Fortigate SSH Backdoor Password Calculator

Recently Fortinet confirmed there was a backdoor in their firewalls which impacted FortiGate OS Version 4.x -  5.0.7. An exploit was released in the wild but it took some efforts to work with (I am looking at you : paramiko/termios/msvcrt). So I ported the code to create a quick and dirty password calculator that will help in pwning Fortinet firewalls with vulnerable versions.

Tested it on test firewalls and it works like a charm : )

https://packetstormsecurity.com/files/136430/Fortigate-Backdoor-Password-Calculator.html

Ngrep–Grep patterns in Network traffic

We have got a lot of packet sniffer/analyzer software out there, I am a self confessed Wireshark & Ettercap lover, but still, when it comes to analyzing network traffic from command line in a fast manner, ngrep is my one of my favourites. Written by Jordan Ritter its used to “grep” traffic patterns from the network interfaces. As per official documentation -

ngrep is a pcap-aware tool that will allow you to specify extended regular or hexadecimal expressions to match against data payloads of packets. It currently recognizes IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw across Ethernet, PPP, SLIP, FDDI, Token Ring and null interfaces, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.

ngrep runs on Windows & *nix platforms alike and you need WinPCAP to run it since it relies on it. 

Once you install it, it by default uses the first interface on your machine, so , make sure to check the detected interfaces by running -

C:\Users\RISHABH\Desktop>ngrep -L
idx     dev
---     ---
1:     \Device\NPF_{4D491111-D331-42BC-9A33-98EF8C40D422} (Microsoft)
2:     \Device\NPF_{ADBF6AC1-D111-463D-8D99-C58FA1BEF979} (Sun)
3:     \Device\NPF_{6F801AE0-CA61-4A6D-B5FF-DCB7CE8FC529} (VMware Virtual Ethernet Adapter)
4:     \Device\NPF_{930B6EC8-A5E3-4FFA-B68F-F159FDFC2064} (VMware Virtual Ethernet Adapter)
5:     \Device\NPF_{D1999293-A041-4C2A-B63F-5D8B4906000F} (Realtek PCIe GBE Family Controller)
exit

Now for example you want to check out whats going on at port 23 using interface 5

C:\Users\RISHABH\Desktop>ngrep -d 5  port 23
interface: \Device\NPF_{D1999293-A041-4C2A-B63F-5D8B4906000F} (192.168.1.0/255.255.255.0)
filter: (ip or ip6) and ( port 23 )
exit
0 received, 0 dropped

Piece of cake.. and if you want to filter any website in you are searching for keyword "password" then :

ngrep -d 5 “password” port 80

Easy aint it ? Ngrep does it all : ] With some complex grep commands , you can become a pcap ninja.

Well, you can

1. Download Ngrep from here
2. Check out documentation and examples here
3. Learn about Wireshark from here

Wardriving at Delhi–Wardriving revisited

The last time I wardrived at Delhi was over 2 years ago, I was at Tulip Telecom then and was doing something of a personal project then. Well, now I am at Orange and thought of replicating the feat, this time I will be publishing the details of networks I wardrived while going to Gurgaon from Delhi. It was done using  combination of G-Mon,Kismet, Moocherhunter  and you just might find it useful. I intent to make a map of Delhi with all the access points , which does sounds incredulous & far fetched, but yep, I intend to do it and I am doing it bit by bit. It helps to analyse in layman terms -

1. The security awareness of people and organizations
2. The devices they are using
3. The security mechanisms they are using.
4. Wifi range analysis of individual device.

Well, in all you can find the data from below links -

1. Hotspot details / BSSID (See if you are on the list) =))
2. Google Maps KML Data (See it in Google Maps)

If you are interested in contributing to the data, please contact me at admin<at>theprohack.com

Happy Wardriving
- Rishabh Dangwal

winAUTOPWN v2.7 Released - Vulnerability Testing on Windows

winAUTOPWN and bsdAUTOPWN are minimal Interactive Frameworks which act as a frontend for quick systems vulnerability exploitation. It takes inputs like IP address, Hostname, CMS Path, etc. and does a smart multi- threaded portscan for TCP ports 1 to 65535. Exploits capable of giving Remote Shells, which are released publicly over the Internet by active contributors and exploit writers are constantly added to winAUTOPWN/bsdAUTOPWN. A lot of these exploits are written in scripting languages like python, perl and php. Presence of these language interpreters is essential for successful exploitations using winAUTOPWN/bsdAUTOPWN.

Exploits written in languages like C, Delphi, ASM which can be compiled are pre-compiled and added along-with others. On successful exploitation winAUTOPWN/bsdAUTOPWN gives a remote shell and waits for the attacker to use the shell before trying other exploits. This way the attacker can count and check the number of exploits which actually worked on a Target System.

