Showing posts with label Articles Written By AffanSofts. Show all posts
Showing posts with label Articles Written By AffanSofts. Show all posts

Sunday, April 27, 2014

Hack Facebook Password Using Keylogger

Tutorial





Hello Friends, in my previous post i have explained 4 ways to hack Facebook accountpassword, where i have discussed the second best method to hack Facebook password is using Keyloggers. Today i will explain you how to hack Facebook password usingkeylogger.

Today i will explain you in detail with snapshots how to create your Facebook hackerkeylogger, its a 100% Fully undetectable keylogger you can check this file using Virus total.  Its a 100% FUD remote keylogger with several advanced features. 
Today i will disclose you how i hacked 19000+ accounts, its so easy that anyone can do it. On my website you will never get any infected tool. If you have any doubt or feel something suspicious always test the link or file with virus total website before downloading. Never believe any website including mine also, always scan download links with virus total website or any such website before downloading it. Download it only when it does not have any virus.

Hack Facebook password using Keylogger Involves following steps:
1.  Create your Server that will hack passwords.
2. Extract the Icons from any software
3. Bind the Keylogger to make it Hidden
4. Spread your keylogger to victims

Note: This tutorial is for Educational Purposes only. I and Hackingloops is not responsible for any misuse of knowledge.

Let's start Facebook hacking tutorial in detail :

STEP1 : Create Server for Hacking Passwords
First of all for hacking any facebook account password, we have to create ourkeylogger server that will run on victims machine or PC and capture his keystrokes and mail us on the email account that we will use to build the keylogger. The keylogger server building process consists of several steps. 
The steps involved are mentioned below in detail:
1. First of all download the Keylogger.
Download Keylogger from hereCLICK HERE TO DOWNLOAD 

DOWNLOAD BINDER HERE: CLICK HERE TO DOWNLOAD BINDER
2. Extract the RAR file. Now you will get one Folder and three files as shown in below snapshot:

how to hack facebook account and passwords using keyloggers
Snapshot of Extracted Files
 3. Now open the Keylogger file. Here you will need gmail ID and password. For safer use create a fake Gmail account and use it here as shown below:

learn how to hack facebook passwords
Facebook Hacker Initial Step
4. Now Click on server settings as shown. Here enter the time after which you want to receive reports, its always preferable to use 20 min timer for receiving files.  And Click on Output box to choose location of file and give it any name. Its always recommended to use system process name to make it undetectable like svchost or check any process name from your task manager and name it. Other fields are optional. The complete snapshot is shown below:

hacking facebook passwords
Second step to choose time interval and name of output file
5. Now Click on Log and Result Setting. In Log EMail Title enter the subject of email like Mykeylogger report or simply my report or something else that you like. Also Click the last two options that i.e add Computer name and add victim name. The snapshot is shown below:

hack facebook account
Hack Facebook account password using Keylogger
6. Now Click on Other Options.  In this section you just have to do one thing. Most hackers prefer warning message POP up but I love keylogger using any message. So unclick message button. Because when you bind it with any other software then it should not any warning messages otherwise it will be detectable.

7. Now at last click on Build Keylogger. Now after you click on it you will see your keyloggerfile at location that you have chosen in 4th step. Now this keylogger server file will be used to bind with any other software in Binding Step.

8. Now you keylogger server is ready that you will use to hack Facebook accounts. That's all for the server creation step now move to second main step.


Step 2.: Extracting the Icon file from any installer(resource hacker)
1. Open the Resource hacker folder and open the reshacker file.
2. Now go to its menu and open any setup file. Suppose we want to attach our keylogger to Ccleaner setup file. So open the Ccleaner setup with resource hacker. 
3. Now in menu there is one action button click on it and then click save all resources.

how to hack facebook passwords,facebook hack, how to hack into someones facebook
Resource Hacker to Extract the Icon files from software's


4. Now save all the resources to desktop or any other location of your choice.
5. It consists of two files one is icon file and other is res file . We only need icon file, so you can delete the other file i.e res file.
6. Now we have Icon of installer file(as discussed above Ccleaner setup Icon).



Step 3: Bind the Keylogger server with any software
1. Now Go to keylogger folder and open the Binder.
2. Now Click on + button given below to add files.
3. Now add the keylogger server and the set up of software (i.e. in our case it's Ccleaner setup).
4. Now in menu of Binder, Go to Settings. There select the icon that we have generated in the previous step and set the location of output file as shown in figure.

facebook password hack,how to hack someones facebook,facebook password hacker,facebook hacking
Bind the Keylogger server to Software


5. Now again go to File's menu in Binder and click on Bind files.
6. Now your Binded keylogger is ready. Now you have to spread it or send it to the victim that is your friend.



