Ever wanted a software program you had to buy online?
Most of us have and I will teach you how to do it cheap, and how to not get caught.
The Programs Are:
Mozilla Firefox
Vidalia
Privoxy
Tamper Data (Firefox Addon)
Torbutton (Firefox Addon)
Download all those programs, they can be found easily on google.
First thing first is to find a automatic Paypal system, this is very common among internet paypal sites that sell the warez that are not free.
Once you find something you want, remember the site.
Make a paypal account now, a new one even if you do have a old one, I would prefer to proxy all accounts you make and all accounts you log into just for safety reasons. To do this:
Run Vidalia, Start It
Run Privoxy, it will be in you notification area
Start Mozilla and at the bottom right hand corner you should see Tor Disabled in red letters, meaning you downloaded Torbutton correctly, just click the red letters once and they will turn green saying Tor Enabled, now your anonymized.
Create a account on paypal now, link it to your bank account, or use a Visa Giftcard, which is probably the safest way since I have yet to find a way to register a fake bank account to verify my account so I can use money. If you do find a way to make a fake bank account please tell me, but once someone figures out a safer way to do this step, you are going to have to take a risk of your paypal scam being linked to your bank account.
If the site that has your awesome **** on it requires registration to buy there items, also do this behind the proxy. Once you are logged in (if required) and you see the item you want with that tempting "Add to Cart" button, go to "Tools" and at the very bottom should be your addon Tamper Data. Run this, and click Start Tamper. Now go back to your site and click "Add to Cart" you should recieve popups from Tamper Data that give 3 Options, Tamper, Submit and Abort. Just click Tamper on every single cookie after you click "Add to Cart", because every online store sends the cookie with the info you need at different times. I have seen some that send it at the very end of checking out, so click Tamper on every cookie that you receive, until you see one cookie that stands out with way more parameters than any cookie you have seen so far, unless it was your first cookie of course. The cookie with tons of parameters, will have a parameter named "Amount" and the amount next to it should be the amount you paid in dollars, now just edit this parameter from whatever amount it was previously to 0.01
All the cookies after this can be submitted or you can stop Tamper Data, no cookies after this need to be viewed. Now once you hit whatever button on your site that is equal to Check Out that brings you to Paypal you will see on the Paypal site the amount has changed to 1 penny. Every single automatic service donation site item will now cost you a penny, I use a vista giftcard on my paypal account, so 100 dollars on a gift card is pretty much = to 1000 items you want for 1 penny.
P.S. I could not find any rules on "fraud" so if this is a post against the rules can you refrain from banning me and just delete the post =P More tricks available at www.hackerz7.tk
Showing posts with label web Hacks. Show all posts
Showing posts with label web Hacks. Show all posts
SpinFire Professional provides powerful 3D and 2D CAD visualization capabilities, without requiring a CAD system, in an easy-to-use .3D format. With this single software solution, you can view, measure and mark-up 2D and 3D data formats
- SpinFire Professional Trial Download - you will be emailed a link to access the evaluation software of SpinFire Professional. Your SpinFire Professional evaluation license is a fully functioning version limited to 15 days.
- SpinFire Professional Trial CD Request - Within a week, you will be mailed a CD containing the evaluation software of SpinFire Professional. Your SpinFire Professional evaluation license is a fully functioning version limited to 15 days.
Fill in your details below and they'll mail you the software free on CD - either way, you'll be choosing to play the best in casino gaming.
Click Here to Fill the Form and Request a free Ladbrokescasino CD
More tricks available at www.hackerz7.tkDesign and shape the world around you with the powerful, flexible features found in AutoCAD® design and documentation software, one of the world’s leading 2D and 3D CAD tools. Speed documentation, share ideas seamlessly, and explore ideas more intuitively in 3D. With thousands of available add-ons, AutoCAD software provides the ultimate in flexibility, customized for your specific needs. It’s time to take design further. It’s time for AutoCAD.
Request Free 30 day Trial of Autodesk - AutoCad 2010 from Autodesk
More tricks available at www.hackerz7.tkUbuntu is available free of charge and They will send you a CD of the latest version of Ubuntu after you sign up and Request a CD.
Click here to request a free Ubuntu Desktop Edition.
