Showing posts with label learn hacking - for beginners. Show all posts
Showing posts with label learn hacking - for beginners. Show all posts

How to Hack and Spy on a Webcam

1 comments

I get a lot of emails where my readers are asking for help to find out if his/her partner is cheating on them, chatting to someone she/he shouldn't be, etc. So here i decided to answer this question, and to get it clear once for all.
Today there are softwares called RATs (Remote Administrator Tools) that are mostly used for malicious purposes, such as controlling PC’s, stealing victims data, deleting or editing some files. You can only infect someone by sending him file called Server and they need to click it. With a RAT, you can make the party download files, view their desktop/webcam, and more.

Except the advantages of using a RAT, there are also few disadvantages that you should know about:

1. The RATs are detected by the most anti-virus software.
2. You can get infected by using a RAT.
3. You can get traced when you rat somebody.

In this article i am going to share A step by step guide that allows you to remotely access anybody's webcam, microphone, files and desktop from anywhere in the world, without to worry about the things i mention above.


You can install this on any PC and monitor who ever uses that PC, or even someone passing by. There are no system requirements and this works 99.9% of the time.

This also includes the ability to:
  • Access almost any computer anywhere without knowing the computer password or IP Address.
  • Record and watch any webcam at the same time.
  • Record desktop action and watch at the same time.
  • Dig deep into files, download then and upload new ones.
  • Watch a webcam from any PC in the world.
  • Monitor activities whenever that PC or laptop is online.
  • Save all recordings in a number of file types.
This software costs $19.95, but I think the price totally worth for a software like this one.

I have tested this from every single angle possible and have had the BEST success rate with it.

Download Webcam Spy Hack

How to Make a Trojan Undetectable by Antivirus Software

2 comments

I've been writing a lot about trojans, and keyloggers on this blog. It's very simple to make a trojan/keylogger, but to make it undetectable by the antiviruses is the hard part. Nowadays crypting trojan don't give a good result if you use use a public crypter, otherwise you need to buy a private edition or to hex it. Here i am going to show you how to make your trojan, keylogger, or RAT almost FUD (Fully Undetectable) by any anti-virus software.

We gonna need a Privacy Protection Software. This kind of software is used by program creators to protect their creation from cracking and reverse engineering. We gonna do the same to a trojan and you are going to see the result.

1. First of all you need to download the program: PC Guard for Win32

2. Open the program, and in the "Application filename" browse your server's location.


2. Click on the "General" tab, and check the options like on the image below.


3. Now do the same with the "Security & Encryption" tab. Look at the image below to see what options to check.


4. At the end choose "Protection Methods", and select the following options:


We are done!


The Scan Results:


Poison Ivy server:

Bifrost server:


How to Make Virus/Trojan Undetectable

0 comments

Learn how to make a virus/trojan undetectable by antivirus softwares

Previously i've posted How to Create a Computer Virus. It's very simple to make a virus, but to make it undetectable by the antiviruses is the hard part. Some time ago i found a great tutorial how to make trojans undetected on Hackforums.net, and here i want to share it. In this post i'm going to show you how does anti-virus software work and how to make a virus that won't be detected by any anti-virus software.

Most anti-virus scanners rely on a database of signatures for known viruses. Once a new virus is spread wide enough that it has been identified as malicious, the anti-virus vendors scramble to come up with a fingerprint to identify that strain of malware in the future. The obvious flaw in this process is that a new piece of malware will bypass the scanners by default, until it is widespread enough to be noticed by security researchers or picked up by a dummy node.

Here i will be showing you 4 ways of how to make a Trojan undetectable to Anti-Virus software. I am sure there are more then 4, but these should help get you started.


1. Encryptors/Compressors:

You would think this should be the easiest way to UD (Undetect) a Trojan...but alas, it is not. The problem is simply this, most people use the same Trojans and Packers so often that Anti-Virus software knows pretty much all the signatures. They either use Ardamax Keylogger, Optix Pro, Beast, ProRat etc. for Trojans. For Packers they use UPX, PECompress, AsPack, Mophine etc. Again, none of these combinations work because all the signatures have been flagged. The best way this option will work is to find lesser known Packers and Trojans to work with.

Try a Google search for Executable Packers. Get a few that you have not heard of before or that have a decent rating. If it is not freeware, I am sure there will be a Crack for it. For Trojans, three good resources are VXChaos, LeetUpload or VX Heaven. Remember to pick the ones that are not well known and try to mix and match those Trojans and Packers.


2. Byte Adders:

This technique allows you to add junk bytes to your Trojan as to confuse Anti-Virus software. It does this by moving the code around inside the executable as the bytes are being added. This means that the signature will not be in the place the Anti-Virus expects it to be. A good tool for this would be StealthTools v2.0 by Gobo.


3. Hex Editing:

This is much more complicated and takes a lot more practice to get right. The idea here is to find the signature that Anti-Virus software has flagged inside of your Trojan and change it by adding a different byte, or changing the Offset to one of its other equivalents.

The three things you will need here is a File Splitter, Hex Editor and a Anti-Virus Offset Finder. The File Splitter will cut your executable into smaller files (preferably 1 byte per file). You then use your Hex Editor on the file that holds the signature and change that signature. Or, you can keep the file complete and use your AV Offset Finder to find the Offsets automatically and just change the signatures found with your Hex Editor.

Step One: Place your Trojan Server in a folder.

Step Two: Split your Server with your File Splitter into 1 byte per file. This may make a lot of files in your folder (depending on how large the Server is), but it is worth it because you will know that only one or two of those files has the signature that is flagged and all the rest are clean.

Step Three: Scan your folder with your Anti-Virus software and make note of which files it says are infected. Those will be the ones you edit.

Step Four: Open up each infected file with your Hex Editor and change the Offset. There is no fool proof way of doing this, you will have to experiment. Since this will be a 1 byte file, there will not be much you need to change. Just change one character or byte at a time and then save your progress. Re-scan to see if it worked. If it did not, go back and try again.

