Wednesday, April 16, 2014

TOP TEN WEBSITES TO DOWNLOAD NEW BOLLYWOODS WALLPAPERS

Bollywood is one of the finest film industries of the world which produces hundreds of movies in Hindi/Urdu language per year on almost every topic such as horror, drama,comedy, thriller, horror, romantic etc. Bollywood has several beautiful girls and hot babes in it. Bollywood Movies are most popular in India and Pakistan so there are billions of fans in both countries. Several fans are so crazy they even want to have bollywood taste while using computers so they download bollywood wallpapers of hot actresses and use them as desktop wallpaper. Following are websites from where you can download latest wallpapers of bollywood actresses and actors.

BollywoodGo.com

BollywoodGo.com is a website dedicated to bollywood bringing bollywood hot picturesand bollywood wallpapers almost daily. You can download beautiful, cute and HOT bollywood wallpapers from bollywoodgo.com They collect best wallpapers from all websites plus they turn hot pictures to wallpapers too. So BollywoodGo.com is number one source for whom who are looking for bollywood hot pictures and new wallpapers. visit http://www.bollywoodgo.com

SantaBanta.Com

SantaBanta.com is most famous website for bollywood celebrities wallpapers and photo shoots. Everyday millions of people visit santabanta.com for bollywood news, jokes and wallpapers. They are one of the finest Unique bollywood wallpapers designers. They are not only best for Bollywood Wallpapers but also international hot celebrities wallpapers can be downloaded from santabanta.com. visit http://www.santabanta.com

BollywoodHungama.com

BollywoodHungama (also known as IndiaFM.com) is considered the official website of bollywood. They bring latest bollywood news, movie posters, movie stills, parties and event pictures. exclusive interviews and Wallpapers. They has been media partner of several bollywood movies and now is top bollywood website. visithttp://www.bollywoodhungama.com

MovieGupShup.Net

Moviegupshup.net is a bollywood pictures website from where you can download bollywood HQ Pictures and wallpapers without watermarks and logos. They have thousands of pictures without watermarks and several wallpapers designers use this website as source website. They bring High Quality wallpapers and pictures. visithttp://www.moviegupshup.net

HACK A BSNL BROADBAND FOR YOUR SPEED

If you are a BSNL broadband user, chances are that you are facing frequent DNS issues. Their DNS servers are just unresponsive. The look up takes a long duration and many times just time out. The solution? There is small hack on BSNL for this. Use third party DNS servers instead of BSNL DNS servers or run your own one like djbdns. The easiest options is to use OpenDNS. Just reconfigure your network to use the following DNS servers:
208.67.222.222
208.67.220.220
Detailed instructions specific to operating system or your BSNL modem are available in the OpenDNS website itself. After I reconfigured my BSNL modem to use the above 2 IP addresses, my DNS problems just vanished! Other ‘freebies’ that come with OpenDNS are phishing filters and automatic URL correction. Even if your service provider’s DNS servers are working fine, you can still use OpenDNS just for these two special features. After you hack BSNL DNS servers, you will see a noticeable improvement in your broadband speed.
Popularity: 10% [?]

HOW TO HACK AN ADSL ROUTER

Almost half of the Internet users across the globe use ADSL routers/modems to connect to the Internet however, most of them are unaware of the fact that it has a serious vulnerability which can easily be exploited even by a noob hacker just like you. In this post I will show you how to exploit a common vulnerability that lies in most ADSL routers so as to gain complete access to the router settings and ISP login details.
Every router comes with a username and password using which it is possible to gain access to the router settings and configure the device. The vulnerability actually lies in the Default username and password that comes with the factory settings. Usually the routers come preconfigured from the Internet Service provider and hence the users do not bother to change the password later. This makes it possible for the attackers to gain unauthorized access and modify the router settings using a common set of default usernames and passwords. Here is how you can do it.
Before you proceed, you need the following tool in the process
Here is a detailed information on how to exploit the vulnerability of an ADSL router.
Step-1: Go to www.whatismyipaddress.com. Once the page is loaded you will find your IP address. Note it down.
Step-2: Open Angry IP Scanner, here you will see an option called IP Range: where you need to enter the range of IP address to scan for.
Suppose your IP is 117.192.195.101, you can set the range something as 117.192.194.0 to 117.192.200.255 so that there exists atleast 200-300 IP addresses in the range.
Step-3: Go to Tools->Preferences and select the Ports tab. Under Port selection enter 80(we need to scan for port 80). Now switch to the Display tab, select the option “Hosts with open ports only” and click on OK.
I have used Angry IP Scanner v3.0 beta-4. If you are using a different version, you need to Go to OptionsTools instead of
Step-4: Now click on Start. After a few minutes, the IP scanner will show a list of IPs with Port 80 open as shown in the below image.
Step-5: Now copy any of the IP from the list, paste it in your browser’s address bar and hit enter. A window will popup asking for username and password. Since most users do not change the passwords, it should most likely work with the default username and password. For most routers the default username-password pair will be admin-admin oradmin-password.
Just enter the username-password as specified above and hit enter. If you are lucky you should gain access to the router settings page where you can modify any of the router settings. The settings page can vary from router to router. A sample router settings page is shown below
If you do not succeed to gain access, select another IP from the list and repeat the step-5. Atleast 1 out of 5 IPs will have a default password and hence you will surely be able to gain access.

