Nov 26, 2012 02:49 AM
(This post was last modified: Nov 26, 2012 08:33 PM by neil5050.)
tut written by neil5050 on hf
1. First Subject
Doxing - This isn't really hacking, but information obtained from it can be useful for you.
Reason:
answering security questions
Or
you can be a complete troll to the other person.
5 places to obtain dox information that I (creator of this HF topic use)
I. Facebook
Facebook is a place to obtain doxs and get emails of the doxs. Reason for getting emails is to answer security questions. Emails can be obtained from yahoo.com importing the emails.
II.Getting ips -> usually nails any security question: what city were they born in or you can buy a booter from the stresser section and knock someone offline with permission.
ways to get ips: from facebook, from skype, from yahoo
a.from skype-> logging in on skype -> skype resolver target
b.from facebook ->skype->import contacts -> login your facebook and you get a list of skype ids -> skype resolve
c. getting ips off of commview, or wireshark -> for another messangers
d. getting ips off any forums even if you do not own it -> use an image created in php and imbedding them in forum mybb codes will give you the user's ip. Best when sent in private messages.
e. Getting people to click links
III. whitepages.com and spokeo.com, pipl.com, and google.com -> are my two favorite places I use when doxing. And yes there are other doxing sites, but pipl.com finds out if they have a myspace etc.
for google.com
trick I do is: allinurl:information I want to find
so lets say I want to find the user id 'hello'
allinurl:hello
^^ but I use the above mainly for username searches
IV. one known place I also use is cidlookup.com. Which refers to callerid lookup. All you do is input a number and it gives you their rl name. Your welcome to try it out if you want.
is one of the best free searches when looking up information. I use it all the time
2. RATS/KEYLOGGERS/PSHiers -> known hacking techniques for simple avoidance please stop accepting programs, and pshiers please verify the url is valid.
3. Hacking over wireless networks -> cookies can be seen over wireless networks. One can simply collect information easily. through known techniques.
4.vpn
- not really hacking but always good to use if you chose to do anything bad
- a known free one is hotspot shield
5.For people who want to go into to web hacking
best way is to look up known web exploits like xss,rfi,sql which are the 3 main ones
6.photobucket
- people have been ripping images out of private photobuckets
-> look up in hf search Photo fusker that should solve your question on how its done
7. facebook
I. a few known facebook tricks, is importing emails -> one way is with yahoo
II.facebook message spoofing -> known technique which used a make email generator by spoofing the from address of the email. and setting the too address [email protected]
III. Forcing people to post status on fb walls
a. can be done easily by getting them to go in screenshare and tell them to go to m.facebook.com/upload.php. Print screen, the email on that page whenever you email it. It goes directly to their status
b. Or you can find out their cell number they used on their facebook page
and text message spoof using their cell phone number as the from and setting the to -> facebook's cell number
VI. App hacking. Anytime you accept an app on facebook, they have access to do whatever to your facebook like post messages on your wall. And a few other permissions are given.
VII. Finding out who hacked you on facebook
https://hackforums.net/showthread.php?tid=2744260
VIII.check out my thread for more fb tricks
https://hackforums.net/showthread.php?tid=2973746
8. Skype
I. skype quote spoofing
II. embeding html in skype -> for this you must have a lower skype version to do it in chat by holding control and shift when sending the html
For embeding html into your skype status, theres a app handed out on skype.com that lets you do it.
III.Generating skype premium codes
Lasting till dec 31, 2012. You can generate codes for all your friends to have skype credits
generate it here: www.freegroupvideocallingskype.com
I use yopmail when sending the codes so that way I do not have to keep recreating the email. As for the skype id, bullshit it.
IV. Setting your profile name blank
-> this lets you on skype make it look like the previous person posted it
-> this uses a certain unicode characters
V. also had a friend ask me recently how to copy someone elses skype name's unicode characters
simply -> right click -> rename -> copy the characters out of there ahd put it on your own
VI.III. skype image reverse tutorial
https://hackforums.net/showthread.php?tid=2980436
9. Silent driveby vs java driveby -> hacking people through the web
a. silent driveby -> uses exploits to attack a user after visiting a weblink. Note I was once hit by this by visiting a manga site. The ad banners get you. And even if the link is legit like www.blogspot.com which is owned by google. You can embed html to it still. So one can always use an iframe html code to load it up on you. The last few I seen are made in java. Best way is to disable java from your web browser.
Java driveby -> a popup asks you permission to run. Upon accepting those permissions that person has access to your whole computer. He can delete system 32 etc.
10. Booters
-> useful with permission to test if someone's internet connection can be shut down with flood
11. File extension spoofing
a..Most use the Unicode Character 'RIGHT-TO-LEFT OVERRIDE' (U+202E). Which basically reverses the text. This won't affect windows xp through. But basically lets say you see helloexe.jpg and its actually an exe. Before the unicode character was used it looked like. hellogpj.exe .
-Not all exe's have to end with the .exe extension to run either. For example
www.hello.com
will run if someone as an exe if someone send that to you as a file. Reason
.com extensions are exes.