Step Five: Once you feel that you have found all signatures and changed them, Rejoin your files with your File Splitter and test your Server to see if it works. Remember that too much Editing will make your Server useless so be careful.

(Optional) Step Six: Another good way is to use a Anti-Virus Offset Finder that will find the correct Offset automatically so you do not have to search for them or split your Server. Get AV Devil 2.1 to find the Offsets.

You have to remember that different AV software use different signatures, so scan with as many as you can.


4. Source:

The very best way to make an undetectable Trojan has always been to make your own. I know it may seem like a daunting task to do, but it could be simpler then you think. Here I will give a few options on how to do this. The reason why you would want to make your own Trojan is the fact that each time it is compiled, it is given a new signature. Changing just a single string in the Source code can make it undetectable.

Option 1: Free Trojan Source Code.

Finding free Trojan source code is not hard. Again, going to places like VXChaos or Planet Source Code can yield a plethora of really good and lesser known Trojan code. Pick what Programming Language you like and look for examples. Not much needs to be changed to makes these undetectable. A simple recompile will sometimes do the trick.

Option 2: Decompiling.

Some may call this "Stealing" source code. I like to call it "Borrowing". The first thing you need to know is what language your Trojan is in. Lets say your Trojan was Optix Pro, your programming language would be Delphi. A good Delphi Decompiler would be DeDe. Decompile Optix Pro with DeDe then recompile it with a Delphi compiler and viola! Just change a few strings around within the source and you should have a undetectable Optix Pro.

Another way would be to open your Trojan with a Debugger or Disassembler. Copy down the ASM code and then recompile it in a ASM compiler. That maybe a bit more tricky, but the idea is the same. Try to convert the executable into pure ASM as best you can. There are many free Debuggers/Disassemblers, Google for them.


A word of warning, if you do find your own way of making a Trojan undetectable, DO NOT disclose it. You will find your Trojan detected in a very short amount of time. What I have taught here are just the basics of Trojan UDing. It will be up to you to use this knowledge and make it work. Also, DO NOT use any online virus scans to see if your Trojan has been detected. Your signature will be captured and sent to AV companies.

Well I hope this tutorial helped you out in some small way. Just one of the examples above could make an undetectable Trojan, or you may need to mix and match them. Try what you can, don't be afraid to experiment, and good luck!

How to Create a Computer Virus

0 comments

Virus Software: How to make Virus/Create Virus

I have previously posted about How to Create a Fake and Harmless Virus. In this article i want to show you how to create a real virus using Virus Software. I compiled a list of some great virus maker softwares. Now you don't have to know any programming or coding to make virus. Simply use one of these Virus softwares and you can easily make virus for yourself. These virus softwares provides you with various options which you can use to make virus according to your preferences. The virus programs are tested to well working on all Windows systems.

Here is the list of the softwares that allows you to make Virus:

1. In Shadow Batch Virus Generator

1. First of all download the virus maker from here

2. Run "In Shadow Batch Virus Generator.exe" application to see something like this:


3. You can use various options to make virus to suit your needs. You can:
  • Infect files of various extensions
  • Insert virus in startup menu, Kill various processes.
  • Disable all security services like Windows Defender, Antivirus, Firewall.
  • Rename file extensions, spread virus via file sharing.
  • Create new admin account, change user account password.
  • Block various websites, download trojan files to victim computer, shutdown victim computer and much more.

4. After selecting various options, move on to "Creating Options" tab and hit on "Save as Bat". Assign name to the virus and hit on Save.

5. Now, you have your virus ready to hack your victim. This virus maker is undetectable by the most antiviruses.

I am not responsible for any action performed by you. Also, do not try this virus on your own computer. This virus software is one of the most efficient virus software used today.


2. JPS Virus Maker


This is also a great virus maker with many features in it. Check all the features of JPS Virus maker here.


3. TeraBIT Virus Maker


A powerful virus maker for you. Look for updates here

Download JPS Virus Maker and TeraBit Virus Maker.

These two virus makers are detected as a viruses by the most anti-virus softwares, but they won't harm your pc in any way. Before you run these virus makers disable your anti-virus temporarily.

If you know other virus makers i want to hear your suggestions.

Know More About Phishing Attacks

0 comments


Phishing is a method of stealing login info (usernames and passwords) by directing the victim to a clone (fake) login page, that logs the login info without the knowledge of the victim. Such clone website is known as a phisher. eBay, PayPal and other online banks are common targets. Phishing is an example of social engineering techniques used to fool users. Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical measures.

Recent phishing attempts have targeted the customers of banks and online payment services. Social networking sites such as Orkut are also a target of phishing.

Spoofed/Fraudulent e-mails are the most widely used tools to carry out the phishing attack. In most cases we get a fake e-mail that appears to have come from a Trusted Website . Here the hacker may request us to verify username & password by replaying to a given email address.

How to protect yourself against phishing?

  • Use your login info in the correct places only.

Don't ever put your login info anywhere else than the page you registered to, unless it's a trusted service, such as youtube or blogger, asking for your google account's info).

  • Make sure the website you're logging in isn't fake.

Whenever you login to a website, if you didn't type the URL (address) of the website yourself, i.e. if you clicked a link that led you to the login page (from message, website, search engine results), always check the url (address) to see if you're in the right place.

For instance, if you're logging in your facebook account, make sure the url appears as http://www.facebook.com/
Where a phisher page would look like http://www.facebook.freewebs.com/, or http://www.facebook.spam.com/, or any url whose part before the .com isn't exactly the same as the page you want to login to.

  • Make sure the links you're clicking aren't fake.

Whenever you're clicking a link, check where the link goes before clicking it. Links can be masked to appear as something else than the page they're leading to. For example, www.google.com leads to yahoo instead of google. Fortunately, in most browsers, whenever you point your mouse cursor over the link, the true location of the link is displayed on the bottom left part of the screen.
This is particularly important because it can protect you from another, rarer but more dangerous method called cookie stealing, which is basically automatically stealing your account if you're previously logged in the website.

