Visit our official website APAJR Lab


Friday 14 March 2014

Firesheep Makes Facebook Hacking Easy | .::APAJR::.

| |
6 comments

                             

Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:


Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Firesheep

Hope you liked the post! Pass the comments
- See more at: http://www.rafayhackingarticles.net/2010/11/firesheep-makes-facebook-hacking-easy.html#sthash.yUHDFAKC.dpuf

Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:


Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Firesheep

Hope you liked the post! Pass the comments
- See more at: http://www.rafayhackingarticles.net/2010/11/firesheep-makes-facebook-hacking-easy.html#sthash.yUHDFAKC.dpuf
Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:


Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Firesheep

Hope you liked the post! Pass the comments
- See more at: http://www.rafayhackingarticles.net/2010/11/firesheep-makes-facebook-hacking-easy.html#sthash.yUHDFAKC.dpuf
 Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?


In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account.  .::READ MORE::.


How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:



Method



1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser
    
                                
                         


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep


                                               



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly


Firesheep  


For More Information : Click Here
Way to hack FB Click Here









Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:


Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Firesheep

Hope you liked the post! Pass the comments
- See more at: http://www.rafayhackingarticles.net/2010/11/firesheep-makes-facebook-hacking-easy.html#sthash.yUHDFAKC.dpuf
Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:


Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Firesheep

Hope you liked the post! Pass the comments
- See more at: http://www.rafayhackingarticles.net/2010/11/firesheep-makes-facebook-hacking-easy.html#sthash.yUHDFAKC.dpuf
Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:


Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Firesheep

Hope you liked the post! Pass the comments
- See more at: http://www.rafayhackingarticles.net/2010/11/firesheep-makes-facebook-hacking-easy.html#sthash.yUHDFAKC.dpuf
Recently a new firefox addon Firesheep have been a cause of thousands of email accounts, As reported by techcurnch, Firesheep has been downloaded more than 104,000 times in roughly last 24 hours, With Firesheep the hacker can control any account without even knowing the username and password of the desired account, As Facebook is worlds most popular Social Networking website, therefore it has been the major victim of it, Firesheep uses Http Session hijacking attack to gain unauthorized access to a Facebook or any other account

What is Session Hijacking?

In a Http session hijacking attack an attacker steals victims cookies, Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Facebook Google, Yahoo, Orkut, Flickr etc or any other email account

How can a Hacker use Firesheep to Hack a Facebook or any other account?

Now I will tell you how can a hacker use firesheep to hack a facebook or any other account, You will need the following things:


Method

1. First of all download "Firesheep" from the above link and use the "openwith" option in the firefox browser


2. Once you have installed firesheep on firefox web browser, Click on view at the top, then goto sidebar and click on Firesheep



3. Now click on the top left button "Start capturing" and it will start to capture the session cookies of people in your wifi network, This will show you the list of those people whose cookies are captured and have visited unsecured website known to firesheep, Double click on the photo and you will be logged in instantly

Firesheep

Hope you liked the post! Pass the comments
- See more at: http://www.rafayhackingarticles.net/2010/11/firesheep-makes-facebook-hacking-easy.html#sthash.yUHDFAKC.dpuf
Read More

How To Use Original Domain Address for Phishing page | .::APAJR::.

| |
0 comments
                                              computer_phishing1


If you don't know about Phishing Don't Worry Just read the Below tutorial first:


How To Create Facebook Phishing Page


Once you have learned something about phishing, Feel free to come back to this article.

It is easy these days for a person to identify the phishing page by looking at the url of the webpage. But Today i will show you a trick to use original domain address for phishing, hacker can use original domain address.  But how? Let me explain you in this brief article.



Requirements: 

Wamp server

Install WinRar


We are going to send an email with an executable to victim. If the victim double click the executable file, then you will get success in this attack. Now, whenever the victim enter the real domain name (like www.facebook.com) ,he will be redirecting to our phishing page.


How is it done? 

Executable file will change the Host file of Victim system.
 

What is host file?

The host file contains Domain Name and IP address associated with them.  Your host file will be in this path:

C:\Windows\System32\drivers\etc\

 

Whenever we enter the Domain name or URL (for eg: www.webaddress.com), a query will be send to the DNS (Domain Name server).  This DNS connect to the IP address which is associated with the Domain Name.   But before this to be done, the host file in our system will check for the IP address associated with the Domain Name.  Suppose we make an entry with Domain Name and IP address of our phishing web page(for  eg: www.webaddress.com wiht our ip 123.23.X.X),then there's no query will be send to the DNS.