Download
Read more here

Download SQL Injection tool - SQL injection automated software SQLMAP

Sqlmap is an open source command-line automatic SQL injection tool and its goal is to detect and take advantage of SQL injection vulnerabilities in web applications. Once it detects one or more SQL injections on the target host, the user can choose among a variety of options to perform an extensive back-end database management system fingerprint, retrieve DBMS session user and database, enumerate users, password hashes, privileges, databases, dump entire or user’s specified DBMS tables/columns, run his own SQL statement, read or write either text or binary files on the file system, execute arbitrary commands on the operating system, establish an out-of-band stateful connection between the attacker box and the database server via Metasploit payload stager, database stored procedure buffer overflow exploitation or SMB relay attack and more.Enthusiastics can experiment with its opotions and pwn many of the servers around,or can test their skills to secure their servers..but remember,SQL map is a tool,its might help you to find and apply vulnerabilities and injections,but in the end,you really must have a good knowledge of SQL some real pwning out there..
You Can download sqlmap 0.7 here:

Linux Source: sqlmap-0.7.tar.gz
Windows Portable: sqlmap-0.7_exe.zip

Wardriving with Android | Hacking Wifi networks with Android | Wifi Network Audit using Android | Wifu with android | Best wardriving applications on android

Hi friends.. I recently bought HTC wildfire and have been experimenting with it to the fullest. Its based on Android 2.2.1  Froyo and is unrootable till date using Unevoked, superoneclick root and z4root rooting applications, hence i am bit limited by the default manufacturer only functions. I nearly bricked my phone but it sprang back to life after some trys. On the topic though. I was actually quite interested in testing the wardriving capabilities of the device and hence on scrolling through the app market, I found some useful applications which I thought must share you with. Wardriving for me is a two step process -

• scanning networks and analyzing them
• breaking them if vulnerable. (WEP using generic packet capture, WPA using rainbow)

G-mon

G-mon is a powerful WarDriving scanner and GSM / UMTS Netmonitor and drive test tool. It scans for all WiFi networks in range & saves the data with GPS coordinates into a file on your sd card. You can create a kml file for Google Earth. It shows you the encryption, channel an signal strength. It shows all APs in range in a live map. I used it to collect lots of wifi data which I will be publishing soon.

Install it from here

 

Wardrive

another fantastic wardriving app which stores scans in sqlite db on the sdcard and displays found networks around in the map.It Requires Google MAPS installed.

Install it from here

 

Wifi Analyzer

This app literally turns your android phone into a Wi-Fi analyzer!! It helps you to find a less crowded channel for your wireless router and allows to audit networks.

Install it from here

 

Once you get networks, you can then break them into it using Aircrack and backtrack.  Its easy and worth its salt :) . Here is a slice of my wardriving logs while i was in DTC bus :D

BSSID;LAT;LON;SSID;Crypt;Beacon Interval;Connection Mode;Channel;RXL;Date;Time
00:08:5C:EF:08:F0;28.56602;77.22951;Adiva;WpaPsk;-93;Infra;11;-92;2011/03/17;18:52:01
00:08:9F:81:8F:C4;28.56944;77.20531;Car0baR;WPA2;-96;Infra;6;-95;2011/03/17;18:58:30
00:0F:A3:6A:88:B8;28.56804;77.22473;sbi;Wep;-93;Infra;6;-91;2011/03/17;18:53:02
00:17:9A:09:D1:79;28.56813;77.22440;WebunivM;Wep;-93;Infra;6;-91;2011/03/17;18:53:05
00:18:02:87:02:8F;28.56845;77.22306;RT2561_6;Wep;-94;Infra;6;-93;2011/03/17;18:53:18
00:18:02:8E:32:5A;28.56885;77.21437;SrDDGA;WpaPsk;-91;Infra;6;-90;2011/03/17;18:55:31
00:18:02:92:A2:73;28.56955;77.20365;mtnlbb;Wep;-90;Infra;6;-89;2011/03/17;19:00:21
00:18:39:AA:5E:B8;28.56845;77.22306;Neeta;Wep;-89;Infra;11;-88;2011/03/17;18:53:18

at the end of the day, the moment that put a smile on my face was when i saw this as a network name near Delhi Cantt -

“You cant hack this Wifi dear neighbor”

It was a wpa2/psk secured network with static ip and mac filtering and the guy knew what he was doing :) Watching secured networks always makes my day.

Mousezahn - Open source free fast traffic generator and packet crafter tool

Mausezahn is a free fast traffic generator written in C which allows you to send nearly every possible and impossible  packet. It is mainly used to test VoIP or multicast networks but also for security audits to check whether your systems are hardened enough for specific attacks.