12. Known trick that developers usually fall for.
Lets say to set up the project they have to run a python script. Or a bat file etc. Please note people can make you delete your system 32, etc If you do not check the scripts your running prior to compiling it. Just the running or debugging can cause you to lose your computer. This is usually found in big projects.
13. Tinyeye and google image search are the two best tools for image reverses.
14. for cracking programs
-> learn ollydbg, or another tool that lets you modify assembly
15.cheat engine
-> best for hacking games (including web flash games)
16.Do you have the wrong spelling when trying to answer a security question: Google aol support number, and yahoo also has a support number. They usually ignore spelling when answering security questions. I used this like 2 to 3 times.
17. Email spoofing -> don't be fool but with a simple php script one can easily spoof an email
18.Verification by text or phone
for example gmail. I use k7.net whenever locked out.
google talk -> also offers voice mail too if you needed a number to receive voice calls etc.
pinger.com -> is one I use for text messages. When signing up, it gives you chose from several numbers in an area. And you can message people with it and recieve texts with it.
19. If your at someone elses computer, you can obtain information without downloading any programs.
a. using a usb
b. firefox -> tools-> internet options-> show passwords (nearly same technique for chrome
20. Cool tricks if you are in school which you are highly unlikely to get caught unless you tell people.
a. getting a remote control watch - because usually tv remotes will get you introuble. A remote control watch I used to have one long ago where I can turn on tv's during class in highschool(not in highschool anymore) but its pretty cool to do and since its a watch you aren't usually going to get introuble.
21. Code ripping (skidding) -> get reflector usually gets .net code. and for java, theres a known decompiler I forget whats its called.
22. 0 day exploits
for example one known one that got patched a week ago was on skype.
how it worked
a. You know someone's email address from skype
b. Create a skype account using the same email
c. Do a password recovery at the email
d. Whole loged in your skype -> you get a password token. You can click it and it directly goes to skype.com letting you reset the password except you chose the person's skype id you can to reset.
^^ please note this was patched a week and isn't abuseable atm.
23. Are your Black hat tools detected by viruses, get a crypted on hf. Obfuscated if you are using java.
24. Binders -> pretty awesome if you want to attach another exe to a program and send it to someone else.
25. spoofing your useragent on your browser to googlebot 2.1 . Lets you view some locked forums that require an account for access.
26. backtrack -> contain several exploits one use for personal reasons, others for bad reasons. This tool is mainly used for pen testing
I think thats enough of my knowledge for now. This is whatever I can think of minus a few things I do not want to write about.Also,excuse the mess guys and grammer -> all of this was hand written by neil5050 on hf.
1. First Subject
Doxing - This isn't really hacking, but information obtained from it can be useful for you.
Reason:
answering security questions
Or
you can be a complete troll to the other person.
5 places to obtain dox information that I (creator of this HF topic use)
I. Facebook
Facebook is a place to obtain doxs and get emails of the doxs. Reason for getting emails is to answer security questions. Emails can be obtained from yahoo.com importing the emails.
II.Getting ips -> usually nails any security question: what city were they born in or you can buy a booter from the stresser section and knock someone offline with permission.
ways to get ips: from facebook, from skype, from yahoo
a.from skype-> logging in on skype -> skype resolver target
b.from facebook ->skype->import contacts -> login your facebook and you get a list of skype ids -> skype resolve
c. getting ips off of commview, or wireshark -> for another messangers
d. getting ips off any forums even if you do not own it -> use an image created in php and imbedding them in forum mybb codes will give you the user's ip. Best when sent in private messages.
e. Getting people to click links
III. whitepages.com and spokeo.com, pipl.com, and google.com -> are my two favorite places I use when doxing. And yes there are other doxing sites, but pipl.com finds out if they have a myspace etc.
for google.com
trick I do is: allinurl:information I want to find
so lets say I want to find the user id 'hello'
allinurl:hello
^^ but I use the above mainly for username searches
IV. one known place I also use is cidlookup.com. Which refers to callerid lookup. All you do is input a number and it gives you their rl name. Your welcome to try it out if you want.
is one of the best free searches when looking up information. I use it all the time
2. RATS/KEYLOGGERS/PSHiers -> known hacking techniques for simple avoidance please stop accepting programs, and pshiers please verify the url is valid.
3. Hacking over wireless networks -> cookies can be seen over wireless networks. One can simply collect information easily. through known techniques.
4.vpn
- not really hacking but always good to use if you chose to do anything bad
- a known free one is hotspot shield
5.For people who want to go into to web hacking
best way is to look up known web exploits like xss,rfi,sql which are the 3 main ones
6.photobucket
- people have been ripping images out of private photobuckets
-> look up in hf search Photo fusker that should solve your question on how its done
7. facebook
I. a few known facebook tricks, is importing emails -> one way is with yahoo
II.facebook message spoofing -> known technique which used a make email generator by spoofing the from address of the email. and setting the too address [email protected]
III. Forcing people to post status on fb walls
a. can be done easily by getting them to go in screenshare and tell them to go to m.facebook.com/upload.php. Print screen, the email on that page whenever you email it. It goes directly to their status
b. Or you can find out their cell number they used on their facebook page
and text message spoof using their cell phone number as the from and setting the to -> facebook's cell number
VI. App hacking. Anytime you accept an app on facebook, they have access to do whatever to your facebook like post messages on your wall. And a few other permissions are given.
