPN (Virtual Private Network)

Basically its a private network which lets users to connect to other users or remote
sites using a public network usually internet. It uses “virtual” connections routed through the Internet from
the company's private network to the remote site or employee instead of physical connections. In short, it
is
private network constructed within a public network infrastructure, such as the global Internet. The Biggest
difference between proxy and VPN is everything in a VPN is encrypted which gives an additional layer of
security.

Saturday, January 28, 2017

Web developers/ Students don't save your plain password in the database. There exists a chance for HACKING!

Web developers/ Students don't save your plain password in the database. There is a chance for HACKING!

Last week, I had checked a couple of companies website's source codes to shield them from hacking. It  has been seen that, they are using plain password (as shown in the screenshot below) in their database. That is you can see the password of all registered users in the database using any database tool like PHPMYADMIN, SQLYOG etc. It can be noted that many users, using the same username and password for logging into multiple websites like gmail, onlinesbi etc. Thus hackers can easily enter into multiple website using your username and password which was stolen from a less secured website. So I recommend all of my readers to use different usernames and passwords in different websites.



Now we can come to our topic. From time to time, servers and databases are stolen or compromised by hackers all over the world. With this in mind, it is important to ensure that some important user data, such as passwords, cannot be recovered. In this tutorial , I will explain how hash technique helps us to escape from these situations.
Hashing converts a piece of data (either small or large), into a relatively short piece of data such as a string or an integer.
Normally, all famous hashing algorithms are "one-way" algorithms means, it will convert your information (say password) into a string with some alphanumeric characters. md5(), crc32() etc are widely using hashing functions.

In PHP, there are many built in functions for hashing and its format is very simple compared to other programming languages.
An example PHP hash function is md5(). Please use this code for md5 hashing

From the screenshot, it is clear that the md5 function will convert the information into 32 character hexadecimal number (Number 0,1,2,3,4,5,6,7,8,9 and characters A,B,C,D,E,F). One hexadecimal character can be represented using 4 bits (ie 1=0001, and A=1010) thus md5 result set dimension is 128 bit.
You cannot reconstruct the original information (pravysoft calicut) from  the result (00d79e8e609cfbdf5b75d80fdef96fb4). 

[Note: Actually there are some hacking strategies to break/interpret md5, but that is out of scope of this tutorial, Ofcourse you can send me a request to know that techniques!!].

User Registration and Login Steps

Now we can check the user registration steps
1. User fills their information in the registration form
2. It is better to use password fields type as password (<input type="password" >)
3. Submitted data is received by the web-server
4. Convert submitted password to md5 code. Discard original password, it will not use anywhere!
5. Save this md5 data in the corresponding field in the database


Now we can check the steps for user login process
1. The registered user now type username and password in the login window.
2. The submitted password is converted to md5 code using md5 function.
3. The code will compare the usernames as well as md5 code based passwords.
5. If they match, it will grant access to the user.

Thus if any hacker stolen the database they will only get Md5 version of the password only. Not their original secret password!!. Thus the users are protected from password hijackers.

But there are also some chances for hacking the password encrypted using hashing algorithm. For showing a demo I am using another hashing function crc32() [md5 code width is 128 character, so for simulation it will take some time, the crc32() use only 32bits for decryption thus its simulation will complete faster]


The screenshot below shows the result of the above code.



From the screenshot it is clear that, the hash code of the string "PravySoft Calicut" is -332908207. Ofcourse a hacker who has stolen the database cannot recover the string ( "PravySoft Calicut" ) from this number (-332908207). But he can login to the website using another password and that hack is explained below. As you know that cr32 using 32 bit encoding, thus it has only 2 to the power 32 (2^32) combinations only. Thus there is a chance for another string to produce the same hash code i.e -332908207. So if you know any other string which has the same hash code (say a duplicate) can be used to login to the website. Use following code for finding duplicate string

<?php
set_time_limit(0);
$var = 0;
while (true)  //infinite loop
{
 $current_value=crc32(base64_encode($var));
 echo "<br>checking value=".$current_value;
    if ($current_value == -332908207)
    {
        echo "duplicate string is ".base64_encode($var);
        exit;
    }
     $var++;
}
?>



 It will take some time to get the duplicate key/string , after getting the duplicate key you can check the hash code of that duplicate key and hash code of your string are equal. (i.e It is same as that of the hash code of the example string "PravySoft Calicut"). Thus you can access to the website using this duplicate key without knowing original string.

How you can escape from this type of hacking. Better idea is to don't use low-range hashing algorithm like crc32. It is better to use Md5() or sha1() algorithms, They have 128 bit and 160 bit hash codes respectively, Thus finding a duplicate key is very difficult and it will take very long time to get duplicate key.

Some hacking sites are keeping large number of duplicate keys to decode the hash code (Hash code database size is in the range of petabyte, ie 1000 terabyte= 1 peta byte). So hackers can find duplicate keys of some hashcodes very easily [ I am not discussing the websites they store this data(I believes that it is unethical )]. It is also a major problem for web developers to protect their website from unauthorized access. So in the next section we will discuss, how you can block duplicate key access to your websites.

It is the time for a small tea!!, I will explain some-other security issues and  ways and means to protect your site from hacking, see you soon in the next post!!

Thursday, March 5, 2015

Simply use WHATSAPP in your computer !!!






