Showing posts with label hacking tools. Show all posts
Showing posts with label hacking tools. Show all posts

Top Ten Ways

Earn Online(100%)

Get Your Gold CS package just for RS 7600/- And Start Earning more than 15000 Rs per month .... Click Here




Lots of people waste their precious time searchin to earn online...and they got many websites which assures to pay but instead of paying those websites  sucks their time..and  they got a big thumb...ha ha ha...so my this post is only for those people who wants to earn money online..but they should own a blog or website...

Saying truth no website pays for surveys n all...the only method of earning online is advertisement.If u own a blog or website ,advertise for the good companies on your blog or website.Below I am listing some names of good companies who actually pays for advertisement and refferals u made.........most of them are pay per click...... they all are geniune companies .............

PaisalivePaisa live  really pays for the emails u read send by them and for the refferal u made!!!! they send the promotional emails you only have to click it .more emails u read more u will be paid!!!!!!
ADF.LY :http://adf.ly/?id=184424 If u have a blog or website.Short your url by adf.ly and each time anyone clicks on your links u will get paid..actually why this company pays for that becouse..when someone clicks on your url for 5 seconds their advertisement will shown on your page..they get profit from that and they pays you some % of  their earning ...also they pay for the refferals u made...so advert and reffer more and more of your url u will get money .click here to short ur url


BIDVERTISERhere u can advertise ur site...or u can publish their advertiser on your blog or website and they will pay u for that.also u can join refferal program with them.reffer more and more and publish their advertisement they will surely pay u.





Top 10 Online  Sites That Actually Pay

As internet is growing fast and many sites are making fool of people by saying that they will people free.
For some people “Online Survey” is a smart ways to make money online and for some it is a nightmare. Yes it can be a nightmare if you are not careful in choosing survey sites that are legitimate. There are notorious sites that would charge you subscription fee and will disappear. Always remember any fee as up front have chances of being scam sites and they just want to run away with your money. On the other hand, you might come across sites that will ask you fill the survey and shop online to get rewards, remember such sites only require new leads and you would have to extract a lot of them to get to the ones that would really pay you.
But the real question here is, are their legitimate sites? Yes, there are definitely genuine online survey sites that pay you in cash or rewards. The best way to avoid scam is just not to get registered with sites that ask for signup fee. With genuine sites you are sure to make money, but bear in mind you cannot make a living taking up surveys and no site would pay you XXX money for just filling out surveys. But of course, you can make handsome supplementary income of 1$ to 10$ in an hour time. So to make your work easier in locating legitimate site, I have taken a comprehensive list of Top 10 Online Survey that actually pay and is worth your time!






AlertPay -AlertPay is the best site which pays to coustomer .just get a free acount here and start receving money.what u have to do is just sign up and reffer your fends and family members.you will get money for reffering your friends.u can receve money here send money..and many more


Reviewstream -Reviewstream is the site which pays for the personal reviews on any topic..just  click here  also it pays for each refreal u made....

surveysavvy- Surveysavvy is one of the oldest and best survey company to work with. The payment structure is always via check and usually sent within 3 or 4 weeks once the survey is done. They send you survey now and then depending upon your demographic location. You might not see surveys dropping in your inbox daily but once you have it is worth taking up, as the cash out could differ from 1$ to 30$. You are less likely to survive on Surveysavvy if you violate their terms and conditions!

mysurvey – You will get surveys daily and the payment structure is based on points. Once you have 1000 point in your account you are eligible to fetch in 10$. You might face lot screeners, but you will not go without paid. For taking up a survey you get 10 points, but if you qualify then you might get points anywhere between 200 to 2500! In fact, their surveys are fun to deal with and basically upon shopping. You also have a little application to download for letting you know about each new survey if you wish!

Brandinstitute This is an interesting site that sends you survey on new and forthcoming products. Mostly these products are about medications and households goods. Once you complete your survey you would get your money in your PayPal account within 6 weeks. Each survey last for about 20 to 30 minutes and pay is around $5 – 20$. You will get lot of surveys each week and you have more chances to qualify!

Opinionoutpost This is relatively a new market research company, but indeed good. The payment structure is via points – 1 point = 10 cents USD. Their survey could be of any kind and if you want to get more surveys then make sure you fill your profile. The frequency of surveys is about 3 to 4 a week. Do not forget to refer people to this site as each referral is worth 10 points that is $1.00!

Surveyspot – You will get lots and lots of surveys with Surveyspot. You would have to fill out few screeners before getting a paid survey. Many a times you will also get their products via UPS to test and survey is sent after a week. So you can use the product, fill in the surveys and get paid as well. Pay structure is via checks and pay is about $2.00 to $20.00 for each survey. Cash out is possible anytime with this company!

