With Gmail being one of the most widely used email services across the globe, it has also become a favorite place for many to engage in secret relationships and exchange cheating messages. So, in order to reveal the secret, it becomes inevitable for people to hack Gmail password of their loved ones.

Further in this article you can learn about some of the possible ways through which you can successfully hack a Gmail password.

Possible Ways to Hack Gmail Password

With 10+ years of my experience in the field of information security, I can tell you that the following are the only two ways to hack Gmail password.

1. Keylogging: Easiest Way to Hack Gmail Password

Keylogging is by far the easiest way to hack Gmail account. Keylogging involves the use of a small software program called the keylogger. This keylogger when installed on a given computer will capture each and every keystroke typed on the keyboard including Gmail and all types of passwords.

Does Keylogger Require Any Special Knowledge to Hack Gmail?

No, absolutely not! Keyloggers are designed in such a way that even the first time users also find it easy to install and control. Anyone with a basic knowledge of computer can use it with ease to hack any Gmail account.

Is it Possible to Detect a Keylogger?

Right after the installation process is completed, the keylogger goes completely hidden and continues to work in the background. Hence, it is impossible for the users of the computer to know about its presence or about your attempt to hack Gmail.

What if I do not have Physical Access to the Target Computer?

Well, you need not worry as I am going to suggest one of the best keylogger program that supports installation on a local computer as well as a remote computer. I recommend the following keylogger as the best to hack Gmail account:

Download KeyLogger From its Offical Site :)

Top Features of Realtime-Spy:

• ACCESS ANY GMAIL PASSWORD!
  This product can be used to hack Gmail or any other online password.
• NEVER GET CAUGHT!
  Captures Gmail password in a total stealth mode so that you need not worry about being caught or traced back.
• WORKS ON WINDOWS AND MAC
  Fully compatible with Windows XP/Vista/7/8 (32 and 64-bit) and Mac.

You get a detailed step-by-step instruction and technical support after your purchase. So, go grab Realtime-Spy now and expose the truth!

What About Mobile Devices?

To hack Gmail of mobile users, there is a mobile version of the same program called mSpy which you can download from the following link:

2. Phishing: Difficult Way (for advanced users only)

Phishing is a way to capture sensitive information such as usernames, passwords and credit card details. Phishing usually involves the use of a spoofed Gmail page (or a fake Gmail website) whose look and feel is almost identical to that of the legitimate websites Gmail website. When the users try to login from this fake Gmail page and enter their password there, the login details are stolen away by the hacker.

However, creating a fake login page for Gmail and taking it online to successfully steal the password is not an easy job. It demands an in depth technical knowledge of HTML and scripting languages like PHP, JSP etc. In addition to that, carrying out a phishing attack is a serious criminal offence. So, unless you’re a pro hacker I only recommend using the keyloggers to hack Gmail password.

DISCLAIMER:  YOU IMPLEMENT ALL THE INFORMATION PROVIDED IN THIS ARTICLE AT YOUR OWN RISK. USAGE OF SPYWARE WITHOUT PRIOR USER CONSENT MAY BE AGAINST YOUR LOCAL LAWS AND YOU DO IT AT YOUR OWN RISK!

How to Hack Gmail Password: Gmail Hacking

• At 23:18
• 2 comments

Read More

Today i am gonna show you how to hack a website using sql injection.To find SQL vulnerable sites refer to this post.

Software and Things you must have :-

1. Havij SQL injection Tool, download it from here(Run as Administrator)

2. A sql vunerable site, I am taking this site http://examplesite.com/catalogo_nuevos_detalle.php?id=2 as an example.

3. A very important thing i.e mind.

Checking for sql vulnerability :-

Here i am taking http://examplesite.com/catalogo_nuevos_detalle.php?id=2 as an example. 

Now to check is this site vulnerable to sql, I will simply add ' after the site url

like this http://examplesite.com/catalogo_nuevos_detalle.php?id=2'

and i get this error on the site

You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1

It means that site is vulnerable to sql injection.

Exploiting the vulnerable site :-

1. Open Havij and paste site url in target field and hit enter

.

2. Now wait for Havij to get all the databases of the website.

3. Now click on available database of site and click on Get Tables like i am gonna select 535480_toyonorte of my site like in image.

4. By clicking Get Tables Havij will look after the tables available in the database.

5. Now after the scanning Havij will get all tables, now the main work start , you have to check it there table available named as admin, users and something similar to these words like i get usuario in my website and select it and click on Get Columns. Like in pic given below.