Click here to request a free Ubuntu Server Edition
More tricks available at www.hackerz7.tkFREE DOMAIN NAME REGISTRATION:
Hi friends,are you looking to rename your blogspot or wordpress blog address?or do you want a domain name with short extension and also for free?you have an option for registering .TK domain names for free. Dot TK is a joint venture of the Government of Tokelau, a country in the South Pacific, the countries communication company Teletok and BV Dot TK, a privately held company.it provides all registrations free.so why are you waiting for go on to register the domain for your website by the below link OR VISITING DOT.TK
REGISTER .TK
also you can register co.cc domain names free by accessing this link,it is also a premium domain name and also provides dns service.
REGISTER CO.CC
More tricks available at www.hackerz7.tk
All Premium Accounts are Working Correctly
Copy Correctly With Out Space
USER NAME : Ejudd3501
PASSWORD : 170368
USER NAME : myamha
PASSWORD : kaerimasu
USER NAME : seamus1974
PASSWORD : seamus1974
USER NAME : shakhack
PASSWORD : placebo
USER NAME : lilobee
PASSWORD : online
USER NAME : coskunrd
PASSWORD : crd1985
USER NAME : hashfx
PASSWORD : starwars
USER NAME : mhende2246
PASSWORD : allen62
USER NAME : testify
PASSWORD : force5123
USER NAME : hayve
PASSWORD : lifeisecho1989
USER NAME : ondern
PASSWORD : ondern
USER NAME : lupus25
PASSWORD : urelle25
USER NAME : kain6th
PASSWORD : jumper
USER NAME : ducatij
PASSWORD : kellyj
More tricks available at www.hackerz7.tk
Step 1: Go to appengine.google.com and sign-in using your Google Account.
Step 2: Click the “Create an Application” button. If this is your first time, Google will send a verification code via SMS to your mobile phone number. Type the code and you’re all set to create apps with Google App Engine.
Step 3: Choose a sub-domain* that will host your proxy server. Make sure the domain is available, agree to the Google Terms and click save. The sub-domain is also your App ID that will uniquely identify your proxy application.
Step 4: Create and upload the proxy server application to Google App Engine.
Step 5: Download the Python 2.6.4 MSI Installer and install.
Step 6: Download the Google App Engine SDK for Python and install.
Step 7: Download this zip file and extract it to some folder on your desktop. The zip file contains a couple of text files (written in HTML and Python) that you can read with notepad.
Step 8: Start the Google App Engine Launcher program from the desktop and set the right values under Edit –> Preferences.
Step 9. Click File –> Add Existing Application under the Google App Launcher program and browse to the directory that you created in Step 7. Click the Edit button and replace “YOUR_APP_ID” with the ID (sub-domain) that you reserved in Step 3.
Step 10: Click Deploy and your online proxy server if ready for use. You can experience it live
.
Disclaimer: This post is only for educational purpose.
Introduction
new; the same method can be applied to yahoo and other free web email services too.
The method we will be using is cookie stealing and replaying the same back to the Gmail server. There are many ways you can steal cookie, one of them is XSS (Cross site scripting) discussed by other is earlier post. But we won ’t be using any XSS here, in our part of attack we will use some local tool to steal cookie and
use that cookie to get an access to Gmail account.
Assumption:
You are in Local Area Network (LAN) in a switched / wireless
environment : example :office , cyber café, Mall etc.
You know basic networking.
You are in Local Area Network (LAN) in a switched / wireless
environment : example :office , cyber café, Mall etc.
You know basic networking.
Tool used for this attack:
Cain & Abel
Network Miner
Firefox web browser with
Cookie Editor add-ons
Cain & Abel
Network Miner
Firefox web browser with
Cookie Editor add-ons
Attack in detail:
We assume you are connected to LAN/Wireless network. Our main goal is to capture Gmail GX cookie from the network. We can only capture cookie when someone is actually using
his gmail. I ’ve noticed normally in lunch time in office, or during shift start people normally check their emails. If you are in cyber café or in Mall then there are more chances of catching people using Gmail.
We assume you are connected to LAN/Wireless network. Our main goal is to capture Gmail GX cookie from the network. We can only capture cookie when someone is actually using
his gmail. I ’ve noticed normally in lunch time in office, or during shift start people normally check their emails. If you are in cyber café or in Mall then there are more chances of catching people using Gmail.
We will go step by step,If you are using Wireless network then you can skip this Step A.
A] Using Cain to do ARP poisoning and routing:
Switch allows unicast traffic mainly to pass through its
ports. When X and Y are communicating eachother in switch network then Z will not come to know what X & Y are communicating, so inorder to sniff that communication you would have to poison ARP table of switch for X & Y. In Wireless
you don’t have to do poisoning because Wireless Access points act like HUB which forwards any communication to all its
ports (recipients).
