Whats app Security Bleach - 200 million user at Risk

Security Flaw found in WhatsApp: 200 million users are at Risk

You will be shocked to know that about 200 million users of the world’s most famous instant messaging service are at risk. Yes, about 200 million what’s app users are at security risk.

Few days back WhatsApp claimed to have hit over 900 million monthly active users! The web extension of what’s app puts many users at risk, the web version of WhatsApp is vulnerable to an exploit that could allow the hackers to convince the users to install the malware in their system in a new classy way.

WhatsApp launched its web version for iPhone users last month. WhatsApp web is current method to practice the mobile app in browser. It allows you to view all of your conversations, to see images, videos, audios you share with your friends and save them directly at your desktop.

A Security Flaw found in WhatsApp was discovered by security researcher Kasif Dekel in the web version of WhatsApp which allows hackers to share your machine by some malwares. Some of them are RATs (Remote Access Tools) which gives the hackers a remote access to your PC. The web version is also effected by Ransomware ( forces victim to pay a ransom through certain online payment methods in order to grant access to their system), bots and other malicious software.

 Security Flaw found in WhatsApp: How the Hack Works?

To exploit the vulnerability attacker needs to send a seemingly innocent vcard having the malicious code to the user. It is very easy to send .BAT file as legit vCard. This vCard looks like any other message but the WhatsApp user is unknown about the risk that it will trigger the malicious code when clicked.

After sending the vCard all an attacker need to do is wait the victim to open the message. As soon as the message is opened the executable malicious code in the vCard will run.

Security Flaw found in WhatsApp: What this Malicious Code can do

There are possibilities that the code after running will take the complete control over the target machine. But it will definitely monitor the user’s activities and use the target machine to spread virus.

The security team of WhatsApp has recognized the flaw and rolled out an update to fix the issue. So, you are advised to use the updated version of WhatsApp because every version before v0.1.4481. is vulnerable to the exploit.

Have something to add on Security Flaw found in WhatsApp ? Please add in comments.

Read More

Hack by NetBios

NETBIOS HACKING

By Parth Makadiya

Hello friends...Hope you guys are enjoying my previous posts on XP hacking...Now I 

will show you how to hack a remote computer and gain access to its hard disk and printer...This technique is calledNetBIOS Hacking...NetBIOS stands for Network Basic Input Output System...It was originally developed by IBM and Sytek as an Application Programming Interface (API) for client software to access LAN resources...By default it runs on port 139...Ok, let's start NetBIOS :-)

1. Goto "start" and click "Run"...



2. Type "cmd" and click "Ok"...the Command Prompt will appear...



3. First use "nbtstat" command for manually interact with NetBIOS Over TCP/IP...All the attributes (switches) used with nbtstat command and their usage can be viewed...

Syntax: C:\>nbtstat -n



An intruder could use the output from an nbtstat against your machines to begin gathering information about them...Here 192.168.110.29 is an IP address of remote computer and <20> is nothing but the username of that system...

4. Now in the command prompt use "net view" command....It is one of the netbios commands to view the shared resources of the remote computer...Syntax: C:\>net view \\192.168.110.29

If succeeded a list of HARD-DISK DRIVES and PRINTERS are shown with the massage "The command was completed successfully"...

5. Now use the "net use" command in the command prompt...This command enables a computer to map a share to its local drive...Syntax: C:\>net use E: \\192.168.110.29\C
Syntax: C:\>net use F: \\192.168.110.29\Myprint
Syntax: C:\>net use G: \\192.168.110.29\SharedDocs

Here E, F AND G are the Network Drive Names that are to be created on your computer to access remote computer’s hard-disk...And C, SharedDocs are the names of remote computer’s hard-disk drives that you want to hack..."Myprint" is the name of remote computer’s printer...

6. After succeeding your computer will give a message that "The command completed successfully"...Now open "My Computer" you will see a new "Hard-Disk drive" (Shared) with the specified name...You can open it and access remote computer’s Hard-Drive...Note: You can scan your network computers with a network scanner...I personally used Angry IP Scanner...It scans IP addresses and ports as well as has many other features...Download the scanner from HERE and find the live hosts...If you face any problem just post your comment...


Note: If Remote Computer’s Firewall Is Enabled Your Computer Will Not Succeed In Gaining Access To Remote Computer Through Netbios. 

Happy Hacking...Enjoy... 
For educational purpose only...Do not misuse it...