Esearch Esearch is simple and neat company to work with. You will get about 2 to 5 surveys each week. And the payment structure is via PayPal. Each survey has some form of “incentive” involved. Most incentivize all respondents and some have drawings. In all instances the incentive is clearly spelled out in the survey invitation. These incentives range from $1 to $5.00 or more. Easy to work without any complications!

harrispollonline Harris Poll Online powered by Harris Interactive is a very interesting and active survey panel. Payment structure is via points and you make minimum of 30 points with each survey. Their surveys are not only diverse in nature, but will also lead you to another survey immediately if you qualify. The more survey you take the more you have chances to qualify for cash prizes ranging from $10 – $10,000!

TestSpin You can make up to $15-$20 for a survey with TestSpin if you qualify. Survey invites are always with email notice and incentives are mostly cash. Although you get lots and lots of surveys it might be hard to qualify. Moreover they can also ask to fill up surveys strictly by males/females or a particular age group or ethnicity. Surveys usually take about two to four weeks to complete.

Mindfieldonline – This is another small but straightforward site to deal with. You get surveys about once a week. Payment structure is via PayPal and you must have $10.00 to ask for cash out. Most of the surveys are small and pay you about $2.00 each. It is not hard to quality surveys with mindfieldonline!

Ithinkinc – Their surveys are fun to fill up, although you may not receive often. Payment structure is via check and you get it usually in 3 to 4 weeks after the survey is completed. You would get some screeners before the paid survey is sent. They are mainly about household goods and products!

Taking an online survey is of course an excellent technique to make spare cash. However, certain things like opening an email account and PayPal is a must. The most important thing is to read their terms and conditions before signing up. Do have a note of all the id and password once you start registering with companies. Start taking surveys and see the cash flowing




10 RSS Subscriptions Services For Increasing Your Productivity Of Reading

Now a days Internet becomes the home of spam because the spam bots always searches the mail addresses so that they can bombarded it easily and tries to destroy the efficiency by creating problems for users. No need to worry RSS feed readers comes as a rescue to help you out because they are quick, spam free and offers you to follow news, website and software updates, newsletter, blogs and more. To get most of from newsfeed you need a powerful aggregator, which helps you in organizing, In this post, from the plethora of RSS Subscription Service  we’ve covered the 10 Best RSS Subscription Services for you.

*change detect
*omea readers
*bloglines
*mozilla thunderbird
*blog express
*sharp reader
*intravnews
*rssbandit
*awasu



LIST OF TOP FREE VPN PROVIDERS

This is a list of VPN service providers that has been offering FREE service for quiet a while now. There were many more, but they seem to have shut shop. So well, here goes nothing!

1. JAP / AN.ON –Anomity.Online







This is something that we have used for quiet some time now. Give it a try. I’m sure you will Love it!
“JAP (called JonDo in the scope of the commercial JonDonym anonymous proxy servers – AN.ON remains free of charge) makes it possible to surf the internet anonymously and unobserved“.
It is multi-platform and JAVA based.
Download JAP version 00.12.005 here.



2. AnchorFree Hotspot Shield






This is not a VPN service per-se, but can sure help you stay invisible online. It has ad’s just like we do for support. That should not bother you guys now. Right?
“Ensure you are private, secure, and anonymous online! Secure your web session, data, online shopping, and personal information online with HTTPS encryption. Protect yourself from identity theft online. Hide your IP address for your privacy online. Access all content privately without censorship; bypass firewalls. Protect yourself from snoopers at Wi-Fi hotspots, hotels, airports, corporate offices. Works on wireless and wired connections alike. Provides Unlimited Bandwidth. Works on the PC and the MAC, including new operating systems (Windows 7 and Snow Leopard)”
Download AnchorFree Hotspot Shield and instal here.



3. UltraVPN




This, in our opinion is also one of the good VPN service providers. We say that from constant use! It is cross platform and a very small download!
“UltraVPN is a client/server SSL VPN solution based on OpenVPN. It encrypts and anonymizes your network connection. UltraVPN is a simple user interface to connect or disconnect to our VPN servers.”
It is based on the OpenVPN service.
Download UltraVPN 1.0 here.


4. OpenVPN




One more of our favourites. This is what drives UltraVPN!
“OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-targeted for the SME and enterprise markets.”
You can probably use this and create your own VPN setup if you want as it is open source and multi-platform!
Download OpenVPN version 2.11 here.



5. Loki Network Project








“This is the first exclusively Windows and closed source VPN application.
Loki Network Project is free VPN service and SSL based free VPN server. It is an opportunity to protect your private data (IP address, e-mail/FTP/HTTP passwords, web-sites visited, uploaded/downloaded files and etc…) and bypass certain Internet access limitations you may have at your location. ”
We have not used this one. But, you try it and give us your feedback!
Download Loki VPN Client Version 1.6.1.47 here.