6. Now after clicking Get Columns havij will get all the columns available in users table.

7. In my case i found diffrent columns like id, login, pass an many more.

8. Now select the columns and click on Get Data like in pic given below.

9. Now havij will look after the data available in columns login and password i.e admin username and passowrd like i get 

username --> adminpassword--> 21232f297a57a5a743894a0e4a801fc3 (inencrypted form)

Like in image below

10. Now after i get username and password there is a problem that passowrd i s encrypted in mdm language , so we have to crack it .

11. To crack encrypted password just copy password click on MD5 tab in havij and paste the encrypted password in MD5 hash field and hit start.Now havij will try to crack the password. Like i cracked in image given below.

12. Now i get Password cracked as admin.

13. Now we will check for admin panel where we gonna login with username and passoword.

14. To find admin panel click Find Admin tab in Havij and click start. Now havij  will check the admin panel of website.

In my case i found http://examplesite.com/admin/ as admin panel, now open it in a web browser and login with username and password and now you are in admin panel.

15. Now upload the shell from admin panel. See the tutorial from here.

Note :-

1. Website hacking is illegal

2. Use proxy, tor, vpn for your security.

3. This is for only educational purpose.

Hacking Website Using Havij...:)

• At 23:22
• Leave a Comment

Read More

I was shocked when my friend told me about this crazy trick because it looks like an actual attack. Simply You can copy and paste the following into an open Notepad window, then save the file with any name you choose and an extension of “.bat”

Here’s the code:

cls
:A
color 0a
cls
@echo off
echo Wscript.Sleep
echo Wscript.Sleep 5000>C:sleep5000.vbs
echo Wscript.Sleep 3000>C:sleep3000.vbs
echo Wscript.Sleep 4000>C:sleep4000.vbs
echo Wscript.Sleep 2000>C:sleep2000.vbs
cd %systemroot%System32
dir
cls
start /w wscript.exe C:sleep3000.vbs
echo Deleting Critical System Files…
echo del *.*
start /w wscript.exe C:sleep3000.vbs
echo Deletion Successful!
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo:
echo Deleting Root Partition…
start /w wscript.exe C:sleep2000.vbs
echo del %SYSTEMROOT%
start /w wscript.exe C:sleep4000.vbs
echo Deletion Successful!
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo:
echo Creating Directory h4x…
cd C:Documents and SettingsAll UsersStart MenuPrograms
mkdir h4x
start /w wscript.exe C:sleep3000.vbs
echo Directory Creation Successful!
echo:
echo:
echo:
echo Execution Attempt 1…
start /w wscript.exe C:sleep3000.vbs
echo cd C:Documents and SettingsAll UsersStart MenuProgramsStartuph4x
echo start hax.exe
start /w wscript.exe C:sleep3000.vbs
echo Virus Executed!
echo:
echo:
echo:
start /w wscript.exe C:sleep2000.vbs
echo Disabling Windows Firewall…
start /w wscript.exe C:sleep2000.vbs
echo Killing all processes…
start /w wscript.exe C:sleep2000.vbs
echo Allowing virus to boot from startup…
start /w wscript.exe C:sleep2000.vbs
echo:
echo:
echo Virus has been executed successfully!
start /w wscript.exe C:sleep2000.vbs
echo:
echo Have fun!
start /w wscript.exe C:sleep2000.vbs
pause
shutdown -s -t 10 -c “Your computer has committed suicide. Have a nice day.”

Here’s how it will look like once it is launched:

Your victim’s PC will display messages as in the above image, and then initiate a shutdown sequence which can be stopped by entering “shutdown ““a” in the Run command box. It looks bad, but is otherwise completely harmless

Fake Virus Batch File...

• At 23:21
• Leave a Comment

Read More

Before Some days i have received lots of mails, Readers ask me how they can Access Someone's Whats app account then after i thought i will write an artical on Whats app Hacking....

1) Uninstall WhatsApp from your phone or device. You'll install it again at the end of the method, but you'll need to configure it differently, and the easiest way to make sure you'll be able to do that correctly is to completely uninstall it now.

2) Obtain your target's phone. You'll need it for two different steps throughout the process, but this shouldn't take too long - you should be able to return it before your target starts to miss it.

3) Find your target's phone's Media Access Control (MAC) address. A MAC address is a unique identifier assigned to your phone or other device that essentially serves as its online identity. Find and write down your target's MAC address. It takes the form of six pairs of letters or numbers, separated by colons (01:23:45:67:89:ab).

• On an Android, find this in Settings → About phone → Status → Wi-Fi MAC address.
• On an iPhone, go to Settings → General → About → Wi-Fi Address.
• On a Windows phone, look in Settings → About → More info → MAC address.
• On a BlackBerry, go to Options → Device → Device and Status info → WLAN MAC.

4) Find your MAC address using the instructions above. Make sure to save it somewhere secure, as you'll want to change your device back to that address once you're done.