Know that links to phishing pages are usually spread via email, and often represent impersonating trusted services and persons, such as making the email appear as it's sent from the website you've registered to, or a friend of yours whose account has been compromised.


What to do if you have spotted a phisher?



  • If the phishing attempt has been done via message, report the message in any of the following services:

http://www.reportphish.org/forwardphish.php
http://www.us-cert.gov/nav/report_phishing.html

  • If you received the message from a friend's compromised account, inform your friend, and other friends that might be in danger.


  • If possible, inform the admin of the website that the phisher is made for.

So the Bottom line to defend from phishing attack is

1. Never assume that an email is valid based on the sender’s email address.

2. A trusted bank/organization such as paypal will never ask you for your full name and password in a PayPal email.

3. An email from trusted organization will never contain attachments or software.

4. Clicking on a link in an email is the most insecure way to get to your account. 

Great Social Engineering Techniques for Hackers - Get People to Do What You Want

0 comments


I am having this "hacking/security" blog for more then a year now. Beside cyber security, ethical hacking and technology, I am also interested in some social/natural science fields, like philosophy, and psychology. In this article I would share some manipulation techniques that i know about from my previous knowledge, and experience. Now these techniques can be used in many different ways and I will leave it up to the individual to decide what those ways are. Please realize this isn't mind control and it will not make you able to convince people to do extreme things but maybe change a simple idea in someones mind and make them favor your ideas more. This methods can come in handy for many hackers. Lets start:


Sympathy/Empathy - Believe it or not making someone feel sorry for you can wield great results. You can convince people to do many things with just a simple guilt trip. Examples include a family members death, recent job loss, an scarring event such as being robbed at gunpoint, losing money, or even a simple bad day. Using this can make somebody not only do what you want but they won't feel regret over doing it.

Split Personalities - No this does not mean be nice one second and mean the next. This tactic is great for pressuring someone into something from two fronts. The basic idea of this is to act as two people. This cannot be done in person and is best done online. An example of this methods usefulness is to maybe convince someone to sell something at a cheaper price by having one side of you as friend saying great deal while the other says that they can barely do this and they're unsure if they should. The trick here is to play opposites in a way that pushes the person you want to trick into doing something they wouldn't otherwise do.

If you don't then someone else will - Nothing puts more pressure on someone then giving them the idea of loss if they do not take advantage of the situation. This can be great for selling items. The general idea behind this is to make the person feel as if they will lose a once in a lifetime opportunity if they give up on this offer. You can even use the Split Personalities in mixture with this.

Being Over Understanding - Nothing softens the heart than making a person feel that they're doing a good job. If a situation comes where you have been wrong pretending to be completely understanding can go a long ways. This can general make the person feel more entitled to give you a better experience.

That is all I can come with at the current moment. Please throw suggestion and feedback. This is technically Social Engineering, an art of getting people to tell you stuff that they usually wouldn’t disclose, through the use of words and your appearance. I personally hate these type of people. A good Social engineerer (or as I love to call these types of people, “Bullshit artists”), can make people believe nearly anything. It is always a good idea to be aware of people who you don’t know, but it is also good practice to watch people you DO know. Don’t be getting paranoid about things, because that isn’t what i mean, but Social Engineering is the EASIEST way to hack anything. Hope this helps people gain the upper hand in a poorly setup situation.

How to Detect Fake Emails

0 comments

Yesterday one of my readers asked me about the way to detect a fake mail. I thought that this can become a good point for writing an article. So, I am mentioning some tips to detect fake/fraud/spam mails.

How to Detect Fake Mails:

1. Lets get back to the example I illustrated in my article Fake Mailer. I had used "support@gmail.com" as the sender email address. No doubt, this was fake and the receiver will get the fake email sent by me.

2. Suppose you are the receiver. Now, I will tell you how to recognize this mail as fake. Open the email and hit on "Show Details".

3. Something you must know:



Whenever Google sends you any email, the email details will contain fields like:

- Mailed by
- Signed by (optional)


Also, most of the times, "Mailed by" field will have value:

*.bounces.google.com or
*.google.com


depending on the type of your mail. This is true for every genuine email from every mail provider.

4. But, these two fields will not be present in the details of Fake Mail. Also, if the mail details contain these fields, the value of these fields will not be *.google.com

Fake Mail without "Mailed by" field:



Fake Mail with "Mailed by" field.



As you can see, the "mailed by" field shows the hosting server's name and not the Google server. This means, this server is used to send you the fake email and most probably, the fake mailer is hosted on the same server.


You can also check out the header field to detect fake mails. Follow the steps:

- Open the mail. Hit on down arrow next to "Reply" and click on "Show Original".



- Now, check out "Received" fields. This field will show you the name of server from which the mail is sent. As you can see, we have used "emkei.cz" as our fake mailer. So, it has appeared in "Received" field.

More Tips:

- Fake Mail usually have attractive titles.
- Such mails address receiver as "Dear Customer" or such and do not use your real name.
- Never click on any link in emails. Instead, open such links manually in new tab. Refer my article Anti-Phishing measures for more information.

Follow these tips and you will be able to recognize fake, spoof, spam emails. If you know any other useful tip to detect fake or spam emails, please share it with us in comments.

What is Social Engineering?

0 comments

Social Engineering is the art of Hacking In Real Life. Social engineering is the art of getting people to tell you stuff that they usually wouldn’t disclose, through the use of words and your appearance.

A good Social engineerer (or as I love to call these types of people, “Bullshit artists”), can make people believe nearly anything.

I will use the example of someone trying to get someone’s password:

Now the most important thing is having a believable story. If you go to someone and say “hotmail have requested i get your password for account checking”, then they will most likely tell you to piss off.

One of the most common ways that i use, is “I’m doing a survey”. Make a fake survey, attach it to a clip board, and just walk up to the person and start asking him questions.