Mausezahn can be used for example:

• As traffic generator (e. g. to stress multicast networks)
• To precisely measure jitter (delay variations) between two hosts (e. g. for VoIP-SLA verification)
• As didactical tool during a datacom lecture or for lab exercises
• For penetration testing of firewalls and IDS
• For DoS attacks on networks (for audit purposes of course)
• To find bugs in network software or appliances
• For reconnaissance attacks using ping sweeps and port scans
• To test network behavior under strange circumstances (stress test, malformed packets)

Mausezahn is basically a versatile packet creation tool on the command line with a simple syntax and context help. It could also be used within (bash-) scripts to perform combination of tests. By the way, Mausezahn is quite fast; when started on my old PIII-Laptop (1.4 GHz, Gigabit Ethernet) I measured 755 Mbit/s using the interface packet counters of an HP ProCurve 5400 switch.

Currently Mausezahn is only available for Linux platforms. Please do NOT PORT Mausezahn to Windows! (Here is a nice explanation why; I really share Felix von Leitner’s point of view.)

Yoiu can download Mausezahn here:

mz-0.40.tar.gz

Or read more here.

Like This post ?  You can buy me a Beer :)

Snort – the best open source IDS

If you are in security, you might have heard of an Intrusion Detection system, which is a device or mechanism that monitors network and/or system activities for malicious or unwanted behavior and can react, in real-time, to block or prevent those activities. There are a lot of professional IDS available for commercial use,but when it comes to being free as freedom (read:open source), Snort is my favorite.Snort is is a very powerful tool open source IDS (Intrusion detection system) written by Martin Roesch & and is known to be one of the best IDS on the market even when compared to commercial IDS.Snort performs protocol analysis, content searching/matching, and is commonly used to actively block or passively detect a variety of attacks and probes, such as buffer overflows, stealth port scans, web application attacks, SMB probes, and OS fingerprinting attempts, amongst other features. Like Wireshark,Snort uses the libpcap library to capture packets.

Snort can be run in 4 modes:

1. sniffer mode: snort will read the network traffic and print them to the screen.
2. packet logger mode: snort will record the network traffic on a file
3. IDS mode: network traffic matching security rules will be recorded (mode used in our tutorial)
4. IPS mode: also known as snort-inline (IPS = Intrusion prevention system)

A lot of people in the very active snort community are sharing their security rules which is very useful if you are not an security expert and wants to have up-to-date rules.Snort can be combined with other free software such as sguil, OSSIM, and the Basic Analysis and Security Engine (BASE) to provide a visual representation of intrusion data..which is in fact a PHP script displaying alerts on a web interface. At the end of the day, Snort is a must have for any security researcher or  network paranoids out there..another mentionable IDS systems are Fragrouter,OSSEC HIDS and sGUIL.

You can download Snort from here

 

Like This post ?  You can buy me a Beer :)

Posted by XERO. ALL RIGHTS RESERVED.

John the Ripper – Password cracking at its best

If you are into password cracking then you probably know about it,John the Ripper is one of the most popular password testing and breaking program available. JTR, as its fondly called ,combines multiple password cracking packages into one package,includes auto detection of hashes and is a fast password cracker. It is currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS and supports 15 different platforms . Its primary purpose is to detect weak Unix passwords ( no..I m kidding,Its primary purpose is to break passwords :P ).It can natively detect and crack various encrypted password formats including several crypt password hash types most commonly found on various Unix flavors (based on DES, MD5, or Blowfish), Kerberos AFS, and Windows NT/2000/XP/2003 LM hash. JTR has an active community and multiple third party patches have been added to increase its functionality to include MD4-based password hashes and passwords stored in LDAP, MySQL and others unsupported hashes. JTR is the penultimate when it comes to password cracking in windows (Cain and Abel is the ultimate :P), but for Linux and open source,its the best you can get your hands on.Fire it up with a wordlist and you are good to go
Here is a sample output of JTR in Debian environment (shamelessly taken from Wikipedia)

root@0[john-1.6.37]# cat wpass.txt
user:AZl.zWwxIh15Q
root@0[john-1.6.37]# john -w:password.lst wpass.txt
Loaded 1 password hash (Traditional DES [24/32 4K])
example         (user)

guesses: 1  time: 0:00:00:00 100%  c/s: 752  trying: 12345 - pookie

You can download JTR from here

PS : Like this article ? You can always support me by buying me a coffee or You can always try some of the cool merchandize from PROHACK.





POSTED BY XERO ALL RIGHTS RESERVED.