Start Cain from Start >Program > Cain > Cain
Click on Start/Stop Sniffer tool icon from the tool bar,
we will first scan the network to see what all IPs are used in the network and this list will also help us to launch an attack on the
victim.
Then click on Sniffer Tab then Host Tab below. Right click within that spreadsheet and click on Scan Mac Addresses, from the Target section select All hosts in my subnet and then press Ok. This will list all host connected in your network. You will notice you won ’t see your Physical IP of your machine in that list.
How to check your physical IP ?
> Click on start > Run type cmd and press enter, in the command prompt type Ipconfig and enter. This should show your IP address assign to your PC. It will have following outputs:
Ethernet adapter Local Area
Connection:
Connection-specific DNS
Suffix . : xyz.com
IP Address. . . . . . . . . . . . : 192.168.1.2
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
Main thing to know here is your IP address and your Default Gateway.
Make a note of your IP Address & default gateway.
From Cain you will see list of IP addresses, here you have to choose any free IP address which is not used anywhere. We assume IP 192.168.1.10 is not used anywhere in the network.
Click on Configure > APR >Use Spoofed IP and MAC Address > IP Type in 192.168.1.10 and from the poisoning section click on “Use ARP request Packets” and click on OK.
Within the Sniffer Tab , below click on APR Tab, from the left hand side click on APR and now click on the right hand top spreadsheet then click on plus sign tool from top. The moment you click that it will show you list of IP address on left hand
side. Here we will target the victim IP address and the default gateway.
The purpose is to do ARP poisoning between victim and the default gateway and route the victim traffic via your machine. From the left side click on Victim IP address, we assume victim
is using 192.168.1.15. The moment you click on victim IP you will see remaining list on the right hand side here you have to select default gateway IP address i.e. 192.168.1.1 then click on OK.
Finally, Click on Start/Stop Sniffer tool menu once again and next click on Start/Stop APR. This will start poisoning victim and
default gateway.
B] Using Network Miner to capture cookie in plain text We are using Network miner to capture cookie, but Network miner can be used for manythings from capturing text , image, HTTP
parameters, files. Network Miner is normally used in
Passive reconnaissance to collect IP, domain and OS
finger print of the connected device to your machine. If you
don ’t have Network miner you can use any other sniffer available like Wireshark, Iris network scanner, NetWitness etc.
We are using This tool because of its ease to use.
Open Network Miner by clicking its exe (pls note it requires .Net framework to work).
From the “—Select network adaptor in the list—“ click on down arrow and select your adaptor If you are using Ethernet wired network then your adaptor would have Ethernet name and IP
address of your machine and if you are using wireless then adaptor name would contain wireless and your IP address. Select the one which you are using and click on start.
Important thing before you start this make sure you are not browsing any websites, or using any Instant Mesaging and you
have cleared all cookies from firefox.
Click on Credential Tab above. This tab will capture all HTTP cookies , pay a close look on “Host” column you should see somewhere mail.google.com. If you could locate mail.google.com entry then in the same entry right click at Username column and click on “copy username” then open notepad and paste the copied content there. Remove word wrap from notepad and search for GX in the line. Cookie which you
have captured will contain many cookies from gmail each would be separated by semicolon ( GX cookie will start with GX= and will end with semicolon you would have to copy everything
between = and semicolon Example : GX= axcvb1mzdwkfefv ; ßcopy only axcvb1mzdwkfefv Now we have captured GX
cookie its time now to use this cookie and replay the attack and log in to victim email id, for this we will use firefox and cookie editor add-ons.
We are using This tool because of its ease to use.
Open Network Miner by clicking its exe (pls note it requires .Net framework to work).
From the “—Select network adaptor in the list—“ click on down arrow and select your adaptor If you are using Ethernet wired network then your adaptor would have Ethernet name and IP
address of your machine and if you are using wireless then adaptor name would contain wireless and your IP address. Select the one which you are using and click on start.
Important thing before you start this make sure you are not browsing any websites, or using any Instant Mesaging and you
have cleared all cookies from firefox.