What can an Attacker do by Gaining Access to the Router Settings?

By gaining access to the router settings, it is possible for an attacker to modify any of the router settings which results in the malfunction of the router. As a result the target user’s computer will be disconnected from the Internet. In the worst case the attacker can copy the ISP login details from the router to steal the Internet connection or play any kind of prank with the router settings. So the victim has to reconfigure the router in order to bring it back to action.

The Verdict:

If you are using an ADSL router to connect to the Internet, it is highly recommended that you immediately change your password to prevent any such attacks in the future. Who knows, you may be the next victim of such an attack. 
Since the configuration varies from router to router, you need to contact your ISP for details on how to change the password for your model.
Warning!
All the information provided in this post are for educational purposes only. Please do not use this information for illegal purposes.

HOW TO CRACK WINDOWS ADMINISTRATION PASSWORD

Some times it necessary to know admin passwords in schools ,collages to log in with admin privileges to do various things
There are many way to crack passwords. But in thistutorial I will explain a very basic method using a single tool to crack windows password . This might come handy in places like schools ,collages where you cant use your live Linux cds , usb ..etc because your being watched 
Things we need :1. Pwdump or Fgdump to extract password hashes

In this tutorial I will be using Pwdump 

Extracting Password hashes :-1. Open My computer and go to C:\Windows\system32 . now place the Pwdump file which we download earlier 
2. Now open command prompt and navigate to
 C:\Windows\system32 \Pwdump
Using c d command and click enterExample :-Cd C:\Windows\system32 \Pwdump
3. Now you can see a list of Pwdump commands as shown
 4. Now enter pwdump – localhost >>“ destination of output file “ (for 32 computers) and pwdump -x localhost >> “destination out put file “(for 64 bit computers )
Example :-Cd C:\Windows\system32 \Pwdump localhost >> C:\hashes.txtCd C:\Windows\system32 \Pwdump -x localhost >> C:\hashes.txt
5. Now open  the Out put  file  you can see the names of the different  users with password hashes Now copy the hashes  corresponding to the admin accountCracking The Hashes 
Considering that we are in school/collage were we cant use tools to crack passwords so as an alternative we are using online password cracking sites
1. Go to online password cracking sites like http://www.cracker.offensive-security.com ,http://www.onlinehashcrack.com and paste the hash select hash type as LM and click decode
2.By this way we are able to crack windows password using a single tool
Note:- If your not able to crack password hashes online use tools like john the ripper to crack password hashes . You can even copy the hashes and decoded it in your house

FREE HACKING TOOLS ESSENTIAL FOR EVERY HACKER

A Hacking tool is a program which helps you in Hacking making it easier for you,Gone are those days when you have to do every thing manually,now a days Hacking tools have made work easier for you,Below i am posting some of Hacking tools essential for every Hacker out there to make the work alot easier,these tools are also actually a Kind of Security tools but it on you how you use them. 
Free Essential Hacking tools For every Hacker:

IP Tools:
IP-Tools offers many TCP/IP utilities in one program. This award-winning Free Hacking tool can work under Windows 98/ME, Windows NT 4.0, Windows 2000/XP/2003, Windows Vista and is indispensable for anyone who uses the Internet or Intranet.
It includes the following utilities 
  
1.Local Info – examines the local host and shows info about processor, memory, Winsock data, etc.   
2.Name Scanner – scans all hostnames within a range of IP addresses  
3.Port Scanner – scans network(s) for active TCP based services   
4.Ping Scanner – pings a remote hosts over the network   
5.Telnet – telnet client   
6.HTTP – HTTP client   
7.IP-Monitor – shows network traffic in real time & many more   
8.IP TOOLS has almost all the utilities built into it.So there is no need to use seperate tools for every indivisual process of hacking such as Port scanning,Whois scanning,IP monitor etc.It’s like a hacking tool kit which has all the necessary tools for hacking.Download IP Tools Here
Cain and Abel (sometimes called simply “Cain”) is a Windows password recoverytool. It can recover many kinds of passwords using methods such as network packet sniffing, cracking various password hashes by using methods such as dictionary attacks, brute force and cryptanalysis attacks. Cryptanalysis attacks are done via rainbow tables which can be generated with the winrtgen.exeprogram provided with Cain and Abel. Cain and Abel is maintained by Massimiliano Montoro.I have made a tutorial on Hack a Computer with Cain and able OR Download Cain and Able Here