Technorati Tags: rdhacker,prohack,hacking tools,linux,microsoft,windows,jtr,password,password cracking,john the ripper

Learn Web hacking using DVWA

With lots of curious readers asking me how to practice hacking and from where to start,Damn Vulnerable Web App (DVWA) is great application to plunge yourself in.DVWA is a PHP/MySQL web application that is damn  vulnerable..literally. Its main goals are to be light weight, easy to use and full of vulnerabilities to exploit and it successfully achieves those :P . And frankly it can be used to learn or teach the art of web application security.
The DVWA is bundled with the following  type of vulnerabilities-

• SQL Injection
• XSS (Cross Site Scripting)
• LFI (Local File Inclusion)
• RFI (Remote File Inclusion)
• Command Execution
• Upload Script
• Login Brute Force

WARNING !!
(Shamelessly ripped off from official statement :P )
It should come as no shock..but this application is damn vulnerable! Do not upload it to your hosting provider’s public html folder or any working web server as it will be hacked. It’s recommend that you download and install XAMP onto a local machine inside your LAN which is used solely for testing.
You can download DVWA 1.0.4 here:
Download DVWA

Keep learning..

POSTED BY XERO . ALL RIGHTS RESERVED

Technorati Tags: DVWA,rdhacker,prohack,PHP,MYSQL,hacking tools,how to,hacking,SQL injection,exploit,how to hack

WireShark – Ultimate network Sniffer

Wireshark is the world's foremost network protocol analyzer, and is the de facto (and often de jure) standard across many industries and educational institutions. It is used for network troubleshooting, analysis, software and communications,protocol development, and education. You can interactively browse the capture data and view summary and detail information for each packet. Wireshark has several powerful features, including a rich display filter language and the ability to view the reconstructed stream of a TCP session.

Wireshark was written by networking experts around the world, and is an example of the power of open source. It runs on Windows, Linux, UNIX, and other platforms. Wireshark can read live data from Ethernet, Token-Ring, FDDI, serial (PPP and SLIP) (if the OS on which it's running allows Wireshark to do so), 802.11 wireless LAN (if the OS on which it's running allows Wireshark to do so) and ATM connections (if the OS on which it's running allows Wireshark to do so).

Wireshark was previously known as Ethereal. The name might be new, but the software is the same. Wireshark's powerful features make it the tool of choice for network troubleshooting, protocol development, and education worldwide.

Download Wireshark

Posted by XERO . ALL RIGHTS RESERVED.

Technorati Tags: hacking tools,hacking,downloads,Wireshark,prohack,network,rdhacker

Hiren's BootCD 9.7 - Ultimate boot Disk

Hiren's BootCD is an all in one Dos Bootable CD, which consists of extremely essential tools for your system in case of emergency.Hiren's Boot CD is a boot CD containing various diagnostic programs such as partitioning agents, system  performance benchmarks, disk cloning and imaging tools, data recovery tools, MBR tools, BIOS tools, and many others for fixing various computer problems. It is a Bootable CD hence it is useful even if the primary operating system cannot be booted. Hiren's Boot CD has an extensive list of software. I even used to break into Windows based systems in my institute using this CD (by using Active password changer provided in the CD) and till date, its the best one (except Ophcrack,cuz I like rainbow tables :P ). The CD has utilities with similar functionality on the CD and some times they seem redundant however I think this has been done to provide users diverse choices to choose their method of performing an operation. Overall,Hiren's BootCD is a must have tool for every PC user out there, and is an indispensible tool for System Administrators and Powerusers.

Download Hiren’s BootCD

 

Posted by XERO . ALL RIGHTS RESERVED.

Technorati Tags: hacking tools,downloads,software downloads,Boot cd,Hiren's Boot CD,rdhacker,prohack

Net Tools 5.0 – Ultimate network Tools

Net Tools is a comprehensive set of host monitoring, network scanning, security, administration tools and much more, all with a highly intuitive user interface. It's an ideal tool for those who work in the network security, administration, training, internet forensics or law enforcement internet crimes fields. Net Tools is mainly written in Microsoft Visual Basic 6, Visual C++, Visual C# and Visual Studio .NET.

Net Tools is cutting-edge security and network monitoring software for the Internet and Local Area Networks, providing clients with the ability and confidence to meet the challenges of tomorrow's technology. Keeping pace with the industry trends, we offer professional tools that support the latest standards, protocols, software, and hardware for both wired and wireless networks. Net Tools is a very strong combination of network scanning, security, file, system, and administrator tools useful in diagnosing networks and monitoring your PC and computer's network connections for system administrators. Next to the essential core tools it includes a lot of extra valuable features. It’s a Swiss Army knife for everyone interested in a set of powerful network tools for everyday use. This all-in-one toolkit includes also a lot of handy file and system utilities next to the huge amount of network tools. The menus are fully configurable, so in this way you won’t get lost in the extremely large amount of essential tools. All the additional features will make this application a must have for all system Administrators. There are numerous constructive and valuable applications included in Net Tools that can be used for a great amount of purposes. The latest version of Net Tools is hybrid; it means that it’s capable of working together with applications that are made and designed for Net Tools, so in this way more flexibility and user-friendliness is obtained. This software is designed for the Microsoft Windows OS (Windows 98, NT, 2000, 2003, XP, Vista). It’s entirely compatible and has thoroughly been tested on Windows XP. With the 175+ tools it is a great collection of useful tools for network users. The size of Net Tools 5.0.70 is approximately 25 Mb.

