How to Secretly Hack Into, Switch On, & Watch Anyone's Webcam Remotely

———————————————————————————————
How to Secretly Hack Into, Switch On, & Watch Anyone's Webcam Remotely
———————————————————————————————

Welcome back ,

Like in my last article on remotely installing a keylogger onto somebody's computer, this guide will continue to display the abilities of Metasploit's powerful Meterpreter by hacking into the victim's webcam. This will allow us to control the webcam remotely, capturing snapshots from it.

Pic : http://bit.ly/Yrfb0G

Why exactly would you want to hack into somebody's webcam? Maybe you suspect your significant other of having a fling. Or, maybe you're into blackmailing. Or, maybe you're just a creep. But the real purpose is to show just how easy it is, so you're aware that it can be done—and so you can protect yourself against it.

Pic : http://bit.ly/XQsdF5

Hacking a Web-browser with beef

Browser Exploration Framework is mainly used to exploit a Web-browser.When i was trying it I play a varied types of pranks with victim browser like making open a pop-up window,playing a sound,stealing cookie etc. So lets start hacking.
Follow all the steps according to my post ======>


1. First install beef by clicking on Applications->Backtrack–>Exploitation Tools->Social Engineering Tools->BEEF XSS Framework->BeEF Installer.


2. Now when beef installs open beef by going to same directory like in 1st step then click on beef and beef will start connecting.

Non Persistent Xss Attack

The non-persistent XSS are actually the most commons vulnerabilities that can be found on the Net.

It's commonly named as "non-persistent" because it works on an immediate HTTP response from the

 victim website: it show up when the webpage get the data provided by the attacker's client to

Persistent XSS Attack

The persistent XSS vulnerabilities are similar to the second type (Non-persistent XSS), because both

works on a victim site and tries to hack users informations and the difference is that in websites

vulnerables to Persistent XSS the attacker doesn't need to

how to hack a website by using cmd

how to hack a website by using cmd?

hlo,frndz i'm going to show u how to hack a website by using cmd or using deniel service attack
frst of all what is deniel service attack it means when a website get more data from its capacity and it crashed this is called deniel service attack
for this attack u have a great internet speed bcoz if ur pc has slow speed u havebeen traced by host and u gone to jail

SQLSentinel:SQL Injection Vulnerability Scanner

Hey friends this is D@rk TruTH. Sorry for posting very late i was busy in my studies because my exams are coming.
Today I am bringing a new SQL injection hunter tool named SQLSentinel.

What is SQLSentinel -->

This tool is very good if u want to test a site vulnerable to SQL injection.

This tool use crawling function first found out links like index.php?id= and then check that these links are vulnerable or not.

It only found out vulnerabilities, but not hack it.

Usage of tool --->

Easy way of hacking Wordpress website

Easy way of hacking Wordpress website

Hi here i tell you how to hack wordpress site with easy way i will use exploit to hacksites i saw lots of Messages that say "hey help can anyone can tell me how to hack wordpress" and it's an easy way with exploit ?

First we search with this in google to find sites

inurl:"wp-content/plugins/photoracer/viewimg.php?id="

Cross Site Scripting(XSS) Complete Tutorial for Beginners

Cross Site Scripting(XSS) Complete Tutorial for Beginners~ Web Application Vulnerability

What is XSS?
Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to run his own client side scripts(especially Javascript) into web pages viewed by other users. In a typical XSS attack, a hacker inject his malicious javascript code in the legitimate website . When a user visit the infected or a specially-crafted link , it will execute the malicious javascript. A successfully exploited XSS vulnerability will allow attackers to do phishing attacks, steal accounts and even worms. 

how to hack almost every site with sqlmap

[SQL]

Hello, today i am gonna show you how to hack almost every site vuln on SQL...

 

Start

 

- - - - - - - - - -

 

First of all you must to find some vuln sites...

 

Our target is : http://www.zwcad.org/

Nmap Scanning On Backtrack 5

Learn Nmap Scanning On Backtrack 5 Environment 

Nmap is a program that scans all of the ports in your computer and check it  whether they are open or not.

So lets start the scanning process in Backtrack 5 Environment .

Ping Scan 

Websecurify on BackTrack5

WebSecurify 

Introduction 

• Websecurify is an advanced testing solution built to quickly and accurately identify web application security issues.

Features

• Available for all major operating systems (Windows, Mac OS, Linux) including mobile devices (iPhone, Android)
• Simple to use user interface
• Built-in internationalization support
• Easily extensible with the help of add-ons and plugins
• Moduler and reusable design based on the Weaponry Framework
• Powerful manual testing tools and helper facilities
• Powerful analytical and scanning technology

How to open Websecurify 

Hack website using SQL map | automatic SQL injection tool

Hack website using SQL map | automatic SQL injection tool

SQL map v.0.9 Released

Today i am going to write a sql injection tool. It's V 0.9 is just released. There are many changes in this tool from it's previous version. Sql injection is one of the top web application vulnerabilities. It's very important to check a website against this vulnerability.  


sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a kick-ass detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Download Here:
Download SQL FILES

HOW TO HACK A WEBSITE BY SQL INJECTION USING HAVIJ | TUTORIAL

HOW TO HACK A WEBSITE BY SQL INJECTION USING HAVIJ | TUTORIAL

You can download Havij here

After downloading and installing Havij SQL tool,. you have to find an SQL vulnerable site. This can be done by the use of google dorks like

• inurl:index.php?id=sql under''

Read this tutorial on manual sql under   '' searching for the vulnerability ''   here ...

but for an easy go, you can just use another automated program known as sql poison . you can download  here. The main aim of sql poison scanner is to help you find a vulnerable web page by performing an automated blind search onto a search engine like google. Havij will only hack a website through a specific webpage which you know is vulnerable to sql injection.

-----------------------------------------------------------------------------------------------------------------

Now lets say that you have found a vulnerable weblink url which looks like this one:

• http://www.hackyourdad.com/hisoffice.php?id=282

1. Open havij, then copy and paste the vulnerable weblink as shown in figure

2. Now click in the "Analyze" button

4. After u click Analize, wait for it to find it's vulernable, type of injection, if db server is mysql and it will find database name. Then after get it's database is name like xxxx_xxxx

5. Then go to the next operation of finding tables by clicking "tables" . A sub menu will appear  where you         will click "Get tables"  as shown in the figure below. Your may need to wait for a while before it shows         you the tables

6. After you get the tables ,there will be a check box for "users" Put mark on it and click on the " get columns " tab as shown in figure

7. Under ''Get columns'' list,.. just check on username and password and click on "Get data"

8. Bingo!!! Now you have the Username and password that may be for the admin...The pass that you will get     will be in form of an md5 hash which you will have to decrypt it by using the MD5decryptor tool as shown below

After you have got the Username & the password ready,.. You now need to find the Admin page which will give you access to the control panel (cpanel) of the website.
To find the Admin page, Go to ''Find Admin'' , then enter the site url on ''Path to search'' and click on ''Start'' as shown in the image below

Now get the admin page url and open it in your internet browser,.. it will take you to a page which will request for the username and password,.. Enter these details & its Game Over!!! 

You will find yourself in the control panel (cpanel) where you will have complete control of the website, you can do whatever the hell you want, you can even deface the website if you are realy in a bad mood :P