It will automatically connect to the IP address associated with the Domain Name.  This will fruitful for us to mask the PHISHING web page's URL with Original Domain Name. 
Now Let's divide into the Implementation:
If you are hosting some other hosting site, probably you won't get the unique IP address for your Phishing Web Page. You can have the IP Address of the hosting only. So if you try to use that IP address, the victim will not bring to your Phishing web page , they will bring to the hosting address.  
So what you can do overcome this problem? You need to set up your own Webserver in home. Using Webserver softwares you can set up your own Hosting service.
 
Your computer should be turned on always. Because if you turned off the computer,then probably host will not be in online. Again it will be available when you turned on. So your computer turned on when victim visits your site.
How To set up Your own server?
  
Download the  Webserver softwares like WAMP,XAMP(Both are open source software, I meant they are free ).  My suggestion is WAMP.  Because it is my favorite one.  It is easy to use.

 Download the wamp server from www.wampserver.com

Install the WAMP server.  After installation completed, Go to this folder path: 
C:\Wamp\WWW 

And paste your phishing web page here.

Start the Wamp Server.


(Start->windows->All Programs->Wamp Server->start wamp server)

you can see the half circle icon(wamp server icon) in system tray(i mean near to the time). Click the icon and select the start all services.




Now type your ip address in address bar of the web browser and hit enter. If you don't know your ip address ,visit www.whatismyip.com.
Now you can see your Phishing web page in your Browser.


Modifying the Host file :
 
Copy the Host file from this path "C:\WINDOWS\system32\drivers\etc" to desktop.  Right click on the host file and open with Notepad.

You can see the localhost entry there.
Below that type as :



your_ip     domain_name
For eg:
123.xx.xx.xx www.gmail.com
.
Save the File.

Compress the Host File:

Compress hosts file such that when victim opens it, it automatically gets copied to default
location C:\Windows\system32\drivers\etc and victim's hosts file get replaced by our modified hosts file.
 
Right click on the Hosts file and select the Add to archive option.  Now follow the steps which is shown in picture: 



                                      



                                                 


                                                   



                                                      
             



                                                   






Now send the zipped file to victim.  If he extract the zip file, then the hosts file will be replaced.

You are done.  Now whenever he try to visit the genuine or original website, the phishing webpage only will be shown.




Some Disadvantages of this Hack:

 

 

  •   If your IP address is dynamically changed ,then it is hard to implement it
  •   If your victim is advanced user,he may notice the certificates of site which is shown by browser.

 

 

Don't worry it is not at all big problem.   Just try it and enjoy it. 

 

for+educational









Phishing Detial Click Here 














Read More

Hacking Facebook Account From Your Android Device | .::APAJR::.

| |
0 comments



 I Know Many of you were waiting for this Post about How to hack Facebook account using your android device.This tutorial is easier and you will get almost 95% success if you and your victim are on same network. This tutorial is totally based upon Android devices so you don't worry you don't want to have a pc or laptop for doing this or we can say for "Hacking A Facebook Account". I am writing this tutorial to make people aware so please make sure that you are not using this tutorial in any illegal way. 



This tutorial is just for educational purpose.



There's a app Outhere Called "Faceniff". FACENIFF is basically an Android application that lets users sniff and intercept web session profiles over Wi-Fi networks, stealing other users' credentials through which you can attack your victim's Facebook, Orkut, Twitter and much more accounts in a minute. Isn't it Cool :P

 

You Can Also Check :- How to Hack Facebook Account


Note :- The Tutorial Only Works if you and your Victim are On Same WiFi Network

Follow The Given Steps Below :


1) At First Download Faceniff from below HERE
2) Connect to the working network connection and open the FaceNiff app.
3) Now click the red button and it will then turn green when the sniffer is on.It is like Firesheep for android devices. 

Firesheep is a Firefox add-on that allowed unscrupulous users to do the same thing. FaceNiff has a leg up on Firesheep though, since the app runs on Android phones, doesn’t require any real customization to run, and even supports WPA encrypted wireless networks, as long as you’re already on the network.

4) Press the enter button and It would show a list of all the accounts which are connected to the network and you could hi jack into that all accounts.

5) Click on the account which you wish to hack and you will automatically logged in the account in which you wish you to. =D

6) Now you can do whatever you want with the hacked account

Note :- The App Only Work On Rooted Android Devices

You Can Also Check :- How To Use Original Domain Address for Phishing page

Tips to protect yourself against this App 


1) The fix for most people is to enable HTTPS for every service where it’s available.

2) You can protect your internet connection when you use public Wi-Fi at a coffee shop or airport with a VPN, either to your office or school or a free service like Hotspot Shield or Hamachi. 

