Wednesday, 8 May 2013

How To Bypass vBulletin Forums Cloudflare - New Method


Hello guys,
Another video tutorial by Foloox on how to bypass cloudflare. New cool methods that I've never used. :)
The tutorial is on his channel, please subscribe to his channel!

The script used in the second method can be found here:
http://pastie.securitygeeks.net/47



The video is AVAILABLE in HD, just change the quality!
Enjoy! ^_^


Tuesday, 7 May 2013

How To Remove The License Verification From Android App/Games Using Lucky Patcher



Hello guys, Today I'm going to show you how to remove the license verification from apps and games. License Verification can be found in all paid apps, to check if you actually bought the app/game or downloaded it from somewhere else. Well, today we will remove that license verification and use paid apps for free, or most of them.

For this tutorial we will be using AfterMath XHD, which is a paid game on Google Play, as a demo.

For this tutorial we need:

  • Rooted Android Device
  • Lucky Patcher (Can Be Downloaded here)
  • A Paid game to try to remove the License Verification from it

So, before I remove the license from the game, the game doesn't start because our license is invalid
As you can see in the picture bellow:


Now launch Lucky Patcher, it WILL need root permissions so let it grant the root permissions. When it opens it shows the list of all the apps with Google Ads, License Verification, and some more. (You can see my tutorial about remove Google ads from apps HERE)


Click on the app or the game you want to patch, a screen with some information about the game will show, like the picture bellow:



Click on "Open Menu Of Patches" in the bottom of the page:


Click on "Remove License Verification" a list of patches will show


The patch you chose will be already selected for you, so just click on Apply, it will start processing


Now all you have to do is wait until it finishes and give you the result:


You're done! Now launch the app you patched, and it will work just fine!


This process can patch many apps, including famous ones like SPB Shell 3D! And the game above is one of top paid games in Google Store too.
Have fun, and try patching the apps you want!
Enjoy!


Monday, 6 May 2013

Local File Inclusion To Php Shell - LFI Tutorial



Hello guys,
Today I have another tutorial Submitted by Foloox Csl. It's a simple LFI Tutorial, to upload a shell using LFI Vulnerability

Enjoy! And please subscribe to him.




Best Watched in HD!


Sunday, 5 May 2013

Attacking Metasploitable - Apache Tomcat - Metasploit Tutorial

Hello guys,
Here's my second Metasploitable-Attacking video. Today we will exploit Apache Tomcat in Metasploitable use Metasploit of course.



Attack description:

  1. We did a full nmap port scan, and I detected tomcat installed in the server on port 8180
  2. Search for tomcat in Metasploit console "msfconsole" command to find any kind of auxiliary, and or an exploit available for it
  3. We found a good exploit which allows command execution, but it needed the USERNAME and PASSWORD of the target server
  4. I executed an auxiliary that tried the default tomcat Login details on the target server (This is good when the server admin uses bad passwords)
  5. We found the login details, That made the code execution exploit possible to use now
  6. We execute the code execution exploit, and we get shell access (You can change the payload, but you don't really need to)
  7. After we get the shell access, as we search in /root directory, we find /root/.ssh/authorized_keys
  8. As I saw in a post by g0tmi1k about the same attack, those keys have weakness (READ MORE HERE)
  9. We download "rsa" weak keys to kind of crack the key, the file can be found on exploitdb search "/pentest/exploits/exploitdb/searchsploit" search for the term "OpenSSL"
  10. Download, and extract the file, using "grep -lr KEY *.pub" we will find the right one.
  11. Connect to the server using the key, (you will find a file in the previous step with NUMBER.pub take the number) then run the command:

ssh -i NUMBER root@IP

And you're done, root access granted ^_^

Video Demo:

Video Available in HD, just change the Quality!


Saturday, 4 May 2013

How to Add Exploits to Metasploit Framework in 3 steps


Hello Guys,
Today We have a Metasploit Tutorial Submitted by Foloox Csl
The video is on his channel, please subscribe to him!

The tutorial is shwoing how to add exploits to Metasploit. Sometimes we find exploits on exploit-db for Metasploit, in order to be able to use those exploits, we have to follow the steps in the video!



The Video IS available in HD, just change the Qualitly!


Friday, 3 May 2013

Web Programming Series - HTML Tutorial 8


Hello Guys,
Here is the 8th HTML Tutorial in our Web Programming Series.
Hope you like it

Video Available in HD, just change the quality!
Download Link:


Top 5 Free Anti-Virus Software

The internet is a dangerous place so not only do we need to protect ourselves and our details online, we also need to protect our computers. Anti-Virus software will be your best option; I know most of you will not want to pay for this software, so here is five of the best FREE anti-virus software so you and your computer can stay protected without having to fork out every month or year.



1. Avira

The Avira software is very easy to download and it offers you and your computer protection as soon as you download it. This software will block any viruses, trojans, worms and rootkits. It will also get rid of any adware and will provide a website security rating so you know what websites are safer to visit and what aren’t. You can scan your computer at any time just to check for yourself whether you have any threats or not.

2. AVG

This is one of the most popular anti-virus software. It is another software that is extremely easy to download and very easy to use. Like Avira, it begins protecting your computer straight away. It offers the basic computer protection, including detecting and stopping any threats, viruses and malware. AVG do offer paid protection, but just the simple free version is enough for you and your computer to stay safe when browsing the internet.

3. Avast

Avast is another popular anti-virus software that millions of people have already downloaded. It is a simple download, although you should make sure it is compatible with your computer. The Avast software offers anti-virus and anti-spyware protection. Malware is difficult to detect and it can potentially find information about you by using your browsing history, but Avast will be able to find and stop any threats to you or your computer.

4. ZoneAlarm

ZoneAlarm is a big name when it comes to anti-virus software and there is no reason why it shouldn’t be. It offers a lot for a free version of the software, including anti-virus and anti-spyware protection, an advanced firewall and identity protection. With ZoneAlarm, you and your computer are made invisible to hackers, so you will never need to worry about whether you are in danger. Also, like Avira, ZoneAlarm runs a website safety check to make sure you are not visiting risky sites.

5. Comodo

The Comodo anti-virus software is a reliable software for everyday use. Not only can it detect suspicious files, it can also prevent viruses, malware and spyware and it runs quick scans. There is a paid version of the Comodo anti-virus software, but this is not necessary just for everyday personal use. You and your computer will be safe and protected from online danger with this Comodo software; you will not have to worry about a thing!

If you are looking for a simple anti-virus software that will cover your day-to-day computer activity, then any of the free software above will be perfect for you. They all have products you can pay for,

but there is no need when you are just using your computer for personal things instead of business related tasks.

About the Author:

Katie Belliveau loves blogging and she can write about pretty much anything; she
especially loves writing about business. She suggests taking care of your business both online and
offline, which means, install anti-virus software and improve office security.