6. HideIP VPN




We don’t know about other clients (because we never tried using P2P!), but this one specifically mentions that they DO NOT allow P2P traffic!
“HideIPVPN offers FREE VPN accounts on our servers located in United States and United Kingdom. Make your traffic appear to originate from a United States or United Kingdom. Access sites like Pandora, ABC, NBC, BBC, ITV, etc.”
This service is not easy to sign up as they give away only a limited number of users per week! So, probably might be worth giving it a try due to its exclusivity? You connect using the Point-to-Point Tunneling Protocol (PPTP) protocol.
Sign up for a FREE HideIP VPN accounthere.



7. VPN TOOL

These guys provide free and PAID services as well. They offer two kinds of services: Virtual Private Network with Layer 2 Tunnel Connection (L2TP VPN) and IPSEC VPN that offers encrypted and Secured Virtual Private Network with 3 Layer Secure Tunnel Connection. Provides strong encryption and security (DES.3DES, AES).
“We provide professional VPN and anonymity services at competitive prices, using the best open source software available, software that has been rigorously tested by thousands of users. Our service will anonymize and at the same time secure your Internet connection, creating an encrypted tunnel between you and our servers. This will assign a new ip address to your computer, thus, anonymizing your entire Internet usage. Is your P2P traffic throttled by your ISP? Our service will solve your problem by encrypting the P2P traffic and making it very hard for your ISP to distinguish packets from one another.”
Check VPN TOOL out  here.


8. Its Hidden






The only catch being that the FREE connection is terminated every 20 minutes. Other than that, this service is perfectly fine!
“ItsHidden.com is the ultimate FREE surfing privacy service on the Internet with huge capacity and no complicated software to install, you already have everything you need on your computer right now! We are now also proud to launch our new paid service for more demanding uses!”
They also, like some of the above offer paid services too.
Check ItsHidden out here.

Hacking tools

BEST  HACKING TOOLS EVER





Open VPN
 
OpenVPN is a full-featured SSL VPN solution which can accomodate a wide range of configurations, including remote access, site-to-site VPNs, WiFi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. GUI-version for Windows!
http://uploading.com/files/GTWU6PHX/open...l.zip.html


BlueFTP

 
This is an old tool which will helps you to hack mobiles throw bluetooth. Try it by yourself.
http://uploading.com/files/KTR3ONRF/BlueFTP.zip.html


DELmE's Batch Virus Generator v1.0
This tool is a virus creater. It will create very proffesional virus. Never test any virus on your PC. Very effective for bad hackers. All credits go to DELmE
http://uploading.com/files/CS02T8P6/DELm...1.rar.html


DELmE's Batch Virus Generator v2.0
This tool is a virus creater. It will create very proffesional virus. I would say it is best virus creater i have ever saw. Never test any virus on your PC. Very effective for bad hackers. All credits go to DELmE
http://uploading.com/files/0BPU0ZCP/DELm...0.rar.html


Windows command list
This is a list for most of the windows operator commands. It can very useful for virus programmers.
http://uploading.com/files/SG3CU3V8/wind...t.rar.html


THC-Hydra 5.4
This tool is a really good one to hack websites.This tool supports: TELNET, FTP, HTTP, HTTPS, HTTP-PROXY, SMB, SMBNT, MS-SQL, MYSQL, REXEC,RSH, RLOGIN, CVS, SNMP, SMTP-AUTH, SOCKS5, VNC, POP3, IMAP, NNTP, PCNFS, ICQ, SAP/R3, LDAP2, LDAP3, Postgres, Teamspeak, Cisco auth, Cisco enable, LDAP2 and Cisco AAA. It is worth to try it.
http://uploading.com/files/WWZGWNJG/hydr...n.zip.html


John the ripper
This tool  should crack password
http://uploading.com/files/S06PAFJJ/john171w.zip.html


Rainbowcrack 1.2
This tool will helps you to crack the PC users and administartors passwords. This is really good. Tutorial on how to use it is included.
http://uploading.com/files/5R4T4YPI/rain...n.zip.html


Konboot
This tool should recover your lost passwords for your PCs users accounts. This is an iso file so you have to burn it on a CD so it works. Work for Windows/Linux
http://uploading.com/files/7VQ5MFN4/pass...o.zip.html


Firefox Master Password Remover
This tool will remove the Master password on firefox. I create it and test it on my PC and works fine. I got this idea since i saw many people begging for master password on their firefox browser. Very effective
http://uploading.com/files/7KII7524/Fire...r.rar.html


Rapidshare Points Generator v2.4
This tool should generate points for your rapidshare accounts. Clean but not test it. Try it and let us know if it works
http://uploading.com/files/K2IC5Z4G/Rapi...4.rar.html