5) Change ("spoof") your phone's MAC address to that of your target. This will allow your phone to pass as your target's, letting you convince WhatsApp that you are your target when you log in.

• On an iPhone or other device, install a MAC spoofing app like MacDaddy X or WifiSpoof. Use that to change your MAC address.
• On Android, install BusyBox and the Terminal Emulator (apps available for free on Google Play). In the terminal, type "ip link show" to see a list of interfaces. Identify the one that has your MAC address -- for this example, we'll use the eth0 interface. In the terminal emulator, enter "ip link set eth0 address XX:XX:XX:XX:XX:XX" and "ip link set eth0 broadcast XX:XX:XX:XX:XX:XX", where eth0 is the interface you identified and XX:XX:XX:XX:XX:XX is your target's MAC address. To check that you've successfully changed your MAC address, enter "ip link show eth0."

6) Install and configure WhatsApp on your phone. Enter your target's phone number to set up WhatsApp rather than your own. This will allow you to receive their messages and send messages from their account.

7) Get the confirmation code from your target's phone. This code will be sent to their phone number as part of the WhatsApp configuration process. Access their phone one last time to get that verification code. Enter it into WhatsApp on your phone when prompted, and you're all ready to go.

• If you don't want your target to find out about your spoofing, make sure to delete the confirmation code from their phone before they can see it.

8) When you no longer need to access your target's WhatsApp account, change your MAC address back to what it was. Repeat the instructions to change it, but this time change it to your original address rather than your target's. This will restore your phone to how it was originally, which will ensure that there are no future problems with Internet usage or connectivity.

NOTE-  rooted phone required

Whats App Hacking (Via MAC spoofing)

• At 22:18
• Leave a Comment

Read More

DDoS is short for Distributed Denial of Service.

DDoS is a type of DOS attack where multiple compromised systems, which are often infected with a Trojan, are used to target a single system causing a Denial of Service (DoS) attack. Victims of a DDoS attack consist of both the end targeted system and all systems maliciously used and controlled by the hacker in the distributed attack.

How DDoS Attacks Work

According to this report on eSecurityPlanet, in a DDoS attack, the incoming traffic flooding the victim originates from many different sources – potentially hundreds of thousands or more. This effectively makes it impossible to stop the attack simply by blocking a single IP address; plus, it is very difficult to distinguish legitimate user traffic from attack traffic when spread across so many points of origin.

The Difference Between DoS and DDos Attacks

A Denial of Service (DoS) attack is different from a DDoS attack. The DoS attack typically uses one computer and one Internet connection to flood a targeted system or resource. The DDoS attack uses multiple computers and Internet connections to flood the targeted resource. DDoS attacks are often global attacks, distributed via botnets.

Types of DDoS Attacks

There are many types of DDoS attacks. Common attacks include the following:

• Traffic attacks: Traffic flooding attacks send a huge volume of TCP, UDP and ICPM packets to the target. Legitimate requests get lost and these attacks may be accompanied by malware exploitation.
• Bandwidth attacks: This DDos attack overloads the target with massive amounts of junk data. This results in a loss of network bandwidth and equipment resources and can lead to a complete denial of service.
• Application attacks: Application-layer data messages can deplete resources in the application layer, leaving the target's system services unavailable.

D'Dos

• At 03:06
• Leave a Comment

Read More

Android mobile pattern is the first layer of security in every android phone. On The internet, you find a different type of solutions for unlocking android phone pattern from many ways. Here we collect some best methods and tricks that can help you in bypassing unlock android pattern. If you forget your android mobile pattern these methods are very helpful for you.

We provide you 3 methods for unlocking android phone pattern. I am sure with this guide you can unlock your android phone.

Unlock Android Pattern from Recovery Mode

• First of all, you need to switch off your android mobile phone and keep it off for sometime 1-2 min.
• After switching of your android device, press your up ↑ volume button and Press It down.
• Now press the power button and hold it too along with the volume up button.
• It will start a secret terminal interface (Android Recovery mode).
• Then press to use home button for scroll volume up and down or swipe up and down.
• Then you will get to the choose option Delete All User Data.
• Now in this way, your android lock pattern is unlocked now the problem is solved.

This is one of the most basic methods for unlocking the android phone. This method works in all android phones. But in this process you loss your mobile data.

Unlock Android Pattern from Just Sending SMS

Unlock Android mobile pattern or pin from just sending SMS is really a one of the best methods. But these tricks work only with SMS Bypass android app.Make sure you installed SMS Bypass android  app in your phone. In future, if you forget your android mobile pattern, you can recover it through this android app. You can remove old android pattern or pin from just sending SMS.  So guys installed  this android app in your phone, when you forget or password, just sends SMS from another android phone and your pattern will be unlocked.

