Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts

Wednesday, 18 May 2016

A program which types automatically by its own

Image result for ghostHey guys, Today, I am going to show you all how to type like a Ghost! I am kidding!
But have you ever wondered to create a program which can run by its own and types texts in an notepad file?
Yeah, you heard it write! Today, I am going to show you how you can type artificially using a program code written in java. I will make use of the java.awt.Robot and java.awt.event.KeyEvent classes to achieve my aim.

Here is the code :

import java.awt.Robot;
import java.awt.event.KeyEvent;

public class TypingArtificially 
{
public static void main(String args[])
{
	try
	{
	Runtime.getRuntime().exec("notepad.exe");
	Thread.sleep(2000);
	Robot r=new Robot();
	r.keyPress(KeyEvent.VK_Y);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_O);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_U);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_SPACE);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_R);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_SPACE);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_H);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_A);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_C);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_K);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_E);
	Thread.sleep(500);
	r.keyPress(KeyEvent.VK_D);
	
	}
	catch(Exception e)
	{
		System.out.println(e);
	}
}
}


Compile the program and enjoy sharing with your friends !

Saturday, 11 April 2015

Crack android pattern lock!

Image result for crack a android pattern lockQuote:
Dislcaimer: this is for educational purposes only,you shall not use this on other people phones without permission under any circumstances,and am not responsable to any misuse of this hack
So not long ago i had a problem with a locked android device with a pattern and i managed to unlock it using adb,so here's how in case you were stuck one day with a locked device.

the device needs to have usb debugging enabled in case usb debugging isn't enabled and you have cwm you can run the same instructions from cwm,root is not required (though it will be so better if the device was rooted)

this was tested on:gingerbread,ice cream sandwich and jelly bean.

both method are through adb. 

method 1:
Code:
adb shell
cd /data/data/com.android.providers.settings/databases
sqlite3 settings.db
update system set value=0 where name='lock_pattern_autolock';
update system set value=0 where name='lockscreen.lockedoutpermanently';
.quit
-AND/OR-

method 2:
Code:
adb shell rm /data/system/gesture.key
and that's a video showing how method 2 is done (thanks to melvinchng) : http://www.youtube.com/watch?v=tVJ7T...layer_embedded

you can try both of them,here is how i managed to remove the lock:
1- run the first method.
2-reboot
3-run the second method
4-reboot

NOTES:
-in the first method each line is a seperate command so click enter after typing each line.
-in the second method type all the command and then press enter.
-after running both methods and rebooting you may see the pattern lock,that doesn't necessarily mean it doesn't work,just try any random pattern and it may unlock then remove the pattern from settings.
-this may and may not work,it may work on some devices and don't on others,so all you can do is trying it but i can't assure it will work.

Thursday, 5 February 2015

How to Spoof MAC Address on Android Phones

Media Access Control address (MAC address) is a 12-character unique identifier assigned to a specific piece of hardware such as the network adapter of your WiFi device. In simple words, a MAC address can be used to uniquely identify your Android phone on the Internet or the local network.

Spoofing MAC Address on Android Devices

Even though MAC address is embedded on the hardware device during manufacture, it can still be spoofed to input a new one of your choice. Here is a detailed instruction on how to spoof MAC address on your Android phone.
Before you spoof the MAC address, you need to record the original/current MAC address of your device which can be done according to the instruction below:
  • On the Home Screen of your phone, tap Menu button and go to Settings.
  • Tap About Device and go to Status
  • Now scroll down to record the 12-digit code shown under Wi-Fi Mac address. An address would read something like:
    Example MAC address: E5:12:D8:E5:69:97

Requirements for Spoofing the MAC Address

  1. Rooted Android Phone
  2. BusyBox app installed on your phone
  3. Once BusyBox is installed, you need to install Terminal app
Once the above requirements are satisfied, follow the instructions below to spoof your MAC address:
  1. Open the Terminal app and type the commands as listed below:
    $ su [HIT ENTER]
    $ busybox iplink show eth0 [HIT ENTER]
    (This will show your current MAC address, just for your confirmation)
  2. Now, type the following command:
    $ busybox ifconfig eth0 hw ether XX:XX:XX:XX:XX:XX [HIT ENTER]
    (In the above command, replace XX:XX:XX:XX:XX:XX with your new MAC address)
  3. You have now spoofed your MAC address successfully. To check for the change enter the following command again:
    $ busybox iplink show eth0 [HIT ENTER]
    (Now you should see your new MAC address)
I hope you like this post. For feedback and queries, pass your comments