Net Tools 5.0 (build 70) contains a whole variety of network tools.

Download Net Tools 5.0 build 70 from Mabsoft

 

Cheers and Keep learning.

 

Posted by XERO  .  MABSOFT . ALL RIGHTS RESERVED .

Technorati Tags: nettools,net tools,net tools 5.0 build 70,hacking tools,softwares,hacktools,hack,hacking,downloads,rdhacker,prohack,download net tools

Download EVEREST Ultimate Edition

EVEREST Ultimate Edition is an industry leading system diagnostics and benchmarking solution for enthusiasts PC users, based on the award-winning EVEREST Technology. During system optimizations and tweaking it provides essential  system and over clock information, advanced hardware monitoring and diagnostics capabilities to check the effects of the applied settings. CPU, FPU and memory benchmarks are available to measure the actual system performance and compare it to previous states or other systems. Furthermore, complete software, operating system and security  information makes EVEREST Ultimate Edition a comprehensive system diagnostics tool that offers a total of 100 pages of information about your PC.

Hardware Information

• Motherboard & CPU -
  Accurate low-level information about motherboard, CPU and BIOS, including chipset details, DMI enumeration, AGP configuration information, SPD memory modules list, DRAM timing information and CPU instruction set support.
• Video adapter & monitor -
  Detailed information about the video adapter, video drivers and monitor, including DDC information, monitor serial number and supported video modes detection, low-level GPU details, OpenGL and Direct3D features list.
• Storage devices -
  Information about all hard disk and optical disk drives, including IDE auto detection, S.M.A.R.T. disk health monitoring, ASPI SCSI devices list and partitions information.
• Network adapters, multimedia, input devices -
  Exhaustive information about network adapters, sound cards, keyboard, mouse and game controllers, including NIC MAC address detection, IP and DNS list, network traffic monitoring, DirectSound, DirectMusic and DirectInput information.
• Misc hardware -
  Information about PCI, PnP, PCMCIA and USB devices, communication ports, power management information, device resources list, printers information.

Software Information

• Operating system -
  Detailed Windows information, including operating system installation date and product key, system services and system drivers list, process information, environment variables list, system folders list, system files and Event Logs content, AX and DLL files list, Uptime information.
• Server and display -
  Information about network shares, users and groups list, logged on users list, account security settings, opened files list, fonts list and Windows desktop configuration details.
• Networking -
  Large amount of information about networking status, remote access and mailing accounts, network resources and Internet settings. List of network routes, Internet Explorer cookies and history of visited web pages.
• Installed software -
  Detailed information about installed programs, scheduled tasks and startup programs.

Security

• Windows Security -
  Operating system security information including DEP (Data Execution Prevention) status, list of installed security patches and system restore status.
• Security applications -
  Firewall, anti-spyware and anti-Trojan software list. Anti-virus software information including virus database details.

Diagnostics

• System Stability Test -
  Ability to stress system memory, CPU, FPU and local disks simultaneously in real time through a completely visual interface. System thermal solution check through constant temperature, CPU load and CPU thermal throttle monitoring.
• CPUID Panel -
  EVEREST CPUID panel to provide a compact overview on CPU, motherboard, RAM and chipset. Invaluable information on overclocked systems, dynamic refresh to support Enhanced Intel SpeedStep and AMD Cool'n'Quiet technologies.
• Hardware monitoring -
  Sensor information including system, CPU and GPU temperature, fan status, CPU, GPU, AGP and DRAM voltage monitoring, S.M.A.R.T. disk health status. Support for Corsair Xpert memory modules.
• Sensor icons -
  Sensor icons feature to display actual system temperature and voltage values on the System Tray.
• CPU and FPU benchmarks -
  State of the art multi-threaded benchmark methods to measure performance of both old and brand new processors. References list to compare actual performance with other systems.
• Memory benchmarking -
  Memory read and write speed, memory latency measurement to stress the memory and cache subsystem, including references list to compare actual performance with other systems.
• Disk Benchmark module -
  Disk Benchmark module to measure performance of hard disk drives, optical disk drives (CD/DVD/Blu-Ray) and USB flash drives. Graphical overview of disk performance measured on different areas of the disk surface.
• Tips & suggestions -
  Detection of possible hardware and software misconfiguration and compatibility issues.

Reporting

• Report Wizard -
  Easy-to-use method to produce report files of the system, by either using pre-configured report profiles or custom selection of information.
• Report formats -
  Three different report file formats: plain text, customizable HTML and the unique MHTML format. MHTML reports including icons are ideal for printing purposes.
• Report e-mailing and printing -
  Built-in e-mail transfer client using SMTP, also support for MAPI and Outlook protocols. Instant report display and one-click printing capabilities using IE4+ technology.

