SQLI Helper..!!

SQLI Helper is a tool that will hack vulnerable websites using SQL injection. You don't have to spend hours and hours trying to find your way in a website and trying hundreds of combinations and codes to hack a website. There is also no need of knowledge of SQL to use this software. This tool will do it all by itself. You only have to tell her what do and where to look.


Download here:

http://www.ziddu.com/download/7012058/SQLHelper.rar.html 

Password: hackingguide

Orkut Hacker : Phisher

Orkut Phisher is a phisher (a fake login page) for hacking Orkut accounts. Just send it to anyone and ask him to enter his login credentials. Once he enters his login details, a text file containing passwords of the user is generated automatically.

Download here: 

http://www.ziddu.com/download/6966160/orkut.rar.html 

Password: hackingguide

Dark port scanner details....

Dark Port Scanner is a simple port scanner with an easy to use interface which scans for open ports on computers in a network.

Download here:

http://www.mediafire.com/download.php?lkymnzkmmmo

Install IOS 7 in apple devices without any regestered account.

Apple has just seeded iOS 7 Gold Master (GM) to its registered developers via iOS Developer Center (Dev Center) as part of developer program, following its big iPhone event on 10 September. The iOS 7 GM will be the final developer release before the update is rolled out to the public on 18 September.

There is still no sign of an Over-The-Air (OTA) update for the Gold Master release, as Apple intends its developers to add the finishing touches to the iOS beta software before the impending public release. The iOS 7 GM update is Apple's final attempt at fixing any critical bugs and issues reported by developers through the beta-testing phase. It is now available for download with build number 11A465 via iOS Dev Center.

Apple recognised developers enjoy the privilege of downloading and testing the iOS 7 GM first hand via iOS Dev Center. However, there is some good news for non-developers, who can download and install the final release of iOS 7 manually (without UDID or developer account), using our step-by-step guide.

iOS 7 Gold Master Features

Here is the list of some noteworthy features ported into the newly released iOS 7 Gold Master update, courtesy of iPhone hacks:

•  The number of bubble-based dynamic wallpapers has been increased from two to seven. The collection adds up to 34 new Apple wallpapers.
•  Apple has added new textured ringtones and text tones to iOS 7 as part of the Gold Master release. Tap the play button in the demo video below to listen to each of the new ringtones:

•  In addition to ringtones, some minor changes to alert sounds have been introduced such as new unlock sound, new device charging sound and new Siri mic sound.
•  Relatively faster switching between apps in GM than other betas.

iOS 7 Gold Master Device Compatibility

iOS 7 GM is compatible with the following iOS devices:

•  iPhone 5, iPhone 4S, iPhone 4
•  iPad 4, iPad 3, iPad 2 and iPad mini
•  iPod touch 5

iOS 7 Gold Master Download URLs or Links for Non-Developers (Without Registered UDID)

Find the manual download URLs (links) for non-developer version (without registered UDID) of iOS 7 Gold Master at the pastebin link here.

iOS users who have already updated their device to iOS 7 Beta or Beta 5 and wish to install iOS 7 Gold Master may follow our step-by-step guide below.

How to Install iOS 7 Gold Master Without Registered UDID or Developer Account

1. Ensure the latest iOS 6 firmware for your device is downloaded. iPhone 5 users should download iOS 6.1.4, while iPhone 4/4S, iPad and iPod Touch 5 users should download iOS 6.1.3.

2. Download iOS 7 Gold Master IPSW for your device (from the links given above).

3. Connect the device to computer via USB cable.

4. Launch iTunes on computer (download latest version of iTunes from here).

5. Tap the Shift key on your keyboard (use Option key for Macs) and clickUpdate at the same time on iTunes.

6. Choose the correct IPSW file for your device: iOS 6.1.3 or 6.1.4 ipsw

7. Let iTunes restore your device to the chosen firmware and set it up as a new device, but not from the back up.

8. On the Home Screen, find Check for Updates

9. Do not click, just highlight it and hold down Shift or Option key. Then hitUpdate again.

10. Select the iOS 7 GM IPSW and iTunes will update your device to the new firmware.

Metasploit Pro 4.5

Metasploit Pro 4.5.0 delivers completely new capabilities for running full-featured social engineering campaigns as well as significant improvements to the web application scanner. Metasploit Pro users can run sophisticated social engineering campaigns leveraging techniques like phishing and USB drops, watch results in real-time, and present reports containing clear risk analysis and remediation advice for the human attack surface.