3) Alternatively, you can just not connect to public wireless networks and tether to your phone or use your wireless carrier’s connectivity options instead.
Hope You Enjoyed Our Article Please Recommend Us On Google  



thanks

Read More

Monday 10 March 2014

How To Transfer Balance From Aircel,Airtel,Idea,Bsnl,Vodafone,Docomo | .::APAJR::.

| |
0 comments
Hi friends,now i'm giving a trick to how to transfer you balance from your phone to another phone.Try this trick and transfer balance for all operators 


 

1. Vodafone Balance Transfer Trick

Go through the following steps:
Step1: Dial *131*Amount*friend vodafone mobile no# [eg: *131*50*9052XXXXXX#]
Terms and conditions: Charges Rs.1/- for balance transfer

 

 

2. Airtel Balance Transfer Trick

Follow the Steps below:
Step1: Dial *141# and follow the instructin
OR
Step2: *141*1*Amount*Mobile Number# [eg: *141*1*5*9910XXXXXX#]

 

 

3. BSNL Prepaid Balance Transfer Trick

Follow the steps below:
Step1: SMS ” GIFT friend Bsnl number amount ” to 53733 or 53738
[eg: GIFT 949XXXXXXX 50 ]
Terms and Conditions apply.

 

 

4. Idea Balance Transfer Trick

Follow the below Steps:
Step1: Dial *567*friend mobile number*amount#
[eg:*567 *9092 XXXXXX*50#] Finish.
Term and Conditions: You Will Be Charged Rs/- 2 For this Method.

 

 

5. Tata Docomo Balance Transfer Trick

Follow the steps below:
Step: SMS “BT Mobile Number Amount” and send it to 54321[eg: BT 72078XXXXX 50]

 

 

6. Uninor Balance Transfer Trick

Follow the below steps:
Step1: Choose the amount to transfer.
Step2: Dial *202*friend mobile number*amount#
[eg: *202*962XXXXXXX*50#] Finish your amount has been transferred.



7.Aircel Balance Transfer Trick


Follow the below steps:
aircel users can transfer balance upto rs 100 

transfer code

 


*122*666#

Terms and Conditions: Minimum balance should be rs.5/-



Important Note:
1. Balance Transfer Code work between same networks  like Vodafone to Vodafone,  Airtel to Airtel etc.
2. Terms and conditions apply for balance transfer.
Read More

Hack FB account via a Tabnapping | .::APAJR::.

| |
0 comments
                           





                    



Tab Napping 

 Tabnapping is a new form of phishing that is hitting the internet now. With the conventional form of phishing, for example, you might receive an email that is supposedly from your bank, and it might ask you to login and update or confirm your account details, of course, there would be a link to your banks website in the email for you to click, which would take you to a page that looks identical to your real banks login page.


How does it works




Tab napping is more sophisticated than the phishing scams we’ve seen so far, and it no longer relies on persuading you to click on a dodgy link. Instead it targets internet users who open lots of tabs on their browser at the same time (for example, by pressing
CTRL + T).

 if you have multiple tabs open and you are reading the page on your current active tab, any of the other inactive browser tabs could be replaced with a fake web page that is set up to obtain your personal data, the web page will look exactly the same as the page you opened in the tab, you probably wont even even know it has been replaced with a fake page.
fraudsters can actually detect when a tab has been left inactive for a while, and spy on your browser history to find out which websites you regularly visit, and therefore which pages to fake.
This may surprise you, but phishers and fraudsters in general can actually detect when a tab has been left inactive for a period of time, which means they can spy on your browsing history, this tells them which websites and web pages you visit on a regularly basis, so they'll know which bank you use and which email account you use, whatever you view, they'll know about it, which means they'll know which fake pages to make to replace the real pages in your inactive tabs, you've now left yourself open to become a victim of tab napping.


Steps



First of all you have a web hosting site and if  you don't have then you create a free web hosting site on 000webhost .  



  •  Now download the phishing and script here.Download
  • Upload all the files and folders to your website.  
  
  • The website contain a game and send your website address(your tab napping website where you upload all the files) to your friend or anyone else whose facebook account you want to hack and tell him/her that if your are intelligent or smart or say anything else then play this game and win it.
     

  •  Actually the game is very dificult and he/she will not win in less time and he/she will goto another tab in browser like facebook,google,youtube ,yahoo etc and when he/she came back to the website , it will be automatically redirected and saying them to login with facebook account to continue
 

  • When your victim log in with facebook account then her/his password will saved in your website and he/she will be redirected to main game page.
  •  Now just open=======http://www.your-website.com/fb/password.html------and you will see the email and passwords.
 Thanks for Watching
Read More
Powered by Blogger.