VII. Finding out who hacked you on facebook
https://hackforums.net/showthread.php?tid=2744260
VIII.check out my thread for more fb tricks
https://hackforums.net/showthread.php?tid=2973746
8. Skype
I. skype quote spoofing
II. embeding html in skype -> for this you must have a lower skype version to do it in chat by holding control and shift when sending the html
For embeding html into your skype status, theres a app handed out on skype.com that lets you do it.
III.Generating skype premium codes
Lasting till dec 31, 2012. You can generate codes for all your friends to have skype credits
generate it here: www.freegroupvideocallingskype.com
I use yopmail when sending the codes so that way I do not have to keep recreating the email. As for the skype id, bullshit it.
IV. Setting your profile name blank
-> this lets you on skype make it look like the previous person posted it
-> this uses a certain unicode characters
V. also had a friend ask me recently how to copy someone elses skype name's unicode characters
simply -> right click -> rename -> copy the characters out of there ahd put it on your own
VI.III. skype image reverse tutorial
https://hackforums.net/showthread.php?tid=2980436
9. Silent driveby vs java driveby -> hacking people through the web
a. silent driveby -> uses exploits to attack a user after visiting a weblink. Note I was once hit by this by visiting a manga site. The ad banners get you. And even if the link is legit like www.blogspot.com which is owned by google. You can embed html to it still. So one can always use an iframe html code to load it up on you. The last few I seen are made in java. Best way is to disable java from your web browser.
Java driveby -> a popup asks you permission to run. Upon accepting those permissions that person has access to your whole computer. He can delete system 32 etc.
10. Booters
-> useful with permission to test if someone's internet connection can be shut down with flood
11. File extension spoofing
a..Most use the Unicode Character 'RIGHT-TO-LEFT OVERRIDE' (U+202E). Which basically reverses the text. This won't affect windows xp through. But basically lets say you see helloexe.jpg and its actually an exe. Before the unicode character was used it looked like. hellogpj.exe .
-Not all exe's have to end with the .exe extension to run either. For example
www.hello.com
will run if someone as an exe if someone send that to you as a file. Reason
.com extensions are exes.
12. Known trick that developers usually fall for.
Lets say to set up the project they have to run a python script. Or a bat file etc. Please note people can make you delete your system 32, etc If you do not check the scripts your running prior to compiling it. Just the running or debugging can cause you to lose your computer. This is usually found in big projects.
13. Tinyeye and google image search are the two best tools for image reverses.
14. for cracking programs
-> learn ollydbg, or another tool that lets you modify assembly
15.cheat engine
-> best for hacking games (including web flash games)
16.Do you have the wrong spelling when trying to answer a security question: Google aol support number, and yahoo also has a support number. They usually ignore spelling when answering security questions. I used this like 2 to 3 times.
17. Email spoofing -> don't be fool but with a simple php script one can easily spoof an email
18.Verification by text or phone
for example gmail. I use k7.net whenever locked out.
google talk -> also offers voice mail too if you needed a number to receive voice calls etc.
pinger.com -> is one I use for text messages. When signing up, it gives you chose from several numbers in an area. And you can message people with it and recieve texts with it.
19. If your at someone elses computer, you can obtain information without downloading any programs.
a. using a usb
b. firefox -> tools-> internet options-> show passwords (nearly same technique for chrome
20. Cool tricks if you are in school which you are highly unlikely to get caught unless you tell people.
a. getting a remote control watch - because usually tv remotes will get you introuble. A remote control watch I used to have one long ago where I can turn on tv's during class in highschool(not in highschool anymore) but its pretty cool to do and since its a watch you aren't usually going to get introuble.
21. Code ripping (skidding) -> get reflector usually gets .net code. and for java, theres a known decompiler I forget whats its called.
22. 0 day exploits
for example one known one that got patched a week ago was on skype.
how it worked
a. You know someone's email address from skype
b. Create a skype account using the same email
c. Do a password recovery at the email
d. Whole loged in your skype -> you get a password token. You can click it and it directly goes to skype.com letting you reset the password except you chose the person's skype id you can to reset.
^^ please note this was patched a week and isn't abuseable atm.
23. Are your Black hat tools detected by viruses, get a crypted on hf. Obfuscated if you are using java.
24. Binders -> pretty awesome if you want to attach another exe to a program and send it to someone else.
25. spoofing your useragent on your browser to googlebot 2.1 . Lets you view some locked forums that require an account for access.
26. backtrack -> contain several exploits one use for personal reasons, others for bad reasons. This tool is mainly used for pen testing
I think thats enough of my knowledge for now. This is whatever I can think of minus a few things I do not want to write about.Also,excuse the mess guys and grammer -> all of this was hand written by neil5050 on hf.
Facebook Developer -> finding facebook bugs and also developing apps using the facebook sdk in php. Ex secondlife developer
Upgraded to l33t by zack (thank you so much)
Upgraded to l33t by zack (thank you so much)
