WFuzz 2.0

Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked (directories, servlets, scripts, etc), bruteforce GET and POST parameters for checking different kind of injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters (User/Password), Fuzzing,etc.
It's very flexible, here are some functionalities:

• Multiple Injection points capability with multiple dictionaries
• Recursion (When doing directory bruteforce)
• Post, headers and authentication data brute forcing
• Output to HTML
• Colored output
• Hide results by return code, word numbers, line numbers, regex.
• Cookies fuzzing
• Multi threading
• Proxy support
• SOCK support
• Time delays between requests
• Authentication support (NTLM, Basic)
• All parameters bruteforcing (POST and GET)
• Multiple encoders per payload
• Payload combinations with iterators
• Baseline request (to filter results against)
• Brute force HTTP methods
• Multiple proxy support (each request through a different proxy)
• HEAD scan (faster for resource discovery)

• Dictionaries tailored for known applications (Weblogic, Iplanet, Tomcat, Domino, Oracle 9i, Vignette, Coldfusion and many more. (Many dictionaries are from Darkraver's Dirb, www.open-labs.org)

• Payloads:
• File
• List
• hexrand
• range
• names
• hexrange

• Encodings:
• random_uppercase
• urlencode
• binary_ascii
• base64
• double_nibble_hex
• uri_hex
• sha1
• md5
• double_urlencode
• utf8
• utf8_binary
• html
• html decimal
• custom
• many more...
• Iterators:
• Product
• Zip
• Chain

Basic example

Basic example

 Download Link:-http://adf.ly/d5fML

Read More

CRACK PASSWORD PROTECTED .zip , .rar , .ace FILES

You Can Easily Crack Password Protected .zip, .rar and .ace Files by Following These Steps:

1. Download ZIP-RAR-ACE-Password-Recovery .

2. Now Install and  open it.

3. Copy the License Code given in Readme.txt.

4. Now click on Browse and Then Select the password protected file.

5. Now Click on Start and Password will be Recovered.

Read More

HOW TO CRACK ANY TYPE OF CD PROTECTION

Using W32Dasm, and HIEW. 

OK, let’s start:
First of all, you have to run the damn game you want to crack, without the CD.
The game, doesn’t work of course, (Please, don’t panic) BUT a window pops up, telling you an error message. 
This error message will help you to crack the game so, you’ve got to remember it.
For example: Please insert the - CD, or: You need the CD to play the - . 
( -, is the game you want to crack). Anyway, if you are so idiot and you can’t remember it, write it, in a little piece of paper.
Now, run Win32Dasm, and on the toolbar, press the first little button on the left, OR, go to Disassembler ->Open file to Disassemble. A menu will pop up. Select the exe which you want to crack. The disassemble, will take few minutes so, I suggest you, to go for shitting. 

OK, it finished its process. 
Now, in your screen, there is a strange text, and we can’t understand anything of course. Don’t worry, the only thing we have to do, ( If you want, you can change the font), is to click on the String Data References, the button next to the print button (Strn.REF). 
You can see a window which is called String Data Items. Scroll down, and try to find the game’s error message. When you’ll find it, double click on it, and then, close the window, to go back to the Win32Dasm text. 
As you can see you are somewhere in the CD check routine. This is the message’s place. Now comes the interesting and difficult part, so, be careful. 
We don’t know what all these shits mean, BUT we must know the @ offset of every call and jump command.
Write down, every call and jump @ offset number. (You have to be sure, that the OPBAR change its used color to green). You need the number behind the @offset without the h. Let’s go to HIEW, now.

HIEW:
To move up and down, use the cursor keys. Start HIEW. exe. 
In the HIEW directory, there is a list of exes and programs. Go to the directory, which you saved the game’s exe, we want to crack, and click on the exe. Click F4, and then, a menu will pop up, with 3 words. Text, Hex, and Decode. Click on Decode, and now, we can understand the list of numbers.
Click F5, and you can now enter the number, we wrote down, in Win32Dasm. Type it, and you will be placed at the number’s place. The cursor is placed on a command. 

Before I’ll continue, I want to explain you something. For example, if the command where our cursor is placed on, is E92BF9BF74, means that it is 5 bytes.
Every 2 numbers, are one byte: E9-2B-F9-BF-74 = 90-90-90-90-90. 10 letters, mean, 5 bytes. 
OK, if you understood it, you can continue. 

Press F3, which means edit, and now you can edit these ten numbers.
Type five times, the number 90. For every byte, 90. Now click on F10 to exit.
We cracked the CD protection

Read More

Hack Facebook with Brute Force Attack

This tutorial is based on hacking a website login page by brute force attack. There are many attack to hack a website’s login page e.g Phishing ,tab napping similarly Brute Force attack. This Attack has following advantages as followed,

Advantages:

1. One of the Most successful Attack
2. Most Easiest of all attacks
3. Easy to Use
4. Possibility is high because there are so many related options
5. Fairly simplistic attack not require much hard-work

It’s only disadvantage is that it Takes alot Processing Power and time consuming.

How it Works:

It works on the method of cipher by trying every possible Key. Here is the Step to Step Guide to hack website login page

.
Hack Facebook with Brute Force

• You need Mozilla Firefox because the Add-ones we use won’t work on other browsers.

• Install the Add-one FireForce on your browser.
• Restart Firefox and go to login page of any website that won’t require CAPCHA
• Write Username in Username Tab and Right Click on Password Tab.
• Select FireForce from the content menu and select any of them according to your guess as shown in figure

.

• Select the minimum no. of letters = 6
• Select maximum no. of letters to = 16
• In Failed Authentication type = Invalid
• No. of Request Per Second = 500

.

.

• If you Have Selected LOAD Dictionary Option then

.

.

• It will show Pop-up then select a relevant file that contains dictionary words.

.

.

• Enter the Word that will tell Failed Authentication = Invalid
• No. of request per Second again type = 500

.

.

It Will Start Searching the Password by 500 attempts in a second. Once it will find Password it will tell you you are done. This technique can be used for every social websites but note this is for educational purpose only, Any Illegal attempt will be an act of Crime.

Read More