Connect With Me In Facebook

Welcome to DefendHackers, If u want to Apply for a Blogroll as a Author , With h4ckfreak Mail me @ suren.click@gmail.com

Mark Zuckerberg tells 8th graders “there’s no shortcuts” and to make friends

By h4ckfreak

Metasploit Quick Start Referennce Guide

Metasploit Quick Start Referennce Guide , By h4ckfreak

IP Security

IP Security By H4ckfreak.

15 Network Admin Apps for Android

15 Network Admin Apps for Android , By h4ckfreak

Break All OS Passwords Using KON

Break All OS Passwords Using KON , By h4ckfreak

Recover Or Reset Ur Windows Pwd Using Ubuntu

Recover Or Reset Ur Windows Pwd Using Ubuntu , By h4ckfreak

Security Blueprint For Ethical Hackers..

By h4ckfreak

Blocking IP Using IPSec

By h4ckfreak

Preventing DDos Attacks, Combat Steps abd Tools...

By h4ckfreak

Tuesday, March 30, 2010

Convert Text To Speech

Convert Text To Speech

CarryoutText is an easy to use service that converts your text to a MP3 file. It converts English text to a downloadable MP3 file that you can listen at the computer or with your MP3 player.
Convert Text into Downloadable MP3 Audio



You can use your commute time more productively by converting your blogs, news articles and any other text to an audio file that can be played on your IPod or your favorite MP3 player. Students can also use it for their studies.
Go to CarryoutText: Link

Access Control Changer – Full control of Files & Folders


Access denied errors are quiet common when we try to access files or folders from one user account to the other on the same system or, when permissions for the folders are set set to disallow you to open some files or folders.

We often create different user accounts on our system, but receiving such errors can be quiet annoying at times when it is urgent to access important file or folder.  You are left helpless, googling for the solution and google coming up with list of spammed softwaresolutions that are either useless or you will need to pay to use them. Same thing happened to me after which i discovered a freeware named Access Control Changer.

Access Control Changer is a freeware utility that allows you to change file permissions of any file or folder allowing you to read-write, change or take full accessover the file or folder. From the application UI, select the file or folder for which you want to change the permissions, click change and click ok for the confirmation of the change. You get the desired permissions set for your folder!


Permissions -
  • None – Restrict the user to access the file/folder
  • Read – Allow read only permissions to the file/folder
  • Write – Allow only write permissions to file/folder
  • Change – Allow changing the file/folder
  • Full Control – Allow full permissions to file/folder
Download Access Control Changer now!

How to Fix, Repair and Play Broken AVI Files with Index Errors etc.
Divfix++ (link)

This less than 1 MB program repairs broken AVI file streams by rebuilding index part of file. This is very useful when trying to preview movies which has no index part, like some files are currently downloading.

AVI Files Won't Play Fix and Play Broken AVI Files

To fix the file click on ‘Fix’. Make sure the option ‘Keep original file’ is checked or else the file will get replaced by the edited one. DivFix++ specialy designed for previewing video being downloaded files from P2P networks.

Sunday, March 28, 2010

Iexpress file joiner, exe binder, exe packer to hack remote computer




.
Iexpress File joiner exe binder:

Just follow guidelines below to use Iexpress file joiner exe binder
windows utility.

1. Go to Start -> Run (Can also press shortcut key Win+R). In
dialog box, enter- iexpress and hit on OK to bring up File joiner.

2. Now, you will get something like:
Iexpress file joiner exe binder

3. Hit on Next twice and then on Package title pane, enter the name of exe package you want to create and hit on Next.

4. Again hit on Next to get Confirmation prompt, you can choose to show a message to victim before first exe installation. File joiner will show this message. This is particularly useful if you want to install on victim
computer a server trojan that is detected by antiviruses. You can select "Prompt user with" and in text box enter something like:

"Windows will install necessary files. Please disable your Antivirus before further installation proceeds."

which will make victim to disable his antivirus and thus our server can do its work efficiently. This is all social engineering part which you can make more effective by your own logic.
File joiner exe packer

Hit on Next twice and in Packaged files pane, enter exe files you want to bind using "Add". Hit on Next to go to next file joiner pane.