Read More

Gmail Hack | Hacking

Gmail HACKING BY WAPKA PHISHING
Password Send to Mail Directly

By Parth Makadiya

Step 1. Create a Wapka site

Go to www.wapka.com

And Register Your Wapka Id

After That

Login To Ur Id Using Wapka Passport [ wapka passport means wapka email id ]

 








IF YOU DONT HAVE WAPKA ID YOU CAN MAKE IT 

After Login to ur Account Select your Site (my site is safegmailfuryou.wapka.mobi )

 








step-2 . Go to Admin mode

Step 3:Click On Edit Site

Step 4. Click On mail form

 Step 5. In 1st Box Type Login and Then uncheck captcha ..











Step 6.Now click on Source code viwer and get your ID of your Site ..See Screenshot Below

Check above setting for Source code viwer and submit

Find your code and save it.........













Step 7: Now we have to hide mailform so other cannot see accept Admin
SO Go to Edit Site >> User  >>  Item Visiblity and then make mailform X-Visible in only Admin Mode

Step 8:

Got to the below link and copy the CODE one by one

goto Source code   copy code and find this ""XXXXXXX">" and add your code  at XXXXXX  

Now copy that goto EDIT SITE>> and upload at WXL code 

                

 

 Now paste code in XML/WXML Box which is in Edit Site

TA DA You are ready to hack Gmail

Note:--This is only for Educational Purpose Only. All Tricks 007 Is not Responsible
for anything you have Done

Read More

Hack WhatsApp Account

By Parth Makadiya

On Daily we have heard news about online services is suffering from a lack of security. In February WhatsApp has been down for nearly four hours,
as if this were not enough, people became aware of the security flaw that allows conversations that should be read by anyone provided it learn properly perform the procedures.

Steps to follow:

1 - First of all you need to have the device at hand, use the Social Engineering and be quick in getting the e-mail and backup files msgstore-2014-05-02.1.db.crypt5.
To get the email for this follow the procedures below.

Enter the Play Store and view the e-mail, or write down mentalize somewhere without the person noticing.

Now Go to the device settings from Settings -> Accounts & Sync, look for the email from Google and mentalize or write down somewhere without the person noticing.

2 - Now let's take the msgstore-2014-05-08.1.db.crypt7 file To do this, use Polaris Office or any other app that allows you to navigate between folders and manage files.

Follow this path: My files -> WhatsApp -> Databases - In this directory you will find all the backup files of your messenger.
When you do find the file sharing for your mobile phone via bluetooth.

 

3 - Have we got the e-mail and file backup http://whatcrypt.com/?cmd=_decrypt
we enter the site and send the backup file.

To Submit follows:
Account: Enter the email of the victim
Database: Select the database backup
Click Process / download zip
Save the zip file on your desktop

4 - Once you have downloaded the backup file in zip format we now need to download the tool to extract the backup and we have access to conversations. Save on the desktop.

WhatsApp Decrypt MediaFire: http://www.mediafire.com/download/hw7m1590ld27vd5/WhatsApp_Decrypt.rar

Scanner Virus Total: https://www.virustotal.com/pt/file/c58bbef257e1ada303478b468a2b68523cbd307e1620d76d53489763e0ef5e15/analysis/1399523236/

5 - From the desktop to extract the file WhatsApp Decrypt.zip install python-3.4.0 folder and enter the WhatsApp.
Browse by: WhatsApp -> Whatsapp_Xtract_V2.1_2012-05-10-2

When you install python-3.4.0 do the following steps:

1 - Go to My Computer, click with the right mouse button and Properties -> Advanced System Settings

2 - In the System Properties navigate to the Advanced tab -> Environment Variables

3 - Environment Variables look for Path

4 - Edit the PATH

5 - At the end of PATH add ;C:\Python34

6 - Click ok and close
  

6 - Now extract the file from step 3 msgstore_decrypted on the desktop, copy and paste it on WhatsApp folder -> Whatsapp_Xtract_V2.1_2012-05-10-2 and replace the file

7 - Replace the WhatsApp folder -> Whatsapp_Xtract_V2.1_2012-05-10-2 from step 5 and
look for msgstore.dll file, drag it onto the whatsapp_xtract_drag'n'drop_database file (s) _here

After you drag it will create a file called msgstore.db.html the folder and ask you to press any key at the command prompt to continue ...
Pressing any key it will open in your default browser displaying the file msgstore.db.html all conversations, dates, numbers, etc...

  

Note: In step 2 print shows the crypt 7 but the crypt is correct 5!

Read More