Icon changer
I noticed that some people asking for ful version icon changer. I couldn't bring the full version but i bring this. A very simple tool to add/remove icons for any application. It is shareware.
http://uploading.com/files/TG37XPXE/Icon...r.rar.html


Icons Extract
The Icons Extract utility scans the files and folders on your computer, and extract the icons and cursors stored in EXE, DLL, OCX, CPL, and in other file types. You can save the extracted icons to ICO files (or CUR files for cursors), or copy the image of a single icon into the clipboard. Very useful
http://uploading.com/files/XDHT9FPG/icon...r.zip.html


XSS_Scanner_1.0
This tool have been posted twice before but looks it is lost in the forum so i took the initiative to post it in my list. This tool will scan the web using google and will search for vulnerable XSS website.
http://uploading.com/files/HU7BBAYR/XSS_...0.zip.html


k9 web protection
This tool will let you control your browsers by control what types of websites to block or what particulary websites to block. It is very effective for parental control to limit what there children can access including hacking . Also ability to protect from infected websites. A full list of websites already exist. Very effective
http://uploading.com/files/7RVR98TU/k9%2...n.rar.html


72389 Mass Bomber
This tool will let you to send messages to multiple emails from a signle email at the same time. very effective. All credit go to Nathan72389
http://uploading.com/files/PS93X57M/7238...r.rar.html


Nsis 2.45
This contain some really good scripts that can be used in your websites and ability to create the script you want. Very good for java writers
http://uploading.com/files/F0CY0R6K/nsis...g.rar.html


Password door
This tool will helps you to restrict access to applications installed on your PC. This tool will put a password that you choose on the application that you choose so no one can open it without a password. Very effective
http://uploading.com/files/SL389H3D/Pass...r.rar.html


Security administrator
This tool will give control on all tasks that all user account have. Block what you don't want them to have as tasks and options eg: block downloading
http://uploading.com/files/Z497IJSP/Secu...r.zip.html


L337 Virus Creator
This tool is a fake virus generator. It looks like a virus generator while in fact it will infect the person himself. Use it to trick your victims. Let them think they can create virus using this one while they will get infected once they press any button. NEVER EVER test it on yourself. It will infect you. All credits go to Right Hand Man.
Code:
http://i275.photobucket.com/albums/jj299/s...titled-1-18.jpg
http://uploading.com/files/7KO7NNNW/L337...r.rar.html




Password generator 2.02
This tool will create complex passwords that you choose the type of the password and ability to personalize the person.
http://uploading.com/files/SQ1FGMAQ/PWGen-2.02.rar.html


Dork list
This is a list for some of the most used dorks in hacking websites.
http://uploading.com/files/7LVF2XEF/Dork...t.rar.html


Avast Virus removal pro v4
This is one of the best virus removal if not the best. It will search for virus on your system and remove them. Very effective
http://uploading.com/files/XPZGHUNA/Avas...4.rar.html


Password Zilla
This is the best password generator i have ever saw in my life. It will create the most complex and complicated passwords in the world. Choose the format of your password and what caracters to use and let it work. Also this tool can crack hashes. I am in love with this tool. My msn was hacked twice but a third time when i used a password generated by this one. Very effective
http://uploading.com/files/PKLLKB3V/Pass...a.rar.html


WinRar Password Remover v1.1
This tool will crack any protected winrar files.
http://uploading.com/files/PEXJGFBY/WinR...1.rar.html


GroundZero's Account Freezer V1.0
This tool will freeze facebook accounts.All credits go to GroundZero
http://uploading.com/files/TGKRE72N/Grou...0.zip.html
Tutorial


LC4
One of the most proffesional windows password crackers. very useful
http://uploading.com/files/H1M3LOB3/LC4.rar.html


1 million serials
This have been posted before and i think it is damn good that it shouldn't be lost with the other files. It will provide you with serials for over 1 million software.
http://uploading.com/files/CFO0UES9/1.Mi...s.rar.html


Forum auto poster
This was posted before in the forum but his owner was quicked out the forum.This tool will helps you to auto post in multiple forums in very few and easy steps.
http://uploading.com/files/J4U3KXUC/foru...r.rar.html


Autorun pro entreprise
This is the best autorun maker i have ever saw. It is damn pro. It can be very useful making your virus to autorun.
http://uploading.com/files/E24WUTUH/Auto...e.rar.html


File renamer
This tool will remane a very big number of files and folders at the same in only few clicks. Pro hackers can use this one to mess victims system.
http://uploading.com/files/S795U2M2/File...r.rar.html


Cheat Engine 55
This tool will helps to hack different things including flash games.
http://uploading.com/files/ZMJOZEIC/Chea...5.exe.html


Alpha editor
Alpha Editor is a Windows based text editor designed to make the creation and use of batch files by administrators easier. Alpha editor includes built in coding for login script creation.
http://uploading.com/files/C52TN3VM/Alph...r.zip.html