For example:
Hi, my name is Alexander, and I am doing a survey on how strong peoples passwords are. You will be surprised at how insecure most people’s passwords are, and you may find it extremely worrying about how insecure your password may be. If you don’t mind, would you allow me to ask you a few questions?

The person will think “insecure personal information” and 9 times out of 10 will agree to talk to you.

Ask them questions like “does your password contain letters numbers and symbols”, “how long is your password” (when they are counting, watch their lips to see if they spell the words/numbers out), etc.

You may also be able to give them the “i also have a good way of calculating how strong your password is. This isn’t necessary but you can give me a password you use most frequently and i can calculate how strong it is”, but that sometimes pushes the bar a little too much.

Prevention of Social Engineering

As you can probably see above, the power of SE can EASILY be used against people. It is always a good idea to be aware of people who you don’t know, but it is also good practice to watch people you DO know. Don’t be getting paranoid about things, because that isn’t what i mean, but SE is the EASIEST way to hack anything.

Here are some tips of keeping safe:

I cant have a complete list, because Social Engineers are constantly changing the ways in which they gain trust.
A few things to look out for:

Something that is too good to be true

If its too good to be true, then it probably is. Always make sure that the person is trusted, or is well known. Hey, don’t just go on that, the person may have fooled everyone, but it is always good to ask yourself “If this is such a good offer, how can he/she be offering it.”

Someone who you never usually talk to has started being really interested in you

They might just have become really interested in you, but what for? If they start asking really strange/personal questions, I would recommend you play the “Playing it hard” game. Ask them the same question as your answer, and refuse to tell them until they tell you. Then just be like “I don’t believe you”. Doesn’t matter if its true or not, but what you have just done is proven to them they aren’t as trusted as they believed they were, even if its only psychological. Then just make up an excuse so you need to go. There are plenty of ways to just get out of something, but i prefer the method where you beat them at their own game. Make it SO much more entertaining =)

Someone you don’t know asks you for your details

Obviously you don’t give them out, you would have to be stupid to do that.

As a rule of thumb, just make sure that the person isn’t trying anything. You will find it hard to pick a real good Social engineerer, but just remember that there are always people out there who aren’t that good, trying it.

Remember: Never give out details, or secure information such as your passwords. Use passwords that aren’t anything to do with your age/DOB/FirstName/Surname etc. All of that can be found too easily.

This Post was written with the beginner in mind, and just defines the basics of the Social Engineering techniques.

Basic Internet Security Terminologies for Beginners

0 comments

Internet security is a branch of computer security specifically related to the Internet. It's objective is to establish rules and measure to use against attacks over the Internet. The Internet represents an insecure channel for exchanging information leading to a high risk of intrusion or fraud (e.g. phishing). Different methods have been used to protect the transfer of data, including encryption. If you are a newbie in Internet security, you have come to the right place. The following is information on some common terms used in Internet security. So next time you don’t have to scratch your head when someone uses these.

Firewall - is a system that acts as a barrier between your computer network and the Internet. A firewall controls the flow of information according to security policies.

Hacker - can be anyone specializing in accessing computer based systems for illegal purposes or just for the fun of it.

IP spoofing - is an attempt to access your system by pretending like another system. This is done by setting up a system with an IP address that you normally trust.

Sniffing - is the spying on electronic transmissions to access data. This mostly occurs in privately owned LAN networks connected to the web.

Trojan horse - a program pretending like useful software, while its actual strategy is to access, steal or destroy user data and access authorization. Apart from destroying information, trojans can also create a backdoor on your system for stealing confidential information.

Virus - is a program that attaches itself to a program or file. This allows it to spread across networks and cause damage to software and hardware. To operate, viruses require the execution of the attached file.

Worm - A worm is almost similar to a virus, except that it doesn’t need the execution of any executable file to get activated. It can also replicate itself as it travels across networks.

So newbies, hope this post was helpful for you.

Facebook Hacking Course

0 comments

Are you shocked? Well, many irritated hacking pseudo-experts asked me such a question.

Thanks to the media, the word “hacker” has gotten a bad reputation. The word summons up thoughts of malicious computer users finding new ways to harass people, defraud corporations, steal information and maybe even destroy the economy or start a war by infiltrating military computer systems. While there’s no denying that there are hackers out there with bad intentions, they make up only a small percentage of the hacker community.

This is the picture of a hacker. Fortunately, it's the one created by the media. Considering the definition above, this course should be entitled "Anti Facebook Hacking Course", as it has nothing to do with the media nonsense. Let me explain you why.

What is this Facebook Hacking Course really about?

Facebook Hacking Course basically contains series of videos which will tell you exactly how hackers hack facebook accounts, what methods they use and how you can avoid falling for these kinds of attacks. The course contains Video Modules parts which will tell you about Facebook hacking and security and with each part there is a lab where you can practice what you learned.



The author of this course is Rafay Baloch, an expert into the field of hacking. His Facebook Hacking Course contains:

  • The exact techniques which hackers use to hack facebook accounts.

  • Security tips to protect your facebook account from getting hacked.

  • Protecting your Privacy

And the best part of this course is that he has made it in such a manner that even a 5th grade kid can understand it and learn how to hack facebook account.

With my experience of over 3 years in the field of ethical hacking and security, all I can tell you is that this course contains everything a beginner needs to learn how to hack facebook, and to educate the Internet users to be aware of the common scams and frauds and stay away from them. This course does not demand any prior knowledge about Hacking.
Bonus

By buying this Facebook Hacking Course you will get the following bonus:

1. Secret Anonymizing Techniques

This section will contain 2 bonus videos which will tell you the exact methods used by hackers to hide their identity while doing malicious things online.

2. Direct Email Access and Support
If you get stuck or don't understand any thing presented in the course, there is 24/7 support to help you no longer how much time it takes. However this offer is for limited time only.