Click on Credential Tab above. This tab will capture all HTTP cookies , pay a close look on “Host” column you should see somewhere mail.google.com. If you could locate mail.google.com entry then in the same entry right click at Username column and click on “copy username” then open notepad and paste the copied content there. Remove word wrap from notepad and search for GX in the line. Cookie which you
have captured will contain many cookies from gmail each would be separated by semicolon ( GX cookie will start with GX= and will end with semicolon you would have to copy everything
between = and semicolon Example : GX= axcvb1mzdwkfefv ; ßcopy only axcvb1mzdwkfefv Now we have captured GX
cookie its time now to use this cookie and replay the attack and log in to victim email id, for this we will use firefox and cookie editor add-ons.
C] Using Firefox & cookie Editor to replay attack. Open Firefox and log in your mail email account. from firefox click on Tools >
cookie Editor. In the filter box type .google.com and Press
Filter and from below list search for cookiename GX. If you locate GX then double click on that GX cookie and then from content box delete everything and paste your captured GX cookie from stepB.4 and click on save and then close. From the Address bar of Firefox type mail.google.com and press enter, this should replay victim GX cookie to Gmail server and you would get logged in to victim Gmail email account. Sorry! You can’t change password with cookie attack. How to be saved from this kind of attack? Google has provided a way
out for this attack where you can use secure cookie instead
of unsecure cookie. You can enable secure cookie option
to always use https from Gmail settings. Settings > Browser
connection > Always use https
cookie Editor. In the filter box type .google.com and Press
Filter and from below list search for cookiename GX. If you locate GX then double click on that GX cookie and then from content box delete everything and paste your captured GX cookie from stepB.4 and click on save and then close. From the Address bar of Firefox type mail.google.com and press enter, this should replay victim GX cookie to Gmail server and you would get logged in to victim Gmail email account. Sorry! You can’t change password with cookie attack. How to be saved from this kind of attack? Google has provided a way
out for this attack where you can use secure cookie instead
of unsecure cookie. You can enable secure cookie option
to always use https from Gmail settings. Settings > Browser
connection > Always use https
Most of the email forging tutorials on internet will teach us how to send fake email connecting to SMTP server of the ISP or any other domain. But this is not possible since these hacks will no longer work today because SMTP of remote server will reject any attempts for unauthorised access. Also many of the websites offer you to send fake email from their sites where none of them work. So we have to run our own SMTP server on our computer to successfully send a fake email. SMTP server is a simple software program which can be installed on your computer in few seconds. SMTP server allows you to send fake email right from your desktop easily and effectively. Download QK SMTP server HERE. This is the SMTP server i am using in my tutorial. Once you download and install the server on your comp then you are all set to send fake email successfully.
Once you have installed the QK SMTP server on your comp you must perform the following configuration.
1. Click on “Settings” button on the main screen,the Settings window pops up
2. On Settings window click on “Basic Parameter” tab
3. Set binding IP to “127.0.0.1″
4. Set port to “25″
1. Click on SMTP server icon on your desktop to start your SMTP server to run(The icon is shown on the notification area of the taskbar if it is running). If it is already running then this step can be ignored
2. Goto command prompt(Start-Accessories-Command prompt)
3. Type exactly as follows
C:\>telnet 127.0.0.1 25
Here 127.0.0.1 is the default IP of every computer.25 is the port number. SO you are connecting to the SMTP server running on your own computer. This step is very importand to send fake email.NOTE: The IP 127.0.0.1 should not be substituted by any other IP.
Heres the snapshot of what you see after step 3. Click on it to enlarge220 Welcome to QK SMTP Server 3
helo hacker (Type helo & any name followed by space)
250 Hello hacker (Server Welcomes You)
mail from:billg@microsoft.com (email ID can be anything of your choice. This is the ID from which fake email appears to have come from)250 billg@microsoft.com Address Okay (Server gives a positive response)rcpt to:admin@gmail.com (Type any valid recipient email address)250 admin@gmail.com Address Okay (Server gives a positive response)data (type this command to start input data)354 Please start mail input
From:Gates <billg@microsoft.com>
To:admin@gmail.com
Date:Sat Jan 5,2008 9:45 PM
Subject:Test to send fake email
You can create as many headers followed by the “:” symbol.
NOTE: HEADERS SHOULD NOT CONTAIN A LINE GAP. IF SO IT IS CONSIDERED AS BODY OF THE EMAIL. Press enter twice so that there is a line gap between the header & body data
250 Mail queued for delivery (Sever indicates that the email is ready for sending)quit (Type this command to quit from server)221 Closing connection. Good bye.
Connection to host lost
(You will get the above 2 lines of message after typing “quit” command)
(Your fake email is sent to the recipient)
*****END OF EMAIL FORGING*****