Metasploit 4.5.0 includes 95 new exploits, 72 new auxiliary modules, and 13 new post modules over the 4.4.0 release, for a grand total of 180 new modules, all of which are detailed below. In addition, 56 reported bugs were resolved between 4.4.0 and 4.5.0.

Modules that are new since the 2012112801 update (the last update in the 4.4.0 line) includes modules targeting the Tectia SSH server, Metasploit, Nessus, Eaton NSM, Nexpose, Microsoft Windows, SIP, Adobe Indesign, Apple Quicktime, BlazeVideo, and Ektron. They are listed immediately below.

The update for 4.4.0 to 4.5.0 will be published shortly after the release of the 4.5.0 installer, and these release notes will be updated to reflect that update's availability.

https://community.rapid7.com/docs/DOC-2108

Wifi Password Decryptor 1.0

SecurityXploded team has released a free WiFi Password Decryptor that instantly recover Wireless account passwords stored on your system.

It automatically recovers all type of Wireless Keys/Passwords (WEP/WPA/WPA2 etc) stored by Windows Wireless Configuration Manager.

After the successful recovery you can save the password list to HTML/XML/TEXT file. You can also right click on any of the displayed account and quickly copy the password.

Under the hood, 'WiFi Password Decryptor' uses System Service method (instead of injecting into LSASS.exe) to decrypt the WiFi passwords. This makes it more safer and reliable. Also it makes us to have just single EXE to work on both 32-bit & 64-bit platforms.

It has been successfully tested on Windows Vista and higher operating systems including Windows 8.

Features & Benefits

• Instantly decrypt and recover stored WiFi account passwords
• Recovers all type of Wireless Keys/Passwords (WEP/WPA/WPA2 etc)
• Simple & elegant GUI interface makes it easy to use.
• Right click context menu to quickly copy the Password
• Sort feature to arrange the displayed passwords
• Save the recovered WiFi password list to HTML/XML/TEXT file.
• Integrated Installer for assisting you in local Installation & Uninstallation.

Download WiFi password decryptor

NMap 6.25 release..!!!

Nmap 6.25 contains hundreds of improvements,including 85 new NSE scripts, nearly 1,000 new OS and servicedetection fingerprints, performance enhancements such as the new kqueue and poll I/O engines, better IPv6 traceroute support, Windows 8 improvements, and much more! It also includes the work of five GoogleSummer of Code interns who worked full time with Nmap mentors during
the summer.

Nmap 6.25 source code and binary packages for Linux, Windows, and Mac
are available for free download from:

http://nmap.org/download.html

Here are the most important change since 6.01:

o Integrated all of your IPv4 OS fingerprint submissions since January
(more than 3,000 of them). Added 373 fingerprints, bringing the new
total to 3,946. Additions include Linux 3.6, Windows 8, Windows
Server 2012, Mac OS X 10.8, and a ton of new WAPs, printers,
routers, and other devices--including our first IP-enabled doorbell!
Many existing fingerprints were improved. [David Fifield]

o Integrated all of your service/version detection fingerprints
submitted since January (more than 1,500)! Our signature
count jumped by more than 400 to 8,645. We now detect 897
protocols, from extremely popular ones like http, ssh, smtp and imap
to the more obscure airdroid, gopher-proxy, and
enemyterritory. [David Fifield]

o Integrated your latest IPv6 OS submissions and corrections. We're
still low on IPv6 fingerprints, so please scan any IPv6 systems you
own or administer and submit them to http://nmap.org/submit/. Both
new fingerprints (if Nmap doesn't find a good match) and corrections
(if Nmap guesses wrong) are useful.

