Hacking Tips and Tricks

Today, I am going to show you, how you can win Avast Free ride T-shirts. Just follow the given steps carefully to enter into the game.

1. Click on the link given below or copy/paste the link in you browser, I have used Mozilla.
• http://www.avast.com/get/CJPTy7uQ 
2.  A window will be opened, as given below, click on Download Avast button.

 
3. Click on "Save File" when prompted 

What is XSS?

Cross Site Scripting (XSS) , is one of the most common web application vulnerability that allows an attacker to run his own client side scripts(especially JavaScript) into web pages viewed by other users.

In a typical XSS attack, a hacker inject his malicious JavaScript code in the legitimate website . When a user visit the specially-crafted link , it will execute the malicious JavaScript. A successfully exploited XSS vulnerability will allow attackers to do phishing attacks, steal accounts and even worms.

XSS Attack:

Step 1: Finding Vulnerable Website

Hackers use google dork for finding the vulnerable sites for instance  "?search=" or ".php?q=" .

Step 2: Testing the Vulnerability
 
First of all, we have to find a input field so that we can inject our own script, for example: search box, username,password or any other input fields.

Test :
Now we are going to check whether the server sanitize our input or not.  In order to do this , let us input the <script> tag inside the input field.

View the source of the page

That's good server is sanitizing our input.

Step 3: Exploiting the vulnerability

Now we know the site is somewhat vulnerable to XSS attack.  But let us make sure whether the site is completely vulnerable to this attack by injecting a full JavaScript code.  For instance, let us input <script>alert('HCB')</script> .
Now it will display pop-up box with 'BTS' string. Finally, we successfully exploit the XSS .  By extending the code with malicious script, a hacker can do steal cookies or deface the site and more.




Types of XSS Based on persisting capability:

Based one Persistence capability, we can categorize the XSS attack into two types namely Persistent and Non-Persistent.

Persistent XSS:

The Persistent or Stored XSS attack occurs when the malicious code submitted by attacker is saved by the server in the database, and then permanently it will be run in the normal page.

For Example:  
Many websites host a support forum where registered users can ask their doubts by posting message, which are stored in the database.  Let us imagine , An attacker post a message containing malicious JavaScript code instead.  If the server fail to sanitize the input provided, it results in execution of injected script.  The code will be executed whenever a user try to read the post. If suppose the injected code is cookie stealing code, then it will steal cookie of users who read the post. Using the cookie, attacker can take control of your account.


Non-Persistent XSS:

Non-Persistent XSS, also referred as Reflected XSS , is the most common type of XSS found now a days. In this type of attack, the injected code will be send to the server via HTTPrequest.  The server embedded the input with the html file and return the file(HTTPResponse) to browser.  When the browser executes the HTML file, it also execute the embedded script.  This kind of XSS vulnerability frequently occur in search fields.

Example:
Let us consider a project hosting website.  To find our favorite project, we will just input the related-word in the search box .  When searching is finished, it will display a message like this "search results for your word " .  If the server fail to sanitize the input properly, it will results in execution of injected script.

In case of reflected XSS attacks, attacker will send the specially-crafted link to victims and trick them into click the link. When user click the link, the browser will send the injected code to server, the server reflects the attack back to the users' browser.  The browser then executes the code .

What can an attacker do with this Vulnerability?

Stealing the Identity and Confidential Data(credit card details).
Bypassing restriction in websites.
Session Hijacking(Stealing session)
Malware Attack
Website Defacement
Denial of Service attacks(Dos)

Reference: breakthesecurity.com

Some times we have passwords but in md5 hash form, but md5 is not easily decryptable , but also not impossible,

2 Ways:

1. search in the databases of many websites just Google for them.
2. use md5 brute attacker download from here. ( pwd to open : hackingcrackingweb )






This is the work by Tim Warriner .

Refrence: http://www.timwarriner.com/software/md5brute.html

Google has local domains for most of the countries in the world. Just few minutes ago some group of hackers hacked into Google's Palestine Domain, however Google has recovered the domain, we still managed to take the screen shot of the defaced page.

"uncle google we say hi from Palestine to remember you that the country in Google map not called Israel. Its called Palestine" The hacker wrote in the defacement.

