Wednesday, October 13, 2010

sms bombing

Application to send multiple SMS messages .at same instant.. so be carefull using it

itzz used to flood/spam any number.you can send almost any amount of messages instantly.i m using it to desturb my friends.

your messages should be unlimited or it may cost you.

for  android phones go to android market from your cell phone and search for text flooder.then install it.
(100 % working tested)or here

for symbian based phones dowload sms flooder from here

Tuesday, October 12, 2010

Stuxnet worm

A sophisticated worm designed to steal industrial secrets and disrupt operations . the worm was discovered in July when researchers at VirusBlokAda found it on computers in Iran.The worm, was designed to attack Siemens industrial control systems.Stuxnet could be used to cause a significant amount of damage if it is not properly removed.Researchers at Symantec have cracked Stuxnet's cryptographic system, and they say it is the first worm built not only to spy on industrial systems, but also to reprogram them

Once installed on a PC, Stuxnet uses Siemens' default passwords to seek out and try to gain access to systems that run the WinCC and PCS 7 programs -- so-called PLC (programmable logic controller) programs that are used to manage large-scale industrial systems on factory floors and in military installations and chemical and power plants.this malware spreads with the help of us drive or lan

Monday, October 11, 2010

How To Find Vulnerable Web Apps With Google : Web Application Hacking

Search engines index a huge number of web pages and other resources. Hackers can use these engines to make anonymous attacks, find easy victims, and gain the knowledge necessary to mount a powerful attack against a network. Search engines are dangerous largely because users are careless. Further, search engines can help hackers avoid identification. Search engines make discovering candidate machines almost effortless. Listed here are a few common hacks performed with http://www.google.com (which is our favorite search engine, but you can use one of your own choosing if you'd like, assuming it supports all the same features as Google).

To find unprotected /admin, /password, /mail directories and their content, search for the following keywords in http://www.google.com:
  • "Index of /admin"
  • "Index of /password"
  • "Index of /mail"
  • "Index of /" +banques +filetype:xls (for France)
  • "Index of /" +passwd
  • "Index of /" password.txt













To find password hint applications that are set up poorly, type the following in http://www.google.com (many of these enumerate users, give hints for passwords, or mail account passwords to an e-mail address you specify!):
  • password hint
  • password hint -email
  • show password hint -email
  • filetype:htaccess user







To find IIS/Apache web servers with FrontPage installed, type the following in http://www.google.com (run the encrypted password files through a password cracker and get access in minutes!):

         administrators.pwd index
         authors.pwd index
          service.pwd index
          allinurl:_vti_bin shtml.exe




To find the MRTG traffic analysis page for websites, type the following in http://www.google.com:
  • inurl:mrtg







To get access to unprotected global.asa(x) files or to get juicy .NET information, type the following in http://www.google.com:
  • filetype:config web (finds web.config)
  • global.asax index (finds global.asax or global.asa)






To find improperly configured Outlook Web Access (OWA) servers, type the following in http://www.google.com:
  • inurl:exchange inurl:finduser inurl:root