Tuesday, 9 December 2014

JS-Recon a HTML5 based JavaScript Network Reconnaissance tool

What is JS-Recon?
JS-Recon is a network reconnaissance tool written in JavaScript by making use of HTML5 features like Cross Origin Requests(CORs) and WebSockets
Currently supported functionality:
  • Port Scans
  • Network Scans
  • Detecting private IP address
Supported Browsers:
It works on the latest versions of Chrome, Safari and Firefox that support CORs and WebSockets.
Use it on Chrome and Safari for best results. Firefox throws exceptions sometimes when scanning through COR, not sure why this happens. Scans using WebSockets work properly though.
Currently it has been tested only on Windows XP and Win7 systems. Behavior could differ on Linux and Mac
How does it work?:
Cross domain XHR has five possible readystate statuses and WebSocket has four possible readystate statuses. When a new connection is made to any service the status of the readystate property changes based on the state of the connection. This transition between different states can be used to determine if the remote port to which the connection is being made is either open, closed or filtered.
* Port Scanning:


When a WebSocket or COR connection is made to a specific port of an IP address in the internal network the initial state of WebSocket is readystate 0 and for COR its readystate 1. Depending on the status of the remote port, these initial readystate statuses change sooner or later. The below table shows the relation between the status of the remote port and the duration of the initial readystate status. By observing how soon the initial readystate status changes we can identify the status of the remote port.
There are some limitations to performing port scans this way. The major limitation is that all browser’s block connections to well known ports and so they cannot be scanned. The other limitation is that these are application level scans unlike the socket level scans performed by tools like nmap. This means that based on the nature of the application listening on a particular port the response and interpretation might vary.
There are four types of responses expected from applications:
  1. Close on connect: Application terminates the connection as soon as the connection is established due to protocol mismatch
  2. Respond & close on connect: Similar to type-1 but before closing the connection it sends some default response
  3. Open with no response: Application keeps the connection open expecting more data or data that would match its protocol specification
  4. Open with response: Similar to type-3 but sends some default response on connection, like a banner or welcome message


The behavior of WebSockets and COR for each of these types is shown in the table below.
* Network Scanning:


The port scanning technique can be applied to perform horizontal network scans of internal networks. Since both an open port and a closed port can be accurately identified, horizontal scans can be made for specific ports that would be allowed through the personal firewalls of most corporate systems.
Identification of an open or closed port would indicate that a particular IP address is up.
Ports like 445 or 3389 are ideal for such purpose as these are usually allowed across personal firewalls of desktop systems. It has been found that port 445 is of Application type-1 on Windows 7 and can be detected whether it is open or closed. However port 445 on Windows XP and port 3389 are of application type-3 and the host can only be detected if these ports are closed on such systems.
* Detecting Private IP Address:


Most home user’s connected to WiFi routers are given IP addresses in the 192.168.x.x range. And the IP address of the router is often 192.168.x.1 and they almost always have their administrative web interfaces running on port 80 or 443.
These two trends can be exploited to guess the private IP address of the user in two steps:
Step 1: Identify the user’s subnet
This can be done by scanning port 80 and/or 443 on the IP addresses from 192.168.0.1 to 192.168.255.1. If the user is on the 192.168.3.x subnet then we would get a response for 192.168.3.1 which would be his router and thus the subnet can be identified.

Step 2: Identify the IP address
Once the subnet is identified we scan the entire subnet for a port that would be filtered by personal firewalls, port 30000 for example. So we iterate from 192.169.x.2 to 192.168.x.254, when we reach the IP address of the user we would get a response (open/closed) because the request is generated from the user’s browser from within his system and so his personal firewall does not block the request.
Limitations:
Blocked Ports:
To avoid Cross Protocol exploitation almost all popular browsers block connections to certains well known ports. Due to this the status of these ports cannot be determined.
Linear Scanning:
The determination of port status is based on timing of the readyState status changes. Opening multiple simultaneous connections interferes with this timing leading to unreliable results. Hence to avoid such situations all scans are performed one port at a time.
Internal Networks Only:
As stated above, timing is critical to identification of port status. Depending on the location of the target device this timing could vary. JSRecon has been tuned to scan internal networks with very low turn around time. Scanning external networks would require only two minor changes - values of the variables open_port_max and closed_port_max must be suitable updated.