"#Question : What would happens if we changed the country title of Israel to Palestine in Google Maps..!" The defacement message reads. "It would be revolution.  So Listen rihanna and be cool".

If you still wants to see the deface page you can see that using the Google's cache for few hours more.

Search in Google " google.ps/ " as below

To block any website on your windows PC, however there are many ways, but we are going to tell you the simple one.

It is easy to block a website on a computer using any software or just by changing the DNS server and changing few settings but if you don’t want to use any additional software or service then in this case too, you can block websites on your Windows machine. All you will require for this is :

1. A windows machine
2. A text editor (notepad will do)
3. A web browser

Just follow the steps given below to block a particular website.

1. Go to C:\WINDOWS\system32\drivers\etc
2. Find the file named “HOSTS”
3. Open it using notepad.
      -> open it as administrator, how?
              a. open cmd as administrator.
              b. move to C:\WINDOWS\system32\drivers\etc directory
              c. type " notepad hosts "
4. Under “127.0.0.1 localhost” Add 127.0.0.2 www.orkut.com , and that site will no longer be accessible.
5. Done!

E.g.

127.0.0.1 localhost
127.0.0.2 www.orkut.com

- www.orkut.com will not be accessible anymore.

If you want to add more sites then just increment the IP address by one and add it to the list.

i.e.

127.0.0.3 www.yahoo.com (if you want to block yahoo)
127.0.0.4 www.msn.com (if you want to block msn)
127.0.0.5 www.google.com (if you want to block google)

127.0.0.6 www.facebook.com (if you want to block facebook)

127.0.07 www.youtube.com (if you want to block youtube)

You can use this trick to block popup sites as well or any other advertising site.

Now if you want to play the game online with friends, GameRanger is the best option.

References: http://games.softpedia.com/get/Patch/Need-for-Speed-Most-Wanted-Patch.shtml

Youtube 18+

How To Watch 18+ Youtube Videos Without Logging In ?


1. Get the link of your video as below
http://www.youtube.com/watch?v=_UQsnJTZY-A

2. Then copy the Video Id. For above link video Id is _UQsnJTZY-A
3. Now paste the Video Id in the link given below.

    http://www.youtube.com/v/VideoId?fs=1

    Replace VideoId with the Id you copied in Step 2

4. Now the url will become as shown below.

    http://www.youtube.com/v/_UQsnJTZY-A?fs=1

5. Done

In Windows 8, Microsoft quietly removed a useful networking feature: ad-hoc networks.
In Windows 7 (and previous OSes), the tool could turn your PC into a Wi-Fi hot spot, allowing it to share its Ethernet or other Internet connection with other devices by broadcasting its own network.

So, if you paid for Internet access at a cafe, or you're at work, and want to share your PC's Internet with your phone or tablet, this feature would let you do that.

It is very possible to do this in Windows 8, but the built-in method requires fiddling with the command prompt. And for some of us, walking into that black abyss is daunting.

Instead, check out Virtual Router Plus. It's a free, open-source program that does the geek work for you, allowing you to quickly fire up an ad-hoc network whenever you need one.

Once you've downloaded the file, extract it, and launch the VirtualRouterPlus file within that folder. There's no real installation here -- the program will simply launch.

At this point, setup is easy. Enter a name for your network, then choose a secure password with at least eight characters. Finally, choose the connection you want to share (there will most likely only be one choice), and click Start.

To test it out, grab your phone or tablet and connect to your newly created Wi-Fi network. If it doesn't show up, stop the connection on your computer, and hit Start again.

Also remember that your computer needs to stay awake and running to keep its ad-hoc network alive. So, tweak your power settings if need be.

This is the simple method to get the best protection for maximum 3 Years,

Follow these simple Steps:

1.) Uninstall your existing antivirus (if any).

2.) click this link (http://www.avast.com/get/CJPTy7uQ) and download the free version  of avast.

3.) Install the downloaded antivirus, during installation select the free version.

4.) After Installation is complete, register the antivirus with your email ID.

5.) Now, you have avast free version for 1 year, don't worry , I know you want the premium avast.

6.) Now move to Recommend option in your antivirus and note the URL.

Windows 7 / 8 users skip step 1