CSS Maker
Create stylesheets with no CSS knowledge! DonƂ´t worry about the german intro, language can be adjusted in the program...;) very useful for websites writers
http://uploading.com/files/2R3S5TW0/CSS%...r.zip.html


Scour 2.3.7
I know that many people use scour.com to gain money and that they are getting tireds doing the searches by themself.This tool was posted before in the forum. Use theis tool to automate the searches on scour.com. Jsut input your informations in "Settings.ini" file and you are ready to use it and to win money.
http://uploading.com/files/W1WEC4NL/Scou...7.rar.html

Now download as a premium member

Guys now u can download from hotfile,rapidshare,megaupload for free as a premium member .As a premium member u need not to wait for time.below i m listing some links of premium link generator.just check and enjoy  downloading...........



No speed limit.but u can download only three files per IP.To bypass this you can restart your modem and can simply change your IP.

Just go to website select server you want,fill captcha and paste link that u want to download



HERE ARE LINK :


FOR RAPIDSHARE::

http://rsplg.com/


http://leechrs.com/



FOR HOTFILE::

http://hfplg.com/



FOR MEGAUPLOAD::

http://muplg.com/

Download cellphone forensic software

Download the best cellphone forensic softwares used by the FBI,CBI and many top agencies.........
click to download here

Download wireless security tools

Download more than 100 wireless security tools +scanners
click to download here

              

havij 1.3 sql injector

Havi 1.3 sql injector ,a tool for injecting sql queries.
click to download here

Download Prorat

BUILT YOUR TROZEN AND HACK YOUR FRIENDS PC.
CLICK TO DOWNLOAD here
password:-pro
 

Download Free XSS Shell v0.3.9 - (Xss)Cross Site Scripting Backdoor Tool



Only For Educational Purpose  I Take No Responsibility Of Any Misuse.


XSS Shell v0.3.9 - Cross Site Scripting Backdoor Tool

XSS Shell is a powerful XSS backdoor which allows interactively getting control over a Cross-site Scripting (XSS) vulnerability in a web application. Demonstrates the real power and damage of Cross-site Scripting attacks. WHAT IS XSS SHELL ?
XSS Shell is powerful a XSS backdoor and zombie manager. This concept first presented by XSS-Proxy (XSS-Proxy: A tool for realtime XSS hijacking and control). Normally in XSS attacks attacker has one shot, in XSS Shell you can interactively send requests and get responses from victim, you can backdoor the page.
You can steal basic auth, you can bypass IP restrictions in administration panels, you can DDoS some systems with a permanent XSS vulnerability etc. Attack possibilities are limited with ideas. Basically this tool demonstrates that you can do more with XSS.
FEATURES
XSS Shell has several features to gain whole access over victim. Also you can simply add your own commands.
Most of the features can enable or disabled from configuration or can be tweaked from source code.
Features:

  • Regenerating Pages
  • Keylogger
  • Mouse Logger (click points + current DOM)
Built-in Commands:
  • Get Keylogger Data
  • Get Current Page (Current rendered DOM / like screenshot)
  • Get Cookie
  • Execute supplied javaScript (eval)
  • Get Clipboard (IE only)
  • Get internal IP address (Firefox + JVM only)
  • Check victim’s visited URL history
  • DDoS
  • Force to Crash victim’s browser
  Install Admin Interface;

1. Copy "xssshell" folder into your web server
2. Copy "db" to a secure place (below root)
3. Configure "database path" from "xssshell/db.asp"
4. Modify hard coded password in db.asp [default password is : w00t]
5. Now you can access admin interface from something like http://[YOURHOST]/xssshell/
Configure XSS Shell for communication;
1. Open xssshell.asp
2. Set "SERVER" variable to where your XSSShell folder is located. i.e: "http://[YOURHOST]/xssshell/";
3. Be sure to check "ME", "CONNECTOR", "COMMANDS_URL" variables. If you changed filenames, folder names or some kind of different configuration you need modify them.

Now open your admin interface from your browser,
To test it, just modify "sample_victim/default.asp" source code and replace "http://attacker:81/release/xssshell.js" URL with your own XSS Shell URL. Open "sample_victim" folder in some other browser and may be upload in to some other server.

Now you should see a zombie in admin interface. Just write something into "parameters" textarea and click "alert()". You should see an alert message in victim's browser.



-------------------------
SECURITY NOTES
-------------------------
- As a hunter be careful about possible "Backfire" in getSelfHTML(). Someone can hack you back or track you by another XSS or XSS Shell attack.
    - Checkout "showdata.asp" and implement your own "filter()" function to make it safer for you.

- Put "On error resume next" to db.asp, better modify your web server to not show any error.