Step4 : How to Spread Keylogger or send it to victim or friend
1. Now you have one Software setup file with keylogger attached with it.(In our case we have Ccleaner setup with keylogger attached with it.
2. Now Spread your keylogger through forums. You might be a member of various forums use them to spread your keylogger in form of software posts. You can use various software's to spread them that users frequently download.
3. Spread it through pendrives or USB hard drives. Suppose a friend asked you for a software give it the software that has keylogger attached with it. 
Note: you can also attach keylogger with images also. But that can be detectable by antivirus. So avoid such type of hacking.
So isn't that so easy to hack anyone's Facebook account in just few minutes. 

How to protect yourself from these hacks?
Prevention is always better than cure so always follow these steps:
1. Don't use cracked softwares and don't download them from unauthorized websites.
2. Always keep your antivirus and anti-spyware up to date.
3. Always scan the files before transferring them to your USB.
4. Do not allow other users to use your PC i.e password protect it.

Note: Hacking Email accounts is illegal. This post is just to aware you how easy is to hackFacebook and email accounts. So that you cannot fall into the traps of hackers.

I hope you all have liked it. If you have any queries ask me.  Please comment if you like my posts. Thanks for reading....

BEH Online Ethical Hacking Class : Configure Machine for Hacking...!! By AffanSoftS

Hey friends, welcome to HackingLoops. Before starting BEH(Born Ethical Hackers) classes we must configure our system or machine for performing hacking tasks. Because performing hacking can cause damage your systems too and also its one of the major step for beginners to know which all tools we need to install on our system to learn Hacking. Below i have provided quick Hacking setup list which will help you to perform Ethical Hacking Lab tasks with ease. So go through them and install below items.

Born Ethical hackers
Tools for Born Ethical Hackers Lab


List of Tools need to be pre installed for setting up your system to perform BEH Lab tasks :
1. VMware ( for installing and mounting virtual operating systems).
2. Backtrack or Matruix OS Linux Live Disk or Operating system which need to be mounted on  VMware.
3. Installing servers :
a. IIS for windows based servers.
b. Apache Tomcat.
c. MySQL workbench.
d. Wamp for running PHP codes.
4. Microsoft Visual Studio ( full package with XML spy)
5. IDA pro
6. Swf Flash Decompiler
7. Olydbg
8. VB Decompiler 
9. Filezilla FTP client
10. Resource Hacker
11. NMAP
12. Wireshark
13. Mozilla Firefox with Firebug or Google Chrome or IE8 + 

The above is the mandatory list that you must have before performing Hacking stuff.

The other tools we will discuss on regular basis with our hacking classes. I hope you all will be able to install these tools on your machine. You might face problem in doing so, i am ready to help you out. If you have any issues while installing these or any problem in configuring those, feel free to ask.

Now its only 4 days for BEH class to start.

Learn Ethical Hacking BEH | Footprinting Book 3 Online...!! By AffanSoftS

Learn ethical Hacking with HackingLoops Campaign BEH (Born Ethical Hackers) third book is online now. In our last issue we have started learning about preparatory phase of any hacking attempt i.e. Information gathering or Footprinting. Let�s have a brief overview what we have covered in our last BEHC issue. We have started with the introduction part of Footprinting or information gathering and then we have covered several Footprinting and information gathering techniques namely how to get an IP address of victim, different techniques to steal IP address, Ping sweep, Flood Ping DDOS attack, Trace route, WHOIS information gathering, extracting history details of any domain, owner contact information extraction, DNS queries and DNS health check to discover domain level bugs. This was all what we covered in our last issue. In this issue we will continue learning about other information gathering techniques. 