o Enabled support for IPv6 traceroute using UDP, SCTP, and IPProto
(Next Header) probes. [David Fifield]

o Scripts can now return a structured name-value table so that results
are query-able from XML output. Scripts can return a string as
before, or a table, or a table and a string. In this last case, the
table will go to XML output and the string will go to screen output.
See http://nmap.org/book/nse-api.html#nse-structured-output [Daniel
Miller, David Fifield, Patrick Donnelly]

o [Nsock] Added new poll and kqueue I/O engines for improved
performance on Windows and BSD-based systems including Mac OS X.
These are in addition to the epoll engine (used on Linux) and the
classic select engine fallback for other system. [Henri Doreau]

o [Ncat] Added support for Unix domain sockets. The new -U and
--unixsock options activate this mode. These provide compatibility
with Hobbit's original Netcat. [Tomas Hozza]

o Moved some Windows dependencies, including OpenSSL, libsvn, and the
vcredist files, into a new public Subversion directory
/nmap-mswin32-aux and moved it out of the source tarball. This
reduces the compressed tarball size from 22 MB to 8 MB and similarly
reduces the bandwidth and storage required for an svn checkout.
Folks who build Nmap on Windows will need to check out
/nmap-mswin32-aux along with /nmap as described at
http://nmap.org/book/inst-windows.html#inst-win-source.

o Many of the great features in this release were created by college
and grad students generously sponsored by Google's Summer of Code
program. Thanks, Google Open Source Department! This year's team
of five developers is introduced at
http://seclists.org/nmap-dev/2012/q2/204 and their successes
documented at http://seclists.org/nmap-dev/2012/q4/138

o [NSE] Replaced old RPC grinder (RPC enumeration, performed as part
of version detection when a port seems to run a SunRPC service) with
a faster and easier to maintain NSE-based implementation. This also
allowed us to remove the crufty old pos_scan scan engine. [Hani
Benhabiles]

o Updated our Nmap Scripting Engine to use Lua 5.2 (and then 5.2.1)
rather than 5.1. See http://seclists.org/nmap-dev/2012/q2/34 for
details. [Patrick Donnelly]

o [NSE] Added 85(!) NSE scripts, bringing the total up to 433.

PySQLi details

PySQLi is a python framework designed to exploit complex SQL injection vulnerabilities. It provides dedicated bricks that can be used to build advanced exploits or easily extended/improved to fit the case.

PySQLi is thought to be easily modified and extended through derivated classes and to be able to inject into various ways such as command line, custom network protocols and even in anti-CSRF HTTP forms.

PySQLi is still in an early stage of development, whereas it has been developed since more than three years. Many features lack but the actual version but this will be improved in the next months/years.

Download PySQLi

BeEF version 0.4.3.9-alpha

BeEF ( Browser Exploitation Framework) is a powerful penetration testing tool that focuses on the web browser.

Amid growing concerns about web-borne attacks against clients, including mobile clients, BeEF allows the professional penetration tester to assess the actual security posture of a target environment by using client-side attack vectors.

Unlike other security frameworks, BeEF looks past the hardened network perimeter and client system, and examines exploitability within the context of the one open door: the web browser. BeEF will hook one or more web browsers and use them as beachheads for launching directed command modules and further attacks against the system from within the browser context.

Download it from here:
https://github.com/beefproject/beef

SSLsplit - Man in the middle attack tool

SSLsplit is a tool for man-in-the-middle attacks against SSL/TLS encryptednetwork connections. Connections are transparently intercepted through a network address translation engine and redirected to SSLsplit. SSLsplit terminates SSL/TLS and initiates a new SSL/TLS connection to the original destination address, while logging all data transmitted. SSLsplit is intended to be useful for network forensics and penetration testing.

SSLsplit supports plain TCP, plain SSL, HTTP and HTTPS connections over both
IPv4 and IPv6. For SSL and HTTPS connections, SSLsplit generates and signs
forged X509v3 certificates on-the-fly, based on the original server certificate
subject DN and subjectAltName extension. SSLsplit fully supports Server Name
Indication (SNI) and is able to work with RSA, DSA and ECDSA keys and DHE and
ECDHE cipher suites. SSLsplit can also use existing certificates of which the
private key is available, instead of generating forged ones. SSLsplit supports
NULL-prefix CN certificates and can deny OCSP requests in a generic way.

SSLsplit version 0.4.5 released on Nov 07, change logs are
- Add support for 2048 and 4096 bit Diffie-Hellman.
- Fix syslog error messages (issue #6).
- Fix threading issues in daemon mode (issue #5).
- Fix address family check in netfilter NAT lookup (issue #4).
- Fix build on recent glibc systems (issue #2).
- Minor code and build process improvements.

Download the SSLsplit