-------------------------
HOW CAN YOU EXTEND?
-------------------------
First implement it to xssshell.asp
    1) Add new enum for your control
        - Set a name and unique number like "CMD_GETCOOKIE"
            - var CMD_SAMPLE = 78;
      
        - Set datatype for your response (generally TEXT),
            - dataTypes[CMD_SAMPLE] = TEXT;
      
    2) Write your function and add it to page
        - function cmdSample(){return "yeah working !"}
  
    3) Call it
        - Go inside to "function processGivenCommand(cmd)"
        - Add a new case like "case CMD_SAMPLE:"
  
    4) Report it back
        - Inside the case call log;
        "log(cmdSample(), dataTypes[cmd.cmd], cmd.attackID, "waitAndRun()");"
      
Secondly Implement it to admin interface;
    - In db.asp just add a new element to "Commands" array (command name, command unique number, description).
    i.e. "cmdSample()",78,"Command sample ! Just returns a message"

There are parameters and lots of helper in the code. Check out other commands for reference.
Enable debug feature to debug your new commands easily.
-------------------------
KNOWN BUGS;
-------------------------
- Keylogger is not working on IE
- Possibly not going to work for framed pages because of frame regeneration.
- Not working on Konqueror

DOWNLOAD:
http://www.ziddu.com/download/9267912/XSSShell039.zip.html

C panel Can be hacked using different methods




1) Bruforce - We can use Hydra Tool to get password of c-panel or ftp. or using a Bruteforce script : http://www.hack0wn.com/view.php?xroot=80.0&cat=sources
2) Using Exploits - Some c-panels are vulnerable, can be hacked using exploits like - http://www.facebook.com/l.php?u=http%3A%2F%2Fwww.exploit-db.com%2Fexploits%2F11211%2F&h=4d359OYLLDE40SEdximoxHyk4CA , http://www.exploit-db.com/exploits/14188/
3) Other methods , You can reset C-panel access using server rooting.
4) One more method of hacking can be, from victim's side. If victim use c-panel pass, or store that in his computer, then u can you RAT tools to access his pc to get pass. You can also use one of the following ways:1)If the domain is propagated, you can access your C-panel in the following ways: http://www.yourdomain.com/cpanelhttp://www.yourdomain.com:20822)If the domain name has not yet propagated, you can use your shared hosting or dedicated hosting IP address:
Example: http://207.44.249.160/cpanelhttp://207.44.249.160:2082If cannot login to c-Panel reseller hosting, then Make sure to replace “yourdomain” with your domain name and to include the “/” at the end of the address. If your account is new, you will need to use your shared or dedicated hosting IP instead of “yourdomain” until the domain name has propagated. What are the different error pages that we get in Cpanel hosting?If an incorrect request has been made by a web page viewer the error pages are pages that will show up.404 error page, if they try to go to a page which does not exist on your site.
400 – Bad Request
401 – Authorization Required
403 – Forbidden
404 – Page Not Found
500 – Internal Server ErrorHow to view disk usage per directory?Click on “Disk usage” and you can see the disk space used by all your directories in megabytes.
Will the Cpanel web hosting work before I transfer the name servers?After you sign up with a hosting company you will receive your welcome e-mail which contains your account information such as IP address, username, password, control panel URL and other necessary information in order for you to get started.Then you can login to your control panel, regardless if your domain is already pointed to the name servers of the hosting company or not. The website can be accessed for the meantime in the following way:http://servername.eukhost.com/cpanelBasic cPanel VPS Security Measures As server technology moves on and becomes more modern, the threats that face both Windows and Linux servers are becoming stronger meaning that they still pose a serious threat to even the most secure of web hosting servers. Many Linux based servers in the web hosting industry will be using the cPanel control panel so that clients of the web hosting providers concerned are able to manage their web hosting accounts, and so that the system administrators are able to manage the web hosting servers through a web browser. And as server technology moves forward and becomes cheaper, many users are upgrading their existing web hosting packages to VPS servers so that they can take advantage of the fact that they have their own resources; however, with this comes many users that are unable to secure their servers to such an extent that most attackers won’t be able to gain entry. Web hosting providers will in most cases offer you basic assistance when it comes to securing your server, but its the smaller things such as keeping your server software updated that can make a difference. However, whether you are good with managing servers or not there are still several different actions that you can take to ensure that your server is secure to an acceptable level.The main steps that you will need to take to secure your cPanel VPS server to an acceptable level are really quite basic, and you may have software such as a firewall installed on your local desktop computer. If you are unsure as to any steps then your web hosting provider should have a support team that are able to install such security components for you. The main security components that you will be installing on your cPanel VPS will include:
•CSF Firewall•RKHunter•SIM (System Integrity Monitor)•LES (Linux Environment Security).We will also discuss the basic hardening of both PHP and Apache since if left unmodified both of these can be used to gain access to an insecure server. There are also measures that you can take to secure the MySQL database server.