Footprinting
Born Ethical Hackers Club : Book 3


The techniques that we learn in this issue are mentioned below: 
  • Overview of Last BEH Issue: Footprinting or information Gathering Techniques
  • Search Engine discovery
    • Dorks
  • Spiders, Crawlers or Robots discovery
  • Web Data Extraction or Web Scraping
    • Fetching the Data
    • Dealing with Pagination
    • AJAX CONTENT EXTRACTION!
    • Use CSS Hooks
    • Get a Good HTML Parsing Library
    • When In Doubt, Spoof Headers
    • Content behind a Login
    • Rate Limiting
    • Poorly Formed Markup
  • Reviewing Metadata and JavaScript�s
    • Parser and Markup information
    • Using Page Speed to Dig Critical Information about website
  • Automated Data Extraction using Hack tools
    • Exiftool
    • FOCA
  • Web Application OR WEB SERVER Fingerprint
    • Manual Fingerprinting
    • Automated Fingerprinting
  • People Search: Prepare Social Engineering Attack Profile 

DOWNLOAD BEH ETHICAL HACKING FOOTPRINTING BOOK 3 (Direct Download)

Alternate Download Link

We hope you all will enjoy the book. If there are some spell mistakes or other formatting issues please mail me @ samsoftpk@gmail.com

5 Ways to Ensure Security of Networks...!! By AffanSoftS

Twenty-four hours a day, seven days a week, 365 days each year � it�s happening. Whether you are awake or asleep, in a meeting or on vacation, they are out there probing your network, looking for a way in. A way to exploit you; a way to steal your data, a place to store illegal content, a website they can deface, or any of a hundred other ways to mess with you for the simple joy of it all. And they can do this with relative ease, even in an automated fashion, with simple tools that are readily available to all.

ways to secure networks
5 Ways to ensure security of Networks

I�m talking about network scanners. The bad guys use them all day every day to assess networks around the world because a network scanner is one of the easiest and most efficient ways to find the cracks in your armor. If you want to see your network the same way an attacker would, then you want to use a network scanner.

Network scanners perform automated tests of systems over the network. They don�t require agents or any other software to be installed on the �target� machines. They assess a system based on what they can get from it over the network. It�s the same sort of reconnaissance that is performed against your network around the clock, and that is why you want to do it too. Here are five checks you should perform regularly using your network scanner.

1. Vulnerability assessments 

Network scanners can use databases of known vulnerabilities to check for anything that might present a risk to your systems. Update that database regularly since new vulnerabilities are discovered all the time.

2. Port scans 

A port scanner is a very fast way to determine what sort of systems are running onyour network, and are probably the most common sort of recon you will see. Determine what should be accessible on your network from the Internet, validate that with a port scanner, and then use a combination of firewall rule cleanup and system hardening to shut down anything that doesn�t belong.

3. Default password access 


There�s a reason there are tens of thousands of default password lists on the Internet-they make for a very easy way to get in. Don�t make it easy for an attacker. Make sure everything on your network has been configured with a strong password to prevent unauthorized access.

4. Running services 

To compromise a service, it first has to be running. Every server has to run certain services, otherwise it�s just a space heater, but many run unneeded services either because they are on by default, or the admin who set it up didn�t know any better. Use your network scanner to find all running services, and then shut down the ones that are not needed.

5. Remote access 

Speaking of default passwords, in about half of the security audits I have performed for customers, I have found remote access software that they didn�t know about, running on systems that made it very easy to get in. Use your network scanner to find all of the Telnet, SSH, RDP, GoToMyPC, LogMeIn, PCAnywhere and other applications that can provide remote access to a system, and shut down all the ones that shouldn�t be there. Finding all those �secret� ways in, and closing up the unapproved ones, will greatly reduce the risks to your network.

Using a network scanner, set up a regular schedule of scanning your systems for these five critical checks. Scan from the outside to see what the firewall cannot stop, and scan from the internal network so you understand just how much damage an inside threat can cause. Knowing your systems the way an attacker will, helps you to ensure everything is safe.

This guest post was provided by Casper Manes on behalf of GFI Software Ltd. Learn more about the importance of network scanning by downloading the free eBookA first aid kit for SysAdmins. All product and company names herein may be trademarks of their respective owners.

Source :The hacker news

Secret Hack Codes for Android Mobile Phones...!! By AffanSoftS

Secret Hack codes are those codes which are usually hidden from users for any misuse and exploit. As we all know android is very new platform and thus very few hack codes of androidsare there on internet. Today i am sharing all the hack codes of androids cellphones that i know. And i surely hope you can't find codes better than that. So friends let's hack and explore our android Phones. I have tested these codes on my Phone Samsung Galaxy having an Android OS version 2.2. I am sure these will work on all previous versions.

hack android, hacking android mobiles, hacking android OS, hack codes
Secret hacking codes for Android Mobile Phone


Secret Hacking codes for Android Mobile Phones:

1. Complete Information About your Phone  

*#*#4636#*#*
 This code can be used to get some interesting information about your phone and battery. It shows following 4 menus on screen:
Learn How to unlock 3 Hidden modes in Android Phones :
3 Hidden Modes in Android Mobile phones

2. Factory data reset
*#*#7780#*#*
This code can be used for a factory data reset. It'll remove following things:
  • Google account settings stored in your phone
  • System and application data and settings
  • Downloaded applications
It'll NOT remove:
  • Current system software and bundled application
  • SD card files e.g. photos, music files, etc.
Note: Once you give this code, you get a prompt screen asking you to click on "Reset phone" button. So you get a chance to cancel your operation.

3. Format Android Phone

  *2767*3855#
Think before you give this code. This code is used for factory format. It'll remove all files and settings including the internal memory storage. It'll also reinstall the phone firmware.
Note: Once you give this code, there is no way to cancel the operation unless you remove the battery from the phone. So think twice before giving this code.

4. Phone Camera Update

*#*#34971539#*#*
This code is used to get information about phone camera. It shows following 4 menus:
  • Update camera firmware in image (Don't try this option)
  • Update camera firmware in SD card
  • Get camera firmware version
  • Get firmware update count
WARNING: Never use the first option otherwise your phone camera will stop working and you'll need to take your phone to service center to reinstall camera firmware.

5. End Call/Power

*#*#7594#*#*
This one is my favorite one. This code can be used to change the "End Call / Power" button action in your phone. Be default, if you long press the button, it shows a screen asking you to select any option from Silent mode, AirPlane mode and Power off.
You can change this action using this code. You can enable direct power off on this button so you don't need to waste your time in selecting the option.

6. File Copy for Creating Backup

*#*#273283*255*663282*#*#*

This code opens a File copy screen where you can backup your media files e.g. Images, Sound, Video and Voice memo.

7.  Service Mode

*#*#197328640#*#*
This code can be used to enter into Service mode. You can run various tests and change settings in the service mode.

8. WLAN, GPS and Bluetooth Test Codes:

*#*#232339#*#* OR *#*#526#*#* OR *#*#528#*#*           - WLAN test (Use "Menu" button to start various tests)

*#*#232338#*#*                  - Shows WiFi MAC address

*#*#1472365#*#*                - GPS test

*#*#1575#*#*                      - Another GPS test

*#*#232331#*#*                  - Bluetooth test

*#*#232337#*#                    - Shows Bluetooth device address

9. Codes to get Firmware version information:

*#*#4986*2650468#*#* - PDA, Phone, H/W, RFCallDate

*#*#1234#*#* - PDA and Phone

*#*#1111#*#* - FTA SW Version

*#*#2222#*#* - FTA HW Version

*#*#44336#*#* - PDA, Phone, CSC, Build Time, Changelist number

10. Codes to launch various Factory Tests:

*#*#0283#*#* - Packet Loopback

*#*#0*#*#* - LCD test

*#*#0673#*#* OR *#*#0289#*#* - Melody test

*#*#0842#*#* - Device test (Vibration test and BackLight test)

*#*#2663#*#* - Touch screen version

*#*#2664#*#* - Touch screen test

*#*#0588#*#* - Proximity sensor test

*#*#3264#*#* - RAM version

Why don't Hack all android applications and download them from free, know how to download allfull android apps and games for free:
Hacking paid android apps and download free
I hope you all have enjoyed these hack codes for android mobile phones.. I just loved them, If you have any issues ask me in form of comments.

If you like my posts please comment as they motivates me to post more.

How To Hack Facebook Account Or Password...!! By AffanSoftS

Facebook is becoming secured day by day, it daily fixes several bugs found by users. Recently we have noticed that it has also tried to fix the Phishing loophole by validating the previous URL from which the user is arriving to Facebook. It validates from which source user is arriving on Facebook and hence if its a fake Facebook Page, it warns its users that Please Change your Password Immediately as you might be a victim of Phishing. This validation made Facebook account passwordssecured from thousands of Novice and Script Kiddie Hackers but L33T  still can't be stopped, as L33Ts never stop, they keep on moving to new alternatives.
So we moved to advanced mode of Phishing like Tabnabbing, meta refresh trick, browser side bypassing and even manipulating host(hint is sufficient as i will not disclose this one)..when i feel bored i use this technique to hack accounts and passwords of Facebook. Just try to figure out what we can do using Host File :P ..Not going to tell more than that...
Ok.... Ok... Lets learn today the technique called Host Name IP mapped based Phishing. You all will be really happy to know that i have written my third white paper on the same topic and you will be more than happy by knowing that this technique of Phishing is invented by Lokesh Singh (:P none other than me...).. So friends lets start our tutorial.

hack facebook account password, hacking facebook accounts
How to hack Facebook account and passwords

Note: This is for Educational Purposes only. Don't misuse it.:P Please...