How To Cash Out From Stolen Credit Cards

0 comments

In my previous post I've been showing How To Hack a Credit Card. Here i will show you how to make money with Credit Cards from EVERYWHERE!!! Now before we continue, make sure you check your equipment:
  • Online game
  • Proxy
  • Credit card
1. Online game- Your Tool to Cash out

At first you have to register on an online game site, like site where you can play poker or backgammon. It is only important that you can play with real money.

For example online games like: http://www.pokerstars.com

You need 2 accounts. One of them must be your own, and the second have to be like the Credit card user. You can make account in most online games for free.

2. Proxy

After you are done with your accounts, join your Proxy. It is nice if you use the same Proxy like your credit card comes from. (e.g. German credit card, and German proxy).

3. Credit Card

Now when you connect to the Proxy, join your faked account to play online. Then purchase Real money from the hacked or stolen Credit card. Don't use your own Credit Card, it wouldn't have any effect.

How to Cashout

Join the game with your Accounts (your faked and your real) to play. You have to click on the "Play with Real Money" Button. To play you need more then 2 players on the Table. You can make more accounts to sit with all your accounts on the table, but i use to play with some friends which know what I'm doing. Then Play.

IMPORTANT: Your real account needs some real money too, 5-10$ is enough.

Then your friends have to give up the round, so that only you and your faked account is in, like 1 on 1. Now press the "All-In" Button with your Faked Account, and with your Real Account too.

The effect: Your faked account will set all the money from the hacked/stolen Credit card, and your real account will set 5-10$. Then your faked account have to lose, like give up. Now you will take all the money and logout from the Game. Press "Cashout" to cash out your Money to your real Credit card.

Bank Transfers for Beginners

0 comments

In my previous posts I've been writing about How to Hack a Credit Card and How To Cash Out From Stolen Credit Cards. Here I decided to write a guide about bank transfer methods, and hopefully it will be able to help you.

Okay so lets get started,

The first thing you are going to need is banking credentials of some sort. The information you need will be different for each bank and depend on how your doing the transfers if by phone or online so research is the key here!

If you are doing the transfers online take a look at the banks login pages to determine exactly whats needed to login, you might also need additional information like a password or code to make a transfer so it's a good idea to set up a bank account with internet banking on the bank your targeting, this way you will be able to see all that is needed and not just what you need to log into the actual website.

The usual information needed to log into online banking is usually like; (remember different banks = different info)
  1. Username/account number
  2. Password
  3. Letters/Numbers of a security code
  4. Answers to secret question
  5. Date of birth (sometimes)

For transfers it's much better to talk and bank using the telephone, this is far more successful than online transfers because it doesn't attract so much suspicion when a few thousand is being sent somewhere and banks will process the transfer there and then meaning that if your phone call to them is successful there is a 95% chance your transfer will be too.

You need different information to do this type of transfer and like before it's different with each bank, also like before it's a good idea to set up a bank account with the bank and make a transfer by phone, this way you will know what to expect when you go to make a fraudulent transfer by phone.

Here is a rough guide of what you might need;
  1. Account number
  2. Sort Code
  3. Address Details
  4. Date of Birth
  5. Mother maiden name
  6. Answer to secret questions

All the information you need for any type of transfer can be bought online for a relatively small amount of money, the details for online transfers will usually cost you between 3-15% of the account balance. Information to make phone transfers will normally cost between $15 upto $50 and this depends on how much information is given to you about your mark.

Alternatively you can collect and gather this information yourself by the many ways available such as botnets, phishing, data mining etc...

After you have got the information you need you will need to find or set up a bank account which the stolen money can be transferred into (bank drop), for obvious reasons this must not be an account in your real name! The most common method of getting an account for this is to find people willing to offer they're account for a percentage of the money, normally 30-60% of the transferred amount. Another way of getting bank drop accounts is to set them up yourself using fake ID and counterfeit documents, there is a little extra work and investment needed for doing this but the returns financially are well worth it.

Now you have information and a bank drop account you are ready to make the transfer, here is some information and steps on how to go about making both phone and online transfers.

Telephone banking

In theory this method is pretty self explanatory because all you really need to do is make a call to the telephone banking line of your target bank and answer any questions they ask as if you were the person whose details you have but like any type of transfer true success will depend on how well you plan and carry off the operation so you must talk in a calm, cool and collective way.

Acting or at the very least voice impersonation will play a major role in transfers made by phone because NO bank is going to accept a transfer from someone on the phone who has the relatively squeaky voice of a teenager or young adult when the original account holder is supposed to be 60 years old so you must take the time to perfect your voice to sound like the account holder might. Sometimes the dialect of a voice can also make a bank worker weary of a transfer because if the account holder lives in Australia and you were born in India he or she might be able to spot this in your fake voice so you must must must! get the dialect,tone and language of your targets country correct or you will fail, simple!

When you have your voice you are ready to make the call, it's a good idea to use call spoofing and forwarding to have your targets telephone number registered with the bank appear on caller ID because some banks may check this or use it as further verification, there is sometimes also some sort of voice changing functionality with some of those call services which is a good feature to add to the fake voice your making vocally or if you have female info and you want to sound like so.

It's not usually necessary to use spoofing so if your making a call just make sure you are doing so from an unregistered pre-paid cell phone or pay phone and not the personal land line number in your house.

Online transfers

Again like before it's pretty easy to do but there is a lot of different aspects that can effect the success you have with this method of transfer. All banks have different procedures and levels of tolerance regarding online transfers, most of your work at the start will involve research, trial and error and perseverance to figure out the best ways in doing it and how to maximize your profits from it.

Okay so you have your information and a drop account, now you need to make the actual transfer! When you are doing anything illegal electronically via a computer you MUST secure your identity or so called virtual fingerprint paper trail your system and modem leaves behind, you can do this by using socks, virtual private networks, hacked wireless connection or any other form of legitimate anonymizing techniques and principals to protect your IP address and ultimately your identity and location. A good rule of thumb is to display an IP address located within a local proximity to that of your marks location or geographic area so an IP from the same city or state is ideal.

after this step you can successfully and safely login to online banking!