5. Now, this is important. In Install Program to Launch pane of file joiner, select the files from drop down box as shown:

- Install program : Select the file you want victim to see in the installation.
- Post install program : Select the server keylogger or trojan file which you want to install on victim computer without his knowledge.

Hit on Next.

6. On next windows pane, select "Hidden" and hit on Next. In next Finished message box of exe binder, you can choose to show up a message on installation completion.

7. Hit on Next and enter the path and file name where the file binder should save the binded file. Choose name same as the file name you have told to victim. Also, check on "Hide file extracting animation from user".

8. Hit on Next and adjust restart setting as you wish depending on working of your server trojan. Hit on Next and in Save Self Extraction Directive, you can choose any option. Hit on Next twice to create binded file. Now, file joiner binder will create binded file for you.

9. Now, you have your server trojan binded file ready on your computer. Simply send this file to victim via email.


10. Once the victim double clicks on this installation package ie binded file, first he is greeted with a dialog box like this:
File joiner popup box

This is the result of step 4 of Confirmation prompt. Once he disables his Antivirus, our server trojan can easily install itself on victim computer and thus you can hack his computer or various online accounts easily.

Note: To make server function correctly on victim computer, you need to make it "Run as admininstator" on victim computer. If you have any such problem in using this iexpress utility,


So friends, I hope you are now well-known with use of iexpress file joiner, exe binder windows utility used to bind server keylogger files with normal exe files. Iexpress is best file joiner, exe binder and exe packer. If you have any problem in using this iexpress utility as file joiner, please mention it in comments.

Enjoy iexpress utility as file joiner, exe binder software...

Sunday, March 21, 2010

How to scan a target for open ports and services using Netcat, SuperScan, Strobe

How to scan a target for open ports and services using Netcat, SuperScan, Strobe


Netcat: The netcat application has many uses; one is the ability to scan a target for open ports and services. Another utility, cryptcat, is almost identical except that it operates with encryption.

From a DOS prompt, type the following with the syntax of:


Other useful commands for Netcat

The –v option instructs netcat to run in verbose mode, allowing you to see the progress of the scan.
The –r option instructs netcat to randomize local and remote ports in an attempt to elude any intrusion detection systems.
The –w2 option instructs netcat to wait 2 seconds between each port scanned to help elude any intrusion detection systems.
The –z option instructs netcat to operate in a zero-I/O (Input/Output) mode. It is best to use the –z when scanning with netcat.
The 1-1024 instructs netcat to scan port 1-1024.

*Note: 7, 13, 17, 9, and 19 as these ports can easily be used to create a Denial of Service (DoS). These ports should not be open to the Internet.

SuperScan: SuperScan has the ability to discover which ports are open on the target. Identifying the open ports tells an attacker what ports are available for potential exploit.

Accept the default installation of SuperScan. The installation will occur and the SuperScan application will start.


Strobe: The Strobe application identifies ports open on the target. By identifying the ports available this gives an attacker a potential hole to attempt to punch through and compromise the computer and/or network. Remember that all commands in Linux are case sensitive.

For the Windows-based version install and execute with the following syntax:

./strobe (Target IP)

From the Linux directory containing the compressed file type tar –zxvf strobe103.tar.gz. The files will uncompress into a new directory named strobe. Change to the new directory by typing cd strobe and pressing Enter. From the new directory type make install and press Enter.

To execute Strobe against the target in this example: ./strobe 172.16.1.40

The Strobe application will now execute against the target.



How to Identify CGI Vulnerabilities using TCS CGI Scanner

How to Identify CGI Vulnerabilities using TCS CGI Scanner


The TCS Common Gateway Interface (CGI) Scanner application is designed to find targets that have vulnerable CGI Script errors. These errors are normally due to systems that have not been patched or updated.