Requirements:
1. Facebook latest Phisher or Fake Pages.
Download Latest Facebook Phisher here: Download Now
2. Free Web hosting server to upload those Phish Pages.
3. Spoofing URL using Host name mapping technique.

Let me provide you little background what i will teach you today. I know most of you already know phishing but for first timers, let me explain a bit. Phish Pages meansFake Pages that looks absolutely similar to original pages and the technique of using those Fake pages to hack anyone's user name and password is called Phishing. And technique which we use to send these fake pages to victim and prompt him to believe that they are real is called Social Engineering. But i think this we already know, what's new we are going to discuss today.. Ahhh... Just wait and hold your pants tight because today i will be breaking all the policies and ethical norms because until and unless we don't know how hackers do things we will never able to stand in front of them.

What is New???
We all know that fake pages can only be detected using two techniques:
1. Verifying the URL in the address bar, if its a fake page then URL must be different from original one.
2. Using any web security toolbar that warns users for fake pages like AVG toolbar,Norton Online security toolbar etc..
But what if you open www.facebook.com manually in your web browser and fake page opens and URL in the web browser remains www.facebook.com only. That means first technique to detect fake page go in vain. Now for second technique, all online web security toolbar detect fake pages by comparing the input  by user in URL address bar and original page URL. If both matches then its not a fake page else its a malware page. 
So friends today i will teach you how to make your fake pages open whenever victim opens Facebook in his/her web browser. Ahhh... You will be now thinking its impossible. But as i have told you i have written a white paper on Advanced Phishing techniques. So its 110% possible to load fake web page whenever user opens www.facebook.com or any other website like Yahoo, Hotmail or anything... Below are the steps and video for the same.
I had made the video as well as written the steps in detail which will tell you everything step by step.

Steps to Hack Facebook account or Password:
1. Download the Latest Facebook Phisher.
2. Extract the files, you will get below 4 files:

  • index.php
  • facebook1.php
  • passwords.html
  • thanks.php
3. Now go to any free web hosting web server to upload these fake pages. 
Note all should be uploaded at root means not in any folder. Just at first level directory.

4. Now you need to find the correct IP address of the account you have created onweb hosting server.
5. When you get you fake page's IP address, now what we need to do is that we have to add the entry of the IP address against the www.facebook.com in victim'shost file located at below location.
C:\Windows\System32\drivers\etc
6. There are several ways of doing that, i have written my own php scripts for doing the same but i cannot share that with you guys because there are chances of misusing it. So i explain you the logic and rest you need to figure out how you will edit victims host file and append your Fake Page IP address against www.facebook.com.

7. Now after doing steps 5 and 6, whenever user open the www.facebook.com, your fake Facebook page will open and victim will never be able to visit the original Facebook, so he cannot even been able to change his password...:P

8. I have added an extra logic to my scripts, whenever victim enter the password and hit enter button, i am removing the entry of Fake IP address against www.facebook.com from the host file by making it spaces. So it will be for him for one time only which sounds more spoofed. Its just a single line code but i cannot tell you guys because it will make this article completely unethical. 
I will teach you techniques but i will not do spoon feeding because if you want to become good hacker then you need to use your brain too. I love to be called Destructive but i do constructive works..:P like this one...rofl...

9. Everything other than this is similar to normal phishing technique..

I hope you all like it... If not here is the video of the complete hack in detail with each and every step shown practically. 
Note: In video i am using my localhost as web server which in your case will be uraccountname.my3gb.com or other means where you uploaded your files.
Also you must know 127.0.0.1 is localhost IP address. For you case your webhosting will be the IP address that will be used to map against facebook.
Ok now lets watch the video..
or simply download it

Right Click on video to view play pause forward controls:



I hope you all love this tutorial :P you have to... Because its the best method for hacking anyone's account..
At least i can hope this article deserves a big smile on you face with looks of being shocked and a appreciation comment that will make me smile...:D
Subscribe to RSS Feed Follow me on Twitter!