Unlock Android Pattern from CMD (Works with Computer)

The main benefit of this method is you can unlock your android phone pattern without loosing your data. In this method we delete gesture.key files from your android phone. This file stores your android mobile gesture pattern.

What you really need for Unlock Pattern from CMD ADB Method

• Download ADB Files with Drivers
• USB Cable
• Window Laptop or PC
• Locked Android Phone

Make sure that your USB Debugging is enabled in your phone otherwise, this method does not work in your android phone.

If you want to test this method in your phone, so you can enable USB Debugging from  going to  Settings>Developers Options>USB Debugging >Check the box to enable.

Steps for Unlock Android Pattern

1. Connect your Android Phone with your PC from USB Cable.

2. Download and Install ADB Files in your PC.

Now Press Window + R button and type CMD. When you press Enter, you see Command Prompt in your Screen.

3. Type adb devices and press enter.

adb devices

4. Now type below commands one by one and press enter.

adb commands for removing android pattern

adb shell

su

rm /data/system/gesture.key

5. Open Your Android Phone screen and make any pattern. Now your android phone accept any pattern and unlock your android phone for you.

Now your Phone accept any Random Pattern. You can unlock your android phone from Any Pattern

Use this guide for unlocking your android phone. Share this guide with your friends and comment in the box , If you have any doubts...

How to Unlock Android Pattern Without Losing Data

• At 00:52
• Leave a Comment

Read More

Linux is regarded as the best operating system for ethical hacking and penetration testing also called pentesting. There are various hacking apps available for Android, as it is a Linux based operating system. If you want to test out vulnerabilities and find bugs, you need a solid hacking tool to back your research up.

Below is a list of Android hacking applications that will convert your Android device into a hacking machine.

AndroRAT

AndroRAT is a remote administration tool for Android devices. In other words, it is basically a client server application. The aim of the remote administration tool is to give control of the Android system remotely and retrieve information from it.

SpoofApp

(Phone call only) SpoofApp let’s you to place (spoof) calls with any caller ID number. You need SpoofCards to spoof calls, which are sold separately. It also includes some other features such as voice changer, which allows you to change your voice while using it. Additionally, it also allows you to record the whole conversation. You will receive a free 5 minute SpoofCard when you install the app for the first time.

Network Spoofer

Network Spoofer is another good app that allows you to change the website on other people’s computer from your Android phone. You need to download the Network Spoofer app and then log onto the Wi-Fi network. Choose a spoof to use with the app then tap on start. This app is considered as a malicious hacking tool by network administrators. So, it is advisable to not try this on unauthorized networks, as this is not a penetration testing app. It is just to exhibit how susceptible the home network is.

Faceniff

(Facebook only) Faceniff is basically used to sniff the Facebook ID over the same network. For instance, if you are on the same network and your Faceniff is turned on, then it will sniff all the Facebook IDs that are logged in from the same network. Since this is a paid version, you need to pay for this on the internet.

WhatsApp Sniffer

(For WhatsApp only) This tool can be used to hack private WhatsApp chats, pictures, audios and videos of your friends who are using your Wi-Fi Hotspot. Disable your antivirus before using this app, as it is detected by antivirus.

APK Inspector

The goal of this project is to aide analysts and reverse engineers to visualize compiled Android packages and their corresponding DEX code. APKInspector provides both analysis functions and graphic features for the users to gain deep insight into the malicious apps. You can also get the source code of any android application and edit it in order to remove credits and license.

dSploit

dSploit is a free penetration testing suite developed for the Android operating system, which comes with all-in-one network analysis capabilities. It can be used by anyone in order to perform a number of advanced network related tasks. It also contains a number of powerful functions that allow you to analyze, capture, and manipulate network transactions. You can scan networks for connected devices, identify the operating system, running services and open ports on each device, as well as check them for vulnerabilities. The app is designed to be very fast, handy and easy to use.

Wi-Fi Killer

This app allows you to block a person from using your Wi-Fi network. You can disable internet connection for any device that is present in your Wi-Fi network.

DroidSheep

DroidSheep is also one of the free best application for sniffing the sessions over the network. Similar to Faceniff, it not only sniffs the Facebook sessions but also other sessions.

Eviloperator

(Phone call only) This app connects two person automatically in a phone call, which makes them believe that they have called each other. The advantage of this app is that you can record and save the conversation.

Some of the apps given above may work only on rooted Android smartphones. We have given links for the App download, however download the app at your own risk. If you are not familiar with pentesting, theses apps will do you no good.

Kindly mention any other app which you may like for research/hacking/pentesting and we will include it in our future posts.

Here’s a look at the Top 10 hacking apps for Android smartphones and tablets

• At 00:43
• Leave a Comment

Read More