Wednesday, 3 December 2014

Ravan , JavaScript based Distributed Password cracking




You want to crack a hash but your system speed is low?! No need to worry..! Here is solution for you , "Distributed Password Cracking". Let me introduce a new tool called "Ravan" developed by LavaKumar.
About Ravan:
Ravan is a JavaScript based Distributed Computing system that can perform brute force attacks on salted hashes by distributing the task across several browsers. It makes use of HTML5 WebWorkers to start background JavaScript threads in the browsers of the workers, each worker computes a part of the hash cracking activity.
Ravan now supports MD5,SHA1,SHA256,SHA512 hashes.

How it works?
Ravan has three components:

Master:
The hash, salt, hashing algorithm, position of the salt (before or after salt) and the charset are submitted by the user. These are submitted to the web backend and it returns a ‘hash id’ which is unique to every submitted hash. It also supplies a ‘worker url’ specific to this hash that must be sent to potential workers.
Once the hash is submitted the master creates arrays of slots (each array contains 5 slots), this is submitted to the web backend. Each slot represents a small part of the keyspace, this is how the entire activity is broken down in to multiple tiny tasks. A single slot represents 1 million combinations.
The master constantly polls the web backend to check on the progress of the cracking process. As the existing list of slots is completed by the workers the master allots more slots. When a worker cracks the hash and returns the clear-text value the master confirm this and then signals all workers to stop cracking.

Web Backend:
The web backend acts as a proxy between the master and the workers. It does not perform any actual computation but validates the data submitted by both the parties and passes information between them.

Worker:
The worker performs the actual hard work of cracking the hashes. Each hash has a unique worker URL and this page explicitly asks for the user permission before the cracking process is started. Once the user accepts and clicks ‘Start’ the worker polls the web backend for available slots, the web backend returns an array of slots from its database. The worker cracks each slot and sends the result to the web backend. After completing all the slots it polls the web backend for more slots.

Here is the tool:
http://www.andlabs.org/tools/ravan.html

Wednesday, 12 November 2014

Chinese hacker installs Windows 98 on an iPhone 6

wCodes Network.

Bored of iOS8? There may be hope. A hacker has successfully installed Microsoft's Windows 98 on his iPhone 6 Plus, using a game emulator available in the App Store.


If you’re an iPhone owner already fed up of iOS 8, the most advanced version of Apple’s mobile operating system yet, there may now be an unlikely alternative.
According to a post on the popular tech forum bbs.feng.com, a pro-active member has successfully installed Windows 98 onto his brand new iPhone 6. The user states that the hack was achieved using iDOS, an emulator available on the App Store, and originally developed for playing classic DOS (Disk Operating System) games on iDevices.
Several blurry images on the forum appear to show the user's black iPhone 6 Plus running Windows 98, complete with the familar washed out turquoise desktop and classy grey window frames.
Although the nostalgic, grey tones of the 16-year-old operating system look as vibrant as ever on the iPhone 6 Plus' screen, you might want to hold out installing for now. Most of the screenshots appear to be error messages, with touch input and a range of other factors making for a less than slick user experience
The iPhone/Windows mutant is the latest in a long line of hacks in which classic software has been persuaded to run on increasingly modern and totally unsuitable machinery. As reported originally by the Verge, a 16 year old has been able to port classics such as Minecraft PE, Doom and Windows 95 to his Android Wear smart watch.



Phonearena also reported how another smartwatch owner has installed first generation Playstation games to their Android Wear device. Using a similar type of emulation software, the pioneering hacker has even posted hands on videos, with play just about possible on the smartwatch’s screen.


Tuesday, 9 September 2014

Finding Serial Key Of Any Software Using Simple Google Trick

Most of you download and use pirated softwares from torrents or any such other sites, but sometime it gets very difficult to find serial key of those softwares. I will make it easy for you by showing you simple yet very intersting google trick which will allow you to find serial key of any software very easily.

google tricks

How To Find Serial Key Of Any Software ?

The key 94FBR is a part of  Office 2000 Pro CD activation key that is widely distributed as it bypasses the activation requirements of Office 2000 Pro. By searching for 94fbr andthe product name, you are guarantee that the pages that are returned are pages dealing specifically with the product you're wanting a serial for. Follow simple steps given below to learn this trick

    1. Go to Google
    2. Then type  Software Name 94FBR
  • Replace Software Name with the name of software whose serial key you want to find
  • Eg: To find serial key of Nero i will type Nero 94fbr
    3. Now press Enter and you will find serial key of software you are looking for as shown below.
google trick to find serial key