New features in EVEREST version 4.50

• Updated CPU and FPU benchmarks -
  Enhanced and fixed CPU PhotoWorxx, FPU Julia, FPU Mandel and FPU SinJulia benchmarks to support the upcoming 3-core AMD Phenom and 6-core Intel processors. Further benchmark optimizations for AMD Phenom, AMD Opteron "Barcelona" and Intel "Penryn" CPU family.
• Revamped System Stability Test module -
  Even more stress on CPU, FPU, caches, system memory and hard disk drives by constantly pushing all available processor cores to the maximum. Enhanced hardware monitoring capabilities to monitor temperatures, voltages and fan speeds while running the stability test.
• Intel Skulltrail platform and i5400 chipset support -
  Detailed CPU, motherboard, chipset and sensor information for the Intel Skulltrail platform and its components: Intel Core 2 Extreme QX9775, Intel D5400XS motherboard and Intel "Seaburg" 5400 chipset. Temperature monitoring for FB-DIMM modules on Intel 5000, 5400 and 7300 chipset based systems.
• Support for the latest graphics technologies -
  Video adapter, GPU, OpenGL and DirectX information for ATI Radeon HD 34xx/36xx, ATI Radeon HD 3870 X2, nVIDIA GeForce 8800 GS, nVIDIA GeForce 8800 GTS 512, nVIDIA GeForce 9300/9400/9500/9600, nVIDIA GeForce 9800 GX2. Temperature monitoring for special version of Asus EN8800GS and EN8800GT video cards. Preliminary support for nVIDIA GeForce 9800 GTX.
• DDR3 Extreme Memory Profile and EPP 2.0 details -
  Detailed SPD memory module information, including memory clocks, memory timings and voltage requirements for the upcoming Intel Extreme Memory Profile (XMP) and nVIDIA Enhanced Performance Profiles 2.0 (EPP 2.0). Identification of DDR3 modules up to 2133 MHz.

Overall,its an indispensible tool for a system analyst and hardware as well as software engineers for benchmarking and comparing the performances of various components of PC.

 

Download Everest Ultimate Edition 

posted by XERO . ALL RIGHTS RESERVED . 

Technorati Tags: everest ultimate edition,rdhacker,prohack,benchmarking tools,hacking tools,downloads,software downloads,everest,system performance tool,system analysis,benchmarking

NMAP

Nmap ("Network Mapper") is a free and open source (license) utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime.Nmap is a security scanner originally written by Gordon Lyon (Fyodor). It may be used to discover computers and services on a computer network, thus creating a "map" of the network. Just like many simple port scanners, Nmap is capable of discovering passive services on a network despite the fact that such services aren't advertising themselves with a service discovery protocol. In addition Nmap may be able to determine various details about the remote computers. These include operating system, device type, uptime, software product used to run a service, exact version number of that product, presence of some firewall techniques and, on a local area network, even vendor of the remote network card.
Nmap runs on Linux, Microsoft Windows, Solaris, and BSD (including Mac OS X), and also on AmigaOS.Linux is the most popular nmap platform and Windows the second most popular.
Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts.

Nmap is ...

• Flexible: Supports dozens of advanced techniques for mapping out networks filled with IP filters, firewalls, routers, and other obstacles. This includes many port scanning mechanisms (both TCP & UDP), OS detection, version detection, ping sweeps, and more. See the documentation page.
• Powerful: Nmap has been used to scan huge networks of literally hundreds of thousands of machines.
• Portable: Most operating systems are supported, including Linux, Microsoft Windows, FreeBSD, OpenBSD, Solaris, IRIX, Mac OS X, HP-UX, NetBSD, Sun OS, Amiga, and more.
• Easy: While Nmap offers a rich set of advanced features for power users, you can start out as simply as "nmap -v -A targethost". Both traditional command line and graphical (GUI) versions are available to suit your preference. Binaries are available for those who do not wish to compile Nmap from source.
• Free: The primary goals of the Nmap Project is to help make the Internet a little more secure and to provide administrators/auditors/hackers with an advanced tool for exploring their networks. Nmap is available for free download, and also comes with full source code that you may modify and redistribute under the terms of the license.
• Well Documented: Significant effort has been put into comprehensive and up-to-date man pages, whitepapers, and tutorials. Find them in multiple languages here.
• Supported: While Nmap comes with no warranty, it is well supported by a vibrant community of developers and users. Most of this interaction occurs on the Nmap mailing lists. Most bug reports and questions should be sent to the nmap-dev list, but only after you read the guidelines. We recommend that all users subscribe to the low-traffic nmap-hackers announcement list.
• Acclaimed: Nmap has won numerous awards, including "Information Security Product of the Year" by Linux Journal, Info World and Codetalker Digest. It has been featured in hundreds of magazine articles, several movies, dozens of books, and one comic book series. Visit the press page for further details.
• Popular: Thousands of people download Nmap every day, and it is included with many operating systems (Redhat Linux, Debian Linux, Gentoo, FreeBSD, OpenBSD, etc). It is among the top ten (out of 30,000) programs at the Freshmeat.Net repository. This is important because it lends Nmap its vibrant development and user support communities.