Even though there is no official whatsapp software work in personal computer, you can access whatsapp in PC using various techniques. For example, with the help of Blue stack software you can install this software on your PC. But in this case you can access whatsapp only in one device (either on PC or Phone)  [Whatsapp team always checking your MAC ID for this purpose]. Switching from one device to another is also a time consuming process (SMS or Voice validation is needed each time). So as a solution for this problem whatsapp team introduced a new technique. Now you can use whatsapp in your computer browser


To get startedplease follow these simple steps

  • Please update your whatsapp application(in phone) to the latest one.
  • Connect your phone and computer  to the internet
    (Recommanded wifi connection in mobile for better performance)
  •   Open Firefox or google chrome browser in your computer


·         Now you can see, a QR code displayed in the website. (A black square, something like a Bar code with whatsapp icon in the center)

  • open your whatsapp application in your phone (Internet connection is required)

  • Now go to Menu and select WhatsApp Web. (Check whatsapp menu)
  • Scan the QR Code displayed on your computer (in the browser)with your phone.
[Place your phone camera infront of your PC and capture QR code (like taking a photo)]
  • Now whatsapp will show all contacts and chat list in the PC. You can chat with your friends through your PC as like facebook chat. So keep your phone away and enjoy whatsapp chating through your PC keyboard.

Thursday, August 2, 2012

PravySoft Portable Keylogger



Note: Hacking is a crime. Don't use this tutorial to hack innocent people. I am sharing it for educational purpose only and to show internet banking is not safe and our personal computer is a loop hole . I (Praveen Thappily)will not be responsible for any damage done by you. This software is capable to store username and password of users.Firefox,opera,Google chrome, internet explorer etc are supported.

 PravySoft Portable Keylogger



Dear friends

Here I am introducing a tool which is used for storing all keystrokes  typed by you silently. You can store all information including usernames and passwords which is typed by our victim during the execution of the software! . You don’t want to install this software, ie this is a portable one, just copy and paste this software . You can use it from pendrive also. File size < 1 MB.





Where is the stored information?
  • Stored information is saved at notepad named “pravysoft.txt” which will automatically develop during the execution time.


Where is PravySoft.txt situated?
  • At the same directory where your  file is stored.


How to protect innocent people?
  • This tool shows a warning for every 100 keystrokes.
  • User can see that message .
  • Some letters are not stored (Software filtering used)


Full version features?
  • No user warning
  • No Tray icon
  • Completely hidden
  • Key strock emailing facility
What should you do while online transactions?
  • Please don't use public network.(Net cafe,College networks)
  • Please remove all external media such as Pen drives, External Hard disks etc
  • Use virtual keyboard (available in some websites, Still not secure)
  • Check your website address the prefix should be "https" instead of "http" 

How to get full version and source code?
  • You can email me about your purpose with this tool.

          info.pravysoft@gmail.com
This is a hidden tool , How to stop it?
  • Just use Task manager and Click on End task to stop this tool

Please don't use this tool or similar tool for hacking sites like SBI, PNB, ICICI, FACEBOOK, GMAIL etc. Its a crime for getting imprisonment.


Want to know more about this tool contact me



Download copy of silent keystroke saver for free







News of this software was published on Famous newspaper MALAYALA MANORAMA
Please read the news
Malayala Manorama News Calicut electronics and software project center
Add caption

Saturday, September 18, 2010

Firefox Password Silent Saver

FireFox Password HACKER
PLEASE USE THIS TOOL FOR EDUCATION PURPOSE ONLY

                       Hi Here I am introducing a software, which will store all username and password of the user who uses Mozilla Firefox browser  (Without showing popup button like below). With the help of this software we can hack user name and password of users.
                     In Firefox, even if you have the option “Security Remember passwords for sites” checked in Tools > Options, the browser will still display a notification bar at the top that asks “Do you want Firefox to remember the password for “Username” on website.com?” with three buttons “Remember”, “Never for This Site” and “Not Now”. If user pressed on "Remember" button password will store on firefox database and we can see the password. If user preseed other button we will not get his/her password.
                            My idea is to block this message box(see above) and click on Remember Button. The first thing that came to my mind was perhaps there is an addon that can do this but I couldn’t find any addon that can make Firefox auto save password without prompting. After spending nearly 2 hours researching on how Firefox saves the password, I managed to find a way on how to make Firefox save the login information to the Firefox Saved. So I am created this software.Please dont use this tool for hacking confidential data(s). Please use this tool for education purpose only

Steps
1) Download and Install PravySoft Firefox Hacker software.(Don’t change installation path)

2) Restart Firefox
3) Open Tools menu of Firefox

4) Select Security Tab
5) click on saved Password Button as shown in the figure


6) There you can see a window

7) You Completed you can see password, username and website address of users)


For source code please email me pravymon@gmail.com or visit http://pravysoft.eu5.org

Now i am finalizing my blog content .This software is the best tool to hack GMAIL,YAHOO,REDIFFMAIL passwords.I think you got the answer for the question  how to hack your friends username and password.


After effects
1. I got many congratulations from all over the world.
2. Firefox realised the bug, And added new secure structure for its new edition to prevent my hacking.(But dear friends I believes some  more loop holes are there for firefox, But for security purpose I am not including that problems here, If you want to know more just contact me with your profile, PravySoft team will answer all of your queries)
3. Many famous software like tuneup utilities will give warning if you are not setted your Master password for firefox