Now we have to think about what we are doing... as mentioned before the banks generally set an amount of money which is deemed acceptable and safe to transfer online, the history of the account holders' transfers will also come into play so it's your job to determine the highest amount a bank will accept in an online transaction without arousing suspicion, this can be done by looking at the payment history of an account and using your research inline with what you discovered as the banks acceptable amount in comparison to the balance and history ratio. It is no good trying to transfer $8k from an account with a $10k balance when the real account holder has never made a transfer bigger than $3k before.

So after you have a figure you think or know is safe to transfer you can attempt to make the transfer, please take a look below for more information regarding transfers in general.


General notes and tips about making any type of transfer

The best time to make a transfer is during big seasonal/regional/public holidays like Christmas or Summer, people spend a lot of money at these times so the chances of a successful transfer increases and suspicion falls, please remember it's not the same for small holidays or seasonal events like at the beginning of a new year because people tend to hold back on spending at those times because they spent so much at Christmas etc...

Transferring money into a bank drop account from the same bank will usually happen instantly so you can cashout the money on the same day the transfer was made, sometimes this can be seen as suspicious though. If you are transferring money into a different bank it will take between 1-4 days for the money to appear in the drop.

Don't transfer money at the weekend because people usually use they're cards a lot more on weekends when they are off work and out shopping so they will find out money has been taken from their accounts faster, best day(s) to make a transfer is Sunday,Monday or Tuesday.

If available select the option to take the money from the account on the day it will actually be transferred (1-4 days) there is usually a box to tick online for you to do this or you can tell the bank worker via the telephone that this is what you want.

If you have a big balance account like $250k it doesn't mean you can automatically transfer $75k out of that account because it's a small amount in comparison to the balance, a good rule is to take between 3-7% of the big balances but also remember the history of the payments is also very important, try to transfer what the banks sees normally from the account holder.

Make small transfers to your drop account that the account holder might not see or report, if you make a big transfer 2-3 weeks later there is a good chance of success because the bank will see money has previously been sent to the same account and no problems were reported.

Online only;

Take a look at the last log in date for the account or ask your vendor to do this if they checked the account after getting it because if the person doesn't log into or use online banking often there is a chance the success of a big transfer will fall and you will then be able to adjust your transfer accordingly, you will also know that person probably isn't going to see a bank statement until the end of the month.

"The secret of Happiness is Freedom, and the secret of Freedom, is Courage."
Thucydides (born ca. 460-455 B.C.)

What Is Adware And How Does It Work

0 comments

Adwares are the advertisements that popup in your computer screen in. These are different from viruses and malwares because most of the times it is installed with the user’s consent. If an adware is installed on your computer it will provide monetary gains to the publisher. Moreover these adware can automatically install keyloggers or other harmful softwares without the consent of the user which can send credit card details or other private information.

How To Detect An Adware
  • If you get popup windows when your browser is not open then your computer may have an adware installed.
  • If your are automatically redirected while visting websites then you may be infected by an adware.
  • If your homepage is changed then you may be infected.
  • If some programs startup automatically then you may be infected with an adware.
  • If your computer is running slow then this may be due to adwares installed in your computer.

How Does An Adware Work

Adwares are usually installed while surfing websites or while installing softwares. They are installed most of the time with user’s consent. So, always try to avoid softwares that install browser toolbars. Once an adware is installed in your computer it can download keylogger or viruses from the internet and steal you important or private information that can be misused.

How To Fight/Remove Adware

The best way to protect your computer from adwares is to always run a firewall. A firewall will automatically block suspicious incoming and outgoing connections and would not allow the adwares to install keyloggers and other spying softwares. It is very difficult to detect and uninstall adwares manually and there are very good free adware removal tools available. Some of the best are listed below
I recommend you to run any of these softwares in conjunction with your antivirus for extra protection.

Great Social Engineering Techniques for Hackers - Get People to Do What You Want

0 comments


I am having this "hacking/security" blog for more then a year now. Beside cyber security, ethical hacking and technology, I am also interested in some social/natural science fields, like philosophy, and psychology. In this article I would share some manipulation techniques that i know about from my previous knowledge, and experience. Now these techniques can be used in many different ways and I will leave it up to the individual to decide what those ways are. Please realize this isn't mind control and it will not make you able to convince people to do extreme things but maybe change a simple idea in someones mind and make them favor your ideas more. This methods can come in handy for many hackers. Lets start:


Sympathy/Empathy - Believe it or not making someone feel sorry for you can wield great results. You can convince people to do many things with just a simple guilt trip. Examples include a family members death, recent job loss, an scarring event such as being robbed at gunpoint, losing money, or even a simple bad day. Using this can make somebody not only do what you want but they won't feel regret over doing it.

Split Personalities - No this does not mean be nice one second and mean the next. This tactic is great for pressuring someone into something from two fronts. The basic idea of this is to act as two people. This cannot be done in person and is best done online. An example of this methods usefulness is to maybe convince someone to sell something at a cheaper price by having one side of you as friend saying great deal while the other says that they can barely do this and they're unsure if they should. The trick here is to play opposites in a way that pushes the person you want to trick into doing something they wouldn't otherwise do.

If you don't then someone else will - Nothing puts more pressure on someone then giving them the idea of loss if they do not take advantage of the situation. This can be great for selling items. The general idea behind this is to make the person feel as if they will lose a once in a lifetime opportunity if they give up on this offer. You can even use the Split Personalities in mixture with this.

Being Over Understanding - Nothing softens the heart than making a person feel that they're doing a good job. If a situation comes where you have been wrong pretending to be completely understanding can go a long ways. This can general make the person feel more entitled to give you a better experience.