Features

• Host Discovery - Identifying computers on a network, for example listing the computers which respond to pings, or which have a particular port open
• Port Scanning - Enumerating the open ports on one or more target computers
• Version Detection - Interrogating listening network services listening on remote computers to determine the application name and version number
• OS Detection - Remotely determining the operating system and some hardware characteristics of network devices.

Typical uses of Nmap:

• Auditing the security of a computer, by identifying the network connections which can be made to it.
• Identifying open ports on a target computer in preparation for auditing
• Network inventory, maintenance, and asset management
• Auditing the security of a network, by identifying unexpected new servers.

 

Modules and libraries utilizing Nmap:

Nmap's preferred output format is XML, which comes in handy for interpreted languages because they can parse and present this information for use by users' scripts.

 

Download NMAP

 

Posted by XERO  Excerpts form Nmap site and wikipedia

Technorati Tags: nmap,windows,linux,port scanner,scanner,hacking,hacktools,downloads,softwares,hacking tools,network mapper,ip scanner,rdhacker,prohack,rdhacker.blogspot.com

Dark Mailer

Dark Mailer is a super fast bulk email software that sends out at speeds greater than 50,000 emails per hour on a dedicated mailing server. Dark Mailer has the capability to use Proxies and Relays and also to send directly. Some of the features include:

• Anonymous Mailing using Proxies
• Message Randomization to bypass Spam Filters
• Speeds over 500K emails per hour on Turbo Mode
• Up to 1000 Threads

The software taps into a network of zombie computers and is able to send 50,000 e-mail messages per hour from a regular cable modem connection. It affords near-total anonymity because of the networking and is often used by spammers. It currently does not have an official website for downloading.

Robert Soloway, one of Internet's biggest spammers, used it. On July 23, 2008, the 29-year-old Solway was sentenced to nearly four years in prison and ordered to forfeit more than $708,000 in income. Prosecutors had asked for a 9-year sentence. He has also lost civil suits for spamming, and owes civil penalties totaling more than US $17 million.

Note: Some Antivirus classified this as hack.tool or Mass.flooder

Download Dark Mailer

Posted by XERO .

Technorati Tags: darkmailer,email mass,mass mailer,email bombing,download darkmailer,softwares,downloads,hackingtools,hacking,hacktool,rdhacker,prohack,rdhacker.blogspot.com

Best Hacking Tools -85in1-

Best Hacking Tools -85in1-


Audio theme: Sean Paul - Temperature
Size : 43.2MB Compress ,29.7MB UnCompress

Contents:
Main page:

HOTMAIL HACKING

YAHOO HACKING

MSN FUN TOOLS

FAKE SCREENS/PAGES

OTHER HACKING TOOLS

FUN TOOLS

Page 1 :

MSN Chat Monitor And Sniffer
MSN Password Retriever
MSN Hacker DUC
Head Fuck HotMail HAck
HotMail Hacker XE Edition
HotMail HAck
HotMAil Hacker
MSN Passwords
MSN Flooder
MSN Sniffer
MSN SPY Lite
HotMail Hacker Gold
HotMail HAcker Final
Give me Ur Pass
HotMail Brute Forcer
MSN PAssword Finder
MSN Password Grabber
Hack MSN Password
Hack HotMAil Evolution
MAgic Password Sender
MSN Locker
HotMail Killer
Hot Freeze
MessenPass
HotMAil Hack !
Ice Cold Reload
HotMail Killer 2
Nuke MSN

Page 2:

Yahoo Messenger Login Screen
MSN Messenger 7 Login Screen
MSN Messenger 5 Login Screen
MSN Messenger 4.6 Login Screen
HotMail Login Screen
Fake Web Pages 2
Fake Eeb Pages 1
AOL Killer
Fake Login HotMail
B-S Spy
Saria Fake Logins

Page 3:

Yahoo Password Retrieval
Yacam
Yahoo Cracker
Yahoo Booster
Yahoo Hack!
Yahoo Password Stealer
S-H Yahoo Password Sender

Page 4:

NetWork Password Recovery
NetBIOS Name Scanner
FTP Password Hacker
Cable Modem Sniffer
Port Listening XP
Blue Port Scanner
www 2 IP
XP Killer
Sniff Password
Port Scanner
Fast Resolver
Domain Scan
Whois Domain
NetRes View
PHPbb Defacer
Angry IP Scanner
FTP Brute Forcer