Installing CSF, LES and SIM
CSF is a popular firewall in the web hosting industry since it integrates very well with the WHM side of the cPanel/WHM Linux control panel suite. When configured correctly CSF will block any IP addresses/hostnames that attempt to attack your VPS in any way; for example, you may find that a bot is trying to attack your server by trying to access a certain service using different username and password combinations – after a certain amount of failed logins, LFD (logon failure daemon) which comes with CSF will automatically block the attacking IP. Installing CSF really is a piece of cake; all you need to do for the basic installation is run the following commands in an SSH window:
•wget http://www.configserver.com/free/csf.tgz•tar -xzf csf.tgz•cd csf•sh install.shOnce you have done that, you will find that CSF has been successfully installed and can be managed through the WHM control panel. All you need to do is scroll down to the bottom of the left hand menu and select it from under the ‘Plug-Ins’ menu. However, in some cases you may find that your cPanel server already has another firewall combination install – APF and BFD; now, in order for CSF to work you will need to remove both of these, to do so you will need to run the following command from the CSF folder in your terminal window:•sh remove_apf_bfd.shOnce initially installed CSF will be running in what is called ‘testing’ mode which means that it isn’t doing its assigned job – protecting your server from malicious attackers. From here you will need to configure CSF yourself using the configuration file, and once you are happy with your modifications you only need to set the ‘TESTING’ variable in the configuration file from its current value of ’1′ to ’0′ which will then put the firewall into actions once it has been restarted. LES and SIM aren’t as important to use as CSF may be, but both still have their uses when it comes down to the security of your server and the monitoring of it. The purpose of LES is to prevent any environment based attacks, i.e. attacks which may root from bugs or security holes that may exist in files that are hosted on your cPanel server. SIM is responsible for the monitoring of your system resources and the important programs that you may have running on your system and will notify you of any problems.Installing and Configuring Rootkit Hunter (RKHunter)Rookit hunter is probably one of the most useful applications that you can have installed on your cPanel VPS server. Although rootkits can’t be removed in most cases simply because they are installed into system files, RKHunter will still notify you of any rootkits that may exist in your system so that you can take the necessary steps to reload your cPanel server. Rootkit hunter is both easy to install and configure, and the best thing about it is that you can configure it to do daily scans to ensure that if any rootkits are discovered they aren’t able to affect your server too much. The main steps for installing RKHunter are:
•wget http://downloads.sourceforge.net/rkhunter/rkhunter-1.3.2.tar.gz•tar -xzf rkhunter-1.3.2.tar.gz•cd rkhunter-1.3.2•./installer.shOnce you have RKHunter installed it may be useful to schedule it to do daily scans and to update itself on a regular basis so that you don’t have to. In order to schedule it to do a daily scan you should follow these steps:
•vi /etc/cron.daily/rkhunter.sh (press ‘shift + I’ to make the file editable)•(/usr/local/bin/rkhunter –update && /usr/local/bin/rkhunter -c –cronjob 2>&1 | mail -s “RKhunter Scan Details” email@domain.com) – (replace email@domain.com with your own email address)•press ‘esc’ and then type ‘:wq’, and your file will be saved•chmod 700 /etc/cron.daily/rkhunter.shBy following the steps above you are able to configure RKHunter to run a daily scan which will then be emailed to you but the same script will also do a daily update check.
Securing the /tmp Partition
Some of the attacks and exploits that can take place against any Linux server normally take place within the /tmp directory which is why it is incredibly important that you secure this one directory/partition. If you are running cPanel on a dedicated Linux hosting server then you simply need to run the following command to secure /tmp:
•/scripts/securetmpHowever, it is a different matter on cPanel VPS servers since the above script doesn’t work on most Virtuozzo based VPS servers. In order to mount/secure /tmp on a cPanel VPS hosting server, you will need to add the following line to ‘/etc/fstab’:
•none /tmp tmpfs nodev,nosuid,noexec 0 0By mounting /tmp with noexec and nosuid we are able to ensure that no executables are able to run in the /tmp directory.
Securing Apache/PHP
There are certain measures that you can to ensure that any installations of PHP or Apache that you may have are secure. The most obvious measure you can take is to ensure that any installations that you have of either are up-to-date so that any security holes that there may have been in older versions have been healed on your own server. In terms of Apache you should ensure that you have specific modules installed such as mod_security which will prevent any web based injection attacks and mod_evasive which will prevent any web based brute force attacks.Mod_security can be installed by recompiling Apache through the ‘EasyApache’ interface which is now included with all new cPanel installations. By re-compiling Apache you can also update PHP to the latest version that is available. Through EasyApache you can also re-compile PHP with SuHosin which will add another layer of security to any PHP scripts tha you may be hosting. Another important step to carry out is the enabling of PHP SuExec which can be done through the WHM control panel by following these steps:
•under the ‘Service Configuration’ section of the left menu select ‘Apache Configuration’•select ‘PHP and SuExec Configuration’•under ‘Alter Configuration’ set Apache SuExec to ‘On’You should also disable certain dangerous PHP functions on your cPanel server to ensure that any unsecure PHP scripts that you are hosting won’t be able to compromise the security of your entire server. In order to do so, you should follow these steps:
•php -i | grep php.ini•vi /usr/local/lib/php/php.ini•in your PHP configuration file you should look for the ‘disable_functions’ line•once you have found it, change it to: ‘disable_functions = “system,passthru,exec,popen,proc_close,proc_get_st atus,proc_nice,proc_open,proc_terminate,shell_exec ,highlight_file,escapeshellcmd,define_syslog_varia bles,posix_uname,posix_getpwuid,apache_child_termi nate,posix_kill,posix_mkfifo,posix_setpgid,posix_s etsid,posix_setuid,escapeshellarg,posix_uname,ftp_ exec,ftp_connect,ftp_login,ftp_get,ftp_put,ftp_nb_ fput,ftp_raw,ftp_rawlist,ini_alter,ini_restore,inj ect_code,syslog,openlog,define_syslog_variables,ap ache_setenv,mysql_pconnect,eval,phpAds_XmlRpc,phpA ds_remoteInfo,phpAds_xmlrpcEncode,phpAds_xmlrpcDec ode,xmlrpc_entity_decode,fp,fput”‘•save the file•restart Apache (service httpd restart)You should also set a MySQL root password through the ‘Set Root Password’ option that is located under the ‘SQL Services’ menu.Conclusion
Now that you have followed the basic steps to secure your cPanel VPS, you can be safe in the knowledge that malicious attackers are highly unlikely to be able to gain access to it in any way. However, it is still down to you to ensure that all the security software amongst other programs that you have installed on your VPS server is kept up-to-date. You should also monitor your VPS hosting server externally since then you will know if your VPS crashes but most importantly if anyone gains unauthorised access to it. If you are the only one using the server then you should also ensure that any PHP files of scripts that you are running are unaffected by any security features that you enforce but mainly that the actual coding itself is secure and can’t be injected.CPanel is one of the most popular control panels in the world today. CPanel is used for the maintenance of the website and the web server. The CPanel has a very good graphical user interface (GUI) which makes it very easy to use for all its users.Anyone who is new to this field of web hosting and website development can design and develop a professional website using this cPanel. By using the CPanel, you will have complete control over your website. It is one of the most reliable control panels in the world today. CPanel even supports PHP, Front Page, MySQL, Fantastico, and many more exciting web applications and features. c
Panel has a feature that gives you all the important statistics about your web server. For example, the bandwidth and disk space usage, web traffic details, domain and sub-domain details, the places from where your web traffic comes to your website and to which web pages, how long the web traffic stays on which web page, and much more.CPanel also offers some of the most important add-ons and great web tools like Fantastico Deluxe, which contains easy installation of some of the most important applications like the content management system, Joomla that can be directly installed using this control panel.
Fantastico Deluxe allows you to install some very important web scripts with the help of just a few mouse clicks. Also, installing these web scripts is very easy even for the novices, and you do not need to have extensive knowledge about the process of installation these advanced web scripts and applications. Using the CPanel, you can perform many important tasks. CPanel also makes the web programming and the coding of the website much easier.
As stated earlier CPanel has graphical user interface. It helps the difficult tasks to become much easier. For example, deleting a whole table from your database, setting passwords to some parts of your website, changing the content of your website, and much more can be done quite easily. CPanel even allows you to change the interface of the control panel according to your needs.
As CPanel is one of the most popular control panel used, and the online marketers make use of CPanel web hosting, there are many advanced compatible software’s and applications or scripts available to be used along with the powerful CPanel. It provides advanced scalability of your website.
Many web hosting service providers even provide some very powerful custom-made web designing tools. Some control panels provide only some of the basic features like managing web files, creating email accounts, creating sub domain names, etc.However, CPanel provides much more sophisticated features when compared to the other control panels. For example, cron jobs, MIME types, Apache handlers, add or remove email accounts, Auto-responders, and much more.
The CPanel also provides PHPMyAdmin for database management, can install Front Page extensions, redirect mail and URL, create FTP accounts, etc. All these exciting applications and tools are included with the CPanel for the benefit of the users.
If you have a personal website or even a small online business, then CPanel is the best control panel that you can choose for you website for its ease of use and its powerful features
 
© Copyright 2010-2011 Learn How To Hack! Learn Ethical Hacking & Download Free Hacking Softwares All Rights Reserved.
Template Design by Free Hacking | Published by Daily News | Powered by Free Hacking.