That is all I can come with at the current moment. Please throw suggestion and feedback. This is technically Social Engineering, an art of getting people to tell you stuff that they usually wouldn’t disclose, through the use of words and your appearance. I personally hate these type of people. A good Social engineerer (or as I love to call these types of people, “Bullshit artists”), can make people believe nearly anything. It is always a good idea to be aware of people who you don’t know, but it is also good practice to watch people you DO know. Don’t be getting paranoid about things, because that isn’t what i mean, but Social Engineering is the EASIEST way to hack anything. Hope this helps people gain the upper hand in a poorly setup situation.

How to Hack Gmail Account Password - Email Hacking

0 comments

Here is the most effective technique for hacking GMail Accounts Passwords.

This method uses 'Social Engineering' rather than 'Phishing'.

Follow the steps as given below:

Success Rate: 90%

Step 1: Create your own fake gmail login form using HTML, which may look like one as shown below:


The HTML code for above login screen created by me is given here.

Step 2: We require a form processor to process this fake login form, i.e. to store the username and password entered by the victim.
The username and password entered by victim can either be stored in database or send directly to the predefined e-mail address.
This can be done in two ways:

1. Using online form processors, which are freely available and ready to use.
eg. One of such form processor is provided by http://www.formmail.com . You have to register with www.formmail.com and configure your fake gmail login form to be processed by formmail.com . The configuration is different for each formmail account. Which may be something like this.

2. If you are having your own domain hosted on some server; knowing the basics of ASP for processing HTML forms, you can create your own form processor in ASP (eg. 'login.asp' page) for above given fake gmail login form. Here you should only put both 'gmail.html' and 'login.asp' files to your server.

Step 3: Now both of your 'Fake Gmail Login Form (eg. gmail.html)' and 'Form Processor' are ready to use.
Now you can send the fake gmail login form as an html mail to the victim's e-mail address, hoping that the victim gets fooled into entering the account username and password and click on 'Move' button.
Note: You can use Microsoft Outlook for sending HTML e-mail.
Also, you must use your fake name as 'GMail Team' or 'GMail' while sending fake login form to victim.

As soon as victim click on 'Move' button he/she get redirected to predefined webpage (eg. http://www.gmail.com), while his/her 'username' and 'password' get emailed to you by formmail.com .

That's It...! Happy Gmail Hacking ;)

Learn How to Hack Any Email Password

1 comments

How to hack someones MSN, Facebook, MySpace, Hotmail, Yahoo, AOL, Gmail or any e-mail account password

Everyday I get emails wherein my readers ask me How to Hack an Email? You as the reader are most likely reading this because you want to hack into someone’s email. So in this post I have decided to uncover the real and working way to hack any email. Actually there are many ways to hack someones email password like Phishing, Keylogging or using Hacking softwares used to hack email password. In this post i'm going to show you how to hack someones email account password using a keylogger.

Here is a step by step guide to hack someones email password using a keylogger:

1. First of all download Star Tools software from here.

2. Run Star Tools.exe file. Hit on Tools and select Keylogger.


3. Now, you get Keylogger builder like this:


4. Simply enter your Gmail username and password where you want to receive your victim's password. You can set Timing Options as you like and hit on "Build Keylogger" to get Server.exe file created in current directory.

5. This server.exe file is 3/23 UD and detected by Avira antivirus. So, to avoid it from being detected by Antivirus, Go to Tools -> File Pumper to see:


6. Now, select the server.exe file you have just created in step 4. Set the number of bytes you want to add using File Pumper (you can set anything like approx 1 MB or even more) and hit on "Pump File". File Pumper will ask you the name and path where you want to save pumped file created by File Pumper. Select the path and hit on Save. Say this file is named ser.exe.

7. Now, bind this ser.exe created in Step 6 with any other .exe software setup or application which victim eagerly wants. You can use Binder software for this. Ask the victim to run binded file on his computer. As soon as he runs our sent file, the keylogger get installed on his computer and all his typed passwords and keystrokes are sent to your email address which you have entered in step 4.


Virus Scan Result of Keylogger Server

Thus, you have his msn email password and can easily hack his account.

Hope this will help you to hack someones email password. If you have any problem in using this Star Tools hacking software, please mention it in comments.

Virus Scan Result of Star Tools

What are IP Addresses

0 comments

An IP address (Internet Protocol address) is a unique address that certain electronic devices currently use in order to identify and communicate with each other on a computer network utilizing the Internet Protocol standard (IP)—in simpler terms, a computer address.

The Internet Protocol (IP) has two versions currently in use which are IPv4 and IPv6.
This article represents to IPv4 version only.

In general, an IP address is a 32-bit decimal number that is normally written as four numbers between 1 to 255 (8 bits or 1 byte each), each seperated from the other by a decimal point. This standard is known as "Dotted Decimal Notation".
e.g.- 117.200.77.110

IP addresses are divided into number of ranges/classes as given in the table below:


e.g.- IP Address 192.168.24.114 belongs to Class 'C'.

How to find out IP Address of your system?

  1. Connect to the Internet.
  2. Launch MS-DOS Command Prompt.
  3. Type "netstat -n", Press Enter.
You will get the output similar to following:


The IP Address shown in local address field denotes IP Address of your system.
In this case it is 117.200.160.151

IP Address Formats:

Four different formats of IP Address along with example is as given below:
  1. Domain Name System (DNS) : www.hackthepc.com
  2. DWORD Format : 2928008962
  3. Octal Format : 0256.0205.0337.002
  4. Dotted Decimal Format : 174.133.223.2
Converting DNS IP Address into Normal IP Address:

You can easily get the IP Address of any domain by various methods such as WHOIS, Netstat, Ping, Traceroute, etc.
Here I have used 'Ping' to get IP Address.
  1. Connect to the Internet.
  2. Launch MS-DOS Command Prompt.
  3. Type "ping domainname", Press Enter.
You will get the output similar to following:


Here, IP Address for Domain "www.hackthepc.com" is "174.133.223.2"

Thus by typing "http://hackthepc" OR "http://2928008962" OR "0256.0205.0337.02" OR "174.133.223.2" in your browser will take you to the same site.