Click to highlight the default target of htpp://www.tpp.ru and click on the at the top left of the application to delete the current target.

On the gray bar along the top left of the application, enter the IP address or hostname of the target and click on the gray-colored arrow to insert the new target. Repeat this process for multiple targets. The TCS CGI Scanner is now ready to scan the target.
In this example, each script run against the target is displayed with the result to the right. The ones of interest are any with a 200 as this indicates a successful attempt.

To execute, right-click on a script and left-click on Copy String. Open Internet Explorer and paste the line in the address bar. Press the Enter key. The directory listing of the target’s C: drive will appear.


The line that should be in the address bar is:


To list the contents of the Program Files directory, edit the address bar to


Create directory command within the script:


Notice that the beenhacked directory is now created in the root of the C: drive on the target.
The gray bar along the top right of the application allows you to enter custom scripts for the application to check against the target. If you wanted to check the Program Files directory or create a beenhacked directory on each target it is capable of compromising, you could enter these scripts here and click the downward-pointing arrow to enter the script into the application. Repeat this process for multiple targets

IP Spoofing Attack

IP Spoofing Attack

Internet Protocol i.e IP addresses are unique and used for digital data communication for internet. Any mailing system or website technology works on the same principle of digital communication.
IP Spoofing
IP Spoofing
Every computer connected to Network have its unique IP address.
When Person A sends an email  to person B, The mail is assigned with the header which contains the IP’s of sender and Reciver so that mail can go to the same person B and not to some one else.
Now in a private network for security reasons limited mails are accpeted from reserved IP’s.
In Simple word only internal communication can be worked. Person from outside can’t send mail in that network.
So if attacker wants send the mail inside, He will spoof the IP.
He first will sniffs the data packets in the internal communication adn steal some internal email.
Then he will perform changing in header of the mail. he will change content of the mail and send this mail to network again.
System cant provide security against this because it have internal fake IP.
This is how fake IP  is created and attack of spoofing is done.

How To Crash Small Websites (NOOB FRIENDLY)

How To Crash Small Websites (NOOB FRIENDLY)


Ok so your friend or your enemy has made a little shitty website for whatever maybe a private server or anything.. And your feeling devious and want to crash it .

TOOLS:
>>Port Scanner<<
>>rDos<<
>>HotSpotSheild Proxy!<<

Step One: First we need to find the websites IP Adress. This is very easy todo.

Ok so say they URL is http://www.yoursite.com ok now that you have your URL open Up Cmd todo this press Start>Run>cmd Once you have CMD open you type ping http://www.yoursite.com press enter and you will get the ip of the website. (YOU MUST REMOVE HTTP:// AND ANY /'s)
EXAMPLE:
[Image: 2w68nys.jpg]

Step Two: Now we must test to see if port 80 is open (it usually is).

This is very easy todo to Ok open up the port scanner you downloaded.
Once in the port scanner type in your Victims ip that you got from step 1.
It will ask you todo a range scan or a full scan (SELECT REANGE SCAN!) It will ask for conformaition you have to use a capital Y or a capital N! Now enter 79 for lowest port and 81 for highest hit enter than hit cap Y.
[X] = Closed
[X] Vulnerable = Open
EXAMPLE:
[Image: 23u67h1.jpg]


Step Three ALMOST DONE:

The final and easiest step (IF PORT 80 IS CLOSED PICK A NEW SITE!)
If port 80 is open your on your way to crashing!!

Ok open Up rDos that you download.
Enter your victims ip that we got from step 1.
It will ask you for the port to attack use port 80 that is why we scaned to make sure 80 was open! If it is closed it will not work.
Hit enter.. *=Flooding -=Crashed Or didn't connect!
EXAMPLE:
[Image: bhzlp0.jpg]

Thanks for reading i hope this helps :)