PAge 5:

Hook Tool Box
Smart HAck UpLoader
Remote Anything
Post Sage
PHPbb Attacker
Page 6:
Skinner
MSN Bomber Man
Ultimate Nick PopUpz
MSN 7 Universal Patcher
Emoticons Creator
MSN Picture Crawler
Anti Status Bomb
MSN Detector
Multi MSN Loader
Kitle
Protect Lithium
Tray It!
MSN Block Checker
MSN Auto Responder
MSN Virus Cleaner
MSN Dondurucu

XERO

Angry IP scanner

Angry IP scanner is a very fast IP address and port scanner. It is widely used by network administrators and just curious users around the world, including large and small enterprises, banks, and government agencies. It runs on Linux, Windows, and Mac OS X, possibly supporting other platforms as well.

It can scan IP addresses in any range as well as any their ports. It is cross-platform and lightweight. Not requiring any installations, it can be freely copied and used anywhere.
It can scan IPs in any range, even 1.1.1.1 to 255.255.255.255. Its binary file size is very small compared to other IP scanners. Angry IP scanner simply pings each IP address to check if it's alive, then optionally it is resolving hostname and tries to connect at specified in Options dialog box TCP port.
It also has additional features, like NetBIOS information (computer name, workgroup name, currently logged in user and MAC address), results saving to CSV or TXT file, can be used as a command-line utility in a batch file, etc.

Pros: TINY program. Easy to use interface. No installation required. Freeware. Does any more need be said?
Cons: Till Date none :)
Overall: Its a swissknife as compared to others,small,free and deadly.Its an very highly recommended for network admins and apprentice hackers and computer nerds. get it,and get it fast
Download It here

Unlocker 1.8.7 - Delete The Undeleteable !

Does any file is troubling you ?
Are you Getting errors like these ?



It has many other flavors:

Cannot delete file: Access is denied
There has been a sharing violation.
The source or destination file may be in use.
The file is in use by another program or user.
Make sure the disk is not full or write-protected and that the file is not currently in use.
Unlocker is the solution!

Is your windows driving you Nuts ?
Time to get rid of these…
Get UNLOCKER,A nifty utility to exorcise stupid File and DLL ghosts ! You get the full power on your system and just delete/copy/unlock the file you want.
here is a little demonstration -

[1]. Simply right click the folder or file and select Unlocker



[2]. If the folder or file is locked, a window listing of lockers will appear



[3]. Choose Task u want to perform on it Like Delete,Copy,etc.

[4]. Simply click Unlock All and you are done!
Download your saviour and get the power Over your system !!!
Download Unlocker

POSTED BY XERO . ALL RIGHTS RESERVED.

Surf Blocked Websites Using Softwares

ULTRASURF
"Browse the world without any limit for free with safety" New revolution in the field of proxy, simple to use and faster. No more slot limitations, time limits, geographical limits, bandwidth problems in same old proxies. Switch to UltraSurf 8.9

UltraSurf is the flagship software product from UltraReach Internet Corp. for Internet anti-censorship. It enables users inside countries with heavy Internet censorship to visit any public web sites in the world safely and freely.
As the safety and convenience of the users is our first priority, the most prominent features of UltraSurf 8 are that it has implemented a complex proxy with complete transparency and a high level of encryption on the Microsoft Internet Explorer (IE) platform. UltraSurf 8 enables users to browse any website freely just the same as using the regular IE browser while it automatically searches the highest speed proxy servers in the background.
UltraSurf 8 implements almost all browser functions based on HTTP and user needs, such as browsing websites, login and posting on web forums, using Web mail, uploading and downloading data files, real time audio, video and other multimedia programs, etc. Please refer to the “UltraSurf 8 Users Guide” for detailed information.
UltraSurf 8 is a green software, which means no installation process is needed nor system setting is required to change when using the software. It is simply an executable on Windows platform.

Download the UltraSurf 8 client software now
Download Ultrasurf
Download the UltraSurf 6 User Guide in English at:
Download Ultrasurf userguide

Note: The English version is for ultrasurf 6. You may use it as the reference for current version ultrasurf 8.

FREEGATE
FreeGate is a software utility that enables Chinese and Iranian surfers to view websites banned by their government (see Internet censorship in the People's Republic of China). Developer Dynamic Internet Technology (DIT) estimates Freegate has 200,000 users.The software takes advantage of a range of proxy servers assigned to changeable internet addresses, which allows users in China, Iran and Myanmar access to sites banned by the Chinese, Iranian and Myanmar governments. The program exploits open proxies, which allow users to penetrate firewalls used to block web sites
Download -
Download Freegate