Brutus ( Password Cracker):
Brutus is a remote online password cracker for windows, good for HTTP,POP3,FTP,SMB,Telnet and lots others.. it’s also free. It is available for Windows 9x, NT and 2000, there is no UN*X version available although it is a possibility at some point in the future. Brutus was first made publicly available in October 1998 and since that time there have been at least 70,000 downloads and over 175,000 visitors to this page. Development continues so new releases will be available in the near future. Brutus was written originally to help me check routers etc. for default and common passwords.
you can Download Brutus Password Cracker Here
RainbowCrack:
A very nice Hacking tools.Its general propose implementation of Philippe Oechslin’s faster time-memory trade-off technique. It cracks hashes with rainbow tables,

Features:
Full time-memory tradeoff tool suites, including rainbow table generation, sort, conversion and lookup
Support rainbow table of any hash algorithm
Support rainbow table of any charset
Support rainbow table in raw file format (.rt) and compact file format (.rtc)
Computation on multi-core processor support
Computation on GPU (via NVIDIA CUDA technology) support
Computation on multi-GPU (via NVIDIA CUDA technology) support
Runs on Windows XP 32-bit, Windows Vista 32-bit and Windows 7 32-bit
Command line and graphics user interface
 Download Rainbow Cracker Here 
LC5(LophtCrack):
Windows password auditing and recovery application 
L0phtCrack or LC5 attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows workstations, networked servers, primary domain controllers, orActive Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc). LC5 was discontinued by Symantec in 2006, then re-acquired by the original L0pht guys and reborn as LC6 in 2009.

Download LC5 here

John the Ripper:
A powerful, flexible, and fast multi-platform password hash cracker John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officiallysupported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches. You will want to start with some wordlists, which you can find
Here and download  john ripper here.

LEARN WEBSITE HACKING AND SECURITY WITH DVWA TOOLS

Lots of readers often ask me How can I be good at website hacking and web application security, The thing is that even if you have an idea of how some popular website application attack work but still you need a safe environment to practice what you have learned because you are not allowed to access any website even for testing purposes unless and until you are not authorized to do that, This is where Damn vulnerable web app(DVWA) comes into play
Basically Damn vulnerable web app(DVWA) PHP/MySQL web app which is Damn vulnerable, DVWA web app allows you to learn and practice web application attacks in a safe environment, It’s latest version is DVWA 1.7.
Vulnerabilities
  • SQL Injection
  • XSS (Cross Site Scripting)
  • LFI (Local File Inclusion)
  • RFI (Remote File Inclusion)
  • Command Execution
  • Upload Script
  • Login Brute Force
  • Blind SQL Injection 
And much more.
Official warning
It should come as no shock..but this application is damn vulnerable! Do not upload it to your hosting provider’s public html folder or any working web server as it will be hacked. It’s recommend that you download and install XAMP onto a local machine inside your LAN which is used solely for testing.

WEBSITE HACKING WITH DOT NET NUKE EXPLOIT

In this tutorial I will tell you how hackers use a simple dot net nuke exploit to hack a website, Now the exploit I am talking about is found in hundreds and hundreds on DNN applications and it allows the hacker to upload an image on your server, This type of attack is also called one way Hacking and at the end of article I have also posted some countermeasures to help you defend your self against these kinds of attack.
Google Dork
A google dork is an act of using google provided search terms to obtain a specific result and this DNN vulnerability occurs only in those websites which have “/portals/0″ in their navigation, So goahead and search for inurl:”/portals/0″ where inurl asks the google to display all the url’s who have /portals/0 in their navigation1.Lets say the vulnerable website is: www.vulnerablewebsite.com/portals/02.Now we will just add Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx after the url so http://www.vulnerablewebsite.com/portals/0 will becomehttp://www.vulnerablewebsite.com/portals/0Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx3.Now a website is vulnerable to this type of attack you will get a similar windows like the below one:
4.Next enter the following Javascript in the address bar:
javascript:__doPostBack(‘ctlURL$cmdUpload’,”)
What this javascript will do is that it will enable us to upload our image to the server:
5.The hacker could upload any image on victims website.Countermeasures1.The easiest method is to rename your fcklinkgallery to some thing else but it will not prevent this attack, but you can protect it from script kiddie’s in this way, A skilled hacker can easily find the renamed file by using some Footprinting methods2.Another way to prevent this attack is to upgrade to IIS 7 or higher and a DNN version of 4.9.4 or higher