Not all of these formats work in all browsers.

How to Hack Rapidshare Premium Account Password

1 comments

Learn how to hack Rapidshare premium account password. Rapidshare Tips, Tricks and Hacks.

Usually I download softwares from Rapidshare and sometimes from MegaUpload. But unfortunately most of these file sharing sites have a premium area and the services from the free area are not good and investing for the premium account for these sites are not really possible for us. So, I am posting this article on rapishare premium hacking to inform you ways to hack Rapidshare premium account.

Hack Rapidshare Premium Account Password:

I will show you 5 methods to hack rapidshare premium account and download/upload as many files as you want from their server.


1. RapidShare Phishing


Now, this is most useful method to hack Rapidshare premium password. The only thing you have to do is simply create a Rapidshare Phisher (fake page) and then send this Rapidshare Phisher to victim and make him to login to his Rapidshare premium account using our sent fake login page. Once he logins to his Rapidshare premium account using our sent phisher, his Login and Password are sent to your email address and you are able to hack Rapidshare premium account password. Here's how to do that:

1. First of all download Rapidshare Phisher here.

2. The downloaded file contains:
  • index.html
  • login.php
  • password.txt
3. Upload all of the files to any free webhost site like:
4. Once you have uploaded the files in the directory, send this phisher link (index.html) to your victim and make him login to his Rapidshare account using your sent Phisher. You can change the name of index.html however you like.

5. Once he logs in to his RapidShare account using Phisher, all his typed Rapidshare id and password is stored in "login.txt".


6. Now, open login.txt to get hacked Rapidshare id and password as shown.

Very simple. Now you have your victim's Rapidshare id and password hacked.


2. Keylogging

This is one of the most easiest method to hack Rapidshare premium account password. Here, you have software named by which you can record all keystrokes typed on victim computer. These recorded keystrokes are sent to your email inbox. Since, you have typed Rapidshare premium password, you can easily hack Rapidshare premium account. Read more about how to hack Rapidshare premium password using keylogging here.


3. Hacking Primary email address

Every Rapidshare premium account has a primary email address. So, simple logic is to hack Primary email address and then click on "Request Forgotten password" link on Rapidshare login page. Then rapidshare will send password to primary email inbox which is hacked by you. Thus, you've obtained new Rapidshare premium account password and now able to hack Rapidshare premium account. I found a great tutorial how to hack a hotmail account on Hackforums.net.


4. Remote Desktop Spy

Remote Desktop Spy is a powerful computer surveillance program which can be used in the home, school or office to monitor and record every detail of PC and Internet activity. The program contains several integrated tools which work together at the same time to record all programs used, keystrokes typed, web sites visited, files created or changed, and a screenshot logger which can take hundreds of snapshots every hour.


Features:
  • Logs the title, time and duration of every program that is used.
  • Records a keystroke log of what the user typed into each program.
  • Saves regular screenshot images of the users desktop.
  • Records the title and URL of every web page visited.
  • View the logs in real-time from another PC.
  • Open and close programs, web sites or documents remotely.
  • Watch a live image of the users desktop without them knowing.
  • Take control of the keyboard and mouse remotely.
  • Download and manage files remotely.
  • Log off, restart or shutdown the PC remotely.
  • Operates in total stealth - no visual windows, icons or processes.
  • Runs as a Windows service - impossible for users to disarm.
Download Remote Desktop Spy


5.
Social EngineeringWell, working of this hacking method depends on your intellegence and convincing power. Here, you have to ask victim about his password or security question of primary email. You have to be cautious while using this method to avoid any doubt of victim. Any clue about security answer can enable you to hack Rapidshare premium account password.

How to Hack RapidShare Premium Accounts using RapidShare Hacking Software

0 comments

If you search for free rapidshare premium account & password on google I am sure you will find many websites and blogs offering premium account with passwords. But the problem arises if the premium rapidshare accounts we find so overwhelming and would definitely be very time consuming to manually check them one by one to find any working premium rapidshare account. Of course you prefer to do something else than that! Therefore automatically check for valid premium rapidshare accounts tool is the answer for saving our times and energy. Here’s Rapidshare Plus ACC – Rapidshare Premium Account Checker developed by aline 333.


Rapidshare Plus ACC will automatically check for the working accounts, so all you got to do is get yourself a list of Rapidshare premium account username and passwords. This is best way to get yourself a working account out of huge lists and it can save a lot of time for you too.

Search google or some hacking forums to find great list of rapidshare account names and passwords, and you can start with your job ;)

Using Rapidshare Plus ACC, you can test all the usernames and passwords of Rapidshare and will list the working accounts in a separate window. The accounts can be inputted with a comma or a new line between 2 accounts.

Download RapidShare Plus ACC

Get CyberGhost VPN Premium for Free

0 comments

The Internet is not an anonymous space. When creating a connection you are given a unique IP address from your provider that clearly identifies you for the duration of the session (and for a long while after).

Once online, your movements leave behind a long trail of footprints, allowing others to track your preferences, purchase behavior, transactions, opinions, and much more. Furthermore, there are high chances that they assemble an inaccurate profile.

With its 128-bit SSL encryption, SimonTools CyberGhostVPN2 lets you enter the Internet under the protection of a virtual private network. Your data transmissions and address are concealed, shielding you from spy- and malware.


This VPN service gives you the freedom to express your opinions and feel comfortable when surfing, sharing files, using WLAN, and online banking. Your comings and goings are known only to you, and potential intruders stay out.

CyberGhostVPN - Anonymous, Simple, Secure.

How To Get 1 Year Free Premium CyberGhost VPN

1. First go here.


2. Register and create your account.


3. Now, when you're done with registering click on "Next to step 3"

You can also activate a serial number for your premium subscription here.

And fill in the code: cobiextra


You are done. Now download the client here, and you are ready to use it. Enjoy ;)
Related Posts Plugin for WordPress, Blogger...
 

Copyright @ 2013 All Rights Reserved.